last executing test programs:

3m48.0707836s ago: executing program 2 (id=176):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000400000008000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x5c, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x2, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e20, 0x4e20, 0x32, 0x0, @opaque="de100b6e8c480e59daa0196ff44b529d6c54c1ab8be947a391d79ef37e135697688e7fc12ba218971484"}}}}}, 0x0)
unshare(0x22020400)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f00000066c0)={[{@orlov}, {@errors_continue}]}, 0x1, 0x55f, &(0x7f0000000d00)="$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")
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="a1ab23bd7000fdffffff3200000008001701"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000400))
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3180c0}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80000001, 0xb}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004800}, 0x60000000)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0)

3m47.868527559s ago: executing program 2 (id=184):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfe3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x14510, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
r1 = open(&(0x7f0000000600)='./file0\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x5)
openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (fail_nth: 1)

3m47.517682365s ago: executing program 2 (id=186):
fsopen(0x0, 0x0)
unshare(0x62040200)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'team_slave_1\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r1})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000440)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x3d, r1})

3m47.242712362s ago: executing program 2 (id=191):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0)
r1 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', r1, 0x0, 0x115)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xcf)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x800, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x800)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0xfff3}, {0xffff, 0xfff2}, {0xfff3, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x3c}}, 0x4044080)
bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, &(0x7f00000000c0)=']', 0x1, 0x6, 0x75, 0x10001, 0xc, 0x79, 0x0})
close_range(r7, 0xffffffffffffffff, 0x0)

3m47.015009264s ago: executing program 2 (id=195):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000400000008000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x5c, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x2, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e20, 0x4e20, 0x32, 0x0, @opaque="de100b6e8c480e59daa0196ff44b529d6c54c1ab8be947a391d79ef37e135697688e7fc12ba218971484"}}}}}, 0x0)
unshare(0x22020400)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f00000066c0)={[{@orlov}, {@errors_continue}]}, 0x1, 0x55f, &(0x7f0000000d00)="$eJzs3c9vHFcdAPDvjH9t0zROoAeogAQoBBRlN960UdVLwwWEqkqIigPikBp7Y5nsZkN2XWoTCfdvAAkkTvAncEDigNQTB24cEELigBDlgFTAAsVIHBbN7Njd2rvNNl7v1t7PR5rMj/dmvu+ts/PevrXnBTC1LkXEdkTMR8RrEbFYHE+KJW52lyzfw50HK7s7D1aS6HRe/WeSp2fHoueczJPFNUsR8fWvRHw7ORy3tbl1Z7ler90v9ivtxr1Ka3Pr6npjea22Vrtbrd5YunHthevPVw+c+Ydzj1vXi41fvPPl9Ze/8etfffLt321/8ftZsc4Wab31GKVu1ef242RmI+Ll4wg2ATPFen7C5eDxpBHxkYj4TP7+X4yZ/H8nAHCadTqL0Vns3R+gNDAFADhh0nwMLEnLEZGmRSeg3B3DezrOpPVmq33ldnPj7mp3rOx8zKW31+u1axcW/vTdPPNcku0v5Wl5er5fPbB/PSIuRMSPFp7I98srzfrqZLo8ADD1nuxt/yPiPwtpWi4PdWqfb/UAgBOjNOkCAABjp/0HgOmj/QeA6TNE+1982b997GUBAMbD538AmD7afwCYPtp/AJgqX3vllWzp7BbPv159fXPjTvP1q6u11p1yY2OlvNK8f6+81myu5c/saTzqevVm897Sc7HxRqVda7Urrc2tW43mxt32rfy53rdqc2OpFQDwfi5cfOuPSURsv/hEvkTPXA7aajjd0hHmAk6WmaOcrIMAJ5rZvmB6DdWE552E3x57WYDJ6Psw71Lfzff6yQcI4veM4EPl8seHH/83xzOcLh9wZP/3xzJJPjARjzf+/9LIywGMn/F/mF6dTnJwzv/5/SQA4FQ6wq/wdX4wqk4IMFGPmsx7JN//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwClzNiK+E0lazucCT7N/03I54qmIOB9zye31eu1aRJyLixExt5DtL0260ADAEaV/T4r5vy4vPnv2YOp88t+FfB0R3/vpqz9+Y7ndvr+UHf/X/vGFvenDqu+ed4R5BQGA4f11mEx5+10t1j0f5B/uPFjZW46xjIe886X9yUdXdnce5Es3ZTY6nU4nopT3Jc78O4nZ4pxSRDwTETMjiL/9ZkR8rF/9k3xs5Hwx82lv/ChiPzXW+Ol74qd5WnedvXwfHUFZYNq8ld1/bvZ7/6VxKV/3f/+X8jvU0eX3v1LE3r1vtyf+bBFppk/87D1/adgYz/3mq4cOdha7aW9GPDPbL36yHz8ZEP/ZIeP/+ROf+uFLA9I6P4u4HP3j98aqtBv3Kq3NravrjeW12lrtbrV6Y+nGtReuP1+t5GPUlb2R6sP+8eKVc4PKltX/zID4pb71n98/93ND1v/n/3vtW59+d3fhYPwvfLb/z//pvvG7sjbx80PGXz7zy4HTd2fxVwfU/1E//ytDxn/7b1urQ2YFAMagtbl1Z7ler90/0kb2KXQU1zm0kRVxuMx73cXBeYoMN9/vOn+JfGNEL8uAjawzNkzmueN6VY99Y3a/rzjaK38zu+KYq5OOvBZH2ng4rliTuR8B43OoeQQAAAAAAAAAAAAAAD50xvGnS5OuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfX/wMAAP//8RXBxA==")
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1ab23bd7000fdffffff3200000008001701"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000400))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3180c0}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x28, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80000001, 0xb}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004800}, 0x60000000)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0)

3m46.716649324s ago: executing program 2 (id=204):
r0 = creat(&(0x7f0000001000)='./file0\x00', 0x10c)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000305b704000000000000850000000300000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x4)
r6 = dup(r0)
r7 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x26642)
fsetxattr$security_capability(r7, &(0x7f0000000280), &(0x7f0000000380)=@v3={0x3000000, [{0x5, 0x82}, {0x80000000, 0xffffaf0a}]}, 0x18, 0x0) (async)
pipe2$9p(&(0x7f00000046c0)={<r8=>0xffffffffffffffff}, 0x4800) (async)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000003c0)={<r9=>0x0, 0xff, 0x4, [0xffff, 0x7, 0x9, 0x6]}, &(0x7f0000000400)=0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f00000004c0)={r9, 0x55, 0x20}, 0xc) (async)
mount$9p_fd(0x0, &(0x7f0000004640)='./file0\x00', &(0x7f0000004680), 0x40, &(0x7f0000004700)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r6}})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64], 0x48) (async)
r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) (async, rerun: 64)
gettid() (async, rerun: 64)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) (async)
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r12, 0x0, 0x4000}, 0x18)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x4200, 0x0)

3m31.608950834s ago: executing program 32 (id=204):
r0 = creat(&(0x7f0000001000)='./file0\x00', 0x10c)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000305b704000000000000850000000300000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x4)
r6 = dup(r0)
r7 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x26642)
fsetxattr$security_capability(r7, &(0x7f0000000280), &(0x7f0000000380)=@v3={0x3000000, [{0x5, 0x82}, {0x80000000, 0xffffaf0a}]}, 0x18, 0x0) (async)
pipe2$9p(&(0x7f00000046c0)={<r8=>0xffffffffffffffff}, 0x4800) (async)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000003c0)={<r9=>0x0, 0xff, 0x4, [0xffff, 0x7, 0x9, 0x6]}, &(0x7f0000000400)=0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f00000004c0)={r9, 0x55, 0x20}, 0xc) (async)
mount$9p_fd(0x0, &(0x7f0000004640)='./file0\x00', &(0x7f0000004680), 0x40, &(0x7f0000004700)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r6}})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64], 0x48) (async)
r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) (async, rerun: 64)
gettid() (async, rerun: 64)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) (async)
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r12, 0x0, 0x4000}, 0x18)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x4200, 0x0)

3m9.322736036s ago: executing program 3 (id=913):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0xfffffffeffffffff, 0x120741)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000780)=ANY=[@ANYBLOB="308c000001"])
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x9052, &(0x7f0000000580)=ANY=[@ANYBLOB='nodots,errors=continue,umasK=00000000000000000000002,dos1xfloppy,nodots,flush,dots,nfs=stale_rw,check=relaxed,dots,\x00', @ANYRES32, @ANYRES32], 0x1, 0x25f, &(0x7f0000000140)="$eJzs3cFqE0EYB/AvTZqsBbVn8bDgxZOobxCkghAQqrkbaL20Imwv0VMeQ/ANfByPPkZPvUXaXVy7LSIl6WS7vx+E/dj/DjuTQCaHmeyHx5+ODj6ffFz++hZZlscgYhFnEbuxFf0o9arj1kU9jGHUFgEAtM3+/mycug+sUO/qqaIYz7YjYnQlm/64pV4BAAAAAAAAAACwYjdZ//836/8BoH2s/7/7imI826l+v11m/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQztly+XD5j1fq/gEAq2f+B4DuMf8DQPeY/wGge949qIo8zyJOF/PpfFoey9Ov30z2nucXdutWp/P5dLuqJ3svyjxv5jtV+5fX5sN4+qTMz7NXbyeNfBQH6xw4AAAAAAAAAAAAAAAAAAAAbJBn+R+N/f39Mj+/YBTX5FnE90v/D9DYvz+IR4PbHAkAAAAAAAAAAAAAAAAAAAC018mXr0ez4+PDorPFz35EsrtHr/wYUr8JjeJe3KBVtmmjaFHRj4jDUQxivfd6f///L079zQQAAAAAAAAAAAAAAAAAAN1Tb/pN3RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASKd+/v/6itRjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrhdwAAAP//UhGHcQ==")

3m9.241524554s ago: executing program 3 (id=915):
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000400000008000000"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x5c, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x2, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e20, 0x4e20, 0x32, 0x0, @opaque="de100b6e8c480e59daa0196ff44b529d6c54c1ab8be947a391d79ef37e135697688e7fc12ba218971484"}}}}}, 0x0)
unshare(0x22020400)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f00000066c0)={[{@orlov}, {@errors_continue}]}, 0x1, 0x55f, &(0x7f0000000d00)="$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")
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1ab23bd7000fdffffff3200000008001701"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000400))
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3180c0}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x28, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80000001, 0xb}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004800}, 0x60000000)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0)

3m9.164305362s ago: executing program 3 (id=916):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fsetxattr$security_selinux(r7, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000b40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@min_batch_time={'min_batch_time', 0x3d, 0x80000000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@errors_remount}, {@nodiscard}]}, 0x3, 0x44a, &(0x7f00000006c0)="$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")
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x80, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x6, 0x2, 0x82}, 0x10, 0xffffffffffffffff, r1, 0x8, &(0x7f0000000340)=[r4, r0, r4, r0], &(0x7f00000003c0)=[{0x3, 0x4, 0xc, 0x6}, {0x4, 0x1, 0x5, 0x1}, {0x3, 0x1, 0x0, 0xc}, {0x3, 0x1, 0x7, 0x3}, {0x1, 0x2, 0x1, 0x1}, {0x5, 0x5, 0xa, 0x2}, {0x3, 0x4, 0xa, 0x9}, {0x5, 0x4, 0x3, 0x8}], 0x10, 0x9}, 0x94)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bond0\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r9, r10, 0x1, 0x3, 0x2}, 0x50)

3m9.093831579s ago: executing program 3 (id=917):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x14510, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$pokeuser(0x6, r1, 0x388, 0x41d9fda7)

3m8.834089695s ago: executing program 3 (id=920):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x43044)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cad000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000cad000/0x2000)=nil, &(0x7f0000f10000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x372, 0xc000, 0xc, 0xa0002f2})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) (fail_nth: 5)

3m8.566119921s ago: executing program 3 (id=928):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fsetxattr$security_selinux(r8, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000b40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@min_batch_time={'min_batch_time', 0x3d, 0x80000000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@errors_remount}, {@nodiscard}]}, 0x3, 0x44a, &(0x7f00000006c0)="$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")
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x80, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x6, 0x2, 0x82}, 0x10, 0xffffffffffffffff, r1, 0x8, &(0x7f0000000340)=[r5, r0, r5, r0], &(0x7f00000003c0)=[{0x3, 0x4, 0xc, 0x6}, {0x4, 0x1, 0x5, 0x1}, {0x3, 0x1, 0x0, 0xc}, {0x3, 0x1, 0x7, 0x3}, {0x1, 0x2, 0x1, 0x1}, {0x5, 0x5, 0xa, 0x2}, {0x3, 0x4, 0xa, 0x9}, {0x5, 0x4, 0x3, 0x8}], 0x10, 0x9}, 0x94)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bond0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r10, r11, 0x1, 0x3, 0x2}, 0x50)

3m8.544849823s ago: executing program 33 (id=928):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fsetxattr$security_selinux(r8, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000b40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@min_batch_time={'min_batch_time', 0x3d, 0x80000000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@errors_remount}, {@nodiscard}]}, 0x3, 0x44a, &(0x7f00000006c0)="$eJzs271vG2UYAPDn7CSlXyRU5aMfQKAgylfSpKV0YAGBxFAkJBjKGJK0CnUb1ASJVhEEhMqIKjGxIEYk/gImWBAwIbHCjipVKEsLk9HZd43t2E6dOnGpfz/p3Pe9O/d9nrt77ffujQPoW6PpSxKxKyL+iIjharV+h9HqPzdWlqb/WVmaTqJcfuvvpLLf9ZWl6XzX/H0788pAROGzJA40aXfh4qWzU6XS7IWsPr547v3xhYuXnp87N3Vm9szs+ckTJ44dnXjx+OQLXckzzev6/o/mD+57/Z0rb0yfuvLuL98lef4NeXTJaLuNT5bLXW6ut3bXlJOBHgZCR4rVbhqDlf4/HMVYPXnD8dqnPQ0O2FTlcrn8QOvNy2XgLpZEryMAeiP/ok/vf/Nli4Yed4RrL1dvgNK8b2RLdctAFLJ9Bhvub7tpNCJOLf/7dbrE5jyHAACo80M6/nmu2fivELXPhe7N5lBGIuK+iNgTEccjYm9E3B9R2ffBiHiow/YbJ0nWjn8KV2tr5aTDBtaRjv9eyua26sd/+egvRopZbXcl/8Hk9Fxp9kh2TA7H4La0PtGmjR9f/f2LVttqx3/pkrafjwWzOK4ObKt/z8zU4tTt5Fzr2icR+wca8j8ZlQm8fCYgPeT7ImL/BtuYe+bbg622rZ9/G12YZyp/E/FU9fwvR935X73Qkvbzk+P3RGn2yHh+Vaz162+X32zV/m3l3wXp+d/R9Pq/mf9IUjtfu9DJ//7V0+nr5T8/b3lPs9Hrfyh5u1IeytZ9OLW4eGEiYig5WQ26dv3k6nvzer5/mv/hQ837/55YPRIHIiK9iB+OiEci4tEs9sci4vGIONTmKPz8yhPvbTz/zZXmP9PR+V8tDEXjmuaF4tmfvq9rdKST/NPzf6xSOpytuZXPv1uJq9OrGQAAAP6vChGxK5LC2M1yoTA2Vv0b/r2xo1CaX1h89vT8B+dnqr8RGInBQv6ka7jmeehEdluf1ycb6kez58ZfFrdX6mPT86WZXicPfW5ni/6f+qvY6+iATef3WtC/9H/oX/o/9C/9H/pXk/6/vRdxAFuv2ff/xz2IA9h6Df3ftB/0Eff/0L820v99ZsDdoW1fHtq6OIAttbA91v+RvILCmkIU7ogwFDap0OtPJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO74LwAA///lI+j0")
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000098090700000000006e69887e9500000082f200009500000000000000c265d425abf2ac981abdb5e3c97fa0926da48507acb12a233c4ed14c98a12a87cc235b0d7bb08ca843ac3f95d51502dd99ef40dd1efe0bc07d76e97eacfe5fb04ddb413b3c40c5c4ccb426f45b25053d78da2f44cc0aa10be1cec9c69a3d0b13421a975f4b2c0e5b41ce6bcef588948d8228f202f591cea1d393a27093b193f2baf971dad2dc1889509202e8c739f805d5126a849c0c18bf7dea7f68bbdf1420a9b80c20731fe5a55ee2c754be018e348a69760901790377414f1987464e8edadddaac99b34078f48b5df4047b60ab5aaf0c0c39e31c61094a2567dc8197"], &(0x7f0000000280)='GPL\x00', 0x80, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x6, 0x2, 0x82}, 0x10, 0xffffffffffffffff, r1, 0x8, &(0x7f0000000340)=[r5, r0, r5, r0], &(0x7f00000003c0)=[{0x3, 0x4, 0xc, 0x6}, {0x4, 0x1, 0x5, 0x1}, {0x3, 0x1, 0x0, 0xc}, {0x3, 0x1, 0x7, 0x3}, {0x1, 0x2, 0x1, 0x1}, {0x5, 0x5, 0xa, 0x2}, {0x3, 0x4, 0xa, 0x9}, {0x5, 0x4, 0x3, 0x8}], 0x10, 0x9}, 0x94)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bond0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r10, r11, 0x1, 0x3, 0x2}, 0x50)

2m22.417538372s ago: executing program 6 (id=1751):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x10)
sendfile(r0, r1, 0x0, 0x80000000007)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000040000ec0000000000000000"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18)
openat$cgroup_ro(r0, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0)
r4 = shmget(0x0, 0x3000, 0x800, &(0x7f0000ffa000/0x3000)=nil)
shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000180)=""/214)

2m21.284836645s ago: executing program 6 (id=1760):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000400000008000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x5c, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x2, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e20, 0x4e20, 0x32, 0x0, @opaque="de100b6e8c480e59daa0196ff44b529d6c54c1ab8be947a391d79ef37e135697688e7fc12ba218971484"}}}}}, 0x0)
unshare(0x22020400)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f00000066c0)={[{@orlov}, {@errors_continue}]}, 0x1, 0x55f, &(0x7f0000000d00)="$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")
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a1ab23bd7000fdffffff3200000008001701"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000400))
sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3180c0}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x28, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0xb}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004800}, 0x60000000)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0)

2m20.873881615s ago: executing program 6 (id=1765):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdc03, {0x7, 0x0, 0x0, r4, 0x3e, 0x0, 0x5}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x20000040)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r5}, 0x18)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)

2m20.845989668s ago: executing program 6 (id=1767):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x14510, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$pokeuser(0x6, r1, 0x388, 0x41d9fda7)

2m20.512439491s ago: executing program 6 (id=1774):
syz_io_uring_setup(0x4ea0, &(0x7f0000000480)={0x0, 0x8981, 0x400, 0x0, 0x2f0}, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
unshare(0x2c060000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d616376746170000000090001007379"], 0xe8}}, 0x0)

2m20.157534987s ago: executing program 6 (id=1780):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, &(0x7f00000000c0)=']', 0x1, 0x6, 0x75, 0x10001, 0xc, 0x79, 0x0})
close_range(r2, 0xffffffffffffffff, 0x0)

2m20.157224417s ago: executing program 34 (id=1780):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, &(0x7f00000000c0)=']', 0x1, 0x6, 0x75, 0x10001, 0xc, 0x79, 0x0})
close_range(r2, 0xffffffffffffffff, 0x0)

1m53.779658235s ago: executing program 1 (id=2276):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xcf)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, &(0x7f00000000c0)=']', 0x1, 0x6, 0x75, 0x10001, 0xc, 0x79, 0x0})
close_range(r2, 0xffffffffffffffff, 0x0)

