last executing test programs:

10m32.905765873s ago: executing program 32 (id=3013):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x1, 0x3}, 0x2}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000020c0)=@newtaction={0x88c, 0x30, 0xffff, 0x4, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3ffc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x22, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8, 0x3, 0x0, 0x27ffdbfc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400, 0x8, 0x0, 0x0, 0x0, 0x81b, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x200, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0xffffffff, 0x40, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, 0x0, 0xfffffffe, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000, 0x100, 0xfffffffc, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x55, 0xfff, 0x1000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2, 0x0, 0x20000000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x7, 0xfffeffff, 0x100, 0x8, {0x4, 0x0, 0x400, 0x3200, 0x7fff, 0x7}, {0x7, 0x2, 0x5, 0x8, 0xd6, 0x766}, 0xfeea, 0x4, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0xc, 0x7ff, 0x9, 0x3, 0x80000000, 0x6, 0x3, 0x2, 0xc0000000, 0x80000000, 0x0, 0x4, 0x80, 0x5, 0x3, 0x5, 0x9d, 0xfffffffe, 0x2, 0x8c, 0x80000001, 0x6, 0x7f, 0x2, 0x0, 0x5, 0x76, 0x3, 0x2, 0x7, 0x800, 0x0, 0x10000, 0xf0, 0x8, 0xb8, 0x151, 0xfff, 0x6, 0x9, 0x4401, 0xfffffff8, 0x5, 0x8, 0xfffffffa, 0x4, 0x7, 0x8000, 0xf9, 0xfff, 0x7fff, 0x1, 0xfffffffe, 0xff, 0x5c0078f0, 0x7f, 0x0, 0x2, 0xfffffffa, 0x8, 0x7, 0x7, 0x7, 0x6, 0x4, 0x5, 0x4, 0x3, 0x6, 0xffffffff, 0x10000, 0x5, 0x6, 0x3, 0x2, 0x1, 0x8d400, 0x0, 0x74, 0x4, 0xfee, 0x401, 0x5, 0x5, 0xfff, 0x8f4, 0x3, 0x8000, 0x2, 0x6, 0x1, 0x1ff, 0xa, 0x1, 0x6, 0x9, 0xc, 0x0, 0x80, 0xe, 0xd, 0xc82, 0x8, 0xfffffffe, 0xef, 0x2, 0x3, 0x1f, 0x7, 0x9, 0x1ec0, 0x2, 0xfffff001, 0x2, 0x0, 0x10001, 0xd5b, 0x5, 0x0, 0x1, 0x7, 0x3, 0x7, 0x8, 0x1, 0x4, 0x8, 0x101, 0x200, 0x7, 0x80000000, 0x5, 0x2, 0x2, 0x7fff, 0x7, 0x6, 0x3ff, 0x7, 0xffff935a, 0x8, 0xf64, 0x8, 0x4, 0x80000001, 0x5, 0xfe000000, 0x3, 0xfffffffe, 0x8, 0xba, 0x400000, 0x3, 0x8, 0x7, 0x5, 0x2, 0x400, 0x7, 0x1ff, 0x1, 0x746, 0x2, 0x6, 0x0, 0x1, 0x6, 0x53a, 0x6, 0x8, 0x6, 0x8, 0x3, 0x7ff, 0x6, 0x9, 0xa, 0x3, 0xfffff000, 0xdae4, 0x5, 0xa, 0x5, 0x7, 0x2, 0x1000, 0xe, 0x4, 0x0, 0x2, 0x1, 0x0, 0x9, 0x5, 0x10000, 0x3, 0x2, 0x7ff, 0x4, 0x5, 0x4, 0x4, 0x0, 0x80000000, 0x80, 0x5a78, 0xf94, 0x7, 0x6, 0x80, 0xc, 0xfffffff9, 0x7, 0x4, 0x5, 0x4, 0x9, 0x2, 0xffff4fba, 0x5, 0x3, 0x800, 0x93, 0x3, 0x3000000, 0x8, 0x80000001, 0x6, 0x6, 0xde4a, 0x9, 0xd, 0x10001, 0x4c, 0x8, 0xf0, 0x0, 0x5, 0x9, 0x4, 0x2, 0x8, 0x3, 0x2, 0x5, 0x9, 0x2, 0x4, 0x9, 0x7, 0x5, 0x10001, 0x8, 0x9]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) (fail_nth: 11)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r1, {0xfffd, 0x89c77fb34cc3db7f}, {0xfff3, 0x1}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)

6m35.795561607s ago: executing program 33 (id=5817):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d)
write(r2, &(0x7f0000004200), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000b800000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r3}, 0x18)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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")
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6000)
io_setup(0x4, &(0x7f0000000140)=<r5=>0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r6, 0xd010)
io_submit(r5, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r4, &(0x7f0000000000), 0x4000}])
sendfile(r2, r1, 0x0, 0x7ffff000)
fallocate(r0, 0x0, 0x0, 0x1001f0)

5m9.815231288s ago: executing program 34 (id=6832):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20040884}, 0x40000)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

5m1.180758101s ago: executing program 35 (id=6921):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}])
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8)
r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lstat(0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
sendmsg$nl_generic(r0, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1008002}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c000000250000042cbd7000fddbdf251300000008006400", @ANYRES32=r2, @ANYBLOB="4e00348008008c00", @ANYRES32=r3, @ANYBLOB="39ce54bce219568531eb35e8197f659b1224bc0a69f13deb22213c7d0996b0000d6820f04cd1f11d15", @ANYRES32=r4, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x4000040}, 0x48880)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

4m16.151783066s ago: executing program 36 (id=7479):
syz_open_dev$usbmon(&(0x7f0000000080), 0x9, 0x40000) (async)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) (async)
syz_clone3(0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000010180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00', r1}, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)

4m15.663329934s ago: executing program 37 (id=7489):
mknod$loop(0x0, 0x100000000000600d, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000cc1300800c00054000000000000000000c00054000000000000000000c0004400000000000000000e0000a80480002800800034000000003080003400000000308000340000000020900020073797a310000000008000340000000010800034000000001080001"], 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getsockname(r0, &(0x7f0000000700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000780)=0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010)

3m49.141876502s ago: executing program 9 (id=7952):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$ipvs(0x0, r1)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x20, r2, 0x1, 0x80, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2000007}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2805}, 0x0)

3m48.66095414s ago: executing program 9 (id=7953):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x104)

3m48.624437651s ago: executing program 9 (id=7955):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
bind$inet6(r1, 0x0, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r1, &(0x7f0000000340)='g', 0xffffffffffffffdf, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)

3m48.575213582s ago: executing program 9 (id=7959):
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x2)
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0)
read(r1, &(0x7f0000000200)=""/202, 0xca)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3, 0x1}})
tkill(r0, 0x7)
connect$qrtr(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
bpf$PROG_LOAD(0x2, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r2 = syz_pidfd_open(0x0, 0x0)
setns(r2, 0x24020000)
syz_clone3(&(0x7f0000000300)={0x136820100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
creat(&(0x7f0000000380)='./file0\x00', 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000001e40)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
name_to_handle_at(r4, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0)

3m48.372084015s ago: executing program 9 (id=7962):
perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x8806, 0x3, 0x634e, 0x9, 0x0, 0x3a, 0xfff6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="08845cb8aa73d11b820acce8ea6e"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10)
socket(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r1], 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0)

3m48.199694077s ago: executing program 9 (id=7967):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x30}}, 0x0)

3m48.153761609s ago: executing program 38 (id=7967):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x30}}, 0x0)

2m36.69621172s ago: executing program 2 (id=9383):
r0 = geteuid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x2, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
finit_module(0xffffffffffffffff, 0x0, 0x3)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x80c2, &(0x7f0000000800)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7ffffbff}}], [{@permit_directio}, {@uid_gt={'uid>', r0}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@smackfsdef}, {@smackfshat={'smackfshat', 0x3d, ',[[$}*:'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ',[[$}*:'}}, {@appraise_type}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$eJzs3F1oXFUeAPD/nXz2a5vd7Xa33e5uut1lwxaTNq02D4JUFHxQECuojyFJS23aSJOCLVWmIPVRCr6Lj7764Kv6UsQnwdf6KEihSF/aCuLInbl3vjKTNJNkxpjfD27mnHtn7jnnnnvunHtO5gawbY2mf5JK+E5E7I2IQvMbRisvD+9fn3l0//pMFEulMz8m5Y89SOOZbDexK4uMFSIK7yW1DXUWr167MD0/P3c5i08sXXxrYvHqtSfOD2drpqaS/g4L1SK9tFwPDr67cOjAC2/cemmmuuc8tfpybJTRGG2VlbL/bnRiPbanLtxxvdF16fmfVtdAuf3vjb5YqfKKXcwZsNlKpVJpqP3mYqnZjWVrgC0rhnudA6A38i/69P43X1p1BAY3p/vRc/dOV26A0nI/zJaIf5VX5uMgA033txtpNCJeL/70UbrEJo1DAADU++J03hNs6v+NVGZGfr5y+5n09Q/ZHMpIRPwxIv4UEX+OiH0R8ZeI2B8Rf42IvzXtvy8iSiukP9oUr6ZfnYQq3N2goraU9v+ezua20qU291UNjfRlsT0ReYd57lh2TMZiYOjs+fm54yuk8eVz337Qblt9/y9d0jzkfcEsH3f7mwboZqeXpjsr7XL3bkQc7K+Vv9L/TfojkupMQBIRByLi4Br2O1IXPv//Tw5VIwON71u9/GWllvNoGzDPVPo44n+V+i9GtfzRMImYNMxPXpw+N3du7tLk1NTJE8dPPTX55MRwzM8dm0jPgmMt0/j6m5svt0t/1fJ/9n3zR54/9fmZrGWtX1r/O+vO/8jnb2vlH0kikup87eLa07j53ftt72k6Pf8Hk1fL4fy+9O3ppaXLxyMGkxeXr5+sfTaPp69RrJR/7Ejz+V9Ot3yNy4/E3yMiPYn/ERH/jModYpr3wxHx74g4skL5v3r2P292Xv7NlZZ/NhrLX6n5hvqvzde3CyTZ3GDDpsFIA30XDt951Obi8Xj1f7IcGsvWtL7+JQ2XiHY5zb/t0jW/rPvoAQAAwNZQiIjddWNJu6NQGB+vjAHti52F+YXFpaNnF65cmk23RYzEQCEf6aqMBw8k+fjnSF18sil+Ihs3/rBvRzk+PrMwP9vTkgO7ym0+KYxHvNZX1/5TP2zMEDPwW+b3WrB9rdT+0078/ltdzAzQVY///X/7nU3NCNB1de2/3S/8ix383xewBbj/B2pWf9CPawZsfSVtGba1NbX/ox4CCL8n/fFKNVzoaU6AbtP/h21p1d/1rytQGmq9aTiWvzmGV95hX3SWjR0t0upJIO1Z9ST1HZ18Kn+aQtv3RGFtOxyKxjWDHdbp2XUejeLlxXP7ayd//myRdR7nUva/8htdg592pZ22CnT9UgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALApfg0AAP//XhrXwA==")
connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4d7, &(0x7f0000001480)="$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")
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='.\x02\x00')
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)=<r2=>0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRESOCT=0x0, @ANYRES32=r2], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001811000040be52918eee224d56fb21976bddc07f3b0965b556ab87d61926d77a851a9817e9af0349bec29ad84dd3f638efbba1d4b92caec5c2f9f740b8657154729b0d8d9d1d34200d6bd286142965f592248deeb5f5d3fbcf1f94b944244e3f2b0c38adcbf7083be2e547c7e931cea1a1c0e97387f755ae5894e77d538b96da2b6495b1360a94b6a3a4b1229131932987c39e9963641d8a97f6b67756cfb54ecbd49bb4c5d1caa6add97af9c890d33d54c674", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x10000}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x20000004)
ioprio_set$uid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0)
ioprio_get$pid(0x2, 0x0)
r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f00000000c0))
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0)
close(r7)

2m36.415469365s ago: executing program 2 (id=9393):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf371, 0x10100, 0xfffffffe, 0x1}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/124, 0x7c}], 0x1)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1})
io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0)

2m36.374472475s ago: executing program 2 (id=9394):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffff9, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff)
keyctl$chown(0x4, r0, 0xee01, 0xee00)

2m36.324898006s ago: executing program 2 (id=9397):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x2018008, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES16], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0x0, &(0x7f0000000340)={0x2, 0xfffffffffffffffe}, 0x0)
timer_create(0x3, 0x0, &(0x7f0000044000))
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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")
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00')
rmdir(&(0x7f0000000080)='./file0\x00')
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00'}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}, 0x1, 0x0, 0x0, 0x40800}, 0x4048010)

2m35.280165993s ago: executing program 2 (id=9415):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf371, 0x10100, 0xfffffffe, 0x1}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/124, 0x7c}], 0x1)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1})
io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0)

2m34.804934401s ago: executing program 2 (id=9425):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d408004500005c00000001"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18)

2m34.768056071s ago: executing program 39 (id=9425):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d408004500005c00000001"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18)

2m31.274035689s ago: executing program 4 (id=9493):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8040, 0x0)
ioctl$TCSETS(r4, 0x40045431, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_pts(r4, 0x141601)
gettid()
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)

2m30.078511169s ago: executing program 4 (id=9520):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="3183000000010000000019000000180001801400020064756d6d793000000000000000000000c16dfec98de65a73535715e56ccd11434d3eef823f2eb8a846a7f4e879d7fc1470ecc2d117500e7030aa"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886)

2m30.04377326s ago: executing program 4 (id=9523):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\f\x006'], 0x2c}], 0x1}, 0x0)

2m29.978086351s ago: executing program 4 (id=9524):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x2018008, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES16], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00'}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}, 0x1, 0x0, 0x0, 0x40800}, 0x4048010)

2m29.556699147s ago: executing program 4 (id=9529):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r1}, 0x18)

2m28.616101384s ago: executing program 4 (id=9536):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0x8, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x9, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r4}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket(0x200000000000011, 0x2, 0x1)
bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045000014"], 0x0)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x0, 0x10102, 0x0)
request_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x21f7, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2, @ANYRES8=r10, @ANYRES64=r0, @ANYRESHEX, @ANYRESDEC=r6, @ANYRESOCT=r2, @ANYBLOB="298185dc70fff8205371f0f77a34f94c1101b4c8b3cb2c112f42b8a70d74b8c5e026d9f68da399b53eecced0fefb297594eff156d013aa3baa14d1ed8b4b3525c3091a68a3808a4c934b5d16548dea91c5dab33e974bfce21ebddc2aec9c896eb5adc3c72b3caeedb892d3db64362f5358f5f99d4aeef137a95a3fae0cf4c1123afd298ca8f68598a4c75f0422d2d9728815bfe39970a7e10e390ed0a68b0e3b3c2e32af42aab79476ad70550d16cc6cf0fd246f3db32b530c51060d4f24d4e4753f68b3436cd412ee9f8a8075cce1edd140374ff63466a4c27b8bb5cbeca415dc286538ff58078466d5e5c9e4012323bbed11f954f1ec54", @ANYRES8=r5, @ANYRES16=r3], &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
setreuid(0xee01, 0xee01)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))

2m28.604087314s ago: executing program 40 (id=9536):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0x8, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x9, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r4}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket(0x200000000000011, 0x2, 0x1)
bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045000014"], 0x0)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x0, 0x10102, 0x0)
request_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x21f7, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2, @ANYRES8=r10, @ANYRES64=r0, @ANYRESHEX, @ANYRESDEC=r6, @ANYRESOCT=r2, @ANYBLOB="298185dc70fff8205371f0f77a34f94c1101b4c8b3cb2c112f42b8a70d74b8c5e026d9f68da399b53eecced0fefb297594eff156d013aa3baa14d1ed8b4b3525c3091a68a3808a4c934b5d16548dea91c5dab33e974bfce21ebddc2aec9c896eb5adc3c72b3caeedb892d3db64362f5358f5f99d4aeef137a95a3fae0cf4c1123afd298ca8f68598a4c75f0422d2d9728815bfe39970a7e10e390ed0a68b0e3b3c2e32af42aab79476ad70550d16cc6cf0fd246f3db32b530c51060d4f24d4e4753f68b3436cd412ee9f8a8075cce1edd140374ff63466a4c27b8bb5cbeca415dc286538ff58078466d5e5c9e4012323bbed11f954f1ec54", @ANYRES8=r5, @ANYRES16=r3], &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
setreuid(0xee01, 0xee01)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))

1m28.887618171s ago: executing program 0 (id=10587):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000040000003003e00ebffffff940200000000000040000000000000000000000000000000000000002c8f3800010000000200000003000000970f00000400000000"], 0xe6)
close(r3)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
r6 = memfd_secret(0x0)
cachestat(r6, &(0x7f0000000000)={0x2, 0x7fff}, &(0x7f0000000040), 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES8], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x401)

1m28.700680024s ago: executing program 0 (id=10594):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
setgroups(0x1, &(0x7f0000000000)=[0xee00])

1m28.623864115s ago: executing program 0 (id=10595):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000040000003003e00ebffffff940200000000000040000000000000000000000000000000000000002c8f3800010000000200000003000000970f00000400000000"], 0xe6)
close(r3)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
memfd_secret(0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0)
ioctl$TIOCGPTPEER(r6, 0x5441, 0x401)

1m28.559363586s ago: executing program 0 (id=10599):
madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x11)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20)
r2 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x43}, @loopback}}}], 0x20}, 0x4)
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
timer_create(0x2, &(0x7f00000002c0)={0x0, 0x3e, 0x0, @thr={&(0x7f00000000c0)="e7cf18a9b15911ee02339bfd4435767f0701bc2a4a92d6b5fd5456d2b760716c42a8077e61d4ecd28cb1b84a2c6f5e3a3de7b63acde3e77007690a89fea895fd60a712d646478c280fb8c27d2ba2b5bcab92572e3aa52b108025bfbf5c68dee9362a8c59ab0f3198541aad0b6a04124156b792fc2f39bde1d6bf36281d96069aee2115491fd56e403c0a60d7c8181c5808c3e4a96762ddea72e392849843e24a9bf711fa6e2b146518c4d346ca806ce127f62736b9266dba82d7714fd1990a853176d4478b633f13cfbd3f89da63c045cef7e14692fbeb29708f73193a6c66cc8c44bdb2272d472e", &(0x7f00000001c0)="878504943d10c7d50f5e65cb99e84e4bcfe68813985a0474564187d03e65da7c0315273c9fad2d5dd2a0e0ae1aa8f322d2f5c4a3da468a92406d31a9629e48c20a3e61be1405a70af50779ebea788455dbecb70c110b70a4522176aff07367821daf2f63060532cdeb2328e72791a4819f053c1295ad546b71d555590b4fd6768589ee2f053d9a3b68ac1fa05a1736f8ab1886960a034e60040074e0affee78ade75eea1668362aac409d0097c7bcfc9a892fdf49009670e483b47b68aa2e84be41608f96269854a4de8aaa87b450fb28668654bddbadec328aded808e448319f2d610e51631"}}, &(0x7f0000000300)=<r4=>0x0)
timer_gettime(r4, &(0x7f0000000340))
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, 0x0, 0x4, &(0x7f0000000080)={&(0x7f00000004c0)=""/127, 0x7f})
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r6, &(0x7f0000000440), 0x10)
listen(r6, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
writev(r7, &(0x7f0000000000)=[{&(0x7f0000000480)='}', 0x1}], 0x1)
r9 = accept4$unix(r6, 0x0, 0x0, 0x800)
recvfrom$unix(r9, &(0x7f0000000240)=""/148, 0x94, 0x10100, 0x0, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1600000005000000040000000600000000000400", @ANYRES32=r1, @ANYBLOB="06000000001c001d0080000000b9aab32addcb2ad546a381de55d6f402c7e36bb2879300de2b04febbff8277d27b42414a83802ba4ff0c81574a0e06781a5ce9d5e852183a19b0d04ba26e83c1f63ec111566462c8f0b5bb51adaef78d0455b78c93d687ef4894193a2d9334e9356f9d3afea91052273aa536dd7781ea70734b7e006fe600"/145, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000000000000200"/28], 0x50)
madvise(&(0x7f0000d3a000/0x4000)=nil, 0x4000, 0x66)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800002, 0x18)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="040000e00300080018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000a70400000000000085009500"/72], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r11}, 0x10)

