last executing test programs:

2m54.863374814s ago: executing program 2 (id=40):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59dc6d71776a1654, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)

2m54.861787214s ago: executing program 2 (id=41):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x1a220, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000010000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10)
fadvise64(r0, 0x2, 0x1, 0x5)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8e0000b535277602c8be9a8567828f711330ff2bb17b550800", "dc5db43f", "80031f0000000200"}, 0x38)

2m54.811001255s ago: executing program 2 (id=43):
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000040)=""/185, &(0x7f00000003c0)=0xb9)

2m54.808043995s ago: executing program 2 (id=44):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r2], 0x20}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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")
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101100, 0x40)
getdents(r5, &(0x7f00000000c0)=""/43, 0x2b)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs")
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x73c8, 0x80, 0x3, 0x1000034c}, &(0x7f0000000040), &(0x7f0000000580))

2m54.678645657s ago: executing program 2 (id=47):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x9, 0x70000000, 0x80000}, 0x20)

2m53.948616068s ago: executing program 2 (id=56):
epoll_create1(0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x2, 0x0, @empty, 0x8}, 0x1c)
unshare(0x62040200)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f00000001c0)=0x9, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1c)
epoll_create1(0x0) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x2, 0x0, @empty, 0x8}, 0x1c) (async)
unshare(0x62040200) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f00000001c0)=0x9, 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1c) (async)

2m53.897005569s ago: executing program 32 (id=56):
epoll_create1(0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x2, 0x0, @empty, 0x8}, 0x1c)
unshare(0x62040200)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f00000001c0)=0x9, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1c)
epoll_create1(0x0) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x2, 0x0, @empty, 0x8}, 0x1c) (async)
unshare(0x62040200) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f00000001c0)=0x9, 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1c) (async)

1m38.55358693s ago: executing program 1 (id=1297):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x0, <r1=>0x0}, 0x8)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x404080, 0x0)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%+9llu \x00'}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {<r6=>0xffffffffffffffff}}, './file0\x00'})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x13, &(0x7f0000000040)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x96}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f0000000100)='syzkaller\x00', 0xffffffff, 0xf1, &(0x7f0000000140)=""/241, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, r1, r2, 0x5, &(0x7f0000000480)=[r3, r4, r5], &(0x7f00000004c0)=[{0x4, 0x4, 0x6, 0x3}, {0x2, 0x1, 0xb, 0x2}, {0x4, 0x2, 0xb, 0x3}, {0x3, 0x4, 0x5, 0x2}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x101, @void, @value}, 0x94)
r8 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000600)='/dev/vcsu\x00', 0x0, r8)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x12, &(0x7f0000000640)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x58}], &(0x7f0000000700)='GPL\x00', 0x4, 0x1000, &(0x7f0000000740)=""/4096, 0x41100, 0x6d, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001ac0)={r9, 0xe0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001800)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001880)=[0x0, 0x0], 0x0, 0xc5, &(0x7f00000018c0)=[{}, {}], 0x10, 0x10, &(0x7f0000001900), &(0x7f0000001940), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000001980)}}, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001b00), r5)
r10 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_SCRNMAP(r10, 0x4b41, &(0x7f0000001b40)="e99603ff4667aac20d9f47b1801f9177b50f7991e3e2f723ca4749bf7563e2386c41487960b14f630266e72d03b51a0063df643e74935e4cc9b85c7842358326167243fc885638ee4699392b037581412d8e")
write$selinux_load(r6, &(0x7f0000001bc0)={0xf97cff8c, 0x8, 'SE Linux', "6b5f0bd908ca9ff234b7e6772ba4c85979468bba98e37990386126f3f578dad639bc27df8602669cb27b67a6f169c8d34cb07e01001d599646e0a424b1dab5e3d91603012556f56d839bafb4505dc8c7a39358509911"}, 0x66)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c80), r5)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x1c, r11, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000)
r12 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001d80), 0x401, 0x0)
fcntl$setpipe(r12, 0x407, 0x3)
ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000001dc0)={0x10, 0x4, 0x7, 0xc5e, 0x3})
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000001e00)={'\x00', 0x6, 0x4, 0x0, 0xfffffffffffffff8, 0x7, <r13=>0xffffffffffffffff})
ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f0000001e80)=r13)
syz_clone3(&(0x7f0000002200)={0x4000, &(0x7f0000002040)=<r14=>0xffffffffffffffff, &(0x7f0000002080), &(0x7f00000020c0), {0x6}, &(0x7f0000002100)=""/80, 0x50, &(0x7f0000002180)=""/40, &(0x7f00000021c0)=[r13, r13, r13, r13, r13], 0x5, {r5}}, 0x58)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002280)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
ioctl$TIOCGPGRP(r10, 0x540f, &(0x7f00000022c0)=<r16=>0x0)
getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000002300)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000002400)=0xe8)
sendmsg$unix(r6, &(0x7f0000002500)={&(0x7f0000001ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000001f40)="979a03c3b63188f679f384023aa951088ab49cff132897e28dae68ec9f70ac116cf33a56fa24e9c7b1fc35acbba4b7617cd41a2886e7d2eaaccbdb4065395c363c3e8723af6a0d9041c9728988ddf14213e89fd36cc04ad2fce20371213fde9544301219f851670a259699bfa3a3e7f9c40b5a71a2fbf9f750912f6c2dc48ea211846f01aeef8a0ca90a6562ff593b46cd9e73efeb37f0774a704c27b739c033497fd4d298f6", 0xa6}], 0x1, &(0x7f0000002440)=[@rights={{0x1c, 0x1, 0x1, [r14, r6, r6]}}, @rights={{0x18, 0x1, 0x1, [r5, r3]}}, @rights={{0x34, 0x1, 0x1, [r15, r3, r6, r7, r8, r5, r9, r4, r2]}}, @rights={{0x28, 0x1, 0x1, [r9, r2, r3, r7, r9, r9]}}, @cred={{0x1c, 0x1, 0x2, {r16, r17}}}], 0xb8, 0x800}, 0x4005)
timer_create(0x0, &(0x7f0000002540)={0x0, 0xd, 0x2, @tid=r13}, &(0x7f0000002580))
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000002640)={0x9, &(0x7f00000025c0)=[{0x2, 0xf9, 0x5, 0x9}, {0x5, 0x4, 0x7, 0x200}, {0x1, 0x1, 0xf0, 0x83c2}, {0x7, 0x7, 0xb, 0x3}, {0xdf, 0x49, 0xf, 0xe}, {0x8, 0x7, 0x4, 0x200}, {0x6, 0x0, 0x8, 0x9}, {0x4, 0x5, 0x1, 0x80000001}, {0x2, 0xb6, 0x2, 0xc0}]}, 0x10)
getresuid(&(0x7f0000002680), &(0x7f00000026c0), &(0x7f0000002700))

1m38.472244322s ago: executing program 1 (id=1300):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fsetxattr$security_selinux(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0) (fail_nth: 2)

1m38.384035543s ago: executing program 1 (id=1302):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000180)="35a70f51bc", &(0x7f0000000040)=""/12, &(0x7f0000000f80), &(0x7f00000005c0), 0x4, r0}, 0x38)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
r4 = socket$packet(0x11, 0x2, 0x300)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
semop(0x0, 0x0, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r6 = gettid()
r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
read$ptp(r7, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=<r8=>0x0)
timer_settime(r8, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[], 0xb4}}, 0x8004)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES8], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94)

1m37.507738357s ago: executing program 1 (id=1311):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EmKPILUhcaModhzFTmlCD+mZKxKVOMGRP4BzT9y5IHrjUg5I/IhADRIHoxlPUje1m6hJ7Gz8+UijeW/e1N/vazrvxS+NXwBD62pE7EbEWETcjojp7HouO+KT9pHc93Tv/tL+3v2lXLRan/0zl7Yn16LjzySuZK9ZjIgffS/ip7kX4za2d9YWq9XKZlafbdY2ZhvbOzdWa4srlZXKerm8ML8w99HND8tn1td3amNZ6atP/rj7rZ8naU1lVzr7cZbaXS8cxkmMRsQPziPYAIxk/RkbdCK8knxEvBkR76bP/3SMpF9NAOAya7WmozXdWQcALrt8ugaWy5eytYCpyOdLpfYa3lsxma/WG83rd+pb68vttbKZKOTvrFYrc9la4UwUckl9Pi0/q5eP1G9GxBsR8cvxibReWqpXlwf5jQ8ADLErR+b//4y3538A4JIrDjoBAKDvzP8AMHzM/wAwfMz/ADB82vP/xKDTAAD6yPt/ABg+5n8AGCo//PTT5GjtZ59/vXx3e2utfvfGcqWxVqptLZWW6psbpZV6fSX9zJ7aca9Xrdc35j+IrXsz395oNGcb2zu3avWt9eat9HO9b1UK6V27fegZANDLG+88epxLZuSPJ9IjOvZyKAw0M+C85QedADAwI4NOABgYu33B8DrFe3zLA3BJdNmi9znFbr8g1Gq1WueXEnDOrn3J+j8Mq471f/8LGIaM9X8YXtb/YXi1WrmT7vkfJ70RALjYrPEDPX7+/2Z2/l32w4GfLB+94+F5ZgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX28H+v6VsL/CpyOdLpYjXImImCrk7q9XKXES8HhF/Hi+MJ/X5AecMAJxW/m+5bP+va9PvTz3X9PaVw+JYRPzs15/96t5is7n5p4ix3L/GD643H2bXy/3PHgA43sE8nZ473sg/3bu/dHD0M5+/fzciiu34+3tjsX8YfzRG03MxChEx+e9cVm/LdaxdnMbug4j4Yrf+52IqXQNp73x6NH4S+7W+xs8/Fz+ftrXPyd/FF84gFxg2j5Lx55Nuz18+rqbn7s9/MR2hTi8b/5KXWtpPx8Bn8Q/Gv5Ee49/Vk8b44A/fb5cmXmx7EPHl0YiD2Psd489B/FyP+O+fMP5fvvL2u73aWr+JuBbd43fGmm3WNmYb2zs3VmuLK5WVynq5vDC/MPfRzQ/Ls+ka9Wzv2eAfH19/vVdb0v/JHvGLx/T/6yfs/2//d/vHX3tJ/G++1y1+Pt56SfxkTvzGCeMvTv6+2Kstib/co//Hff2vnzD+k7/uvLBtOAAwOI3tnbXFarWy+TkqPE6+pxl8Ggr9LyT/ZC9AGl0L3+lXrLHo3vSL99rP9JGmVuuVYvUaMc5i1Q24CA4f+oj476CTAQAAAAAAAAAAAAAAuurHbywNuo8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcXv8PAAD//+a4zis=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000003c0)={'ip6tnl0\x00', <r1=>0x0, 0x4, 0x61, 0x6c, 0x1ff, 0x64, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x80, 0x3, 0x5}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x40000, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0xfffffd26, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x7, 0x9, 0xfffffeff, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x7, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0xfffffffe, 0x0, 0x6, 0x8, 0x0, 0x1, 0x2, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x61ba, 0x0, 0xfffffffe, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x50b98558, 0x1, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4b, '\x00', r1, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0xfe03)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
r7 = gettid()
rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8)
tkill(r7, 0x12)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10)
r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x8100, 0x0)
ioctl$TIOCGPTPEER(r12, 0x5441, 0x7)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
r13 = syz_clone(0x308000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r13)

1m37.28976653s ago: executing program 1 (id=1317):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x1a220, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00'}, 0x10)
fadvise64(r0, 0x2, 0x1, 0x5)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8e0000b535277602c8be9a8567828f711330ff2bb17b550800", "dc5db43f", "80031f0000000200"}, 0x38)

1m36.998615905s ago: executing program 1 (id=1320):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x44040000)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r5 = io_uring_setup(0x2987, &(0x7f0000000080)={0x0, 0x40000000, 0x800, 0x4, 0x4})
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "63bc7e99c3373922bdbbf702e197a57f767a4a09133292f554ec11cb49b5372d372568a3fc67d370bb26e9dbd3d89f1b427cb727cd8838323e827a7f28e4f8e1", 0x32}, 0x48, 0x0)
ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000940)=0xfffffffd)
sync()
sync()
close_range(r5, 0xffffffffffffffff, 0x0)

1m36.997997795s ago: executing program 33 (id=1320):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x44040000)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r5 = io_uring_setup(0x2987, &(0x7f0000000080)={0x0, 0x40000000, 0x800, 0x4, 0x4})
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "63bc7e99c3373922bdbbf702e197a57f767a4a09133292f554ec11cb49b5372d372568a3fc67d370bb26e9dbd3d89f1b427cb727cd8838323e827a7f28e4f8e1", 0x32}, 0x48, 0x0)
ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000940)=0xfffffffd)
sync()
sync()
close_range(r5, 0xffffffffffffffff, 0x0)

1m12.026820169s ago: executing program 0 (id=1789):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r1, 0x0, 0x4}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x4, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10)
umount2(0x0, 0x7)
r4 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x69bd, 0x400})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

1m11.97548815s ago: executing program 0 (id=1790):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r0, 0x0, 0x6}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x4001, 0x0)

1m11.880285102s ago: executing program 0 (id=1792):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1f4)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="16000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
close(r3)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000004240002000c0002800500010a0000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0)
ioctl$BLKTRACESETUP(r1, 0x1276, 0x0)

1m11.659181545s ago: executing program 0 (id=1800):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff8500000010000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='percpu_free_percpu\x00', r0}, 0x18)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x53e, &(0x7f0000000940)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = epoll_create1(0x80000)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setrlimit(0x7, &(0x7f00000001c0)={0x5, 0xd})
fcntl$dupfd(r5, 0x406, r5)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f00000000c0)={0xe000001a})
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r6, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x18)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r9}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5)

1m11.461091088s ago: executing program 0 (id=1802):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r0, 0x0, 0x6}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x4001, 0x0)

1m11.38475637s ago: executing program 0 (id=1804):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r3}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r3}, 0x10)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) (async)
write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100))
syz_usbip_server_init(0x3)

1m11.36175919s ago: executing program 34 (id=1804):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r3}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r3}, 0x10)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) (async)
write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100))
syz_usbip_server_init(0x3)

37.987997904s ago: executing program 5 (id=2346):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pipe2$9p(&(0x7f00000005c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a94e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ac897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3472decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6036e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1c39b359c672a7f9ba9d0aceca95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984e24a7f6bf0b94ac74f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bef74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc02789e2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b1651ec16078ae4d83bcd5ad4cf2c52c7e4f380d38af3368b1255f15adde74aed7c5e83a8a04fafe987acd8df757966c78c1e22594c3dd000555726804249de190fef270de5f4ccd07d9002b5bfe1ddcab368295000000000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
creat(&(0x7f0000000380)='./file0\x00', 0x0)

37.943759845s ago: executing program 5 (id=2358):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x80, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x20004084)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, 0x0, 0x0, 0x0)

37.859681626s ago: executing program 5 (id=2349):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7})
r0 = io_uring_setup(0x5b0, &(0x7f0000000080)={0x0, 0x54e9, 0x1000, 0x0, 0x217})
r1 = eventfd(0xffffffff)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100)=r1, 0x1)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0xb, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="c8881affa00a74ac772860", 0x0, 0x0, 0x12, 0x0, 0x0})

37.858744457s ago: executing program 5 (id=2350):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='kfree\x00', r0, 0x0, 0x7}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='kfree\x00', r0, 0x0, 0x7}, 0x18)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$selinux_validatetrans(r1, &(0x7f00000000c0)={'system_u:object_r:devlog_t:s0', 0x20, 'system_u:object_r:bsdpty_device_t:s0', 0x20, 0x8, 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}, 0x86)
socket$kcm(0xa, 0x1, 0x106) (async)
r2 = socket$kcm(0xa, 0x1, 0x106)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000000)=0xfffffffe, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000040)='./file0\x00') (async)
pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000040)='./file0\x00')
r6 = getpid()
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) (async)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3)
sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
write$tun(0xffffffffffffffff, 0x0, 0x40)

37.818909267s ago: executing program 5 (id=2352):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
msgget$private(0x0, 0x0)

36.765292363s ago: executing program 5 (id=2375):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0xce)
pipe2$9p(&(0x7f00000005c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=[@ip_retopts={{0x10}}], 0x10}, 0x0)
ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000000))
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x323c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
creat(&(0x7f0000000380)='./file0\x00', 0x0)

36.748865033s ago: executing program 35 (id=2375):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0xce)
pipe2$9p(&(0x7f00000005c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=[@ip_retopts={{0x10}}], 0x10}, 0x0)
ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000000))
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x323c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
creat(&(0x7f0000000380)='./file0\x00', 0x0)

