last executing test programs:

7m22.186619221s ago: executing program 32 (id=3538):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

7m20.9477975s ago: executing program 33 (id=3559):
r0 = openat$random(0xffffffffffffff9c, &(0x7f00000018c0), 0xc8803, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"])
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2)
sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000017c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000001940)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004814}, 0x0)
r5 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5871, 0x2, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x5, 0x0, 0x1, 0xe, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000340)=r6)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f00000007c0)={{r1}, r6, 0x18, @inherit={0x68, &(0x7f0000000440)={0x0, 0x4, 0x6, 0x5, {0xc155280af4fa694f, 0x24, 0x1, 0x1, 0xb8a}, [0x9, 0x8, 0x5, 0x3]}}, @name="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"})
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x8, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1, 0x2}}}, 0x108)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000001880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000426bd7000fddb1f0f07183492e557010072000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4010)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6})
ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000540)={'\x00', 0x4a81, 0x3, 0x9})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x3, &(0x7f0000000100)=""/208, &(0x7f0000000240)=0xd0)
epoll_create1(0x80000)

7m18.026469369s ago: executing program 34 (id=3575):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x401, 0x0, 0x10000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x60}}, 0x0)

7m12.584616041s ago: executing program 35 (id=3626):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8)

7m11.475189187s ago: executing program 5 (id=3635):
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

7m11.172421336s ago: executing program 5 (id=3639):
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9ee6, 0x200000005}, 0x104022, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
sendfile(r6, r5, &(0x7f0000000000)=0x9, 0x100)

7m10.234972856s ago: executing program 5 (id=3648):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)

7m10.170310652s ago: executing program 5 (id=3649):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x404, &(0x7f0000000580)={[{@sysvgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x94ca}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
r0 = syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}], &(0x7f0000002480)=[0x2]}, 0x20)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

7m9.988701169s ago: executing program 5 (id=3651):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

7m9.229412212s ago: executing program 5 (id=3657):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x3, 0x0, 0x0)

7m9.206538294s ago: executing program 36 (id=3657):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x3, 0x0, 0x0)

7m5.718883108s ago: executing program 8 (id=3697):
r0 = socket$netlink(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000000c0)="14a1c73255298e5e0545deac3aa74852b7290ce76f9f46215fb27fa9f38810c85858d56e87e07b2163637afc878690c009daa0442f42e01511e00dddd1019586b90c0e198baf70e1d88a14dbb0da6d44aad2e7af894519ed780888091ac2698f8390213145d2eab9510579b750b6616713ba04bc15acf8e464ed694729767b611f0a3e8f03d8955a19c541ce10c53636b59557661a013a6014542c47219a04af2c204bce0e0701e3f34dfdcaa33af2", &(0x7f0000000180)="09b731cdac1ea4f13955c83dcb2ca5321f775303cb838a57f740337ecc25d2000d3f3cd5"}}, &(0x7f0000000080))
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103781)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r4=>r0, {0x9c}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x15, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000001000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000001117f000010000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf910000"], &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x1}, 0xc004, 0x10000, 0x0, 0x8, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000002000000b}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="a6e32a0000000000000000000000000200"/31], 0x48)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0500000000000000000000e1", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x803})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)

7m4.813879515s ago: executing program 8 (id=3711):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000000)=0x14)
read(r2, &(0x7f00000019c0)=""/4097, 0x1001)

7m4.769799479s ago: executing program 8 (id=3713):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c4300000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socket$igmp6(0xa, 0x3, 0x2)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
fallocate(r0, 0x39, 0x1, 0x80000001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r2, 0x0, 0xfffffffffffffffd}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r3 = gettid()
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082)
read(r4, &(0x7f0000000100)=""/140, 0xde)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2})
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000240)={0x151a, 0x0, 0x5, 0x3, 0x4, 0xb})
io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x73e9, 0x1c012, 0x4, 0x19c})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f00000001c0)={0xfffffff9, 0x2, {0xffffffffffffffff, 0x3, 0x5, 0x0, 0x8}, 0xd4d})
tkill(r3, 0x7)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x20, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)

7m4.259781628s ago: executing program 8 (id=3715):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x404, &(0x7f0000000580)={[{@sysvgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x94ca}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
r0 = syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

7m3.970581646s ago: executing program 8 (id=3719):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000400), &(0x7f00000005c0)=r5}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
memfd_create(0x0, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000240)={[{@norecovery}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@norecovery}, {@grpquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x6, 0x67b, &(0x7f0000001300)="$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")
r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x18)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000580)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8)
quotactl_fd$Q_GETINFO(r6, 0xffffffff80000501, r9, &(0x7f00000000c0))
creat(0x0, 0x90)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r10 = gettid()
openat$cgroup_freezer_state(r7, &(0x7f0000000200), 0x2, 0x0)
process_vm_writev(r10, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000005bc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x2, 0x6, 0x7e9, 0x2000000000, 0x2000000000002, 0x3, 0x100000000003, 0x7ffd})

7m3.433933377s ago: executing program 8 (id=3722):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")

7m3.354776725s ago: executing program 37 (id=3722):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")

7m3.112074688s ago: executing program 6 (id=3726):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0)
set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x1, 0x0, &(0x7f00000004c0)='c', 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x84, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x84, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffff85, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0xfff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0xfff}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x84}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kfree\x00', r3}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)

7m2.868562861s ago: executing program 6 (id=3731):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r0}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50)

7m2.264018269s ago: executing program 6 (id=3734):
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9ee6, 0x200000005}, 0x104022, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
sendfile(r4, r3, &(0x7f0000000000)=0x9, 0x100)

7m1.979474466s ago: executing program 6 (id=3739):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x404, &(0x7f0000000580)={[{@sysvgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x94ca}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
r0 = syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

7m1.665402256s ago: executing program 6 (id=3741):
r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1210090, &(0x7f0000001300)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
lseek(r0, 0xfffffffffffffffc, 0x2)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xd53091ff433e3f13)
quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000000)=@filename='./file0\x00', r1, &(0x7f0000000180))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
fcntl$setstatus(r3, 0x4, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r2)
sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000280), 0x6f05477f, 0x80)
ioctl$BLKTRACESTART(r4, 0x1274, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={<r5=>r0})
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r6)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r8=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r8}}], 0x20, 0x2400e044}, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r9)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r11=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="200000000001000084000000020000000a000400a80000000b000002ff1708ee501694750e4fe6440f8d28164a52b61038599e021662bf3ab1a3324e028058659df300e608bb71d56c3084579bb10f36344eaf8a603db5a89bc12bbf99b0e62870bd82ccd6dacffa47de973135c8f8c2a04359b58483293547f46d600e40392bbaa421111a17c8e50ee7dfd24ffdb300e02fddedff5dd00bda2c3de78a7bd0ae380041e7d3b6", @ANYRES32=r11], 0x20, 0x2400e044}, 0x0)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000540)=0x220, 0x4)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000003c0)={r8, 0x800}, 0x8)
name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="10000000040000000000eeff08a7f8116f6192305edb0000"], &(0x7f0000000240), 0x1400) (fail_nth: 1)

7m0.932824956s ago: executing program 6 (id=3744):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r0}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50)

7m0.887170291s ago: executing program 38 (id=3744):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r0}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50)

6m58.449027285s ago: executing program 2 (id=3759):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000380))
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000080900020073797a31000000000900010073797a310000000018000380140000800800034000000001"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x7a20b1b8bd6d9ce1}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x1409, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000041)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000e7aa369b"], 0x50)

6m58.311848428s ago: executing program 2 (id=3761):
r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = semget(0x1, 0x4, 0x39c)
semctl$IPC_RMID(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r0], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r2, <r4=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pS    \x00'}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r5}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20)
syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3c, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f079171000700840000"}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r6, 0x0, 0x2}, 0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x3000000, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0, 0x5a, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xef, 0x8, 0x8, &(0x7f0000000940)}}, 0x10)
r10 = syz_open_dev$vcsn(&(0x7f0000000b00), 0x2, 0x111402)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x15, 0x1a, &(0x7f0000000300)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ldst={0x2, 0x1, 0x3, 0xb, 0x2, 0xffffffffffffffe0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6d}], &(0x7f0000000280)='syzkaller\x00', 0x1000, 0x1000, &(0x7f0000000ec0)=""/4096, 0x40f00, 0x28, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x6, 0x3, 0x1}, 0x10, r9, r6, 0x0, &(0x7f0000000b40)=[r10, r2, r4], &(0x7f0000000b80)}, 0x94)

6m58.206560648s ago: executing program 2 (id=3763):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)

6m58.166866342s ago: executing program 2 (id=3764):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x404, &(0x7f0000000580)={[{@sysvgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x94ca}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
r0 = syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00'}, 0x10)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

6m58.060053342s ago: executing program 2 (id=3767):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c4300000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socket$igmp6(0xa, 0x3, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
fallocate(r0, 0x39, 0x1, 0x80000001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1, 0x0, 0xfffffffffffffffd}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r2 = gettid()
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082)
read(r3, &(0x7f0000000100)=""/140, 0xde)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2})
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000240)={0x151a, 0x0, 0x5, 0x3, 0x4, 0xb})
io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x73e9, 0x1c012, 0x4, 0x19c})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f00000001c0)={0xfffffff9, 0x2, {0xffffffffffffffff, 0x3, 0x5, 0x0, 0x8}, 0xd4d})
tkill(r2, 0x7)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x20, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)

6m57.715067825s ago: executing program 9 (id=3771):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400, 0x104, 0x1c}, 0x18) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a0000000000000000000000000000000000eb60f020544cdbbb8fb2dc7dbb54deb2962a945ac2de975257426873b826d36eedea2e72aabcca79ea6aa21b8802a68f3d8e25000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESOCT=r1], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000000000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, <r6=>0xffffffffffffffff}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="ce010000009a697f65360c5e88a8", 0x0, 0x1fe5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (rerun: 64)
r8 = socket$tipc(0x1e, 0x5, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32)
r9 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) (async, rerun: 32)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r10}, 0x10)
close(0x3) (async)
syz_open_dev$sg(0x0, 0x0, 0x8002)
socket$key(0xf, 0x3, 0x2)

6m57.528852022s ago: executing program 9 (id=3772):
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9ee6, 0x200000005}, 0x104022, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
sendfile(r6, r5, &(0x7f0000000000)=0x9, 0x100)

6m57.432979692s ago: executing program 2 (id=3773):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c4300000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socket$igmp6(0xa, 0x3, 0x2)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
fallocate(r0, 0x39, 0x1, 0x80000001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r2, 0x0, 0xfffffffffffffffd}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r3 = gettid()
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082)
read(r4, &(0x7f0000000100)=""/140, 0xde)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2})
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000240)={0x151a, 0x0, 0x5, 0x3, 0x4, 0xb})
io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x73e9, 0x1c012, 0x4, 0x19c})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f00000001c0)={0xfffffff9, 0x2, {0xffffffffffffffff, 0x3, 0x5, 0x0, 0x8}, 0xd4d})
tkill(r3, 0x7)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x20, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)

6m57.432440092s ago: executing program 39 (id=3773):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c4300000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socket$igmp6(0xa, 0x3, 0x2)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
fallocate(r0, 0x39, 0x1, 0x80000001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r2, 0x0, 0xfffffffffffffffd}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r3 = gettid()
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082)
read(r4, &(0x7f0000000100)=""/140, 0xde)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2})
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000240)={0x151a, 0x0, 0x5, 0x3, 0x4, 0xb})
io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x73e9, 0x1c012, 0x4, 0x19c})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f00000001c0)={0xfffffff9, 0x2, {0xffffffffffffffff, 0x3, 0x5, 0x0, 0x8}, 0xd4d})
tkill(r3, 0x7)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x20, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)

6m55.856157073s ago: executing program 9 (id=3782):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$netlink(r4, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="100000000011028027bd7000fddbdf255394c654f84087700f7c0f6d86724168698de8d0996835197cb6b1958b238db67880dbeba0e5601fc65aad6e7699441a43e736fa2a093d7a4711ae051fd1e3628382ac4194639b"], 0x10}], 0x1, 0x0, 0x0, 0x4054}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20c40, 0x102)
write$P9_RLERRORu(r5, &(0x7f0000000180)=ANY=[], 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)
cachestat(r5, &(0x7f00000002c0)={0xfff, 0x6}, &(0x7f0000000300), 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xce)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r8}, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
semget$private(0x0, 0x7, 0x180)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5393, 0x0)

6m55.537493013s ago: executing program 9 (id=3785):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)

6m55.436868433s ago: executing program 9 (id=3786):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x81, 0x1, 0x3, 0x72, @private1, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1, 0x7, 0x2, 0xfffffffb}})
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
statfs(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
dup3(0xffffffffffffffff, r2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000300)=r5}, 0x20)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
listen(r1, 0x2)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)="89000000120081ae08061cdc030ec080000000000100000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0xc000)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000be2123f445e8fca5e87b8f0c97579771f7ab332974f7e8998c847f6d09b45b30be5f5738a4e35b568dec27dfd5c3e8f9af96f45f1b63264eb16611beab229ba53d5b8a4dabd95c4ae57203998c1c4664809ef4f6a71fba70b3f4a67ae3579dd1a327a6d2f1dbe4f0f32ce871b7397e2d74fa33a9139e78930e2f1c3ec86438cfccd15acb78d75b0a0ad83e3bf7721381719243e5e831700ef41fa92e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10)
connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
r8 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10)

6m55.322787744s ago: executing program 9 (id=3788):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='sched_kthread_work_queue_work\x00', r2}, 0x18)
ustat(0xf, &(0x7f00000003c0))
pipe2$9p(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002)
r6 = dup(r5)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}})
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r8, 0x29, 0x14, 0x0, 0x53)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000bc0)={[{@user_xattr}, {@nojournal_checksum}, {@resuid}, {@errors_remount}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x1}}, {@noinit_itable}, {@nomblk_io_submit}, {@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000002f80)="$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")
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@acl}, {@nolazytime}, {@orlov}, {@i_version}, {@lazytime}, {@nodiscard}, {@grpjquota}, {@block_validity}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000000b00)="$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")
creat(&(0x7f00000000c0)='./bus\x00', 0x182)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000010020"], 0x24, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000380)='./control\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="0200000001000000000000000400020000000000100004000000000020000300000000000c5c65135bf2f12784e35805fce88a6eec85e9242c2adfc39606a457565eb68344ad057aee474efbb23dad10bda00b9d18a9d70c68a3b525d11253e976deead248172967d74d8cbac86464ccf6d945bade9acc"], 0x24, 0x1)
rmdir(&(0x7f0000000100)='./control\x00')
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x2d)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000010140)=0x9)

6m40.177274954s ago: executing program 40 (id=3788):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='sched_kthread_work_queue_work\x00', r2}, 0x18)
ustat(0xf, &(0x7f00000003c0))
pipe2$9p(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002)
r6 = dup(r5)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}})
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r8, 0x29, 0x14, 0x0, 0x53)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000bc0)={[{@user_xattr}, {@nojournal_checksum}, {@resuid}, {@errors_remount}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x1}}, {@noinit_itable}, {@nomblk_io_submit}, {@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000002f80)="$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")
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@acl}, {@nolazytime}, {@orlov}, {@i_version}, {@lazytime}, {@nodiscard}, {@grpjquota}, {@block_validity}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000000b00)="$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")
creat(&(0x7f00000000c0)='./bus\x00', 0x182)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000010020"], 0x24, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000380)='./control\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="0200000001000000000000000400020000000000100004000000000020000300000000000c5c65135bf2f12784e35805fce88a6eec85e9242c2adfc39606a457565eb68344ad057aee474efbb23dad10bda00b9d18a9d70c68a3b525d11253e976deead248172967d74d8cbac86464ccf6d945bade9acc"], 0x24, 0x1)
rmdir(&(0x7f0000000100)='./control\x00')
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x2d)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000010140)=0x9)