1m53.708894932s ago: executing program 1 (id=2278):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x47}, &(0x7f00000004c0)=<r4=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0})
io_uring_enter(r3, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0)
dup3(r3, r1, 0x80000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)

1m53.639872969s ago: executing program 1 (id=2279):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xcf)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, &(0x7f00000000c0)=']', 0x1, 0x6, 0x75, 0x10001, 0xc, 0x79, 0x0})
close_range(r2, 0xffffffffffffffff, 0x0)

1m53.587263614s ago: executing program 1 (id=2282):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x14510, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$pokeuser(0x6, r1, 0x388, 0x41d9fda7)

1m53.100888573s ago: executing program 1 (id=2302):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c)

1m52.858122027s ago: executing program 1 (id=2298):
socket$kcm(0x28, 0x5, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r2, &(0x7f00000000c0), 0x2c8, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00'}, 0x10)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0)

1m52.83089078s ago: executing program 35 (id=2298):
socket$kcm(0x28, 0x5, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r2, &(0x7f00000000c0), 0x2c8, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00'}, 0x10)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0)

1.422184699s ago: executing program 8 (id=4447):
r0 = syz_io_uring_setup(0x5645, &(0x7f0000000340)={0x0, 0xa7f6, 0x8, 0x1, 0x378}, &(0x7f0000000000), &(0x7f0000000040))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {<r2=>0xee00}}, './file0\x00'})
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
getgroups(0x6, &(0x7f0000000340)=[r4, r4, r4, r4, <r5=>r4, r4])
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000280)={[{@resuid={'resuid', 0x3d, r3}}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid={'resgid', 0x3d, r5}}, {@acl}, {@user_xattr}]}, 0x0, 0x477, &(0x7f0000000bc0)="$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")
newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x4000)
setreuid(r6, r6)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@empty}}}, &(0x7f0000000580)=0xe8)
fstat(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
r9 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r10=>0x0}, &(0x7f0000cab000)=0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x18)
waitid(0x2, 0x0, 0x0, 0x4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000)
syz_open_procfs(0x0, 0x0)
rt_sigqueueinfo(0x0, 0x21, 0x0)
setgid(r10)
r12 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, <r13=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r13)
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
getgroups(0x6, &(0x7f0000000340)=[r14, r14, r14, r14, r14, r14])
fsetxattr$system_posix_acl(r1, &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="e6ffff3c010001000000000002000400", @ANYRES32=r2, @ANYBLOB="02000100", @ANYRES32=r3, @ANYBLOB="02000400", @ANYRES32=r6, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=r7, @ANYBLOB="02000700", @ANYRES32=r8, @ANYBLOB="040001000000000008000300", @ANYRES32=r10, @ANYBLOB="08000400", @ANYRES32=r13, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r14, @ANYBLOB="10000400000000002000050000000000"], 0x6c, 0x2)
getresuid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0))

1.068127184s ago: executing program 7 (id=4456):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r4, &(0x7f0000000140), 0x0}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1.067429564s ago: executing program 7 (id=4458):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.048235875s ago: executing program 7 (id=4459):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.013216129s ago: executing program 7 (id=4460):
mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0x391e1000)
r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1c]}, 0x8, 0x80000)
r1 = io_uring_setup(0x6b9e, &(0x7f0000000100)={0x0, 0xceb4, 0x800, 0x4, 0x4000159, 0x0, r0})
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_socket_connect_nvme_tcp()
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b)
sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4400, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)

968.960223ms ago: executing program 7 (id=4461):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='xen_mc_entry\x00', r4, 0x0, 0x6}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=")
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x80}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="00b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x807fff, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffa0)

825.679148ms ago: executing program 4 (id=4464):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0x100000001}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
r2 = socket(0x1, 0x80802, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001})
epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
shutdown(r2, 0x0)

659.511054ms ago: executing program 4 (id=4465):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
mmap(&(0x7f00008d0000/0x1000)=nil, 0x1000, 0x1000003, 0x11, 0xffffffffffffffff, 0x83b8a000)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x800000000006}, 0x18)
remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4   \x00'}, 0x2a)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r4, 0x0, 0xf4ff, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000300)='./file0/file0\x00', 0x8052, &(0x7f0000000340)={[{@noauto_da_alloc}, {@nouid32}, {@dioread_nolock}, {@nouser_xattr}], [{@appraise_type}]}, 0x5, 0x4f0, &(0x7f0000000f00)="$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")
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r6, 0xfffffffc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}})

649.501235ms ago: executing program 8 (id=4467):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x4}]}, 0x10)
syz_emit_ethernet(0x19, &(0x7f00000007c0)=ANY=[@ANYBLOB="4180c2000000752a4ca62db9f02ad1ffffffffffff88a810008100400081000200fb"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x200}, 0x18)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f00000008c0)={[{@uid}, {@nojoliet}, {@showassoc}, {@unhide}, {@nojoliet}, {@uid}, {@dmode={'dmode', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}]}, 0x0, 0x688, &(0x7f0000000100)="$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")
syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x100c085, &(0x7f0000000d00)=ANY=[@ANYRES8=0x0, @ANYBLOB="c0da5b74006e9c47add458a1bd748b7ffa5628dc52f84873cbe6a43cfd29e4198255a0610d383b0e46b2b6457282a9f3caef22979e54c145e6a0ce2850a890af7c4e1fa3628453c70aae32270b0042f1532cf08030eccdca96e2c97aae42cf5d9ec5f0afa4fcc53c8f9289677038d09ae2b1bd2271e0a76e6324df3a2b01a9ed0277d7e8d6f7d463ae62692faa55bdb43dc2bea18eea4a635951fd0a220a835fa24d0700c8f8c245d1d7638b2cae5ed3bec0d2f0415ddff7884bb34ab0cb1598e9c7b92a29005e4090ede480b3412f5c33da5e7c8672bda19fd3d989f8336d69d9e70de142973e7e1f53987b2d"], 0x10, 0x7f4, &(0x7f0000000e40)="$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")
lgetxattr(&(0x7f0000000140)='./file1/file2\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffff001}, 0x18)
syz_mount_image$ext4(0x0, &(0x7f00000007c0)='./file0\x00', 0x0, 0x0, 0x2, 0x0, &(0x7f0000000840))
mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0)
mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', <r5=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000001640)=ANY=[@ANYBLOB="020000000000000002004e21e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e21e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d1bf7c7600ce2511a34b0dc18e2f3c04872b34c7aeca4f824b0dd19bb8e8bf727224d6f75254b78c9a8381352f1a8539c1e568c7"], 0x20000)

566.103003ms ago: executing program 8 (id=4468):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000080)=""/18, 0xb, 0x0, &(0x7f00000002c0)=""/39, 0x2f}}, 0x72)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1)
fadvise64(0xffffffffffffffff, 0x7f, 0x0, 0x4)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r2, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000044}, 0x4008800)

489.733911ms ago: executing program 8 (id=4469):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0)

471.139713ms ago: executing program 8 (id=4471):
mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0x391e1000)
r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1c]}, 0x8, 0x80000)
r1 = io_uring_setup(0x6b9e, &(0x7f0000000100)={0x0, 0xceb4, 0x800, 0x4, 0x4000159, 0x0, r0})
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_socket_connect_nvme_tcp()
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b)
sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4400, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)

438.087166ms ago: executing program 4 (id=4473):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000740))
lchown(0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100", @ANYBLOB="000000000000000000000000000000000000000049ecdd0394b2b5d837e0057ed398c8596804ba69a66b27ded4298fd20a0d54b8536f012f471e6a9f0fb22d566dd190f763d7f95d7a594330d1834dc960e6a9b70d6f623cf1961a716a4fdd0665319d3291f3071db66df1920cc144c23ce00ea5ab12fbb5124f95b2caf26a8a8eaab67a850c1a1f56f4179b3fedfa13e50fba6172743f19fa755bd967523d66472c1394c92ffb484c7563bd800ce4fd8dd256f6c864a9f9e37688e89c9ee091989e2c91a133e372956f090dc565da822b55e5e7fa2a5de3f3ad94a73a510eacdf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48)
syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0)

409.309689ms ago: executing program 5 (id=4475):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0x100000001}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
r2 = socket(0x1, 0x80802, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001})
epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
shutdown(r2, 0x0)

394.37869ms ago: executing program 8 (id=4476):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0x100000001}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
iopl(0xf8)
r2 = socket$inet(0xa, 0x801, 0x84)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
epoll_create1(0x0)
r4 = socket(0x1, 0x80802, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x10000001})
epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
shutdown(r4, 0x0)

281.568182ms ago: executing program 5 (id=4477):
mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0x391e1000)
r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1c]}, 0x8, 0x80000)
r1 = io_uring_setup(0x6b9e, &(0x7f0000000100)={0x0, 0xceb4, 0x800, 0x4, 0x4000159, 0x0, r0})
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4, 0x0, 0x7}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_socket_connect_nvme_tcp()
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7fff}, 0x18)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r3, @ANYBLOB="010000000000000000001a0000000c", @ANYRES64=0x0], 0x20}, 0x1, 0x0, 0x0, 0x2400044c}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r7}, 0x18)
r8 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b)
sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4400, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10)

280.813851ms ago: executing program 0 (id=4487):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1)
writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

266.238983ms ago: executing program 5 (id=4478):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x4}]}, 0x10)
syz_emit_ethernet(0x19, &(0x7f00000007c0)=ANY=[@ANYBLOB="4180c2000000752a4ca62db9f02ad1ffffffffffff88a810008100400081000200fb"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x200}, 0x18)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f00000008c0)={[{@uid}, {@nojoliet}, {@showassoc}, {@unhide}, {@nojoliet}, {@uid}, {@dmode={'dmode', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}]}, 0x0, 0x688, &(0x7f0000000100)="$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")
syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x100c085, &(0x7f0000000d00)=ANY=[@ANYRES8=0x0, @ANYBLOB="c0da5b74006e9c47add458a1bd748b7ffa5628dc52f84873cbe6a43cfd29e4198255a0610d383b0e46b2b6457282a9f3caef22979e54c145e6a0ce2850a890af7c4e1fa3628453c70aae32270b0042f1532cf08030eccdca96e2c97aae42cf5d9ec5f0afa4fcc53c8f9289677038d09ae2b1bd2271e0a76e6324df3a2b01a9ed0277d7e8d6f7d463ae62692faa55bdb43dc2bea18eea4a635951fd0a220a835fa24d0700c8f8c245d1d7638b2cae5ed3bec0d2f0415ddff7884bb34ab0cb1598e9c7b92a29005e4090ede480b3412f5c33da5e7c8672bda19fd3d989f8336d69d9e70de142973e7e1f53987b2d"], 0x10, 0x7f4, &(0x7f0000000e40)="$eJzs3U9oHOfZAPBnFMl2FD5/Id9HPmMcZ2znA5s6ymqVKBU5pJvVSJ5ktSt2V8WmlMTEcjCWk5AQ0pjS1JekLS2lpx7TXEMuubUUWuih7anQHHrpoRDIpSUtLZSWUnDZ2V1r9Wcl/5HlNP39RPadfeeZd953drLPznpnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASKqzpdJkErW8vnQ6Ha4622wsbDG/395P1xRbrDci6fwX+/bFgW7Vgf9dnX1/5+FoHOo+OxT7OsW+uHzP/fc+8T+jI/3lt+jQzToyfNbY4JMk4uudTl08u7Ky/Mpt6Mgu+taPexP7rnuRv1/tPM5n9bzVyBcq81matxrpzPR06ZFTc610Lq9lrTOtdraQVptZpd1opserJ9LJmZmpNJs401iqz89Walm/8vGHy6XSdPr0xGJWabYa9UeenmhVT+W1Wl6fL2LKpdejE/N4Z0d8Jm+n7ayykKbnL6wsT23X1U7Q5JqavWt2nEMP3fvxax/95cJyZ4cc1kjS2zHLk5Pl8uT0YzOPPV4qjZZL5bUVpXXiWkSMRHQibstOy511zyZ1o709ZsOMiKv/vTNv3nCLRnr5P2qRRz2W4nSkkcZI8bj6NxbVmI1mNGKh8/w3Y+vmb8j////IH3+11XoH838/yx9YnX0wivx/uPvs8LD8v6EXO/A3OqzV+vvd3gzWvRpvxOW4GGdjJVZiOV65mTXuWd/qbfwb2dn25iOLeuTRikbksRCVoibt1aQxE9MxHaV4Nk7FXLQijbnIoxZZtOJMtKIdWbFHVaMZWVSiHY1oRhrHoxonIo3JmImZmIo0spiIM9GIpajHfMxGpWjlfFwotvvUun7d/7XnfvTCrz9+pzN9LWhyi4EknQ9znaA/bxG0Id3fQP7vRIz09u5dyUnskn03+Kru0Ds33LqrRf4fvdPdAAAAAG6jpPj2PYmIsXigmJrLa9mX7nS3AAAAgB1U/K75UKcY60w9EEnn+L+0SeSHu943AAAAYGckxTl2SUSMx4Pdqf7pUpt9CQAAAAD8Gyr+/f9wpxiPeLOocPwPAAAAnzHfGHaN/Y/29K6x21rcm/zkT9FsjiVXFk8/lFyqdOIql+7qLtcrvnitxfbcwWR/r5GimB69fE8SEaPV7FDSv/rlP/d2y0+Kx4OrFyAcdq3/ZJsOxNYdKJ7Ft+NIN+bIuW55rj+nu5bxubyWTVQbtScmk96XI+3XXrzwlSiG/836wv4kzl9YWZ54/qWVc0VfrnRauXKpd3n4pL9URPeEii36crW3BeKBzUc8VpyI0VvveHe9pcHx964mO7L1+JPBdb4VR7sxR8e75fja8e/rrHNy4onJqFT2j7Sz0+3Xrg6MvteLydWR7+2PNrmBV+GtONaNOXb8WLfYpBflNb14cWMvyoPb//q2xXX34p0jb57+688bSTa1XS+mbrEXAHfK+eKqP6tZ6O4iC/3jalcnoa3Lu3f3l7yRd7nzq58y+ssP5LrR2JDd05vJ7m/F8W7M8e7nidGDm+SV0ibv6C9fePkXvXf0R9/7/g++fPiXH6zL6zfQi/fiRDemV8R9PxuSYztj/s66rPpuZ4l3h663VSsnr++dGku6Nx+Kyw9fuHT2heUXll8sl6emS4+WSo+VY6z4qNArhvRU5gH4z7bdPXY++Oq10GF34Uke3eao+r5rPymYiOfjpViJc3GyONsgIh7cvNXxgZ8hnNzmqHV84A4vJ7c5tlyNLa+P3XssiSGxUwNb7P++VxR/u00vCADsgqPb5OEk7u3Of/2/ekusi7grSU5uc9y9Npef6N44t390HMNz+aDf98rP3/YtAgCffVnzk2S8/XbSbOaLz07OzExW2qeytNmoPpM289n5LM3r7axZPVWpz2fpYrPRblT7Xx3PZq20tbS42Gi207lGM11stPLTxZ3f096t31vZQqXezqutxVpWaWVptVFvV6rtdDZvVdPFpadqeetU1iwWbi1m1Xwur1baeaOethpLzWo2kaatLBsIzGezejufy7OxNK+ni818odK8EhG1pYUsnc1a1Wa+2G50G+yvK6/PNZoLRbMTG4f/h93e3gDwafDqG5cvnl1ZWX7l5iZ+ez3Bd3qMAMBasjQAAAAAAAAAAAAAAHz6bTxdr1N7QycCjsVNnz746t64lbMPP3sTn3u/+7LsRIO30s7da17TPb2d5c5vnxueeO7JJy+u1iSjg5v3qTcPnPpdFv3RbdHO5v+nbHaq69v7I/b88Lvdmi8MCU5Gd3ikH0bETSx+NdkiZvffiwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgO/8KAAD//wifUTs=")
lgetxattr(&(0x7f0000000140)='./file1/file2\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffff001}, 0x18)
syz_mount_image$ext4(0x0, &(0x7f00000007c0)='./file0\x00', 0x0, 0x0, 0x2, 0x0, &(0x7f0000000840))
mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0)
mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', <r5=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000001640)=ANY=[@ANYBLOB="020000000000000002004e21e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e21e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d1bf7c7600ce2511a34b0dc18e2f3c04872b34c7aeca4f824b0dd19bb8e8bf727224d6f75254b78c9a8381352f1a8539c1e568c7"], 0x20000)

195.34514ms ago: executing program 5 (id=4479):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000080)=""/18, 0xb, 0x0, &(0x7f00000002c0)=""/39, 0x2f}}, 0x72)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1)
fadvise64(0xffffffffffffffff, 0x7f, 0x0, 0x4)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r2, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000044}, 0x4008800)

184.905041ms ago: executing program 0 (id=4480):
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xcf)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, 0x0, 0x0, 0x6, 0x75, 0x10001, 0xc, 0x79, 0x0})

140.894246ms ago: executing program 5 (id=4481):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
r3 = syz_open_dev$sg(0x0, 0x78, 0x2000)
r4 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, 0x0, 0x0)
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10)
r6 = socket$xdp(0x2c, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x400000000000004)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4)
writev(r7, &(0x7f0000000000)=[{&(0x7f0000000380)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff00", 0x44}], 0x1)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000b530ad57b2a661006ca49e045800000008eeffff0dd7f9de3b4ca5"])
io_setup(0x8, &(0x7f0000000040)=<r8=>0x0)
r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
io_cancel(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x69, 0xffffffffffffffff, &(0x7f0000000700)="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"/4096, 0x1000, 0x100, 0x0, 0x3, r9}, &(0x7f0000000180))

140.485895ms ago: executing program 0 (id=4482):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000080)=""/18, 0xb, 0x0, &(0x7f00000002c0)=""/39, 0x2f}}, 0x72)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1)
fadvise64(0xffffffffffffffff, 0x7f, 0x0, 0x4)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r2, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000044}, 0x4008800)

116.714498ms ago: executing program 0 (id=4483):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0)

93.33716ms ago: executing program 0 (id=4484):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0)

54.408064ms ago: executing program 4 (id=4485):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
mmap(&(0x7f00008d0000/0x1000)=nil, 0x1000, 0x1000003, 0x11, 0xffffffffffffffff, 0x83b8a000)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x800000000006}, 0x18)
remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4   \x00'}, 0x2a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r4, 0x0, 0xf4ff, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000300)='./file0/file0\x00', 0x8052, &(0x7f0000000340)={[{@noauto_da_alloc}, {@nouid32}, {@dioread_nolock}, {@nouser_xattr}], [{@appraise_type}]}, 0x5, 0x4f0, &(0x7f0000000f00)="$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")
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r6, 0xfffffffc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}})

53.727314ms ago: executing program 0 (id=4486):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='xen_mc_entry\x00', r4, 0x0, 0x6}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x80}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="00b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x807fff, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffa0)

50.018204ms ago: executing program 7 (id=4488):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0x100000001}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
r2 = socket(0x1, 0x80802, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001})
epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
shutdown(r2, 0x0)

820.259µs ago: executing program 4 (id=4489):
mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0x391e1000)
r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1c]}, 0x8, 0x80000)
r1 = io_uring_setup(0x6b9e, &(0x7f0000000100)={0x0, 0xceb4, 0x800, 0x4, 0x4000159, 0x0, r0})
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_socket_connect_nvme_tcp()
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b)
sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4400, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)

473.75µs ago: executing program 5 (id=4490):
socket$inet6(0xa, 0x3, 0x0)
socket(0x400000000010, 0xa, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000680)='sys_enter\x00', r0}, 0x18)
setuid(0x0)