3.353311328s ago: executing program 8 (id=2935):
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000500)='kfree\x00', r1}, 0x18)
socket(0x2000000000000021, 0x2, 0x10000000000002)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5afa, 0x80, 0x22, 0x335}, &(0x7f0000000400)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0x800, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x8, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1})
io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10)
setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)

3.281069689s ago: executing program 8 (id=2936):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000380)='wbt_stat\x00', r2, 0x0, 0x6}, 0x18)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x4000000, 0xffffffff, 0x1, 0x0, 0x0, 0x5, 0x4})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6})
ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000040))
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180), 0x4)
sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x7, 0x10001}, {0x6}]}, 0x10)
r11 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$uac1(r11, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x150, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109023e010101000000090400000002"], 0x0)
r12 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r12, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}})
r13 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r13, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001e40)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15615, 0xef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xf7}]}}}]}, 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

2.702706228s ago: executing program 8 (id=2941):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x1}, {0x2, 0x4, 0x1800}], 0x2, 0x0)
syz_open_procfs$pagemap(0x0, 0x0)
gettid()
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
io_setup(0x6, &(0x7f0000001000)=<r5=>0x0)
io_getevents(r5, 0x3, 0x3, &(0x7f00000010c0)=[{}, {}, {}], &(0x7f0000001140)={0x0, 0x3938700})
semop(0x0, 0x0, 0x0)
semctl$GETZCNT(0x0, 0x4, 0xf, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=<r6=>0x0)
timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298)
sendto$inet(r7, 0x0, 0x0, 0x24000080, 0x0, 0x0)

2.532519841s ago: executing program 3 (id=2923):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x86)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x3e}, 0x18)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

2.515261541s ago: executing program 3 (id=2948):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d0000008500000023"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0)
syz_open_procfs$pagemap(0x0, 0x0)
gettid()
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
io_setup(0x6, &(0x7f0000001000)=<r3=>0x0)
io_getevents(r3, 0x3, 0x3, &(0x7f00000010c0)=[{}, {}, {}], &(0x7f0000001140)={0x0, 0x3938700})
semop(0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298)
sendto$inet(r4, 0x0, 0x0, 0x24000080, 0x0, 0x0)

2.058995289s ago: executing program 3 (id=2956):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000230000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x68, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x3}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="080027bd7000fbdbdf250800000005000500070000000800030007000000050005008100000008000200040000000500050007000000080003000300000008000400af0300000c000680080006000d0000000500050008000000d78b1768d46959dca1008a2fe6dda61adf1e3891bcdeef90397ce5ef9449a0a4167f37dc7bb0a16a419a87b193e8b0340aebd318a20e4fc811f1be8ecc"], 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x48010)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r7, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)

1.30589729s ago: executing program 3 (id=2959):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 64)
r1 = socket(0x10, 0x803, 0x0) (rerun: 64)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@ipv6_newaddr={0x5c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @private2}, @IFA_CACHEINFO={0xa, 0x6, {0x0, 0xfffff001}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x5c}}, 0x0) (async, rerun: 32)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) (async)
r3 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/219, 0xdb}], 0x1) (async)
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) (async)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000340)={0x1, 0x8, 0x0, 0x1, 0x5, "90737f0000ffffffffffffffff1e277fffffeb"}) (async, rerun: 64)
pipe2$9p(&(0x7f0000000000)={<r7=>0xffffffffffffffff}, 0x84000) (async, rerun: 64)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9)
sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r10, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x4}}}}}, 0x30}}, 0x8840) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r10, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8, 0x40}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x30}}, 0x1)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) (async, rerun: 64)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x408002, 0x0) (async, rerun: 64)
dup(r6) (async)
io_uring_enter(r3, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5)

1.30484257s ago: executing program 6 (id=2960):
socket$kcm(0x10, 0x2, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000d56a4205821593f0ac5d74f224bcd3fcbcc59d309a56f2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18)
mknod(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
readv(r1, 0x0, 0x0)
mknod(0x0, 0x8001420, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r4}, 0x18)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a01"], 0x24}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clock_gettime(0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x33, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
close_range(r6, 0xffffffffffffffff, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x114, 0x0)

1.26592709s ago: executing program 3 (id=2961):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x2, [@ptr={0x4, 0x0, 0x0, 0x2, 0x5}, @enum64={0x3, 0x5, 0x0, 0x13, 0x1, 0x1, [{0xa, 0xffff, 0x6}, {0x2, 0xfff, 0x5}, {0x4, 0x40, 0x3}, {0xa, 0x3, 0x81}, {0x10, 0x473, 0x1}]}, @var={0x6, 0x0, 0x0, 0xe, 0x4}, @func_proto]}}, 0x0, 0x8a, 0x0, 0x1, 0x6, 0x10000, @value}, 0x28)
r0 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x48}], 0x1}, 0x0)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f00000008c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0)
alarm(0x8)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000400)})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
write$binfmt_register(r1, &(0x7f0000000400)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xb7, 0x3a, 'syzkaller\x00', 0x3a, 'vfat\x00', 0x3a, './file1', 0x3a, [0x43, 0x4f, 0x43]}, 0x39)
writev(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1be)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a00000004000000080000000800000000", @ANYRES32=0x0, @ANYRES32], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r7}, 0x38)
syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000140)=ANY=[], 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1)
write$UHID_INPUT(r1, &(0x7f0000001d00)={0x8, {"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", 0x1000}}, 0x1006)

1.157911672s ago: executing program 6 (id=2964):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket(0x10, 0x3, 0x0)
connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084)

1.147723793s ago: executing program 6 (id=2966):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0201000a0a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000)

1.077309884s ago: executing program 4 (id=2967):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x100000004}, 0x18)
r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x1a1301)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000500)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x12, 0x40, 0x2}, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]})
socket$inet(0x2, 0x1, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

1.076755203s ago: executing program 6 (id=2968):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"})

836.188127ms ago: executing program 6 (id=2969):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="263bc20000070000acd2789f000000008500000023e3b48500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x15, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
statfs(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10)
sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x46}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
socket$xdp(0x2c, 0x3, 0x0)
lsm_get_self_attr(0x67, &(0x7f00000006c0)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000040)=0x1020, 0x1)
r2 = socket(0x1e, 0x80004, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10)
sendmmsg(r2, 0x0, 0x0, 0x9200000000000000)
recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)

794.473358ms ago: executing program 8 (id=2970):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001"], 0x54}}, 0xc4) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) (async)
unshare(0x6a040000)

694.31086ms ago: executing program 8 (id=2971):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffff8}, 0x18)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002)
r4 = openat$cgroup_procs(r0, &(0x7f0000000840)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000140), 0x12)
socket$kcm(0x21, 0x2, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
wait4(0x0, &(0x7f0000000000), 0x8, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r6, r6, 0x0, 0xf)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r10}, 0x18)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0)
r11 = socket$inet(0x2, 0x3, 0xffffffff)
getpeername(r11, &(0x7f0000000240)=@generic, &(0x7f0000000380)=0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f0000001cc0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x1, 0x500, &(0x7f0000002400)="$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")

656.95233ms ago: executing program 8 (id=2972):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x2c8, &(0x7f0000000700)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0xecffffff, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x18}]}]}}}]}, 0x80}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000030601010000000000000000010000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000001c0)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x8}, @ioring_restriction_sqe_flags_allowed={0x2, 0xd}, @ioring_restriction_register_op={0x0, 0x5}, @ioring_restriction_sqe_op={0x1, 0x3}], 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x4800)
fcntl$setpipe(r9, 0x407, 0x6)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0x78)
sendmsg$nl_route_sched(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@deltaction={0x14, 0x31, 0x8, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008014}, 0x40)
r10 = dup3(0xffffffffffffffff, r0, 0x0)
r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
write$cgroup_subtree(r10, &(0x7f00000005c0)=ANY=[@ANYBLOB="006d656d6f727920a56ad4986e75affad1be43abfbc5e7e4b9fe5699cdbda490db47b7298abe31bc3c5cd6b6850ef96348d19d4dab00c3dfded064a6ec7b712c9190fe6bc02f3df8fe4302fd0640b6f1f422f7076ea09f5ea3367a82c2ce42aa0b6e1417e9f5f7f1fbcc615d663a909570fe4dc9d631724d807e36b8a0e8c4c45a4d2ce03dbf7e0722ec0126d54e92976e35b366410c60cf1e4b1eda0ce8d389d1c08313000000000000172b41dd6f774f4f612647ffd047294e6da3e0c58ef200eb30a532bc3bf92bd5d4ded91ec40c156e7242f3996efe629c97b7311fd4bcd2000667181a13c08cd4cd54c06dee14a888a560eedbd358d2c962f3baa72a32087689f5df1e163537eb5f8c77ef6eb285288e7e9d90ac95c0b7ef6d000000"], 0x8)
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r10])

614.62149ms ago: executing program 3 (id=2973):
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x101400, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000008fc30bfe000000000000b23ae59341100000000000000000", @ANYRES64=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b708738af0ff00000000bfa100000000000007010000f8fbffffbfa400000000000007040000f0ffffffb70200000800000018230000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000003680)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
io_setup(0x1, &(0x7f0000000040)=<r5=>0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x1a00001a}])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYRESDEC=r3, @ANYRES16, @ANYRES16=r4], &(0x7f0000000080)='GPL\x00', 0x8008, 0x0, 0x0, 0x40ffc, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0700008311ffffffffffff00ee19000a541058c0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000300"/28], 0x50)
r6 = request_key(&(0x7f0000000080)='big_key\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000180)='blkio.baq.io_servic\xaa_bytes\x00', 0x0)
r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$setperm(0x5, r7, 0x52b242d)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x0, 0x0, 0x0, 0x0, 0x7, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, @perf_config_ext={0x5, 0x7}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x80240, 0x0)
ioctl$TIOCVHANGUP(r8, 0x5437, 0x2)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYBLOB="9727a5fee2e5aa4a2b4957fbef8ec22d5db2cbb0b5561d711792641e832062dee5bb114595e9631f6cd770ebdfaaa22154ccfce629010efe263b0b1b63533c584cdb3985fed1543d3eb5ab02c7422c3061dd4d03bba405ed61f3019fc70e363eed8bd65dbb76aa2e0e7f1f003cba7185a195a6ebc197af31579a544c52cd56a2ed6ebc3b0ae493b9f485558968c43c7c13d36cc8ed9b1ad68585a4c32d30128deeed9f63e1ce0f62b8469bb276afc1a83227c0525919f1b24e6601262c9d24121c348a22393996919e24cb228b5e1493a5457311d2eb61c820d2675e5ffb97708d8f4282c4e9675dc60056cb057446", @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r9, 0x0, 0xfffffffffffffffd}, 0x18)
syz_open_dev$hiddev(&(0x7f0000000400), 0x7fff, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c00", @ANYRES32, @ANYBLOB], 0x28}}, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000001c0)='id_resolver\x00', &(0x7f0000000200)=@keyring={'key_or_keyring:', r7})

370.948354ms ago: executing program 7 (id=2974):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x200000000000000, 0x1}}, 0x40)

333.864565ms ago: executing program 7 (id=2975):
r0 = msgget$private(0x0, 0x785)
msgsnd(r0, &(0x7f00000002c0)={0x1}, 0x8, 0x800)
r1 = semget(0x2, 0x0, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xc}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000340)=""/129)
r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_access(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='system_u:obbectWr:sshd_var_run_t:s0 /sbin/dhclient 00'], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
io_uring_setup(0x7b21, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x105})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffff8}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000200)={[{@resuid}, {@delalloc}, {@nouid32}, {@init_itable}, {@norecovery}]}, 0x9, 0x617, &(0x7f0000000d80)="$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")
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000003a000b00000000000000000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0)
semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f00000000c0)=""/104)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/143}, 0x97, 0x0, 0x1000)

256.910416ms ago: executing program 4 (id=2976):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f00000002c0)={[{@grpjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x40}}, {@bsdgroups}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@jqfmt_vfsv1}], [{@seclabel}]}, 0x3, 0x446, &(0x7f0000000d40)="$eJzs28tvG8UfAPDv2kn6/P1qqvLoAwgURMQjadJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSd8QRib+AE1wQcELiCndUqUK5tMDFaOPdxHbttA5ONtSfj7TJzO44M1/vjj07kw2gbw2nP5KIvRHxa0Tsq2ebCwzXf91cXpz6c3lxKola7Y0/kpVyN5YXp/Ki+ev25JmBiNInSRxuU+/8pcvnJqvVmYtZfmzh/Ltj85cuPzN7fvLszNmZCxOnTp04Pv7cyYlnexJnGteNQx/MHTn4yltXX5s6ffXtH79O8vhb4uiR4fUOPl6r9bi6Yv2vIZ0MFNgQulKud9MYXOn/+6IcaydvX7z8caGNAzZVrVar3df58FINuIslUXQLgGLkX/Tp/W++bdHQY1u4/kL9BiiN+2a21Y8MRCkrM9hyf9tLwxFxeumvL9ItNmceAgCgybfp+OfpbPzXtPBTisZ5of9nayiViLgnIvZHxMmIOBAR90aslL0/Ih7osv7WRZJbxz+la13+ya6k47/ns7Wt5vFfPvqLSjni73y4XInB5MxsdeZY9p6MxOCOND++Th3fvfTLZ52ONY7/0i2tPx8LZu24NrCj+TXTkwuT/ybmRtc/ijg00C7+ZHUlIL0sDkbEoQ3WMfvkV0c6Hbt9/M2GGjM9WGeqfRnxRP38L0VL/Llk/fXJsZ1RnTk2ll8Vt/rp5yuvd6q/2/h7LT3/u9te/6vxV5LG9dr57uu48tunHe9pNnr9DyVvNu17f3Jh4eJ4xFDyar3RjfsnWspNrJVP4x852r7/74+1d+JwRKQX8YMR8VBEPJy1/ZGIeDQijq4T/w8vPvZO856ki/g3Vxr/dFfnfy0xFK172ifK577/pqnSSnQRf3r+T6ykRrI9d/L5dyft2tjVDAAAAP89pYjYG0lpdDVdKo2O1v+H/0DsLlXn5heeOjP33oXp+jMClRgs5TNd9fng+nzoeHZbn+cnWvLHs3njz8u7VvKjU3PV6aKDhz63p0P/T/1eLrp1wKbzvBb0L/0f+pf+D/1L/4f+1ab/7yqiHcDWa/f9/2EB7QC2Xkv/t+wHfcT9P/Qv/R/6l/4PfWl+V9z+Ifntmti5PZrRn4koFVd7PkNV+JtwFycK/mACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokX8CAAD//2Ts5lU=")
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x400017e)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r7, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000240)={@empty, <r8=>0x0}, &(0x7f0000000280)=0x14)
r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='auxv\x00')
pread64(r9, 0x0, 0x0, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1c, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x400, '\x00', r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000000100000f20300000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r13}, 0x18)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)
r14 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r14, 0x6, 0x0, 0x0, 0x0)
fsmount(r14, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r14, 0x6, 0x0, 0x0, 0x0)
getpid()

149.535848ms ago: executing program 7 (id=2977):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket(0x10, 0x3, 0x0)
connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084)

148.824658ms ago: executing program 4 (id=2978):
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000500)='kfree\x00', r0}, 0x18)
socket(0x2000000000000021, 0x2, 0x10000000000002)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5afa, 0x80, 0x22, 0x335}, &(0x7f0000000400)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x800, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x8, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1})
io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10)
setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)

148.442558ms ago: executing program 7 (id=2979):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x23)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
close(r0)

127.012188ms ago: executing program 7 (id=2980):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"})

69.397779ms ago: executing program 4 (id=2981):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
r1 = socket$inet(0xa, 0x801, 0x84)
accept4(r1, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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")

67.923119ms ago: executing program 4 (id=2982):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffff8}, 0x18)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002)
r4 = openat$cgroup_procs(r0, &(0x7f0000000840)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000140), 0x12)
socket$kcm(0x21, 0x2, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
wait4(0x0, &(0x7f0000000000), 0x8, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r6, r6, 0x0, 0xf)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r10}, 0x18)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0)
r11 = socket$inet(0x2, 0x3, 0xffffffff)
getpeername(r11, &(0x7f0000000240)=@generic, &(0x7f0000000380)=0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f0000001cc0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x1, 0x500, &(0x7f0000002400)="$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")