2.518447339s ago: executing program 7 (id=9615):
socket(0x400000000010, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@jqfmt_vfsv1}]}, 0x82, 0x48f, &(0x7f0000000380)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYHRRBeoq9oWQijU0JpYQqAagxsTQ6JrdWniX+DOjVFXJiaudG9IiLIBjYsx9869Mp12mKFOZwrzPMnQc+acO+ecnnvuPfccpgH0rOHsnyRia0T8EhE7qtHlGYarP65dOTv155WzU0lUKq/+nuT5rl45O1VmLY/bUkRG0oj0g6QoZLn5xTMnJmdnZ04X8bGFk2+PzS+eeeL4ycljM8dmTk0cOnTwwPjTT0082ZZ2Zu26uufc3N7dL75+8aWpIxff+v6rrL5bi/TadqzJ4Mq3hrOG/1HJ1ac9HP//T8VtNNtqwkl/FyvCTemLiKy7BrLxX6lUztek7YgX3m9y+JZ1rh6wjrJ706ZV3i/ui0uVhpIbpgK3giS6XQOgO8r7ffb8W746OP3ousvPVh+AsnZfK17VlP5IizwDdc+37TQcEUeW/vose0U71iEAAJr4aOrTw/H4avO/NO6pybe92EMZiog7IuLOiLgrInZGxN0Red57I2JXK4XWbBDUbw2tnP+kl9beuuay+d8zxd7W8vlfOfuLob4iti1v/0By9PjszP7idzISA5uy+PgNyvjm+Z8+bpRWO//LXln55VywqMel/roFuunJhcl8UtoGl9+L2NMff1cqlbr2J1H2UhIRuyNiz8199PYycPzRL/c2ytS8/Ss+7ro27DNVvoh4pNr/S1HX/lKycn9ycNv1/cmx/8XszP6x8qxY6YcfL7zSqPzW278+sv7fvPz8L1I+XywCQ2/W7tfOR4Ody60Ny7jw64cNn2nWev4PJq/l16Ny2/XdyYWF0+MRg8nhPL7s/Ynrx5bxMn/W/pF9WUrZ/vLINL/GRdH/90XE3mK/7P6IeKCo+4MR8VBE7GvY+ojvnmucthH6f7qm/5OoP/93nav+LPt/8aYDfSe+/bpR+a31/8E8NFK8k1//mmi1gmv/zQEAAMCtI81XbpJ09N9wmo6OVv9j787YnM7OzS88dnTunVPT1RWeoRhIy5WuHTXroePJUvGJ1fhEsVZcph8o1o0/6Ys8Pjo1Nzvd5bZDr9vSYPxnfuvrdu2AdbfaPtrEKl9oA24/9eM/XR49/3InKwN0lO9rQ+9qMv7TTtUD6Dz3f+hdq43/83VxewFwe3L/h95l/EPvMv6hd9WN/774uVs1ATpoDV/nFxCYXzwT6YaoRkuB1v8exHoH3tgY1Wgh0O0rEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHv8EwAA//9gP+wr")
chdir(&(0x7f0000000140)='./file0\x00')
r0 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
pipe2(&(0x7f0000000240)={<r3=>0xffffffffffffffff}, 0x0)
read$msr(r3, &(0x7f0000002140)=""/102400, 0x19000)

2.180340511s ago: executing program 4 (id=9620):
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000001975400209"], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, 0x0, 0x8000)
sendmsg$inet(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x1}], 0x1, 0x0, 0x0, 0xa6820000}, 0x0)

2.117155567s ago: executing program 4 (id=9621):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300020f0000000000000700000000010008000000000005000600000000000a004e24000000012001000000000000000000000000000201000000000000000200010000000000000000000000000005000500000000000a004e2100000002fe80000000000000000000d3000000aa7c0b000000000000"], 0x78}, 0x1, 0x7}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20)
timerfd_create(0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r3, 0x545c, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x41b4, 0x2)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r4])

1.855123862s ago: executing program 3 (id=9629):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000030000000"], 0x2c}}, 0x0)

1.836663813s ago: executing program 0 (id=9631):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)

1.827815294s ago: executing program 3 (id=9632):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x48, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x40040)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000008c0)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}], [{@obj_user}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@appraise}, {@uid_eq}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x3ffff)
sendfile(r4, r3, 0x0, 0x7ffff000)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6180000, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001480)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x250, 0xffffff7a, 0xffffffff, 0x250, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {0xff}, 0x16, 0x0, 0x41}, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc, 0x2, 0x4, 'snmp_trap\x00', {0x7}}}}, {{@ip={@multicast2, @local, 0xff, 0xffffff00, 'veth0_to_hsr\x00', 'virt_wifi0\x00', {}, {}, 0x33, 0x1, 0x9c}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x6, 'system_u:object_r:tpm_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000800)="87eb503e303871014b7b9b89f6d8770bf70878c2981d10c976d3fffec180fda539657a1e599627d88bcf518359413e764838ba1f6ad2db65567dbfb7a7f0a4d88e146a2a5597f9774ea3378d0476be28aa8715267ac72f365b6ac54f05865bc2dca5efc7502c602eb17a14d32238c69209000624662cd8e677d4efbaf0c33329c11f535c4165a8e3b679e2a170", 0x8d)
shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)

1.808196366s ago: executing program 0 (id=9633):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ec00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32], 0xfc}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)

1.745703472s ago: executing program 7 (id=9635):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000480)=@ethtool_flash={0x33, 0x200ea6, './file1\x00'}})

1.704989767s ago: executing program 7 (id=9636):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0)

1.703811196s ago: executing program 3 (id=9637):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10)

1.683152318s ago: executing program 3 (id=9638):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='timer_start\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="190000000400000008000000"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES64=r1, @ANYRES32=r0], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b0000000500000001000100090000000100000059a1cab50575eb4e80fd9df6f644637d7b31add3e50715d8936d18ecaf43b4d76ffe54431ccadc7abc2b773d526e9d1495db5b735c93475834e74cd7be246216afde01749f2b2894b86abc0aaf8e35961246e0cef528e6570bb4483b8f08f9a6d8626013d1995c8d4781e3fed366ac54429e1aad133e954cd22a2f5666e05bf26fd21a4c989c71ff2629d06d5ac2cfdd0dbc1de343019ccab5f1e3095610c1b730baa7dd3c8a9beced82", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001300), &(0x7f00000016c0), 0x400, r3}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES8=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000640)='nilfs2_mdt_insert_new_block\x00', r4, 0x0, 0xb}, 0x18)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r5)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r7=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="200000000000000084000000020000000a0003c4dfc5de34bffc1e9425e2b9ae54c0f1b797c76b69aaef62", @ANYRES32=r7], 0x20, 0x2400e044}, 0x4000005)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='-c'], 0x9)
pipe(&(0x7f0000000400))
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r8}, 0x10)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x210, 0x940c, 0x3002, 0x210, 0x2c0, 0x300, 0x3d8, 0x3d8, 0x300, 0x3d8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @private2, [0xff000000, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff000000, 0xffffffff, 0xff], 'veth1_to_team\x00', 'macsec0\x00', {}, {}, 0x62, 0x61, 0x0, 0x8}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x1ffffc, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}, {0x2, 0x140, 0xc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x916, {0x7c7a1f6d}}}}, {{@ipv6={@mcast1, @remote, [0xff000000, 0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x9, 0x4, 0x10}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x8, 0x9, 0x41, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x3, 0xf}})

962.601127ms ago: executing program 4 (id=9639):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6(0xa, 0x80002, 0xfffffffd)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
bind$inet(r2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x401, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]})
write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250)
r4 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1})
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
close_range(r4, 0xffffffffffffffff, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x898, 0x30, 0xfbed, 0x70bd29, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x10000, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x400]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0xfffc, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@mask_cswp={0x58, 0x114, 0x9, {{0x9, 0x660}, 0x0, 0x0, 0x6, 0xd, 0x1, 0x3, 0x3a, 0x8}}], 0x58}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000006c6d0000fdff17110000", @ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='start_task_reaping\x00', r8, 0x0, 0x5}, 0x18)

943.390609ms ago: executing program 7 (id=9640):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88034, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0xfffffffc, 0x0, 0x20000006}, 0x0, 0xc, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)='Y', 0x1}], 0x1, 0x5405, 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000380)={0x3fffffffbfb, 0x5, 0x5, 0x7f})

942.966349ms ago: executing program 0 (id=9641):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x5, 0x0, "ff00"})
r3 = syz_open_pts(r2, 0x141601)
write(r3, &(0x7f0000000000)="d5", 0xfffffedf)
close_range(r2, 0xffffffffffffffff, 0x0)

869.907816ms ago: executing program 0 (id=9644):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004})
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r3, 0xfffffffc)
r4 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10)
close_range(r2, 0xffffffffffffffff, 0x0)

853.566638ms ago: executing program 0 (id=9646):
socket(0x400000000010, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@jqfmt_vfsv1}]}, 0x82, 0x48f, &(0x7f0000000380)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
r0 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
pipe2(&(0x7f0000000240)={<r3=>0xffffffffffffffff}, 0x0)
read$msr(r3, &(0x7f0000002140)=""/102400, 0x19000)

838.038349ms ago: executing program 7 (id=9647):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000480)=@ethtool_flash={0x33, 0x200ea6, './file1\x00'}})

827.02678ms ago: executing program 4 (id=9649):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$eJzs28tvG1UXAPAzfrRfX19CVR59AIGCqHgkTVpKF2xAILEACQkWZRmStCp1G9QEiVYRBITKCqFK7BFLJP4CVrBBwAqJLexRpQpl08LKaOyZxHYcNzFOnOLfT5r23plr3XM8c+07c+MABtZI+k8SsTcifouIoXq1ucFI/b/bSwtTfy0tTCVRrb7xZ1Jrd2tpYSpvmr9uT14pRRQ+SeJwm37nrly9MFmpzFzO6mPzF98dm7ty9ZnzFyfPzZybuTRx+vTJE+PPnZp4tid5pnndOvTB7JGDr7x1/bWpM9ff/umbJM+/JY8eGel08PFqtcfd9de+hnJS6mMgbEixPkyjXBv/Q1GMlZM3FC9/3NfggE1VrVar9619eLEK/Icl0e8IgP7Iv+jT+99826Kpx7Zw84X6DVCa9+1sqx8pRSFrU265v+2lkYg4s/j3l+kWm/McAgCgyXfp/OfpdvO/QjQ+F/p/toYyHBH3RMT+iDgVEQci4t6IWtv7I+KBDfbfukiyev5TuNFVYuuUzv+ez9a2mud/+ewvhotZbV8t/3Jy9nxl5nj2nhyL8s60Pt6hj+9f+vXztY41zv/SLe0/nwtmcdwo7Wx+zfTk/GRziN27+VHEoVK7/JPllYAkIg5GxKEu+zj/5NdH1jp25/w76ME6U/WriCfq538xWvLPJZ3XJ8f+F5WZ42P5VbHaz79ce32t/v9V/j2Qnv/dba//5fyHk8b12rmN93Ht90/XvKfp9vrfkbzZtO/9yfn5y+MRO5JX60E37p9oaTex0j7N/9jR9uN/f6y8E4cjIr2IH4yIhyLi4Sz2RyLi0Yg42iH/H1987J3u899caf7TGzr/K4Ud0bqnfaF44Ydvmzod3kj+6fk/WSsdy/Ysf/51sJ64uruaAQAA4O5TiIi9kRRGl8uFwuho/W/4D8TuQmV2bv6ps7PvXZqu/0ZgOMqF/EnXUMPz0PHstj6vT7TUT2TPjb8o7qrVR6dmK9P9Th4G3J4otR3/qT+K/Y4O2HR+rwWDy/iHwWX8w+Ay/mFwtRn/u/oRB7D12n3/f9iHOICt1zL+LfvBAHH/D4PL+IfBZfzDQJrbFXf+kbyCwqpCFLZFGOssfFbeFmHcRYV+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xj8BAAD//3g65pw=")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
sendfile(r3, r3, 0x0, 0x7a680000)

806.456852ms ago: executing program 3 (id=9650):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)

763.657016ms ago: executing program 3 (id=9652):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ec00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xfc}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)

756.236477ms ago: executing program 7 (id=9654):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300020f0000000000000700000000010008000000000005000600000000000a004e24000000012001000000000000000000000000000201000000000000000200010000000000000000000000000005000500000000000a004e2100000002fe80000000000000000000d3000000aa7c0b000000000000"], 0x78}, 0x1, 0x7}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20)
timerfd_create(0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r3, 0x545c, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x8000000)
r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0)
fcntl$getflags(r4, 0xa)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)={0xa4, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8000000000000001}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xfffffffffffffffc}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x64}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40040)
syz_open_dev$sg(&(0x7f0000000000), 0x41b4, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@gettaction={0xa8, 0x32, 0x401, 0x70bd2b, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0x30}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff7}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffff7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40d1}, 0x0)
fcntl$setlease(r3, 0x400, 0x1)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={<r6=>0x0, @in6={{0xa, 0x4e21, 0x8, @private0}}, 0x4, 0x1, 0x4, 0xffffffff, 0x102, 0x4, 0x4}, &(0x7f00000000c0)=0x9c)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000380)={r6}, &(0x7f0000000300)=0x8)

487.337543ms ago: executing program 4 (id=9659):
syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="210000000000000000000000001000"], 0x48)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r2, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x10001}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0x7f, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0)
process_mrelease(r0, 0x0)

428.035459ms ago: executing program 4 (id=9660):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='timer_start\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="190000000400000008000000"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES64=r1, @ANYRES32=r0], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b0000000500000001000100090000000100000059a1cab50575eb4e80fd9df6f644637d7b31add3e50715d8936d18ecaf43b4d76ffe54431ccadc7abc2b773d526e9d1495db5b735c93475834e74cd7be246216afde01749f2b2894b86abc0aaf8e35961246e0cef528e6570bb4483b8f08f9a6d8626013d1995c8d4781e3fed366ac54429e1aad133e954cd22a2f5666e05bf26fd21a4c989c71ff2629d06d5ac2cfdd0dbc1de343019ccab5f1e3095610c1b730baa7dd3c8a9beced82", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001300), &(0x7f00000016c0), 0x400, r3}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES8=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000640)='nilfs2_mdt_insert_new_block\x00', r4, 0x0, 0xb}, 0x18)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r5)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r7=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="200000000000000084000000020000000a0003c4dfc5de34bffc1e9425e2b9ae54c0f1b797c76b69aaef62", @ANYRES32=r7], 0x20, 0x2400e044}, 0x4000005)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='-c'], 0x9)
pipe(&(0x7f0000000400))
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r8}, 0x10)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x210, 0x940c, 0x3002, 0x210, 0x2c0, 0x300, 0x3d8, 0x3d8, 0x300, 0x3d8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @private2, [0xff000000, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff000000, 0xffffffff, 0xff], 'veth1_to_team\x00', 'macsec0\x00', {}, {}, 0x62, 0x61, 0x0, 0x8}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x1ffffc, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}, {0x2, 0x140, 0xc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x916, {0x7c7a1f6d}}}}, {{@ipv6={@mcast1, @remote, [0xff000000, 0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x9, 0x4, 0x10}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x8, 0x9, 0x41, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x3, 0xf}})