1m28.384008269s ago: executing program 0 (id=10604):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0), 0x1, 0x553, &(0x7f0000000800)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000300)=ANY=[], 0x381, 0x10000000000000) (fail_nth: 3)

1m27.256021577s ago: executing program 0 (id=10632):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000700), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000900010073797a320000000014000200f8652fba4463f1510000000000000000090003"], 0x40}}, 0xc800)
munlockall()
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="270e000000000000010004070200"], 0x14}, 0x1, 0x40030000000000}, 0x0)

1m27.243947678s ago: executing program 41 (id=10632):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000700), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000900010073797a320000000014000200f8652fba4463f1510000000000000000090003"], 0x40}}, 0xc800)
munlockall()
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="270e000000000000010004070200"], 0x14}, 0x1, 0x40030000000000}, 0x0)

19.099665234s ago: executing program 5 (id=11464):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001a00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80800)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15)
r4 = dup(r3)
write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x8080, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
stat(&(0x7f00000001c0)='./file0\x00', 0x0)

18.75163972s ago: executing program 5 (id=11468):
r0 = dup(0xffffffffffffffff)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x47}]}, &(0x7f0000000200)='syzkaller\x00', 0x7459, 0x2b, &(0x7f0000000340)=""/43, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0xb, 0x1000, 0x5}, 0x10, 0x20d72, 0xffffffffffffffff, 0x2, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x0, 0x2, 0xd, 0x5}, {0x5, 0x1, 0x10, 0xb}], 0x10, 0x6, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000180), &(0x7f0000000680)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2, 0x0, 0x6}, 0x18)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x54)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2)

17.810113966s ago: executing program 5 (id=11470):
r0 = dup(0xffffffffffffffff)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x47}]}, &(0x7f0000000200)='syzkaller\x00', 0x7459, 0x2b, &(0x7f0000000340)=""/43, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0xb, 0x1000, 0x5}, 0x10, 0x20d72, 0xffffffffffffffff, 0x2, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x0, 0x2, 0xd, 0x5}, {0x5, 0x1, 0x10, 0xb}], 0x10, 0x6, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000180), &(0x7f0000000680)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2, 0x0, 0x6}, 0x18)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x54)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2)

16.876746391s ago: executing program 5 (id=11494):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000100b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6)
unshare(0x40000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000180)={[{@mblk_io_submit}, {@dioread_nolock}, {@oldalloc}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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")
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10)
r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200))
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r10, &(0x7f0000000040), 0x208e24b)
prctl$PR_SET_SECCOMP(0xd, 0x0, 0x0)
shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x5000)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

15.936587937s ago: executing program 5 (id=11511):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x51)
socket$nl_route(0x10, 0x3, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
pause()
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00', 0x10, 0x9, 0x11}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'fo\x00', 0x1a, 0x0, 0x7f}, 0x2c)

14.679935908s ago: executing program 5 (id=11525):
r0 = eventfd2(0x6416, 0x0)
ppoll(&(0x7f0000000200)=[{r0, 0x14}], 0x1, &(0x7f0000000240), 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x30, r0, 0xd0fb5000)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r2, 0x0, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8fff03a16e98feaef7affffb70200000800cd00b70300000000000085000000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='kfree\x00', r3}, 0x18)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000009c0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000500, 0x0, 0x0, 0x200000000530, 0x200000000560], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000000ff030000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x138)
pipe2$watch_queue(0x0, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005"], 0x48)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x100000004}, 0x18)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0)

14.679431748s ago: executing program 42 (id=11525):
r0 = eventfd2(0x6416, 0x0)
ppoll(&(0x7f0000000200)=[{r0, 0x14}], 0x1, &(0x7f0000000240), 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x30, r0, 0xd0fb5000)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==")
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r2, 0x0, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8fff03a16e98feaef7affffb70200000800cd00b70300000000000085000000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='kfree\x00', r3}, 0x18)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000009c0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000500, 0x0, 0x0, 0x200000000530, 0x200000000560], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000000ff030000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x138)
pipe2$watch_queue(0x0, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005"], 0x48)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x100000004}, 0x18)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0)

5.782802735s ago: executing program 3 (id=11625):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x3, 0x3, 0x6, 0x0, 0xffffffffffffffc0, 0xffffffffffffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(0x0, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
flock(0xffffffffffffffff, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x64000600)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
creat(0x0, 0x48)
syz_usb_connect(0x2, 0x64, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4)
timer_create(0x6, &(0x7f0000000000)={0x0, 0x11, 0x0, @thr={&(0x7f00000003c0)="08d6bae8c83b0611fdaf13bf5e0d626b666bf2aabd7c700fe0ece3fc079a04d9a6eece92ed759121e4a85ad0e35fa840e8db3124c6a9ed2610ac1df528a86ecfc6d7d34dcf2fef22e60d3357c91dbbf346735402a0581cb019d00bc6cf1315ab04524577f984faba88768264ed833af1a0aaa7469f6e4b0f14720bc3b42af5d51e6434a29d4d54bfd58014598fb98cadc0684cb46d937219a3d9351ff33d90c3de44e0582afb25b7ac5d4e3c1e32f874e3fe40e54cff268461b813", &(0x7f00000005c0)="8ca868e4721d0efc4a362a902fe5cb99b65c9b3288145762cd2bf9197442d6a6e5b3a42da79dc8bba3da593f2b7ee9f7d7704600a96f90b7686d8ac36a2b8d13fc1475d0fda76f45287effd966ecf7c8e0dd8ed6c0e136d6d0cb271a60d1bb4578a159ca229b347886771f1ac617eb88a6c7ba356c4508b73da1d913b30ba4001de1add5e0de"}}, &(0x7f0000000100)=<r5=>0x0)
timer_delete(r5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000240)={0x5, 0x9c1, 0xfac, 0x9, 0xff, "ba6716e46e3ea8ae5a43d0a1618c073ca1af34", 0x4, 0x1})
socket$inet6_sctp(0xa, 0x5, 0x84)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)

3.552728532s ago: executing program 7 (id=11652):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e310000000000000000000000080001400000000008"], 0xfc}}, 0x0)

3.377246294s ago: executing program 7 (id=11653):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r0], 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2007, &(0x7f0000000980)=<r2=>0x0)
r3 = eventfd2(0x9, 0x0)
io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0)
io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r3}])
io_destroy(r2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x200002ac, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x3f6cfe55, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10c, @void, @value}, 0x94)
r4 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x44000, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=")
capset(0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r4], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = socket(0x10, 0x2, 0x0)
write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000000001100009f669bfe45f14486b8f69692a2000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r8, &(0x7f00000024c0), 0x0}, 0x20)

3.111747659s ago: executing program 7 (id=11657):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001a00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80800)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15)
r4 = dup(r3)
write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x8080, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
stat(&(0x7f00000001c0)='./file0\x00', 0x0)

3.00733984s ago: executing program 6 (id=11660):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000cc5d17267d427e5dfb1dfcf8be9abf13a885ff67c22aa44d400a837426e86caba4c747d2913917c30715050ded0292726b47dbde012c82533f71664ea34cf1e41973d9e3002ad9250d94b5358e279b02056421af98e2da40bfb72c5f53bea037c930de97f19eda61d5dbac4834d67b2271950cac2758295ce06be4f7cbec70b5d2561fdddfc4626a4dd1574a8da6382a44758f2c217825d03aa79b9ce844bbbc7c239c69e16583407f0fdeb744bacdef1de9a82c36ca4ac2d3", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kfree\x00', r2}, 0x18)
syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_settime(0x4, &(0x7f0000000740)={0x0, 0x3938700})
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456})
io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0)
write$binfmt_aout(r7, &(0x7f0000000240)=ANY=[], 0xff2e)

2.684555466s ago: executing program 7 (id=11662):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000580)={'tunl0\x00', <r1=>0x0, 0x700, 0x80, 0xfb3f, 0xb759, {{0x3a, 0x4, 0x1, 0x19, 0xe8, 0x68, 0x0, 0xd7, 0x4, 0x0, @local, @rand_addr=0x5, {[@rr={0x7, 0xb, 0x38, [@dev={0xac, 0x14, 0x14, 0xd}, @empty]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0xe, 0x0, [{0x4, 0x8, "3213e85797bc"}]}, @timestamp_prespec={0x44, 0x44, 0x7b, 0x3, 0x7, [{@broadcast, 0x5}, {@empty, 0x7d}, {@loopback, 0x80}, {@broadcast, 0x2}, {@broadcast, 0x9}, {@private=0xa010102, 0x9}, {@private=0xa010101, 0x99}, {@multicast2, 0x5}]}, @timestamp={0x44, 0x2c, 0xaa, 0x0, 0x0, [0x5, 0x9, 0xfffffffd, 0x5, 0xff, 0x2, 0xe48, 0x7, 0x70000000, 0xe]}, @generic={0x83, 0xe, "cd6b5a7ccace0a5002d3becf"}, @timestamp_prespec={0x44, 0x24, 0x36, 0x3, 0x1, [{@loopback, 0x9}, {@loopback, 0x1}, {@multicast1, 0x8}, {@local, 0xffff0ade}]}, @rr={0x7, 0x13, 0xa4, [@rand_addr=0x64010100, @remote, @loopback, @private=0xa010101]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', r1, 0x7, 0x1, 0xb, 0xff, {{0xa, 0x4, 0x2, 0x1f, 0x28, 0x66, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1, {[@end, @lsrr={0x83, 0x13, 0xd1, [@remote, @empty, @empty, @loopback]}]}}}}})
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x1}, {0x8, 0x4}]}, 0x34, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f01020301090212"], 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
syz_usb_connect$uac1(0x5, 0xcb, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x3, 0x1, 0x49, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x556e, 0xa}, [@processing_unit={0x7, 0x24, 0x7, 0x3, 0x2, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x306, 0x1, 0x1, 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x201, 0x4, 0x1, 0x8, 0x9, 0x5}, @selector_unit={0x8, 0x24, 0x5, 0x1, 0x2, "a55a9a"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x300, 0x1, 0x2, 0xf}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x5232, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x53, 0xf0, 0x8, {0x7, 0x25, 0x1, 0x0, 0x0, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x30d, 0x9, 0x2, 'p:'}, @as_header={0x7, 0x24, 0x1, 0x8, 0x7, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x4, 0x0, 0x18, "0cb03ac5ce540590c7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x9, 0xff, {0x7, 0x25, 0x1, 0x80, 0x9, 0x6}}}}}}}]}}, 0x0)
syz_open_dev$hidraw(0x0, 0x0, 0x81)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_usb_disconnect(r4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000020000000000001000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

2.012119267s ago: executing program 6 (id=11668):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
setuid(0xee01)
r2 = semget$private(0x0, 0x6, 0x3b1)
semop(r2, 0x0, 0x0)
semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000440)={{0x2, 0x0, 0x0, 0xee01, 0x0, 0x2, 0x1}, 0x3, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffb})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10)
r3 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r3}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x8, &(0x7f0000002cc0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'pim6reg\x00', <r7=>0x0})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r3, 0x20, &(0x7f0000000480)={&(0x7f0000001cc0)=""/4096, 0x1000, <r8=>0x0, &(0x7f0000000380)=""/73, 0x49}}, 0x10)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="00000000030000000200"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000d00000000000000174f000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000900000000000000000085000000830000000000000055090100000000009500000000000000bf91000000000000b7020000000000019ac6ca3fb4008100000085000000b7000000000000009500"], &(0x7f0000000180)='GPL\x00', 0xaa, 0x66, &(0x7f0000000240)=""/102, 0x41100, 0x3e, '\x00', r7, @fallback=0x2e, r3, 0x8, &(0x7f00000002c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x9aaa, 0x8d1}, 0x10, r8, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[r3, r9], 0x0, 0x10, 0xd, @void, @value}, 0x94)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

1.965634878s ago: executing program 6 (id=11669):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000580)={'tunl0\x00', <r1=>0x0, 0x700, 0x80, 0xfb3f, 0xb759, {{0x3a, 0x4, 0x1, 0x19, 0xe8, 0x68, 0x0, 0xd7, 0x4, 0x0, @local, @rand_addr=0x5, {[@rr={0x7, 0xb, 0x38, [@dev={0xac, 0x14, 0x14, 0xd}, @empty]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0xe, 0x0, [{0x4, 0x8, "3213e85797bc"}]}, @timestamp_prespec={0x44, 0x44, 0x7b, 0x3, 0x7, [{@broadcast, 0x5}, {@empty, 0x7d}, {@loopback, 0x80}, {@broadcast, 0x2}, {@broadcast, 0x9}, {@private=0xa010102, 0x9}, {@private=0xa010101, 0x99}, {@multicast2, 0x5}]}, @timestamp={0x44, 0x2c, 0xaa, 0x0, 0x0, [0x5, 0x9, 0xfffffffd, 0x5, 0xff, 0x2, 0xe48, 0x7, 0x70000000, 0xe]}, @generic={0x83, 0xe, "cd6b5a7ccace0a5002d3becf"}, @timestamp_prespec={0x44, 0x24, 0x36, 0x3, 0x1, [{@loopback, 0x9}, {@loopback, 0x1}, {@multicast1, 0x8}, {@local, 0xffff0ade}]}, @rr={0x7, 0x13, 0xa4, [@rand_addr=0x64010100, @remote, @loopback, @private=0xa010101]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', r1, 0x7, 0x1, 0xb, 0xff, {{0xa, 0x4, 0x2, 0x1f, 0x28, 0x66, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1, {[@end, @lsrr={0x83, 0x13, 0xd1, [@remote, @empty, @empty, @loopback]}]}}}}})
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x1}, {0x8, 0x4}]}, 0x34, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f01020301090212"], 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000020000000000001000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.83843115s ago: executing program 8 (id=11670):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x14, {{0x29, 0x0, 0x39000000, @local, 0x3}}}, 0x88)

1.775763031s ago: executing program 8 (id=11671):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000100b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6)
unshare(0x40000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000180)={[{@mblk_io_submit}, {@dioread_nolock}, {@oldalloc}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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")
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10)
r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200))
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r10, &(0x7f0000000040), 0x208e24b)
prctl$PR_SET_SECCOMP(0xd, 0x0, 0x0)
shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x5000)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

1.746014151s ago: executing program 3 (id=11672):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000dfff00000000000000000000891040000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x20, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x5, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x2)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
shutdown(r0, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1)
unshare(0x6a040000)
socket$unix(0x1, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x101402, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x14)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32, @ANYBLOB="73925609cae0aa2dd6417993fbd20756ac2f9570e2ce71f8db91aa60c1ea3dc6809c63fe0fe71c01f883b88ba857c84b60cfb6cafa04e57bbc2a"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)

1.22312653s ago: executing program 6 (id=11674):
syz_emit_ethernet(0x6e, &(0x7f00000007c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x9, 0x6, "c829e4", 0x9, 0x33, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@dstopts={0x2c}]}}}}}}}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18)
r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$selinux_access(r3, &(0x7f0000000280)={'system_u:object_r:modules_dep_t:s0', 0x20, 'unconfined', 0x20, 0x4}, 0x43)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r5}}, 0x48)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x48)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2}, {0x60}, {0x6}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000000014202020"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='sys_enter\x00', r9}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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")

1.1957542s ago: executing program 1 (id=11675):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x401)

1.19512524s ago: executing program 1 (id=11676):
r0 = dup(0xffffffffffffffff)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x47}]}, &(0x7f0000000200)='syzkaller\x00', 0x7459, 0x2b, &(0x7f0000000340)=""/43, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0xb, 0x1000, 0x5}, 0x10, 0x20d72, 0xffffffffffffffff, 0x2, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x0, 0x2, 0xd, 0x5}, {0x5, 0x1, 0x10, 0xb}], 0x10, 0x6, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000180), &(0x7f0000000680)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x54)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2)

1.118272542s ago: executing program 7 (id=11677):
r0 = dup(0xffffffffffffffff)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x47}]}, &(0x7f0000000200)='syzkaller\x00', 0x7459, 0x2b, &(0x7f0000000340)=""/43, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0xb, 0x1000, 0x5}, 0x10, 0x20d72, 0xffffffffffffffff, 0x2, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x0, 0x2, 0xd, 0x5}, {0x5, 0x1, 0x10, 0xb}], 0x10, 0x6, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000180), &(0x7f0000000680)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x54)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2)

1.114919632s ago: executing program 3 (id=11678):
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f00000003c0), 0xff, 0x52e, &(0x7f0000000f00)="$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")

1.064908232s ago: executing program 6 (id=11679):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000100b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6)
unshare(0x40000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000180)={[{@mblk_io_submit}, {@dioread_nolock}, {@oldalloc}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==")
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200))
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b)
prctl$PR_SET_SECCOMP(0xd, 0x0, 0x0)
shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x5000)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

930.002295ms ago: executing program 8 (id=11680):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000000180c20000030800"], 0x0) (fail_nth: 4)

438.794543ms ago: executing program 3 (id=11681):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r0], 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2007, &(0x7f0000000980)=<r2=>0x0)
r3 = eventfd2(0x9, 0x0)
io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0)
io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r3}])
io_destroy(r2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x200002ac, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x3f6cfe55, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10c, @void, @value}, 0x94)
r4 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x44000, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
capset(0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r4], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = socket(0x10, 0x2, 0x0)
write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000000001100009f669bfe45f14486b8f69692a2000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r8, &(0x7f00000024c0), 0x0}, 0x20)

379.959754ms ago: executing program 8 (id=11682):
syz_emit_ethernet(0x6e, &(0x7f00000007c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x9, 0x6, "c829e4", 0x9, 0x33, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@dstopts={0x2c}]}}}}}}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20)

379.066164ms ago: executing program 8 (id=11683):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r2=>r1}, './cgroup/../file0\x00'})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r3, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x14}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4)
syz_emit_ethernet(0xd4, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0xc6, 0x0, 0x0, 0xff, 0x2f, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x4}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}, {0x8, 0x6558, 0x0, "9fa35b440c672e9640db95afb7ac584b448423a30f3dfbfd50cad13f65c90b7066060fdc1102602c3a39c5c7c395a203d401346f7cfa337a1e727b6ed7490954f0f445cd2726796f3b54f5374f56c2a48fc6b29a56df6c9a23879613a7aef0b849ed24ba7c987167032dcc13084e"}}}}}}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00')
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x0)
r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xfffffe80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x30}]}, 0x48}}, 0x0)
setitimer(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x6}, 0x18)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
connect$pppl2tp(r11, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r12, 0x1, 0x2, 0x3, 0x4, {0xa, 0x4e21, 0xfffffffc, @empty, 0x6}}}, 0x32)
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000))
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4)

314.672895ms ago: executing program 1 (id=11684):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r1}, 0x18)
rt_sigaction(0x40, &(0x7f0000000000)={&(0x7f00000000c0)="c461f9134200c482f5293b66262465f2c543aaaa676666420fadf4c461dd6b651dc4a12966dbc461cc1069e468859a71a4000092663b663b", 0x8000001, 0x0, {[0x4]}}, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r2, 0x9, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r4}, @NHA_ID={0x8, 0x6, 0xef}]}, 0x28}}, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
ioctl$TIOCSETD(r5, 0x5423, 0x0)
ioctl$TIOCSTI(r5, 0x5412, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f0000000600), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