13.25232ms ago: executing program 6 (id=2983):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x2, [@ptr={0x4, 0x0, 0x0, 0x2, 0x5}, @enum64={0x3, 0x5, 0x0, 0x13, 0x1, 0x1, [{0xa, 0xffff, 0x6}, {0x2, 0xfff, 0x5}, {0x4, 0x40, 0x3}, {0xa, 0x3, 0x81}, {0x10, 0x473, 0x1}]}, @var={0x6, 0x0, 0x0, 0xe, 0x4}, @func_proto]}}, 0x0, 0x8a, 0x0, 0x1, 0x6, 0x10000, @value}, 0x28)
r0 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x48}], 0x1}, 0x0)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f00000008c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0)
alarm(0x8)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000400)})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
write$binfmt_register(r1, &(0x7f0000000400)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xb7, 0x3a, 'syzkaller\x00', 0x3a, 'vfat\x00', 0x3a, './file1', 0x3a, [0x43, 0x4f, 0x43]}, 0x39)
writev(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1be)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a00000004000000080000000800000000", @ANYRES32=0x0, @ANYRES32], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r8}, 0x38)
syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000140)=ANY=[], 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1)
write$UHID_INPUT(r1, &(0x7f0000001d00)={0x8, {"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", 0x1000}}, 0x1006)

3.00974ms ago: executing program 7 (id=2984):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%ps    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1")

0s ago: executing program 4 (id=2985):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f91c24fc60", 0x14}], 0x1}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000022, 0x0)
sendmsg$can_raw(0xffffffffffffffff, 0x0, 0xc010)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x8000001f)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x8000003d)
close_range(r1, r2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='initcall_level\x00', r2, 0x0, 0x87f}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xe, 0x7ffc0002}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
getsockopt$nfc_llcp(r4, 0x118, 0x1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
futimesat(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x8}, 0x1c)
sendto$inet6(r6, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x2c)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030005000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