427.665939ms ago: executing program 1 (id=9661):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88034, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0xfffffffc, 0x0, 0x20000006}, 0x0, 0xc, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)='Y', 0x1}], 0x1, 0x5405, 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000380)={0x3fffffffbfb, 0x5, 0x5, 0x7f})
syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6}]})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400001a679808d010aaa8000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r6, @ANYRES16=r6, @ANYRESOCT], 0xc4}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x8004001}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0xfffffffffffff001}, 0x18)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000)

351.055786ms ago: executing program 1 (id=9662):
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000001975400209"], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, 0x0, 0x8000)
sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0xa6820000}, 0x0)

298.344321ms ago: executing program 1 (id=9663):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58)

297.795651ms ago: executing program 1 (id=9664):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58)

268.849094ms ago: executing program 1 (id=9665):
syz_clone3(&(0x7f0000000080)={0x801400, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x10001}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0x7f, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}})

35.869696ms ago: executing program 1 (id=9666):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
r7 = msgget$private(0x0, 0x0)
msgsnd(r7, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0)
msgrcv(r7, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000)
msgctl$IPC_SET(r7, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3})
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r9}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250401f2800c0018000bac0f00000000001400010000000000000000000000ffff7f00000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8bdeb0a99b962bc0fe94a3fcae3697bd7b85b3"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

0s ago: executing program 0 (id=9667):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = dup2(0xffffffffffffffff, r0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)={0x2a4, r2, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffbfd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x10000, @local, 0x2aec}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x800, @private0, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae4}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4d5f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf7da}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2bc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x85d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x94c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x87c8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb58}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x881}, 0x44010)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00')
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10)
sigaltstack(0x0, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x0, 0x0, 0x6}}, 0x18)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="964a6c5176e84b4d7a", 0x9}], 0x1}, 0x4048081)
writev(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