293.764605ms ago: executing program 8 (id=11685):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x18)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x409c884, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
r4 = memfd_secret(0x0)
cachestat(r4, &(0x7f0000000000)={0x2, 0x7fe}, &(0x7f0000000840), 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r4, 0x20, &(0x7f0000000400)={&(0x7f00000001c0)=""/50, 0x32, <r5=>0x0, &(0x7f00000004c0)=""/221, 0xdd}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)

244.902966ms ago: executing program 1 (id=11686):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x0)

244.374806ms ago: executing program 1 (id=11687):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)

162.185307ms ago: executing program 6 (id=11688):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000580)={'tunl0\x00', <r1=>0x0, 0x700, 0x80, 0xfb3f, 0xb759, {{0x3a, 0x4, 0x1, 0x19, 0xe8, 0x68, 0x0, 0xd7, 0x4, 0x0, @local, @rand_addr=0x5, {[@rr={0x7, 0xb, 0x38, [@dev={0xac, 0x14, 0x14, 0xd}, @empty]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0xe, 0x0, [{0x4, 0x8, "3213e85797bc"}]}, @timestamp_prespec={0x44, 0x44, 0x7b, 0x3, 0x7, [{@broadcast, 0x5}, {@empty, 0x7d}, {@loopback, 0x80}, {@broadcast, 0x2}, {@broadcast, 0x9}, {@private=0xa010102, 0x9}, {@private=0xa010101, 0x99}, {@multicast2, 0x5}]}, @timestamp={0x44, 0x2c, 0xaa, 0x0, 0x0, [0x5, 0x9, 0xfffffffd, 0x5, 0xff, 0x2, 0xe48, 0x7, 0x70000000, 0xe]}, @generic={0x83, 0xe, "cd6b5a7ccace0a5002d3becf"}, @timestamp_prespec={0x44, 0x24, 0x36, 0x3, 0x1, [{@loopback, 0x9}, {@loopback, 0x1}, {@multicast1, 0x8}, {@local, 0xffff0ade}]}, @rr={0x7, 0x13, 0xa4, [@rand_addr=0x64010100, @remote, @loopback, @private=0xa010101]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', r1, 0x7, 0x1, 0xb, 0xff, {{0xa, 0x4, 0x2, 0x1f, 0x28, 0x66, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1, {[@end, @lsrr={0x83, 0x13, 0xd1, [@remote, @empty, @empty, @loopback]}]}}}}})
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x1}, {0x8, 0x4}]}, 0x34, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f01020301090212"], 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
syz_usb_connect$uac1(0x5, 0xcb, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x3, 0x1, 0x49, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x556e, 0xa}, [@processing_unit={0x7, 0x24, 0x7, 0x3, 0x2, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x306, 0x1, 0x1, 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x201, 0x4, 0x1, 0x8, 0x9, 0x5}, @selector_unit={0x8, 0x24, 0x5, 0x1, 0x2, "a55a9a"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x300, 0x1, 0x2, 0xf}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x5232, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x53, 0xf0, 0x8, {0x7, 0x25, 0x1, 0x0, 0x0, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x30d, 0x9, 0x2, 'p:'}, @as_header={0x7, 0x24, 0x1, 0x8, 0x7, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x4, 0x0, 0x18, "0cb03ac5ce540590c7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x9, 0xff, {0x7, 0x25, 0x1, 0x80, 0x9, 0x6}}}}}}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x1f7, &(0x7f00000006c0)={0x5, 0xf, 0x1f7, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x8, 0x54, 0x2}, @generic={0xec, 0x10, 0x4, "260cd3ecd28eab672ba7e284886f9ad0e3caf31b660323ad8000d405aa6a99f773264ca2b39641a0cfb380456b27c241b5255c57615d0b0099075a1a1b9dad4a6e4ebf86d89752596b017d4d68d0ba471266b68a83c4a53c8da55ddb1c249ac8608e7e12fb365ccc093b37503025f2df1c3b4a732e21dfcaaac201095304df67cbbdf6a5aa0ee1c01c88e2841d5a5b6a00cc31539570b14be312d206ce9c9703d40ca35fbed5cf7df13cb7479960bfa5531d95079352c5355028492c4bc76ac4aca97a687efbe6b7407a9abcda502d9dc41b3ef953e309efeb4638e709db72c424fd4eb11e8d23fbc3"}, @ss_container_id={0x14, 0x10, 0x4, 0x26, "2c7249c0f8e24ee31853a06cd0ee225f"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x4, 0x5}, @generic={0xd6, 0x10, 0x2, "1bebf184024f9096350096bf1a1dd0c6c5dc1e52b7dea5db193fb45369a7d68b38807667b569c45b639602669aaf21d9b3c3baafb79a5e7bd3f158d0ceffa43bd077cef2d954223df6da3862bbf8da6f8d85cb62103586660d5b9d69095b2db24438f9efe6e5133bb7f1b5b0878c64ee88a895269936801c97d7251d2865f61993326b9f6e6cb8eed1fb0f2184556b6af4dff292c68ce01688414741410353335f9b19a1d8a6cb0875038da24ac0857c283faebaf276c645b7a98aee23668f5c65764c12a5b357e867a6c425fc9c80feb55de1"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x48, 0x2, 0x2, 0xb0, 0x3}]}, 0x6, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0xf0ff}}]})
syz_open_dev$hidraw(0x0, 0x0, 0x81)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_usb_disconnect(r4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000020000000000001000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

141.294448ms ago: executing program 7 (id=11689):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x200004)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x4, 0x7, 0x7ffc1ff3}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = syz_open_dev$sg(0x0, 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0xc4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x22020600)
r3 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r3, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x40000)
write$ppp(r0, &(0x7f0000000580)="1e08c6b3a1fd17", 0x7)

128.458068ms ago: executing program 3 (id=11690):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000100)={0x800600, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="020a000002000000000000"], 0x10}}, 0x0)

70.161669ms ago: executing program 1 (id=11691):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val={'barrier', 0x3d, 0x1}}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x7b4, &(0x7f0000000a00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)

0s ago: executing program 3 (id=11692):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000580)={'tunl0\x00', <r1=>0x0, 0x700, 0x80, 0xfb3f, 0xb759, {{0x3a, 0x4, 0x1, 0x19, 0xe8, 0x68, 0x0, 0xd7, 0x4, 0x0, @local, @rand_addr=0x5, {[@rr={0x7, 0xb, 0x38, [@dev={0xac, 0x14, 0x14, 0xd}, @empty]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0xe, 0x0, [{0x4, 0x8, "3213e85797bc"}]}, @timestamp_prespec={0x44, 0x44, 0x7b, 0x3, 0x7, [{@broadcast, 0x5}, {@empty, 0x7d}, {@loopback, 0x80}, {@broadcast, 0x2}, {@broadcast, 0x9}, {@private=0xa010102, 0x9}, {@private=0xa010101, 0x99}, {@multicast2, 0x5}]}, @timestamp={0x44, 0x2c, 0xaa, 0x0, 0x0, [0x5, 0x9, 0xfffffffd, 0x5, 0xff, 0x2, 0xe48, 0x7, 0x70000000, 0xe]}, @generic={0x83, 0xe, "cd6b5a7ccace0a5002d3becf"}, @timestamp_prespec={0x44, 0x24, 0x36, 0x3, 0x1, [{@loopback, 0x9}, {@loopback, 0x1}, {@multicast1, 0x8}, {@local, 0xffff0ade}]}, @rr={0x7, 0x13, 0xa4, [@rand_addr=0x64010100, @remote, @loopback, @private=0xa010101]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', r1, 0x7, 0x1, 0xb, 0xff, {{0xa, 0x4, 0x2, 0x1f, 0x28, 0x66, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1, {[@end, @lsrr={0x83, 0x13, 0xd1, [@remote, @empty, @empty, @loopback]}]}}}}})
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x1}, {0x8, 0x4}]}, 0x34, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34)
syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f01020301090212"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000020000000000001000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

kernel console output (not intermixed with test programs):