150928][   T29] audit: type=1326 audit(2000000111.160:15332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.3.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894473e929 code=0x7ffc0000
[  177.177017][   T29] audit: type=1326 audit(2000000111.160:15333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.3.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f894473e929 code=0x7ffc0000
[  177.204239][   T29] audit: type=1326 audit(2000000111.190:15334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.3.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894473e929 code=0x7ffc0000
[  177.232530][   T29] audit: type=1326 audit(2000000111.190:15335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.3.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f894473e929 code=0x7ffc0000
[  177.270362][T10817] FAULT_INJECTION: forcing a failure.
[  177.270362][T10817] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  177.285342][T10817] CPU: 1 UID: 0 PID: 10817 Comm: syz.3.2408 Tainted: G        W           6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) 
[  177.285443][T10817] Tainted: [W]=WARN
[  177.285449][T10817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  177.285461][T10817] Call Trace:
[  177.285467][T10817]  <TASK>
[  177.285475][T10817]  __dump_stack+0x1d/0x30
[  177.285498][T10817]  dump_stack_lvl+0xe8/0x140
[  177.285519][T10817]  dump_stack+0x15/0x1b
[  177.285604][T10817]  should_fail_ex+0x265/0x280
[  177.285634][T10817]  should_fail+0xb/0x20
[  177.285679][T10817]  should_fail_usercopy+0x1a/0x20
[  177.285788][T10817]  _copy_from_user+0x1c/0xb0
[  177.285807][T10817]  __se_sys_add_key+0x209/0x350
[  177.285909][T10817]  ? __secure_computing+0x82/0x150
[  177.285931][T10817]  __x64_sys_add_key+0x67/0x80
[  177.285951][T10817]  x64_sys_call+0x1d0d/0x2fb0
[  177.285970][T10817]  do_syscall_64+0xd2/0x200
[  177.285993][T10817]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  177.286092][T10817]  ? clear_bhb_loop+0x40/0x90
[  177.286110][T10817]  ? clear_bhb_loop+0x40/0x90
[  177.286128][T10817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.286191][T10817] RIP: 0033:0x7f894473e929
[  177.286205][T10817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.286891][T10817] RSP: 002b:00007f8942da7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  177.286911][T10817] RAX: ffffffffffffffda RBX: 00007f8944965fa0 RCX: 00007f894473e929
[  177.286923][T10817] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000200000000000
[  177.286934][T10817] RBP: 00007f8942da7090 R08: ffffffffffffffff R09: 0000000000000000
[  177.286950][T10817] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002
[  177.286960][T10817] R13: 0000000000000000 R14: 00007f8944965fa0 R15: 00007fff83e4ae68
[  177.286979][T10817]  </TASK>
[  177.289812][T10690] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  177.507014][T10819] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  177.518701][T10819] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  177.533961][T10824] loop7: detected capacity change from 0 to 512
[  177.540686][T10826] FAULT_INJECTION: forcing a failure.
[  177.540686][T10826] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  177.555226][T10826] CPU: 0 UID: 0 PID: 10826 Comm: syz.8.2409 Tainted: G        W           6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) 
[  177.555310][T10826] Tainted: [W]=WARN
[  177.555372][T10826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  177.555387][T10826] Call Trace:
[  177.555394][T10826]  <TASK>
[  177.555403][T10826]  __dump_stack+0x1d/0x30
[  177.555427][T10826]  dump_stack_lvl+0xe8/0x140
[  177.555449][T10826]  dump_stack+0x15/0x1b
[  177.555523][T10826]  should_fail_ex+0x265/0x280
[  177.555558][T10826]  should_fail+0xb/0x20
[  177.555587][T10826]  should_fail_usercopy+0x1a/0x20
[  177.555621][T10826]  _copy_to_user+0x20/0xa0
[  177.555683][T10826]  simple_read_from_buffer+0xb5/0x130
[  177.555718][T10826]  proc_fail_nth_read+0x100/0x140
[  177.555806][T10826]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  177.555841][T10826]  vfs_read+0x1a0/0x6f0
[  177.555875][T10826]  ? __rcu_read_unlock+0x4f/0x70
[  177.555899][T10826]  ? __rcu_read_unlock+0x4f/0x70
[  177.555921][T10826]  ? __fget_files+0x184/0x1c0
[  177.555946][T10826]  ksys_read+0xda/0x1a0
[  177.555977][T10826]  __x64_sys_read+0x40/0x50
[  177.556056][T10826]  x64_sys_call+0x2d77/0x2fb0
[  177.556156][T10826]  do_syscall_64+0xd2/0x200
[  177.556175][T10826]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  177.556202][T10826]  ? clear_bhb_loop+0x40/0x90
[  177.556230][T10826]  ? clear_bhb_loop+0x40/0x90
[  177.556265][T10826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.556287][T10826] RIP: 0033:0x7f914466d33c
[  177.556303][T10826] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  177.556322][T10826] RSP: 002b:00007f9142cd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  177.556342][T10826] RAX: ffffffffffffffda RBX: 00007f9144895fa0 RCX: 00007f914466d33c
[  177.556355][T10826] RDX: 000000000000000f RSI: 00007f9142cd70a0 RDI: 0000000000000006
[  177.556368][T10826] RBP: 00007f9142cd7090 R08: 0000000000000000 R09: 0000000000000000
[  177.556407][T10826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  177.556419][T10826] R13: 0000000000000000 R14: 00007f9144895fa0 R15: 00007ffc80ed0d98
[  177.556479][T10826]  </TASK>
[  177.807314][T10824] EXT4-fs (loop7): too many log groups per flexible block group
[  177.815156][T10824] EXT4-fs (loop7): failed to initialize mballoc (-12)
[  177.823292][T10824] EXT4-fs (loop7): mount failed
[  177.853666][T10819] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  177.864248][T10819] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  177.895310][T10838] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.2417'.
[  177.910650][T10838] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  177.918612][T10838] team0: Device ipvlan2 is already an upper device of the team interface
[  177.940989][T10819] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  177.951805][T10819] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  177.961289][T10840] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2418'.
[  177.974914][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2418'.
[  178.005460][T10843] loop7: detected capacity change from 0 to 128
[  178.014164][T10819] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  178.024502][T10819] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  178.036939][T10843] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  178.053604][T10843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.063511][T10843] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.076331][T10843] FAT-fs (loop7): error, invalid access to FAT (entry 0x0affffff)
[  178.076351][T10843] FAT-fs (loop7): Filesystem has been set read-only
[  178.076618][T10843] FAT-fs (loop7): error, invalid access to FAT (entry 0x0affffff)
[  178.117545][T10847] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2421'.
[  178.134173][T10819] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  178.143111][T10819] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  178.170780][T10819] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  178.179736][T10819] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  178.192800][T10819] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  178.201945][T10819] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  178.214677][T10819] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  178.223151][T10819] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  178.239993][T10715] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.250293][T10849] vhci_hcd: default hub control req: 4012 v0040 i0002 l0
[  178.266133][T10715] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.278219][T10715] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.291380][T10715] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.291541][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2423'.
[  178.433680][T10868] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  178.446226][T10869] random: crng reseeded on system resumption
[  178.454770][T10869] Unrecognized hibernate image header format!
[  178.460930][T10869] PM: hibernation: Image mismatch: architecture specific data
[  178.469187][T10873] FAULT_INJECTION: forcing a failure.
[  178.469187][T10873] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  178.483237][T10873] CPU: 1 UID: 0 PID: 10873 Comm: syz.6.2433 Tainted: G        W           6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) 
[  178.483275][T10873] Tainted: [W]=WARN
[  178.483282][T10873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  178.483294][T10873] Call Trace:
[  178.483300][T10873]  <TASK>
[  178.483307][T10873]  __dump_stack+0x1d/0x30
[  178.483329][T10873]  dump_stack_lvl+0xe8/0x140
[  178.483350][T10873]  dump_stack+0x15/0x1b
[  178.483430][T10873]  should_fail_ex+0x265/0x280
[  178.483507][T10873]  should_fail+0xb/0x20
[  178.483530][T10873]  should_fail_usercopy+0x1a/0x20
[  178.483601][T10873]  _copy_from_user+0x1c/0xb0
[  178.483622][T10873]  bpf_obj_get_info_by_fd+0x301/0x1e00
[  178.483643][T10873]  ? _parse_integer+0x27/0x40
[  178.483691][T10873]  ? kstrtoull+0x111/0x140
[  178.483723][T10873]  __sys_bpf+0x6bb/0x790
[  178.483798][T10873]  __x64_sys_bpf+0x41/0x50
[  178.483813][T10873]  x64_sys_call+0x2478/0x2fb0
[  178.483825][T10873]  do_syscall_64+0xd2/0x200
[  178.483836][T10873]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  178.483851][T10873]  ? clear_bhb_loop+0x40/0x90
[  178.483867][T10873]  ? clear_bhb_loop+0x40/0x90
[  178.483881][T10873]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.483893][T10873] RIP: 0033:0x7fbdc3ffe929
[  178.483903][T10873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  178.483916][T10873] RSP: 002b:00007fbdc2667038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  178.483927][T10873] RAX: ffffffffffffffda RBX: 00007fbdc4225fa0 RCX: 00007fbdc3ffe929
[  178.483935][T10873] RDX: 0000000000000010 RSI: 0000200000000640 RDI: 000000000000000f
[  178.483942][T10873] RBP: 00007fbdc2667090 R08: 0000000000000000 R09: 0000000000000000
[  178.483949][T10873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  178.484004][T10873] R13: 0000000000000000 R14: 00007fbdc4225fa0 R15: 00007ffe178878f8
[  178.484014][T10873]  </TASK>
[  178.702758][ T9152] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  178.728787][T10878] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.824508][T10878] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.903156][T10878] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.983364][T10878] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.555245][T10897] syzkaller0: entered promiscuous mode
[  179.560870][T10897] syzkaller0: entered allmulticast mode
[  180.068884][T10912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.069520][T10914] vhci_hcd: default hub control req: 4012 v0040 i0002 l0
[  180.077602][T10912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.341755][T10921] loop8: detected capacity change from 0 to 512
[  180.352122][T10921] EXT4-fs (loop8): too many log groups per flexible block group
[  180.360195][T10921] EXT4-fs (loop8): failed to initialize mballoc (-12)
[  180.368679][T10921] EXT4-fs (loop8): mount failed
[  180.775494][T10940] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  181.263690][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2465'.
[  181.350046][T10966] loop3: detected capacity change from 0 to 512
[  181.372753][T10966] EXT4-fs (loop3): too many log groups per flexible block group
[  181.380956][T10966] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  181.388145][T10966] EXT4-fs (loop3): mount failed
[  181.628866][   T29] kauditd_printk_skb: 434 callbacks suppressed
[  181.628881][   T29] audit: type=1326 audit(2000000115.760:15770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10961 comm="syz.7.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78ed3f58e7 code=0x7ffc0000
[  181.659816][   T29] audit: type=1326 audit(2000000115.760:15771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10961 comm="syz.7.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f78ed39ab19 code=0x7ffc0000
[  181.686034][   T29] audit: type=1326 audit(2000000115.760:15772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10961 comm="syz.7.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f78ed3fe929 code=0x7ffc0000
[  181.740351][   T29] audit: type=1326 audit(2000000115.850:15773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10961 comm="syz.7.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78ed3f58e7 code=0x7ffc0000
[  181.764440][   T29] audit: type=1326 audit(2000000115.850:15774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10961 comm="syz.7.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f78ed39ab19 code=0x7ffc0000
[  181.789011][   T29] audit: type=1326 audit(2000000115.850:15775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10961 comm="syz.7.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f78ed3fe929 code=0x7ffc0000
[  181.814230][   T29] audit: type=1326 audit(2000000115.860:15776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10961 comm="syz.7.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78ed3f58e7 code=0x7ffc0000
[  181.839938][   T29] audit: type=1326 audit(2000000115.860:15777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10961 comm="syz.7.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f78ed39ab19 code=0x7ffc0000
[  181.865137][   T29] audit: type=1326 audit(2000000115.860:15778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10961 comm="syz.7.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f78ed3fe929 code=0x7ffc0000
[  181.889769][   T29] audit: type=1326 audit(2000000115.860:15779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10961 comm="syz.7.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78ed3f58e7 code=0x7ffc0000
[  181.977388][T10878] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.989659][T10878] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.002489][T10878] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.013864][T10984] loop8: detected capacity change from 0 to 512
[  182.016297][T10878] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.045455][T10984] EXT4-fs (loop8): too many log groups per flexible block group
[  182.053736][T10984] EXT4-fs (loop8): failed to initialize mballoc (-12)
[  182.068860][T10984] EXT4-fs (loop8): mount failed
[  182.115196][T10994] loop3: detected capacity change from 0 to 128
[  182.125416][T10994] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  182.145384][T10994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.156574][T10994] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.217425][T10994] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff)
[  182.219695][T11010] vhci_hcd: default hub control req: 4012 v0040 i0002 l0
[  182.225431][T10994] FAT-fs (loop3): Filesystem has been set read-only
[  182.240640][T10994] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff)
[  182.248762][T11009] loop8: detected capacity change from 0 to 512
[  182.267447][T11009] EXT4-fs (loop8): too many log groups per flexible block group
[  182.275222][T11009] EXT4-fs (loop8): failed to initialize mballoc (-12)
[  182.284843][T11009] EXT4-fs (loop8): mount failed
[  182.407238][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2485'.
[  182.418581][T11024] loop8: detected capacity change from 0 to 512
[  182.432421][T11024] EXT4-fs (loop8): too many log groups per flexible block group
[  182.441268][T11024] EXT4-fs (loop8): failed to initialize mballoc (-12)
[  182.448536][T11024] EXT4-fs (loop8): mount failed
[  182.749058][T11040] loop8: detected capacity change from 0 to 8192
[  182.765223][T11040] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[  182.775484][ T3303] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  182.843183][T11045] loop8: detected capacity change from 0 to 8192
[  182.888464][T11051] loop8: detected capacity change from 0 to 512
[  182.906227][T11049] loop3: detected capacity change from 0 to 8192
[  182.914142][T11051] EXT4-fs (loop8): too many log groups per flexible block group
[  182.915416][T11049] FAULT_INJECTION: forcing a failure.
[  182.915416][T11049] name failslab, interval 1, probability 0, space 0, times 0
[  182.923109][T11051] EXT4-fs (loop8): failed to initialize mballoc (-12)
[  182.935666][T11049] CPU: 0 UID: 0 PID: 11049 Comm: syz.3.2499 Tainted: G        W           6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) 
[  182.935700][T11049] Tainted: [W]=WARN
[  182.935706][T11049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  182.935732][T11049] Call Trace:
[  182.935739][T11049]  <TASK>
[  182.935749][T11049]  __dump_stack+0x1d/0x30
[  182.935771][T11049]  dump_stack_lvl+0xe8/0x140
[  182.935791][T11049]  dump_stack+0x15/0x1b
[  182.935807][T11049]  should_fail_ex+0x265/0x280
[  182.935918][T11049]  should_failslab+0x8c/0xb0
[  182.935999][T11049]  __kmalloc_noprof+0xa5/0x3e0
[  182.936025][T11049]  ? alloc_pipe_info+0x1c9/0x350
[  182.936103][T11049]  alloc_pipe_info+0x1c9/0x350
[  182.936122][T11049]  splice_direct_to_actor+0x592/0x680
[  182.936159][T11049]  ? kstrtouint_from_user+0x9f/0xf0
[  182.936188][T11049]  ? __pfx_direct_splice_actor+0x10/0x10
[  182.936239][T11049]  ? __rcu_read_unlock+0x4f/0x70
[  182.936260][T11049]  ? get_pid_task+0x96/0xd0
[  182.936278][T11049]  ? avc_policy_seqno+0x15/0x30
[  182.936340][T11049]  ? selinux_file_permission+0x1e4/0x320
[  182.936364][T11049]  do_splice_direct+0xda/0x150
[  182.936391][T11049]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  182.936491][T11049]  do_sendfile+0x380/0x650
[  182.936517][T11049]  __x64_sys_sendfile64+0x105/0x150
[  182.936541][T11049]  x64_sys_call+0xb39/0x2fb0
[  182.936562][T11049]  do_syscall_64+0xd2/0x200
[  182.936580][T11049]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  182.936619][T11049]  ? clear_bhb_loop+0x40/0x90
[  182.936640][T11049]  ? clear_bhb_loop+0x40/0x90
[  182.936660][T11049]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.936681][T11049] RIP: 0033:0x7f894473e929
[  182.936726][T11049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.936750][T11049] RSP: 002b:00007f8942da7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  182.936769][T11049] RAX: ffffffffffffffda RBX: 00007f8944965fa0 RCX: 00007f894473e929
[  182.936781][T11049] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006
[  182.936793][T11049] RBP: 00007f8942da7090 R08: 0000000000000000 R09: 0000000000000000
[  182.936805][T11049] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000001
[  182.936892][T11049] R13: 0000000000000000 R14: 00007f8944965fa0 R15: 00007fff83e4ae68
[  182.936911][T11049]  </TASK>
[  182.938586][T11049] siw: device registration error -23
[  182.942842][T11051] EXT4-fs (loop8): mount failed
[  183.254866][T11059] loop3: detected capacity change from 0 to 512
[  183.268158][T11061] netlink: 'syz.4.2505': attribute type 1 has an invalid length.
[  183.292480][T11059] EXT4-fs (loop3): too many log groups per flexible block group
[  183.300402][T11059] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  183.307807][T11059] EXT4-fs (loop3): mount failed
[  183.328766][T11069] loop3: detected capacity change from 0 to 128
[  183.336747][T11069] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  183.354074][T11069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.363575][T11069] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.373387][T11069] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff)
[  183.381623][T11069] FAT-fs (loop3): Filesystem has been set read-only
[  183.388938][T11069] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff)
[  183.435918][T11073] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(14)
[  183.442597][T11073] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  183.450397][T11073] vhci_hcd vhci_hcd.0: Device attached
[  183.459079][T11073] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(16)
[  183.465823][T11073] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  183.473925][T11073] vhci_hcd vhci_hcd.0: Device attached
[  183.484871][T11073] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  183.494016][T11073] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(20)
[  183.500908][T11073] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  183.508393][T11073] vhci_hcd vhci_hcd.0: Device attached
[  183.517810][T11073] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(22)
[  183.525479][T11073] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  183.533748][T11073] vhci_hcd vhci_hcd.0: Device attached
[  183.542275][T11073] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(24)
[  183.549131][T11073] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  183.556903][T11073] vhci_hcd vhci_hcd.0: Device attached
[  183.584486][T11073] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  183.595853][T11073] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  183.607105][T11082] vhci_hcd: connection closed
[  183.607103][T11080] vhci_hcd: connection closed
[  183.607234][ T4114] vhci_hcd: stop threads
[  183.617558][T11074] vhci_hcd: connection closed
[  183.617709][T11076] vhci_hcd: connection closed
[  183.621990][ T4114] vhci_hcd: release socket
[  183.622007][ T4114] vhci_hcd: disconnect device
[  183.627156][T11078] vhci_hcd: connection closed
[  183.644761][ T4114] vhci_hcd: stop threads
[  183.644832][ T3386] vhci_hcd: vhci_device speed not set
[  183.649472][ T4114] vhci_hcd: release socket
[  183.664170][ T4114] vhci_hcd: disconnect device
[  183.669953][ T4114] vhci_hcd: stop threads
[  183.674495][ T4114] vhci_hcd: release socket
[  183.679313][ T4114] vhci_hcd: disconnect device
[  183.684536][ T4114] vhci_hcd: stop threads
[  183.689235][ T4114] vhci_hcd: release socket
[  183.694121][ T4114] vhci_hcd: disconnect device
[  183.701900][ T4114] vhci_hcd: stop threads
[  183.706212][ T4114] vhci_hcd: release socket
[  183.710687][ T4114] vhci_hcd: disconnect device
[  183.715838][ T3386] usb 15-1: new full-speed USB device number 2 using vhci_hcd
[  183.723364][ T3386] usb 15-1: enqueue for inactive port 0
[  183.729003][ T3386] usb 15-1: enqueue for inactive port 0
[  183.740542][ T3386] usb 15-1: enqueue for inactive port 0