2 comm="syz.4.8832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9820f749 code=0x7ffc0000
[  679.256738][ T1953] set_capacity_and_notify: 1 callbacks suppressed
[  679.256756][ T1953] loop4: detected capacity change from 0 to 512
[  679.267947][   T29] audit: type=1326 audit(2000000619.460:43606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1942 comm="syz.4.8832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c9820f749 code=0x7ffc0000
[  679.304176][   T29] audit: type=1326 audit(2000000619.460:43607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1942 comm="syz.4.8832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9820f749 code=0x7ffc0000
[  679.319959][ T1953] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  679.327776][   T29] audit: type=1326 audit(2000000619.460:43608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1942 comm="syz.4.8832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9820f749 code=0x7ffc0000
[  679.371417][ T1953] EXT4-fs (loop4): orphan cleanup on readonly fs
[  679.379275][ T1953] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.8834: Allocating blocks 41-42 which overlap fs metadata
[  679.393596][ T1953] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.8834: Allocating blocks 41-42 which overlap fs metadata
[  679.460643][ T1953] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.8834: Failed to acquire dquot type 1
[  679.487080][ T1953] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  679.559356][ T1953] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.8834: corrupted inode contents
[  679.592163][ T1953] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.8834: mark_inode_dirty error
[  679.629202][ T1953] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.8834: corrupted inode contents
[  679.651513][ T1953] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.8834: mark_inode_dirty error
[  679.679136][ T1953] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.8834: corrupted inode contents
[  679.711601][ T1953] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  679.731596][ T1953] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.8834: corrupted inode contents
[  679.764128][ T1953] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.8834: mark_inode_dirty error
[  679.785710][ T1953] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  679.806034][ T1953] EXT4-fs (loop4): 1 truncate cleaned up
[  679.819291][ T1953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  679.841944][ T1953] x_tables: unsorted underflow at hook 3
[  679.877556][T24390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  680.374295][ T2034] loop7: detected capacity change from 0 to 2048
[  680.405470][ T2040] loop3: detected capacity change from 0 to 1024
[  680.413010][ T2034] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  680.427908][ T2040] EXT4-fs: Ignoring removed orlov option
[  680.448176][ T2040] ext4: Unknown parameter 'obj_user'
[  680.456438][ T2043] hub 2-0:1.0: USB hub found
[  680.461197][ T2043] hub 2-0:1.0: 8 ports detected
[  680.517110][ T2040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8850'.
[  680.534128][T26190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  680.566452][ T2054] loop7: detected capacity change from 0 to 1024
[  680.574894][ T2054] EXT4-fs: Ignoring removed orlov option
[  680.581134][ T2054] ext4: Unknown parameter 'obj_user'
[  680.594163][ T2054] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8851'.
[  680.670629][ T2070] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8856'.
[  680.685119][ T2064] netdevsim netdevsim1: Direct firmware load for ./file1 failed with error -2
[  680.739897][ T2074] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  680.749656][ T2074] SELinux: failed to load policy
[  680.755581][ T2076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8857'.
[  680.844878][ T2112] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8860'.
[  680.900482][ T2117] loop4: detected capacity change from 0 to 1024
[  680.901219][ T2117] EXT4-fs: inline encryption not supported
[  680.915659][ T2117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  680.999853][T24390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  681.030438][ T2137] loop3: detected capacity change from 0 to 256
[  681.037053][ T2137] vfat: Unknown parameter '18446744073709551615ÿ'
[  681.147348][ T2164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=2164 comm=syz.3.8866
[  681.174382][ T2167] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8867'.
[  681.194982][ T2169] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  681.201904][ T2169] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  681.209656][ T2169] vhci_hcd vhci_hcd.0: Device attached
[  681.226341][ T2169] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11)
[  681.233218][ T2169] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  681.240875][ T2169] vhci_hcd vhci_hcd.0: Device attached
[  681.246995][ T2169] netem: change failed
[  681.252347][ T2175] vhci_hcd: connection closed
[  681.252615][ T2171] vhci_hcd: connection closed
[  681.252637][T15738] vhci_hcd vhci_hcd.1: stop threads
[  681.267275][T15738] vhci_hcd vhci_hcd.1: release socket
[  681.272754][T15738] vhci_hcd vhci_hcd.1: disconnect device
[  681.275877][ T2178] loop4: detected capacity change from 0 to 512
[  681.285526][T15738] vhci_hcd vhci_hcd.1: stop threads
[  681.290814][T15738] vhci_hcd vhci_hcd.1: release socket
[  681.296337][T15738] vhci_hcd vhci_hcd.1: disconnect device
[  681.302344][ T2178] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  681.311468][ T2178] EXT4-fs (loop4): invalid journal inode
[  681.648754][ T2239] loop4: detected capacity change from 0 to 1024
[  681.665325][ T2239] EXT4-fs: Ignoring removed orlov option
[  681.680149][ T2239] ext4: Unknown parameter 'obj_user'
[  681.884618][ T2270] hub 2-0:1.0: USB hub found
[  681.895708][ T2270] hub 2-0:1.0: 8 ports detected
[  681.968356][ T2282] loop3: detected capacity change from 0 to 1024
[  681.977664][ T2282] EXT4-fs: inline encryption not supported
[  682.012362][ T2282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  682.113088][T25336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  682.176827][ T2314] lo speed is unknown, defaulting to 1000
[  682.213192][ T2314] lo speed is unknown, defaulting to 1000
[  682.238056][ T2314] lo speed is unknown, defaulting to 1000
[  682.239470][ T2324] loop7: detected capacity change from 0 to 1024
[  682.255123][ T2314] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  682.264507][ T2324] EXT4-fs: inline encryption not supported
[  682.280818][ T2314] lo speed is unknown, defaulting to 1000
[  682.287944][ T2324] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  682.301766][ T2314] lo speed is unknown, defaulting to 1000
[  682.307911][ T2314] lo speed is unknown, defaulting to 1000
[  682.334457][ T2314] lo speed is unknown, defaulting to 1000
[  682.341278][ T2314] lo speed is unknown, defaulting to 1000
[  682.347718][ T2314] lo speed is unknown, defaulting to 1000
[  682.357553][ T2318] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  682.367656][ T2318] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  682.392848][T26190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  682.450795][ T2318] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.8884: Allocating blocks 41-42 which overlap fs metadata
[  682.469629][ T2318] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.8884: Allocating blocks 41-42 which overlap fs metadata
[  682.487922][ T2318] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.8884: Failed to acquire dquot type 1
[  682.501377][ T2341] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  682.512909][ T2334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  682.513206][ T2318] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  682.543975][ T2318] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.8884: corrupted inode contents
[  682.558649][ T2318] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.8884: mark_inode_dirty error
[  682.576560][ T2318] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.8884: corrupted inode contents
[  682.592705][ T2318] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.8884: mark_inode_dirty error
[  682.633301][ T2318] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.8884: corrupted inode contents
[  682.656728][T25336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  682.682340][ T2318] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  682.695265][ T2318] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.8884: corrupted inode contents
[  682.762666][ T2318] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.8884: mark_inode_dirty error
[  682.778280][ T2318] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  682.815989][ T2352] __nla_validate_parse: 3 callbacks suppressed
[  682.816047][ T2352] netlink: 4 bytes leftover after parsing attributes in process `,&#^%'.
[  682.833789][ T2318] EXT4-fs (loop4): 1 truncate cleaned up
[  682.842159][ T2349] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  682.874979][ T2318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  682.891077][ T2349] EXT4-fs (loop3): 1 truncate cleaned up
[  682.905496][ T2349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  682.965217][ T2357] netdevsim netdevsim7: Direct firmware load for ./file1 failed with error -2
[  683.087292][T25336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  683.228920][ T2362] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  683.238820][ T2362] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  683.265521][ T2362] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.8896: Allocating blocks 41-42 which overlap fs metadata
[  683.285548][ T2362] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.8896: Allocating blocks 41-42 which overlap fs metadata
[  683.326814][ T2362] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.8896: Failed to acquire dquot type 1
[  683.352028][ T2382] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8903'.
[  683.367183][ T2382] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8903'.
[  683.379001][ T2362] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  683.396421][ T2362] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.8896: corrupted inode contents
[  683.410658][T24390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  683.420795][ T2362] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #12: comm syz.7.8896: mark_inode_dirty error
[  683.435086][ T2385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  683.476772][ T2362] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.8896: corrupted inode contents
[  683.542861][ T2401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8909'.
[  683.547366][ T2362] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.8896: mark_inode_dirty error
[  683.567578][T25336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  683.583728][ T2403] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8911'.
[  683.590162][ T2362] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.8896: corrupted inode contents
[  683.608620][ T2362] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem
[  683.629406][ T2362] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.8896: corrupted inode contents
[  683.668508][ T2403] Invalid argument reading file caps for ./file0
[  683.681496][ T2362] EXT4-fs error (device loop7): ext4_truncate:4635: inode #12: comm syz.7.8896: mark_inode_dirty error
[  683.721042][ T2362] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem
[  683.736401][ T2362] EXT4-fs (loop7): 1 truncate cleaned up
[  683.803878][ T2362] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  683.833394][ T2413] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  683.906491][ T2407] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  683.970089][ T2407] EXT4-fs (loop3): 1 truncate cleaned up
[  684.018943][ T2407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  684.032747][   T29] kauditd_printk_skb: 571 callbacks suppressed
[  684.032765][   T29] audit: type=1400 audit(2000000624.550:44168): avc:  denied  { remount } for  pid=2359 comm="syz.7.8896" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  684.084425][   T29] audit: type=1326 audit(2000000624.580:44169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.0.8911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1797bf749 code=0x7ffc0000
[  684.108086][   T29] audit: type=1326 audit(2000000624.580:44170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.0.8911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1797bf749 code=0x7ffc0000
[  684.131720][   T29] audit: type=1400 audit(2000000624.580:44171): avc:  denied  { read } for  pid=2359 comm="syz.7.8896" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  684.155058][   T29] audit: type=1400 audit(2000000624.580:44172): avc:  denied  { open } for  pid=2359 comm="syz.7.8896" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  684.178706][   T29] audit: type=1400 audit(2000000624.590:44173): avc:  denied  { ioctl } for  pid=2359 comm="syz.7.8896" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  684.203812][   T29] audit: type=1400 audit(2000000624.600:44174): avc:  denied  { map_read map_write } for  pid=2418 comm="syz.0.8915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  684.250702][   T29] audit: type=1400 audit(2000000624.650:44175): avc:  denied  { create } for  pid=2359 comm="syz.7.8896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  684.270616][   T29] audit: type=1400 audit(2000000624.670:44176): avc:  denied  { ioctl } for  pid=2359 comm="syz.7.8896" path="socket:[95098]" dev="sockfs" ino=95098 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  684.295607][   T29] audit: type=1400 audit(2000000624.670:44177): avc:  denied  { module_request } for  pid=2359 comm="syz.7.8896" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  684.344156][T26190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  684.358603][T25336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  684.417260][ T2431] set_capacity_and_notify: 6 callbacks suppressed
[  684.417366][ T2431] loop7: detected capacity change from 0 to 1024
[  684.428195][ T2433] netdevsim netdevsim1: Direct firmware load for ./file1 failed with error -2
[  684.432080][ T2431] EXT4-fs: inline encryption not supported
[  684.471211][ T2431] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  684.515771][ T2439] loop3: detected capacity change from 0 to 1024
[  684.542878][ T2438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8920'.
[  684.549482][ T2439] EXT4-fs: Ignoring removed orlov option
[  684.559105][ T2438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8920'.
[  684.590926][ T2439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  684.645453][T26190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  684.735797][ T2449] loop7: detected capacity change from 0 to 2048
[  684.761076][ T2449] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  684.797633][T25336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  684.888020][T26190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  684.910379][ T2469] loop3: detected capacity change from 0 to 4096
[  684.930558][ T2469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  684.971495][ T2475] netdevsim netdevsim7: Direct firmware load for ./file1 failed with error -2
[  685.005506][ T2478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8934'.
[  685.007447][ T2481] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  685.015186][ T2478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8934'.
[  685.077198][T25336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  685.457613][ T2499] loop7: detected capacity change from 0 to 1024
[  685.503200][ T2499] EXT4-fs: Ignoring removed orlov option
[  685.545370][ T2499] ext4: Unknown parameter 'obj_user'
[  685.575039][ T2499] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8941'.
[  685.646888][ T2506] loop7: detected capacity change from 0 to 2048
[  685.745560][ T2506] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  685.802468][T26190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  685.918356][ T2522] lo speed is unknown, defaulting to 1000
[  685.979608][ T2525] netdevsim netdevsim4: Direct firmware load for ./file1 failed with error -2
[  686.009555][ T2522] xt_recent: Unsupported userspace flags (000000b1)
[  686.119073][ T2532] loop7: detected capacity change from 0 to 1024
[  686.131074][ T2534] loop4: detected capacity change from 0 to 1024
[  686.140400][ T2532] EXT4-fs: inline encryption not supported
[  686.157296][ T2534] EXT4-fs: Ignoring removed orlov option
[  686.166676][ T2532] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  686.189374][ T2534] ext4: Unknown parameter 'obj_user'
[  686.305654][ T2511] loop3: detected capacity change from 0 to 1024
[  686.360868][ T2545] loop4: detected capacity change from 0 to 2048
[  686.393023][T26190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  686.464788][ T2511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  686.478310][ T2545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  686.525623][ T2551] FAULT_INJECTION: forcing a failure.
[  686.525623][ T2551] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  686.538799][ T2551] CPU: 1 UID: 0 PID: 2551 Comm: syz.7.8957 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  686.538881][ T2551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  686.538893][ T2551] Call Trace:
[  686.538903][ T2551]  <TASK>
[  686.538913][ T2551]  __dump_stack+0x1d/0x30
[  686.538943][ T2551]  dump_stack_lvl+0x95/0xd0
[  686.538977][ T2551]  dump_stack+0x15/0x1b
[  686.539035][ T2551]  should_fail_ex+0x265/0x280
[  686.539061][ T2551]  should_fail+0xb/0x20
[  686.539085][ T2551]  should_fail_usercopy+0x1a/0x20
[  686.539114][ T2551]  _copy_from_user+0x1c/0xb0
[  686.539148][ T2551]  ___sys_sendmsg+0xc1/0x1d0
[  686.539267][ T2551]  __x64_sys_sendmsg+0xd4/0x160
[  686.539301][ T2551]  x64_sys_call+0x17ba/0x3000
[  686.539421][ T2551]  do_syscall_64+0xca/0x2b0
[  686.539452][ T2551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.539505][ T2551] RIP: 0033:0x7fb30a20f749
[  686.539593][ T2551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  686.539614][ T2551] RSP: 002b:00007fb308c77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  686.539639][ T2551] RAX: ffffffffffffffda RBX: 00007fb30a465fa0 RCX: 00007fb30a20f749
[  686.539734][ T2551] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000006
[  686.539751][ T2551] RBP: 00007fb308c77090 R08: 0000000000000000 R09: 0000000000000000
[  686.539832][ T2551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  686.539903][ T2551] R13: 00007fb30a466038 R14: 00007fb30a465fa0 R15: 00007ffcef97e5d8
[  686.539926][ T2551]  </TASK>
[  686.792320][ T2554] EXT4-fs: mb_optimize_scan should be set to 0 or 1.
[  686.793344][T25336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  686.859698][T24390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  686.944581][ T2558] EXT4-fs: inline encryption not supported
[  686.965764][ T2558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  687.061893][T25336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  687.152687][ T2580] EXT4-fs: inline encryption not supported
[  687.175934][ T2580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  687.579763][ T2634] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  687.586458][ T2634] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  687.594100][ T2634] vhci_hcd vhci_hcd.0: Device attached
[  687.604781][ T2639] vhci_hcd: connection closed
[  687.606001][ T1836] vhci_hcd vhci_hcd.1: stop threads
[  687.616273][ T1836] vhci_hcd vhci_hcd.1: release socket
[  687.621810][ T1836] vhci_hcd vhci_hcd.1: disconnect device
[  687.634576][ T2646] netdevsim netdevsim3: Direct firmware load for ./file1 failed with error -2
[  687.927987][ T2685] EXT4-fs: Ignoring removed orlov option