e loop1): ext4_lookup:1787: inode #15: comm syz.1.11202: iget: bad i_size value: 38620345925642
[  923.016279][ T5871] ext4 filesystem being mounted at /443/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  923.044655][ T5871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  923.057268][  T883] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  923.402035][ T5889] lo speed is unknown, defaulting to 1000
[  923.408871][ T5889] dummy0 speed is unknown, defaulting to 1000
[  923.505460][ T5889] loop7: detected capacity change from 0 to 512
[  923.512355][ T5889] EXT4-fs: Ignoring removed mblk_io_submit option
[  923.518817][ T5889] EXT4-fs: Ignoring removed oldalloc option
[  923.533141][ T5889] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  923.566779][ T5888] loop8: detected capacity change from 0 to 1024
[  923.583873][ T5889] EXT4-fs (loop7): 1 truncate cleaned up
[  923.591095][ T5889] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  923.695275][ T5888] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  923.798894][ T5869] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.11202: iget: bad i_size value: 38620345925642
[  923.801508][ T5888] FAULT_INJECTION: forcing a failure.
[  923.801508][ T5888] name failslab, interval 1, probability 0, space 0, times 0
[  923.824114][ T5888] CPU: 1 UID: 0 PID: 5888 Comm: syz.8.11207 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) 
[  923.824150][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  923.824168][ T5888] Call Trace:
[  923.824204][ T5888]  <TASK>
[  923.824215][ T5888]  __dump_stack+0x1d/0x30
[  923.824371][ T5888]  dump_stack_lvl+0xe8/0x140
[  923.824397][ T5888]  dump_stack+0x15/0x1b
[  923.824417][ T5888]  should_fail_ex+0x265/0x280
[  923.824502][ T5888]  should_failslab+0x8c/0xb0
[  923.824581][ T5888]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  923.824622][ T5888]  ? vfs_parse_fs_string+0x72/0xe0
[  923.824669][ T5888]  kmemdup_nul+0x36/0xc0
[  923.824735][ T5888]  vfs_parse_fs_string+0x72/0xe0
[  923.824785][ T5888]  nfs_fs_context_parse_monolithic+0xcd1/0x1280
[  923.824829][ T5888]  parse_monolithic_mount_data+0x43/0x60
[  923.824856][ T5888]  do_new_mount+0x1da/0x680
[  923.824951][ T5888]  path_mount+0x4a4/0xb20
[  923.825006][ T5888]  ? user_path_at+0x109/0x130
[  923.825123][ T5888]  __se_sys_mount+0x28f/0x2e0
[  923.825157][ T5888]  __x64_sys_mount+0x67/0x80
[  923.825187][ T5888]  x64_sys_call+0xd36/0x2fb0
[  923.825214][ T5888]  do_syscall_64+0xd2/0x200
[  923.825241][ T5888]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  923.825285][ T5888]  ? clear_bhb_loop+0x40/0x90
[  923.825322][ T5888]  ? clear_bhb_loop+0x40/0x90
[  923.825414][ T5888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  923.825441][ T5888] RIP: 0033:0x7f588515e929
[  923.825461][ T5888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  923.825485][ T5888] RSP: 002b:00007f58837c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  923.825562][ T5888] RAX: ffffffffffffffda RBX: 00007f5885385fa0 RCX: 00007f588515e929
[  923.825577][ T5888] RDX: 00002000000000c0 RSI: 0000200000000240 RDI: 0000000000000000
[  923.825596][ T5888] RBP: 00007f58837c7090 R08: 0000200000000000 R09: 0000000000000000
[  923.825612][ T5888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  923.825628][ T5888] R13: 0000000000000000 R14: 00007f5885385fa0 R15: 00007ffc0a06adf8
[  923.825735][ T5888]  </TASK>
[  924.093302][ T5894] loop5: detected capacity change from 0 to 128
[  924.125800][ T5904] netlink: 96 bytes leftover after parsing attributes in process `syz.8.11211'.
[  924.148566][  T883] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  924.180428][  T640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  924.202854][ T5910] netlink: 96 bytes leftover after parsing attributes in process `syz.7.11213'.
[  924.242895][ T5908] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  924.250513][ T5908] vhci_hcd: default hub control req: 6001 v8001 i0001 l0
[  924.315272][ T5911] loop8: detected capacity change from 0 to 128
[  924.403465][ T5927] vhci_hcd: invalid port number 96
[  924.408678][ T5927] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  924.408853][ T5926] loop1: detected capacity change from 0 to 2048
[  924.455714][ T5926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  924.529451][  T640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  924.551159][ T5935] loop5: detected capacity change from 0 to 512
[  924.558337][ T5936] vhci_hcd: invalid port number 96
[  924.560233][ T5935] EXT4-fs: Ignoring removed nobh option
[  924.564084][ T5936] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  924.641890][ T5940] netlink: 96 bytes leftover after parsing attributes in process `syz.8.11225'.
[  924.658561][ T5935] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.11223: iget: bad i_size value: 38620345925642
[  924.681622][ T5935] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.11223: couldn't read orphan inode 15 (err -117)
[  924.719595][ T5935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  924.753716][ T5935] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.11223: iget: bad i_size value: 38620345925642
[  924.844701][ T5944] lo speed is unknown, defaulting to 1000
[  924.851156][ T5944] dummy0 speed is unknown, defaulting to 1000
[  924.978004][ T5944] loop1: detected capacity change from 0 to 512
[  924.984901][ T5944] EXT4-fs: Ignoring removed mblk_io_submit option
[  924.991384][ T5944] EXT4-fs: Ignoring removed oldalloc option
[  925.025008][ T5944] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  925.042926][ T5947] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.11223: iget: bad i_size value: 38620345925642
[  925.068676][ T5944] EXT4-fs (loop1): 1 truncate cleaned up
[  925.075293][ T5944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  925.518623][  T640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  925.571446][ T5205] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  925.586963][   T29] kauditd_printk_skb: 171 callbacks suppressed
[  925.586977][   T29] audit: type=1400 audit(1749703600.937:71643): avc:  denied  { read } for  pid=5957 comm="syz.1.11228" dev="nsfs" ino=4026532396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  925.614671][   T29] audit: type=1400 audit(1749703600.937:71644): avc:  denied  { open } for  pid=5957 comm="syz.1.11228" path="net:[4026532396]" dev="nsfs" ino=4026532396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  925.644624][   T29] audit: type=1400 audit(1749703600.997:71645): avc:  denied  { create } for  pid=5957 comm="syz.1.11228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  925.680434][   T29] audit: type=1400 audit(1749703600.997:71646): avc:  denied  { ioctl } for  pid=5957 comm="syz.1.11228" path="socket:[143126]" dev="sockfs" ino=143126 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  925.707124][   T29] audit: type=1400 audit(1749703600.997:71647): avc:  denied  { read write } for  pid=5957 comm="syz.1.11228" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  925.731532][   T29] audit: type=1400 audit(1749703600.997:71648): avc:  denied  { open } for  pid=5957 comm="syz.1.11228" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  925.742800][ T5956] loop7: detected capacity change from 0 to 128
[  925.782536][   T29] audit: type=1400 audit(1749703601.127:71649): avc:  denied  { watch watch_reads } for  pid=5966 comm="syz.3.11234" path="/450" dev="tmpfs" ino=2429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  925.875742][ T5981] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  925.883732][ T5981] vhci_hcd: default hub control req: 6001 v8001 i0001 l0
[  925.887552][ T5979] lo speed is unknown, defaulting to 1000
[  925.919130][ T5979] dummy0 speed is unknown, defaulting to 1000
[  925.955313][ T5992] loop8: detected capacity change from 0 to 512
[  925.960889][ T5991] loop3: detected capacity change from 0 to 2048
[  925.971951][ T5993] loop7: detected capacity change from 0 to 512
[  925.987770][ T5993] EXT4-fs: Ignoring removed nobh option
[  926.001893][ T5992] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.11240: bg 0: block 5: invalid block bitmap
[  926.034377][ T5991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  926.047278][ T5993] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.11242: iget: bad i_size value: 38620345925642
[  926.068889][ T5993] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.11242: couldn't read orphan inode 15 (err -117)
[  926.084937][ T5993] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  926.098964][ T5991] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.11243: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  926.117578][ T5992] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  926.133341][ T5993] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.11242: iget: bad i_size value: 38620345925642
[  926.152472][ T5992] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.11240: invalid indirect mapped block 3 (level 2)
[  926.182432][ T5991] EXT4-fs (loop3): Remounting filesystem read-only
[  926.189778][ T5992] EXT4-fs (loop8): 2 truncates cleaned up
[  926.209543][T31831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  926.242729][ T5992] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  926.260445][ T5983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  926.268994][   T29] audit: type=1400 audit(1749703601.607:71650): avc:  denied  { setattr } for  pid=5982 comm="syz.8.11240" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  926.291383][   T29] audit: type=1400 audit(1749703601.607:71651): avc:  denied  { create } for  pid=5982 comm="syz.8.11240" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  926.311731][   T29] audit: type=1400 audit(1749703601.607:71652): avc:  denied  { read write } for  pid=5982 comm="syz.8.11240" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  926.344707][ T5983] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  926.439201][ T5983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  926.447957][ T5983] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  926.453747][ T6007] lo speed is unknown, defaulting to 1000
[  926.486162][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11247'.
[  926.527030][ T5993] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.11242: iget: bad i_size value: 38620345925642
[  926.542212][ T6007] dummy0 speed is unknown, defaulting to 1000
[  926.557664][ T6015] Cannot find add_set index 0 as target
[  926.711159][  T883] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  926.816693][ T6022] loop3: detected capacity change from 0 to 128
[  926.881647][ T6035] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11254'.
[  927.090426][ T6039] lo speed is unknown, defaulting to 1000
[  927.106944][ T6039] dummy0 speed is unknown, defaulting to 1000
[  927.239339][ T4053] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  927.823803][ T6052] lo speed is unknown, defaulting to 1000
[  927.830294][ T6052] dummy0 speed is unknown, defaulting to 1000
[  927.959353][ T6052] loop3: detected capacity change from 0 to 512
[  927.966212][ T6052] EXT4-fs: Ignoring removed mblk_io_submit option
[  927.972802][ T6052] EXT4-fs: Ignoring removed oldalloc option
[  927.980567][ T6052] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  928.044418][ T6052] EXT4-fs (loop3): 1 truncate cleaned up
[  928.050781][ T6052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  928.520412][T31831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  928.760550][ T6080] lo speed is unknown, defaulting to 1000
[  928.770210][ T6080] dummy0 speed is unknown, defaulting to 1000
[  928.835681][ T6092] loop3: detected capacity change from 0 to 512
[  928.876058][ T6092] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.11274: bg 0: block 5: invalid block bitmap
[  928.926220][ T6092] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  928.989401][ T6092] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.11274: invalid indirect mapped block 3 (level 2)
[  929.009962][ T6092] EXT4-fs (loop3): 2 truncates cleaned up
[  929.017474][ T6092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  929.033693][ T6101] netlink: 'syz.8.11277': attribute type 1 has an invalid length.
[  929.055929][ T6085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  929.059194][ T6101] 8021q: adding VLAN 0 to HW filter on device bond1
[  929.083530][ T6085] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  929.092636][ T6101] 8021q: adding VLAN 0 to HW filter on device bond1
[  929.114203][ T6101] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  929.122787][ T6085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  929.138345][ T6101] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  929.142264][ T6085] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  929.173608][ T6098] lo speed is unknown, defaulting to 1000
[  929.190050][ T6098] dummy0 speed is unknown, defaulting to 1000
[  929.494851][ T6083] syz.7.11273 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  929.509286][ T6083] CPU: 0 UID: 0 PID: 6083 Comm: syz.7.11273 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) 
[  929.509323][ T6083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  929.509341][ T6083] Call Trace:
[  929.509350][ T6083]  <TASK>
[  929.509362][ T6083]  __dump_stack+0x1d/0x30
[  929.509420][ T6083]  dump_stack_lvl+0xe8/0x140
[  929.509442][ T6083]  dump_stack+0x15/0x1b
[  929.509465][ T6083]  dump_header+0x81/0x220
[  929.509504][ T6083]  oom_kill_process+0x334/0x3f0
[  929.509737][ T6083]  out_of_memory+0x979/0xb80
[  929.509773][ T6083]  try_charge_memcg+0x5e6/0x9e0
[  929.509837][ T6083]  obj_cgroup_charge_pages+0xa6/0x150
[  929.509879][ T6083]  __memcg_kmem_charge_page+0x9f/0x170
[  929.509923][ T6083]  __alloc_frozen_pages_noprof+0x188/0x360
[  929.510105][ T6083]  alloc_pages_mpol+0xb3/0x250
[  929.510139][ T6083]  alloc_pages_noprof+0x90/0x130
[  929.510171][ T6083]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  929.510233][ T6083]  __kvmalloc_node_noprof+0x30f/0x4e0
[  929.510275][ T6083]  ? ip_set_alloc+0x1f/0x30
[  929.510308][ T6083]  ? ip_set_alloc+0x1f/0x30
[  929.510343][ T6083]  ? __kmalloc_cache_noprof+0x189/0x320
[  929.510453][ T6083]  ip_set_alloc+0x1f/0x30
[  929.510510][ T6083]  hash_netiface_create+0x282/0x740
[  929.510604][ T6083]  ? __pfx_hash_netiface_create+0x10/0x10
[  929.510653][ T6083]  ip_set_create+0x3cc/0x960
[  929.510751][ T6083]  ? __nla_parse+0x40/0x60
[  929.510784][ T6083]  nfnetlink_rcv_msg+0x4c3/0x590
[  929.510844][ T6083]  ? selinux_capable+0x1f9/0x270
[  929.510916][ T6083]  netlink_rcv_skb+0x120/0x220
[  929.510940][ T6083]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  929.510993][ T6083]  nfnetlink_rcv+0x16b/0x1690
[  929.511054][ T6083]  ? __kfree_skb+0x109/0x150
[  929.511073][ T6083]  ? nlmon_xmit+0x4f/0x60
[  929.511103][ T6083]  ? consume_skb+0x49/0x150
[  929.511161][ T6083]  ? nlmon_xmit+0x4f/0x60
[  929.511186][ T6083]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  929.511214][ T6083]  ? __dev_queue_xmit+0x11c0/0x1fb0
[  929.511239][ T6083]  ? __dev_queue_xmit+0x182/0x1fb0
[  929.511268][ T6083]  ? ref_tracker_free+0x37d/0x3e0
[  929.511316][ T6083]  ? __netlink_deliver_tap+0x4dc/0x500
[  929.511416][ T6083]  netlink_unicast+0x5a1/0x670
[  929.511542][ T6083]  netlink_sendmsg+0x58b/0x6b0
[  929.511577][ T6083]  ? __pfx_netlink_sendmsg+0x10/0x10
[  929.511607][ T6083]  __sock_sendmsg+0x142/0x180
[  929.511662][ T6083]  ____sys_sendmsg+0x31e/0x4e0
[  929.511696][ T6083]  ___sys_sendmsg+0x17b/0x1d0
[  929.511749][ T6083]  __x64_sys_sendmsg+0xd4/0x160
[  929.511856][ T6083]  x64_sys_call+0x2999/0x2fb0
[  929.511887][ T6083]  do_syscall_64+0xd2/0x200
[  929.512027][ T6083]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  929.512054][ T6083]  ? clear_bhb_loop+0x40/0x90
[  929.512127][ T6083]  ? clear_bhb_loop+0x40/0x90
[  929.512156][ T6083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  929.512178][ T6083] RIP: 0033:0x7f38c3dbe929
[  929.512199][ T6083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  929.512288][ T6083] RSP: 002b:00007f38c2427038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  929.512313][ T6083] RAX: ffffffffffffffda RBX: 00007f38c3fe5fa0 RCX: 00007f38c3dbe929
[  929.512409][ T6083] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[  929.512422][ T6083] RBP: 00007f38c3e40b39 R08: 0000000000000000 R09: 0000000000000000
[  929.512436][ T6083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  929.512450][ T6083] R13: 0000000000000000 R14: 00007f38c3fe5fa0 R15: 00007ffcac866ff8
[  929.512472][ T6083]  </TASK>
[  929.858939][ T6083] memory: usage 307200kB, limit 307200kB, failcnt 3353
[  929.866548][ T6083] memory+swap: usage 307792kB, limit 9007199254740988kB, failcnt 0
[  929.874678][ T6083] kmem: usage 225988kB, limit 9007199254740988kB, failcnt 0
[  929.881997][ T6083] Memory cgroup stats for /syz7:
[  929.883229][ T6083] cache 82890752
[  929.892768][ T6083] rss 233472
[  929.896111][ T6083] shmem 0
[  929.899280][ T6083] mapped_file 0
[  929.902809][ T6083] dirty 0
[  929.905795][ T6083] writeback 0
[  929.909176][ T6083] workingset_refault_anon 350
[  929.913968][ T6083] workingset_refault_file 2203
[  929.918791][ T6083] swap 606208
[  929.922124][ T6083] swapcached 0
[  929.925676][ T6083] pgpgin 392518
[  929.929155][ T6083] pgpgout 372215
[  929.932747][ T6083] pgfault 258054
[  929.936343][ T6083] pgmajfault 180
[  929.940063][ T6083] inactive_anon 0
[  929.943931][ T6083] active_anon 233472
[  929.948433][ T6083] inactive_file 0
[  929.952144][ T6083] active_file 36864
[  929.956017][ T6083] unevictable 82890752
[  929.960176][ T6083] hierarchical_memory_limit 314572800
[  929.965679][ T6083] hierarchical_memsw_limit 9223372036854771712
[  929.971897][ T6083] total_cache 82890752
[  929.976026][ T6083] total_rss 233472
[  929.979764][ T6083] total_shmem 0
[  929.983307][ T6083] total_mapped_file 0
[  929.987385][ T6083] total_dirty 0
[  929.990868][ T6083] total_writeback 0
[  929.994749][ T6083] total_workingset_refault_anon 362
[  929.999998][ T6083] total_workingset_refault_file 2203
[  930.005361][ T6083] total_swap 606208
[  930.009183][ T6083] total_swapcached 0
[  930.013188][ T6083] total_pgpgin 396017
[  930.017208][ T6083] total_pgpgout 375714
[  930.021292][ T6083] total_pgfault 261244
[  930.025451][ T6083] total_pgmajfault 187
[  930.029547][ T6083] total_inactive_anon 0
[  930.033799][ T6083] total_active_anon 233472
[  930.038299][ T6083] total_inactive_file 0
[  930.042559][ T6083] total_active_file 36864
[  930.047041][ T6083] total_unevictable 82890752
[  930.051645][ T6083] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.11273,pid=6082,uid=0
[  930.066399][ T6083] Memory cgroup out of memory: Killed process 6083 (syz.7.11273) total-vm:93752kB, anon-rss:1064kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  930.189190][ T6094] Cannot find add_set index 0 as target
[  930.340988][ T6117] lo speed is unknown, defaulting to 1000
[  930.347485][ T6117] dummy0 speed is unknown, defaulting to 1000
[  930.637074][T31831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  930.808299][ T6122] netlink: 96 bytes leftover after parsing attributes in process `syz.7.11285'.
[  931.264946][   T29] kauditd_printk_skb: 46 callbacks suppressed
[  931.264973][   T29] audit: type=1400 audit(1749703605.667:71699): avc:  denied  { create } for  pid=6110 comm="syz.5.11280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  931.291539][   T29] audit: type=1400 audit(1749703605.677:71700): avc:  denied  { sys_admin } for  pid=6110 comm="syz.5.11280" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  931.450952][ T6124] lo speed is unknown, defaulting to 1000
[  931.457885][ T6124] dummy0 speed is unknown, defaulting to 1000
[  931.634448][ T6127] loop1: detected capacity change from 0 to 512
[  931.641014][ T6127] EXT4-fs: Ignoring removed mblk_io_submit option
[  931.647502][ T6127] EXT4-fs: Ignoring removed oldalloc option
[  931.663700][ T6127] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  931.734994][ T6127] EXT4-fs (loop1): 1 truncate cleaned up
[  931.741439][ T6127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  931.889621][ T6135] loop7: detected capacity change from 0 to 2048
[  931.896074][   T29] audit: type=1400 audit(1749703607.237:71701): avc:  denied  { setopt } for  pid=6136 comm="syz.3.11290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  931.916360][   T29] audit: type=1326 audit(1749703607.237:71702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.5.11289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4832e929 code=0x7ffc0000
[  931.940433][   T29] audit: type=1326 audit(1749703607.237:71703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.5.11289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4832e929 code=0x7ffc0000
[  931.964551][   T29] audit: type=1326 audit(1749703607.237:71704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.5.11289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c4832e929 code=0x7ffc0000
[  931.988506][   T29] audit: type=1326 audit(1749703607.237:71705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.5.11289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4832e929 code=0x7ffc0000
[  932.012149][   T29] audit: type=1326 audit(1749703607.237:71706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.5.11289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c4832e929 code=0x7ffc0000
[  932.035783][   T29] audit: type=1326 audit(1749703607.237:71707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.5.11289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4832e929 code=0x7ffc0000
[  932.059544][   T29] audit: type=1326 audit(1749703607.237:71708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.5.11289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c4832e929 code=0x7ffc0000
[  932.156059][  T640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  932.169285][ T6135] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  932.173956][ T6149] netlink: 96 bytes leftover after parsing attributes in process `syz.5.11292'.
[  932.236052][  T883] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  932.282982][ T6160] FAULT_INJECTION: forcing a failure.
[  932.282982][ T6160] name failslab, interval 1, probability 0, space 0, times 0
[  932.296003][ T6160] CPU: 0 UID: 0 PID: 6160 Comm: syz.5.11296 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) 
[  932.296037][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  932.296050][ T6160] Call Trace:
[  932.296058][ T6160]  <TASK>
[  932.296068][ T6160]  __dump_stack+0x1d/0x30
[  932.296090][ T6160]  dump_stack_lvl+0xe8/0x140
[  932.296116][ T6160]  dump_stack+0x15/0x1b
[  932.296199][ T6160]  should_fail_ex+0x265/0x280
[  932.296253][ T6160]  should_failslab+0x8c/0xb0
[  932.296277][ T6160]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  932.296309][ T6160]  ? sidtab_sid2str_get+0xa0/0x130
[  932.296346][ T6160]  kmemdup_noprof+0x2b/0x70
[  932.296382][ T6160]  sidtab_sid2str_get+0xa0/0x130
[  932.296488][ T6160]  security_sid_to_context_core+0x1eb/0x2e0
[  932.296526][ T6160]  security_sid_to_context+0x27/0x40
[  932.296560][ T6160]  selinux_lsmprop_to_secctx+0x67/0xf0
[  932.296689][ T6160]  security_lsmprop_to_secctx+0x43/0x80
[  932.296728][ T6160]  audit_log_task_context+0x77/0x190