0s ago: executing program 4 (id=4491):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1)
writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

kernel console output (not intermixed with test programs):

x150
[  229.385729][T14053]  syscall_trace_enter+0xcf/0x1e0
[  229.385759][T14053]  do_syscall_64+0xac/0x200
[  229.385786][T14053]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  229.385821][T14053]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  229.385902][T14053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.385930][T14053] RIP: 0033:0x7fb9f75bd8dc
[  229.385945][T14053] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  229.385970][T14053] RSP: 002b:00007fb9f6027030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  229.385995][T14053] RAX: ffffffffffffffda RBX: 00007fb9f7815fa0 RCX: 00007fb9f75bd8dc
[  229.386028][T14053] RDX: 000000000000000f RSI: 00007fb9f60270a0 RDI: 0000000000000007
[  229.386045][T14053] RBP: 00007fb9f6027090 R08: 0000000000000000 R09: 0000000000000000
[  229.386141][T14053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  229.386158][T14053] R13: 00007fb9f7816038 R14: 00007fb9f7815fa0 R15: 00007fff89c8de18
[  229.386184][T14053]  </TASK>
[  229.634815][ T8794] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.655465][T14061] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3570'.
[  229.665685][T14058] vhci_hcd: default hub control req: 0006 v0001 i0003 l0
[  230.324448][T14073] loop4: detected capacity change from 0 to 128
[  230.362899][T14074] netlink: 'syz.0.3574': attribute type 4 has an invalid length.
[  230.406107][T14064] loop8: detected capacity change from 0 to 764
[  230.422073][T14075] netlink: 'syz.0.3574': attribute type 4 has an invalid length.
[  230.454363][T14064] rock: directory entry would overflow storage
[  230.460748][T14064] rock: sig=0x5245, size=8, remaining=5
[  230.794268][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3571'.
[  230.850244][T14094] netlink: 'syz.5.3581': attribute type 4 has an invalid length.
[  230.861562][T14094] netlink: 'syz.5.3581': attribute type 4 has an invalid length.
[  230.892692][T14098] netlink: 'syz.4.3583': attribute type 4 has an invalid length.
[  230.905146][T14098] netlink: 'syz.4.3583': attribute type 4 has an invalid length.
[  230.956205][T14101] usb usb8: usbfs: process 14101 (syz.4.3585) did not claim interface 0 before use
[  230.973890][T14101] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  230.987022][T14103] loop8: detected capacity change from 0 to 512
[  231.006911][T14103] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.027927][T14103] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  231.046266][T14109] loop4: detected capacity change from 0 to 512
[  231.059325][T10383] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.075724][T14109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.097975][T14115] usb usb8: usbfs: process 14115 (syz.5.3589) did not claim interface 0 before use
[  231.110015][T14109] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  231.123008][T14115] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  231.131389][T14116] usb usb8: usbfs: process 14116 (syz.8.3588) did not claim interface 0 before use
[  231.141663][T14117] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3582'.
[  231.183893][T14117] bridge0: port 3(gretap0) entered blocking state
[  231.190490][T14117] bridge0: port 3(gretap0) entered disabled state
[  231.247665][T12174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.269322][T14117] gretap0: entered allmulticast mode
[  231.284902][T14117] gretap0: entered promiscuous mode
[  231.290779][T14117] bridge0: port 3(gretap0) entered blocking state
[  231.297300][T14117] bridge0: port 3(gretap0) entered forwarding state
[  231.305481][T14118] gretap0: left allmulticast mode
[  231.310568][T14118] gretap0: left promiscuous mode
[  231.316038][T14118] bridge0: port 3(gretap0) entered disabled state
[  231.324472][T14124] loop4: detected capacity change from 0 to 764
[  231.343096][T14124] rock: directory entry would overflow storage
[  231.349561][T14124] rock: sig=0x5245, size=8, remaining=5
[  231.357107][T14121] loop8: detected capacity change from 0 to 2048
[  231.377831][T14121] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  231.451237][T14132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3590'.
[  231.461612][T14121] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  231.503489][T14121] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 616 with error 28
[  231.515965][T14121] EXT4-fs (loop8): This should not happen!! Data will be lost
[  231.515965][T14121] 
[  231.525660][T14121] EXT4-fs (loop8): Total free blocks count 0
[  231.531658][T14121] EXT4-fs (loop8): Free/Dirty block details
[  231.537596][T14121] EXT4-fs (loop8): free_blocks=2415919104
[  231.543351][T14121] EXT4-fs (loop8): dirty_blocks=624
[  231.548606][T14121] EXT4-fs (loop8): Block reservation details
[  231.554694][T14121] EXT4-fs (loop8): i_reserved_data_blocks=39
[  231.619112][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811a6c0200: rx timeout, send abort
[  231.647149][T10383] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  231.701691][   T29] kauditd_printk_skb: 53 callbacks suppressed
[  231.701709][   T29] audit: type=1400 audit(1760634288.470:9149): avc:  denied  { ioctl } for  pid=14137 comm="syz.4.3597" path="socket:[42893]" dev="sockfs" ino=42893 ioctlcmd=0x6629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  231.708999][T14142] netlink: 'syz.8.3595': attribute type 4 has an invalid length.
[  231.764704][T14142] netlink: 'syz.8.3595': attribute type 4 has an invalid length.
[  231.799692][T14144] usb usb8: usbfs: process 14144 (syz.8.3598) did not claim interface 0 before use
[  231.811947][T14144] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  231.821347][T14145] netlink: 'syz.4.3597': attribute type 1 has an invalid length.
[  231.829181][T14145] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3597'.
[  231.847574][   T29] audit: type=1400 audit(1760634288.620:9150): avc:  denied  { setattr } for  pid=14137 comm="syz.4.3597" name="NETLINK" dev="sockfs" ino=42894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  231.872438][T14145] loop4: detected capacity change from 0 to 512
[  231.880517][   T29] audit: type=1326 audit(1760634288.660:9151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14146 comm="syz.7.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f75beec9 code=0x7ffc0000
[  231.904172][   T29] audit: type=1326 audit(1760634288.660:9152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14146 comm="syz.7.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f75beec9 code=0x7ffc0000
[  231.908468][T14145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.931229][   T29] audit: type=1326 audit(1760634288.660:9153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14148 comm="syz.8.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a587eec9 code=0x7ffc0000
[  231.941095][T14145] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  231.964329][   T29] audit: type=1326 audit(1760634288.660:9154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14148 comm="syz.8.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5a587d710 code=0x7ffc0000
[  231.964433][   T29] audit: type=1326 audit(1760634288.660:9155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14148 comm="syz.8.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe5a58806f7 code=0x7ffc0000
[  232.022589][   T29] audit: type=1326 audit(1760634288.660:9156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14148 comm="syz.8.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5a587eec9 code=0x7ffc0000
[  232.046276][   T29] audit: type=1326 audit(1760634288.660:9157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14148 comm="syz.8.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe5a58806f7 code=0x7ffc0000
[  232.070325][   T29] audit: type=1326 audit(1760634288.660:9158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14148 comm="syz.8.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe5a587db2a code=0x7ffc0000
[  232.117565][T14155] loop7: detected capacity change from 0 to 512
[  232.123927][    C1] vcan0: j1939_tp_rxtimer: 0xffff888104687600: rx timeout, send abort
[  232.132336][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811a6c0200: abort rx timeout. Force session deactivation
[  232.170548][T14157] usb usb8: usbfs: process 14157 (syz.8.3602) did not claim interface 0 before use
[  232.180370][T14157] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  232.571349][T14167] loop7: detected capacity change from 0 to 1024
[  232.624031][    C1] vcan0: j1939_tp_rxtimer: 0xffff888104687600: abort rx timeout. Force session deactivation
[  232.668789][T14167] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  232.703314][T12174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.714804][T14167] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #11: comm syz.7.3604: iget: bogus i_mode (1)
[  232.733603][T14167] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.3604: couldn't read orphan inode 11 (err -117)
[  232.748865][T14183] usb usb8: usbfs: process 14183 (syz.4.3610) did not claim interface 0 before use
[  232.767977][T14167] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.797464][T14183] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  232.824056][T14184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3609'.
[  232.853872][T14167] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.881930][T14184] bridge0: port 3(gretap0) entered blocking state
[  232.888666][T14184] bridge0: port 3(gretap0) entered disabled state
[  232.928662][T14184] gretap0: entered allmulticast mode
[  232.944334][T14184] gretap0: entered promiscuous mode
[  232.955365][T14184] bridge0: port 3(gretap0) entered blocking state
[  232.961961][T14184] bridge0: port 3(gretap0) entered forwarding state
[  232.986629][T14189] gretap0: left allmulticast mode
[  232.991759][T14189] gretap0: left promiscuous mode
[  232.996920][T14189] bridge0: port 3(gretap0) entered disabled state
[  233.155863][T14162] syz.7.3604 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  233.170236][T14162] CPU: 0 UID: 0 PID: 14162 Comm: syz.7.3604 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  233.170271][T14162] Tainted: [W]=WARN
[  233.170281][T14162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  233.170333][T14162] Call Trace:
[  233.170342][T14162]  <TASK>
[  233.170353][T14162]  __dump_stack+0x1d/0x30
[  233.170390][T14162]  dump_stack_lvl+0xe8/0x140
[  233.170418][T14162]  dump_stack+0x15/0x1b
[  233.170441][T14162]  dump_header+0x81/0x220
[  233.170558][T14162]  oom_kill_process+0x342/0x400
[  233.170589][T14162]  out_of_memory+0x979/0xb80
[  233.170633][T14162]  try_charge_memcg+0x610/0xa10
[  233.170678][T14162]  obj_cgroup_charge_pages+0xa6/0x150
[  233.170781][T14162]  __memcg_kmem_charge_page+0x9f/0x170
[  233.170827][T14162]  __alloc_frozen_pages_noprof+0x188/0x360
[  233.170904][T14162]  alloc_pages_mpol+0xb3/0x260
[  233.170933][T14162]  alloc_pages_noprof+0x90/0x130
[  233.170954][T14162]  __vmalloc_node_range_noprof+0x7a5/0xed0
[  233.171005][T14162]  __kvmalloc_node_noprof+0x483/0x670
[  233.171044][T14162]  ? ip_set_alloc+0x24/0x30
[  233.171140][T14162]  ? ip_set_alloc+0x24/0x30
[  233.171172][T14162]  ? __kmalloc_cache_noprof+0x249/0x4a0
[  233.171209][T14162]  ip_set_alloc+0x24/0x30
[  233.171258][T14162]  hash_netiface_create+0x282/0x740
[  233.171295][T14162]  ? __pfx_hash_netiface_create+0x10/0x10
[  233.171361][T14162]  ip_set_create+0x3cc/0x970
[  233.171405][T14162]  ? __nla_parse+0x40/0x60
[  233.171433][T14162]  nfnetlink_rcv_msg+0x4c6/0x590
[  233.171521][T14162]  netlink_rcv_skb+0x123/0x220
[  233.171550][T14162]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  233.171583][T14162]  nfnetlink_rcv+0x167/0x16c0
[  233.171632][T14162]  ? kmem_cache_free+0xe4/0x3d0
[  233.171741][T14162]  ? __kfree_skb+0x109/0x150
[  233.171813][T14162]  ? nlmon_xmit+0x4f/0x60
[  233.171837][T14162]  ? consume_skb+0x49/0x150
[  233.171876][T14162]  ? nlmon_xmit+0x4f/0x60
[  233.171921][T14162]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  233.171960][T14162]  ? __dev_queue_xmit+0x1200/0x2000
[  233.171989][T14162]  ? __dev_queue_xmit+0x182/0x2000
[  233.172078][T14162]  ? ref_tracker_free+0x37d/0x3e0
[  233.172138][T14162]  ? __netlink_deliver_tap+0x4dc/0x500
[  233.172287][T14162]  netlink_unicast+0x5c0/0x690
[  233.172327][T14162]  netlink_sendmsg+0x58b/0x6b0
[  233.172406][T14162]  ? __pfx_netlink_sendmsg+0x10/0x10
[  233.172449][T14162]  __sock_sendmsg+0x145/0x180
[  233.172479][T14162]  ____sys_sendmsg+0x31e/0x4e0
[  233.172524][T14162]  ___sys_sendmsg+0x17b/0x1d0
[  233.172627][T14162]  __x64_sys_sendmsg+0xd4/0x160
[  233.172772][T14162]  x64_sys_call+0x191e/0x3000
[  233.172803][T14162]  do_syscall_64+0xd2/0x200
[  233.172893][T14162]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  233.172933][T14162]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  233.172965][T14162]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.173040][T14162] RIP: 0033:0x7fb9f75beec9
[  233.173057][T14162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.173077][T14162] RSP: 002b:00007fb9f6027038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  233.173102][T14162] RAX: ffffffffffffffda RBX: 00007fb9f7815fa0 RCX: 00007fb9f75beec9
[  233.173121][T14162] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005
[  233.173139][T14162] RBP: 00007fb9f7641f91 R08: 0000000000000000 R09: 0000000000000000
[  233.173156][T14162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.173174][T14162] R13: 00007fb9f7816038 R14: 00007fb9f7815fa0 R15: 00007fff89c8de18
[  233.173240][T14162]  </TASK>
[  233.173247][T14162] memory: usage 307200kB, limit 307200kB, failcnt 2164
[  233.528979][T14162] memory+swap: usage 307912kB, limit 9007199254740988kB, failcnt 0
[  233.536929][T14162] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[  233.544428][T14162] Memory cgroup stats for /syz7:
[  233.548940][T14204] usb usb8: usbfs: process 14204 (syz.5.3616) did not claim interface 0 before use
[  233.563761][T14204] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  233.593940][T14162] cache 8192
[  233.597383][T14162] rss 0
[  233.600266][T14162] shmem 8192
[  233.603487][T14162] mapped_file 0
[  233.607072][T14162] dirty 0
[  233.610115][T14162] writeback 0
[  233.613422][T14162] workingset_refault_anon 135
[  233.618161][T14162] workingset_refault_file 0
[  233.622729][T14162] swap 729088
[  233.626070][T14162] swapcached 8192
[  233.629723][T14162] pgpgin 87491
[  233.633175][T14162] pgpgout 87487
[  233.636694][T14162] pgfault 109695
[  233.640260][T14162] pgmajfault 73
[  233.643866][T14162] inactive_anon 4096
[  233.647840][T14162] active_anon 12288
[  233.651707][T14162] inactive_file 0
[  233.655452][T14162] active_file 0
[  233.659018][T14162] unevictable 0
[  233.662670][T14162] hierarchical_memory_limit 314572800
[  233.668171][T14162] hierarchical_memsw_limit 9223372036854771712
[  233.674389][T14162] total_cache 8192
[  233.678159][T14162] total_rss 0
[  233.681466][T14162] total_shmem 8192
[  233.685244][T14162] total_mapped_file 0
[  233.689270][T14162] total_dirty 0
[  233.692821][T14162] total_writeback 0
[  233.696696][T14162] total_workingset_refault_anon 135
[  233.701935][T14162] total_workingset_refault_file 0
[  233.707087][T14162] total_swap 729088
[  233.710903][T14162] total_swapcached 8192
[  233.715151][T14162] total_pgpgin 87491
[  233.719082][T14162] total_pgpgout 87487
[  233.723220][T14162] total_pgfault 109695
[  233.727382][T14162] total_pgmajfault 73
[  233.731470][T14162] total_inactive_anon 4096
[  233.731767][T14208] loop5: detected capacity change from 0 to 2048
[  233.735959][T14162] total_active_anon 12288
[  233.747133][T14162] total_inactive_file 0
[  233.751634][T14162] total_active_file 0
[  233.755651][T14162] total_unevictable 0
[  233.759929][T14162] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3604,pid=14160,uid=0
[  233.775041][T14162] Memory cgroup out of memory: Killed process 14160 (syz.7.3604) total-vm:96136kB, anon-rss:1136kB, file-rss:22504kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000
[  233.813170][T14208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  233.848809][T14219] usb usb8: usbfs: process 14219 (syz.8.3620) did not claim interface 0 before use
[  233.868283][T14219] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  233.904669][T14208] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  233.927650][T14208] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1064 with error 28
[  233.940290][T14208] EXT4-fs (loop5): This should not happen!! Data will be lost
[  233.940290][T14208] 
[  233.950185][T14208] EXT4-fs (loop5): Total free blocks count 0
[  233.956213][T14208] EXT4-fs (loop5): Free/Dirty block details
[  233.962134][T14208] EXT4-fs (loop5): free_blocks=2415919104
[  233.967987][T14208] EXT4-fs (loop5): dirty_blocks=1072
[  233.973296][T14208] EXT4-fs (loop5): Block reservation details
[  233.979363][T14208] EXT4-fs (loop5): i_reserved_data_blocks=67
[  234.042429][T14225] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3618'.
[  234.146605][T14231] netlink: 'syz.0.3623': attribute type 4 has an invalid length.
[  234.174229][T13482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  234.203286][T14236] loop4: detected capacity change from 0 to 764
[  234.212783][T14236] rock: directory entry would overflow storage
[  234.219212][T14236] rock: sig=0x5245, size=8, remaining=5
[  234.243236][T14241] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 !
[  234.348566][T14236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3625'.
[  234.709258][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3635'.
[  234.739604][T14271] bridge0: port 3(gretap0) entered blocking state
[  234.746295][T14271] bridge0: port 3(gretap0) entered disabled state
[  234.783129][T14271] gretap0: entered allmulticast mode
[  234.802923][T14271] gretap0: entered promiscuous mode
[  234.822434][T14271] bridge0: port 3(gretap0) entered blocking state
[  234.828970][T14271] bridge0: port 3(gretap0) entered forwarding state
[  234.864185][T14272] gretap0: left allmulticast mode
[  234.869380][T14272] gretap0: left promiscuous mode
[  234.874819][T14272] bridge0: port 3(gretap0) entered disabled state
[  235.236161][T14269] loop5: detected capacity change from 0 to 1024
[  235.263893][T14269] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  235.277426][T14278] loop7: detected capacity change from 0 to 2048
[  235.305735][T14269] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #11: comm syz.5.3637: iget: bogus i_mode (1)
[  235.339330][T14278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  235.351544][T14269] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3637: couldn't read orphan inode 11 (err -117)
[  235.384087][T14269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.417801][T14269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.449911][T14278] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  235.530243][T14278] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 646 with error 28
[  235.543131][T14278] EXT4-fs (loop7): This should not happen!! Data will be lost
[  235.543131][T14278] 
[  235.552918][T14278] EXT4-fs (loop7): Total free blocks count 0
[  235.559062][T14278] EXT4-fs (loop7): Free/Dirty block details
[  235.565086][T14278] EXT4-fs (loop7): free_blocks=2415919104
[  235.570938][T14278] EXT4-fs (loop7): dirty_blocks=656
[  235.576185][T14278] EXT4-fs (loop7): Block reservation details
[  235.582707][T14278] EXT4-fs (loop7): i_reserved_data_blocks=41
[  235.766661][T14303] usb usb8: usbfs: process 14303 (syz.8.3645) did not claim interface 0 before use
[  235.792777][T14303] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  235.801755][ T8794] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  235.854203][T14307] loop7: detected capacity change from 0 to 512
[  235.876270][T14307] EXT4-fs: Ignoring removed i_version option
[  235.882390][T14307] EXT4-fs: Ignoring removed bh option
[  235.921253][T14307] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.953630][T14307] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  235.974799][T14316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3646'.
[  236.055494][T14267] syz.5.3637 (14267) used greatest stack depth: 6136 bytes left
[  236.107537][ T8794] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.175941][T14327] 9pnet_fd: Insufficient options for proto=fd
[  236.283667][T14341] usb usb8: usbfs: process 14341 (syz.0.3658) did not claim interface 0 before use
[  236.293754][T14341] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  236.742179][T14352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3660'.
[  236.754390][   T29] kauditd_printk_skb: 127 callbacks suppressed