[  183.765641][T11091] vhci_hcd: default hub control req: 4012 v0040 i0002 l0
[  183.811694][ T3386] vhci_hcd: vhci_device speed not set
[  183.929866][ T3303] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  183.947209][T11096] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  183.957537][T11096] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  184.012303][T11096] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  184.023881][T11096] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  184.052481][T11096] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  184.063707][T11096] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  184.092286][T11096] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  184.102343][T11096] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  184.146889][T11096] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  184.157905][T11096] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  184.169409][T11096] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  184.178040][T11096] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  184.190089][T11096] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  184.198471][T11096] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  184.212517][T11096] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  184.221069][T11096] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  184.323853][T11112] loop3: detected capacity change from 0 to 256
[  184.333372][T11112] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  184.342877][T11112] FAT-fs (loop3): bogus number of directory entries (1)
[  184.350553][T11112] FAT-fs (loop3): Can't find a valid FAT filesystem
[  184.362700][T11112] 9pnet_fd: Insufficient options for proto=fd
[  184.699794][T11126] loop8: detected capacity change from 0 to 512
[  184.713283][T11126] EXT4-fs (loop8): too many log groups per flexible block group
[  184.721476][T11126] EXT4-fs (loop8): failed to initialize mballoc (-12)
[  184.730476][T11126] EXT4-fs (loop8): mount failed
[  184.808090][T11140] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.828302][T11146] vhci_hcd: default hub control req: 4012 v0040 i0002 l0
[  184.854178][T11140] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.923514][T11140] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.974043][T11140] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.027746][T11140] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.039308][T11140] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.050549][T11140] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.062114][T11140] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.091907][T11154] vhci_hcd: default hub control req: 4012 v0040 i0002 l0
[  185.142233][T11156] loop3: detected capacity change from 0 to 8192
[  185.201092][T11156]  loop3: p1 < > p3 p4 < >
[  185.205662][T11156] loop3: partition table partially beyond EOD, truncated
[  185.212996][T11156] loop3: p1 start 131074 is beyond EOD, truncated
[  185.219695][T11156] loop3: p3 start 64768 is beyond EOD, truncated
[  185.766400][T11180] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.802929][T11180] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.863649][T11180] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.932751][T11180] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.950198][T11194] vhci_hcd: default hub control req: 4012 v0040 i0002 l0
[  185.970086][T11195] 9pnet: Could not find request transport: 0xffffffffffffffff
[  186.019875][T11180] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.032280][T11180] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.044499][T11180] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.056923][T11180] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.066010][T11213] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2555'.
[  186.076803][T11204] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2555'.
[  186.093986][T11213] loop3: detected capacity change from 0 to 512
[  186.103107][T11213] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  186.120597][T11213] EXT4-fs (loop3): 1 truncate cleaned up
[  186.123179][T11222] loop7: detected capacity change from 0 to 128
[  186.126973][T11213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.135328][T11222] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  186.165390][T11222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.166268][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.174898][T11222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.196705][T11222] FAT-fs (loop7): error, invalid access to FAT (entry 0x0affffff)
[  186.205044][T11222] FAT-fs (loop7): Filesystem has been set read-only
[  186.212184][T11222] FAT-fs (loop7): error, invalid access to FAT (entry 0x0affffff)
[  186.263168][T11229] vhci_hcd: default hub control req: 4012 v0040 i0002 l0
[  186.665425][   T29] kauditd_printk_skb: 350 callbacks suppressed
[  186.665441][   T29] audit: type=1326 audit(2000000120.800:16130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac21be929 code=0x7ffc0000
[  186.700292][   T29] audit: type=1326 audit(2000000120.800:16131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac21be929 code=0x7ffc0000
[  186.725326][   T29] audit: type=1326 audit(2000000120.800:16132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f8ac21be929 code=0x7ffc0000
[  186.750615][   T29] audit: type=1326 audit(2000000120.800:16133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac21be929 code=0x7ffc0000
[  186.777661][   T29] audit: type=1326 audit(2000000120.800:16134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac21be929 code=0x7ffc0000
[  186.802171][   T29] audit: type=1326 audit(2000000120.800:16135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ac21be929 code=0x7ffc0000
[  186.825304][   T29] audit: type=1326 audit(2000000120.800:16136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac21be929 code=0x7ffc0000
[  186.848941][   T29] audit: type=1326 audit(2000000120.800:16137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ac21be929 code=0x7ffc0000
[  186.874595][   T29] audit: type=1326 audit(2000000120.800:16138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac21be929 code=0x7ffc0000
[  186.901384][   T29] audit: type=1326 audit(2000000120.800:16139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f8ac21be929 code=0x7ffc0000
[  186.926946][ T9152] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  186.948225][T11249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.957515][T11251] FAULT_INJECTION: forcing a failure.
[  186.957515][T11251] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  186.957532][T11249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.970842][T11251] CPU: 1 UID: 0 PID: 11251 Comm: syz.7.2572 Tainted: G        W           6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) 
[  186.971030][T11251] Tainted: [W]=WARN
[  186.971036][T11251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  186.971103][T11251] Call Trace:
[  186.971109][T11251]  <TASK>
[  186.971117][T11251]  __dump_stack+0x1d/0x30
[  186.971138][T11251]  dump_stack_lvl+0xe8/0x140
[  186.971157][T11251]  dump_stack+0x15/0x1b
[  186.971231][T11251]  should_fail_ex+0x265/0x280
[  186.971257][T11251]  should_fail+0xb/0x20
[  186.971339][T11251]  should_fail_usercopy+0x1a/0x20
[  186.971370][T11251]  _copy_from_user+0x1c/0xb0
[  186.971415][T11251]  __x64_sys_sendfile64+0x88/0x150
[  186.971440][T11251]  x64_sys_call+0xb39/0x2fb0
[  186.971461][T11251]  do_syscall_64+0xd2/0x200
[  186.971479][T11251]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  186.971522][T11251]  ? clear_bhb_loop+0x40/0x90
[  186.971567][T11251]  ? clear_bhb_loop+0x40/0x90
[  186.971588][T11251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.971672][T11251] RIP: 0033:0x7f78ed3fe929
[  186.971688][T11251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.971787][T11251] RSP: 002b:00007f78eba67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  186.971805][T11251] RAX: ffffffffffffffda RBX: 00007f78ed625fa0 RCX: 00007f78ed3fe929
[  186.971818][T11251] RDX: 0000200000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  186.971830][T11251] RBP: 00007f78eba67090 R08: 0000000000000000 R09: 0000000000000000
[  186.971842][T11251] R10: 0000000000020001 R11: 0000000000000246 R12: 0000000000000001
[  186.971854][T11251] R13: 0000000000000000 R14: 00007f78ed625fa0 R15: 00007ffcbc423728
[  186.971874][T11251]  </TASK>
[  187.235207][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2577'.
[  187.245909][T11261] FAULT_INJECTION: forcing a failure.
[  187.245909][T11261] name failslab, interval 1, probability 0, space 0, times 0
[  187.258575][T11261] CPU: 0 UID: 0 PID: 11261 Comm: syz.4.2577 Tainted: G        W           6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) 
[  187.258652][T11261] Tainted: [W]=WARN
[  187.258658][T11261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  187.258669][T11261] Call Trace:
[  187.258675][T11261]  <TASK>
[  187.258751][T11261]  __dump_stack+0x1d/0x30
[  187.258771][T11261]  dump_stack_lvl+0xe8/0x140
[  187.258788][T11261]  dump_stack+0x15/0x1b
[  187.258803][T11261]  should_fail_ex+0x265/0x280
[  187.258856][T11261]  should_failslab+0x8c/0xb0
[  187.258878][T11261]  kmem_cache_alloc_node_noprof+0x57/0x320
[  187.258988][T11261]  ? __alloc_skb+0x101/0x320
[  187.259014][T11261]  __alloc_skb+0x101/0x320
[  187.259040][T11261]  rtmsg_ifa+0xac/0x170
[  187.259066][T11261]  __inet_del_ifa+0x4d1/0x7f0
[  187.259151][T11261]  ? ip_mc_destroy_dev+0x275/0x2d0
[  187.259173][T11261]  inetdev_event+0x658/0xc10
[  187.259216][T11261]  ? __pfx_ib_netdevice_event+0x10/0x10
[  187.259238][T11261]  ? ib_netdevice_event+0x186/0x5f0
[  187.259258][T11261]  ? __pfx_inetdev_event+0x10/0x10
[  187.259305][T11261]  raw_notifier_call_chain+0x6f/0x1b0
[  187.259368][T11261]  ? call_netdevice_notifiers_info+0x9c/0x100
[  187.259391][T11261]  call_netdevice_notifiers_info+0xae/0x100
[  187.259481][T11261]  unregister_netdevice_many_notify+0xd9d/0x1690
[  187.259504][T11261]  ? __pfx_vxcan_dellink+0x10/0x10
[  187.259530][T11261]  ? __pfx_vxcan_dellink+0x10/0x10
[  187.259629][T11261]  rtnl_dellink+0x3cb/0x550
[  187.259664][T11261]  ? security_capable+0x83/0x90
[  187.259752][T11261]  ? ns_capable+0x7d/0xb0
[  187.259769][T11261]  ? __pfx_rtnl_dellink+0x10/0x10
[  187.259788][T11261]  rtnetlink_rcv_msg+0x5fb/0x6d0
[  187.259807][T11261]  ? avc_has_perm_noaudit+0x1b1/0x200
[  187.259915][T11261]  netlink_rcv_skb+0x120/0x220
[  187.259943][T11261]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  187.259966][T11261]  rtnetlink_rcv+0x1c/0x30
[  187.260033][T11261]  netlink_unicast+0x59e/0x670
[  187.260059][T11261]  netlink_sendmsg+0x58b/0x6b0
[  187.260078][T11261]  ? __pfx_netlink_sendmsg+0x10/0x10
[  187.260167][T11261]  __sock_sendmsg+0x142/0x180
[  187.260190][T11261]  ____sys_sendmsg+0x31e/0x4e0
[  187.260266][T11261]  ___sys_sendmsg+0x17b/0x1d0
[  187.260306][T11261]  __x64_sys_sendmsg+0xd4/0x160
[  187.260339][T11261]  x64_sys_call+0x2999/0x2fb0
[  187.260358][T11261]  do_syscall_64+0xd2/0x200
[  187.260375][T11261]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  187.260440][T11261]  ? clear_bhb_loop+0x40/0x90
[  187.260460][T11261]  ? clear_bhb_loop+0x40/0x90
[  187.260608][T11261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.260628][T11261] RIP: 0033:0x7f8ac21be929
[  187.260644][T11261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  187.260715][T11261] RSP: 002b:00007f8ac0827038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  187.260732][T11261] RAX: ffffffffffffffda RBX: 00007f8ac23e5fa0 RCX: 00007f8ac21be929
[  187.260744][T11261] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003
[  187.260754][T11261] RBP: 00007f8ac0827090 R08: 0000000000000000 R09: 0000000000000000
[  187.260843][T11261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  187.260852][T11261] R13: 0000000000000000 R14: 00007f8ac23e5fa0 R15: 00007ffee8fc2e58
[  187.260866][T11261]  </TASK>
[  187.604009][T11262] loop8: detected capacity change from 0 to 256
[  187.611154][T11262] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  187.620807][T11262] FAT-fs (loop8): bogus number of directory entries (1)
[  187.627825][T11262] FAT-fs (loop8): Can't find a valid FAT filesystem
[  187.642070][T11262] 9pnet_fd: Insufficient options for proto=fd
[  187.771764][T11275] SELinux: ebitmap: truncated map
[  187.781606][T11275] SELinux: failed to load policy
[  187.837082][T11281] loop7: detected capacity change from 0 to 512
[  187.861901][T11281] EXT4-fs (loop7): too many log groups per flexible block group
[  187.869866][T11281] EXT4-fs (loop7): failed to initialize mballoc (-12)
[  187.876702][T11281] EXT4-fs (loop7): mount failed
[  187.895713][T11286] loop3: detected capacity change from 0 to 512
[  187.912576][T11286] EXT4-fs (loop3): too many log groups per flexible block group
[  187.920583][T11286] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  187.927769][T11286] EXT4-fs (loop3): mount failed
[  188.044067][T11292] loop3: detected capacity change from 0 to 512
[  188.052928][T11292] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2587: casefold flag without casefold feature
[  188.066718][T11292] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2587: couldn't read orphan inode 15 (err -117)
[  188.080324][T11292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.121923][T11292] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  188.132216][T11292] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  188.190480][T11298] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2587'.
[  188.205140][T11292] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  188.215594][T11292] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  188.277810][T11292] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  188.287811][T11292] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  188.352471][T11292] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  188.363405][T11292] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  188.508326][T11292] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  188.517462][T11292] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  188.539827][T11292] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  188.548337][T11292] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  188.562862][T11292] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  188.572094][T11292] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  188.585472][T11292] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  188.594145][T11292] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  188.618333][T11319] SELinux:  Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped).
[  188.680598][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.720463][T11323] loop3: detected capacity change from 0 to 512
[  188.732582][T11323] EXT4-fs (loop3): too many log groups per flexible block group
[  188.740695][T11323] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  188.758571][T11323] EXT4-fs (loop3): mount failed
[  188.783254][T11327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.792325][T11327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.192971][T11354] loop3: detected capacity change from 0 to 512
[  189.212544][T11354] EXT4-fs (loop3): too many log groups per flexible block group
[  189.220962][T11354] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  189.234173][T11354] EXT4-fs (loop3): mount failed
[  189.283098][T11360] IPv6: Can't replace route, no match found
[  189.295790][T11360] loop3: detected capacity change from 0 to 512
[  189.302406][T11360] EXT4-fs: Ignoring removed nomblk_io_submit option
[  189.309213][T11360] EXT4-fs: Ignoring removed nomblk_io_submit option
[  189.324214][T11360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.337538][T11360] ext4 filesystem being mounted at /546/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  189.360147][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.421969][ T3370] IPVS: starting estimator thread 0...
[  189.429307][T11364] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  189.478693][    T9] IPVS: starting estimator thread 0...
[  189.485669][T11371] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  189.520975][T11376] IPVS: using max 2688 ests per chain, 134400 per kthread
[  189.586043][T11383] IPVS: using max 2880 ests per chain, 144000 per kthread
[  189.644867][T11401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.653417][T11401] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.710544][T11410] loop9: detected capacity change from 0 to 7
[  189.717128][T11410] buffer_io_error: 8 callbacks suppressed
[  189.717142][T11410] Buffer I/O error on dev loop9, logical block 0, async page read
[  189.732348][T11410] Buffer I/O error on dev loop9, logical block 0, async page read
[  189.740226][T11410]  loop9: unable to read partition table
[  189.748711][T11410] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  189.748711][T11410] 
Uªÿÿÿÿÿÿ) failed (rc=-5)
[  189.770757][T11410] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2624'.
[  189.852493][T11428] loop7: detected capacity change from 0 to 256
[  189.859448][T11428] FAT-fs (loop7): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  189.868563][T11428] FAT-fs (loop7): bogus number of directory entries (1)
[  189.875734][T11428] FAT-fs (loop7): Can't find a valid FAT filesystem
[  189.877199][T11432] program syz.8.2633 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  189.897676][T11432] netlink: 'syz.8.2633': attribute type 10 has an invalid length.
[  189.899693][T11428] 9pnet_fd: Insufficient options for proto=fd
[  189.911748][T11432] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  189.993080][T11435] xt_CT: No such helper "snmp"
[  190.010744][T11438] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2635'.
[  190.026070][T11439] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2635'.
[  190.247506][T11451] vhci_hcd: default hub control req: 4012 v0040 i0002 l0
[  190.700668][T11455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11455 comm=syz.7.2641
[  190.739354][T11462] IPv6: Can't replace route, no match found
[  190.751773][T11464] loop7: detected capacity change from 0 to 512
[  190.759866][T11464] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e018, mo2=0002]
[  190.768457][T11464] System zones: 1-12
[  190.773592][T11464] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2645: invalid indirect mapped block 8 (level 2)
[  190.790708][T11464] EXT4-fs (loop7): 1 truncate cleaned up
[  190.797749][T11464] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.825307][ T9152] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.841430][T11472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.850086][T11472] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.059089][T11482] loop8: detected capacity change from 0 to 256
[  191.067429][T11482] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  191.076576][T11482] FAT-fs (loop8): bogus number of directory entries (1)
[  191.083760][T11482] FAT-fs (loop8): Can't find a valid FAT filesystem
[  191.094981][T11482] 9pnet_fd: Insufficient options for proto=fd
[  191.208998][T11495] netlink: 'syz.4.2656': attribute type 39 has an invalid length.
[  191.263920][T11496] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  191.677843][   T29] kauditd_printk_skb: 819 callbacks suppressed
[  191.677859][   T29] audit: type=1326 audit(2000000125.810:16959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11475 comm="syz.7.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78ed3f58e7 code=0x7ffc0000
[  191.712724][   T29] audit: type=1326 audit(2000000125.850:16960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11475 comm="syz.7.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f78ed39ab19 code=0x7ffc0000
[  191.737743][   T29] audit: type=1326 audit(2000000125.850:16961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11475 comm="syz.7.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78ed3f58e7 code=0x7ffc0000
[  191.761652][   T29] audit: type=1326 audit(2000000125.850:16962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11475 comm="syz.7.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f78ed39ab19 code=0x7ffc0000
[  191.786570][   T29] audit: type=1326 audit(2000000125.850:16963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11475 comm="syz.7.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f78ed3fe929 code=0x7ffc0000
[  191.818517][   T29] audit: type=1326 audit(2000000125.950:16964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11475 comm="syz.7.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78ed3f58e7 code=0x7ffc0000
[  191.843571][   T29] audit: type=1326 audit(2000000125.950:16965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11475 comm="syz.7.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f78ed39ab19 code=0x7ffc0000
[  191.867538][   T29] audit: type=1326 audit(2000000125.950:16966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11475 comm="syz.7.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f78ed3fe929 code=0x7ffc0000
[  191.892450][   T29] audit: type=1326 audit(2000000125.950:16967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11475 comm="syz.7.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78ed3f58e7 code=0x7ffc0000
[  191.917729][   T29] audit: type=1326 audit(2000000125.950:16968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11475 comm="syz.7.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f78ed39ab19 code=0x7ffc0000
[  191.977284][T11508] loop3: detected capacity change from 0 to 128
[  191.985205][T11508] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  192.000894][T11508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.003704][T11513] loop8: detected capacity change from 0 to 128
[  192.010299][T11508] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.027639][T11508] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff)
[  192.035769][T11508] FAT-fs (loop3): Filesystem has been set read-only
[  192.058902][T11515] vhci_hcd: default hub control req: 4012 v0040 i0002 l0
[  192.066227][T11508] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff)
[  192.104237][T11516] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[  192.112439][T11516] FAT-fs (loop8): Filesystem has been set read-only