[  688.006645][ T2685] ext4: Unknown parameter 'obj_user'
[  688.020777][ T2709] __nla_validate_parse: 11 callbacks suppressed
[  688.020798][ T2709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8983'.
[  688.089387][ T2712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8985'.
[  688.111059][ T2707] infiniband syz!: set active
[  688.115784][ T2707] infiniband syz!: added team_slave_0
[  688.117470][ T2712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8985'.
[  688.130974][ T2685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8981'.
[  688.148330][ T2707] RDS/IB: syz!: added
[  688.157033][ T2707] smc: adding ib device syz! with port count 1
[  688.165968][ T2719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8987'.
[  688.175169][ T2719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8987'.
[  688.177306][ T2707] smc:    ib device syz! port 1 has no pnetid
[  688.200234][ T2723] netdevsim netdevsim1: Direct firmware load for ./file1 failed with error -2
[  688.456025][ T2731] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8991'.
[  688.521374][ T2731] Invalid argument reading file caps for ./file0
[  688.585376][ T2732] netlink: 'syz.1.8990': attribute type 1 has an invalid length.
[  688.593280][ T2732] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8990'.
[  688.658751][ T2749] EXT4-fs: Ignoring removed orlov option
[  688.686435][ T2749] ext4: Unknown parameter 'obj_user'
[  688.705206][ T2749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8996'.
[  688.791349][ T2760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8998'.
[  688.973720][ T2777] hub 2-0:1.0: USB hub found
[  688.982864][ T2777] hub 2-0:1.0: 8 ports detected
[  689.043026][   T29] kauditd_printk_skb: 829 callbacks suppressed
[  689.043046][   T29] audit: type=1326 audit(2000000629.560:45007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2781 comm="syz.0.9001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe1797bf7d7 code=0x7ffc0000
[  689.119581][   T29] audit: type=1326 audit(2000000629.590:45008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2781 comm="syz.0.9001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1797bdf90 code=0x7ffc0000
[  689.143467][   T29] audit: type=1326 audit(2000000629.590:45009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2781 comm="syz.0.9001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe1797be3aa code=0x7ffc0000
[  689.146067][ T2726] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  689.167049][   T29] audit: type=1326 audit(2000000629.590:45010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2781 comm="syz.0.9001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1797bf749 code=0x7ffc0000
[  689.167085][   T29] audit: type=1326 audit(2000000629.590:45011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2781 comm="syz.0.9001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1797bf749 code=0x7ffc0000
[  689.167113][   T29] audit: type=1326 audit(2000000629.600:45012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2781 comm="syz.0.9001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1797bf749 code=0x7ffc0000
[  689.167217][   T29] audit: type=1326 audit(2000000629.600:45013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2781 comm="syz.0.9001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1797bf749 code=0x7ffc0000
[  689.167245][   T29] audit: type=1326 audit(2000000629.600:45014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2781 comm="syz.0.9001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1797bf749 code=0x7ffc0000
[  689.167329][   T29] audit: type=1326 audit(2000000629.600:45015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2781 comm="syz.0.9001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1797bf749 code=0x7ffc0000
[  689.167381][   T29] audit: type=1326 audit(2000000629.600:45016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2781 comm="syz.0.9001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1797bf749 code=0x7ffc0000
[  689.365792][ T2726] EXT4-fs (loop3): orphan cleanup on readonly fs
[  689.388181][ T2726] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.8987: Allocating blocks 41-42 which overlap fs metadata
[  689.420670][ T2726] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.8987: Allocating blocks 41-42 which overlap fs metadata
[  689.448066][ T2726] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.8987: Failed to acquire dquot type 1
[  689.472715][ T2726] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  689.491739][ T2726] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.8987: corrupted inode contents
[  689.505989][ T2726] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.8987: mark_inode_dirty error
[  689.523611][ T2726] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.8987: corrupted inode contents
[  689.539413][ T2838] set_capacity_and_notify: 7 callbacks suppressed
[  689.539432][ T2838] loop7: detected capacity change from 0 to 512
[  689.553224][ T2726] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.8987: mark_inode_dirty error
[  689.554081][ T2838] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  689.576270][ T2838] EXT4-fs (loop7): orphan cleanup on readonly fs
[  689.578315][ T2726] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.8987: corrupted inode contents
[  689.583261][ T2838] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.9003: Allocating blocks 41-42 which overlap fs metadata
[  689.583482][ T2838] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.9003: Allocating blocks 41-42 which overlap fs metadata
[  689.626164][ T2726] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  689.626614][ T2838] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.9003: Failed to acquire dquot type 1
[  689.626894][ T2838] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, 
[  689.641528][ T2726] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.8987: corrupted inode contents
[  689.646761][ T2838] inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  689.685057][ T2726] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.8987: mark_inode_dirty error
[  689.704489][ T2838] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.9003: corrupted inode contents
[  689.704797][ T2838] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #12: comm syz.7.9003: mark_inode_dirty error
[  689.705399][ T2838] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.9003: corrupted inode contents
[  689.705559][ T2838] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.9003: mark_inode_dirty error
[  689.705786][ T2838] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.9003: corrupted inode contents
[  689.706818][ T2838] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem
[  689.707073][ T2838] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.9003: corrupted inode contents
[  689.707191][ T2838] EXT4-fs error (device loop7): ext4_truncate:4635: inode #12: comm syz.7.9003: mark_inode_dirty error
[  689.707356][ T2838] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem
[  689.707673][ T2838] EXT4-fs (loop7): 1 truncate cleaned up
[  689.783103][ T2838] x_tables: unsorted underflow at hook 3
[  689.845379][ T2726] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  689.862946][ T2844] netlink: 'syz.0.9005': attribute type 1 has an invalid length.
[  689.889392][ T2726] EXT4-fs (loop3): 1 truncate cleaned up
[  690.076828][ T2871] loop7: detected capacity change from 0 to 1024
[  690.084257][ T2871] EXT4-fs: inline encryption not supported
[  690.166732][ T2888] x_tables: unsorted underflow at hook 3
[  690.239326][ T2901] Invalid argument reading file caps for ./file0
[  690.323122][ T2915] loop7: detected capacity change from 0 to 512
[  690.364651][ T2915] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  690.389464][ T2915] EXT4-fs (loop7): orphan cleanup on readonly fs
[  690.407717][ T2915] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.9021: Allocating blocks 41-42 which overlap fs metadata
[  690.434487][ T2915] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.9021: Failed to acquire dquot type 1
[  690.446142][ T2915] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  690.460944][ T2915] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.9021: corrupted inode contents
[  690.473412][ T2915] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #12: comm syz.7.9021: mark_inode_dirty error
[  690.485663][ T2915] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.9021: corrupted inode contents
[  690.497909][ T2915] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.9021: mark_inode_dirty error
[  690.509536][ T2915] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.9021: corrupted inode contents
[  690.521698][ T2915] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem
[  690.539183][ T2915] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.9021: corrupted inode contents
[  690.554786][ T2915] EXT4-fs error (device loop7): ext4_truncate:4635: inode #12: comm syz.7.9021: mark_inode_dirty error
[  690.576310][ T2915] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem
[  690.585680][ T2915] EXT4-fs (loop7): 1 truncate cleaned up
[  690.603750][ T2915] x_tables: unsorted underflow at hook 3
[  691.086574][ T2964] loop7: detected capacity change from 0 to 512
[  691.112103][ T2964] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  691.158490][ T2964] EXT4-fs (loop7): 1 truncate cleaned up
[  691.229604][ T3002] Invalid argument reading file caps for ./file0
[  691.390025][ T3025] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  691.512946][ T3028] loop7: detected capacity change from 0 to 512
[  691.529432][ T3041] x_tables: unsorted underflow at hook 3
[  691.542653][ T3028] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  691.596398][ T3028] EXT4-fs (loop7): 1 truncate cleaned up
[  691.603106][ T3053] loop3: detected capacity change from 0 to 1024
[  691.610822][ T3053] EXT4-fs: inline encryption not supported
[  691.720058][ T3073] loop7: detected capacity change from 0 to 128
[  691.730332][ T3073] FAULT_INJECTION: forcing a failure.
[  691.730332][ T3073] name failslab, interval 1, probability 0, space 0, times 0
[  691.743123][ T3073] CPU: 0 UID: 0 PID: 3073 Comm: syz.7.9059 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  691.743181][ T3073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  691.743195][ T3073] Call Trace:
[  691.743267][ T3073]  <TASK>
[  691.743273][ T3073]  __dump_stack+0x1d/0x30
[  691.743292][ T3073]  dump_stack_lvl+0x95/0xd0
[  691.743314][ T3073]  dump_stack+0x15/0x1b
[  691.743328][ T3073]  should_fail_ex+0x265/0x280
[  691.743344][ T3073]  should_failslab+0x8c/0xb0
[  691.743359][ T3073]  kmem_cache_alloc_noprof+0x69/0x4b0
[  691.743404][ T3073]  ? getname_flags+0x80/0x3b0
[  691.743421][ T3073]  getname_flags+0x80/0x3b0
[  691.743437][ T3073]  do_sys_openat2+0x60/0x150
[  691.743456][ T3073]  __x64_sys_openat+0xf2/0x120
[  691.743494][ T3073]  x64_sys_call+0x2b07/0x3000
[  691.743510][ T3073]  do_syscall_64+0xca/0x2b0
[  691.743532][ T3073]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.743604][ T3073] RIP: 0033:0x7fb30a20f749
[  691.743732][ T3073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  691.743746][ T3073] RSP: 002b:00007fb308c77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  691.743772][ T3073] RAX: ffffffffffffffda RBX: 00007fb30a465fa0 RCX: 00007fb30a20f749
[  691.743781][ T3073] RDX: 0000000000181242 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  691.743790][ T3073] RBP: 00007fb308c77090 R08: 0000000000000000 R09: 0000000000000000
[  691.743799][ T3073] R10: 0000000000000148 R11: 0000000000000246 R12: 0000000000000001
[  691.743807][ T3073] R13: 00007fb30a466038 R14: 00007fb30a465fa0 R15: 00007ffcef97e5d8
[  691.743820][ T3073]  </TASK>
[  691.915281][ T3076] loop3: detected capacity change from 0 to 512
[  691.923228][ T3076] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  691.938787][ T3076] EXT4-fs (loop3): orphan cleanup on readonly fs
[  691.947151][ T3076] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.9060: Allocating blocks 41-42 which overlap fs metadata
[  691.974207][ T3076] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.9060: Allocating blocks 41-42 which overlap fs metadata
[  691.990105][ T3076] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.9060: Failed to acquire dquot type 1
[  692.002686][ T3076] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  692.004508][ T3085] Invalid argument reading file caps for ./file0
[  692.017683][ T3076] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.9060: corrupted inode contents
[  692.037687][ T3076] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.9060: mark_inode_dirty error
[  692.049745][ T3076] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.9060: corrupted inode contents
[  692.062586][ T3076] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.9060: mark_inode_dirty error
[  692.074561][ T3076] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.9060: corrupted inode contents
[  692.087043][ T3076] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  692.096127][ T3076] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.9060: corrupted inode contents
[  692.108696][ T3076] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.9060: mark_inode_dirty error
[  692.118729][ T3086] loop7: detected capacity change from 0 to 512
[  692.126951][ T3076] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  692.139185][ T3076] EXT4-fs (loop3): 1 truncate cleaned up
[  692.143858][ T3086] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  692.171405][ T3076] x_tables: unsorted underflow at hook 3
[  692.208304][ T3086] EXT4-fs (loop7): 1 truncate cleaned up
[  692.286654][ T3101] Invalid argument reading file caps for ./file0
[  692.379644][ T3113] netdevsim netdevsim1: Direct firmware load for ./file1 failed with error -2
[  692.567869][ T3141] loop7: detected capacity change from 0 to 1024
[  692.584602][ T3141] EXT4-fs: inline encryption not supported
[  692.780774][ T3181] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  692.787590][ T3181] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  692.795206][ T3181] vhci_hcd vhci_hcd.0: Device attached
[  692.823547][ T3183] vhci_hcd: connection closed
[  692.823739][T26764] vhci_hcd vhci_hcd.3: stop threads
[  692.833756][T26764] vhci_hcd vhci_hcd.3: release socket
[  692.839371][T26764] vhci_hcd vhci_hcd.3: disconnect device
[  693.196616][ T3254] __nla_validate_parse: 14 callbacks suppressed
[  693.196638][ T3254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9107'.
[  693.519046][ T3317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9116'.
[  693.568065][ T3317] Invalid argument reading file caps for ./file0
[  693.593430][ T3308] netlink: 'syz.7.9113': attribute type 1 has an invalid length.
[  693.601413][ T3308] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9113'.
[  693.675974][ T3324] wireguard0: entered promiscuous mode
[  693.721354][ T3337] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  693.992752][ T3355] netlink: 'syz.1.9132': attribute type 1 has an invalid length.
[  694.000772][ T3355] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9132'.
[  694.156774][T25336] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  694.167828][T25336] CPU: 1 UID: 0 PID: 25336 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[  694.167898][T25336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  694.167912][T25336] Call Trace:
[  694.167929][T25336]  <TASK>
[  694.167939][T25336]  __dump_stack+0x1d/0x30
[  694.168033][T25336]  dump_stack_lvl+0x95/0xd0
[  694.168103][T25336]  dump_stack+0x15/0x1b
[  694.168127][T25336]  dump_header+0x81/0x240
[  694.168152][T25336]  oom_kill_process+0x295/0x350
[  694.168301][T25336]  out_of_memory+0x97b/0xb80
[  694.168389][T25336]  try_charge_memcg+0x610/0xa10
[  694.168414][T25336]  charge_memcg+0x51/0xc0
[  694.168516][T25336]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  694.168606][T25336]  __read_swap_cache_async+0x17b/0x2d0
[  694.168642][T25336]  swap_cluster_readahead+0x262/0x3c0
[  694.168674][T25336]  swapin_readahead+0xde/0x820
[  694.168711][T25336]  ? perf_iterate_sb+0x62a/0x650
[  694.168735][T25336]  ? __pfx_perf_event_switch_output+0x10/0x10
[  694.168813][T25336]  ? __perf_event_task_sched_in+0xa5b/0xac0
[  694.169013][T25336]  ? __rcu_read_unlock+0x4f/0x70
[  694.169039][T25336]  ? __rcu_read_unlock+0x4f/0x70
[  694.169060][T25336]  ? __rcu_read_unlock+0x4f/0x70
[  694.169093][T25336]  ? swap_cache_get_folio+0x277/0x280
[  694.169126][T25336]  do_swap_page+0x2b4/0x21e0
[  694.169179][T25336]  ? _raw_spin_unlock+0x26/0x50
[  694.169207][T25336]  ? __schedule+0x85f/0xcd0
[  694.169230][T25336]  ? __pfx_default_wake_function+0x10/0x10
[  694.169264][T25336]  handle_mm_fault+0x9d8/0x2c60
[  694.169357][T25336]  do_user_addr_fault+0x630/0x1080
[  694.169422][T25336]  exc_page_fault+0x62/0xa0
[  694.169448][T25336]  asm_exc_page_fault+0x26/0x30
[  694.169468][T25336] RIP: 0033:0x7f65068e1fc5
[  694.169485][T25336] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[  694.169506][T25336] RSP: 002b:00007ffd1f34a0f8 EFLAGS: 00010246
[  694.169523][T25336] RAX: 0000000000000000 RBX: 000000000000043f RCX: 00007f65068e1fc3
[  694.169536][T25336] RDX: 00007ffd1f34a110 RSI: 0000000000000000 RDI: 0000000000000000
[  694.169548][T25336] RBP: 00007ffd1f34a17c R08: 000000003a7b7741 R09: 0000000000000000
[  694.169561][T25336] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  694.169653][T25336] R13: 00000000000927c0 R14: 00000000000a9696 R15: 00007ffd1f34a1d0
[  694.169671][T25336]  </TASK>
[  694.403063][T25336] memory: usage 307200kB, limit 307200kB, failcnt 37321
[  694.410297][T25336] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0
[  694.418319][T25336] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0
[  694.425647][T25336] Memory cgroup stats for /syz3:
[  694.426191][T25336] cache 0
[  694.434137][T25336] rss 4096
[  694.437180][T25336] shmem 0
[  694.440160][T25336] mapped_file 0
[  694.443635][T25336] dirty 0
[  694.446657][T25336] writeback 4096
[  694.450257][T25336] workingset_refault_anon 331
[  694.455099][T25336] workingset_refault_file 0
[  694.459812][T25336] swap 200704
[  694.463288][T25336] swapcached 16384
[  694.467018][T25336] pgpgin 1242102
[  694.470822][T25336] pgpgout 1242092
[  694.474479][T25336] pgfault 1222281
[  694.478192][T25336] pgmajfault 140
[  694.481763][T25336] inactive_anon 8192
[  694.485670][T25336] active_anon 8192
[  694.489421][T25336] inactive_file 0
[  694.493058][T25336] active_file 24576
[  694.496868][T25336] unevictable 0
[  694.500360][T25336] hierarchical_memory_limit 314572800
[  694.505737][T25336] hierarchical_memsw_limit 9223372036854771712
[  694.511918][T25336] total_cache 0
[  694.515385][T25336] total_rss 4096
[  694.518963][T25336] total_shmem 0
[  694.522429][T25336] total_mapped_file 0
[  694.526481][T25336] total_dirty 0
[  694.530000][T25336] total_writeback 4096
[  694.534137][T25336] total_workingset_refault_anon 331
[  694.539367][T25336] total_workingset_refault_file 0
[  694.544414][T25336] total_swap 200704
[  694.548240][T25336] total_swapcached 16384
[  694.552599][T25336] total_pgpgin 1242102
[  694.556703][T25336] total_pgpgout 1242092
[  694.560950][T25336] total_pgfault 1222281
[  694.565167][T25336] total_pgmajfault 140
[  694.569269][T25336] total_inactive_anon 8192
[  694.573716][T25336] total_active_anon 8192
[  694.577973][T25336] total_inactive_file 0
[  694.582221][T25336] total_active_file 24576
[  694.586567][T25336] total_unevictable 0
[  694.590626][T25336] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.9131,pid=3351,uid=0
[  694.605323][T25336] Memory cgroup out of memory: Killed process 3351 (syz.3.9131) total-vm:93968kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  694.715387][   T29] kauditd_printk_skb: 1008 callbacks suppressed