[  932.296778][ T6160]  audit_log_task+0xf4/0x250
[  932.296819][ T6160]  audit_seccomp+0x61/0x100
[  932.296855][ T6160]  ? __seccomp_filter+0x68c/0x10d0
[  932.296887][ T6160]  __seccomp_filter+0x69d/0x10d0
[  932.296920][ T6160]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  932.296951][ T6160]  ? vfs_write+0x75e/0x8e0
[  932.297021][ T6160]  ? __rcu_read_unlock+0x4f/0x70
[  932.297052][ T6160]  ? __fget_files+0x184/0x1c0
[  932.297105][ T6160]  __secure_computing+0x82/0x150
[  932.297137][ T6160]  syscall_trace_enter+0xcf/0x1e0
[  932.297165][ T6160]  do_syscall_64+0xac/0x200
[  932.297188][ T6160]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  932.297249][ T6160]  ? clear_bhb_loop+0x40/0x90
[  932.297271][ T6160]  ? clear_bhb_loop+0x40/0x90
[  932.297378][ T6160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  932.297408][ T6160] RIP: 0033:0x7f5c4832e929
[  932.297430][ T6160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  932.297453][ T6160] RSP: 002b:00007f5c46997038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  932.297480][ T6160] RAX: ffffffffffffffda RBX: 00007f5c48555fa0 RCX: 00007f5c4832e929
[  932.297497][ T6160] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000006
[  932.297547][ T6160] RBP: 00007f5c46997090 R08: 0000000000000000 R09: 0000000000000000
[  932.297564][ T6160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  932.297639][ T6160] R13: 0000000000000000 R14: 00007f5c48555fa0 R15: 00007ffd1793b5b8
[  932.297748][ T6160]  </TASK>
[  932.385069][ T6162] vhci_hcd: invalid port number 96
[  932.421590][ T6163] loop8: detected capacity change from 0 to 2048
[  932.426905][ T6162] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  932.586462][ T6163] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  932.599697][ T6163] EXT4-fs error (device loop8): ext4_find_extent:939: inode #2: comm syz.8.11297: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  932.618785][ T6163] EXT4-fs (loop8): Remounting filesystem read-only
[  932.694552][ T6176] lo speed is unknown, defaulting to 1000
[  932.702019][ T6176] dummy0 speed is unknown, defaulting to 1000
[  932.779819][ T6176] loop7: detected capacity change from 0 to 512
[  932.786782][ T6176] EXT4-fs: Ignoring removed mblk_io_submit option
[  932.793400][ T6176] EXT4-fs: Ignoring removed oldalloc option
[  932.800675][ T6176] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  932.815353][ T6176] EXT4-fs (loop7): 1 truncate cleaned up
[  932.822028][ T6176] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  932.838720][ T4053] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  933.004374][ T6184] netlink: 96 bytes leftover after parsing attributes in process `syz.5.11304'.
[  933.039565][ T6177] loop1: detected capacity change from 0 to 512
[  933.055166][ T6177] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.11301: bg 0: block 5: invalid block bitmap
[  933.068331][ T6177] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  933.077562][ T6177] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.11301: invalid indirect mapped block 3 (level 2)
[  933.092903][ T6177] EXT4-fs (loop1): 2 truncates cleaned up
[  933.099363][ T6177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  933.118524][ T6174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  933.141116][ T6174] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  933.158212][ T6195] loop3: detected capacity change from 0 to 2048
[  933.167688][ T6174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  933.172645][  T883] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  933.185352][ T6187] loop5: detected capacity change from 0 to 128
[  933.202016][ T6174] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  933.214037][ T6195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  933.294860][T31831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  933.328968][ T6203] loop7: detected capacity change from 0 to 512
[  933.348986][ T6203] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.11309: bg 0: block 5: invalid block bitmap
[  933.365458][ T6203] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  933.374641][ T6203] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.11309: invalid indirect mapped block 3 (level 2)
[  933.390662][ T6207] wg2: entered promiscuous mode
[  933.395710][ T6207] wg2: entered allmulticast mode
[  933.401411][ T6203] EXT4-fs (loop7): 2 truncates cleaned up
[  933.408289][ T6203] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  933.425968][ T6203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  933.434680][ T6203] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  933.443881][ T6203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  933.452446][ T6203] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  933.473534][ T6217] vhci_hcd: invalid port number 96
[  933.478874][ T6217] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  933.510834][ T6220] loop5: detected capacity change from 0 to 1024
[  933.517985][ T6220] EXT4-fs: Ignoring removed mblk_io_submit option
[  933.524727][ T6220] EXT4-fs: Ignoring removed nobh option
[  933.530369][ T6220] EXT4-fs: Ignoring removed bh option
[  933.543843][ T6220] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal
[  933.641623][ T6227] veth0: entered promiscuous mode
[  933.648092][ T6226] veth0: left promiscuous mode
[  933.691758][ T6231] loop5: detected capacity change from 0 to 512
[  933.701302][ T6231] EXT4-fs: Ignoring removed nobh option
[  933.709659][ T6231] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.11318: iget: bad i_size value: 38620345925642
[  933.726064][ T6231] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.11318: couldn't read orphan inode 15 (err -117)
[  933.764807][ T6233] lo speed is unknown, defaulting to 1000
[  933.771381][ T6233] dummy0 speed is unknown, defaulting to 1000
[  933.878359][ T6231] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  933.898054][ T6231] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.11318: iget: bad i_size value: 38620345925642
[  933.920565][ T6233] loop8: detected capacity change from 0 to 512
[  933.927527][ T6233] EXT4-fs: Ignoring removed mblk_io_submit option
[  933.934152][ T6233] EXT4-fs: Ignoring removed oldalloc option
[  933.941031][ T6233] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  933.966661][ T6233] EXT4-fs (loop8): 1 truncate cleaned up
[  933.973881][ T6233] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  934.179550][  T640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  934.244290][ T6242] loop3: detected capacity change from 0 to 2048
[  934.255188][ T6242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  934.267926][ T5205] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  934.289572][T31831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  934.315719][ T6251] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11323'.
[  934.488298][  T883] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  934.502818][ T6254] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11326'.
[  934.517634][ T4053] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  934.662981][ T6262] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  934.670917][ T6262] vhci_hcd: default hub control req: 6001 v8001 i0001 l0
[  934.697447][ T6268] loop7: detected capacity change from 0 to 512
[  934.706256][ T6258] loop8: detected capacity change from 0 to 128
[  934.715050][ T6265] loop5: detected capacity change from 0 to 512
[  934.725408][ T6268] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  934.738966][ T6265] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.11330: bg 0: block 5: invalid block bitmap
[  934.752864][ T6268] EXT4-fs (loop7): 1 truncate cleaned up
[  934.759044][ T6268] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  934.774376][ T6265] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  934.818544][ T6277] loop3: detected capacity change from 0 to 512
[  934.833599][ T6265] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.11330: invalid indirect mapped block 3 (level 2)
[  934.846306][ T6277] EXT4-fs: Ignoring removed nobh option
[  934.863835][ T6277] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.11332: iget: bad i_size value: 38620345925642
[  934.866038][ T6265] EXT4-fs (loop5): 2 truncates cleaned up
[  934.891281][ T6277] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.11332: couldn't read orphan inode 15 (err -117)
[  934.910509][ T6265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  934.941953][ T6277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  934.947253][ T6265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  934.964041][ T6277] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.11332: iget: bad i_size value: 38620345925642
[  934.985874][ T6265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  935.006868][ T6283] loop8: detected capacity change from 0 to 2048
[  935.015244][ T6265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  935.029272][  T883] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  935.041037][ T6265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  935.053760][ T6283] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  935.096704][ T6283] EXT4-fs error (device loop8): ext4_find_extent:939: inode #2: comm syz.8.11335: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  935.098643][ T6287] lo speed is unknown, defaulting to 1000
[  935.120688][ T6287] dummy0 speed is unknown, defaulting to 1000
[  935.121319][ T6289] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11337'.
[  935.139691][ T6283] EXT4-fs (loop8): Remounting filesystem read-only
[  935.202752][ T4053] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  935.357461][T31831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  935.403789][ T6309] loop1: detected capacity change from 0 to 512
[  935.411467][ T6309] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  935.442814][ T6309] EXT4-fs (loop1): 1 truncate cleaned up
[  935.445152][ T6312] wireguard2: entered allmulticast mode
[  935.449476][ T6309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  935.468435][ T6315] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11347'.
[  935.489724][ T6318] loop8: detected capacity change from 0 to 2048
[  935.542841][ T6318] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  935.615884][ T4053] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  935.700733][  T640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  935.716522][ T6329] loop8: detected capacity change from 0 to 1024
[  935.723921][ T6329] EXT4-fs: Ignoring removed mblk_io_submit option
[  935.736236][ T6329] EXT4-fs: Ignoring removed nobh option
[  935.741911][ T6329] EXT4-fs: Ignoring removed bh option
[  935.800095][ T6329] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal
[  935.838299][ T6332] lo speed is unknown, defaulting to 1000
[  935.844862][ T6332] dummy0 speed is unknown, defaulting to 1000
[  935.950874][ T6332] loop3: detected capacity change from 0 to 512
[  935.957646][ T6332] EXT4-fs: Ignoring removed mblk_io_submit option
[  935.964175][ T6332] EXT4-fs: Ignoring removed oldalloc option
[  936.006985][ T6332] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  936.027043][ T6332] EXT4-fs (loop3): 1 truncate cleaned up
[  936.034126][ T6332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  936.134925][ T5205] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  936.199118][ T6343] lo speed is unknown, defaulting to 1000
[  936.205438][ T6343] dummy0 speed is unknown, defaulting to 1000
[  936.213461][ T6341] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  936.231146][ T6346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11352'.
[  936.240466][ T6341] vhci_hcd: default hub control req: 6001 v8001 i0001 l0
[  936.274053][   T29] kauditd_printk_skb: 229 callbacks suppressed
[  936.274072][   T29] audit: type=1326 audit(1749703611.607:71937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6338 comm="syz.1.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f135bb7e929 code=0x7ffc0000
[  936.304349][   T29] audit: type=1326 audit(1749703611.627:71938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6338 comm="syz.1.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135bb7e929 code=0x7ffc0000
[  936.328378][   T29] audit: type=1326 audit(1749703611.627:71939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6338 comm="syz.1.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135bb7e929 code=0x7ffc0000
[  936.352438][   T29] audit: type=1326 audit(1749703611.707:71940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6338 comm="syz.1.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f135bb7e929 code=0x7ffc0000
[  936.376425][   T29] audit: type=1326 audit(1749703611.707:71941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6338 comm="syz.1.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135bb7e929 code=0x7ffc0000
[  936.400576][   T29] audit: type=1326 audit(1749703611.707:71942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6338 comm="syz.1.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135bb7e929 code=0x7ffc0000
[  936.475243][T31831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  936.522295][   T29] audit: type=1326 audit(1749703611.867:71943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6338 comm="syz.1.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f135bb7e929 code=0x7ffc0000
[  936.546195][   T29] audit: type=1326 audit(1749703611.867:71944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6338 comm="syz.1.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135bb7e929 code=0x7ffc0000
[  936.562657][ T6357] lo speed is unknown, defaulting to 1000
[  936.570202][   T29] audit: type=1326 audit(1749703611.867:71945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6338 comm="syz.1.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135bb7e929 code=0x7ffc0000
[  936.576397][ T6357] dummy0 speed is unknown, defaulting to 1000
[  936.676496][ T6360] wireguard4: entered allmulticast mode
[  936.708357][ T6353] lo speed is unknown, defaulting to 1000
[  936.727898][ T6369] Cannot find add_set index 0 as target
[  936.745199][ T6357] Cannot find add_set index 0 as target
[  936.751512][ T6353] dummy0 speed is unknown, defaulting to 1000
[  936.799380][   T29] audit: type=1326 audit(1749703612.147:71946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6374 comm="syz.8.11368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588515e929 code=0x7ffc0000
[  936.878240][ T6375] loop8: detected capacity change from 0 to 1024
[  936.887388][ T6375] EXT4-fs: Ignoring removed mblk_io_submit option
[  936.894273][ T6375] EXT4-fs: Ignoring removed nobh option
[  936.899925][ T6375] EXT4-fs: Ignoring removed bh option
[  936.912499][ T6375] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal
[  937.808021][ T6388] loop7: detected capacity change from 0 to 512
[  937.814939][ T6388] EXT4-fs: Ignoring removed mblk_io_submit option
[  937.821530][ T6388] EXT4-fs: Ignoring removed oldalloc option
[  937.954827][ T6388] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  938.010905][ T6384] lo speed is unknown, defaulting to 1000
[  938.017918][ T6384] dummy0 speed is unknown, defaulting to 1000
[  938.068090][ T6389] lo speed is unknown, defaulting to 1000
[  938.074660][ T6389] dummy0 speed is unknown, defaulting to 1000
[  938.106200][ T6388] EXT4-fs (loop7): 1 truncate cleaned up
[  938.112477][ T6388] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  938.182006][ T6385] loop8: detected capacity change from 0 to 512
[  938.188708][ T6385] EXT4-fs: Ignoring removed mblk_io_submit option
[  938.195459][ T6385] EXT4-fs: Ignoring removed oldalloc option
[  938.202203][ T6385] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  938.214839][ T6385] EXT4-fs (loop8): 1 truncate cleaned up
[  938.221085][ T6385] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  938.303666][ T6403] lo speed is unknown, defaulting to 1000
[  938.310004][ T6403] dummy0 speed is unknown, defaulting to 1000
[  938.330072][  T883] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  938.339331][ T6407] loop3: detected capacity change from 0 to 512
[  938.342929][ T6409] netlink: 'syz.5.11379': attribute type 1 has an invalid length.
[  938.358821][ T6407] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.11377: bg 0: block 5: invalid block bitmap
[  938.371660][ T6407] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  938.382339][ T6407] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.11377: invalid indirect mapped block 3 (level 2)
[  938.457717][ T6407] EXT4-fs (loop3): 2 truncates cleaned up
[  938.464711][ T4053] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  938.484748][ T6407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  938.499271][ T6409] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  938.529966][ T6420] netlink: 96 bytes leftover after parsing attributes in process `syz.7.11381'.
[  938.605365][T31831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  938.617805][T10598] IPVS: starting estimator thread 0...
[  938.657142][ T6428] loop8: detected capacity change from 0 to 1024
[  938.667607][ T6432] loop7: detected capacity change from 0 to 512
[  938.670729][ T6428] EXT4-fs: Ignoring removed mblk_io_submit option
[  938.681464][ T6428] EXT4-fs: Ignoring removed nobh option
[  938.687178][ T6428] EXT4-fs: Ignoring removed bh option
[  938.706118][ T6428] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal
[  938.706752][ T6436] lo speed is unknown, defaulting to 1000
[  938.722339][ T6431] IPVS: using max 2304 ests per chain, 115200 per kthread
[  938.730162][ T6432] lo speed is unknown, defaulting to 1000
[  938.748298][ T6432] dummy0 speed is unknown, defaulting to 1000
[  938.764482][ T6436] dummy0 speed is unknown, defaulting to 1000
[  938.917701][ T6456] loop7: detected capacity change from 0 to 512
[  938.924983][ T6456] EXT4-fs: Ignoring removed nobh option
[  938.925520][ T6458] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11394'.
[  938.933385][ T6456] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.11393: iget: bad i_size value: 38620345925642
[  938.971604][ T6456] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.11393: couldn't read orphan inode 15 (err -117)
[  939.053046][ T6456] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.11393: iget: bad i_size value: 38620345925642
[  939.081578][ T6463] lo speed is unknown, defaulting to 1000
[  939.088191][ T6463] dummy0 speed is unknown, defaulting to 1000
[  939.150689][ T6463] loop8: detected capacity change from 0 to 512
[  939.157561][ T6463] EXT4-fs: Ignoring removed mblk_io_submit option
[  939.164110][ T6463] EXT4-fs: Ignoring removed oldalloc option
[  939.174785][ T6463] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  939.357704][ T6463] EXT4-fs (loop8): 1 truncate cleaned up
[  939.489001][ T6470] lo speed is unknown, defaulting to 1000
[  939.495733][ T6470] dummy0 speed is unknown, defaulting to 1000
[  939.606464][ T6483] FAULT_INJECTION: forcing a failure.
[  939.606464][ T6483] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  939.619713][ T6483] CPU: 1 UID: 0 PID: 6483 Comm: syz.7.11401 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) 
[  939.619745][ T6483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  939.619758][ T6483] Call Trace:
[  939.619763][ T6483]  <TASK>
[  939.619813][ T6483]  __dump_stack+0x1d/0x30
[  939.619850][ T6483]  dump_stack_lvl+0xe8/0x140
[  939.619877][ T6483]  dump_stack+0x15/0x1b
[  939.619900][ T6483]  should_fail_ex+0x265/0x280
[  939.619952][ T6483]  should_fail+0xb/0x20
[  939.620042][ T6483]  should_fail_usercopy+0x1a/0x20
[  939.620068][ T6483]  _copy_from_user+0x1c/0xb0
[  939.620097][ T6483]  memdup_user+0x5e/0xd0
[  939.620126][ T6483]  strndup_user+0x68/0xb0
[  939.620195][ T6483]  __se_sys_mount+0x4d/0x2e0
[  939.620216][ T6483]  ? fput+0x8f/0xc0
[  939.620243][ T6483]  ? ksys_write+0x192/0x1a0
[  939.620283][ T6483]  __x64_sys_mount+0x67/0x80
[  939.620310][ T6483]  x64_sys_call+0xd36/0x2fb0
[  939.620331][ T6483]  do_syscall_64+0xd2/0x200
[  939.620357][ T6483]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  939.620392][ T6483]  ? clear_bhb_loop+0x40/0x90
[  939.620497][ T6483]  ? clear_bhb_loop+0x40/0x90
[  939.620524][ T6483]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  939.620612][ T6483] RIP: 0033:0x7f38c3dbe929
[  939.620633][ T6483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  939.620658][ T6483] RSP: 002b:00007f38c2427038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  939.620751][ T6483] RAX: ffffffffffffffda RBX: 00007f38c3fe5fa0 RCX: 00007f38c3dbe929
[  939.620769][ T6483] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000
[  939.620786][ T6483] RBP: 00007f38c2427090 R08: 00002000000006c0 R09: 0000000000000000
[  939.620803][ T6483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  939.620820][ T6483] R13: 0000000000000000 R14: 00007f38c3fe5fa0 R15: 00007ffcac866ff8
[  939.620888][ T6483]  </TASK>
[  939.938787][ T6490] loop7: detected capacity change from 0 to 2048
[  939.976084][ T6490] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.11404: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  939.996351][ T6495] netlink: 96 bytes leftover after parsing attributes in process `syz.8.11407'.
[  940.006326][ T6490] EXT4-fs (loop7): Remounting filesystem read-only
[  940.054075][ T6500] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11408'.
[  940.107057][T10598] IPVS: starting estimator thread 0...
[  940.135763][ T6512] loop7: detected capacity change from 0 to 512
[  940.178488][ T6512] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.11413: Failed to acquire dquot type 1
[  940.200760][ T6512] EXT4-fs (loop7): 1 truncate cleaned up
[  940.202365][ T6509] IPVS: using max 1920 ests per chain, 96000 per kthread
[  940.212957][ T6512] ext4 filesystem being mounted at /349/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  940.312591][ T6521] lo speed is unknown, defaulting to 1000
[  940.334998][ T6521] dummy0 speed is unknown, defaulting to 1000
[  940.440065][ T6526] lo speed is unknown, defaulting to 1000
[  940.457056][ T6526] dummy0 speed is unknown, defaulting to 1000
[  940.498168][ T6532] netlink: 96 bytes leftover after parsing attributes in process `syz.7.11420'.
[  940.523980][ T6533] Cannot find add_set index 0 as target
[  940.678613][ T6535] loop7: detected capacity change from 0 to 128
[  940.734066][ T6539] loop1: detected capacity change from 0 to 512
[  940.747755][ T6539] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.11422: bg 0: block 5: invalid block bitmap
[  940.760781][ T6543] loop7: detected capacity change from 0 to 512
[  940.782594][ T6539] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  940.792955][ T6543] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.11423: Failed to acquire dquot type 1
[  940.796360][ T6539] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.11422: invalid indirect mapped block 3 (level 2)
[  940.818162][ T6539] EXT4-fs (loop1): 2 truncates cleaned up
[  940.825581][ T6543] EXT4-fs (loop7): 1 truncate cleaned up