[  236.754406][   T29] audit: type=1326 audit(1760634293.460:9286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14346 comm="syz.0.3660" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b3183eec9 code=0x0
[  236.783542][T14352] bridge0: port 3(gretap0) entered blocking state
[  236.790835][T14352] bridge0: port 3(gretap0) entered disabled state
[  236.867562][T14354] SELinux:  Context system_u:object is not valid (left unmapped).
[  236.886648][   T29] audit: type=1400 audit(1760634293.640:9287): avc:  denied  { mac_admin } for  pid=14353 comm="syz.5.3661" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  236.907878][   T29] audit: type=1400 audit(1760634293.650:9288): avc:  denied  { relabelto } for  pid=14353 comm="syz.5.3661" name="cgroup.procs" dev="cgroup" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object"
[  236.933777][   T29] audit: type=1400 audit(1760634293.650:9289): avc:  denied  { associate } for  pid=14353 comm="syz.5.3661" name="cgroup.procs" dev="cgroup" ino=396 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object"
[  236.963212][T14352] gretap0: entered allmulticast mode
[  236.969504][T14352] gretap0: entered promiscuous mode
[  236.975659][T14352] bridge0: port 3(gretap0) entered blocking state
[  236.982196][T14352] bridge0: port 3(gretap0) entered forwarding state
[  236.993510][T14354] loop5: detected capacity change from 0 to 512
[  237.000774][T14355] gretap0: left allmulticast mode
[  237.001372][T14354] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  237.005996][T14355] gretap0: left promiscuous mode
[  237.021188][   T29] audit: type=1400 audit(1760634293.750:9290): avc:  denied  { write } for  pid=14353 comm="syz.5.3661" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  237.022678][T14355] bridge0: port 3(gretap0) entered disabled state
[  237.046066][   T29] audit: type=1400 audit(1760634293.750:9291): avc:  denied  { open } for  pid=14353 comm="syz.5.3661" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  237.077350][   T29] audit: type=1400 audit(1760634293.760:9292): avc:  denied  { ioctl } for  pid=14353 comm="syz.5.3661" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  237.108524][   T29] audit: type=1400 audit(1760634293.880:9293): avc:  denied  { watch watch_reads } for  pid=14353 comm="syz.5.3661" path="/62/file0/file2" dev="loop5" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[  237.108711][T14354] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00)
[  237.194296][   T29] audit: type=1400 audit(1760634293.960:9294): avc:  denied  { bind } for  pid=14353 comm="syz.5.3661" laddr=127.0.0.1 lport=255 faddr=127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  237.218616][   T29] audit: type=1400 audit(1760634293.960:9295): avc:  denied  { node_bind } for  pid=14353 comm="syz.5.3661" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  237.421049][T14364] bridge_slave_0: left allmulticast mode
[  237.426974][T14364] bridge_slave_0: left promiscuous mode
[  237.432698][T14364] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.471248][T14364] bridge_slave_1: left allmulticast mode
[  237.477074][T14364] bridge_slave_1: left promiscuous mode
[  237.482815][T14364] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.514773][T14364] bond0: (slave bond_slave_0): Releasing backup interface
[  237.525335][T14364] bond0: (slave bond_slave_1): Releasing backup interface
[  237.539590][T14364] team0: Port device team_slave_0 removed
[  237.551517][T14364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.559056][T14364] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.575635][T14379] validate_nla: 1 callbacks suppressed
[  237.575652][T14379] netlink: 'syz.8.3669': attribute type 4 has an invalid length.
[  237.598930][T14364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.606504][T14364] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.623178][T14364] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  237.640319][T14380] netlink: 'syz.8.3669': attribute type 4 has an invalid length.
[  237.729422][T14383] loop4: detected capacity change from 0 to 1024
[  237.758473][T14383] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  237.800681][T14383] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #11: comm syz.4.3662: iget: bogus i_mode (1)
[  237.819266][T14387] loop8: detected capacity change from 0 to 2048
[  237.826163][T14383] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3662: couldn't read orphan inode 11 (err -117)
[  237.840245][T14383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.857681][T14387] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  237.959413][T14387] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  237.982516][T14360] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.994273][T14387] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1104 with error 28
[  238.007047][T14387] EXT4-fs (loop8): This should not happen!! Data will be lost
[  238.007047][T14387] 
[  238.016909][T14387] EXT4-fs (loop8): Total free blocks count 0
[  238.022961][T14387] EXT4-fs (loop8): Free/Dirty block details
[  238.029101][T14387] EXT4-fs (loop8): free_blocks=2415919104
[  238.034951][T14387] EXT4-fs (loop8): dirty_blocks=1120
[  238.040382][T14387] EXT4-fs (loop8): Block reservation details
[  238.046526][T14387] EXT4-fs (loop8): i_reserved_data_blocks=70
[  238.099947][T10383] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  238.131817][T14407] usb usb8: usbfs: process 14407 (syz.8.3677) did not claim interface 0 before use
[  238.151844][T14407] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  238.265822][T14415] 9pnet_fd: Insufficient options for proto=fd
[  238.780565][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3684'.
[  238.802747][T14450] bridge0: port 3(gretap0) entered blocking state
[  238.809401][T14450] bridge0: port 3(gretap0) entered disabled state
[  238.829327][T14450] gretap0: entered allmulticast mode
[  238.845544][T14450] gretap0: entered promiscuous mode
[  238.857758][T14450] bridge0: port 3(gretap0) entered blocking state
[  238.864276][T14450] bridge0: port 3(gretap0) entered forwarding state
[  238.898762][T14452] gretap0: left allmulticast mode
[  238.903879][T14452] gretap0: left promiscuous mode
[  238.909134][T14452] bridge0: port 3(gretap0) entered disabled state
[  239.134010][T14474] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3700'.
[  239.160893][T14476] usb usb8: usbfs: process 14476 (syz.0.3701) did not claim interface 0 before use
[  239.168342][T14474] loop8: detected capacity change from 0 to 2048
[  239.187585][T14476] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  239.243192][T14474] Alternate GPT is invalid, using primary GPT.
[  239.249745][T14474]  loop8: p2 p3 p7
[  239.550464][T14489] loop4: detected capacity change from 0 to 512
[  239.557615][T14489] EXT4-fs: dax option not supported
[  239.716332][T14504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3712'.
[  240.099154][T14513] loop4: detected capacity change from 0 to 2048
[  240.210728][T14513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  240.244108][T14517] loop8: detected capacity change from 0 to 2048
[  240.302118][T14517] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  240.302870][T14513] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  240.330668][T14513] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 812 with error 28
[  240.343183][T14513] EXT4-fs (loop4): This should not happen!! Data will be lost
[  240.343183][T14513] 
[  240.353007][T14513] EXT4-fs (loop4): Total free blocks count 0
[  240.359089][T14513] EXT4-fs (loop4): Free/Dirty block details
[  240.365137][T14513] EXT4-fs (loop4): free_blocks=2415919104
[  240.371016][T14513] EXT4-fs (loop4): dirty_blocks=816
[  240.376423][T14513] EXT4-fs (loop4): Block reservation details
[  240.382638][T14513] EXT4-fs (loop4): i_reserved_data_blocks=51
[  240.404156][T14517] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  240.429869][T14517] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1298 with error 28
[  240.442569][T14517] EXT4-fs (loop8): This should not happen!! Data will be lost
[  240.442569][T14517] 
[  240.452489][T14517] EXT4-fs (loop8): Total free blocks count 0
[  240.452513][T14517] EXT4-fs (loop8): Free/Dirty block details
[  240.452529][T14517] EXT4-fs (loop8): free_blocks=2415919104
[  240.452548][T14517] EXT4-fs (loop8): dirty_blocks=1312
[  240.476022][T14517] EXT4-fs (loop8): Block reservation details
[  240.482162][T14517] EXT4-fs (loop8): i_reserved_data_blocks=82
[  240.490412][T12174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  240.668858][T14532] program syz.4.3720 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  240.680156][T10383] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  241.133153][T14545] loop5: detected capacity change from 0 to 128
[  241.159512][T14547] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3727'.
[  241.203569][T14554] loop7: detected capacity change from 0 to 512
[  241.222812][T14554] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.3728: EA inode hash validation failed
[  241.236544][T14554] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #15: comm syz.7.3728: corrupted inode contents
[  241.252895][T14554] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #15: comm syz.7.3728: mark_inode_dirty error
[  241.264834][T14554] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #15: comm syz.7.3728: corrupted inode contents
[  241.276998][T14554] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2996: inode #15: comm syz.7.3728: mark_inode_dirty error
[  241.291309][T14554] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2999: inode #15: comm syz.7.3728: mark inode dirty (error -117)
[  241.410350][T14554] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117)
[  241.421109][T14554] EXT4-fs (loop7): 1 orphan inode deleted
[  241.427675][T14554] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.432133][T14561] netlink: 'syz.0.3732': attribute type 4 has an invalid length.
[  241.451392][T14561] netlink: 'syz.0.3732': attribute type 4 has an invalid length.
[  241.703093][T14573] FAULT_INJECTION: forcing a failure.
[  241.703093][T14573] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  241.716512][T14573] CPU: 0 UID: 0 PID: 14573 Comm: syz.0.3737 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  241.716623][T14573] Tainted: [W]=WARN
[  241.716629][T14573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  241.716645][T14573] Call Trace:
[  241.716653][T14573]  <TASK>
[  241.716661][T14573]  __dump_stack+0x1d/0x30
[  241.716683][T14573]  dump_stack_lvl+0xe8/0x140
[  241.716703][T14573]  dump_stack+0x15/0x1b
[  241.716781][T14573]  should_fail_ex+0x265/0x280
[  241.716886][T14573]  should_fail_alloc_page+0xf2/0x100
[  241.716924][T14573]  __alloc_frozen_pages_noprof+0xff/0x360
[  241.717026][T14573]  alloc_pages_mpol+0xb3/0x260
[  241.717052][T14573]  vma_alloc_folio_noprof+0x1aa/0x300
[  241.717076][T14573]  do_wp_page+0xf60/0x2510
[  241.717104][T14573]  ? mod_memcg_lruvec_state+0x1fc/0x2c0
[  241.717182][T14573]  ? __rcu_read_lock+0x37/0x50
[  241.717302][T14573]  ? css_rstat_updated+0xb7/0x240
[  241.717385][T14573]  ? __rcu_read_lock+0x37/0x50
[  241.717423][T14573]  handle_mm_fault+0x77d/0x2be0
[  241.717456][T14573]  ? vma_start_read+0x141/0x1f0
[  241.717621][T14573]  do_user_addr_fault+0x630/0x1080
[  241.717651][T14573]  ? fpregs_assert_state_consistent+0xb4/0xe0
[  241.717767][T14573]  exc_page_fault+0x62/0xa0
[  241.717788][T14573]  asm_exc_page_fault+0x26/0x30
[  241.717813][T14573] RIP: 0033:0x7f1b31700c03
[  241.717835][T14573] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  241.717860][T14573] RSP: 002b:00007f1b3029e4a0 EFLAGS: 00010202
[  241.717882][T14573] RAX: 0000000000003400 RBX: 00007f1b3029e540 RCX: 00007f1b27e7f000
[  241.717966][T14573] RDX: 00007f1b3029e6e0 RSI: 0000000000000000 RDI: 00007f1b3029e5e0
[  241.718055][T14573] RBP: 00000000000000b2 R08: 0000000000000006 R09: 0000000000000020
[  241.718072][T14573] R10: 0000000000000024 R11: 00007f1b3029e540 R12: 0000000000000001
[  241.718087][T14573] R13: 00007f1b318ddb80 R14: 0000000000000002 R15: 00007f1b3029e5e0
[  241.718109][T14573]  </TASK>
[  241.718120][T14573] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  241.954703][   T29] kauditd_printk_skb: 305 callbacks suppressed
[  241.954791][   T29] audit: type=1326 audit(1760634298.720:9601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14574 comm="syz.0.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3183eec9 code=0x7ffc0000
[  241.984796][   T29] audit: type=1326 audit(1760634298.720:9602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14574 comm="syz.0.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b3183d710 code=0x7ffc0000
[  242.008581][   T29] audit: type=1326 audit(1760634298.720:9603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14574 comm="syz.0.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1b318406f7 code=0x7ffc0000
[  242.032500][   T29] audit: type=1326 audit(1760634298.720:9604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14574 comm="syz.0.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b3183eec9 code=0x7ffc0000
[  242.056975][   T29] audit: type=1326 audit(1760634298.720:9605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14574 comm="syz.0.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1b318406f7 code=0x7ffc0000
[  242.081017][   T29] audit: type=1326 audit(1760634298.720:9606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14574 comm="syz.0.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1b3183db2a code=0x7ffc0000
[  242.104608][   T29] audit: type=1326 audit(1760634298.720:9607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14574 comm="syz.0.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1b3183eec9 code=0x7ffc0000
[  242.128341][   T29] audit: type=1326 audit(1760634298.720:9608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14574 comm="syz.0.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1b3183db2a code=0x7ffc0000
[  242.151880][   T29] audit: type=1326 audit(1760634298.720:9609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14574 comm="syz.0.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3183eec9 code=0x7ffc0000
[  242.226526][   T29] audit: type=1326 audit(1760634298.730:9610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14574 comm="syz.0.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3183eec9 code=0x7ffc0000
[  242.317129][ T8794] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.418662][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3739'.
[  242.431624][T14586] usb usb8: usbfs: process 14586 (syz.8.3743) did not claim interface 0 before use
[  242.436025][T14587] bridge0: port 3(gretap0) entered blocking state
[  242.447609][T14587] bridge0: port 3(gretap0) entered disabled state
[  242.454404][T14586] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  242.458956][T14587] gretap0: entered allmulticast mode
[  242.468476][T14587] gretap0: entered promiscuous mode
[  242.474121][T14587] bridge0: port 3(gretap0) entered blocking state
[  242.480663][T14587] bridge0: port 3(gretap0) entered forwarding state
[  242.489882][T14591] gretap0: left allmulticast mode
[  242.495027][T14591] gretap0: left promiscuous mode
[  242.500215][T14591] bridge0: port 3(gretap0) entered disabled state
[  242.762640][T14595] usb usb8: usbfs: process 14595 (syz.8.3744) did not claim interface 0 before use
[  242.773202][T14595] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  242.883501][T14597] bridge0: port 3(gretap0) entered blocking state
[  242.890117][T14597] bridge0: port 3(gretap0) entered disabled state
[  242.929951][T14597] gretap0: entered allmulticast mode
[  242.939498][T14597] gretap0: entered promiscuous mode
[  242.946952][T14597] bridge0: port 3(gretap0) entered blocking state
[  242.953649][T14597] bridge0: port 3(gretap0) entered forwarding state
[  243.159140][T14612] vhci_hcd: invalid port number 12
[  243.236284][T14617] 9pnet_virtio: no channels available for device 
[  243.311439][T14622] usb usb8: usbfs: process 14622 (syz.8.3755) did not claim interface 0 before use
[  243.321655][T14622] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  243.345778][T14626] netlink: 'syz.7.3756': attribute type 4 has an invalid length.
[  243.377176][T14632] loop5: detected capacity change from 0 to 512
[  243.393622][T14626] netlink: 'syz.7.3756': attribute type 4 has an invalid length.
[  243.404489][T14632] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  243.418049][T14635] FAULT_INJECTION: forcing a failure.
[  243.418049][T14635] name failslab, interval 1, probability 0, space 0, times 0
[  243.430764][T14635] CPU: 0 UID: 0 PID: 14635 Comm: syz.8.3760 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  243.430867][T14635] Tainted: [W]=WARN
[  243.430874][T14635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  243.430891][T14635] Call Trace:
[  243.430897][T14635]  <TASK>
[  243.430906][T14635]  __dump_stack+0x1d/0x30
[  243.430933][T14635]  dump_stack_lvl+0xe8/0x140
[  243.430957][T14635]  dump_stack+0x15/0x1b
[  243.431022][T14635]  should_fail_ex+0x265/0x280
[  243.431125][T14635]  should_failslab+0x8c/0xb0
[  243.431170][T14635]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  243.431209][T14635]  ? __alloc_skb+0x101/0x320
[  243.431242][T14635]  __alloc_skb+0x101/0x320
[  243.431306][T14635]  tcp_send_active_reset+0x5f/0x390
[  243.431348][T14635]  tcp_disconnect+0x313/0xf50
[  243.431452][T14635]  inet_child_forget+0x40/0x170
[  243.431482][T14635]  inet_csk_listen_stop+0x293/0x920
[  243.431511][T14635]  ? __pfx___bpf_trace_inet_sock_set_state+0x10/0x10
[  243.431635][T14635]  ? inet_csk_listen_stop+0xf7/0x920
[  243.431659][T14635]  __tcp_close+0x443/0x1130
[  243.431687][T14635]  ? 0xffffffff81000000
[  243.431702][T14635]  ? __rcu_read_unlock+0x4f/0x70
[  243.431736][T14635]  tcp_close+0x28/0xd0
[  243.431762][T14632] EXT4-fs (loop5): orphan cleanup on readonly fs
[  243.431769][T14635]  inet_release+0xce/0xf0
[  243.431867][T14635]  inet6_release+0x3e/0x60
[  243.431950][T14635]  sock_close+0x6b/0x150
[  243.432001][T14635]  ? __pfx_sock_close+0x10/0x10
[  243.432125][T14635]  __fput+0x29b/0x650
[  243.432241][T14635]  ____fput+0x1c/0x30
[  243.432287][T14635]  task_work_run+0x131/0x1a0
[  243.432329][T14635]  exit_to_user_mode_loop+0xed/0x110
[  243.432365][T14635]  do_syscall_64+0x1d6/0x200
[  243.432440][T14635]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  243.432481][T14635]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  243.432584][T14635]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.432617][T14635] RIP: 0033:0x7fe5a587eec9
[  243.432638][T14635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  243.432666][T14635] RSP: 002b:00007fe5a42c6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  243.432693][T14635] RAX: 0000000000000000 RBX: 00007fe5a5ad6090 RCX: 00007fe5a587eec9
[  243.432749][T14635] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005
[  243.432766][T14635] RBP: 00007fe5a42c6090 R08: 0000000000000000 R09: 0000000000000000
[  243.432784][T14635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  243.432802][T14635] R13: 00007fe5a5ad6128 R14: 00007fe5a5ad6090 R15: 00007ffc9ba0b808
[  243.432831][T14635]  </TASK>
[  243.693802][T14632] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  243.714942][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3761'.
[  243.731989][T14632] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  243.743573][T14640] bridge0: port 1(gretap0) entered blocking state
[  243.750225][T14640] bridge0: port 1(gretap0) entered disabled state
[  243.758411][T14640] gretap0: entered allmulticast mode
[  243.764142][T14632] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3759: bg 0: block 40: padding at end of block bitmap is not set
[  243.771969][T14640] gretap0: entered promiscuous mode
[  243.784358][T14640] bridge0: port 1(gretap0) entered blocking state
[  243.787580][T14632] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  243.790887][T14640] bridge0: port 1(gretap0) entered forwarding state
[  243.803188][T14632] EXT4-fs (loop5): 1 truncate cleaned up
[  243.820139][T14632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  243.841205][T14640] gretap0: left allmulticast mode
[  243.846487][T14640] gretap0: left promiscuous mode
[  243.851589][T14640] bridge0: port 1(gretap0) entered disabled state
[  243.874548][T14632] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3759'.
[  243.895521][T13482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.938993][T14648] loop4: detected capacity change from 0 to 1024
[  244.201460][T14648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.434300][T14666] 9pnet_virtio: no channels available for device 
[  244.512292][T14668] loop8: detected capacity change from 0 to 2048