[  694.715424][   T29] audit: type=1326 audit(2000000635.230:46010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3377 comm="syz.0.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1797bf749 code=0x7ffc0000
[  694.815331][   T29] audit: type=1326 audit(2000000635.260:46011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3377 comm="syz.0.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1797bf749 code=0x7ffc0000
[  694.839062][   T29] audit: type=1326 audit(2000000635.260:46012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3377 comm="syz.0.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe1797bf749 code=0x7ffc0000
[  694.862586][   T29] audit: type=1326 audit(2000000635.260:46013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3377 comm="syz.0.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1797bf749 code=0x7ffc0000
[  694.886868][   T29] audit: type=1326 audit(2000000635.260:46014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3377 comm="syz.0.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1797bf749 code=0x7ffc0000
[  694.910574][   T29] audit: type=1326 audit(2000000635.260:46015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3377 comm="syz.0.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1797bf749 code=0x7ffc0000
[  694.934245][   T29] audit: type=1326 audit(2000000635.260:46016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3377 comm="syz.0.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1797bf749 code=0x7ffc0000
[  694.957816][   T29] audit: type=1326 audit(2000000635.260:46017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3377 comm="syz.0.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1797bf749 code=0x7ffc0000
[  694.981395][   T29] audit: type=1326 audit(2000000635.260:46018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3377 comm="syz.0.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1797bf749 code=0x7ffc0000
[  695.005119][   T29] audit: type=1326 audit(2000000635.260:46019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3377 comm="syz.0.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1797bf749 code=0x7ffc0000
[  695.177509][ T3398] set_capacity_and_notify: 8 callbacks suppressed
[  695.177524][ T3398] loop4: detected capacity change from 0 to 1024
[  695.191203][ T3398] EXT4-fs: inline encryption not supported
[  695.213750][ T3400] hub 2-0:1.0: USB hub found
[  695.228621][ T3400] hub 2-0:1.0: 8 ports detected
[  695.310088][ T3402] loop3: detected capacity change from 0 to 512
[  695.327611][ T3409] loop4: detected capacity change from 0 to 4096
[  695.328216][ T3402] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  695.451283][ T3420] hub 2-0:1.0: USB hub found
[  695.455985][ T3420] hub 2-0:1.0: 8 ports detected
[  695.473322][ T3402] EXT4-fs (loop3): 1 truncate cleaned up
[  695.758451][T30124] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  695.769420][T30124] CPU: 1 UID: 0 PID: 30124 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[  695.769449][T30124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  695.769462][T30124] Call Trace:
[  695.769471][T30124]  <TASK>
[  695.769482][T30124]  __dump_stack+0x1d/0x30
[  695.769567][T30124]  dump_stack_lvl+0x95/0xd0
[  695.769637][T30124]  dump_stack+0x15/0x1b
[  695.769656][T30124]  dump_header+0x81/0x240
[  695.769748][T30124]  oom_kill_process+0x295/0x350
[  695.769780][T30124]  out_of_memory+0x97b/0xb80
[  695.769807][T30124]  try_charge_memcg+0x610/0xa10
[  695.769836][T30124]  charge_memcg+0x51/0xc0
[  695.769928][T30124]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  695.769960][T30124]  __read_swap_cache_async+0x17b/0x2d0
[  695.769997][T30124]  swap_cluster_readahead+0x262/0x3c0
[  695.770036][T30124]  swapin_readahead+0xde/0x820
[  695.770062][T30124]  ? next_uptodate_folio+0x81c/0x890
[  695.770087][T30124]  ? percpu_counter_add_batch+0xb6/0x130
[  695.770111][T30124]  ? __rcu_read_unlock+0x4f/0x70
[  695.770211][T30124]  ? swap_cache_get_folio+0x277/0x280
[  695.770242][T30124]  do_swap_page+0x2b4/0x21e0
[  695.770330][T30124]  ? __pfx_default_wake_function+0x10/0x10
[  695.770445][T30124]  handle_mm_fault+0x9d8/0x2c60
[  695.770484][T30124]  do_user_addr_fault+0x630/0x1080
[  695.770535][T30124]  exc_page_fault+0x62/0xa0
[  695.770560][T30124]  asm_exc_page_fault+0x26/0x30
[  695.770581][T30124] RIP: 0033:0x7fe179695fd7
[  695.770600][T30124] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 39 7c 24
[  695.770620][T30124] RSP: 002b:00007ffdd10df220 EFLAGS: 00010206
[  695.770713][T30124] RAX: 0000001b2f324000 RBX: 0000000000000204 RCX: 00000000000a9ad8
[  695.770728][T30124] RDX: 000000000a7f6487 RSI: 00007ffdd10df2b0 RDI: 000000000000001c
[  695.770742][T30124] RBP: 00007ffdd10df25c R08: 00000000280b96ec R09: 7fffffffffffffff
[  695.770863][T30124] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388
[  695.770878][T30124] R13: 00000000000927c0 R14: 00000000000a9c73 R15: 00007ffdd10df2b0
[  695.770900][T30124]  </TASK>
[  695.770908][T30124] memory: usage 289000kB, limit 307200kB, failcnt 27928
[  695.987689][T30124] memory+swap: usage 800kB, limit 9007199254740988kB, failcnt 0
[  695.995329][T30124] kmem: usage 340kB, limit 9007199254740988kB, failcnt 0
[  696.002361][T30124] Memory cgroup stats for /syz0:
[  696.002787][T30124] cache 0
[  696.010726][T30124] rss 32768
[  696.013875][T30124] shmem 0
[  696.016935][T30124] mapped_file 0
[  696.020494][T30124] dirty 0
[  696.023444][T30124] writeback 0
[  696.026766][T30124] workingset_refault_anon 129
[  696.031493][T30124] workingset_refault_file 3759
[  696.036403][T30124] swap 143360
[  696.039791][T30124] swapcached 65536
[  696.043569][T30124] pgpgin 1394427
[  696.047137][T30124] pgpgout 1394407
[  696.050824][T30124] pgfault 1324158
[  696.054484][T30124] pgmajfault 66
[  696.058159][T30124] inactive_anon 24576
[  696.059477][ T3435] loop3: detected capacity change from 0 to 512
[  696.062354][T30124] active_anon 49152
[  696.062365][T30124] inactive_file 8192
[  696.062372][T30124] active_file 0
[  696.062380][T30124] unevictable 0
[  696.062387][T30124] hierarchical_memory_limit 314572800
[  696.070978][ T3435] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  696.072467][T30124] hierarchical_memsw_limit 9223372036854771712
[  696.085264][ T3435] EXT4-fs (loop3): orphan cleanup on readonly fs
[  696.088744][T30124] total_cache 0
[  696.102145][ T3435] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.9157: Allocating blocks 41-42 which overlap fs metadata
[  696.104094][T30124] total_rss 32768
[  696.110642][ T3435] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.9157: Allocating blocks 41-42 which overlap fs metadata
[  696.113818][T30124] total_shmem 0
[  696.113837][T30124] total_mapped_file 0
[  696.113845][T30124] total_dirty 0
[  696.113852][T30124] total_writeback 0
[  696.113859][T30124] total_workingset_refault_anon 129
[  696.113868][T30124] total_workingset_refault_file 3759
[  696.113877][T30124] total_swap 143360
[  696.113884][T30124] total_swapcached 65536
[  696.113892][T30124] total_pgpgin 1394427
[  696.127870][ T3435] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.9157: Failed to acquire dquot type 1
[  696.131266][T30124] total_pgpgout 1394407
[  696.131279][T30124] total_pgfault 1324158
[  696.145721][ T3435] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, 
[  696.148400][T30124] total_pgmajfault 66
[  696.152421][ T3435] inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  696.152517][ T3435] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.9157: corrupted inode contents
[  696.155908][T30124] total_inactive_anon 24576
[  696.155921][T30124] total_active_anon 49152
[  696.243822][T30124] total_inactive_file 8192
[  696.248266][T30124] total_active_file 0
[  696.252366][T30124] total_unevictable 0
[  696.256356][T30124] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9151,pid=3411,uid=0
[  696.261869][ T3435] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.9157: mark_inode_dirty error
[  696.271372][T30124] Memory cgroup out of memory: Killed process 3411 (syz.0.9151) total-vm:93968kB, anon-rss:1260kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  696.300314][ T3435] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.9157: corrupted inode contents
[  696.319220][ T3435] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.9157: mark_inode_dirty error
[  696.332564][ T3435] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.9157: corrupted inode contents
[  696.344728][ T3435] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  696.353529][ T3435] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.9157: corrupted inode contents
[  696.366221][ T3435] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.9157: mark_inode_dirty error
[  696.387603][ T3435] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  696.398787][ T3435] EXT4-fs (loop3): 1 truncate cleaned up
[  696.409797][ T3443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  696.424264][ T3443] loop4: detected capacity change from 0 to 1024
[  696.433473][ T3443] EXT4-fs: Ignoring removed orlov option
[  696.440880][ T3443] ext4: Unknown parameter 'obj_user'
[  696.472678][ T3443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9158'.
[  696.541756][ T3462] loop7: detected capacity change from 0 to 2048
[  696.574321][ T3469] 9p: Bad value for 'port'
[  696.577777][ T3470] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9169'.
[  696.588507][ T3456] loop3: detected capacity change from 0 to 1024
[  696.595610][ T3456] EXT4-fs: inline encryption not supported
[  696.849821][ T3503] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  696.869028][ T3502] loop3: detected capacity change from 0 to 2048
[  696.987920][ T3511] loop3: detected capacity change from 0 to 2048
[  697.014735][ T3481] loop4: detected capacity change from 0 to 1024
[  697.134004][ T3519] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9186'.
[  697.187656][ T3534] EXT4-fs: Ignoring removed orlov option
[  697.193535][ T3534] ext4: Unknown parameter 'obj_user'
[  697.207472][ T3534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9190'.
[  697.294576][ T3540] EXT4-fs: inline encryption not supported
[  697.552132][ T3564] lo speed is unknown, defaulting to 1000
[  697.589407][ T3567] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14)
[  697.596089][ T3567] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  697.603655][ T3567] vhci_hcd vhci_hcd.0: Device attached
[  697.710745][ T3572] EXT4-fs: Ignoring removed orlov option
[  697.716463][ T3572] ext4: Unknown parameter 'obj_user'
[  697.737346][ T3572] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9204'.
[  697.777793][ T3568] vhci_hcd: connection closed
[  697.778059][ T1853] vhci_hcd vhci_hcd.3: stop threads
[  697.788182][ T1853] vhci_hcd vhci_hcd.3: release socket
[  697.793700][ T1853] vhci_hcd vhci_hcd.3: disconnect device
[  697.799692][T15374] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  697.866315][ T3578] EXT4-fs: inline encryption not supported
[  698.085647][ T3595] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5)
[  698.092332][ T3595] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  698.099867][ T3595] vhci_hcd vhci_hcd.0: Device attached
[  698.142293][ T3596] vhci_hcd: connection closed
[  698.142438][   T12] vhci_hcd vhci_hcd.7: stop threads
[  698.152413][   T12] vhci_hcd vhci_hcd.7: release socket
[  698.157820][   T12] vhci_hcd vhci_hcd.7: disconnect device
[  698.244481][ T3605] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  698.257608][ T3605] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #4: comm syz.4.9213: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 4(0), depth 0(0)
[  698.276741][ T3606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9211'.
[  698.309560][ T3605] EXT4-fs error (device loop4): ext4_quota_enable:7180: comm syz.4.9213: Bad quota inode: 4, type: 1
[  698.333114][ T3605] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  698.352527][ T3605] EXT4-fs (loop4): mount failed
[  698.483617][ T3623] EXT4-fs: Ignoring removed orlov option
[  698.493745][ T3623] ext4: Unknown parameter 'obj_user'
[  698.504224][ T3624] EXT4-fs: inline encryption not supported
[  698.547652][ T3627] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.548365][ T3623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9219'.
[  698.592495][ T3627] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.604376][ T3630] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9221'.
[  698.646777][ T3632] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  698.663169][ T3627] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.686058][ T3632] EXT4-fs (loop4): orphan cleanup on readonly fs
[  698.693221][ T3632] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.9222: Allocating blocks 41-42 which overlap fs metadata
[  698.707427][ T3632] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.9222: Allocating blocks 41-42 which overlap fs metadata
[  698.722010][ T3632] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.9222: Failed to acquire dquot type 1
[  698.735127][ T3632] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  698.750022][ T3632] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.9222: corrupted inode contents
[  698.767981][ T3632] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.9222: mark_inode_dirty error
[  698.779877][ T3632] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.9222: corrupted inode contents
[  698.792450][ T3632] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.9222: mark_inode_dirty error
[  698.804995][ T3627] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.829381][ T3632] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.9222: corrupted inode contents
[  698.850677][ T3639] EXT4-fs: inline encryption not supported
[  698.865224][ T3632] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  698.891744][ T9944] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  698.900297][ T3632] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.9222: corrupted inode contents
[  698.912538][ T3637] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  698.919120][ T3632] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.9222: mark_inode_dirty error
[  698.940423][ T3632] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  698.953015][ T9944] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  698.963112][ T3632] EXT4-fs (loop4): 1 truncate cleaned up
[  698.968310][ T1853] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  699.004640][ T1853] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  699.037335][ T3637] EXT4-fs (loop3): 1 truncate cleaned up
[  699.047220][ T3646] EXT4-fs: inline encryption not supported
[  699.079407][ T3644] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9227'.
[  699.094982][ T3653] EXT4-fs: inline encryption not supported
[  699.216542][ T3666] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  699.248633][ T3665] EXT4-fs: inline encryption not supported
[  699.388311][ T3694] program syz.7.9235 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  699.449987][ T3703] EXT4-fs: Ignoring removed orlov option
[  699.455764][ T3703] ext4: Unknown parameter 'obj_user'
[  699.466629][ T3703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9237'.
[  699.594294][ T3714] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  699.634625][ T3714] EXT4-fs (loop3): 1 truncate cleaned up
[  699.705603][ T3739] EXT4-fs: inline encryption not supported
[  699.720926][   T29] kauditd_printk_skb: 1119 callbacks suppressed
[  699.720945][   T29] audit: type=1326 audit(2000000640.240:47131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.3.9239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65068adf90 code=0x7ffc0000
[  699.751604][   T29] audit: type=1326 audit(2000000640.250:47132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.3.9239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f65068ae497 code=0x7ffc0000
[  699.775050][   T29] audit: type=1326 audit(2000000640.250:47133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.3.9239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65068adf90 code=0x7ffc0000
[  699.798790][   T29] audit: type=1326 audit(2000000640.250:47134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.3.9239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65068af749 code=0x7ffc0000
[  699.822417][   T29] audit: type=1326 audit(2000000640.250:47135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.3.9239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65068af749 code=0x7ffc0000
[  699.846170][   T29] audit: type=1326 audit(2000000640.250:47136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.3.9239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65068af749 code=0x7ffc0000
[  699.869804][   T29] audit: type=1326 audit(2000000640.250:47137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.3.9239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65068af749 code=0x7ffc0000
[  699.893391][   T29] audit: type=1326 audit(2000000640.250:47138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.3.9239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f65068af749 code=0x7ffc0000
[  699.916973][   T29] audit: type=1326 audit(2000000640.250:47139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.3.9239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65068af749 code=0x7ffc0000
[  699.940944][   T29] audit: type=1326 audit(2000000640.250:47140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.3.9239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f65068af749 code=0x7ffc0000
[  700.200250][ T3802] set_capacity_and_notify: 19 callbacks suppressed
[  700.200266][ T3802] loop3: detected capacity change from 0 to 1024
[  700.215291][ T3802] EXT4-fs: Ignoring removed orlov option
[  700.223305][ T3802] ext4: Unknown parameter 'obj_user'
[  700.234806][ T3814] FAULT_INJECTION: forcing a failure.
[  700.234806][ T3814] name failslab, interval 1, probability 0, space 0, times 0
[  700.247521][ T3814] CPU: 0 UID: 0 PID: 3814 Comm: syz.4.9250 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  700.247549][ T3814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  700.247621][ T3814] Call Trace:
[  700.247630][ T3814]  <TASK>
[  700.247640][ T3814]  __dump_stack+0x1d/0x30
[  700.247701][ T3814]  dump_stack_lvl+0x95/0xd0
[  700.247721][ T3814]  dump_stack+0x15/0x1b
[  700.247739][ T3814]  should_fail_ex+0x265/0x280
[  700.247761][ T3814]  should_failslab+0x8c/0xb0
[  700.247782][ T3814]  kmem_cache_alloc_noprof+0x69/0x4b0
[  700.247819][ T3814]  ? dup_fd+0x3a/0x510
[  700.247867][ T3814]  dup_fd+0x3a/0x510
[  700.247885][ T3814]  ? _raw_spin_unlock+0x26/0x50
[  700.247907][ T3814]  ksys_unshare+0x346/0x6d0
[  700.247987][ T3814]  ? ksys_write+0x192/0x1a0
[  700.248134][ T3814]  __x64_sys_unshare+0x1f/0x30
[  700.248155][ T3814]  x64_sys_call+0x2ae6/0x3000
[  700.248178][ T3814]  do_syscall_64+0xca/0x2b0
[  700.248262][ T3814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.248284][ T3814] RIP: 0033:0x7f0c9820f749
[  700.248300][ T3814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  700.248317][ T3814] RSP: 002b:00007f0c96c77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  700.248336][ T3814] RAX: ffffffffffffffda RBX: 00007f0c98465fa0 RCX: 00007f0c9820f749
[  700.248348][ T3814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020040600
[  700.248395][ T3814] RBP: 00007f0c96c77090 R08: 0000000000000000 R09: 0000000000000000
[  700.248406][ T3814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  700.248418][ T3814] R13: 00007f0c98466038 R14: 00007f0c98465fa0 R15: 00007ffca60337e8
[  700.248435][ T3814]  </TASK>
[  700.426215][ T3812] loop7: detected capacity change from 0 to 1024
[  700.440502][ T3812] EXT4-fs: inline encryption not supported
[  700.493189][ T3802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9244'.
[  700.507365][ T3825] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9255'.
[  700.738794][ T3830] tipc: Started in network mode
[  700.743825][ T3830] tipc: Node identity 4, cluster identity 4711