[  940.830002][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  940.841275][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  940.853722][ T6543] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  940.865774][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  940.876995][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  941.041373][ T6563] netlink: 96 bytes leftover after parsing attributes in process `syz.7.11431'.
[  941.296310][   T29] kauditd_printk_skb: 291 callbacks suppressed
[  941.296325][   T29] audit: type=1400 audit(1749703616.647:72234): avc:  denied  { getopt } for  pid=6570 comm="syz.5.11434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  941.391907][ T6575] lo speed is unknown, defaulting to 1000
[  941.398515][ T6575] dummy0 speed is unknown, defaulting to 1000
[  941.538525][ T6574] loop7: detected capacity change from 0 to 512
[  941.545342][ T6574] EXT4-fs: Ignoring removed mblk_io_submit option
[  941.551797][ T6574] EXT4-fs: Ignoring removed oldalloc option
[  941.648817][ T6574] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  941.652713][   T29] audit: type=1400 audit(1749703616.677:72235): avc:  denied  { ioctl } for  pid=6564 comm="syz.7.11432" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  941.660457][ T6574] EXT4-fs (loop7): 1 truncate cleaned up
[  941.757461][   T29] audit: type=1400 audit(1749703617.097:72236): avc:  denied  { write } for  pid=6564 comm="syz.7.11432" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  941.780808][   T29] audit: type=1400 audit(1749703617.097:72237): avc:  denied  { read append open } for  pid=6564 comm="syz.7.11432" path="/360/bus/memory.stat" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  941.871663][   T29] audit: type=1400 audit(1749703617.217:72238): avc:  denied  { create } for  pid=6582 comm="syz.3.11438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  941.936852][ T6591] netlink: 'syz.5.11441': attribute type 1 has an invalid length.
[  941.952997][ T6591] 8021q: adding VLAN 0 to HW filter on device bond1
[  941.969341][ T6591] 8021q: adding VLAN 0 to HW filter on device bond1
[  941.992362][ T6591] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  942.007095][ T6591] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  942.095944][   T29] audit: type=1326 audit(1749703617.447:72239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.1.11445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135bb7e929 code=0x7ffc0000
[  942.119788][   T29] audit: type=1326 audit(1749703617.447:72240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.1.11445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135bb7e929 code=0x7ffc0000
[  942.154638][ T6604] loop7: detected capacity change from 0 to 2048
[  942.188349][ T6601] loop1: detected capacity change from 0 to 1024
[  942.216001][ T6601] EXT4-fs: Ignoring removed mblk_io_submit option
[  942.232308][   T29] audit: type=1326 audit(1749703617.447:72241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.1.11445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f135bb7e929 code=0x7ffc0000
[  942.256251][   T29] audit: type=1326 audit(1749703617.447:72242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.1.11445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135bb7e929 code=0x7ffc0000
[  942.256309][ T6601] EXT4-fs: Ignoring removed nobh option
[  942.280041][   T29] audit: type=1326 audit(1749703617.447:72243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.1.11445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135bb7e929 code=0x7ffc0000
[  942.309333][ T6601] EXT4-fs: Ignoring removed bh option
[  942.341589][ T6611] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  942.380641][ T6613] loop5: detected capacity change from 0 to 2048
[  942.402604][ T6601] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal
[  942.475099][ T6621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11451'.
[  942.539172][ T6625] loop5: detected capacity change from 0 to 512
[  942.567664][ T6625] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.11453: Failed to acquire dquot type 1
[  942.587604][ T6625] EXT4-fs (loop5): 1 truncate cleaned up
[  942.595137][ T6625] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  942.613858][ T6636] loop1: detected capacity change from 0 to 512
[  942.624676][ T6636] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.11455: bg 0: block 5: invalid block bitmap
[  942.637966][ T6636] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  942.648215][ T6636] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.11455: invalid indirect mapped block 3 (level 2)
[  942.670184][ T6636] EXT4-fs (loop1): 2 truncates cleaned up
[  942.682966][ T6642] loop8: detected capacity change from 0 to 512
[  942.715027][ T6642] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.11458: Failed to acquire dquot type 1
[  942.739419][ T6647] loop1: detected capacity change from 0 to 2048
[  942.739548][ T6642] EXT4-fs (loop8): 1 truncate cleaned up
[  942.757619][ T6642] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  942.960336][ T6664] loop1: detected capacity change from 0 to 512
[  942.977091][ T6664] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.11466: bg 0: block 5: invalid block bitmap
[  943.005570][ T6664] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  943.039960][ T6664] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.11466: invalid indirect mapped block 3 (level 2)
[  943.076335][ T6664] EXT4-fs (loop1): 2 truncates cleaned up
[  943.117103][ T6664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  943.152950][ T6664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  943.184974][ T6664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  943.208900][ T6664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  943.316370][ T6638] syz.7.11457 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  943.330878][ T6638] CPU: 0 UID: 0 PID: 6638 Comm: syz.7.11457 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) 
[  943.330917][ T6638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  943.330935][ T6638] Call Trace:
[  943.330971][ T6638]  <TASK>
[  943.331023][ T6638]  __dump_stack+0x1d/0x30
[  943.331045][ T6638]  dump_stack_lvl+0xe8/0x140
[  943.331138][ T6638]  dump_stack+0x15/0x1b
[  943.331232][ T6638]  dump_header+0x81/0x220
[  943.331274][ T6638]  oom_kill_process+0x334/0x3f0
[  943.331340][ T6638]  out_of_memory+0x979/0xb80
[  943.331425][ T6638]  try_charge_memcg+0x5e6/0x9e0
[  943.331459][ T6638]  obj_cgroup_charge_pages+0xa6/0x150
[  943.331496][ T6638]  __memcg_kmem_charge_page+0x9f/0x170
[  943.331529][ T6638]  __alloc_frozen_pages_noprof+0x188/0x360
[  943.331629][ T6638]  alloc_pages_mpol+0xb3/0x250
[  943.331674][ T6638]  alloc_pages_noprof+0x90/0x130
[  943.331744][ T6638]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  943.331800][ T6638]  __kvmalloc_node_noprof+0x30f/0x4e0
[  943.331966][ T6638]  ? ip_set_alloc+0x1f/0x30
[  943.332001][ T6638]  ? ip_set_alloc+0x1f/0x30
[  943.332099][ T6638]  ? __kmalloc_cache_noprof+0x189/0x320
[  943.332136][ T6638]  ip_set_alloc+0x1f/0x30
[  943.332248][ T6638]  hash_netiface_create+0x282/0x740
[  943.332306][ T6638]  ? __pfx_hash_netiface_create+0x10/0x10
[  943.332349][ T6638]  ip_set_create+0x3cc/0x960
[  943.332384][ T6638]  ? __nla_parse+0x40/0x60
[  943.332476][ T6638]  nfnetlink_rcv_msg+0x4c3/0x590
[  943.332540][ T6638]  ? selinux_capable+0x1f9/0x270
[  943.332576][ T6638]  netlink_rcv_skb+0x120/0x220
[  943.332601][ T6638]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  943.332661][ T6638]  nfnetlink_rcv+0x16b/0x1690
[  943.332692][ T6638]  ? __kfree_skb+0x109/0x150
[  943.332710][ T6638]  ? nlmon_xmit+0x4f/0x60
[  943.332739][ T6638]  ? consume_skb+0x49/0x150
[  943.332787][ T6638]  ? nlmon_xmit+0x4f/0x60
[  943.332812][ T6638]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  943.332863][ T6638]  ? __dev_queue_xmit+0x11c0/0x1fb0
[  943.332890][ T6638]  ? __dev_queue_xmit+0x182/0x1fb0
[  943.332923][ T6638]  ? ref_tracker_free+0x37d/0x3e0
[  943.333050][ T6638]  ? __netlink_deliver_tap+0x4dc/0x500
[  943.333088][ T6638]  netlink_unicast+0x5a1/0x670
[  943.333129][ T6638]  netlink_sendmsg+0x58b/0x6b0
[  943.333226][ T6638]  ? __pfx_netlink_sendmsg+0x10/0x10
[  943.333257][ T6638]  __sock_sendmsg+0x142/0x180
[  943.333291][ T6638]  ____sys_sendmsg+0x31e/0x4e0
[  943.333387][ T6638]  ___sys_sendmsg+0x17b/0x1d0
[  943.333438][ T6638]  __x64_sys_sendmsg+0xd4/0x160
[  943.333466][ T6638]  x64_sys_call+0x2999/0x2fb0
[  943.333555][ T6638]  do_syscall_64+0xd2/0x200
[  943.333579][ T6638]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  943.333606][ T6638]  ? clear_bhb_loop+0x40/0x90
[  943.333634][ T6638]  ? clear_bhb_loop+0x40/0x90
[  943.333665][ T6638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  943.333707][ T6638] RIP: 0033:0x7f38c3dbe929
[  943.333725][ T6638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  943.333750][ T6638] RSP: 002b:00007f38c2427038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  943.333775][ T6638] RAX: ffffffffffffffda RBX: 00007f38c3fe5fa0 RCX: 00007f38c3dbe929
[  943.333819][ T6638] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[  943.333832][ T6638] RBP: 00007f38c3e40b39 R08: 0000000000000000 R09: 0000000000000000
[  943.333846][ T6638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  943.333862][ T6638] R13: 0000000000000000 R14: 00007f38c3fe5fa0 R15: 00007ffcac866ff8
[  943.333891][ T6638]  </TASK>
[  943.682356][ T6638] memory: usage 307200kB, limit 307200kB, failcnt 3512
[  943.689303][ T6638] memory+swap: usage 307988kB, limit 9007199254740988kB, failcnt 0
[  943.697532][ T6638] kmem: usage 226180kB, limit 9007199254740988kB, failcnt 0
[  943.705003][ T6638] Memory cgroup stats for /syz7:
[  943.861914][ T6638] cache 82890752
[  943.870726][ T6638] rss 4096
[  943.873816][ T6638] shmem 0
[  943.876784][ T6638] mapped_file 0
[  943.880349][ T6638] dirty 0
[  943.883368][ T6638] writeback 32768
[  943.887058][ T6638] workingset_refault_anon 355
[  943.891867][ T6638] workingset_refault_file 2299
[  943.897054][ T6638] swap 806912
[  943.900485][ T6638] swapcached 32768
[  943.904386][ T6638] pgpgin 407967
[  943.907940][ T6638] pgpgout 387712
[  943.911544][ T6638] pgfault 275972
[  943.915206][ T6638] pgmajfault 187
[  943.918814][ T6638] inactive_anon 32768
[  943.922868][ T6638] active_anon 0
[  943.926366][ T6638] inactive_file 40960
[  943.930487][ T6638] active_file 0
[  943.934031][ T6638] unevictable 82890752
[  943.938152][ T6638] hierarchical_memory_limit 314572800
[  943.943950][ T6638] hierarchical_memsw_limit 9223372036854771712
[  943.950547][ T6638] total_cache 82890752
[  943.954779][ T6638] total_rss 4096
[  943.960203][ T6638] total_shmem 0
[  943.963784][ T6638] total_mapped_file 0
[  943.969481][ T6638] total_dirty 0
[  943.973412][ T6638] total_writeback 32768
[  943.977641][ T6638] total_workingset_refault_anon 367
[  943.983017][ T6638] total_workingset_refault_file 2299
[  943.988448][ T6638] total_swap 806912
[  943.992352][ T6638] total_swapcached 32768
[  943.996676][ T6638] total_pgpgin 411466
[  944.000730][ T6638] total_pgpgout 391211
[  944.004959][ T6638] total_pgfault 279162
[  944.009138][ T6638] total_pgmajfault 194
[  944.013500][ T6638] total_inactive_anon 32768
[  944.018049][ T6638] total_active_anon 0
[  944.022080][ T6638] total_inactive_file 40960
[  944.026690][ T6638] total_active_file 0
[  944.030817][ T6638] total_unevictable 82890752
[  944.035788][ T6638] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.11457,pid=6637,uid=0
[  944.050783][ T6638] Memory cgroup out of memory: Killed process 6637 (syz.7.11457) total-vm:95800kB, anon-rss:936kB, file-rss:22192kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  944.088078][ T6680] lo speed is unknown, defaulting to 1000
[  944.095782][ T6680] dummy0 speed is unknown, defaulting to 1000
[  944.133462][ T6680] loop8: detected capacity change from 0 to 512
[  944.140266][ T6680] EXT4-fs: Ignoring removed mblk_io_submit option
[  944.147141][ T6680] EXT4-fs: Ignoring removed oldalloc option
[  944.156306][ T6680] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  944.170557][ T6680] EXT4-fs (loop8): 1 truncate cleaned up
[  944.316639][ T6690] netlink: 'syz.8.11471': attribute type 10 has an invalid length.
[  944.342180][ T6690] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  944.365495][ T6690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  944.396436][ T6693] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11471'.
[  944.478897][ T6696] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11473'.
[  944.481874][ T6701] netlink: 76 bytes leftover after parsing attributes in process `syz.8.11475'.
[  944.516351][ T6700] wireguard3: entered allmulticast mode
[  944.603658][ T6712] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  944.695818][ T6719] loop8: detected capacity change from 0 to 512
[  944.731446][ T6719] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.11483: Failed to acquire dquot type 1
[  944.753201][ T6719] EXT4-fs (loop8): 1 truncate cleaned up
[  944.759522][ T6719] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  944.770502][ T6722] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set
[  944.809153][ T6724] netlink: 96 bytes leftover after parsing attributes in process `syz.7.11484'.
[  944.849120][ T6726] loop8: detected capacity change from 0 to 1024
[  944.856379][ T6726] EXT4-fs: Ignoring removed mblk_io_submit option
[  944.864869][ T6726] EXT4-fs: Ignoring removed nobh option
[  944.870588][ T6726] EXT4-fs: Ignoring removed bh option
[  944.883147][ T6726] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal
[  944.932302][ T6734] netlink: 96 bytes leftover after parsing attributes in process `syz.8.11488'.
[  945.007529][ T6739] wireguard5: entered allmulticast mode
[  945.032725][ T6741] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  945.052213][ T6741] vhci_hcd: default hub control req: 6001 v8001 i0001 l0
[  945.110303][ T6746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  945.220170][ T6755] loop8: detected capacity change from 0 to 2048
[  945.234663][ T6755] EXT4-fs error (device loop8): ext4_find_extent:939: inode #2: comm syz.8.11496: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  945.251627][ T6755] EXT4-fs (loop8): Remounting filesystem read-only
[  945.279866][ T6760] netlink: 96 bytes leftover after parsing attributes in process `syz.8.11497'.
[  945.353627][ T6764] lo speed is unknown, defaulting to 1000
[  945.360159][ T6764] dummy0 speed is unknown, defaulting to 1000
[  945.460654][ T6764] loop5: detected capacity change from 0 to 512
[  945.467612][ T6764] EXT4-fs: Ignoring removed mblk_io_submit option
[  945.474141][ T6764] EXT4-fs: Ignoring removed oldalloc option
[  945.531822][ T6764] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  945.574512][ T6764] EXT4-fs (loop5): 1 truncate cleaned up
[  945.721299][ T6773] loop1: detected capacity change from 0 to 1024
[  945.728460][ T6773] EXT4-fs: Ignoring removed mblk_io_submit option
[  945.732502][ T6772] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11500'.
[  945.748146][ T6773] EXT4-fs: Ignoring removed nobh option
[  945.753894][ T6773] EXT4-fs: Ignoring removed bh option
[  945.775554][ T6773] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal
[  945.790502][ T6777] wireguard4: entered allmulticast mode
[  945.844743][ T6781] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  945.855494][ T6781] vhci_hcd: default hub control req: 6001 v8001 i0001 l0
[  945.913961][ T6800] loop3: detected capacity change from 0 to 512
[  945.922271][ T6800] EXT4-fs: Ignoring removed nobh option
[  945.937917][ T6800] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.11510: iget: bad i_size value: 38620345925642
[  945.952915][ T6800] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.11510: couldn't read orphan inode 15 (err -117)
[  946.021940][ T5205] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /79/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  946.048040][ T5205] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  946.068462][ T6800] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.11510: iget: bad i_size value: 38620345925642
[  946.071244][ T5205] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /79/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  946.107986][ T5205] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  946.131686][ T5205] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /79/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  946.184333][ T5205] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  946.228183][ T5205] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /79/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  946.269062][ T5205] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  946.290871][ T5205] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /79/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  946.322354][ T5205] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  946.418855][   T29] kauditd_printk_skb: 436 callbacks suppressed
[  946.418967][   T29] audit: type=1400 audit(1749703621.767:72674): avc:  denied  { unmount } for  pid=31831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  946.447745][   T29] audit: type=1400 audit(1749703621.797:72675): avc:  denied  { ioctl } for  pid=31831 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  946.531959][ T6810] erspan0: entered allmulticast mode
[  946.574163][   T29] audit: type=1400 audit(1749703621.927:72676): avc:  denied  { map_read map_write } for  pid=6811 comm="syz.3.11513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  946.599129][   T29] audit: type=1400 audit(1749703621.927:72677): avc:  denied  { create } for  pid=6811 comm="syz.3.11513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  946.619424][   T29] audit: type=1400 audit(1749703621.927:72678): avc:  denied  { ioctl } for  pid=6811 comm="syz.3.11513" path="socket:[145983]" dev="sockfs" ino=145983 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  946.644898][   T29] audit: type=1400 audit(1749703621.947:72679): avc:  denied  { create } for  pid=6813 comm="syz.3.11514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  946.665876][   T29] audit: type=1400 audit(1749703621.947:72680): avc:  denied  { write } for  pid=6813 comm="syz.3.11514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  946.719109][T27290] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  946.772539][   T29] audit: type=1400 audit(1749703622.117:72681): avc:  denied  { create } for  pid=6819 comm="syz.7.11517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  946.830903][ T6820] wireguard3: entered allmulticast mode
[  946.842009][T27290] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  946.855338][   T29] audit: type=1400 audit(1749703622.167:72682): avc:  denied  { create } for  pid=6819 comm="syz.7.11517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  946.876180][   T29] audit: type=1400 audit(1749703622.167:72683): avc:  denied  { write } for  pid=6819 comm="syz.7.11517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  946.899713][ T6818] lo speed is unknown, defaulting to 1000
[  946.911374][ T6822] loop1: detected capacity change from 0 to 1024
[  946.939335][T27290] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  946.952939][ T6828] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  946.966227][ T6822] EXT4-fs: Ignoring removed mblk_io_submit option
[  946.971717][ T6828] vhci_hcd: default hub control req: 6001 v8001 i0001 l0
[  946.986258][ T6818] dummy0 speed is unknown, defaulting to 1000
[  946.995342][ T6822] EXT4-fs: Ignoring removed nobh option
[  947.000972][ T6822] EXT4-fs: Ignoring removed bh option
[  947.027934][ T6832] loop7: detected capacity change from 0 to 764
[  947.034573][ T6834] Cannot find add_set index 0 as target
[  947.045948][T27290] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  947.056709][ T6832] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  947.085648][ T6835] loop3: detected capacity change from 0 to 512
[  947.097062][ T6822] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal
[  947.122417][ T6835] EXT4-fs: Ignoring removed nobh option
[  947.141210][ T6835] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.11523: iget: bad i_size value: 38620345925642
[  947.173933][ T6835] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.11523: couldn't read orphan inode 15 (err -117)
[  947.197045][T27290] bridge_slave_1: left allmulticast mode
[  947.197213][ T6835] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.11523: iget: bad i_size value: 38620345925642
[  947.202833][T27290] bridge_slave_1: left promiscuous mode
[  947.221071][T27290] bridge0: port 2(bridge_slave_1) entered disabled state
[  947.256742][T27290] bridge_slave_0: left allmulticast mode
[  947.262605][T27290] bridge_slave_0: left promiscuous mode
[  947.268550][T27290] bridge0: port 1(bridge_slave_0) entered disabled state
[  947.516307][T27290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  947.535683][T27290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  947.556759][T27290] bond0 (unregistering): Released all slaves
[  947.575255][T27290] bond1 (unregistering): Released all slaves
[  947.628275][T27290] hsr_slave_0: left promiscuous mode
[  947.644338][T27290] hsr_slave_1: left promiscuous mode
[  947.667307][T27290] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  947.674934][T27290] batman_adv: batadv0: Removing interface: batadv_slave_0
[  947.695920][T27290] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  947.703793][T27290] batman_adv: batadv0: Removing interface: batadv_slave_1
[  947.725800][T27290] veth1_macvtap: left promiscuous mode
[  947.736670][T27290] veth0_macvtap: left promiscuous mode
[  947.743645][ T6853] loop1: detected capacity change from 0 to 128
[  947.747983][T27290] veth1_vlan: left promiscuous mode
[  947.765272][T27290] veth0_vlan: left promiscuous mode
[  947.797434][ T6840] syz.7.11524 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  947.811749][ T6840] CPU: 0 UID: 0 PID: 6840 Comm: syz.7.11524 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) 
[  947.811790][ T6840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  947.811808][ T6840] Call Trace:
[  947.811816][ T6840]  <TASK>
[  947.811826][ T6840]  __dump_stack+0x1d/0x30
[  947.811855][ T6840]  dump_stack_lvl+0xe8/0x140
[  947.811882][ T6840]  dump_stack+0x15/0x1b
[  947.811902][ T6840]  dump_header+0x81/0x220
[  947.811976][ T6840]  oom_kill_process+0x334/0x3f0
[  947.812019][ T6840]  out_of_memory+0x979/0xb80
[  947.812073][ T6840]  try_charge_memcg+0x5e6/0x9e0
[  947.812204][ T6840]  obj_cgroup_charge_pages+0xa6/0x150
[  947.812246][ T6840]  __memcg_kmem_charge_page+0x9f/0x170
[  947.812280][ T6840]  __alloc_frozen_pages_noprof+0x188/0x360
[  947.812384][ T6840]  alloc_pages_mpol+0xb3/0x250
[  947.812457][ T6840]  alloc_pages_noprof+0x90/0x130
[  947.812501][ T6840]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  947.812572][ T6840]  __kvmalloc_node_noprof+0x30f/0x4e0
[  947.812613][ T6840]  ? ip_set_alloc+0x1f/0x30
[  947.812698][ T6840]  ? ip_set_alloc+0x1f/0x30
[  947.812744][ T6840]  ? __kmalloc_cache_noprof+0x189/0x320
[  947.812809][ T6840]  ip_set_alloc+0x1f/0x30
[  947.812855][ T6840]  hash_netiface_create+0x282/0x740
[  947.812916][ T6840]  ? __pfx_hash_netiface_create+0x10/0x10
[  947.812967][ T6840]  ip_set_create+0x3cc/0x960
[  947.813014][ T6840]  ? __nla_parse+0x40/0x60