[  244.537132][T14668] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  244.614815][T14668] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  244.630899][T14668] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1720 with error 28
[  244.643389][T14668] EXT4-fs (loop8): This should not happen!! Data will be lost
[  244.643389][T14668] 
[  244.653150][T14668] EXT4-fs (loop8): Total free blocks count 0
[  244.659351][T14668] EXT4-fs (loop8): Free/Dirty block details
[  244.665350][T14668] EXT4-fs (loop8): free_blocks=2415919104
[  244.671406][T14668] EXT4-fs (loop8): dirty_blocks=1728
[  244.676754][T14668] EXT4-fs (loop8): Block reservation details
[  244.682782][T14668] EXT4-fs (loop8): i_reserved_data_blocks=108
[  244.738231][T12174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.766681][T14676] netlink: 'syz.4.3771': attribute type 4 has an invalid length.
[  244.776649][T10383] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  244.786727][T14676] netlink: 'syz.4.3771': attribute type 4 has an invalid length.
[  244.837386][T14683] FAULT_INJECTION: forcing a failure.
[  244.837386][T14683] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  244.850979][T14683] CPU: 0 UID: 0 PID: 14683 Comm: syz.8.3775 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  244.851101][T14683] Tainted: [W]=WARN
[  244.851109][T14683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  244.851122][T14683] Call Trace:
[  244.851128][T14683]  <TASK>
[  244.851137][T14683]  __dump_stack+0x1d/0x30
[  244.851165][T14683]  dump_stack_lvl+0xe8/0x140
[  244.851238][T14683]  dump_stack+0x15/0x1b
[  244.851261][T14683]  should_fail_ex+0x265/0x280
[  244.851299][T14683]  should_fail+0xb/0x20
[  244.851345][T14683]  should_fail_usercopy+0x1a/0x20
[  244.851372][T14683]  _copy_from_iter+0xd2/0xe80
[  244.851476][T14683]  ? __build_skb_around+0x1ab/0x200
[  244.851503][T14683]  ? __alloc_skb+0x223/0x320
[  244.851547][T14683]  netlink_sendmsg+0x471/0x6b0
[  244.851592][T14683]  ? __pfx_netlink_sendmsg+0x10/0x10
[  244.851639][T14683]  __sock_sendmsg+0x145/0x180
[  244.851664][T14683]  ____sys_sendmsg+0x31e/0x4e0
[  244.851755][T14683]  ___sys_sendmsg+0x17b/0x1d0
[  244.851816][T14683]  __x64_sys_sendmsg+0xd4/0x160
[  244.851893][T14683]  x64_sys_call+0x191e/0x3000
[  244.851922][T14683]  do_syscall_64+0xd2/0x200
[  244.851955][T14683]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  244.852074][T14683]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  244.852133][T14683]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.852156][T14683] RIP: 0033:0x7fe5a587eec9
[  244.852175][T14683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  244.852200][T14683] RSP: 002b:00007fe5a42e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  244.852269][T14683] RAX: ffffffffffffffda RBX: 00007fe5a5ad5fa0 RCX: 00007fe5a587eec9
[  244.852308][T14683] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000006
[  244.852322][T14683] RBP: 00007fe5a42e7090 R08: 0000000000000000 R09: 0000000000000000
[  244.852347][T14683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  244.852364][T14683] R13: 00007fe5a5ad6038 R14: 00007fe5a5ad5fa0 R15: 00007ffc9ba0b808
[  244.852392][T14683]  </TASK>
[  245.134884][T14689] FAULT_INJECTION: forcing a failure.
[  245.134884][T14689] name failslab, interval 1, probability 0, space 0, times 0
[  245.147611][T14689] CPU: 0 UID: 0 PID: 14689 Comm: syz.8.3777 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  245.147655][T14689] Tainted: [W]=WARN
[  245.147663][T14689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  245.147679][T14689] Call Trace:
[  245.147687][T14689]  <TASK>
[  245.147695][T14689]  __dump_stack+0x1d/0x30
[  245.147763][T14689]  dump_stack_lvl+0xe8/0x140
[  245.147830][T14689]  dump_stack+0x15/0x1b
[  245.147856][T14689]  should_fail_ex+0x265/0x280
[  245.147903][T14689]  ? tcf_proto_create+0x44/0x1a0
[  245.147945][T14689]  should_failslab+0x8c/0xb0
[  245.147984][T14689]  __kmalloc_cache_noprof+0x4c/0x4a0
[  245.148017][T14689]  tcf_proto_create+0x44/0x1a0
[  245.148085][T14689]  tc_new_tfilter+0x95c/0x10a0
[  245.148202][T14689]  ? __rcu_read_unlock+0x4f/0x70
[  245.148246][T14689]  ? rtnetlink_rcv_msg+0x5d7/0x6d0
[  245.148286][T14689]  ? __pfx_tc_new_tfilter+0x10/0x10
[  245.148401][T14689]  rtnetlink_rcv_msg+0x5fe/0x6d0
[  245.148448][T14689]  netlink_rcv_skb+0x123/0x220
[  245.148555][T14689]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  245.148598][T14689]  rtnetlink_rcv+0x1c/0x30
[  245.148704][T14689]  netlink_unicast+0x5c0/0x690
[  245.148741][T14689]  netlink_sendmsg+0x58b/0x6b0
[  245.148791][T14689]  ? __pfx_netlink_sendmsg+0x10/0x10
[  245.148855][T14689]  __sock_sendmsg+0x145/0x180
[  245.148877][T14689]  ____sys_sendmsg+0x31e/0x4e0
[  245.148958][T14689]  ___sys_sendmsg+0x17b/0x1d0
[  245.149009][T14689]  __x64_sys_sendmsg+0xd4/0x160
[  245.149053][T14689]  x64_sys_call+0x191e/0x3000
[  245.149075][T14689]  do_syscall_64+0xd2/0x200
[  245.149108][T14689]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  245.149133][T14689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.149204][T14689] RIP: 0033:0x7fe5a587eec9
[  245.149223][T14689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  245.149246][T14689] RSP: 002b:00007fe5a42e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  245.149265][T14689] RAX: ffffffffffffffda RBX: 00007fe5a5ad5fa0 RCX: 00007fe5a587eec9
[  245.149327][T14689] RDX: 0000000000000040 RSI: 0000200000000300 RDI: 0000000000000003
[  245.149340][T14689] RBP: 00007fe5a42e7090 R08: 0000000000000000 R09: 0000000000000000
[  245.149353][T14689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  245.149399][T14689] R13: 00007fe5a5ad6038 R14: 00007fe5a5ad5fa0 R15: 00007ffc9ba0b808
[  245.149427][T14689]  </TASK>
[  245.669559][T14698] usb usb8: usbfs: process 14698 (syz.5.3781) did not claim interface 0 before use
[  245.714550][T14698] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  245.780786][T14706] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3779'.
[  245.786134][T14708] netlink: 'syz.5.3784': attribute type 4 has an invalid length.
[  245.801781][T14706] gretap0: left allmulticast mode
[  245.802986][T14708] netlink: 'syz.5.3784': attribute type 4 has an invalid length.
[  245.807135][T14706] gretap0: left promiscuous mode
[  245.820125][T14706] bridge0: port 3(gretap0) entered disabled state
[  245.837424][T14709] loop7: detected capacity change from 0 to 2048
[  245.862002][T14709] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  245.947346][T14709] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  245.962992][T14709] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 724 with error 28
[  245.975490][T14709] EXT4-fs (loop7): This should not happen!! Data will be lost
[  245.975490][T14709] 
[  245.985309][T14709] EXT4-fs (loop7): Total free blocks count 0
[  245.991529][T14709] EXT4-fs (loop7): Free/Dirty block details
[  245.997768][T14709] EXT4-fs (loop7): free_blocks=2415919104
[  246.003622][T14709] EXT4-fs (loop7): dirty_blocks=736
[  246.009045][T14709] EXT4-fs (loop7): Block reservation details
[  246.015172][T14709] EXT4-fs (loop7): i_reserved_data_blocks=46
[  246.059604][ T8794] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  246.101059][T14731] FAULT_INJECTION: forcing a failure.
[  246.101059][T14731] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  246.114551][T14731] CPU: 0 UID: 0 PID: 14731 Comm: syz.7.3791 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  246.114619][T14731] Tainted: [W]=WARN
[  246.114629][T14731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  246.114645][T14731] Call Trace:
[  246.114654][T14731]  <TASK>
[  246.114663][T14731]  __dump_stack+0x1d/0x30
[  246.114719][T14731]  dump_stack_lvl+0xe8/0x140
[  246.114739][T14731]  dump_stack+0x15/0x1b
[  246.114762][T14731]  should_fail_ex+0x265/0x280
[  246.114825][T14731]  should_fail_alloc_page+0xf2/0x100
[  246.114859][T14731]  __alloc_frozen_pages_noprof+0xff/0x360
[  246.114918][T14731]  alloc_pages_mpol+0xb3/0x260
[  246.114945][T14731]  vma_alloc_folio_noprof+0x1aa/0x300
[  246.114972][T14731]  do_wp_page+0xf60/0x2510
[  246.115002][T14731]  ? __rcu_read_lock+0x37/0x50
[  246.115033][T14731]  ? css_rstat_updated+0xb7/0x240
[  246.115080][T14731]  ? __rcu_read_lock+0x37/0x50
[  246.115110][T14731]  handle_mm_fault+0x77d/0x2be0
[  246.115135][T14731]  ? vma_start_read+0x141/0x1f0
[  246.115175][T14731]  do_user_addr_fault+0x630/0x1080
[  246.115279][T14731]  ? fpregs_assert_state_consistent+0xb4/0xe0
[  246.115325][T14731]  exc_page_fault+0x62/0xa0
[  246.115352][T14731]  asm_exc_page_fault+0x26/0x30
[  246.115393][T14731] RIP: 0033:0x7fb9f7480c03
[  246.115414][T14731] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  246.115439][T14731] RSP: 002b:00007fb9f60264a0 EFLAGS: 00010202
[  246.115458][T14731] RAX: 0000000000000400 RBX: 00007fb9f6026540 RCX: 00007fb9edc07000
[  246.115474][T14731] RDX: 00007fb9f60266e0 RSI: 0000000000000011 RDI: 00007fb9f60265e0
[  246.115490][T14731] RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001cc
[  246.115507][T14731] R10: 00000000000001d8 R11: 00007fb9f6026540 R12: 0000000000000001
[  246.115524][T14731] R13: 00007fb9f765db80 R14: 0000000000000020 R15: 00007fb9f60265e0
[  246.115570][T14731]  </TASK>
[  246.311336][T14731] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  246.325770][T14731] loop7: detected capacity change from 0 to 512
[  246.333318][T14731] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  246.360469][T14731] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  246.385712][T14731] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.495785][ T8794] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  246.701802][T14746] usb usb8: usbfs: process 14746 (syz.8.3795) did not claim interface 0 before use
[  246.712227][T14746] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  246.713575][T14748] IPv6: sit1: Disabled Multicast RS
[  246.727610][T14748] sit1: entered allmulticast mode
[  246.746939][T14744] Process accounting resumed
[  246.793065][T14752] netlink: 'syz.8.3797': attribute type 4 has an invalid length.
[  246.814932][T14752] netlink: 'syz.8.3797': attribute type 4 has an invalid length.
[  246.878645][T14758] loop5: detected capacity change from 0 to 1024
[  246.887768][T14758] EXT4-fs: Ignoring removed mblk_io_submit option
[  246.894276][T14758] EXT4-fs: Ignoring removed bh option
[  246.900132][T14758] ext3: Unknown parameter 'subj_type'
[  247.527539][   T29] kauditd_printk_skb: 138 callbacks suppressed
[  247.527559][   T29] audit: type=1326 audit(1760634304.300:9748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14780 comm="syz.4.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12434eec9 code=0x7ffc0000
[  247.560934][   T29] audit: type=1326 audit(1760634304.300:9749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14780 comm="syz.4.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12434eec9 code=0x7ffc0000
[  247.584687][   T29] audit: type=1326 audit(1760634304.300:9750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14780 comm="syz.4.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa12434d710 code=0x7ffc0000
[  247.608381][   T29] audit: type=1326 audit(1760634304.300:9751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14780 comm="syz.4.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa1243506f7 code=0x7ffc0000
[  247.632443][   T29] audit: type=1326 audit(1760634304.300:9752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14780 comm="syz.4.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa12434eec9 code=0x7ffc0000
[  247.655984][   T29] audit: type=1326 audit(1760634304.300:9753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14780 comm="syz.4.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa1243506f7 code=0x7ffc0000
[  247.680715][   T29] audit: type=1326 audit(1760634304.300:9754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14780 comm="syz.4.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa12434db2a code=0x7ffc0000
[  247.704557][   T29] audit: type=1326 audit(1760634304.300:9755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14780 comm="syz.4.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa12434eec9 code=0x7ffc0000
[  247.728090][   T29] audit: type=1326 audit(1760634304.300:9756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14780 comm="syz.4.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa12434db2a code=0x7ffc0000
[  247.751907][   T29] audit: type=1326 audit(1760634304.300:9757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14780 comm="syz.4.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12434eec9 code=0x7ffc0000
[  247.835743][T14787] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3808'.
[  247.845066][T14787] tipc: Started in network mode
[  247.850043][T14787] tipc: Node identity 7, cluster identity 4711
[  247.856298][T14787] tipc: Node number set to 7
[  247.922496][T14800] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3808'.
[  247.932012][T14800] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3808'.
[  247.978353][T14802] FAULT_INJECTION: forcing a failure.
[  247.978353][T14802] name failslab, interval 1, probability 0, space 0, times 0
[  247.991130][T14802] CPU: 1 UID: 0 PID: 14802 Comm: syz.0.3810 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  247.991175][T14802] Tainted: [W]=WARN
[  247.991184][T14802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  247.991202][T14802] Call Trace:
[  247.991211][T14802]  <TASK>
[  247.991233][T14802]  __dump_stack+0x1d/0x30
[  247.991307][T14802]  dump_stack_lvl+0xe8/0x140
[  247.991331][T14802]  dump_stack+0x15/0x1b
[  247.991353][T14802]  should_fail_ex+0x265/0x280
[  247.991393][T14802]  should_failslab+0x8c/0xb0
[  247.991422][T14802]  kmem_cache_alloc_noprof+0x50/0x480
[  247.991497][T14802]  ? copy_sighand+0x52/0x1b0
[  247.991528][T14802]  copy_sighand+0x52/0x1b0
[  247.991558][T14802]  copy_process+0xcaf/0x2000
[  247.991630][T14802]  kernel_clone+0x16c/0x5c0
[  247.991664][T14802]  __x64_sys_clone+0xe6/0x120
[  247.991712][T14802]  x64_sys_call+0x119c/0x3000
[  247.991809][T14802]  do_syscall_64+0xd2/0x200
[  247.991834][T14802]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  247.991863][T14802]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  247.991902][T14802]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.991931][T14802] RIP: 0033:0x7f1b3183eec9
[  247.991947][T14802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.991967][T14802] RSP: 002b:00007f1b3025cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  247.991992][T14802] RAX: ffffffffffffffda RBX: 00007f1b31a96180 RCX: 00007f1b3183eec9
[  247.992006][T14802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000
[  247.992018][T14802] RBP: 00007f1b3025d090 R08: 0000000000000000 R09: 0000000000000000
[  247.992107][T14802] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  247.992168][T14802] R13: 00007f1b31a96218 R14: 00007f1b31a96180 R15: 00007ffe40435448
[  247.992190][T14802]  </TASK>
[  248.300910][   T36] IPVS: starting estimator thread 0...
[  248.322689][T14811] usb usb8: usbfs: process 14811 (syz.5.3815) did not claim interface 0 before use
[  248.362267][T14812] loop8: detected capacity change from 0 to 2048
[  248.369579][T14811] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  248.394787][T14809] IPVS: using max 2352 ests per chain, 117600 per kthread
[  248.425120][T14812] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  248.443737][T14812] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.508985][T14806] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3814'.
[  248.602254][T10383] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.816254][T14821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3819'.
[  248.825859][T14821] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3819'.
[  248.835004][T14821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3819'.
[  248.867500][T14823] netlink: 'syz.4.3820': attribute type 4 has an invalid length.
[  248.878776][T14823] netlink: 'syz.4.3820': attribute type 4 has an invalid length.
[  249.346865][T14833] loop7: detected capacity change from 0 to 128
[  250.013850][T14846] 9pnet: Could not find request transport: f
[  250.082936][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3823'.
[  250.106637][T14852] bridge0: port 3(gretap0) entered blocking state
[  250.113245][T14852] bridge0: port 3(gretap0) entered disabled state
[  250.121878][T14852] gretap0: entered allmulticast mode
[  250.132767][T14852] gretap0: entered promiscuous mode
[  250.143410][T14852] bridge0: port 3(gretap0) entered blocking state
[  250.149951][T14852] bridge0: port 3(gretap0) entered forwarding state
[  250.170280][T14857] gretap0: left allmulticast mode
[  250.175473][T14857] gretap0: left promiscuous mode
[  250.180760][T14857] bridge0: port 3(gretap0) entered disabled state
[  250.238787][T14856] loop5: detected capacity change from 0 to 2048
[  250.262327][T14856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.346479][T14869] netlink: 'syz.0.3833': attribute type 4 has an invalid length.
[  250.359105][T14869] netlink: 'syz.0.3833': attribute type 4 has an invalid length.
[  250.407081][T14873] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  250.421969][T14874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3835'.
[  250.833158][T14884] netlink: 19 bytes leftover after parsing attributes in process `syz.8.3838'.
[  250.907206][T13482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.278307][T14903] netlink: 'syz.4.3846': attribute type 4 has an invalid length.
[  251.338741][T14903] netlink: 'syz.4.3846': attribute type 4 has an invalid length.
[  251.413357][T14907] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3847'.
[  251.423095][T14907] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3847'.
[  251.554730][ T3542] failed while handling packet from 1:16384
[  251.554757][ T3542] failed while handling packet from 1:16384
[  251.570449][ T3542] failed while handling packet from 1:16384
[  251.591242][ T3542] failed while handling packet from 1:16384
[  251.604695][ T3542] failed while handling packet from 1:16384
[  251.615760][ T3542] failed while handling packet from 1:16384
[  251.621876][ T3542] failed while handling packet from 1:16384
[  251.627868][ T3542] failed while handling packet from 1:16384
[  251.634280][ T3542] failed while handling packet from 1:16384
[  251.659073][ T3542] failed while handling packet from 1:16384
[  251.667246][T14925] usb usb8: usbfs: process 14925 (syz.7.3855) did not claim interface 0 before use
[  251.682767][ T3542] failed while handling packet from 1:16384
[  251.682842][ T3542] failed while handling packet from 1:16384
[  251.692043][ T3542] failed while handling packet from 1:16384
[  251.693626][T14925] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  251.698894][ T3542] failed while handling packet from 1:16384
[  251.711872][ T3542] failed while handling packet from 1:16384
[  251.717803][ T3542] failed while handling packet from 1:16384
[  251.723903][ T3542] failed while handling packet from 1:16384
[  251.730164][ T3542] failed while handling packet from 1:16384
[  251.736381][ T3542] failed while handling packet from 1:16384
[  251.742479][ T3542] failed while handling packet from 1:16384
[  251.749295][ T3542] failed while handling packet from 1:16384
[  251.757915][ T3542] failed while handling packet from 1:16384
[  251.774747][ T3542] failed while handling packet from 1:16384
[  251.780706][ T3542] failed while handling packet from 1:16384
[  251.789743][T14930] loop7: detected capacity change from 0 to 2048
[  251.795301][ T3542] failed while handling packet from 1:16384
[  251.803510][ T3542] failed while handling packet from 1:16384
[  251.810705][ T3542] failed while handling packet from 1:16384
[  251.816868][T14933] ip6tnl1: entered promiscuous mode
[  251.817023][ T3542] failed while handling packet from 1:16384
[  251.832099][T14932] netlink: 'syz.0.3858': attribute type 4 has an invalid length.
[  251.832161][ T3542] failed while handling packet from 1:16384
[  251.842250][T14932] netlink: 'syz.0.3858': attribute type 4 has an invalid length.
[  251.848529][ T3542] failed while handling packet from 1:16384
[  251.855316][T14930] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  251.860619][ T3542] failed while handling packet from 1:16384
[  251.924665][ T3542] failed while handling packet from 1:16384
[  251.938045][ T3542] failed while handling packet from 1:16384
[  251.948097][T14930] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, 
[  251.951173][ T3542] failed while handling packet from 1:16384
[  251.954203][T14930] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  251.976577][ T3542] failed while handling packet from 1:16384
[  251.978714][T14930] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 426 with error 28
[  251.978846][ T3542] failed while handling packet from 1:16384
[  251.984839][T14930] EXT4-fs (loop7): This should not happen!! Data will be lost
[  251.984839][T14930] 