[  700.750053][ T3830] tipc: Node number set to 4
[  700.849868][ T3844] netlink: 7 bytes leftover after parsing attributes in process `syz.7.9257'.
[  700.872429][ T3848] loop3: detected capacity change from 0 to 1024
[  700.880478][ T3848] EXT4-fs: Ignoring removed orlov option
[  700.887972][ T3848] ext4: Unknown parameter 'obj_user'
[  700.895213][ T3851] netdevsim netdevsim7: Direct firmware load for ./file1 failed with error -2
[  700.907774][ T3848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9263'.
[  700.957423][ T3846] netlink: 'syz.0.9262': attribute type 1 has an invalid length.
[  700.965267][ T3846] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9262'.
[  701.035867][ T3870] loop3: detected capacity change from 0 to 1024
[  701.044122][ T3870] EXT4-fs: inline encryption not supported
[  701.139669][ T3883] netlink: 'syz.7.9277': attribute type 39 has an invalid length.
[  701.169255][ T3885] vlan2: entered allmulticast mode
[  701.401910][ T3896] netlink: 'syz.7.9282': attribute type 1 has an invalid length.
[  701.546317][ T3918] loop7: detected capacity change from 0 to 1024
[  701.553234][ T3918] EXT4-fs: inline encryption not supported
[  701.582197][ T3918] EXT4-fs mount: 87 callbacks suppressed
[  701.582254][ T3918] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  701.632548][ T3925] netdevsim netdevsim3: Direct firmware load for ./file1 failed with error -2
[  701.699377][T26190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  701.781247][ T3931] netlink: 'syz.3.9296': attribute type 1 has an invalid length.
[  701.917085][ T3953] loop7: detected capacity change from 0 to 1024
[  701.951868][T24390] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  701.963053][T24390] CPU: 0 UID: 0 PID: 24390 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[  701.963132][T24390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  701.963144][T24390] Call Trace:
[  701.963152][T24390]  <TASK>
[  701.963161][T24390]  __dump_stack+0x1d/0x30
[  701.963190][T24390]  dump_stack_lvl+0x95/0xd0
[  701.963215][T24390]  dump_stack+0x15/0x1b
[  701.963237][T24390]  dump_header+0x81/0x240
[  701.963278][T24390]  oom_kill_process+0x295/0x350
[  701.963315][T24390]  out_of_memory+0x97b/0xb80
[  701.963462][T24390]  try_charge_memcg+0x610/0xa10
[  701.963490][T24390]  charge_memcg+0x51/0xc0
[  701.963517][T24390]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  701.963562][T24390]  __read_swap_cache_async+0x17b/0x2d0
[  701.963646][T24390]  swap_cluster_readahead+0x262/0x3c0
[  701.963713][T24390]  swapin_readahead+0xde/0x820
[  701.963747][T24390]  ? perf_iterate_sb+0x62a/0x650
[  701.963841][T24390]  ? __pfx_perf_event_switch_output+0x10/0x10
[  701.963877][T24390]  ? __perf_event_task_sched_in+0xa5b/0xac0
[  701.963902][T24390]  ? __rcu_read_unlock+0x4f/0x70
[  701.963942][T24390]  ? __rcu_read_unlock+0x4f/0x70
[  701.963962][T24390]  ? __rcu_read_unlock+0x4f/0x70
[  701.963986][T24390]  ? swap_cache_get_folio+0x277/0x280
[  701.964022][T24390]  do_swap_page+0x2b4/0x21e0
[  701.964092][T24390]  ? _raw_spin_unlock+0x26/0x50
[  701.964115][T24390]  ? __schedule+0x85f/0xcd0
[  701.964137][T24390]  ? __pfx_default_wake_function+0x10/0x10
[  701.964209][T24390]  handle_mm_fault+0x9d8/0x2c60
[  701.964279][T24390]  do_user_addr_fault+0x630/0x1080
[  701.964315][T24390]  exc_page_fault+0x62/0xa0
[  701.964354][T24390]  asm_exc_page_fault+0x26/0x30
[  701.964383][T24390] RIP: 0033:0x7f0c98241fc5
[  701.964402][T24390] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[  701.964420][T24390] RSP: 002b:00007ffca6033b28 EFLAGS: 00010246
[  701.964437][T24390] RAX: 0000000000000000 RBX: 00000000000004cb RCX: 00007f0c98241fc3
[  701.964450][T24390] RDX: 00007ffca6033b40 RSI: 0000000000000000 RDI: 0000000000000000
[  701.964462][T24390] RBP: 00007ffca6033bac R08: 0000000033d3390f R09: 0000000000000000
[  701.964500][T24390] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  701.964516][T24390] R13: 00000000000927c0 R14: 00000000000ab568 R15: 00007ffca6033c00
[  701.964547][T24390]  </TASK>
[  701.964556][T24390] memory: usage 307200kB, limit 307200kB, failcnt 7405
[  701.972239][ T3953] EXT4-fs: inline encryption not supported
[  701.974705][T24390] memory+swap: usage 307360kB, limit 9007199254740988kB, failcnt 0
[  702.222788][T24390] kmem: usage 86364kB, limit 9007199254740988kB, failcnt 0
[  702.230085][T24390] Memory cgroup stats for /syz4:
[  702.231057][T24390] cache 0
[  702.238992][T24390] rss 28672
[  702.242117][T24390] shmem 0
[  702.245354][T24390] mapped_file 0
[  702.248960][T24390] dirty 0
[  702.251913][T24390] writeback 28672
[  702.255620][T24390] workingset_refault_anon 138
[  702.260384][T24390] workingset_refault_file 1180
[  702.265172][T24390] swap 163840
[  702.268470][T24390] swapcached 49152
[  702.272313][T24390] pgpgin 1234331
[  702.275929][T24390] pgpgout 1234310
[  702.279612][T24390] pgfault 1193576
[  702.283249][T24390] pgmajfault 80
[  702.286719][T24390] inactive_anon 28672
[  702.290744][T24390] active_anon 20480
[  702.294659][T24390] inactive_file 0
[  702.298296][T24390] active_file 36864
[  702.302173][T24390] unevictable 0
[  702.305648][T24390] hierarchical_memory_limit 314572800
[  702.311050][T24390] hierarchical_memsw_limit 9223372036854771712
[  702.317297][T24390] total_cache 0
[  702.320843][T24390] total_rss 28672
[  702.324490][T24390] total_shmem 0
[  702.328020][T24390] total_mapped_file 0
[  702.332047][T24390] total_dirty 0
[  702.335525][T24390] total_writeback 28672
[  702.339744][T24390] total_workingset_refault_anon 138
[  702.344955][T24390] total_workingset_refault_file 1180
[  702.350317][T24390] total_swap 163840
[  702.354150][T24390] total_swapcached 49152
[  702.358403][T24390] total_pgpgin 1234331
[  702.362532][T24390] total_pgpgout 1234310
[  702.366704][T24390] total_pgfault 1193576
[  702.371242][T24390] total_pgmajfault 80
[  702.375404][T24390] total_inactive_anon 28672
[  702.379982][T24390] total_active_anon 20480
[  702.384399][T24390] total_inactive_file 0
[  702.388563][T24390] total_active_file 36864
[  702.392989][T24390] total_unevictable 0
[  702.397156][T24390] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.9299,pid=3936,uid=0
[  702.411875][T24390] Memory cgroup out of memory: Killed process 3936 (syz.4.9299) total-vm:96016kB, anon-rss:1136kB, file-rss:22572kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  702.439332][ T3953] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  702.530985][T26190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  702.557663][ T3995] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  702.683414][ T3997] netlink: 'syz.0.9311': attribute type 1 has an invalid length.
[  702.885325][ T4061] netdevsim netdevsim0: Direct firmware load for ./file1 failed with error -2
[  702.962851][ T4009] loop7: detected capacity change from 0 to 512
[  703.008464][ T4009] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  703.044039][ T4009] EXT4-fs (loop7): 1 truncate cleaned up
[  703.053806][ T4085] loop3: detected capacity change from 0 to 1024
[  703.054131][ T4085] EXT4-fs: inline encryption not supported
[  703.070442][ T4085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  703.138227][ T4009] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  703.190090][T25336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  703.266666][T26190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  703.297485][ T4098] __nla_validate_parse: 6 callbacks suppressed
[  703.297505][ T4098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9321'.
[  703.420028][ T4113] loop7: detected capacity change from 0 to 512
[  703.435778][ T4113] EXT4-fs (loop7): 1 truncate cleaned up
[  703.442195][ T4113] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  703.541045][ T4123] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  703.586445][ T4128] netlink: 'syz.1.9333': attribute type 13 has an invalid length.
[  703.615555][ T4128] bridge0: port 2(bridge_slave_1) entered disabled state
[  703.622837][ T4128] bridge0: port 1(bridge_slave_0) entered disabled state
[  703.694047][ T4128] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  703.704237][ T4128] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  703.731820][ T4134] hub 2-0:1.0: USB hub found
[  703.736999][ T4134] hub 2-0:1.0: 8 ports detected
[  703.744254][ T1836] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  703.753463][ T1836] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  703.762401][ T1836] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  703.775590][ T1836] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  703.915735][ T4140] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  704.288730][T26190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  704.329498][ T4160] program syz.7.9346 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  704.368117][T24390] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  704.379185][T24390] CPU: 0 UID: 0 PID: 24390 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[  704.379220][T24390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  704.379302][T24390] Call Trace:
[  704.379311][T24390]  <TASK>
[  704.379322][T24390]  __dump_stack+0x1d/0x30
[  704.379353][T24390]  dump_stack_lvl+0x95/0xd0
[  704.379377][T24390]  dump_stack+0x15/0x1b
[  704.379402][T24390]  dump_header+0x81/0x240
[  704.379427][T24390]  oom_kill_process+0x295/0x350
[  704.379527][T24390]  out_of_memory+0x97b/0xb80
[  704.379565][T24390]  try_charge_memcg+0x610/0xa10
[  704.379594][T24390]  charge_memcg+0x51/0xc0
[  704.379756][T24390]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  704.379787][T24390]  __read_swap_cache_async+0x17b/0x2d0
[  704.379895][T24390]  swap_cluster_readahead+0x262/0x3c0
[  704.379927][T24390]  swapin_readahead+0xde/0x820
[  704.379952][T24390]  ? kvm_sched_clock_read+0x11/0x20
[  704.380014][T24390]  ? sched_clock+0x3f/0x60
[  704.380041][T24390]  ? __rcu_read_unlock+0x4f/0x70
[  704.380062][T24390]  ? __perf_event_task_sched_in+0xa5b/0xac0
[  704.380084][T24390]  ? __list_add_valid_or_report+0x38/0xe0
[  704.380124][T24390]  ? __rcu_read_unlock+0x4f/0x70
[  704.380206][T24390]  ? swap_cache_get_folio+0x277/0x280
[  704.380257][T24390]  do_swap_page+0x2b4/0x21e0
[  704.380282][T24390]  ? _raw_spin_unlock+0x26/0x50
[  704.380359][T24390]  ? __schedule+0x85f/0xcd0
[  704.380384][T24390]  ? __pfx_default_wake_function+0x10/0x10
[  704.380431][T24390]  handle_mm_fault+0x9d8/0x2c60
[  704.380521][T24390]  do_user_addr_fault+0x630/0x1080
[  704.380558][T24390]  exc_page_fault+0x62/0xa0
[  704.380662][T24390]  asm_exc_page_fault+0x26/0x30
[  704.380688][T24390] RIP: 0033:0x7f0c98241fc5
[  704.380708][T24390] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[  704.380791][T24390] RSP: 002b:00007ffca6033b28 EFLAGS: 00010246
[  704.380810][T24390] RAX: 0000000000000000 RBX: 00000000000004d4 RCX: 00007f0c98241fc3
[  704.380848][T24390] RDX: 00007ffca6033b40 RSI: 0000000000000000 RDI: 0000000000000000
[  704.380864][T24390] RBP: 00007ffca6033bac R08: 0000000010301a12 R09: 0000000000000000
[  704.380904][T24390] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  704.380920][T24390] R13: 00000000000927c0 R14: 00000000000abf0f R15: 00007ffca6033c00
[  704.380942][T24390]  </TASK>
[  704.380951][T24390] memory: usage 307200kB, limit 307200kB, failcnt 7617
[  704.623521][T24390] memory+swap: usage 1304kB, limit 9007199254740988kB, failcnt 0
[  704.631393][T24390] kmem: usage 944kB, limit 9007199254740988kB, failcnt 0
[  704.638842][T24390] Memory cgroup stats for /syz4:
[  704.646990][T24390] cache 0
[  704.655092][T24390] rss 45056
[  704.658267][T24390] shmem 0
[  704.661273][T24390] mapped_file 0
[  704.664866][T24390] dirty 0
[  704.667908][T24390] writeback 0
[  704.671297][T24390] workingset_refault_anon 189
[  704.676079][T24390] workingset_refault_file 1180
[  704.680888][T24390] swap 126976
[  704.684192][T24390] swapcached 61440
[  704.688010][T24390] pgpgin 1234496
[  704.691786][T24390] pgpgout 1234467
[  704.695494][T24390] pgfault 1193920
[  704.699247][T24390] pgmajfault 103
[  704.702895][T24390] inactive_anon 12288
[  704.706890][T24390] active_anon 69632
[  704.710787][T24390] inactive_file 36864
[  704.714786][T24390] active_file 0
[  704.718250][T24390] unevictable 0
[  704.721786][T24390] hierarchical_memory_limit 314572800
[  704.727176][T24390] hierarchical_memsw_limit 9223372036854771712
[  704.733449][T24390] total_cache 0
[  704.736988][T24390] total_rss 45056
[  704.740668][T24390] total_shmem 0
[  704.744206][T24390] total_mapped_file 0
[  704.748224][T24390] total_dirty 0
[  704.751755][T24390] total_writeback 0
[  704.755576][T24390] total_workingset_refault_anon 189
[  704.760881][T24390] total_workingset_refault_file 1180
[  704.766258][T24390] total_swap 126976
[  704.770112][T24390] total_swapcached 61440
[  704.774517][T24390] total_pgpgin 1234496
[  704.778592][T24390] total_pgpgout 1234467
[  704.782769][T24390] total_pgfault 1193920
[  704.786940][T24390] total_pgmajfault 103
[  704.791220][T24390] total_inactive_anon 12288
[  704.795737][T24390] total_active_anon 69632
[  704.800244][T24390] total_inactive_file 36864
[  704.804777][T24390] total_active_file 0
[  704.808790][T24390] total_unevictable 0
[  704.812921][T24390] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.9344,pid=4153,uid=0
[  704.827584][T24390] Memory cgroup out of memory: Killed process 4153 (syz.4.9344) total-vm:93968kB, anon-rss:1132kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  704.874586][ T4176] program syz.1.9353 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  704.894421][   T29] kauditd_printk_skb: 793 callbacks suppressed
[  704.894438][   T29] audit: type=1326 audit(2000000645.400:47934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.4.9352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9820f749 code=0x7ffc0000
[  704.903327][ T4180] program syz.4.9355 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  704.924739][   T29] audit: type=1326 audit(2000000645.400:47935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.4.9352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9820f749 code=0x7ffc0000
[  704.957939][   T29] audit: type=1326 audit(2000000645.400:47936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.4.9352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f0c9820f749 code=0x7ffc0000
[  704.981826][   T29] audit: type=1326 audit(2000000645.400:47937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.4.9352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9820f749 code=0x7ffc0000
[  705.050447][ T4183] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  705.057069][ T4183] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  705.064547][ T4183] vhci_hcd vhci_hcd.0: Device attached
[  705.071488][ T4187] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9357'.
[  705.087279][ T4184] vhci_hcd: connection closed
[  705.094417][ T1825] vhci_hcd vhci_hcd.3: stop threads
[  705.104527][ T1825] vhci_hcd vhci_hcd.3: release socket
[  705.110183][ T1825] vhci_hcd vhci_hcd.3: disconnect device
[  705.118212][   T29] audit: type=1326 audit(2000000645.600:47938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4189 comm="syz.7.9360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a20f749 code=0x7ffc0000
[  705.141848][   T29] audit: type=1326 audit(2000000645.600:47939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4189 comm="syz.7.9360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a20f749 code=0x7ffc0000
[  705.165694][   T29] audit: type=1326 audit(2000000645.600:47940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4189 comm="syz.7.9360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fb30a20f749 code=0x7ffc0000
[  705.189211][   T29] audit: type=1326 audit(2000000645.600:47941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4189 comm="syz.7.9360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a20f749 code=0x7ffc0000
[  705.214066][ T4195] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9361'.
[  705.223921][   T29] audit: type=1326 audit(2000000645.740:47942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.4.9357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9820f749 code=0x7ffc0000
[  705.267951][   T29] audit: type=1326 audit(2000000645.740:47943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.4.9357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9820f749 code=0x7ffc0000
[  705.333574][ T4193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9359'.
[  705.346496][ T4193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9359'.
[  705.357975][ T4201] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  705.461815][T24390] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  705.472933][T24390] CPU: 0 UID: 0 PID: 24390 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[  705.472967][T24390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  705.472984][T24390] Call Trace:
[  705.472993][T24390]  <TASK>
[  705.473003][T24390]  __dump_stack+0x1d/0x30
[  705.473029][T24390]  dump_stack_lvl+0x95/0xd0
[  705.473050][T24390]  dump_stack+0x15/0x1b
[  705.473138][T24390]  dump_header+0x81/0x240
[  705.473160][T24390]  oom_kill_process+0x295/0x350
[  705.473272][T24390]  out_of_memory+0x97b/0xb80
[  705.473300][T24390]  try_charge_memcg+0x610/0xa10
[  705.473330][T24390]  charge_memcg+0x51/0xc0
[  705.473420][T24390]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  705.473461][T24390]  __read_swap_cache_async+0x17b/0x2d0
[  705.473494][T24390]  swap_cluster_readahead+0x262/0x3c0
[  705.473643][T24390]  swapin_readahead+0xde/0x820
[  705.473673][T24390]  ? update_load_avg+0x1da/0x820
[  705.473694][T24390]  ? __list_add_valid_or_report+0x38/0xe0
[  705.473746][T24390]  ? __rcu_read_unlock+0x4f/0x70
[  705.473770][T24390]  ? swap_cache_get_folio+0x277/0x280
[  705.473818][T24390]  do_swap_page+0x2b4/0x21e0
[  705.473846][T24390]  ? _raw_spin_unlock+0x26/0x50
[  705.473869][T24390]  ? __schedule+0x85f/0xcd0
[  705.473891][T24390]  ? __pfx_default_wake_function+0x10/0x10
[  705.473956][T24390]  handle_mm_fault+0x9d8/0x2c60
[  705.473991][T24390]  do_user_addr_fault+0x630/0x1080
[  705.474044][T24390]  exc_page_fault+0x62/0xa0
[  705.474094][T24390]  asm_exc_page_fault+0x26/0x30
[  705.474119][T24390] RIP: 0033:0x7f0c98241fc5
[  705.474140][T24390] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[  705.474160][T24390] RSP: 002b:00007ffca6033b28 EFLAGS: 00010246
[  705.474180][T24390] RAX: 0000000000000000 RBX: 00000000000004de RCX: 00007f0c98241fc3
[  705.474196][T24390] RDX: 00007ffca6033b40 RSI: 0000000000000000 RDI: 0000000000000000
[  705.474298][T24390] RBP: 00007ffca6033bac R08: 0000000017b56942 R09: 0000000000000000
[  705.474311][T24390] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  705.474326][T24390] R13: 00000000000927c0 R14: 00000000000ac32f R15: 00007ffca6033c00
[  705.474388][T24390]  </TASK>
[  705.474397][T24390] memory: usage 307200kB, limit 307200kB, failcnt 7768
[  705.700680][T24390] memory+swap: usage 252456kB, limit 9007199254740988kB, failcnt 0
[  705.708618][T24390] kmem: usage 246992kB, limit 9007199254740988kB, failcnt 0
[  705.716005][T24390] Memory cgroup stats for /syz4:
[  705.720235][T24390] cache 0
[  705.728347][T24390] rss 8192
[  705.731421][T24390] shmem 0
[  705.734368][T24390] mapped_file 0
[  705.737832][T24390] dirty 0
[  705.740842][T24390] writeback 0
[  705.744228][T24390] workingset_refault_anon 206
[  705.748955][T24390] workingset_refault_file 1180
[  705.753727][T24390] swap 94208
[  705.756983][T24390] swapcached 20480
[  705.760754][T24390] pgpgin 1234638
[  705.764335][T24390] pgpgout 1234623
[  705.768071][T24390] pgfault 1194272
[  705.771802][T24390] pgmajfault 116
[  705.775354][T24390] inactive_anon 0
[  705.779026][T24390] active_anon 24576
[  705.782846][T24390] inactive_file 0
[  705.786487][T24390] active_file 36864
[  705.790338][T24390] unevictable 0
[  705.793906][T24390] hierarchical_memory_limit 314572800
[  705.799324][T24390] hierarchical_memsw_limit 9223372036854771712