[  192.120382][T11516] bio_check_eod: 17119 callbacks suppressed
[  192.120395][T11516] syz.8.2663: attempt to access beyond end of device
[  192.120395][T11516] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  192.140756][T11516] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[  192.148603][T11516] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[  192.160538][T11516] syz.8.2663: attempt to access beyond end of device
[  192.160538][T11516] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  192.178555][T11516] syz.8.2663: attempt to access beyond end of device
[  192.178555][T11516] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  192.194736][T11516] syz.8.2663: attempt to access beyond end of device
[  192.194736][T11516] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  192.212686][T11516] syz.8.2663: attempt to access beyond end of device
[  192.212686][T11516] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  192.226861][T11516] syz.8.2663: attempt to access beyond end of device
[  192.226861][T11516] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  192.240673][T11516] syz.8.2663: attempt to access beyond end of device
[  192.240673][T11516] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  192.254994][T11516] syz.8.2663: attempt to access beyond end of device
[  192.254994][T11516] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  192.268788][T11516] syz.8.2663: attempt to access beyond end of device
[  192.268788][T11516] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  192.283950][T11516] syz.8.2663: attempt to access beyond end of device
[  192.283950][T11516] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  192.386368][T11523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2667'.
[  192.512356][T11530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.521278][T11530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.605331][ T3303] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  192.845755][T11535] xt_hashlimit: max too large, truncated to 1048576
[  193.655076][T11553] 9pnet_fd: Insufficient options for proto=fd
[  193.985251][T11567] FAULT_INJECTION: forcing a failure.
[  193.985251][T11567] name failslab, interval 1, probability 0, space 0, times 0
[  193.998104][T11567] CPU: 1 UID: 0 PID: 11567 Comm: syz.7.2683 Tainted: G        W           6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) 
[  193.998140][T11567] Tainted: [W]=WARN
[  193.998146][T11567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  193.998161][T11567] Call Trace:
[  193.998167][T11567]  <TASK>
[  193.998174][T11567]  __dump_stack+0x1d/0x30
[  193.998222][T11567]  dump_stack_lvl+0xe8/0x140
[  193.998305][T11567]  dump_stack+0x15/0x1b
[  193.998321][T11567]  should_fail_ex+0x265/0x280
[  193.998354][T11567]  should_failslab+0x8c/0xb0
[  193.998425][T11567]  kmem_cache_alloc_noprof+0x50/0x310
[  193.998448][T11567]  ? alloc_empty_file+0x76/0x200
[  193.998475][T11567]  alloc_empty_file+0x76/0x200
[  193.998523][T11567]  alloc_file_pseudo+0xc6/0x160
[  193.998572][T11567]  sock_alloc_file+0x9c/0x1e0
[  193.998593][T11567]  do_accept+0x1e4/0x3a0
[  193.998687][T11567]  __sys_accept4+0xbf/0x140
[  193.998717][T11567]  __x64_sys_accept+0x42/0x50
[  193.998745][T11567]  x64_sys_call+0x2f50/0x2fb0
[  193.998768][T11567]  do_syscall_64+0xd2/0x200
[  193.998787][T11567]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  193.998865][T11567]  ? clear_bhb_loop+0x40/0x90
[  193.998884][T11567]  ? clear_bhb_loop+0x40/0x90
[  193.998902][T11567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.998920][T11567] RIP: 0033:0x7f78ed3fe929
[  193.998935][T11567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  193.998992][T11567] RSP: 002b:00007f78eba67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[  193.999012][T11567] RAX: ffffffffffffffda RBX: 00007f78ed625fa0 RCX: 00007f78ed3fe929
[  193.999026][T11567] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[  193.999039][T11567] RBP: 00007f78eba67090 R08: 0000000000000000 R09: 0000000000000000
[  193.999052][T11567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  193.999062][T11567] R13: 0000000000000000 R14: 00007f78ed625fa0 R15: 00007ffcbc423728
[  193.999079][T11567]  </TASK>
[  194.338810][T11575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.348866][T11575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.362693][T11573] loop7: detected capacity change from 0 to 128
[  194.369898][T11573] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  194.387466][T11573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.431480][T11573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.443843][T11579] loop8: detected capacity change from 0 to 128
[  194.458663][T11579] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  194.473530][T11573] FAT-fs (loop7): error, invalid access to FAT (entry 0x0affffff)
[  194.481871][T11573] FAT-fs (loop7): Filesystem has been set read-only
[  194.494835][T11583] FAULT_INJECTION: forcing a failure.
[  194.494835][T11583] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  194.508463][T11583] CPU: 1 UID: 0 PID: 11583 Comm: syz.6.2691 Tainted: G        W           6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) 
[  194.508531][T11583] Tainted: [W]=WARN
[  194.508537][T11583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  194.508548][T11583] Call Trace:
[  194.508554][T11583]  <TASK>
[  194.508561][T11583]  __dump_stack+0x1d/0x30
[  194.508583][T11583]  dump_stack_lvl+0xe8/0x140
[  194.508604][T11583]  dump_stack+0x15/0x1b
[  194.508647][T11583]  should_fail_ex+0x265/0x280
[  194.508729][T11583]  should_fail_alloc_page+0xf2/0x100
[  194.508788][T11583]  __alloc_frozen_pages_noprof+0xff/0x360
[  194.508899][T11583]  alloc_pages_mpol+0xb3/0x250
[  194.508927][T11583]  alloc_pages_noprof+0x90/0x130
[  194.508955][T11583]  __pmd_alloc+0x47/0x470
[  194.509001][T11583]  handle_mm_fault+0x19d1/0x2be0
[  194.509029][T11583]  ? check_vma_flags+0x26e/0x340
[  194.509055][T11583]  __get_user_pages+0x1036/0x1fb0
[  194.509131][T11583]  get_user_pages_remote+0x1dc/0x7a0
[  194.509158][T11583]  get_arg_page+0x8e/0x1e0
[  194.509186][T11583]  copy_string_kernel+0x134/0x340
[  194.509278][T11583]  do_execveat_common+0x5ad/0x750
[  194.509307][T11583]  ? getname_flags+0x154/0x3b0
[  194.509412][T11583]  __x64_sys_execveat+0x73/0x90
[  194.509438][T11583]  x64_sys_call+0x2dae/0x2fb0
[  194.509459][T11583]  do_syscall_64+0xd2/0x200
[  194.509479][T11583]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  194.509533][T11583]  ? clear_bhb_loop+0x40/0x90
[  194.509555][T11583]  ? clear_bhb_loop+0x40/0x90
[  194.509578][T11583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.509601][T11583] RIP: 0033:0x7fbdc3ffe929
[  194.509682][T11583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  194.509707][T11583] RSP: 002b:00007fbdc2667038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  194.509726][T11583] RAX: ffffffffffffffda RBX: 00007fbdc4225fa0 RCX: 00007fbdc3ffe929
[  194.509740][T11583] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  194.509754][T11583] RBP: 00007fbdc2667090 R08: 0000000000001000 R09: 0000000000000000
[  194.509767][T11583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  194.509781][T11583] R13: 0000000000000000 R14: 00007fbdc4225fa0 R15: 00007ffe178878f8
[  194.509814][T11583]  </TASK>
[  194.700517][T11573] FAT-fs (loop7): error, invalid access to FAT (entry 0x0affffff)
[  194.761495][T11579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.780376][T11579] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.792345][T11579] FAT-fs (loop8): error, invalid access to FAT (entry 0x0affffff)
[  194.800927][T11579] FAT-fs (loop8): Filesystem has been set read-only
[  194.808248][T11579] FAT-fs (loop8): error, invalid access to FAT (entry 0x0affffff)
[  194.871167][T11595] SELinux:  Context system_u:object is not valid (left unmapped).
[  194.965185][T11605] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2699'.
[  194.974569][T11605] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2699'.
[  195.084132][T11614] tmpfs: Unknown parameter 'grpquota_inode_hardlimit'
[  195.178618][T11626] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2708'.
[  195.227167][T11633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.236446][T11633] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.297725][ T9152] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  195.314431][T11643] loop7: detected capacity change from 0 to 512
[  195.327641][T10690] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  195.338211][T11643] EXT4-fs (loop7): too many log groups per flexible block group
[  195.346945][T11643] EXT4-fs (loop7): failed to initialize mballoc (-12)
[  195.355156][T11643] EXT4-fs (loop7): mount failed
[  195.356460][T11647] 9pnet_fd: Insufficient options for proto=fd
[  195.371545][T11647] loop8: detected capacity change from 0 to 512
[  195.378092][T11647] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  195.443732][T11647] loop8: detected capacity change from 0 to 512
[  195.450676][T11647] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  195.463125][T11647] EXT4-fs (loop8): 1 truncate cleaned up
[  195.469151][T11647] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.502342][T11647] syz.8.2717 (11647) used greatest stack depth: 9160 bytes left
[  195.519620][T10690] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.546980][T11664] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2725'.
[  195.560101][T11666] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2723'.
[  195.576639][T11664] loop7: detected capacity change from 0 to 128
[  195.585300][T11666] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2723'.
[  195.594770][T11670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.605705][T11670] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.707276][T11677] loop8: detected capacity change from 0 to 512
[  195.722275][T11677] EXT4-fs (loop8): too many log groups per flexible block group
[  195.730159][T11677] EXT4-fs (loop8): failed to initialize mballoc (-12)
[  195.737245][T11677] EXT4-fs (loop8): mount failed
[  195.810402][T11685] loop3: detected capacity change from 0 to 512
[  195.822238][T11685] EXT4-fs (loop3): too many log groups per flexible block group
[  195.830098][T11685] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  195.837897][T11685] EXT4-fs (loop3): mount failed
[  195.987999][T11703] loop8: detected capacity change from 0 to 256
[  195.995994][T11703] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  196.005235][T11703] FAT-fs (loop8): bogus number of directory entries (1)
[  196.012413][T11703] FAT-fs (loop8): Can't find a valid FAT filesystem
[  196.037325][T11703] 9pnet_fd: Insufficient options for proto=fd
[  196.040438][T11709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.052493][T11709] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.147621][T11711] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2743'.
[  196.428476][T11732] loop7: detected capacity change from 0 to 128
[  196.436686][T11732] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  196.450241][T11732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.459954][T11732] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.468809][T11732] FAT-fs (loop7): error, invalid access to FAT (entry 0x0affffff)
[  196.477272][T11732] FAT-fs (loop7): Filesystem has been set read-only
[  196.484881][T11732] FAT-fs (loop7): error, invalid access to FAT (entry 0x0affffff)
[  196.717120][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2760'.
[  196.840633][   T29] kauditd_printk_skb: 774 callbacks suppressed
[  196.840696][   T29] audit: type=1400 audit(2000000130.970:17743): avc:  denied  { mount } for  pid=11759 comm="syz.8.2766" name="/" dev="ramfs" ino=39422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  196.869672][   T29] audit: type=1400 audit(2000000130.980:17744): avc:  denied  { execute } for  pid=11759 comm="syz.8.2766" name="file0" dev="ramfs" ino=39424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  196.891974][   T29] audit: type=1400 audit(2000000130.990:17745): avc:  denied  { execute_no_trans } for  pid=11759 comm="syz.8.2766" path="/file0" dev="ramfs" ino=39424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  196.941536][T11762] loop8: detected capacity change from 0 to 128
[  196.948261][   T29] audit: type=1400 audit(2000000131.080:17746): avc:  denied  { cpu } for  pid=11765 comm="syz.4.2769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  196.948409][T11766] FAULT_INJECTION: forcing a failure.
[  196.948409][T11766] name failslab, interval 1, probability 0, space 0, times 0
[  196.980270][T11766] CPU: 1 UID: 0 PID: 11766 Comm: syz.4.2769 Tainted: G        W           6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) 
[  196.980300][T11766] Tainted: [W]=WARN
[  196.980305][T11766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  196.980316][T11766] Call Trace:
[  196.980322][T11766]  <TASK>
[  196.980329][T11766]  __dump_stack+0x1d/0x30
[  196.980347][T11766]  dump_stack_lvl+0xe8/0x140
[  196.980363][T11766]  dump_stack+0x15/0x1b
[  196.980375][T11766]  should_fail_ex+0x265/0x280
[  196.980400][T11766]  should_failslab+0x8c/0xb0
[  196.980419][T11766]  kmem_cache_alloc_noprof+0x50/0x310
[  196.980444][T11766]  ? vm_area_dup+0x33/0x2c0
[  196.980468][T11766]  vm_area_dup+0x33/0x2c0
[  196.980489][T11766]  __split_vma+0xe9/0x650
[  196.980511][T11766]  vma_modify+0x3f2/0xc80
[  196.980535][T11766]  vma_modify_flags+0x101/0x130
[  196.980560][T11766]  mprotect_fixup+0x2cc/0x570
[  196.980582][T11766]  do_mprotect_pkey+0x6d6/0x980
[  196.980614][T11766]  __x64_sys_mprotect+0x48/0x60
[  196.980635][T11766]  x64_sys_call+0x2794/0x2fb0
[  196.980653][T11766]  do_syscall_64+0xd2/0x200
[  196.980669][T11766]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  196.980694][T11766]  ? clear_bhb_loop+0x40/0x90
[  196.980712][T11766]  ? clear_bhb_loop+0x40/0x90
[  196.980729][T11766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.980745][T11766] RIP: 0033:0x7f8ac21be929
[  196.980758][T11766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  196.980776][T11766] RSP: 002b:00007f8ac0827038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a
[  196.980793][T11766] RAX: ffffffffffffffda RBX: 00007f8ac23e5fa0 RCX: 00007f8ac21be929
[  196.980804][T11766] RDX: 0000000000000005 RSI: 0000000000800000 RDI: 0000200000000000
[  196.980815][T11766] RBP: 00007f8ac0827090 R08: 0000000000000000 R09: 0000000000000000
[  196.980828][T11766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  196.980840][T11766] R13: 0000000000000000 R14: 00007f8ac23e5fa0 R15: 00007ffee8fc2e58
[  196.980858][T11766]  </TASK>
[  196.981299][T11762] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  197.210979][ T9152] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  197.224409][T11762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.232965][T11762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.242319][T11762] FAT-fs (loop8): error, invalid access to FAT (entry 0x0affffff)
[  197.243129][T11772] IPv6: Can't replace route, no match found
[  197.250242][T11762] FAT-fs (loop8): Filesystem has been set read-only
[  197.250516][T11762] FAT-fs (loop8): error, invalid access to FAT (entry 0x0affffff)
[  197.260063][   T29] audit: type=1326 audit(2000000131.390:17747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11771 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ed3fe929 code=0x7ffc0000
[  197.294071][   T29] audit: type=1326 audit(2000000131.400:17748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11771 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f78ed3fe929 code=0x7ffc0000
[  197.317421][   T29] audit: type=1326 audit(2000000131.400:17749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11771 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ed3fe929 code=0x7ffc0000
[  197.344267][   T29] audit: type=1326 audit(2000000131.400:17750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11771 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ed3fe929 code=0x7ffc0000
[  197.369484][   T29] audit: type=1326 audit(2000000131.400:17751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11771 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f78ed3fe929 code=0x7ffc0000
[  197.393337][   T29] audit: type=1326 audit(2000000131.400:17752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11771 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ed3fe929 code=0x7ffc0000
[  197.424469][T11772] loop7: detected capacity change from 0 to 512
[  197.431731][T11772] EXT4-fs: Ignoring removed nomblk_io_submit option
[  197.438374][T11772] EXT4-fs: Ignoring removed nomblk_io_submit option
[  197.453167][T11772] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.465904][T11772] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  197.485936][ T9152] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.503933][T11782] loop7: detected capacity change from 0 to 512
[  197.521995][T11782] EXT4-fs (loop7): too many log groups per flexible block group
[  197.529779][T11782] EXT4-fs (loop7): failed to initialize mballoc (-12)
[  197.536715][T11782] EXT4-fs (loop7): mount failed
[  197.615552][T11792] FAULT_INJECTION: forcing a failure.
[  197.615552][T11792] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  197.628901][T11792] CPU: 1 UID: 0 PID: 11792 Comm: syz.7.2777 Tainted: G        W           6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) 
[  197.628935][T11792] Tainted: [W]=WARN
[  197.628942][T11792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  197.628954][T11792] Call Trace:
[  197.628961][T11792]  <TASK>
[  197.628969][T11792]  __dump_stack+0x1d/0x30
[  197.629044][T11792]  dump_stack_lvl+0xe8/0x140
[  197.629064][T11792]  dump_stack+0x15/0x1b
[  197.629139][T11792]  should_fail_ex+0x265/0x280
[  197.629175][T11792]  should_fail+0xb/0x20
[  197.629197][T11792]  should_fail_usercopy+0x1a/0x20
[  197.629242][T11792]  _copy_from_user+0x1c/0xb0
[  197.629264][T11792]  memdup_user+0x5e/0xd0
[  197.629327][T11792]  strndup_user+0x68/0xb0
[  197.629351][T11792]  __se_sys_mount+0x4d/0x2e0
[  197.629370][T11792]  ? fput+0x8f/0xc0
[  197.629440][T11792]  ? ksys_write+0x192/0x1a0
[  197.629473][T11792]  __x64_sys_mount+0x67/0x80
[  197.629492][T11792]  x64_sys_call+0xd36/0x2fb0
[  197.629515][T11792]  do_syscall_64+0xd2/0x200
[  197.629538][T11792]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  197.629606][T11792]  ? clear_bhb_loop+0x40/0x90
[  197.629629][T11792]  ? clear_bhb_loop+0x40/0x90
[  197.629688][T11792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.629711][T11792] RIP: 0033:0x7f78ed3fe929
[  197.629727][T11792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  197.629746][T11792] RSP: 002b:00007f78eba67038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  197.629766][T11792] RAX: ffffffffffffffda RBX: 00007f78ed625fa0 RCX: 00007f78ed3fe929
[  197.629779][T11792] RDX: 00002000000001c0 RSI: 0000200000000400 RDI: 0000000000000000
[  197.629820][T11792] RBP: 00007f78eba67090 R08: 0000000000000000 R09: 0000000000000000
[  197.629833][T11792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  197.629911][T11792] R13: 0000000000000000 R14: 00007f78ed625fa0 R15: 00007ffcbc423728
[  197.629930][T11792]  </TASK>
[  197.643155][T11794] loop3: detected capacity change from 0 to 512
[  197.859127][T11801] batadv_slave_1: entered promiscuous mode
[  197.866318][T10690] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  197.886633][T11801] batadv_slave_1: left promiscuous mode
[  197.912917][T11803] loop8: detected capacity change from 0 to 128
[  197.945189][T11803] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  197.975525][T11803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.984851][T11803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.994932][T11803] FAT-fs (loop8): error, invalid access to FAT (entry 0x0affffff)
[  198.002934][T11803] FAT-fs (loop8): Filesystem has been set read-only
[  198.015671][T11803] FAT-fs (loop8): error, invalid access to FAT (entry 0x0affffff)
[  198.044547][T11814] loop3: detected capacity change from 0 to 512
[  198.075595][T11814] EXT4-fs (loop3): too many log groups per flexible block group
[  198.085903][T11814] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  198.100572][T11814] EXT4-fs (loop3): mount failed
[  198.118084][T11818] SELinux: security_context_str_to_sid (÷ÿ) failed with errno=-22
[  198.190597][T11826] loop7: detected capacity change from 0 to 128
[  198.198251][T11826] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  198.215608][T11826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.224680][T11826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.233127][T11826] FAT-fs (loop7): error, invalid access to FAT (entry 0x0affffff)
[  198.242216][T11826] FAT-fs (loop7): Filesystem has been set read-only
[  198.264338][T11826] FAT-fs (loop7): error, invalid access to FAT (entry 0x0affffff)
[  198.276912][T11830] futex_wake_op: syz.4.2793 tries to shift op by -1; fix this program
[  198.343331][T11837] xt_TPROXY: Can be used only with -p tcp or -p udp
[  198.756097][T10690] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  198.863167][ T9152] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  198.907632][T11857] loop8: detected capacity change from 0 to 1024
[  198.923187][T11857] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.945840][T11864] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2804'.
[  198.982330][T11857] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.2802: Allocating blocks 497-513 which overlap fs metadata
[  198.997776][T11865] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.2802: Allocating blocks 497-513 which overlap fs metadata
[  199.014062][T11865] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.2802: Allocating blocks 497-513 which overlap fs metadata
[  199.063535][T10690] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.094303][T11874] loop8: detected capacity change from 0 to 128
[  199.101646][T11874] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  199.159467][T11874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.195128][T11874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.204838][T11874] FAT-fs (loop8): error, invalid access to FAT (entry 0x0affffff)
[  199.213238][T11874] FAT-fs (loop8): Filesystem has been set read-only