[  252.013533][T14930] EXT4-fs (loop7): Total free blocks count 0
[  252.016708][ T3542] failed while handling packet from 1:16384
[  252.019863][T14930] EXT4-fs (loop7): Free/Dirty block details
[  252.023650][ T3542] failed while handling packet from 1:16384
[  252.025919][T14930] EXT4-fs (loop7): free_blocks=2415919104
[  252.042293][ T3542] failed while handling packet from 1:16384
[  252.043644][T14930] EXT4-fs (loop7): dirty_blocks=432
[  252.055248][T14930] EXT4-fs (loop7): Block reservation details
[  252.061332][T14930] EXT4-fs (loop7): i_reserved_data_blocks=27
[  252.070215][ T3542] failed while handling packet from 1:16384
[  252.070240][ T3542] failed while handling packet from 1:16384
[  252.076258][ T3542] failed while handling packet from 1:16384
[  252.082185][ T3542] failed while handling packet from 1:16384
[  252.088154][ T3542] failed while handling packet from 1:16384
[  252.094074][ T3542] failed while handling packet from 1:16384
[  252.100038][ T3542] failed while handling packet from 1:16384
[  252.106031][ T3542] failed while handling packet from 1:16384
[  252.112014][ T3542] failed while handling packet from 1:16384
[  252.118022][ T3542] failed while handling packet from 1:16384
[  252.124043][ T3542] failed while handling packet from 1:16384
[  252.147662][ T8794] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  252.162731][ T3542] failed while handling packet from 1:16384
[  252.162751][ T3542] failed while handling packet from 1:16384
[  252.169884][ T3542] failed while handling packet from 1:16384
[  252.189243][T14949] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3862'.
[  252.204408][ T3542] failed while handling packet from 1:16384
[  252.204433][ T3542] failed while handling packet from 1:16384
[  252.210536][ T3542] failed while handling packet from 1:16384
[  252.211119][T14947] FAULT_INJECTION: forcing a failure.
[  252.211119][T14947] name failslab, interval 1, probability 0, space 0, times 0
[  252.216778][ T3542] failed while handling packet from 1:16384
[  252.222653][T14947] CPU: 1 UID: 0 PID: 14947 Comm: syz.8.3863 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  252.222761][T14947] Tainted: [W]=WARN
[  252.222771][T14947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  252.222848][T14947] Call Trace:
[  252.222859][T14947]  <TASK>
[  252.222872][T14947]  __dump_stack+0x1d/0x30
[  252.222941][T14947]  dump_stack_lvl+0xe8/0x140
[  252.222970][T14947]  dump_stack+0x15/0x1b
[  252.223062][T14947]  should_fail_ex+0x265/0x280
[  252.223114][T14947]  should_failslab+0x8c/0xb0
[  252.223173][T14947]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  252.223214][T14947]  ? __alloc_skb+0x101/0x320
[  252.223252][T14947]  __alloc_skb+0x101/0x320
[  252.223318][T14947]  ? audit_log_start+0x342/0x720
[  252.223362][T14947]  audit_log_start+0x3a0/0x720
[  252.223390][T14947]  ? kstrtouint+0x76/0xc0
[  252.223437][T14947]  audit_seccomp+0x48/0x100
[  252.223600][T14947]  ? __seccomp_filter+0x82d/0x1250
[  252.223638][T14947]  __seccomp_filter+0x83e/0x1250
[  252.223677][T14947]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  252.223721][T14947]  ? vfs_write+0x7e8/0x960
[  252.223779][T14947]  ? __rcu_read_unlock+0x4f/0x70
[  252.223816][T14947]  ? __fget_files+0x184/0x1c0
[  252.223857][T14947]  __secure_computing+0x82/0x150
[  252.223902][T14947]  syscall_trace_enter+0xcf/0x1e0
[  252.223944][T14947]  do_syscall_64+0xac/0x200
[  252.223980][T14947]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  252.224018][T14947]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  252.224054][T14947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.224083][T14947] RIP: 0033:0x7fe5a587eec9
[  252.224099][T14947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  252.224120][T14947] RSP: 002b:00007fe5a42e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067
[  252.224229][T14947] RAX: ffffffffffffffda RBX: 00007fe5a5ad5fa0 RCX: 00007fe5a587eec9
[  252.224250][T14947] RDX: 00000000000000c2 RSI: 0000200000000fc0 RDI: 0000000000000002
[  252.224268][T14947] RBP: 00007fe5a42e7090 R08: 0000000000000000 R09: 0000000000000000
[  252.224286][T14947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  252.224311][T14947] R13: 00007fe5a5ad6038 R14: 00007fe5a5ad5fa0 R15: 00007ffc9ba0b808
[  252.224341][T14947]  </TASK>
[  252.469851][ T3542] failed while handling packet from 1:16384
[  252.469893][ T3542] failed while handling packet from 1:16384
[  252.476198][ T3542] failed while handling packet from 1:16384
[  252.482118][ T3542] failed while handling packet from 1:16384
[  252.488172][ T3542] failed while handling packet from 1:16384
[  252.494174][ T3542] failed while handling packet from 1:16384
[  252.500234][ T3542] failed while handling packet from 1:16384
[  252.506382][ T3542] failed while handling packet from 1:16384
[  252.512337][ T3542] failed while handling packet from 1:16384
[  252.524469][T14959] loop7: detected capacity change from 0 to 512
[  252.527637][ T3542] failed while handling packet from 1:16384
[  252.539877][T14959] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #15: comm syz.7.3867: corrupted inode contents
[  252.544052][ T3542] failed while handling packet from 1:16384
[  252.553349][T14959] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem
[  252.557916][ T3542] failed while handling packet from 1:16384
[  252.573099][ T3542] failed while handling packet from 1:16384
[  252.579489][ T3542] failed while handling packet from 1:16384
[  252.585532][ T3542] failed while handling packet from 1:16384
[  252.586536][T14959] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #15: comm syz.7.3867: corrupted inode contents
[  252.591556][ T3542] failed while handling packet from 1:16384
[  252.591588][ T3542] failed while handling packet from 1:16384
[  252.591605][ T3542] failed while handling packet from 1:16384
[  252.610519][T14959] EXT4-fs error (device loop7): ext4_evict_inode:302: inode #15: comm syz.7.3867: mark_inode_dirty error
[  252.616343][ T3542] failed while handling packet from 1:16384
[  252.632315][T14959] EXT4-fs (loop7): 1 orphan inode deleted
[  252.639627][ T3542] failed while handling packet from 1:16384
[  252.651381][ T3542] failed while handling packet from 1:16384
[  252.653875][T14959] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.657529][ T3542] failed while handling packet from 1:16384
[  252.675748][ T3542] failed while handling packet from 1:16384
[  252.681919][ T3542] failed while handling packet from 1:16384
[  252.683230][ T8794] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.688140][ T3542] failed while handling packet from 1:16384
[  252.703684][ T3542] failed while handling packet from 1:16384
[  252.724290][ T3542] failed while handling packet from 1:16384
[  252.730481][ T3542] failed while handling packet from 1:16384
[  252.740257][T14969] netlink: 'syz.7.3871': attribute type 4 has an invalid length.
[  252.740761][ T3542] failed while handling packet from 1:16384
[  252.754410][ T3542] failed while handling packet from 1:16384
[  252.758056][T14969] netlink: 'syz.7.3871': attribute type 4 has an invalid length.
[  252.760440][ T3542] failed while handling packet from 1:16384
[  252.774110][ T3542] failed while handling packet from 1:16384
[  252.782176][ T3542] failed while handling packet from 1:16384
[  252.788491][ T3542] failed while handling packet from 1:16384
[  252.794864][ T3542] failed while handling packet from 1:16384
[  252.804648][ T3542] failed while handling packet from 1:16384
[  252.818960][ T3542] failed while handling packet from 1:16384
[  252.825893][ T3542] failed while handling packet from 1:16384
[  252.832323][ T3542] failed while handling packet from 1:16384
[  252.838882][ T3542] failed while handling packet from 1:16384
[  252.846206][ T3542] failed while handling packet from 1:16384
[  252.868597][   T29] kauditd_printk_skb: 211 callbacks suppressed
[  252.868614][   T29] audit: type=1326 audit(1760634309.640:9967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14977 comm="syz.8.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a587eec9 code=0x7ffc0000
[  252.895360][ T3542] failed while handling packet from 1:16384
[  252.923665][ T3542] failed while handling packet from 1:16384
[  252.930580][T14974] loop5: detected capacity change from 0 to 2048
[  252.933443][   T29] audit: type=1326 audit(1760634309.680:9968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14977 comm="syz.8.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5a587eec9 code=0x7ffc0000
[  252.943203][ T3542] failed while handling packet from 1:16384
[  252.943813][   T29] audit: type=1326 audit(1760634309.680:9969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14977 comm="syz.8.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a587eec9 code=0x7ffc0000
[  252.997288][   T29] audit: type=1326 audit(1760634309.680:9970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14977 comm="syz.8.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a587eec9 code=0x7ffc0000
[  253.009390][ T3542] failed while handling packet from 1:16384
[  253.021179][   T29] audit: type=1326 audit(1760634309.680:9971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14977 comm="syz.8.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5a587eec9 code=0x7ffc0000
[  253.036809][ T3542] failed while handling packet from 1:16384
[  253.051463][   T29] audit: type=1326 audit(1760634309.680:9972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14977 comm="syz.8.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a587eec9 code=0x7ffc0000
[  253.081561][   T29] audit: type=1326 audit(1760634309.680:9973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14977 comm="syz.8.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a587eec9 code=0x7ffc0000
[  253.091581][ T3542] failed while handling packet from 1:16384
[  253.105452][   T29] audit: type=1326 audit(1760634309.680:9974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14977 comm="syz.8.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5a587eec9 code=0x7ffc0000
[  253.106834][ T3542] failed while handling packet from 1:16384
[  253.111379][   T29] audit: type=1326 audit(1760634309.680:9975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14977 comm="syz.8.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a587eec9 code=0x7ffc0000
[  253.165795][   T29] audit: type=1326 audit(1760634309.680:9976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14977 comm="syz.8.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a587eec9 code=0x7ffc0000
[  253.213905][ T3542] failed while handling packet from 1:16384
[  253.213931][ T3542] failed while handling packet from 1:16384
[  253.222156][T14974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  253.240844][ T3542] failed while handling packet from 1:16384
[  253.240871][ T3542] failed while handling packet from 1:16384
[  253.252649][ T3542] failed while handling packet from 1:16384
[  253.258726][ T3542] failed while handling packet from 1:16384
[  253.264830][ T3542] failed while handling packet from 1:16384
[  253.270913][ T3542] failed while handling packet from 1:16384
[  253.282394][ T3542] failed while handling packet from 1:16384
[  253.288584][ T3542] failed while handling packet from 1:16384
[  253.295417][ T3542] failed while handling packet from 1:16384
[  253.301629][ T3542] failed while handling packet from 1:16384
[  253.319926][T13482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  253.336987][ T3542] failed while handling packet from 1:16384
[  253.337015][ T3542] failed while handling packet from 1:16384
[  253.343020][ T3542] failed while handling packet from 1:16384
[  253.354889][T14984] loop8: detected capacity change from 0 to 512
[  253.392207][T14984] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  253.438923][ T3542] failed while handling packet from 1:16384
[  253.438954][ T3542] failed while handling packet from 1:16384
[  253.451908][ T3542] failed while handling packet from 1:16384
[  253.460638][ T3542] failed while handling packet from 1:16384
[  253.468565][T14984] EXT4-fs (loop8): 1 orphan inode deleted
[  253.474894][ T3542] failed while handling packet from 1:16384
[  253.480498][ T3542] failed while handling packet from 1:16384
[  253.481006][T14984] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.486970][ T3542] failed while handling packet from 1:16384
[  253.497287][ T8280] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:29: Failed to release dquot type 1
[  253.505590][ T3542] failed while handling packet from 1:16384
[  253.524867][ T3542] failed while handling packet from 1:16384
[  253.530859][ T3542] failed while handling packet from 1:16384
[  253.536975][ T3542] failed while handling packet from 1:16384
[  253.542986][ T3542] failed while handling packet from 1:16384
[  253.543552][T14984] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  253.549155][ T3542] failed while handling packet from 1:16384
[  253.565509][ T3542] failed while handling packet from 1:16384
[  253.571674][ T3542] failed while handling packet from 1:16384
[  253.577860][ T3542] failed while handling packet from 1:16384
[  253.584414][T14984] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.584619][ T3542] failed while handling packet from 1:16384
[  253.605526][T15001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3881'.
[  253.611593][ T3542] failed while handling packet from 1:16384
[  253.620539][ T3542] failed while handling packet from 1:16384
[  253.626618][ T3542] failed while handling packet from 1:16384
[  253.637572][ T3542] failed while handling packet from 1:16384
[  253.643735][ T3542] failed while handling packet from 1:16384
[  253.651863][T15001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3881'.
[  253.664702][ T3542] failed while handling packet from 1:16384
[  253.668600][ T3542] failed while handling packet from 1:16384
[  253.691104][ T3542] failed while handling packet from 1:16384
[  253.699494][ T3542] failed while handling packet from 1:16384
[  253.705536][ T3542] failed while handling packet from 1:16384
[  253.711554][ T3542] failed while handling packet from 1:16384
[  253.719392][ T3542] failed while handling packet from 1:16384
[  253.725570][ T3542] failed while handling packet from 1:16384
[  253.731968][ T3542] failed while handling packet from 1:16384
[  253.739193][ T3542] failed while handling packet from 1:16384
[  253.745550][ T3542] failed while handling packet from 1:16384
[  254.272311][ T3542] failed while handling packet from 1:16384
[  254.278671][ T3542] failed while handling packet from 1:16384
[  254.432877][T15007] loop5: detected capacity change from 0 to 128
[  254.634823][ T3542] failed while handling packet from 1:16384
[  254.634869][ T3542] failed while handling packet from 1:16384
[  254.640835][ T3542] failed while handling packet from 1:16384
[  254.647025][ T3542] failed while handling packet from 1:16384
[  254.653046][ T3542] failed while handling packet from 1:16384
[  254.659342][ T3542] failed while handling packet from 1:16384
[  254.777270][T15015] validate_nla: 1 callbacks suppressed
[  254.777287][T15015] netlink: 'syz.7.3887': attribute type 4 has an invalid length.
[  254.789246][ T3542] failed while handling packet from 1:16384
[  254.857182][ T3542] failed while handling packet from 1:16384
[  254.857484][T15016] netlink: 'syz.7.3887': attribute type 4 has an invalid length.
[  254.863283][ T3542] failed while handling packet from 1:16384
[  254.877279][ T3542] failed while handling packet from 1:16384
[  254.883369][ T3542] failed while handling packet from 1:16384
[  254.891515][ T3542] failed while handling packet from 1:16384
[  254.891976][T13482] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fff0000)
[  254.898515][ T3542] failed while handling packet from 1:16384
[  254.903527][T13482] FAT-fs (loop5): Filesystem has been set read-only
[  254.912765][ T3542] failed while handling packet from 1:16384
[  254.924276][ T3542] failed while handling packet from 1:16384
[  254.942778][ T3542] failed while handling packet from 1:16384
[  254.948796][ T3542] failed while handling packet from 1:16384
[  254.960583][ T3542] failed while handling packet from 1:16384
[  254.974655][ T3542] failed while handling packet from 1:16384
[  254.984643][ T3542] failed while handling packet from 1:16384
[  255.046641][ T3542] failed while handling packet from 1:16384
[  255.052953][ T3542] failed while handling packet from 1:16384
[  255.060143][ T3542] failed while handling packet from 1:16384
[  255.067784][T15023] IPv6: Can't replace route, no match found
[  255.083631][ T3542] failed while handling packet from 1:16384
[  255.083656][ T3542] failed while handling packet from 1:16384
[  255.089716][ T3542] failed while handling packet from 1:16384
[  255.095673][ T3542] failed while handling packet from 1:16384
[  255.101739][ T3542] failed while handling packet from 1:16384
[  255.108223][ T3542] failed while handling packet from 1:16384
[  255.114221][ T3542] failed while handling packet from 1:16384
[  255.120509][ T3542] failed while handling packet from 1:16384
[  255.126638][ T3542] failed while handling packet from 1:16384
[  255.149518][ T3542] failed while handling packet from 1:16384
[  255.191605][ T3542] failed while handling packet from 1:16384
[  255.198474][ T3542] failed while handling packet from 1:16384
[  255.204562][ T3542] failed while handling packet from 1:16384
[  255.209680][T15035] usb usb8: usbfs: process 15035 (syz.8.3896) did not claim interface 0 before use
[  255.210981][ T3542] failed while handling packet from 1:16384
[  255.224835][T15035] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  255.226276][ T3542] failed while handling packet from 1:16384
[  255.264441][T15038] usb usb8: usbfs: process 15038 (syz.7.3897) did not claim interface 0 before use
[  255.274976][ T3542] failed while handling packet from 1:16384
[  255.275003][ T3542] failed while handling packet from 1:16384
[  255.281108][ T3542] failed while handling packet from 1:16384
[  255.297156][ T3542] failed while handling packet from 1:16384
[  255.312803][ T3542] failed while handling packet from 1:16384
[  255.318980][ T3542] failed while handling packet from 1:16384
[  255.326046][ T3542] failed while handling packet from 1:16384
[  255.340799][T15046] loop4: detected capacity change from 0 to 764
[  255.355297][T15046] rock: directory entry would overflow storage
[  255.361796][T15046] rock: sig=0x5245, size=8, remaining=5
[  255.371078][ T3542] failed while handling packet from 1:16384
[  255.371103][ T3542] failed while handling packet from 1:16384
[  255.436245][T15046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3901'.
[  255.479130][ T3542] failed while handling packet from 1:16384
[  255.479153][ T3542] failed while handling packet from 1:16384
[  255.485173][ T3542] failed while handling packet from 1:16384
[  255.495684][ T3542] failed while handling packet from 1:16384
[  255.502044][ T3542] failed while handling packet from 1:16384
[  255.506140][T15055] loop7: detected capacity change from 0 to 512
[  255.508154][ T3542] failed while handling packet from 1:16384
[  255.520578][ T3542] failed while handling packet from 1:16384
[  255.533197][ T3542] failed while handling packet from 1:16384
[  255.556041][ T3542] failed while handling packet from 1:16384
[  255.563454][ T3542] failed while handling packet from 1:16384
[  255.571283][ T3542] failed while handling packet from 1:16384
[  255.589897][T15057] usb usb8: usbfs: process 15057 (syz.4.3904) did not claim interface 0 before use
[  255.605631][ T3542] failed while handling packet from 1:16384
[  255.605657][ T3542] failed while handling packet from 1:16384
[  255.611924][ T3542] failed while handling packet from 1:16384
[  255.619730][ T3542] failed while handling packet from 1:16384
[  255.625888][ T3542] failed while handling packet from 1:16384
[  255.632059][ T3542] failed while handling packet from 1:16384
[  255.638094][ T3542] failed while handling packet from 1:16384
[  255.644218][ T3542] failed while handling packet from 1:16384
[  255.652829][ T3542] failed while handling packet from 1:16384
[  255.658941][ T3542] failed while handling packet from 1:16384
[  255.683150][ T3542] failed while handling packet from 1:16384
[  255.705238][T15061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3902'.
[  255.727991][ T3542] failed while handling packet from 1:16384
[  255.731157][T15057] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  255.747386][T15061] bridge0: port 3(gretap0) entered blocking state
[  255.754093][T15061] bridge0: port 3(gretap0) entered disabled state
[  255.761475][T15061] gretap0: entered allmulticast mode
[  255.767955][T15061] gretap0: entered promiscuous mode
[  255.773660][T15061] bridge0: port 3(gretap0) entered blocking state
[  255.780343][T15061] bridge0: port 3(gretap0) entered forwarding state
[  255.789136][T15061] gretap0: left allmulticast mode