[  947.813069][ T6840]  nfnetlink_rcv_msg+0x4c3/0x590
[  947.813144][ T6840]  ? selinux_capable+0x1f9/0x270
[  947.813183][ T6840]  netlink_rcv_skb+0x120/0x220
[  947.813288][ T6840]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  947.813345][ T6840]  nfnetlink_rcv+0x16b/0x1690
[  947.813382][ T6840]  ? __kfree_skb+0x109/0x150
[  947.813406][ T6840]  ? nlmon_xmit+0x4f/0x60
[  947.813439][ T6840]  ? consume_skb+0x49/0x150
[  947.813625][ T6840]  ? nlmon_xmit+0x4f/0x60
[  947.813650][ T6840]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  947.813681][ T6840]  ? __dev_queue_xmit+0x11c0/0x1fb0
[  947.813702][ T6840]  ? __dev_queue_xmit+0x182/0x1fb0
[  947.813727][ T6840]  ? ref_tracker_free+0x37d/0x3e0
[  947.813860][ T6840]  ? __netlink_deliver_tap+0x4dc/0x500
[  947.813894][ T6840]  netlink_unicast+0x5a1/0x670
[  947.813933][ T6840]  netlink_sendmsg+0x58b/0x6b0
[  947.813965][ T6840]  ? __pfx_netlink_sendmsg+0x10/0x10
[  947.813993][ T6840]  __sock_sendmsg+0x142/0x180
[  947.814033][ T6840]  ____sys_sendmsg+0x31e/0x4e0
[  947.814072][ T6840]  ___sys_sendmsg+0x17b/0x1d0
[  947.814191][ T6840]  __x64_sys_sendmsg+0xd4/0x160
[  947.814224][ T6840]  x64_sys_call+0x2999/0x2fb0
[  947.814246][ T6840]  do_syscall_64+0xd2/0x200
[  947.814285][ T6840]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  947.814321][ T6840]  ? clear_bhb_loop+0x40/0x90
[  947.814352][ T6840]  ? clear_bhb_loop+0x40/0x90
[  947.814385][ T6840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  947.814462][ T6840] RIP: 0033:0x7f38c3dbe929
[  947.814484][ T6840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  947.814511][ T6840] RSP: 002b:00007f38c2427038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  947.814533][ T6840] RAX: ffffffffffffffda RBX: 00007f38c3fe5fa0 RCX: 00007f38c3dbe929
[  947.814546][ T6840] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[  947.814604][ T6840] RBP: 00007f38c3e40b39 R08: 0000000000000000 R09: 0000000000000000
[  947.814622][ T6840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  947.814696][ T6840] R13: 0000000000000000 R14: 00007f38c3fe5fa0 R15: 00007ffcac866ff8
[  947.814725][ T6840]  </TASK>
[  948.164923][ T6840] memory: usage 307200kB, limit 307200kB, failcnt 3663
[  948.172456][ T6840] memory+swap: usage 307988kB, limit 9007199254740988kB, failcnt 0
[  948.180651][ T6840] kmem: usage 226180kB, limit 9007199254740988kB, failcnt 0
[  948.188231][ T6840] Memory cgroup stats for /syz7:
[  948.217542][ T6840] cache 82890752
[  948.226167][ T6840] rss 32768
[  948.229472][ T6840] shmem 0
[  948.232508][ T6840] mapped_file 0
[  948.236015][ T6840] dirty 0
[  948.239059][ T6840] writeback 0
[  948.242453][ T6840] workingset_refault_anon 446
[  948.247163][ T6840] workingset_refault_file 2299
[  948.252042][ T6840] swap 806912
[  948.255390][ T6840] swapcached 28672
[  948.259136][ T6840] pgpgin 411601
[  948.262729][ T6840] pgpgout 391346
[  948.266306][ T6840] pgfault 280579
[  948.269920][ T6840] pgmajfault 242
[  948.273512][ T6840] inactive_anon 32768
[  948.277513][ T6840] active_anon 0
[  948.281179][ T6840] inactive_file 40960
[  948.285276][ T6840] active_file 0
[  948.288760][ T6840] unevictable 82890752
[  948.292903][ T6840] hierarchical_memory_limit 314572800
[  948.298302][ T6840] hierarchical_memsw_limit 9223372036854771712
[  948.304901][ T6840] total_cache 82890752
[  948.309007][ T6840] total_rss 32768
[  948.312766][ T6840] total_shmem 0
[  948.316369][ T6840] total_mapped_file 0
[  948.320375][ T6840] total_dirty 0
[  948.323927][ T6840] total_writeback 0
[  948.327755][ T6840] total_workingset_refault_anon 458
[  948.333005][ T6840] total_workingset_refault_file 2299
[  948.338333][ T6840] total_swap 806912
[  948.342305][ T6840] total_swapcached 28672
[  948.346745][ T6840] total_pgpgin 415100
[  948.350793][ T6840] total_pgpgout 394845
[  948.355069][ T6840] total_pgfault 283769
[  948.359359][ T6840] total_pgmajfault 249
[  948.363499][ T6840] total_inactive_anon 32768
[  948.368067][ T6840] total_active_anon 0
[  948.372122][ T6840] total_inactive_file 40960
[  948.376664][ T6840] total_active_file 0
[  948.380855][ T6840] total_unevictable 82890752
[  948.385591][ T6840] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.11524,pid=6839,uid=0
[  948.400514][ T6840] Memory cgroup out of memory: Killed process 6839 (syz.7.11524) total-vm:95800kB, anon-rss:936kB, file-rss:22196kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  948.437819][T27290] team0 (unregistering): Port device team_slave_1 removed
[  948.447933][T27290] team0 (unregistering): Port device team_slave_0 removed
[  948.527144][ T6866] wireguard5: entered allmulticast mode
[  948.614052][ T6848] lo speed is unknown, defaulting to 1000
[  948.620396][ T6848] dummy0 speed is unknown, defaulting to 1000
[  948.641338][ T6880] erspan0: left allmulticast mode
[  948.665306][ T6880] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  948.739255][ T6880] __nla_validate_parse: 6 callbacks suppressed
[  948.739269][ T6880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11533'.
[  948.754842][ T6880] netlink: 108 bytes leftover after parsing attributes in process `syz.3.11533'.
[  948.764947][ T6880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11533'.
[  948.774725][ T6880] netlink: 108 bytes leftover after parsing attributes in process `syz.3.11533'.
[  948.783997][ T6880] netlink: 84 bytes leftover after parsing attributes in process `syz.3.11533'.
[  948.818146][ T6848] chnl_net:caif_netlink_parms(): no params data found
[  948.832641][T27290] IPVS: stop unused estimator thread 0...
[  948.844699][ T6890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11537'.
[  948.846493][ T6892] loop3: detected capacity change from 0 to 2048
[  948.884557][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state
[  948.886488][ T6892] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.11538: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  948.891688][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state
[  948.914730][ T6892] EXT4-fs (loop3): Remounting filesystem read-only
[  948.918733][ T6848] bridge_slave_0: entered allmulticast mode
[  948.941425][ T6848] bridge_slave_0: entered promiscuous mode
[  948.949578][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state
[  948.956801][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state
[  948.965775][ T6848] bridge_slave_1: entered allmulticast mode
[  948.975057][ T6848] bridge_slave_1: entered promiscuous mode
[  949.010938][ T6848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  949.023989][ T6848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  949.055764][ T6848] team0: Port device team_slave_0 added
[  949.063262][ T6848] team0: Port device team_slave_1 added
[  949.083057][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_0
[  949.090173][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  949.116352][ T6848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  949.140033][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_1
[  949.147235][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  949.173385][ T6848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  949.211723][ T6848] hsr_slave_0: entered promiscuous mode
[  949.235254][ T6848] hsr_slave_1: entered promiscuous mode
[  949.241915][ T6848] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  949.249966][ T6848] Cannot create hsr debugfs directory
[  949.278051][ T6909] xt_l2tp: missing protocol rule (udp|l2tpip)
[  949.316749][ T6911] wireguard3: entered allmulticast mode
[  949.488696][ T6909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  949.510297][ T6909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  949.534263][ T6909] IPVS: stopping master sync thread 6925 ...
[  949.541514][ T6925] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  949.607396][ T6848] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  949.616425][ T6929] loop7: detected capacity change from 0 to 512
[  949.627131][ T6848] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  949.636038][ T6929] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.11548: bg 0: block 5: invalid block bitmap
[  949.651613][ T6848] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  949.658841][ T6932] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11549'.
[  949.664516][ T6929] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  949.680265][ T6848] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  949.680322][ T6929] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.11548: invalid indirect mapped block 3 (level 2)
[  949.713839][ T6929] EXT4-fs (loop7): 2 truncates cleaned up
[  949.719815][ T6934] loop8: detected capacity change from 0 to 512
[  949.726573][ T6934] EXT4-fs: Ignoring removed nobh option
[  949.735592][ T6934] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #15: comm syz.8.11550: iget: bad i_size value: 38620345925642
[  949.750544][ T6934] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.11550: couldn't read orphan inode 15 (err -117)
[  949.764594][ T6926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  949.775160][ T6934] EXT4-fs error (device loop8): ext4_lookup:1787: inode #15: comm syz.8.11550: iget: bad i_size value: 38620345925642
[  949.787973][ T6926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  949.797440][ T6926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  949.824762][ T6926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  949.848060][ T6848] 8021q: adding VLAN 0 to HW filter on device bond0
[  949.860287][ T6848] 8021q: adding VLAN 0 to HW filter on device team0
[  949.870317][T27278] bridge0: port 1(bridge_slave_0) entered blocking state
[  949.877436][T27278] bridge0: port 1(bridge_slave_0) entered forwarding state
[  949.894666][T27278] bridge0: port 2(bridge_slave_1) entered blocking state
[  949.901975][T27278] bridge0: port 2(bridge_slave_1) entered forwarding state
[  950.020818][ T6848] 8021q: adding VLAN 0 to HW filter on device batadv0
[  950.230134][ T6848] veth0_vlan: entered promiscuous mode
[  950.247609][ T6848] veth1_vlan: entered promiscuous mode
[  950.267849][ T6848] veth0_macvtap: entered promiscuous mode
[  950.276741][ T6848] veth1_macvtap: entered promiscuous mode
[  950.291467][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_0
[  950.316687][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_1
[  950.330028][ T6848] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  950.338915][ T6848] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  950.347739][ T6848] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  950.356599][ T6848] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  950.374222][T10596] IPVS: starting estimator thread 0...
[  950.512718][ T6975] IPVS: using max 2304 ests per chain, 115200 per kthread
[  950.689907][ T6984] lo speed is unknown, defaulting to 1000
[  950.696744][ T6984] dummy0 speed is unknown, defaulting to 1000
[  951.210368][ T6986] loop3: detected capacity change from 0 to 512
[  951.217476][ T6986] EXT4-fs: Ignoring removed mblk_io_submit option
[  951.224055][ T6986] EXT4-fs: Ignoring removed oldalloc option
[  951.309371][ T6987] lo speed is unknown, defaulting to 1000
[  951.316150][ T6987] dummy0 speed is unknown, defaulting to 1000
[  951.359937][ T6986] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  951.404154][ T6986] EXT4-fs (loop3): 1 truncate cleaned up
[  951.448269][ T6993] lo speed is unknown, defaulting to 1000
[  951.455840][ T6993] dummy0 speed is unknown, defaulting to 1000
[  951.464866][ T6985] loop7: detected capacity change from 0 to 512
[  951.471426][ T6985] EXT4-fs: Ignoring removed mblk_io_submit option
[  951.478053][ T6985] EXT4-fs: Ignoring removed oldalloc option
[  951.484705][ T6985] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  951.496738][ T6985] EXT4-fs (loop7): 1 truncate cleaned up
[  951.578839][ T6993] Cannot find add_set index 0 as target
[  951.640869][ T7002] lo speed is unknown, defaulting to 1000
[  951.670115][ T7002] dummy0 speed is unknown, defaulting to 1000
[  951.743852][ T7007] loop8: detected capacity change from 0 to 2048
[  951.750351][ T7000] Cannot find add_set index 0 as target
[  951.785340][ T7013] netlink: 92 bytes leftover after parsing attributes in process `syz.7.11565'.
[  951.908665][ T7009] lo speed is unknown, defaulting to 1000
[  951.934409][ T7009] dummy0 speed is unknown, defaulting to 1000
[  952.024124][   T29] kauditd_printk_skb: 159 callbacks suppressed
[  952.024142][   T29] audit: type=1326 audit(1749703627.377:72843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7022 comm="syz.8.11568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f588515e929 code=0x0
[  952.144904][   T29] audit: type=1326 audit(1749703627.497:72844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.8.11570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f588515e929 code=0x0
[  952.203719][   T29] audit: type=1400 audit(1749703627.557:72845): avc:  denied  { create } for  pid=7031 comm="syz.7.11571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  952.239779][   T29] audit: type=1400 audit(1749703627.577:72846): avc:  denied  { read } for  pid=7031 comm="syz.7.11571" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  952.262791][   T29] audit: type=1400 audit(1749703627.577:72847): avc:  denied  { open } for  pid=7031 comm="syz.7.11571" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  952.309956][   T29] audit: type=1400 audit(1749703627.637:72848): avc:  denied  { create } for  pid=7031 comm="syz.7.11571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  952.330420][   T29] audit: type=1400 audit(1749703627.647:72849): avc:  denied  { ioctl } for  pid=7031 comm="syz.7.11571" path="socket:[147099]" dev="sockfs" ino=147099 ioctlcmd=0x48cc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  952.378760][ T7037] loop8: detected capacity change from 0 to 512
[  952.421969][   T29] audit: type=1400 audit(1749703627.757:72850): avc:  denied  { create } for  pid=7038 comm="syz.1.11574" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  952.462007][ T7037] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.11573: bg 0: block 5: invalid block bitmap
[  952.486946][ T7037] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  952.503763][ T7040] loop1: detected capacity change from 0 to 512
[  952.511728][   T29] audit: type=1400 audit(1749703627.857:72851): avc:  denied  { mounton } for  pid=7038 comm="syz.1.11574" path="/447/file0" dev="tmpfs" ino=2417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  952.535912][ T7037] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.11573: invalid indirect mapped block 3 (level 2)
[  952.550817][ T7037] EXT4-fs (loop8): 2 truncates cleaned up
[  952.563549][ T7040] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  952.573725][ T7040] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.11574: Failed to acquire dquot type 1
[  952.601514][ T7040] EXT4-fs (loop1): 1 truncate cleaned up
[  952.631476][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11576'.
[  952.640307][ T7040] ext4 filesystem being mounted at /447/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  952.760883][ T7051] netlink: 96 bytes leftover after parsing attributes in process `syz.8.11578'.
[  952.916236][ T7062] lo speed is unknown, defaulting to 1000
[  952.928892][ T7064] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  952.936594][ T7064] batman_adv: batadv0: Removing interface: batadv_slave_0
[  952.952646][ T7064] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  952.960202][ T7064] batman_adv: batadv0: Removing interface: batadv_slave_1
[  952.992035][ T7062] dummy0 speed is unknown, defaulting to 1000
[  952.994382][ T7066] lo speed is unknown, defaulting to 1000
[  953.009266][ T7066] dummy0 speed is unknown, defaulting to 1000
[  953.064172][ T7076] Cannot find add_set index 0 as target
[  953.111516][ T7071] loop3: detected capacity change from 0 to 128
[  953.157240][ T7080] loop7: detected capacity change from 0 to 2048
[  953.185287][ T7080] EXT4-fs mount: 56 callbacks suppressed
[  953.185304][ T7080] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  953.225191][  T883] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  953.304616][ T7086] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  953.312684][ T7086] vhci_hcd: default hub control req: 6001 v8001 i0001 l0
[  953.345642][ T7091] wireguard6: entered allmulticast mode
[  953.448112][ T7097] lo speed is unknown, defaulting to 1000
[  953.454838][ T7097] dummy0 speed is unknown, defaulting to 1000
[  953.561261][ T7097] loop3: detected capacity change from 0 to 512
[  953.568795][ T7097] EXT4-fs: Ignoring removed mblk_io_submit option
[  953.575358][ T7097] EXT4-fs: Ignoring removed oldalloc option
[  953.588772][ T7097] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  953.602049][ T7097] EXT4-fs (loop3): 1 truncate cleaned up
[  953.608886][ T7097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  953.895900][ T7102] loop1: detected capacity change from 0 to 2048
[  953.916197][ T7102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  953.948726][  T640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  954.090387][T31831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  954.135697][ T7113] loop3: detected capacity change from 0 to 2048
[  954.195157][ T7115] lo speed is unknown, defaulting to 1000
[  954.201549][ T7115] dummy0 speed is unknown, defaulting to 1000
[  954.322052][ T7115] loop8: detected capacity change from 0 to 512
[  954.329096][ T7115] EXT4-fs: Ignoring removed mblk_io_submit option
[  954.335697][ T7115] EXT4-fs: Ignoring removed oldalloc option
[  954.342863][ T7115] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  954.360985][ T7111] loop1: detected capacity change from 0 to 128
[  954.378729][ T7115] EXT4-fs (loop8): 1 truncate cleaned up
[  954.385767][ T7115] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  954.420148][ T7113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  954.511235][ T7121] loop1: detected capacity change from 0 to 512
[  954.528363][ T7121] EXT4-fs: Ignoring removed nobh option
[  954.544646][ T7122] lo speed is unknown, defaulting to 1000
[  954.551694][ T7121] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.11603: iget: bad i_size value: 38620345925642
[  954.565954][ T7122] dummy0 speed is unknown, defaulting to 1000
[  954.568012][ T7121] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.11603: couldn't read orphan inode 15 (err -117)
[  954.590121][T31831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  954.593604][ T7124] __nla_validate_parse: 2 callbacks suppressed
[  954.593624][ T7124] netlink: 92 bytes leftover after parsing attributes in process `syz.7.11602'.
[  954.606042][ T7121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  954.641170][ T7126] wireguard6: entered allmulticast mode
[  954.676240][ T7130] wireguard7: entered allmulticast mode
[  954.703358][  T640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  954.706438][ T7134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11606'.
[  954.750280][ T7138] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11608'.
[  954.841609][ T4053] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  955.027277][ T7146] loop1: detected capacity change from 0 to 512
[  955.034231][ T7146] EXT4-fs: Ignoring removed mblk_io_submit option
[  955.040722][ T7146] EXT4-fs: Ignoring removed oldalloc option
[  955.093112][ T7144] lo speed is unknown, defaulting to 1000
[  955.099659][ T7144] dummy0 speed is unknown, defaulting to 1000
[  955.216042][ T7146] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  955.249236][ T7146] EXT4-fs (loop1): 1 truncate cleaned up
[  955.255575][ T7146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  955.371903][ T7160] lo speed is unknown, defaulting to 1000
[  955.378497][ T7160] dummy0 speed is unknown, defaulting to 1000
[  955.617900][  T640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  955.662908][ T7165] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  955.670601][ T7165] vhci_hcd: default hub control req: 6001 v8001 i0001 l0
[  955.787493][ T7170] wireguard4: entered allmulticast mode
[  955.920132][ T7177] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11621'.
[  955.949380][ T7179] loop1: detected capacity change from 0 to 512
[  955.958186][ T7179] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.11622: bg 0: block 5: invalid block bitmap
[  955.971136][ T7179] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  955.980194][ T7179] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.11622: invalid indirect mapped block 3 (level 2)
[  955.994154][ T7179] EXT4-fs (loop1): 2 truncates cleaned up
[  956.000388][ T7179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  956.024864][  T640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  956.059679][ T7183] loop1: detected capacity change from 0 to 512
[  956.068312][ T7183] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.11623: bg 0: block 5: invalid block bitmap
[  956.081118][ T7183] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  956.090491][ T7183] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.11623: invalid indirect mapped block 3 (level 2)
[  956.105300][ T7183] EXT4-fs (loop1): 2 truncates cleaned up
[  956.111516][ T7183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  956.128528][ T7183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  956.137159][ T7183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  956.146946][ T7183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  956.155637][ T7183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  956.282657][ T7197] loop8: detected capacity change from 0 to 512
[  956.292020][ T7197] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.11628: bg 0: block 5: invalid block bitmap
[  956.305156][ T7197] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  956.314890][ T7197] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.11628: invalid indirect mapped block 3 (level 2)
[  956.331340][ T7197] EXT4-fs (loop8): 2 truncates cleaned up
[  956.338126][ T7197] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  956.366502][ T7197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  956.377643][ T7197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  956.389748][ T7197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  956.400839][ T7197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  956.421602][ T7206] lo speed is unknown, defaulting to 1000
[  956.428466][ T7206] dummy0 speed is unknown, defaulting to 1000
[  956.811702][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11630'.
[  956.863102][ T7234] loop6: detected capacity change from 0 to 512
[  956.874956][ T7234] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.11632: Failed to acquire dquot type 1
[  956.895508][ T7234] EXT4-fs (loop6): 1 truncate cleaned up
[  956.899132][ T7231] lo speed is unknown, defaulting to 1000
[  956.906042][ T7234] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  956.907796][ T7231] dummy0 speed is unknown, defaulting to 1000
[  956.935411][ T7234] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  956.991445][ T6848] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  957.050129][ T4053] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  957.060042][  T640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  957.094911][ T7231] Cannot find add_set index 0 as target