[  199.221820][T11874] FAT-fs (loop8): error, invalid access to FAT (entry 0x0affffff)
[  199.611794][T11896] vhci_hcd: default hub control req: 4012 v0040 i0002 l0
[  199.625750][T11884] chnl_net:caif_netlink_parms(): no params data found
[  199.635984][ T4132] bridge_slave_1: left allmulticast mode
[  199.641798][ T4132] bridge_slave_1: left promiscuous mode
[  199.647939][ T4132] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.657167][ T4132] bridge_slave_0: left promiscuous mode
[  199.663393][ T4132] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.741956][T10690] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  199.758477][T11905] loop8: detected capacity change from 0 to 512
[  199.766832][ T4132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  199.776325][ T4132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  199.786428][ T4132] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  199.788845][T11905] EXT4-fs (loop8): too many log groups per flexible block group
[  199.802307][T11905] EXT4-fs (loop8): failed to initialize mballoc (-12)
[  199.809123][T11905] EXT4-fs (loop8): mount failed
[  199.809502][ T4132] bond0 (unregistering): Released all slaves
[  199.822846][ T4132] bond1 (unregistering): Released all slaves
[  199.933622][ T4132] hsr_slave_0: left promiscuous mode
[  199.939421][ T4132] hsr_slave_1: left promiscuous mode
[  199.959356][T11922] loop3: detected capacity change from 0 to 256
[  199.967257][T11922] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  199.976493][T11922] FAT-fs (loop3): bogus number of directory entries (1)
[  199.983776][T11922] FAT-fs (loop3): Can't find a valid FAT filesystem
[  199.990581][ T4132] team0 (unregistering): Port device team_slave_1 removed
[  200.000516][ T4132] team0 (unregistering): Port device C removed
[  200.040585][T11922] 9pnet_fd: Insufficient options for proto=fd
[  200.049486][T11884] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.056684][T11884] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.057893][T11926] IPv6: Can't replace route, no match found
[  200.069070][T11884] bridge_slave_0: entered allmulticast mode
[  200.077609][T11884] bridge_slave_0: entered promiscuous mode
[  200.084990][T11884] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.089715][T11926] loop8: detected capacity change from 0 to 512
[  200.092235][T11884] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.100270][T11926] EXT4-fs: Ignoring removed nomblk_io_submit option
[  200.106415][T11884] bridge_slave_1: entered allmulticast mode
[  200.113224][T11926] EXT4-fs: Ignoring removed nomblk_io_submit option
[  200.119928][T11884] bridge_slave_1: entered promiscuous mode
[  200.131866][T11927] loop7: detected capacity change from 0 to 512
[  200.138523][T11927] ext4: Unknown parameter 'fsmagic'
[  200.151104][T11884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.158520][T11926] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.161916][T11884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.173791][T11926] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  200.200740][T11884] team0: Port device team_slave_0 added
[  200.208554][T10690] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.208862][T11884] team0: Port device team_slave_1 added
[  200.236026][T11884] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.243465][T11884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.270119][T11884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.285629][ T4132] IPVS: stop unused estimator thread 0...
[  200.294138][T11884] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.301241][T11884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.327328][T11884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.359182][T11884] hsr_slave_0: entered promiscuous mode
[  200.365475][T11884] hsr_slave_1: entered promiscuous mode
[  200.371485][T11884] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  200.379448][T11884] Cannot create hsr debugfs directory
[  200.631104][T11884] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  200.646870][T11884] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  200.673581][T11884] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  200.682869][T11884] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  200.723611][T11884] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.737321][T11884] 8021q: adding VLAN 0 to HW filter on device team0
[  200.748815][ T4127] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.755976][ T4127] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.768453][ T4132] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.775593][ T4132] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.790500][T11946] loop3: detected capacity change from 0 to 128
[  200.804295][T11946] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  200.842526][T11950] loop8: detected capacity change from 0 to 512
[  200.873498][T11884] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.878294][T11946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.888928][T11946] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.900101][T11950] EXT4-fs (loop8): too many log groups per flexible block group
[  200.907860][T11950] EXT4-fs (loop8): failed to initialize mballoc (-12)
[  200.917295][T11950] EXT4-fs (loop8): mount failed
[  200.925326][T11946] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff)
[  200.933455][T11946] FAT-fs (loop3): Filesystem has been set read-only
[  200.968101][T11946] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff)
[  200.996028][T11973] loop7: detected capacity change from 0 to 512
[  201.011534][T11884] veth0_vlan: entered promiscuous mode
[  201.018003][T11973] EXT4-fs (loop7): too many log groups per flexible block group
[  201.019500][T11884] veth1_vlan: entered promiscuous mode
[  201.025789][T11973] EXT4-fs (loop7): failed to initialize mballoc (-12)
[  201.038083][T11884] veth0_macvtap: entered promiscuous mode
[  201.046253][T11884] veth1_macvtap: entered promiscuous mode
[  201.053161][T11973] EXT4-fs (loop7): mount failed
[  201.075946][T11884] batman_adv: batadv0: Interface activated: batadv_slave_0
[  201.092938][T11884] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.099668][T11980] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2830'.
[  201.116334][T11984] vhci_hcd: default hub control req: 4012 v0040 i0002 l0
[  201.125574][T11884] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.134734][T11884] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.143674][T11884] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.152883][T11884] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.197942][T11989] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.252695][T11989] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.303083][T11989] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.327793][T11994] loop8: detected capacity change from 0 to 256
[  201.335018][T11994] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  201.344523][T11994] FAT-fs (loop8): bogus number of directory entries (1)
[  201.351951][T11994] FAT-fs (loop8): Can't find a valid FAT filesystem
[  201.364217][T11989] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.370566][T11994] 9pnet_fd: Insufficient options for proto=fd
[  201.520454][ T3303] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  201.555819][T11998] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2838'.
[  201.565652][T11998] veth6: entered promiscuous mode
[  201.571251][T11998] veth6: entered allmulticast mode
[  201.597956][T12000] loop3: detected capacity change from 0 to 512
[  201.611614][T12000] EXT4-fs (loop3): too many log groups per flexible block group
[  201.619837][T12000] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  201.626773][T12000] EXT4-fs (loop3): mount failed
[  201.882730][T12017] loop3: detected capacity change from 0 to 512
[  201.890079][T12017] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  201.890180][T12019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.904113][T12017] EXT4-fs error (device loop3): xattr_find_entry:333: inode #15: comm syz.3.2845: corrupted xattr entries
[  201.909306][T12019] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.923601][T12017] EXT4-fs (loop3): Remounting filesystem read-only
[  201.937398][T12017] EXT4-fs (loop3): 1 truncate cleaned up
[  201.943676][T12017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.975128][T12022] IPv6: Can't replace route, no match found
[  201.982731][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.983280][   T29] kauditd_printk_skb: 353 callbacks suppressed
[  201.983292][   T29] audit: type=1326 audit(2000000136.120:18106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ed3fe929 code=0x7ffc0000
[  202.023689][   T29] audit: type=1326 audit(2000000136.130:18107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ed3fe929 code=0x7ffc0000
[  202.047823][   T29] audit: type=1326 audit(2000000136.130:18108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f78ed3fe929 code=0x7ffc0000
[  202.072772][   T29] audit: type=1326 audit(2000000136.130:18109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ed3fe929 code=0x7ffc0000
[  202.098293][   T29] audit: type=1326 audit(2000000136.130:18110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f78ed3fe929 code=0x7ffc0000
[  202.099193][T12025] loop7: detected capacity change from 0 to 512
[  202.125597][   T29] audit: type=1326 audit(2000000136.130:18111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ed3fe929 code=0x7ffc0000
[  202.135668][T12025] EXT4-fs: Ignoring removed nomblk_io_submit option
[  202.160639][   T29] audit: type=1326 audit(2000000136.130:18112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f78ed3fe929 code=0x7ffc0000
[  202.160671][   T29] audit: type=1326 audit(2000000136.130:18113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ed3fe929 code=0x7ffc0000
[  202.167301][T12025] EXT4-fs: Ignoring removed nomblk_io_submit option
[  202.190840][   T29] audit: type=1326 audit(2000000136.130:18114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f78ed3fe929 code=0x7ffc0000
[  202.245621][   T29] audit: type=1326 audit(2000000136.160:18115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ed3fe929 code=0x7ffc0000
[  202.271761][T12025] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.297588][T12025] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  202.323919][T12029] loop8: detected capacity change from 0 to 2048
[  202.331339][T12029] EXT4-fs: Ignoring removed bh option
[  202.331664][ T9152] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.360051][T12033] loop7: detected capacity change from 0 to 512
[  202.368754][T12029] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.384849][T12033] EXT4-fs (loop7): too many log groups per flexible block group
[  202.391156][T12029] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  202.392588][T12033] EXT4-fs (loop7): failed to initialize mballoc (-12)
[  202.410680][T12029] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 12 with max blocks 22 with error 28
[  202.415576][T12033] EXT4-fs (loop7): mount failed
[  202.428653][T12029] EXT4-fs (loop8): This should not happen!! Data will be lost
[  202.428653][T12029] 
[  202.443373][T12029] EXT4-fs (loop8): Total free blocks count 0
[  202.449491][T12029] EXT4-fs (loop8): Free/Dirty block details
[  202.455599][T12029] EXT4-fs (loop8): free_blocks=2415919104
[  202.461383][T12029] EXT4-fs (loop8): dirty_blocks=48
[  202.466571][T12029] EXT4-fs (loop8): Block reservation details
[  202.473018][T12029] EXT4-fs (loop8): i_reserved_data_blocks=3
[  202.479872][T12038] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[  202.535766][T12044] loop3: detected capacity change from 0 to 512
[  202.559585][T12044] EXT4-fs (loop3): too many log groups per flexible block group
[  202.567901][T12044] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  202.577707][T12044] EXT4-fs (loop3): mount failed
[  202.613693][T12049] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2854'.
[  202.644545][T12057] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2859'.
[  202.674532][T12061] IPv6: Can't replace route, no match found
[  202.698558][T12061] loop7: detected capacity change from 0 to 512
[  202.705983][T12061] EXT4-fs: Ignoring removed nomblk_io_submit option
[  202.712800][T12061] EXT4-fs: Ignoring removed nomblk_io_submit option
[  202.725997][T12063] loop3: detected capacity change from 0 to 256
[  202.734186][T12063] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  202.744840][T12063] FAT-fs (loop3): bogus number of directory entries (1)
[  202.752251][T12063] FAT-fs (loop3): Can't find a valid FAT filesystem
[  202.762052][T12061] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.775133][T12061] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  202.793719][T12063] 9pnet_fd: Insufficient options for proto=fd
[  202.800621][ T9152] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.821936][T12069] loop7: detected capacity change from 0 to 512
[  202.828753][T12069] EXT4-fs: Ignoring removed oldalloc option
[  202.841492][T12069] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm +}[@: Parent and EA inode have the same ino 15
[  202.859219][T12069] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm +}[@: Parent and EA inode have the same ino 15
[  202.872956][T12069] EXT4-fs (loop7): 1 orphan inode deleted
[  202.879152][T12069] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.901548][ T9152] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.918255][T12076] loop7: detected capacity change from 0 to 128
[  202.927029][T12076] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  202.942262][T12076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.951531][T12076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.961666][T12076] FAT-fs (loop7): error, invalid access to FAT (entry 0x0affffff)
[  202.973460][T12076] FAT-fs (loop7): Filesystem has been set read-only
[  202.980464][T12076] FAT-fs (loop7): error, invalid access to FAT (entry 0x0affffff)
[  203.255814][T11989] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.266949][T11989] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.279542][T11989] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.290642][T11989] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.314740][T12083] netlink: 'syz.4.2870': attribute type 13 has an invalid length.
[  203.343785][T12083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  203.363055][T12083] x_tables: ip6_tables: mh match: only valid for protocol 135
[  203.393417][T12088] loop8: detected capacity change from 0 to 512
[  203.401769][T12088] EXT4-fs (loop8): too many log groups per flexible block group
[  203.410208][T12088] EXT4-fs (loop8): failed to initialize mballoc (-12)
[  203.417583][T12088] EXT4-fs (loop8): mount failed
[  203.500283][ T9152] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  203.518074][T12098] IPv6: Can't replace route, no match found
[  203.533295][T12098] loop3: detected capacity change from 0 to 512
[  203.540760][T12098] EXT4-fs: Ignoring removed nomblk_io_submit option
[  203.547875][T12098] EXT4-fs: Ignoring removed nomblk_io_submit option
[  203.562814][T12098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.575807][T12098] ext4 filesystem being mounted at /586/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  203.607406][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.633904][T12107] loop3: detected capacity change from 0 to 512
[  203.652389][T12107] EXT4-fs (loop3): too many log groups per flexible block group
[  203.660370][T12107] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  203.668386][T12107] EXT4-fs (loop3): mount failed
[  203.702314][T12111] loop3: detected capacity change from 0 to 1024
[  203.713000][T12111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.728625][T12113] netlink: 156 bytes leftover after parsing attributes in process `syz.8.2878'.
[  203.761100][T12113] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2878'.
[  203.779766][T12113] loop8: detected capacity change from 0 to 512
[  203.792945][T12113] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  203.825682][T12113] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.843971][T12113] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  203.986124][T12126] vhci_hcd: default hub control req: 4012 v0040 i0002 l0
[  204.051661][T10690] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.073907][T12128] vhci_hcd: default hub control req: 4012 v0040 i0002 l0
[  204.161787][T12131] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.314912][T12135] FAULT_INJECTION: forcing a failure.
[  204.314912][T12135] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  204.329555][T12135] CPU: 1 UID: 0 PID: 12135 Comm: syz.4.2883 Tainted: G        W           6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) 
[  204.329584][T12135] Tainted: [W]=WARN
[  204.329589][T12135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  204.329702][T12135] Call Trace:
[  204.329708][T12135]  <TASK>
[  204.329715][T12135]  __dump_stack+0x1d/0x30
[  204.329736][T12135]  dump_stack_lvl+0xe8/0x140
[  204.329756][T12135]  dump_stack+0x15/0x1b
[  204.329774][T12135]  should_fail_ex+0x265/0x280
[  204.329877][T12135]  should_fail+0xb/0x20
[  204.329904][T12135]  should_fail_usercopy+0x1a/0x20
[  204.329936][T12135]  strncpy_from_user+0x25/0x230
[  204.329967][T12135]  ? kmem_cache_alloc_noprof+0x186/0x310
[  204.329993][T12135]  ? getname_flags+0x80/0x3b0
[  204.330068][T12135]  getname_flags+0xae/0x3b0
[  204.330140][T12135]  __x64_sys_link+0x40/0x70
[  204.330159][T12135]  x64_sys_call+0x2af9/0x2fb0
[  204.330181][T12135]  do_syscall_64+0xd2/0x200
[  204.330200][T12135]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  204.330227][T12135]  ? clear_bhb_loop+0x40/0x90
[  204.330265][T12135]  ? clear_bhb_loop+0x40/0x90
[  204.330286][T12135]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.330305][T12135] RIP: 0033:0x7f4d8f6ce929
[  204.330322][T12135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.330403][T12135] RSP: 002b:00007f4d8dd37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056
[  204.330422][T12135] RAX: ffffffffffffffda RBX: 00007f4d8f8f5fa0 RCX: 00007f4d8f6ce929
[  204.330432][T12135] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000200
[  204.330443][T12135] RBP: 00007f4d8dd37090 R08: 0000000000000000 R09: 0000000000000000
[  204.330453][T12135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  204.330463][T12135] R13: 0000000000000000 R14: 00007f4d8f8f5fa0 R15: 00007ffe82ff2e78
[  204.330478][T12135]  </TASK>
[  204.537704][T12131] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.575712][T12137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.584507][T12137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.723316][T12131] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.845404][T12131] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.055912][T12111] Set syz1 is full, maxelem 65536 reached
[  205.071573][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.086940][T12131] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.098417][T12131] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.111271][T12131] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.127483][T12131] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.185865][T12160] loop7: detected capacity change from 0 to 128
[  205.197047][T12160] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  205.216297][T12160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.225208][T12160] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.234398][T12160] FAT-fs (loop7): error, invalid access to FAT (entry 0x0affffff)
[  205.242614][T12160] FAT-fs (loop7): Filesystem has been set read-only
[  205.249614][T12160] FAT-fs (loop7): error, invalid access to FAT (entry 0x0affffff)
[  205.267594][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2895'.
[  205.277273][T12163] 9pnet_fd: Insufficient options for proto=fd
[  205.374467][T12176] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  205.539719][T12191] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  205.565236][T12194] loop3: detected capacity change from 0 to 128
[  205.572284][T12194] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  205.585571][T12194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.595582][T12194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.605456][T12194] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff)
[  205.613646][T12194] FAT-fs (loop3): Filesystem has been set read-only
[  205.630701][T12194] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff)
[  205.644684][T12200] loop8: detected capacity change from 0 to 512
[  205.673679][T12200] EXT4-fs (loop8): too many log groups per flexible block group
[  205.682988][T12200] EXT4-fs (loop8): failed to initialize mballoc (-12)
[  205.690795][T12200] EXT4-fs (loop8): mount failed
[  205.700884][T12203] 9pnet_fd: Insufficient options for proto=fd
[  205.788284][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2909'.
[  205.798166][T12206] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.806261][T12206] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.808031][ T9152] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  205.824280][T12206] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.832283][T12206] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.022915][T12213] netlink: zone id is out of range
[  206.028898][T12213] netlink: zone id is out of range
[  206.034073][T12213] netlink: zone id is out of range
[  206.039280][T12213] netlink: zone id is out of range
[  206.045258][T12213] netlink: zone id is out of range
[  206.050544][T12213] netlink: zone id is out of range
[  206.056005][T12213] netlink: zone id is out of range
[  206.061573][T12213] netlink: zone id is out of range
[  206.152184][ T3303] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  206.170241][T12231] loop3: detected capacity change from 0 to 512
[  206.181896][T12231] EXT4-fs (loop3): too many log groups per flexible block group
[  206.189795][T12231] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  206.196759][T12231] EXT4-fs (loop3): mount failed
[  206.223998][T12237] loop7: detected capacity change from 0 to 128
[  206.231202][T12237] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  206.232383][T12239] IPv6: Can't replace route, no match found