[  255.794254][T15061] gretap0: left promiscuous mode
[  255.799600][T15061] bridge0: port 3(gretap0) entered disabled state
[  256.219396][T15072] loop8: detected capacity change from 0 to 128
[  256.293980][T15075] usb usb8: usbfs: process 15075 (syz.7.3910) did not claim interface 0 before use
[  256.334646][T15075] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  256.398851][T15079] FAULT_INJECTION: forcing a failure.
[  256.398851][T15079] name failslab, interval 1, probability 0, space 0, times 0
[  256.411820][T15079] CPU: 0 UID: 0 PID: 15079 Comm: syz.7.3912 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  256.411896][T15079] Tainted: [W]=WARN
[  256.411903][T15079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  256.411918][T15079] Call Trace:
[  256.411927][T15079]  <TASK>
[  256.411938][T15079]  __dump_stack+0x1d/0x30
[  256.411969][T15079]  dump_stack_lvl+0xe8/0x140
[  256.411994][T15079]  dump_stack+0x15/0x1b
[  256.412079][T15079]  should_fail_ex+0x265/0x280
[  256.412192][T15079]  should_failslab+0x8c/0xb0
[  256.412230][T15079]  kmem_cache_alloc_noprof+0x50/0x480
[  256.412305][T15079]  ? skb_clone+0x151/0x1f0
[  256.412340][T15079]  skb_clone+0x151/0x1f0
[  256.412379][T15079]  __netlink_deliver_tap+0x2c9/0x500
[  256.412462][T15079]  ? netlink_attachskb+0x2cc/0x650
[  256.412514][T15079]  netlink_sendskb+0x126/0x150
[  256.412540][T15079]  netlink_unicast+0x2a2/0x690
[  256.412568][T15079]  netlink_ack+0x4c8/0x500
[  256.412607][T15079]  netlink_rcv_skb+0x192/0x220
[  256.412704][T15079]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  256.412760][T15079]  rtnetlink_rcv+0x1c/0x30
[  256.412866][T15079]  netlink_unicast+0x5c0/0x690
[  256.412894][T15079]  netlink_sendmsg+0x58b/0x6b0
[  256.412928][T15079]  ? __pfx_netlink_sendmsg+0x10/0x10
[  256.412994][T15079]  __sock_sendmsg+0x145/0x180
[  256.413020][T15079]  ____sys_sendmsg+0x345/0x4e0
[  256.413053][T15079]  ___sys_sendmsg+0x17b/0x1d0
[  256.413098][T15079]  __sys_sendmmsg+0x178/0x300
[  256.413258][T15079]  __x64_sys_sendmmsg+0x57/0x70
[  256.413299][T15079]  x64_sys_call+0x1c4a/0x3000
[  256.413330][T15079]  do_syscall_64+0xd2/0x200
[  256.413425][T15079]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  256.413462][T15079]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  256.413513][T15079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.413541][T15079] RIP: 0033:0x7fb9f75beec9
[  256.413560][T15079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  256.413628][T15079] RSP: 002b:00007fb9f6027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  256.413719][T15079] RAX: ffffffffffffffda RBX: 00007fb9f7815fa0 RCX: 00007fb9f75beec9
[  256.413734][T15079] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[  256.413752][T15079] RBP: 00007fb9f6027090 R08: 0000000000000000 R09: 0000000000000000
[  256.413770][T15079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  256.413816][T15079] R13: 00007fb9f7816038 R14: 00007fb9f7815fa0 R15: 00007fff89c8de18
[  256.413852][T15079]  </TASK>
[  256.414131][T15079] netlink: 'syz.7.3912': attribute type 30 has an invalid length.
[  256.566001][T15086] IPv6: Can't replace route, no match found
[  256.737554][T15090] loop5: detected capacity change from 0 to 2048
[  256.771432][T15090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  256.808771][T13482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  256.905709][T15102] ip6t_REJECT: ECHOREPLY is not supported
[  256.966887][T15107] loop7: detected capacity change from 0 to 764
[  256.986062][T15107] rock: directory entry would overflow storage
[  256.992341][T15107] rock: sig=0x5245, size=8, remaining=5
[  257.036644][T15118] SELinux:  policydb magic number 0xff8c155f does not match expected magic number 0xf97cff8c
[  257.067641][T15118] SELinux: failed to load policy
[  257.091264][T15122] loop8: detected capacity change from 0 to 2048
[  257.094806][T15107] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3923'.
[  257.116685][T15122] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  257.160077][T10383] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  257.529374][T15137] loop4: detected capacity change from 0 to 128
[  257.540093][T15136] usb usb8: usbfs: process 15136 (syz.5.3934) did not claim interface 0 before use
[  257.549842][T15136] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  257.809462][T15143] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3932'.
[  257.838341][T15145] loop5: detected capacity change from 0 to 512
[  257.849941][T15143] bridge0: port 1(gretap0) entered blocking state
[  257.856548][T15143] bridge0: port 1(gretap0) entered disabled state
[  257.871756][T15143] gretap0: entered allmulticast mode
[  257.878375][T15143] gretap0: entered promiscuous mode
[  257.884194][T15143] bridge0: port 1(gretap0) entered blocking state
[  257.890754][T15143] bridge0: port 1(gretap0) entered forwarding state
[  257.902318][T15149] usb usb8: usbfs: process 15149 (syz.8.3933) did not claim interface 0 before use
[  257.913038][T15150] gretap0: left allmulticast mode
[  257.918219][T15150] gretap0: left promiscuous mode
[  257.923306][T15150] bridge0: port 1(gretap0) entered disabled state
[  257.926178][T15149] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  258.090424][T15165] loop8: detected capacity change from 0 to 764
[  258.100888][T15165] rock: directory entry would overflow storage
[  258.107220][T15165] rock: sig=0x5245, size=8, remaining=5
[  258.135607][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3942'.
[  258.144538][T15166] netlink: 'syz.4.3942': attribute type 30 has an invalid length.
[  258.182235][   T29] kauditd_printk_skb: 221 callbacks suppressed
[  258.182253][   T29] audit: type=1326 audit(1760634314.950:10197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15172 comm="syz.0.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3183eec9 code=0x7ffc0000
[  258.186895][T15165] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3943'.
[  258.189113][   T29] audit: type=1326 audit(1760634314.970:10198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15172 comm="syz.0.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b3183d710 code=0x7ffc0000
[  258.254665][   T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  258.262948][   T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  258.290384][   T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  258.300627][   T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  258.309976][T15178] usb usb8: usbfs: process 15178 (syz.7.3946) did not claim interface 0 before use
[  258.327659][T15178] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  258.328939][   T29] audit: type=1326 audit(1760634315.020:10199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15172 comm="syz.0.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1b318406f7 code=0x7ffc0000
[  258.358753][   T29] audit: type=1326 audit(1760634315.020:10200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15172 comm="syz.0.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b3183eec9 code=0x7ffc0000
[  258.382601][   T29] audit: type=1326 audit(1760634315.020:10201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15172 comm="syz.0.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1b318406f7 code=0x7ffc0000
[  258.406687][   T29] audit: type=1326 audit(1760634315.020:10202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15172 comm="syz.0.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1b3183db2a code=0x7ffc0000
[  258.430312][   T29] audit: type=1326 audit(1760634315.020:10203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15172 comm="syz.0.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1b3183eec9 code=0x7ffc0000
[  258.454526][   T29] audit: type=1326 audit(1760634315.020:10204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15172 comm="syz.0.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1b3183db2a code=0x7ffc0000
[  258.478351][   T29] audit: type=1326 audit(1760634315.020:10205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15172 comm="syz.0.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3183eec9 code=0x7ffc0000
[  258.502374][   T29] audit: type=1326 audit(1760634315.020:10206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15172 comm="syz.0.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3183eec9 code=0x7ffc0000
[  258.507600][T15191] usb usb8: usbfs: process 15191 (syz.4.3950) did not claim interface 0 before use
[  258.539983][T15188] loop7: detected capacity change from 0 to 512
[  258.554918][T15191] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  258.608882][T15203] FAULT_INJECTION: forcing a failure.
[  258.608882][T15203] name failslab, interval 1, probability 0, space 0, times 0
[  258.621686][T15203] CPU: 0 UID: 0 PID: 15203 Comm: syz.8.3953 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  258.621752][T15203] Tainted: [W]=WARN
[  258.621760][T15203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  258.621774][T15203] Call Trace:
[  258.621781][T15203]  <TASK>
[  258.621790][T15203]  __dump_stack+0x1d/0x30
[  258.621814][T15203]  dump_stack_lvl+0xe8/0x140
[  258.621893][T15203]  dump_stack+0x15/0x1b
[  258.621911][T15203]  should_fail_ex+0x265/0x280
[  258.622013][T15203]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  258.622038][T15203]  should_failslab+0x8c/0xb0
[  258.622137][T15203]  kmem_cache_alloc_lru_noprof+0x55/0x490
[  258.622168][T15203]  ? shmem_alloc_inode+0x34/0x50
[  258.622192][T15203]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  258.622243][T15203]  shmem_alloc_inode+0x34/0x50
[  258.622266][T15203]  alloc_inode+0x40/0x170
[  258.622326][T15203]  new_inode+0x1d/0xe0
[  258.622358][T15203]  shmem_get_inode+0x244/0x750
[  258.622383][T15203]  ? __se_sys_memfd_create+0x1cc/0x590
[  258.622415][T15203]  __shmem_file_setup+0x113/0x210
[  258.622559][T15203]  shmem_file_setup+0x3b/0x50
[  258.622635][T15203]  __se_sys_memfd_create+0x2c3/0x590
[  258.622665][T15203]  __x64_sys_memfd_create+0x31/0x40
[  258.622693][T15203]  x64_sys_call+0x2ac2/0x3000
[  258.622763][T15203]  do_syscall_64+0xd2/0x200
[  258.622795][T15203]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  258.622830][T15203]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  258.622860][T15203]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.622951][T15203] RIP: 0033:0x7fe5a587eec9
[  258.622971][T15203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  258.622993][T15203] RSP: 002b:00007fe5a42e6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  258.623072][T15203] RAX: ffffffffffffffda RBX: 0000000000000553 RCX: 00007fe5a587eec9
[  258.623088][T15203] RDX: 00007fe5a42e6ef0 RSI: 0000000000000000 RDI: 00007fe5a5902960
[  258.623146][T15203] RBP: 0000200000001080 R08: 00007fe5a42e6bb7 R09: 00007fe5a42e6e40
[  258.623196][T15203] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000
[  258.623212][T15203] R13: 00007fe5a42e6ef0 R14: 00007fe5a42e6eb0 R15: 00002000000004c0
[  258.623238][T15203]  </TASK>
[  259.371265][T15214] loop8: detected capacity change from 0 to 764
[  259.379020][T15214] rock: directory entry would overflow storage
[  259.385287][T15214] rock: sig=0x5245, size=8, remaining=5
[  259.406539][T15215] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3957'.
[  259.422809][T15215] bridge0: port 1(gretap0) entered blocking state
[  259.429369][T15215] bridge0: port 1(gretap0) entered disabled state
[  259.446247][T15215] gretap0: entered allmulticast mode
[  259.482862][T15215] gretap0: entered promiscuous mode
[  259.488677][T15215] bridge0: port 1(gretap0) entered blocking state
[  259.492251][T15222] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3958'.
[  259.495441][T15215] bridge0: port 1(gretap0) entered forwarding state
[  259.496980][T15219] gretap0: left allmulticast mode
[  259.516741][T15219] gretap0: left promiscuous mode
[  259.522090][T15219] bridge0: port 1(gretap0) entered disabled state
[  259.542781][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3960'.
[  259.584711][T15226] loop5: detected capacity change from 0 to 512
[  259.598599][T15226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.600024][T15234] netlink: 'syz.0.3962': attribute type 4 has an invalid length.
[  259.619793][T15226] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  259.625007][T15234] netlink: 'syz.0.3962': attribute type 4 has an invalid length.
[  259.646398][T15237] usb usb8: usbfs: process 15237 (syz.4.3963) did not claim interface 0 before use
[  259.673067][T15237] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  259.682548][T13482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.711045][T15244] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3966'.
[  259.720270][T15242] loop5: detected capacity change from 0 to 512
[  260.187965][T15262] loop8: detected capacity change from 0 to 128
[  260.254077][T15259] loop4: detected capacity change from 0 to 764
[  260.268138][T15259] rock: directory entry would overflow storage
[  260.274453][T15259] rock: sig=0x5245, size=8, remaining=5
[  260.392925][T15261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3972'.
[  260.514553][T15271] pim6reg1: entered promiscuous mode
[  260.520112][T15271] pim6reg1: entered allmulticast mode
[  260.548256][T15275] netlink: 'syz.7.3975': attribute type 4 has an invalid length.
[  260.559286][T15275] netlink: 'syz.7.3975': attribute type 4 has an invalid length.
[  260.605991][T15279] usb usb8: usbfs: process 15279 (syz.4.3977) did not claim interface 0 before use
[  260.616052][T15279] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  260.712190][T15284] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3979'.
[  260.727626][T15282] loop5: detected capacity change from 0 to 512
[  260.781406][T15292] loop8: detected capacity change from 0 to 764
[  260.792689][T15292] rock: directory entry would overflow storage
[  260.798936][T15292] rock: sig=0x5245, size=8, remaining=5
[  260.841015][T15304] usb usb8: usbfs: process 15304 (syz.5.3987) did not claim interface 0 before use
[  260.854991][T15304] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  260.909003][T15312] usb usb8: usbfs: process 15312 (syz.7.3991) did not claim interface 0 before use
[  260.909857][T15314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15314 comm=+}[@
[  260.930779][T15312] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  261.267960][T15323] loop8: detected capacity change from 0 to 128
[  261.440774][T15327] loop5: detected capacity change from 0 to 512
[  261.538104][T15343] usb usb8: usbfs: process 15343 (syz.4.4003) did not claim interface 0 before use
[  261.551978][T15343] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  261.552475][T15344] loop5: detected capacity change from 0 to 764
[  261.585113][T15344] rock: directory entry would overflow storage
[  261.591334][T15344] rock: sig=0x5245, size=8, remaining=5
[  261.613009][T15344] team0: Port device team_slave_1 removed
[  261.631075][T15351] netlink: 'syz.4.4006': attribute type 4 has an invalid length.
[  261.642450][T15351] netlink: 'syz.4.4006': attribute type 4 has an invalid length.
[  261.720580][T15359] loop4: detected capacity change from 0 to 512
[  261.845636][T15369] loop4: detected capacity change from 0 to 164
[  261.856119][T15369] iso9660: Corrupted directory entry in block 4 of inode 1792
[  261.891231][T15374] netlink: 'syz.0.4018': attribute type 4 has an invalid length.
[  261.902404][T15374] netlink: 'syz.0.4018': attribute type 4 has an invalid length.
[  261.935120][T15381] usb usb8: usbfs: process 15381 (syz.0.4020) did not claim interface 0 before use
[  261.945137][T15381] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  262.289593][T15415] netlink: 'syz.4.4032': attribute type 4 has an invalid length.
[  262.300451][T15415] netlink: 'syz.4.4032': attribute type 4 has an invalid length.
[  262.357397][T15420] loop4: detected capacity change from 0 to 2048
[  262.376877][T15420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  262.448882][T15420] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  262.464330][T15420] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1984 with error 28
[  262.476885][T15420] EXT4-fs (loop4): This should not happen!! Data will be lost
[  262.476885][T15420] 
[  262.486565][T15420] EXT4-fs (loop4): Total free blocks count 0
[  262.492573][T15420] EXT4-fs (loop4): Free/Dirty block details
[  262.498551][T15420] EXT4-fs (loop4): free_blocks=2415919104
[  262.504482][T15420] EXT4-fs (loop4): dirty_blocks=2000
[  262.509921][T15420] EXT4-fs (loop4): Block reservation details
[  262.516134][T15420] EXT4-fs (loop4): i_reserved_data_blocks=125
[  262.577863][T15433] __nla_validate_parse: 6 callbacks suppressed
[  262.577883][T15433] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4037'.
[  262.605347][T12174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  262.627982][T15437] loop5: detected capacity change from 0 to 512
[  262.636480][T15436] loop7: detected capacity change from 0 to 2048
[  262.646600][T15436] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  262.674687][T15437] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.4040: bad orphan inode 11862016
[  262.686566][T15437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  262.708102][T15437] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  262.734152][T15436] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  262.749674][T15436] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1566 with error 28
[  262.750715][T13482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  262.762254][T15436] EXT4-fs (loop7): This should not happen!! Data will be lost
[  262.762254][T15436] 
[  262.762276][T15436] EXT4-fs (loop7): Total free blocks count 0
[  262.787881][T15436] EXT4-fs (loop7): Free/Dirty block details
[  262.794180][T15436] EXT4-fs (loop7): free_blocks=2415919104
[  262.799972][T15436] EXT4-fs (loop7): dirty_blocks=1568
[  262.805532][T15436] EXT4-fs (loop7): Block reservation details
[  262.811826][T15436] EXT4-fs (loop7): i_reserved_data_blocks=98
[  262.907548][ T8794] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  262.971569][T15464] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  263.005472][T15465] FAULT_INJECTION: forcing a failure.
[  263.005472][T15465] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  263.018972][T15465] CPU: 0 UID: 0 PID: 15465 Comm: syz.8.4047 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  263.019010][T15465] Tainted: [W]=WARN
[  263.019018][T15465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  263.019098][T15465] Call Trace:
[  263.019107][T15465]  <TASK>
[  263.019118][T15465]  __dump_stack+0x1d/0x30
[  263.019145][T15465]  dump_stack_lvl+0xe8/0x140
[  263.019225][T15465]  dump_stack+0x15/0x1b
[  263.019246][T15465]  should_fail_ex+0x265/0x280
[  263.019292][T15465]  should_fail+0xb/0x20
[  263.019336][T15465]  should_fail_usercopy+0x1a/0x20
[  263.019434][T15465]  _copy_from_user+0x1c/0xb0
[  263.019512][T15465]  ___sys_sendmsg+0xc1/0x1d0
[  263.019587][T15465]  __x64_sys_sendmsg+0xd4/0x160
[  263.019625][T15465]  x64_sys_call+0x191e/0x3000
[  263.019711][T15465]  do_syscall_64+0xd2/0x200
[  263.019738][T15465]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  263.019769][T15465]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  263.019795][T15465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.019880][T15465] RIP: 0033:0x7fe5a587eec9
[  263.019898][T15465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.019919][T15465] RSP: 002b:00007fe5a42e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  263.019972][T15465] RAX: ffffffffffffffda RBX: 00007fe5a5ad5fa0 RCX: 00007fe5a587eec9
[  263.019987][T15465] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000003
[  263.020001][T15465] RBP: 00007fe5a42e7090 R08: 0000000000000000 R09: 0000000000000000
[  263.020020][T15465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  263.020033][T15465] R13: 00007fe5a5ad6038 R14: 00007fe5a5ad5fa0 R15: 00007ffc9ba0b808
[  263.020056][T15465]  </TASK>
[  263.204360][   T29] kauditd_printk_skb: 344 callbacks suppressed
[  263.204376][   T29] audit: type=1400 audit(1760634319.980:10551): avc:  denied  { module_request } for  pid=15459 comm="syz.7.4045" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0
[  263.233557][   T29] audit: type=1400 audit(1760634319.980:10552): avc:  denied  { sys_module } for  pid=15459 comm="syz.7.4045" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0
[  263.268241][   T29] audit: type=1400 audit(1760634320.030:10553): avc:  denied  { read write } for  pid=10383 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  263.339823][   T29] audit: type=1400 audit(1760634320.070:10554): avc:  denied  { read write } for  pid=8794 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  263.364669][   T29] audit: type=1326 audit(1760634320.070:10555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3183eec9 code=0x7ffc0000