[  957.121279][   T29] kauditd_printk_skb: 48 callbacks suppressed
[  957.121295][   T29] audit: type=1400 audit(1749703632.467:72897): avc:  denied  { ioctl } for  pid=7258 comm="syz.1.11634" path="socket:[147441]" dev="sockfs" ino=147441 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  957.204282][ T7256] lo speed is unknown, defaulting to 1000
[  957.211157][ T7256] dummy0 speed is unknown, defaulting to 1000
[  957.353326][   T29] audit: type=1326 audit(1749703632.697:72898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.1.11639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135bb7e929 code=0x7ffc0000
[  957.377194][   T29] audit: type=1326 audit(1749703632.697:72899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.1.11639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135bb7e929 code=0x7ffc0000
[  957.423809][ T7282] loop1: detected capacity change from 0 to 1024
[  957.454363][ T7282] EXT4-fs: Ignoring removed mblk_io_submit option
[  957.457485][   T29] audit: type=1326 audit(1749703632.757:72900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.1.11639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f135bb7e929 code=0x7ffc0000
[  957.477425][ T7282] EXT4-fs: Ignoring removed nobh option
[  957.484623][   T29] audit: type=1326 audit(1749703632.757:72901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.1.11639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135bb7e929 code=0x7ffc0000
[  957.490249][ T7282] EXT4-fs: Ignoring removed bh option
[  957.514469][   T29] audit: type=1326 audit(1749703632.757:72902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.1.11639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f135bb7e929 code=0x7ffc0000
[  957.543405][   T29] audit: type=1326 audit(1749703632.757:72903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.1.11639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135bb7e929 code=0x7ffc0000
[  957.561107][ T7282] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal
[  957.567060][   T29] audit: type=1326 audit(1749703632.757:72904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.1.11639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f135bb7e929 code=0x7ffc0000
[  957.599480][   T29] audit: type=1326 audit(1749703632.757:72905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.1.11639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135bb7e929 code=0x7ffc0000
[  957.623129][   T29] audit: type=1326 audit(1749703632.757:72906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.1.11639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f135bb7e929 code=0x7ffc0000
[  957.747196][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11641'.
[  957.803855][ T7306] loop1: detected capacity change from 0 to 128
[  957.891499][ T7341] loop7: detected capacity change from 0 to 512
[  957.900496][ T7341] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.11646: bg 0: block 5: invalid block bitmap
[  957.914491][ T7341] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  957.928049][ T7341] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.11646: invalid indirect mapped block 3 (level 2)
[  957.954544][ T7341] EXT4-fs (loop7): 2 truncates cleaned up
[  957.960756][ T7341] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  958.017239][  T883] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  958.143931][ T7358] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  958.171183][ T7358] vhci_hcd: default hub control req: 6001 v8001 i0001 l0
[  958.303721][ T7366] lo speed is unknown, defaulting to 1000
[  958.310192][ T7366] dummy0 speed is unknown, defaulting to 1000
[  958.369454][ T7366] loop6: detected capacity change from 0 to 512
[  958.376346][ T7366] EXT4-fs: Ignoring removed mblk_io_submit option
[  958.382947][ T7366] EXT4-fs: Ignoring removed oldalloc option
[  958.391043][ T7366] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  958.422994][ T7366] EXT4-fs (loop6): 1 truncate cleaned up
[  958.429824][ T7366] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  958.633723][ T7373] loop1: detected capacity change from 0 to 2048
[  958.694741][ T7373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  958.757605][ T7373] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.11651: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  958.777681][ T7373] EXT4-fs (loop1): Remounting filesystem read-only
[  958.786505][ T7376] loop7: detected capacity change from 0 to 128
[  958.812197][  T640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  958.957124][ T6848] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  959.015493][ T7399] FAULT_INJECTION: forcing a failure.
[  959.015493][ T7399] name failslab, interval 1, probability 0, space 0, times 0
[  959.029166][ T7399] CPU: 0 UID: 0 PID: 7399 Comm: syz.1.11659 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) 
[  959.029278][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  959.029294][ T7399] Call Trace:
[  959.029303][ T7399]  <TASK>
[  959.029314][ T7399]  __dump_stack+0x1d/0x30
[  959.029403][ T7399]  dump_stack_lvl+0xe8/0x140
[  959.029427][ T7399]  dump_stack+0x15/0x1b
[  959.029448][ T7399]  should_fail_ex+0x265/0x280
[  959.029554][ T7399]  should_failslab+0x8c/0xb0
[  959.029578][ T7399]  __kvmalloc_node_noprof+0x123/0x4e0
[  959.029707][ T7399]  ? alloc_netdev_mqs+0x73f/0xab0
[  959.029836][ T7399]  alloc_netdev_mqs+0x73f/0xab0
[  959.029861][ T7399]  rtnl_create_link+0x239/0x710
[  959.029905][ T7399]  rtnl_newlink_create+0x14c/0x620
[  959.029947][ T7399]  ? __list_del_entry_valid_or_report+0x65/0x130
[  959.029985][ T7399]  rtnl_newlink+0xf29/0x12d0
[  959.030078][ T7399]  ? __pfx_rtnl_newlink+0x10/0x10
[  959.030105][ T7399]  rtnetlink_rcv_msg+0x5fe/0x6d0
[  959.030146][ T7399]  netlink_rcv_skb+0x120/0x220
[  959.030239][ T7399]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  959.030277][ T7399]  rtnetlink_rcv+0x1c/0x30
[  959.030308][ T7399]  netlink_unicast+0x5a1/0x670
[  959.030354][ T7399]  netlink_sendmsg+0x58b/0x6b0
[  959.030459][ T7399]  ? __pfx_netlink_sendmsg+0x10/0x10
[  959.030507][ T7399]  __sock_sendmsg+0x142/0x180
[  959.030552][ T7399]  ____sys_sendmsg+0x31e/0x4e0
[  959.030578][ T7399]  ___sys_sendmsg+0x17b/0x1d0
[  959.030624][ T7399]  __x64_sys_sendmsg+0xd4/0x160
[  959.030712][ T7399]  x64_sys_call+0x2999/0x2fb0
[  959.030737][ T7399]  do_syscall_64+0xd2/0x200
[  959.030760][ T7399]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  959.030789][ T7399]  ? clear_bhb_loop+0x40/0x90
[  959.030813][ T7399]  ? clear_bhb_loop+0x40/0x90
[  959.030850][ T7399]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  959.030874][ T7399] RIP: 0033:0x7f135bb7e929
[  959.030890][ T7399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  959.030962][ T7399] RSP: 002b:00007f135a1e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  959.030982][ T7399] RAX: ffffffffffffffda RBX: 00007f135bda5fa0 RCX: 00007f135bb7e929
[  959.030995][ T7399] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000006
[  959.031008][ T7399] RBP: 00007f135a1e7090 R08: 0000000000000000 R09: 0000000000000000
[  959.031021][ T7399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  959.031034][ T7399] R13: 0000000000000000 R14: 00007f135bda5fa0 R15: 00007ffde04f9f88
[  959.031057][ T7399]  </TASK>
[  959.031204][ T7404] loop8: detected capacity change from 0 to 512
[  959.297563][ T7409] erspan0: entered allmulticast mode
[  959.298363][ T7404] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.11661: bg 0: block 5: invalid block bitmap
[  959.320852][ T7404] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  959.341035][ T7407] lo speed is unknown, defaulting to 1000
[  959.346895][ T7404] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.11661: invalid indirect mapped block 3 (level 2)
[  959.348303][ T7407] dummy0 speed is unknown, defaulting to 1000
[  959.400214][ T7404] EXT4-fs (loop8): 2 truncates cleaned up
[  959.422678][ T7404] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  959.463960][ T7428] loop7: detected capacity change from 0 to 512
[  959.480993][ T4053] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  959.492015][ T7428] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.11662: bg 0: block 5: invalid block bitmap
[  959.506364][ T7428] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  959.518099][ T7428] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.11662: invalid indirect mapped block 3 (level 2)
[  959.533307][ T7428] EXT4-fs (loop7): 2 truncates cleaned up
[  959.546893][ T7428] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  959.574009][ T7423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  959.582625][ T7423] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  959.591336][ T7423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  959.599826][ T7423] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  959.618885][ T7434] FAULT_INJECTION: forcing a failure.
[  959.618885][ T7434] name failslab, interval 1, probability 0, space 0, times 0
[  959.631794][ T7434] CPU: 0 UID: 0 PID: 7434 Comm: syz.8.11666 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) 
[  959.631897][ T7434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  959.631909][ T7434] Call Trace:
[  959.631915][ T7434]  <TASK>
[  959.631923][ T7434]  __dump_stack+0x1d/0x30
[  959.631942][ T7434]  dump_stack_lvl+0xe8/0x140
[  959.631960][ T7434]  dump_stack+0x15/0x1b
[  959.631975][ T7434]  should_fail_ex+0x265/0x280
[  959.632017][ T7434]  should_failslab+0x8c/0xb0
[  959.632102][ T7434]  kmem_cache_alloc_noprof+0x50/0x310
[  959.632134][ T7434]  ? security_file_alloc+0x32/0x100
[  959.632165][ T7434]  security_file_alloc+0x32/0x100
[  959.632193][ T7434]  init_file+0x5c/0x1d0
[  959.632251][ T7434]  alloc_empty_file+0x8b/0x200
[  959.632282][ T7434]  dentry_open+0x2d/0x90
[  959.632317][ T7434]  open_namespace+0xa1/0x110
[  959.632378][ T7434]  pidfd_ioctl+0xd0e/0xe30
[  959.632414][ T7434]  ? __fget_files+0x184/0x1c0
[  959.632446][ T7434]  ? __pfx_pidfd_ioctl+0x10/0x10
[  959.632485][ T7434]  __se_sys_ioctl+0xce/0x140
[  959.632578][ T7434]  __x64_sys_ioctl+0x43/0x50
[  959.632620][ T7434]  x64_sys_call+0x19a8/0x2fb0
[  959.632647][ T7434]  do_syscall_64+0xd2/0x200
[  959.632673][ T7434]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  959.632707][ T7434]  ? clear_bhb_loop+0x40/0x90
[  959.632817][ T7434]  ? clear_bhb_loop+0x40/0x90
[  959.632847][ T7434]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  959.632937][ T7434] RIP: 0033:0x7f588515e929
[  959.632952][ T7434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  959.632969][ T7434] RSP: 002b:00007f58837c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  959.632987][ T7434] RAX: ffffffffffffffda RBX: 00007f5885385fa0 RCX: 00007f588515e929
[  959.633075][ T7434] RDX: 0000000000000000 RSI: 000000000000ff03 RDI: 0000000000000003
[  959.633086][ T7434] RBP: 00007f58837c7090 R08: 0000000000000000 R09: 0000000000000000
[  959.633097][ T7434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  959.633108][ T7434] R13: 0000000000000000 R14: 00007f5885385fa0 R15: 00007ffc0a06adf8
[  959.633128][ T7434]  </TASK>
[  959.862796][ T7432] lo speed is unknown, defaulting to 1000
[  959.869285][ T7432] dummy0 speed is unknown, defaulting to 1000
[  959.912249][ T7432] loop1: detected capacity change from 0 to 512
[  959.918874][ T7432] EXT4-fs: Ignoring removed mblk_io_submit option
[  959.925513][ T7432] EXT4-fs: Ignoring removed oldalloc option
[  959.931804][ T7432] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  959.947095][ T7432] EXT4-fs (loop1): 1 truncate cleaned up
[  959.953375][ T7432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  959.956541][ T7441] veth0: entered promiscuous mode
[  959.975886][ T7440] veth0: left promiscuous mode
[  960.017426][ T7443] loop6: detected capacity change from 0 to 512
[  960.026849][ T7443] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.11669: bg 0: block 5: invalid block bitmap
[  960.039717][ T7443] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  960.049193][ T7443] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.11669: invalid indirect mapped block 3 (level 2)
[  960.062782][ T7443] EXT4-fs (loop6): 2 truncates cleaned up
[  960.068927][ T7443] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  960.081800][ T7438] loop8: detected capacity change from 0 to 128
[  960.090613][ T7443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  960.099204][ T7443] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  960.230801][ T7453] lo speed is unknown, defaulting to 1000
[  960.247118][ T7453] dummy0 speed is unknown, defaulting to 1000
[  960.390278][ T7456] lo speed is unknown, defaulting to 1000
[  960.396940][ T7456] dummy0 speed is unknown, defaulting to 1000
[  960.454689][ T7456] loop8: detected capacity change from 0 to 512
[  960.461494][ T7456] EXT4-fs: Ignoring removed mblk_io_submit option
[  960.467989][ T7456] EXT4-fs: Ignoring removed oldalloc option
[  960.479903][ T7456] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  960.505700][  T640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  960.538463][ T7456] EXT4-fs (loop8): 1 truncate cleaned up
[  960.544997][ T7456] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  960.733885][ T6848] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  960.841639][  T883] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  960.858925][ T7469] loop3: detected capacity change from 0 to 512
[  960.875755][ T7469] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.11678: Failed to acquire dquot type 1
[  961.030553][ T4053] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  961.032301][ T7469] EXT4-fs (loop3): 1 truncate cleaned up
[  961.049986][ T7469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  961.067713][ T7469] ext4 filesystem being mounted at /533/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  961.095413][ T7482] FAULT_INJECTION: forcing a failure.
[  961.095413][ T7482] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  961.108573][ T7482] CPU: 0 UID: 0 PID: 7482 Comm: syz.8.11680 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) 
[  961.108689][ T7482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  961.108707][ T7482] Call Trace:
[  961.108743][ T7482]  <TASK>
[  961.108755][ T7482]  __dump_stack+0x1d/0x30
[  961.108782][ T7482]  dump_stack_lvl+0xe8/0x140
[  961.108808][ T7482]  dump_stack+0x15/0x1b
[  961.108830][ T7482]  should_fail_ex+0x265/0x280
[  961.108890][ T7482]  should_fail+0xb/0x20
[  961.108932][ T7482]  should_fail_usercopy+0x1a/0x20
[  961.108966][ T7482]  _copy_to_user+0x20/0xa0
[  961.108996][ T7482]  simple_read_from_buffer+0xb5/0x130
[  961.109060][ T7482]  proc_fail_nth_read+0x100/0x140
[  961.109091][ T7482]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  961.109117][ T7482]  vfs_read+0x19d/0x6f0
[  961.109160][ T7482]  ? __rcu_read_unlock+0x4f/0x70
[  961.109183][ T7482]  ? __fget_files+0x184/0x1c0
[  961.109217][ T7482]  ksys_read+0xda/0x1a0
[  961.109245][ T7482]  __x64_sys_read+0x40/0x50
[  961.109315][ T7482]  x64_sys_call+0x2d77/0x2fb0
[  961.109393][ T7482]  do_syscall_64+0xd2/0x200
[  961.109478][ T7482]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  961.109510][ T7482]  ? clear_bhb_loop+0x40/0x90
[  961.109549][ T7482]  ? clear_bhb_loop+0x40/0x90
[  961.109572][ T7482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  961.109600][ T7482] RIP: 0033:0x7f588515d33c
[  961.109673][ T7482] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  961.109696][ T7482] RSP: 002b:00007f58837c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  961.109721][ T7482] RAX: ffffffffffffffda RBX: 00007f5885385fa0 RCX: 00007f588515d33c
[  961.109738][ T7482] RDX: 000000000000000f RSI: 00007f58837c70a0 RDI: 0000000000000006
[  961.109755][ T7482] RBP: 00007f58837c7090 R08: 0000000000000000 R09: 0000000000000000
[  961.109771][ T7482] R10: 000000000000002a R11: 0000000000000246 R12: 0000000000000001
[  961.109788][ T7482] R13: 0000000000000000 R14: 00007f5885385fa0 R15: 00007ffc0a06adf8
[  961.109811][ T7482]  </TASK>
[  961.367536][ T7483] lo speed is unknown, defaulting to 1000
[  961.374285][ T7483] dummy0 speed is unknown, defaulting to 1000
[  961.493858][ T7479] loop6: detected capacity change from 0 to 512
[  961.500698][ T7479] EXT4-fs: Ignoring removed mblk_io_submit option
[  961.507358][ T7479] EXT4-fs: Ignoring removed oldalloc option
[  961.522400][ T7479] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  961.535883][ T7479] EXT4-fs (loop6): 1 truncate cleaned up
[  961.542187][ T7479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  961.583573][T31831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  961.631656][ T7488] wireguard7: entered allmulticast mode
[  961.688693][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11686'.
[  961.732997][ T7490] loop3: detected capacity change from 0 to 128
[  961.798801][ T6848] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  961.916948][ T7511] loop1: detected capacity change from 0 to 2048
[  961.934984][ T7513] loop6: detected capacity change from 0 to 512
[  961.954798][ T7511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  961.967958][ T7513] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.11688: bg 0: block 5: invalid block bitmap
[  961.994236][ T7496] ==================================================================
[  961.997046][ T7511] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.11691: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  962.002369][ T7496] BUG: KCSAN: data-race in __delete_from_swap_cache / folio_mapping
[  962.002429][ T7496] 
[  962.002437][ T7496] write to 0xffffea0004d75f68 of 8 bytes by task 7494 on cpu 1:
[  962.031157][ T7513] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  962.037235][ T7496]  __delete_from_swap_cache+0x1e8/0x280
[  962.037280][ T7496]  delete_from_swap_cache+0x73/0xe0
[  962.056797][ T7496]  folio_free_swap+0x188/0x1a0
[  962.061624][ T7496]  do_swap_page+0x1507/0x2430
[  962.066341][ T7496]  handle_mm_fault+0x9a5/0x2be0
[  962.070219][ T7511] EXT4-fs (loop1): Remounting filesystem read-only
[  962.071220][ T7496]  do_user_addr_fault+0x636/0x1090
[  962.079622][ T7513] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.11688: invalid indirect mapped block 3 (level 2)
[  962.082933][ T7496]  exc_page_fault+0x62/0xa0
[  962.082973][ T7496]  asm_exc_page_fault+0x26/0x30
[  962.082999][ T7496] 
[  962.083007][ T7496] read to 0xffffea0004d75f68 of 8 bytes by task 7496 on cpu 0:
[  962.115504][ T7496]  folio_mapping+0xdd/0x120
[  962.120139][ T7496]  evict_folios+0xdb9/0x33d0
[  962.124771][ T7496]  try_to_shrink_lruvec+0x45a/0x7e0
[  962.130012][ T7496]  shrink_lruvec+0x22e/0x1b40
[  962.134724][ T7496]  shrink_node+0x686/0x2120
[  962.139267][ T7496]  do_try_to_free_pages+0x3f6/0xcd0
[  962.144488][ T7496]  try_to_free_mem_cgroup_pages+0x1ab/0x410
[  962.150493][ T7496]  try_charge_memcg+0x358/0x9e0
[  962.155369][ T7496]  obj_cgroup_charge_pages+0xa6/0x150
[  962.160792][ T7496]  __memcg_kmem_charge_page+0x9f/0x170
[  962.166286][ T7496]  __alloc_frozen_pages_noprof+0x188/0x360
[  962.172130][ T7496]  alloc_pages_mpol+0xb3/0x250
[  962.176929][ T7496]  alloc_pages_noprof+0x90/0x130
[  962.181896][ T7496]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  962.187754][ T7496]  __kvmalloc_node_noprof+0x30f/0x4e0
[  962.193168][ T7496]  ip_set_alloc+0x1f/0x30
[  962.197537][ T7496]  hash_netiface_create+0x282/0x740
[  962.202773][ T7496]  ip_set_create+0x3cc/0x960
[  962.207381][ T7496]  nfnetlink_rcv_msg+0x4c3/0x590
[  962.212351][ T7496]  netlink_rcv_skb+0x120/0x220
[  962.217138][ T7496]  nfnetlink_rcv+0x16b/0x1690
[  962.221853][ T7496]  netlink_unicast+0x5a1/0x670
[  962.226738][ T7496]  netlink_sendmsg+0x58b/0x6b0
[  962.231525][ T7496]  __sock_sendmsg+0x142/0x180
[  962.236318][ T7496]  ____sys_sendmsg+0x31e/0x4e0
[  962.241110][ T7496]  ___sys_sendmsg+0x17b/0x1d0
[  962.245809][ T7496]  __x64_sys_sendmsg+0xd4/0x160
[  962.250733][ T7496]  x64_sys_call+0x2999/0x2fb0
[  962.255443][ T7496]  do_syscall_64+0xd2/0x200
[  962.259974][ T7496]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  962.265890][ T7496] 
[  962.268223][ T7496] value changed: 0x000000000000145c -> 0x0000000000000000
[  962.275412][ T7496] 
[  962.277746][ T7496] Reported by Kernel Concurrency Sanitizer on:
[  962.284009][ T7496] CPU: 0 UID: 0 PID: 7496 Comm: syz.8.11685 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) 
[  962.296533][ T7496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  962.306607][ T7496] ==================================================================
[  962.315164][ T7520] loop3: detected capacity change from 0 to 512
[  962.335737][ T7520] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.11692: bg 0: block 5: invalid block bitmap
[  962.348505][ T7520] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  962.359362][  T640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  962.368778][ T7513] EXT4-fs (loop6): 2 truncates cleaned up
[  962.372215][ T7520] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.11692: invalid indirect mapped block 3 (level 2)
[  962.375228][ T7513] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  962.409913][ T7520] EXT4-fs (loop3): 2 truncates cleaned up
[  962.424296][ T7520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  962.451598][   T29] kauditd_printk_skb: 173 callbacks suppressed
[  962.451617][   T29] audit: type=1400 audit(1749703637.797:73078): avc:  denied  { setattr } for  pid=7514 comm="syz.3.11692" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  962.482381][   T29] audit: type=1400 audit(1749703637.837:73079): avc:  denied  { create } for  pid=7514 comm="syz.3.11692" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  962.483494][ T7515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  962.502918][   T29] audit: type=1400 audit(1749703637.837:73080): avc:  denied  { read write } for  pid=7514 comm="syz.3.11692" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  962.522307][ T7515] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  962.535250][   T29] audit: type=1400 audit(1749703637.837:73081): avc:  denied  { open } for  pid=7514 comm="syz.3.11692" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  962.566615][   T29] audit: type=1400 audit(1749703637.837:73082): avc:  denied  { ioctl } for  pid=7514 comm="syz.3.11692" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  962.595088][ T7508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  962.604218][ T7508] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  962.614502][ T7508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  962.614779][   T29] audit: type=1400 audit(1749703637.967:73083): avc:  denied  { read write } for  pid=7506 comm="syz.6.11688" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  962.623654][ T7508] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  962.646706][   T29] audit: type=1400 audit(1749703637.967:73084): avc:  denied  { open } for  pid=7506 comm="syz.6.11688" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  963.086952][T31831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  963.424208][ T6848] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.