[  206.249893][T12237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.259126][T12237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.267618][T12237] FAT-fs (loop7): error, invalid access to FAT (entry 0x0affffff)
[  206.275605][T12237] FAT-fs (loop7): Filesystem has been set read-only
[  206.275739][T12239] loop3: detected capacity change from 0 to 512
[  206.283300][T12237] FAT-fs (loop7): error, invalid access to FAT (entry 0x0affffff)
[  206.289479][T12239] EXT4-fs: Ignoring removed nomblk_io_submit option
[  206.303912][T12239] EXT4-fs: Ignoring removed nomblk_io_submit option
[  206.322810][T12239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.337872][T12239] ext4 filesystem being mounted at /598/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  206.364037][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.396406][T12245] loop3: detected capacity change from 0 to 512
[  206.404175][T12245] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  206.416488][T12245] EXT4-fs (loop3): 1 truncate cleaned up
[  206.423270][T12245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.450190][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.501279][T12249] SELinux: syz.4.2924 (12249) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  206.529489][T12249] FAULT_INJECTION: forcing a failure.
[  206.529489][T12249] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  206.547872][T12249] CPU: 0 UID: 0 PID: 12249 Comm: syz.4.2924 Tainted: G        W           6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) 
[  206.547969][T12249] Tainted: [W]=WARN
[  206.547974][T12249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  206.548032][T12249] Call Trace:
[  206.548039][T12249]  <TASK>
[  206.548046][T12249]  __dump_stack+0x1d/0x30
[  206.548070][T12249]  dump_stack_lvl+0xe8/0x140
[  206.548089][T12249]  dump_stack+0x15/0x1b
[  206.548107][T12249]  should_fail_ex+0x265/0x280
[  206.548181][T12249]  should_fail+0xb/0x20
[  206.548265][T12249]  should_fail_usercopy+0x1a/0x20
[  206.548295][T12249]  _copy_from_user+0x1c/0xb0
[  206.548319][T12249]  kstrtouint_from_user+0x69/0xf0
[  206.548371][T12249]  ? 0xffffffff81000000
[  206.548386][T12249]  ? selinux_file_permission+0x1e4/0x320
[  206.548419][T12249]  proc_fail_nth_write+0x50/0x160
[  206.548444][T12249]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  206.548479][T12249]  vfs_write+0x266/0x8e0
[  206.548544][T12249]  ? vfs_read+0x47f/0x6f0
[  206.548698][T12249]  ? __rcu_read_unlock+0x4f/0x70
[  206.548783][T12249]  ? __fget_files+0x184/0x1c0
[  206.548806][T12249]  ksys_write+0xda/0x1a0
[  206.548838][T12249]  __x64_sys_write+0x40/0x50
[  206.548856][T12249]  x64_sys_call+0x2cdd/0x2fb0
[  206.548920][T12249]  do_syscall_64+0xd2/0x200
[  206.548938][T12249]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  206.548965][T12249]  ? clear_bhb_loop+0x40/0x90
[  206.549043][T12249]  ? clear_bhb_loop+0x40/0x90
[  206.549066][T12249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.549087][T12249] RIP: 0033:0x7f4d8f6cd3df
[  206.549172][T12249] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  206.549190][T12249] RSP: 002b:00007f4d8dd37030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  206.549210][T12249] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4d8f6cd3df
[  206.549223][T12249] RDX: 0000000000000001 RSI: 00007f4d8dd370a0 RDI: 0000000000000006
[  206.549234][T12249] RBP: 00007f4d8dd37090 R08: 0000000000000000 R09: 0000000000000000
[  206.549265][T12249] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  206.549277][T12249] R13: 0000000000000000 R14: 00007f4d8f8f5fa0 R15: 00007ffe82ff2e78
[  206.549296][T12249]  </TASK>
[  206.814758][T12253] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2925'.
[  207.000574][   T29] kauditd_printk_skb: 684 callbacks suppressed
[  207.000588][   T29] audit: type=1326 audit(2000000141.130:18800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d8f66ab19 code=0x7ffc0000
[  207.012702][T12272] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2928'.
[  207.057424][   T29] audit: type=1326 audit(2000000141.170:18801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4d8f6c58e7 code=0x7ffc0000
[  207.083236][   T29] audit: type=1326 audit(2000000141.170:18802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d8f66ab19 code=0x7ffc0000
[  207.107993][   T29] audit: type=1326 audit(2000000141.170:18803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4d8f6ce929 code=0x7ffc0000
[  207.132658][   T29] audit: type=1326 audit(2000000141.180:18804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4d8f6c58e7 code=0x7ffc0000
[  207.150063][T12250] chnl_net:caif_netlink_parms(): no params data found
[  207.156345][   T29] audit: type=1326 audit(2000000141.180:18805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d8f66ab19 code=0x7ffc0000
[  207.186478][   T29] audit: type=1326 audit(2000000141.180:18806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4d8f6ce929 code=0x7ffc0000
[  207.210397][   T29] audit: type=1326 audit(2000000141.180:18807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4d8f6c58e7 code=0x7ffc0000
[  207.234887][   T29] audit: type=1326 audit(2000000141.180:18808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d8f66ab19 code=0x7ffc0000
[  207.259235][   T29] audit: type=1326 audit(2000000141.180:18809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4d8f6ce929 code=0x7ffc0000
[  207.284350][ T9152] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  207.307115][T12278] vhci_hcd: default hub control req: 4012 v0040 i0002 l0
[  207.331862][T12250] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.339023][T12250] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.346794][T12250] bridge_slave_0: entered allmulticast mode
[  207.354529][T12250] bridge_slave_0: entered promiscuous mode
[  207.361924][T12250] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.368996][T12250] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.376860][T12250] bridge_slave_1: entered allmulticast mode
[  207.384219][T12250] bridge_slave_1: entered promiscuous mode
[  207.401819][T12250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.412351][T12250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.434042][T12250] team0: Port device team_slave_0 added
[  207.441058][T12250] team0: Port device team_slave_1 added
[  207.459323][T12250] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.466428][T12250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.492798][T12250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.506554][T12250] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.514478][T12250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.544019][T12250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.573754][T12250] hsr_slave_0: entered promiscuous mode
[  207.580133][T12250] hsr_slave_1: entered promiscuous mode
[  207.586209][T12250] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  207.593961][T12250] Cannot create hsr debugfs directory
[  207.654705][T12250] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  207.664891][T12250] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  207.712535][T12250] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  207.722842][T12250] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  207.782313][T12250] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  207.792655][T12250] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  207.904036][T12250] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  207.908781][T12296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.914202][T12250] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  207.924222][T12296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.948441][T12296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.957221][T12296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.030726][T12305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.039469][T12305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.058973][T12250] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  208.067626][T12250] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  208.076872][T12250] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  208.086750][T12250] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  208.099031][T12307] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.114202][T12250] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.121559][T12250] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.128933][T12250] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.136100][T12250] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.162404][T12307] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.180551][T12316] loop7: detected capacity change from 0 to 128
[  208.185586][T12250] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.192344][T12316] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  208.199863][T12250] 8021q: adding VLAN 0 to HW filter on device team0
[  208.212237][ T4127] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.220394][ T4127] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.223647][T12316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.238320][T12316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.248835][T12316] FAT-fs (loop7): error, invalid access to FAT (entry 0x0affffff)
[  208.259880][T12316] FAT-fs (loop7): Filesystem has been set read-only
[  208.267904][T12316] FAT-fs (loop7): error, invalid access to FAT (entry 0x0affffff)
[  208.269816][ T4132] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.283035][ T4132] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.291914][ T4132] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.299074][ T4132] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.315350][T12307] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.359621][T12250] 8021q: adding VLAN 0 to HW filter on device batadv0
[  208.372674][T12307] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.429107][T12250] veth0_vlan: entered promiscuous mode
[  208.437523][T12250] veth1_vlan: entered promiscuous mode
[  208.449369][T12307] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.460754][T12307] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.474478][T12307] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.488009][T12307] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.502765][T12250] veth0_macvtap: entered promiscuous mode
[  208.514526][T12250] veth1_macvtap: entered promiscuous mode
[  208.529083][T12250] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.544865][T12250] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.557998][T12250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.567236][T12250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.577402][T12250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.586820][T12250] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.653472][T12337] IPv6: Can't replace route, no match found
[  208.719918][T12344] vhci_hcd: default hub control req: 4012 v0040 i0002 l0
[  208.816900][ T9152] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  208.892125][T12354] netlink: 75 bytes leftover after parsing attributes in process `syz.7.2950'.
[  208.985845][T12355] netlink: 300 bytes leftover after parsing attributes in process `syz.7.2950'.
[  208.995231][T12355] netlink: 300 bytes leftover after parsing attributes in process `syz.7.2950'.
[  209.173037][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2956'.
[  209.182658][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2956'.
[  209.206869][T12368] loop7: detected capacity change from 0 to 256
[  209.226445][T12370] syz.3.2956: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  209.241217][T12370] CPU: 0 UID: 0 PID: 12370 Comm: syz.3.2956 Tainted: G        W           6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) 
[  209.241258][T12370] Tainted: [W]=WARN
[  209.241266][T12370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  209.241280][T12370] Call Trace:
[  209.241287][T12370]  <TASK>
[  209.241296][T12370]  __dump_stack+0x1d/0x30
[  209.241320][T12370]  dump_stack_lvl+0xe8/0x140
[  209.241342][T12370]  dump_stack+0x15/0x1b
[  209.241434][T12370]  warn_alloc+0x12b/0x1a0
[  209.241467][T12370]  ? audit_log_end+0x1d7/0x1f0
[  209.241491][T12370]  __vmalloc_node_range_noprof+0x9c/0xe00
[  209.241525][T12370]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  209.241603][T12370]  ? __rcu_read_unlock+0x4f/0x70
[  209.241627][T12370]  ? __perf_event_task_sched_in+0xa5b/0xac0
[  209.241731][T12370]  ? __rcu_read_unlock+0x4f/0x70
[  209.241754][T12370]  ? xfd_validate_state+0x45/0xf0
[  209.241832][T12370]  ? save_fpregs_to_fpstate+0x100/0x160
[  209.241863][T12370]  ? should_fail_ex+0x30/0x280
[  209.241967][T12370]  ? xskq_create+0x36/0xe0
[  209.242005][T12370]  vmalloc_user_noprof+0x7d/0xb0
[  209.242035][T12370]  ? xskq_create+0x80/0xe0
[  209.242058][T12370]  xskq_create+0x80/0xe0
[  209.242117][T12370]  xsk_init_queue+0x95/0xf0
[  209.242182][T12370]  xsk_setsockopt+0x35c/0x510
[  209.242283][T12370]  ? __pfx_xsk_setsockopt+0x10/0x10
[  209.242305][T12370]  __sys_setsockopt+0x181/0x200
[  209.242361][T12370]  __x64_sys_setsockopt+0x64/0x80
[  209.242403][T12370]  x64_sys_call+0x2bd5/0x2fb0
[  209.242425][T12370]  do_syscall_64+0xd2/0x200
[  209.242502][T12370]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  209.242528][T12370]  ? clear_bhb_loop+0x40/0x90
[  209.242553][T12370]  ? clear_bhb_loop+0x40/0x90
[  209.242574][T12370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.242643][T12370] RIP: 0033:0x7fb16b20e929
[  209.242658][T12370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  209.242676][T12370] RSP: 002b:00007fb169856038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  209.242695][T12370] RAX: ffffffffffffffda RBX: 00007fb16b436080 RCX: 00007fb16b20e929
[  209.242707][T12370] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  209.242720][T12370] RBP: 00007fb16b290b39 R08: 0000000000000004 R09: 0000000000000000
[  209.242804][T12370] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  209.242817][T12370] R13: 0000000000000000 R14: 00007fb16b436080 R15: 00007ffc98f929d8
[  209.242835][T12370]  </TASK>
[  209.242857][T12370] Mem-Info:
[  209.302702][T12368] FAT-fs (loop7): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  209.305505][T12370] active_anon:9067 inactive_anon:2 isolated_anon:0
[  209.305505][T12370]  active_file:26741 inactive_file:2525 isolated_file:0
[  209.305505][T12370]  unevictable:0 dirty:135 writeback:0
[  209.305505][T12370]  slab_reclaimable:3357 slab_unreclaimable:30037
[  209.305505][T12370]  mapped:29639 shmem:2007 pagetables:895
[  209.305505][T12370]  sec_pagetables:0 bounce:0
[  209.305505][T12370]  kernel_misc_reclaimable:0
[  209.305505][T12370]  free:1706703 free_pcp:72791 free_cma:0
[  209.312852][T12368] FAT-fs (loop7): bogus number of directory entries (1)
[  209.312873][T12368] FAT-fs (loop7): Can't find a valid FAT filesystem
[  209.438693][T12368] 9pnet_fd: Insufficient options for proto=fd
[  209.439104][T12370] Node 0 active_anon:46940kB inactive_anon:8kB active_file:106964kB inactive_file:10100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118556kB dirty:540kB writeback:0kB shmem:18700kB writeback_tmp:0kB kernel_stack:4384kB pagetables:3580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  209.630645][T12370] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  209.660049][T12370] lowmem_reserve[]: 0 2882 7860 7860
[  209.665732][T12370] Node 0 DMA32 free:2947832kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951360kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB
[  209.699889][T12370] lowmem_reserve[]: 0 0 4978 4978
[  209.705055][T12370] Node 0 Normal free:4034400kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46648kB inactive_anon:8kB active_file:106964kB inactive_file:10108kB unevictable:0kB writepending:604kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:299672kB local_pcp:283272kB free_cma:0kB
[  209.738489][T12370] lowmem_reserve[]: 0 0 0 0
[  209.743583][T12370] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  209.757516][T12370] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 5*16kB (M) 2*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947832kB
[  209.774959][T12370] Node 0 Normal: 260*4kB (UME) 1121*8kB (UME) 2070*16kB (UME) 1785*32kB (UME) 1176*64kB (UME) 683*128kB (UME) 516*256kB (UM) 445*512kB (UME) 398*1024kB (UME) 142*2048kB (UM) 692*4096kB (UM) = 4155672kB
[  209.795589][T12370] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  209.805089][T12370] 33917 total pagecache pages
[  209.809854][T12370] 11 pages in swap cache
[  209.814611][T12370] Free swap  = 124952kB
[  209.818819][T12370] Total swap = 124996kB
[  209.822993][T12370] 2097051 pages RAM
[  209.826800][T12370] 0 pages HighMem/MovableOnly
[  209.831564][T12370] 80811 pages reserved
[  209.836531][T12372] IPv6: Can't replace route, no match found
[  209.941118][T12383] loop3: detected capacity change from 0 to 128
[  209.948463][T12383] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  209.959657][T12382] netlink: 'syz.6.2960': attribute type 298 has an invalid length.
[  210.025249][T12383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.034578][T12383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.044907][T12383] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff)
[  210.053246][T12383] FAT-fs (loop3): Filesystem has been set read-only
[  210.066673][T12383] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff)
[  210.109993][T12400] vhci_hcd: default hub control req: 4012 v0040 i0002 l0
[  210.489758][T12412] IPv6: Can't replace route, no match found
[  210.504216][T12412] loop8: detected capacity change from 0 to 512
[  210.511838][T12412] EXT4-fs: Ignoring removed nomblk_io_submit option
[  210.519537][T12412] EXT4-fs: Ignoring removed nomblk_io_submit option
[  210.532976][T12412] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.546647][T12412] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  210.567216][T10690] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.597361][T12250] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  210.642452][T12420] loop8: detected capacity change from 0 to 256
[  210.642457][T12419] loop3: detected capacity change from 0 to 8192
[  210.656432][T12420] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  210.665566][T12420] FAT-fs (loop8): bogus number of directory entries (1)
[  210.672584][T12420] FAT-fs (loop8): Can't find a valid FAT filesystem
[  210.684422][T12420] 9pnet_fd: Insufficient options for proto=fd
[  210.897009][T12426] loop7: detected capacity change from 0 to 1024
[  210.905251][T12426] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  210.915671][T12426] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  210.928310][T12426] EXT4-fs error (device loop7): ext4_get_journal_inode:5796: inode #32: comm syz.7.2975: iget: special inode unallocated
[  210.941829][T12426] EXT4-fs (loop7): no journal found
[  210.947139][T12426] EXT4-fs (loop7): can't get journal size
[  210.970148][T12426] EXT4-fs error (device loop7): ext4_protect_reserved_inode:160: inode #32: comm syz.7.2975: iget: special inode unallocated
[  210.984501][T12426] EXT4-fs (loop7): failed to initialize system zone (-117)
[  210.993345][T12429] netlink: 'syz.4.2976': attribute type 21 has an invalid length.
[  211.001782][T12426] EXT4-fs (loop7): mount failed
[  211.012931][T12426] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2975'.
[  211.165670][T12445] IPv6: Can't replace route, no match found
[  211.234733][ T4121] ==================================================================
[  211.235197][T12447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.244247][ T4121] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put
[  211.244275][ T4121] 
[  211.244281][ T4121] write to 0xffff888164912f3e of 2 bytes by task 12421 on cpu 1:
[  211.244295][ T4121]  fat16_ent_put+0x28/0x60
[  211.244312][ T4121]  fat_alloc_clusters+0x4ce/0xa80
[  211.244332][ T4121]  fat_get_block+0x258/0x5e0
[  211.244355][ T4121]  __block_write_begin_int+0x3fd/0xf90
[  211.244385][ T4121]  cont_write_begin+0x5fc/0x970
[  211.244402][ T4121]  fat_write_begin+0x4f/0xe0
[  211.254556][T12447] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  211.262596][ T4121]  generic_perform_write+0x181/0x490
[  211.318776][ T4121]  __generic_file_write_iter+0x9e/0x120
[  211.324535][ T4121]  generic_file_write_iter+0x8d/0x2f0
[  211.330708][ T4121]  aio_write+0x2e5/0x410
[  211.335401][ T4121]  io_submit_one+0xacd/0x11d0
[  211.340352][ T4121]  __se_sys_io_submit+0xfb/0x280
[  211.345309][ T4121]  __x64_sys_io_submit+0x43/0x50
[  211.350264][ T4121]  x64_sys_call+0xfc4/0x2fb0
[  211.355740][ T4121]  do_syscall_64+0xd2/0x200
[  211.360252][ T4121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.366155][ T4121] 
[  211.368579][ T4121] read to 0xffff888164912e00 of 512 bytes by task 4121 on cpu 0:
[  211.376653][ T4121]  copy_folio_from_iter_atomic+0x7fc/0x1170
[  211.384362][ T4121]  generic_perform_write+0x2c2/0x490
[  211.392611][ T4121]  shmem_file_write_iter+0xc5/0xf0
[  211.397723][ T4121]  lo_rw_aio+0x6ea/0x7a0
[  211.403034][ T4121]  loop_process_work+0x52d/0xa60
[  211.408856][ T4121]  loop_workfn+0x31/0x40
[  211.413806][ T4121]  process_scheduled_works+0x4ce/0x9d0
[  211.419882][ T4121]  worker_thread+0x582/0x770
[  211.424934][ T4121]  kthread+0x486/0x510
[  211.429010][ T4121]  ret_from_fork+0xda/0x150
[  211.433544][ T4121]  ret_from_fork_asm+0x1a/0x30
[  211.438322][ T4121] 
[  211.440650][ T4121] Reported by Kernel Concurrency Sanitizer on:
[  211.447118][ T4121] CPU: 0 UID: 0 PID: 4121 Comm: kworker/u8:13 Tainted: G        W           6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) 
[  211.461893][ T4121] Tainted: [W]=WARN
[  211.465793][ T4121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  211.477249][ T4121] Workqueue: loop3 loop_workfn
[  211.482356][ T4121] ==================================================================
[  211.504571][T12451] loop7: detected capacity change from 0 to 512
[  211.545205][T12451] EXT4-fs (loop7): too many log groups per flexible block group
[  211.554283][T12451] EXT4-fs (loop7): failed to initialize mballoc (-12)
[  211.561493][T12451] EXT4-fs (loop7): mount failed