[  263.388374][   T29] audit: type=1326 audit(1760634320.070:10556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3183eec9 code=0x7ffc0000
[  263.412278][   T29] audit: type=1400 audit(1760634320.070:10557): avc:  denied  { read write } for  pid=13482 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  263.436980][   T29] audit: type=1326 audit(1760634320.070:10558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b3183eec9 code=0x7ffc0000
[  263.460979][   T29] audit: type=1400 audit(1760634320.070:10559): avc:  denied  { map_create } for  pid=15468 comm="syz.0.4049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  263.480423][   T29] audit: type=1326 audit(1760634320.070:10560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3183eec9 code=0x7ffc0000
[  263.513764][T15481] netlink: 'syz.0.4054': attribute type 4 has an invalid length.
[  263.524953][T15481] netlink: 'syz.0.4054': attribute type 4 has an invalid length.
[  263.678890][T15494] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4061'.
[  263.725173][T15502] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  263.900622][T15527] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4075'.
[  264.003829][T15536] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  264.149247][T15553] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4087'.
[  264.240072][T15565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4093'.
[  264.403426][T15580] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  264.469219][T15585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4099'.
[  264.879054][T15612] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  264.991367][T15614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4112'.
[  265.114785][T15618] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4114'.
[  265.331284][T15641] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  265.356228][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4125'.
[  265.356699][T15647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4127'.
[  265.963941][T15682] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  265.975385][T15684] validate_nla: 8 callbacks suppressed
[  265.975433][T15684] netlink: 'syz.7.4141': attribute type 4 has an invalid length.
[  266.026171][T15684] netlink: 'syz.7.4141': attribute type 4 has an invalid length.
[  266.489476][T15713] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  266.507174][T15714] netlink: 'syz.8.4153': attribute type 4 has an invalid length.
[  266.534245][T15714] netlink: 'syz.8.4153': attribute type 4 has an invalid length.
[  266.691184][T15743] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  266.714998][T15746] netlink: 'syz.8.4170': attribute type 4 has an invalid length.
[  266.764714][T15746] netlink: 'syz.8.4170': attribute type 4 has an invalid length.
[  267.230633][T15779] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  267.320156][T15783] netlink: 'syz.8.4184': attribute type 4 has an invalid length.
[  267.350806][T15783] netlink: 'syz.8.4184': attribute type 4 has an invalid length.
[  267.648377][T15807] __nla_validate_parse: 9 callbacks suppressed
[  267.648404][T15807] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4194'.
[  267.747820][T15811] netlink: 'syz.8.4196': attribute type 4 has an invalid length.
[  267.779037][T15811] netlink: 'syz.8.4196': attribute type 4 has an invalid length.
[  267.941823][T15825] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4203'.
[  268.024273][T15839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4208'.
[  268.201490][T15860] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4219'.
[  268.244414][   T29] kauditd_printk_skb: 1405 callbacks suppressed
[  268.244429][   T29] audit: type=1400 audit(1760634325.010:11966): avc:  denied  { prog_load } for  pid=15863 comm="syz.0.4222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  268.309874][   T29] audit: type=1400 audit(1760634325.020:11967): avc:  denied  { read write } for  pid=8794 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  268.334593][   T29] audit: type=1400 audit(1760634325.030:11968): avc:  denied  { open } for  pid=15866 comm="syz.7.4223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[  268.354358][   T29] audit: type=1400 audit(1760634325.030:11969): avc:  denied  { map_create } for  pid=15866 comm="syz.7.4223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  268.373806][   T29] audit: type=1400 audit(1760634325.030:11970): avc:  denied  { prog_load } for  pid=15866 comm="syz.7.4223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  268.393298][   T29] audit: type=1400 audit(1760634325.030:11971): avc:  denied  { prog_load } for  pid=15866 comm="syz.7.4223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  268.412762][   T29] audit: type=1400 audit(1760634325.030:11972): avc:  denied  { prog_load } for  pid=15866 comm="syz.7.4223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  268.432300][   T29] audit: type=1400 audit(1760634325.050:11973): avc:  denied  { create } for  pid=15863 comm="syz.0.4222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0
[  268.452024][   T29] audit: type=1400 audit(1760634325.050:11974): avc:  denied  { prog_load } for  pid=15863 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  268.459282][T15876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4225'.
[  268.470921][   T29] audit: type=1400 audit(1760634325.050:11975): avc:  denied  { map_create } for  pid=15863 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  268.792709][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4234'.
[  269.044930][T15912] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4241'.
[  269.274759][T15930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4250'.
[  269.473513][T15952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4258'.
[  269.780573][T15960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4263'.
[  271.129062][T16087] validate_nla: 20 callbacks suppressed
[  271.129078][T16087] netlink: 'syz.0.4318': attribute type 4 has an invalid length.
[  271.169100][T16087] netlink: 'syz.0.4318': attribute type 4 has an invalid length.
[  271.795016][T16125] netlink: 'syz.7.4333': attribute type 4 has an invalid length.
[  271.821256][T16125] netlink: 'syz.7.4333': attribute type 4 has an invalid length.
[  272.256343][T16158] netlink: 'syz.5.4350': attribute type 4 has an invalid length.
[  272.631604][T16197] netlink: 'syz.7.4366': attribute type 4 has an invalid length.
[  272.796634][T16200] __nla_validate_parse: 8 callbacks suppressed
[  272.796655][T16200] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4368'.
[  272.851067][T16206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4369'.
[  273.115179][T16229] netlink: 'syz.5.4380': attribute type 4 has an invalid length.
[  273.270269][   T29] kauditd_printk_skb: 1374 callbacks suppressed
[  273.270285][   T29] audit: type=1400 audit(1760634330.040:13350): avc:  denied  { create } for  pid=16237 comm="syz.5.4384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  273.345995][T16238] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4384'.
[  273.348117][   T29] audit: type=1400 audit(1760634330.080:13351): avc:  denied  { map_create } for  pid=16237 comm="syz.5.4384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  273.374633][   T29] audit: type=1400 audit(1760634330.080:13352): avc:  denied  { prog_load } for  pid=16237 comm="syz.5.4384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  273.394059][   T29] audit: type=1400 audit(1760634330.080:13353): avc:  denied  { create } for  pid=16237 comm="syz.5.4384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[  273.414194][   T29] audit: type=1400 audit(1760634330.080:13354): avc:  denied  { read write } for  pid=16237 comm="syz.5.4384" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  273.438839][   T29] audit: type=1400 audit(1760634330.100:13355): avc:  denied  { read write } for  pid=16237 comm="syz.5.4384" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  273.463436][   T29] audit: type=1400 audit(1760634330.120:13356): avc:  denied  { prog_load } for  pid=16237 comm="syz.5.4384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  273.482813][   T29] audit: type=1400 audit(1760634330.120:13357): avc:  denied  { mounton } for  pid=16237 comm="syz.5.4384" path="/208/file0" dev="tmpfs" ino=1101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[  273.505750][   T29] audit: type=1400 audit(1760634330.120:13358): avc:  denied  { mounton } for  pid=16237 comm="syz.5.4384" path="/208/file0" dev="tmpfs" ino=1101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[  273.528743][   T29] audit: type=1400 audit(1760634330.120:13359): avc:  denied  { create } for  pid=16237 comm="syz.5.4384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[  273.621506][T16250] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4389'.
[  273.727813][T16258] netlink: 'syz.5.4392': attribute type 4 has an invalid length.
[  273.812405][T16267] tbf_change: 1 callbacks suppressed
[  273.812424][T16267] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  273.942322][T16276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4397'.
[  273.994770][T16282] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4400'.
[  274.068336][T16290] netlink: 'syz.4.4405': attribute type 4 has an invalid length.
[  274.150078][T16301] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  274.236458][T16306] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4412'.
[  274.342127][T16314] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4416'.
[  274.466122][T16325] netlink: 'syz.4.4419': attribute type 4 has an invalid length.
[  274.487177][T16327] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  274.858020][T16344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4426'.
[  275.087497][T16352] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4430'.
[  276.383172][T16450] validate_nla: 4 callbacks suppressed
[  276.383191][T16450] netlink: 'syz.0.4474': attribute type 4 has an invalid length.
[  276.542274][T16461] netlink: 'syz.0.4487': attribute type 4 has an invalid length.
[  276.799747][ T3301] ==================================================================
[  276.807890][ T3301] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_disable_cb
[  276.816271][ T3301] 
[  276.818600][ T3301] read to 0xffff888102f1af78 of 2 bytes by interrupt on cpu 1:
[  276.826314][ T3301]  virtqueue_disable_cb+0x58/0x150
[  276.831482][ T3301]  skb_xmit_done+0x65/0x140
[  276.836169][ T3301]  vring_interrupt+0x155/0x180
[  276.840967][ T3301]  __handle_irq_event_percpu+0x9d/0x540
[  276.846541][ T3301]  handle_irq_event+0x64/0xf0
[  276.851246][ T3301]  handle_edge_irq+0x154/0x470
[  276.856059][ T3301]  __common_interrupt+0x60/0xb0
[  276.860954][ T3301]  common_interrupt+0x7e/0x90
[  276.865661][ T3301]  asm_common_interrupt+0x26/0x40
[  276.870797][ T3301]  __sanitizer_cov_trace_pc+0x11/0x70
[  276.876286][ T3301]  selinux_inode_permission+0x65c/0x740
[  276.881855][ T3301]  security_inode_permission+0x6d/0xb0
[  276.887427][ T3301]  inode_permission+0x106/0x310
[  276.892308][ T3301]  link_path_walk+0x162/0x900
[  276.897005][ T3301]  path_lookupat+0x63/0x2a0
[  276.901752][ T3301]  filename_lookup+0x147/0x340
[  276.906545][ T3301]  user_path_at+0x3e/0x130
[  276.911017][ T3301]  __x64_sys_umount+0x85/0xe0
[  276.915745][ T3301]  x64_sys_call+0xdd2/0x3000
[  276.920443][ T3301]  do_syscall_64+0xd2/0x200
[  276.924959][ T3301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.930874][ T3301] 
[  276.933207][ T3301] write to 0xffff888102f1af78 of 2 bytes by task 3301 on cpu 0:
[  276.940836][ T3301]  virtqueue_disable_cb+0x7a/0x150
[  276.945970][ T3301]  start_xmit+0x103/0x17a0
[  276.950423][ T3301]  dev_hard_start_xmit+0x125/0x3e0
[  276.955559][ T3301]  sch_direct_xmit+0x192/0x550
[  276.960510][ T3301]  __dev_queue_xmit+0xe9a/0x2000
[  276.965458][ T3301]  ip_finish_output2+0x77f/0x8b0
[  276.970424][ T3301]  ip_finish_output+0x114/0x2a0
[  276.975365][ T3301]  ip_output+0xbd/0x190
[  276.979548][ T3301]  __ip_queue_xmit+0xbbf/0xc00
[  276.984400][ T3301]  ip_queue_xmit+0x39/0x50
[  276.988832][ T3301]  __tcp_transmit_skb+0x17fd/0x1c10
[  276.994062][ T3301]  tcp_write_xmit+0x129c/0x30d0
[  276.998924][ T3301]  __tcp_push_pending_frames+0x6d/0x1b0
[  277.004485][ T3301]  tcp_push+0x311/0x330
[  277.008645][ T3301]  tcp_sendmsg_locked+0x2458/0x2c00
[  277.013887][ T3301]  tcp_sendmsg+0x2f/0x50
[  277.018135][ T3301]  inet_sendmsg+0x76/0xd0
[  277.022483][ T3301]  __sock_sendmsg+0x102/0x180
[  277.027261][ T3301]  sock_write_iter+0x1a7/0x1f0
[  277.032084][ T3301]  vfs_write+0x52a/0x960
[  277.036597][ T3301]  ksys_write+0xda/0x1a0
[  277.040950][ T3301]  __x64_sys_write+0x40/0x50
[  277.045556][ T3301]  x64_sys_call+0x2802/0x3000
[  277.050251][ T3301]  do_syscall_64+0xd2/0x200
[  277.054901][ T3301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.061084][ T3301] 
[  277.063416][ T3301] value changed: 0x0000 -> 0x0001
[  277.068478][ T3301] 
[  277.070846][ T3301] Reported by Kernel Concurrency Sanitizer on:
[  277.077187][ T3301] CPU: 0 UID: 0 PID: 3301 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  277.088938][ T3301] Tainted: [W]=WARN
[  277.092743][ T3301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  277.102921][ T3301] ==================================================================
[  277.550160][ T3542] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.637024][ T3542] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.687049][ T3542] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.747716][ T3542] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.801345][ T3542] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.867279][ T3542] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.937255][ T3542] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.007244][ T3542] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.060722][ T3542] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  278.070566][ T3542] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.106327][ T3542] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  278.116177][ T3542] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.186283][ T3542] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  278.196111][ T3542] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.276576][ T3542] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  278.286437][ T3542] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.351151][ T3542] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.387497][ T3542] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.447474][ T3542] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.487726][ T3542] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.561461][ T3542] bridge_slave_1: left allmulticast mode
[  278.567647][ T3542] bridge_slave_1: left promiscuous mode
[  278.573429][ T3542] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.581393][ T3542] bridge_slave_0: left allmulticast mode
[  278.587268][ T3542] bridge_slave_0: left promiscuous mode
[  278.592962][ T3542] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.601290][ T3542] bridge_slave_1: left allmulticast mode
[  278.606969][ T3542] bridge_slave_1: left promiscuous mode
[  278.612721][ T3542] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.620684][ T3542] bridge_slave_0: left allmulticast mode
[  278.626547][ T3542] bridge_slave_0: left promiscuous mode
[  278.632211][ T3542] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.641376][ T3542] bridge_slave_1: left allmulticast mode
[  278.647094][ T3542] bridge_slave_1: left promiscuous mode
[  278.652788][ T3542] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.660894][ T3542] bridge_slave_0: left allmulticast mode
[  278.666972][ T3542] bridge_slave_0: left promiscuous mode
[  278.672601][ T3542] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.868086][ T3542] bond0 (unregistering): Released all slaves
[  278.956898][ T3542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  278.966879][ T3542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  278.976406][ T3542] bond0 (unregistering): Released all slaves
[  279.116516][ T3542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  279.126799][ T3542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  279.136630][ T3542] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  279.145743][ T3542] bond0 (unregistering): Released all slaves
[  279.207247][ T3542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  279.217289][ T3542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  279.226821][ T3542] bond0 (unregistering): Released all slaves
[  279.321667][ T3542] tipc: Left network mode
[  279.393196][ T3542] hsr_slave_0: left promiscuous mode
[  279.399075][ T3542] hsr_slave_1: left promiscuous mode
[  279.406447][ T3542] hsr_slave_0: left promiscuous mode
[  279.412127][ T3542] hsr_slave_1: left promiscuous mode
[  279.417908][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  279.425546][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_0
[  279.433429][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  279.440988][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_1
[  279.450427][ T3542] hsr_slave_0: left promiscuous mode
[  279.456300][ T3542] hsr_slave_1: left promiscuous mode
[  279.461950][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  279.470314][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_0
[  279.478143][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  279.485698][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_1
[  279.496082][ T3542] hsr_slave_0: left promiscuous mode
[  279.501833][ T3542] hsr_slave_1: left promiscuous mode
[  279.507509][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  279.514995][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_0
[  279.523051][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  279.530501][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_1
[  279.549193][ T3542] veth1_macvtap: left promiscuous mode
[  279.554768][ T3542] veth0_macvtap: left promiscuous mode
[  279.560345][ T3542] veth1_vlan: left promiscuous mode
[  279.565676][ T3542] veth0_vlan: left promiscuous mode
[  279.571330][ T3542] veth1_macvtap: left promiscuous mode
[  279.576949][ T3542] veth0_macvtap: left promiscuous mode
[  279.582726][ T3542] veth1_vlan: left promiscuous mode
[  279.588252][ T3542] veth0_vlan: left promiscuous mode
[  279.594139][ T3542] veth1_macvtap: left promiscuous mode
[  279.599680][ T3542] veth0_macvtap: left promiscuous mode
[  279.605349][ T3542] veth1_vlan: left promiscuous mode
[  279.610569][ T3542] veth0_vlan: left promiscuous mode
[  279.616331][ T3542] veth1_macvtap: left promiscuous mode
[  279.621989][ T3542] veth0_macvtap: left promiscuous mode
[  279.627595][ T3542] veth1_vlan: left promiscuous mode
[  279.632830][ T3542] veth0_vlan: left promiscuous mode
[  279.874605][ T3542] team0 (unregistering): Port device team_slave_0 removed
[  279.932511][ T3542] team0 (unregistering): Port device team_slave_0 removed
[  279.992819][ T3542] team0 (unregistering): Port device team_slave_0 removed
[  280.026557][ T3392] infiniband syz1: ib_query_port failed (-19)
[  280.843992][ T3542] IPVS: stop unused estimator thread 0...
[  280.898619][ T3542] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.957618][ T3542] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.997610][ T3542] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.067876][ T3542] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.118504][ T3542] bridge_slave_1: left allmulticast mode
[  281.124181][ T3542] bridge_slave_1: left promiscuous mode
[  281.129937][ T3542] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.137823][ T3542] bridge_slave_0: left allmulticast mode
[  281.143568][ T3542] bridge_slave_0: left promiscuous mode
[  281.149273][ T3542] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.316773][ T3542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  281.326917][ T3542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  281.336521][ T3542] bond0 (unregistering): Released all slaves
[  281.344622][ T3542] bond1 (unregistering): Released all slaves
[  281.352514][   T36] syz0: Port: 1 Link DOWN
[  281.433386][ T3542] hsr_slave_0: left promiscuous mode
[  281.439121][ T3542] hsr_slave_1: left promiscuous mode
[  281.444834][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  281.452288][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_0
[  281.459916][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  281.467547][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_1
[  281.478043][ T3542] veth1_macvtap: left promiscuous mode
[  281.483731][ T3542] veth0_macvtap: left promiscuous mode
[  281.489352][ T3542] veth1_vlan: left promiscuous mode
[  281.494849][ T3542] veth0_vlan: left promiscuous mode
[  281.572358][ T3542] team0 (unregistering): Port device team_slave_0 removed