[  705.805494][T24390] total_cache 0
[  705.808998][T24390] total_rss 8192
[  705.812575][T24390] total_shmem 0
[  705.816038][T24390] total_mapped_file 0
[  705.820053][T24390] total_dirty 0
[  705.823517][T24390] total_writeback 0
[  705.827383][T24390] total_workingset_refault_anon 206
[  705.832603][T24390] total_workingset_refault_file 1180
[  705.837943][T24390] total_swap 94208
[  705.841692][T24390] total_swapcached 20480
[  705.845946][T24390] total_pgpgin 1234638
[  705.850283][T24390] total_pgpgout 1234623
[  705.854443][T24390] total_pgfault 1194272
[  705.858599][T24390] total_pgmajfault 116
[  705.862718][T24390] total_inactive_anon 0
[  705.866877][T24390] total_active_anon 24576
[  705.871234][T24390] total_inactive_file 0
[  705.875464][T24390] total_active_file 36864
[  705.879840][T24390] total_unevictable 0
[  705.883832][T24390] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.9363,pid=4200,uid=0
[  705.898553][T24390] Memory cgroup out of memory: Killed process 4200 (syz.4.9363) total-vm:93968kB, anon-rss:1116kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000
[  706.097547][ T4214] program syz.1.9368 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  706.198022][ T4219] netdevsim netdevsim3: Direct firmware load for ./file1 failed with error -2
[  706.258699][ T4218] loop7: detected capacity change from 0 to 1024
[  706.328425][ T4218] EXT4-fs: inline encryption not supported
[  706.428292][ T4218] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  706.462668][ T4224] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9372'.
[  706.580875][T26190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  706.596211][ T4233] netdevsim netdevsim0: Direct firmware load for ./file1 failed with error -2
[  706.661596][ T4225] lo speed is unknown, defaulting to 1000
[  706.825142][ T4225] chnl_net:caif_netlink_parms(): no params data found
[  706.852063][ T4269] netdevsim netdevsim0: Direct firmware load for ./file1 failed with error -2
[  706.927678][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state
[  706.934912][ T4225] bridge0: port 1(bridge_slave_0) entered disabled state
[  706.956905][ T4225] bridge_slave_0: entered allmulticast mode
[  706.965327][ T4225] bridge_slave_0: entered promiscuous mode
[  706.970754][ T4288] loop3: detected capacity change from 0 to 1024
[  706.978519][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state
[  706.980970][ T4288] EXT4-fs: Ignoring removed orlov option
[  706.985638][ T4225] bridge0: port 2(bridge_slave_1) entered disabled state
[  706.992466][ T4288] ext4: Unknown parameter 'obj_user'
[  706.999772][ T4225] bridge_slave_1: entered allmulticast mode
[  707.010657][ T4225] bridge_slave_1: entered promiscuous mode
[  707.027360][ T4288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9383'.
[  707.051115][ T4225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  707.064050][ T4225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  707.088344][ T4225] team0: Port device team_slave_0 added
[  707.095408][ T4225] team0: Port device team_slave_1 added
[  707.116370][ T4299] netdevsim netdevsim3: Direct firmware load for ./file1 failed with error -2
[  707.126093][ T4225] batman_adv: batadv0: Adding interface: batadv_slave_0
[  707.133143][ T4225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  707.159209][ T4225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  707.171371][ T4225] batman_adv: batadv0: Adding interface: batadv_slave_1
[  707.178347][ T4225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  707.204853][ T4225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  707.235738][ T4316] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9385'.
[  707.287668][ T4225] hsr_slave_0: entered promiscuous mode
[  707.296136][ T4225] hsr_slave_1: entered promiscuous mode
[  707.430063][ T1825] bridge_slave_1: left allmulticast mode
[  707.435774][ T1825] bridge_slave_1: left promiscuous mode
[  707.441569][ T1825] bridge0: port 2(bridge_slave_1) entered disabled state
[  707.449966][ T1825] bridge_slave_0: left allmulticast mode
[  707.455747][ T1825] bridge_slave_0: left promiscuous mode
[  707.461733][ T1825] bridge0: port 1(bridge_slave_0) entered disabled state
[  707.562329][ T1825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  707.587709][ T1825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  707.607269][ T1825] bond0 (unregistering): Released all slaves
[  707.654798][ T4382] loop4: detected capacity change from 0 to 1024
[  707.674418][ T4382] EXT4-fs: Ignoring removed orlov option
[  707.686975][ T4382] ext4: Unknown parameter 'obj_user'
[  707.701952][ T4382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9388'.
[  707.764208][ T1825] hsr_slave_0: left promiscuous mode
[  707.781081][ T1825] hsr_slave_1: left promiscuous mode
[  707.787590][ T1825] batman_adv: batadv0: Removing interface: batadv_slave_0
[  707.805927][ T1825] batman_adv: batadv0: Removing interface: batadv_slave_1
[  707.822091][ T4389] loop3: detected capacity change from 0 to 512
[  707.840296][ T4400] loop7: detected capacity change from 0 to 1024
[  707.847439][ T4400] EXT4-fs: inline encryption not supported
[  707.862017][ T4389] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  707.882728][ T4400] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  707.907380][ T4389] EXT4-fs (loop3): 1 truncate cleaned up
[  707.920636][ T1825] team0 (unregistering): Port device team_slave_1 removed
[  707.932429][T26190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  707.943924][ T1825] team0 (unregistering): Port device team_slave_0 removed
[  707.945471][ T4389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  708.007672][ T4398] netdevsim netdevsim4: Direct firmware load for ./file1 failed with error -2
[  708.039236][ T4225] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  708.048630][ T4225] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  708.056561][T25336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  708.057728][ T4225] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  708.094691][ T4225] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  708.122034][ T4416] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9396'.
[  708.166687][ T4225] 8021q: adding VLAN 0 to HW filter on device bond0
[  708.178501][ T4225] 8021q: adding VLAN 0 to HW filter on device team0
[  708.198700][ T2360] bridge0: port 1(bridge_slave_0) entered blocking state
[  708.205824][ T2360] bridge0: port 1(bridge_slave_0) entered forwarding state
[  708.223891][ T2360] bridge0: port 2(bridge_slave_1) entered blocking state
[  708.231142][ T2360] bridge0: port 2(bridge_slave_1) entered forwarding state
[  708.253308][ T4427] loop4: detected capacity change from 0 to 1024
[  708.253749][ T4225] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  708.270393][ T4225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  708.279279][ T4427] EXT4-fs: Ignoring removed orlov option
[  708.297720][ T4427] ext4: Unknown parameter 'obj_user'
[  708.330323][ T4427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9401'.
[  708.375155][ T4225] 8021q: adding VLAN 0 to HW filter on device batadv0
[  708.386876][ T4441] loop3: detected capacity change from 0 to 1024
[  708.402231][ T4441] EXT4-fs: inline encryption not supported
[  708.411051][ T4439] hub 2-0:1.0: USB hub found
[  708.415802][ T4439] hub 2-0:1.0: 8 ports detected
[  708.436167][ T4446] program syz.4.9406 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  708.450367][ T4441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  708.481193][ T4225] veth0_vlan: entered promiscuous mode
[  708.497459][T25336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  708.499773][ T4225] veth1_vlan: entered promiscuous mode
[  708.526991][ T4225] veth0_macvtap: entered promiscuous mode
[  708.557665][ T4458] netdevsim netdevsim4: Direct firmware load for ./file1 failed with error -2
[  708.567937][ T4225] veth1_macvtap: entered promiscuous mode
[  708.588093][ T4225] batman_adv: batadv0: Interface activated: batadv_slave_0
[  708.600334][ T4225] batman_adv: batadv0: Interface activated: batadv_slave_1
[  708.617913][ T2360] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  708.640106][ T2360] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  708.655703][ T2360] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  708.670775][ T4461] loop3: detected capacity change from 0 to 512
[  708.671202][ T2360] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  708.701428][ T4461] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  708.734333][ T4461] EXT4-fs (loop3): 1 truncate cleaned up
[  708.751695][ T4461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  708.780589][ T4473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9412'.
[  708.824385][T25336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  708.842586][ T4478] loop4: detected capacity change from 0 to 512
[  708.855479][ T4478] EXT4-fs (loop4): 1 truncate cleaned up
[  708.861836][ T4478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  708.983818][ T4482] netlink: 'syz.3.9414': attribute type 1 has an invalid length.
[  708.991846][ T4482] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9414'.
[  709.102589][ T4498] netdevsim netdevsim1: Direct firmware load for ./file1 failed with error -2
[  709.112489][ T4500] loop7: detected capacity change from 0 to 1024
[  709.124294][ T4500] EXT4-fs: Ignoring removed orlov option
[  709.134177][ T4500] ext4: Unknown parameter 'obj_user'
[  709.161641][ T4500] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9422'.
[  709.201848][ T4504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9424'.
[  709.332778][ T4512] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  709.376783][T26190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  709.538456][ T4518] netlink: 'syz.7.9429': attribute type 1 has an invalid length.
[  709.546414][ T4518] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9429'.
[  709.583655][ T4493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  709.599789][ T4533] program syz.1.9433 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  709.612489][ T4493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  709.757761][T24390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  709.802133][ T4541] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9436'.
[  709.874287][ T4543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  709.887112][ T4543] ext4 filesystem being mounted at /487/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  709.899734][   T29] kauditd_printk_skb: 853 callbacks suppressed
[  709.899753][   T29] audit: type=1400 audit(2000000650.420:48797): avc:  denied  { create } for  pid=4542 comm="syz.4.9438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  709.900645][ T4543] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.9438: corrupted xattr block 6: invalid header
[  709.906243][   T29] audit: type=1400 audit(2000000650.420:48798): avc:  denied  { setopt } for  pid=4542 comm="syz.4.9438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  709.959943][ T4543] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=12
[  710.014179][T24390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  710.087177][ T4549] EXT4-fs (loop4): 1 truncate cleaned up
[  710.102176][   T29] audit: type=1400 audit(2000000650.620:48799): avc:  denied  { ioctl } for  pid=4538 comm="syz.3.9437" path="socket:[101406]" dev="sockfs" ino=101406 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  710.142627][ T4549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  710.177445][   T29] audit: type=1400 audit(2000000650.650:48800): avc:  denied  { read } for  pid=4538 comm="syz.3.9437" dev="nsfs" ino=4026532367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  710.198952][   T29] audit: type=1400 audit(2000000650.650:48801): avc:  denied  { open } for  pid=4538 comm="syz.3.9437" path="net:[4026532367]" dev="nsfs" ino=4026532367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  710.222354][   T29] audit: type=1400 audit(2000000650.650:48802): avc:  denied  { create } for  pid=4538 comm="syz.3.9437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  710.242729][   T29] audit: type=1400 audit(2000000650.650:48803): avc:  denied  { create } for  pid=4538 comm="syz.3.9437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  710.263329][   T29] audit: type=1400 audit(2000000650.670:48804): avc:  denied  { bind } for  pid=4538 comm="syz.3.9437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  710.283542][   T29] audit: type=1400 audit(2000000650.670:48805): avc:  denied  { bind } for  pid=4538 comm="syz.3.9437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  710.303663][   T29] audit: type=1400 audit(2000000650.670:48806): avc:  denied  { write } for  pid=4538 comm="syz.3.9437" path="socket:[100867]" dev="sockfs" ino=100867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  710.307580][ T4553] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  710.497002][ T4565] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9445'.
[  710.504099][ T4556] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  710.511281][ T4566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9440'.
[  710.538816][ T4556] EXT4-fs (loop7): 1 truncate cleaned up
[  710.557102][ T4556] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  710.608849][T26190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  710.638641][ T4572] EXT4-fs: inline encryption not supported
[  710.653745][ T4572] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  710.667592][ T4575] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  710.698603][T26190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  710.721325][ T4577] netlink: 68 bytes leftover after parsing attributes in process `syz.7.9448'.
[  710.946576][T24390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  711.052672][ T4611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  711.459336][T24390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  711.507569][ T4659] netdevsim netdevsim4: Direct firmware load for ./file1 failed with error -2
[  711.597067][ T4650] netlink: 'syz.3.9453': attribute type 1 has an invalid length.
[  711.782784][ T4708] set_capacity_and_notify: 7 callbacks suppressed
[  711.782804][ T4708] loop3: detected capacity change from 0 to 2048
[  711.816531][ T4708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  711.845384][T25336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  711.856216][ T4721] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  711.954979][ T4663] loop4: detected capacity change from 0 to 1024
[  711.970884][ T4663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  711.983790][ T4663] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  712.382535][ T4775] netlink: 'syz.0.9471': attribute type 1 has an invalid length.
[  712.645844][ T4842] loop4: detected capacity change from 0 to 512
[  712.671246][ T4842] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  712.715743][ T4842] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.9478: Allocating blocks 41-42 which overlap fs metadata
[  712.732156][ T4842] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.9478: Allocating blocks 41-42 which overlap fs metadata
[  712.746863][ T4842] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.9478: Failed to acquire dquot type 1
[  712.780791][ T4842] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  712.839467][ T4842] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.9478: corrupted inode contents
[  712.869338][ T4842] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.9478: mark_inode_dirty error
[  712.902626][ T4842] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.9478: corrupted inode contents
[  712.937071][ T4842] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.9478: mark_inode_dirty error
[  712.971540][ T4842] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.9478: corrupted inode contents
[  713.030088][ T4842] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  713.055590][ T4842] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.9478: corrupted inode contents
[  713.089140][ T4842] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.9478: mark_inode_dirty error
[  713.153425][ T4842] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  713.156740][ T4862] netlink: 'syz.3.9484': attribute type 1 has an invalid length.
[  713.193989][ T4842] EXT4-fs (loop4): 1 truncate cleaned up
[  713.235232][ T4842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  713.352114][T24390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  713.428758][ T4881] __nla_validate_parse: 12 callbacks suppressed
[  713.428773][ T4881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9491'.
[  713.445163][ T4882] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  713.455801][ T4883] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9488'.
[  713.456371][ T4881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9491'.
[  713.500186][ T4878] loop7: detected capacity change from 0 to 512
[  713.520720][ T4878] EXT4-fs (loop7): 1 truncate cleaned up
[  713.531249][ T4878] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  713.610904][ T4896] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  713.643150][ T4887] loop3: detected capacity change from 0 to 512
[  713.671891][ T4887] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  713.763749][ T4887] EXT4-fs (loop3): 1 truncate cleaned up
[  713.805614][ T4887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  713.884330][T25336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  714.129174][ T4942] netlink: 'syz.3.9497': attribute type 1 has an invalid length.
[  714.137082][ T4942] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9497'.
[  714.176983][ T4966] loop3: detected capacity change from 0 to 1024
[  714.195960][ T4966] EXT4-fs: Ignoring removed orlov option
[  714.202145][ T4966] ext4: Unknown parameter 'obj_user'
[  714.226880][ T4966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9499'.
[  714.264157][T26190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  714.344473][ T4999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9500'.
[  714.344680][ T4999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9500'.
[  714.458721][ T5022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9502'.
[  714.458816][ T5022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9502'.
[  714.467658][ T5015] hub 2-0:1.0: USB hub found
[  714.467713][ T5015] hub 2-0:1.0: 8 ports detected
[  714.532904][ T5025] loop3: detected capacity change from 0 to 2048
[  714.583960][ T5036] loop4: detected capacity change from 0 to 1024
[  714.591189][ T5025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  714.607677][ T5036] EXT4-fs: inline encryption not supported
[  714.631827][ T5036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  714.645691][T25336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  714.671641][ T5045] program syz.1.9505 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  714.751824][T24390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  714.796878][ T5056] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9512'.
[  714.808270][ T5049] netlink: 'syz.3.9509': attribute type 1 has an invalid length.
[  715.114144][ T5062] loop3: detected capacity change from 0 to 1024
[  715.133010][ T5062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  715.146625][   T29] kauditd_printk_skb: 958 callbacks suppressed
[  715.146644][   T29] audit: type=1400 audit(2000000655.670:49761): avc:  denied  { append } for  pid=5061 comm="syz.3.9513" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  715.220210][T25336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  715.313773][   T29] audit: type=1326 audit(2000000655.830:49762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.3.9519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65068af749 code=0x7ffc0000
[  715.343853][ T5127] loop7: detected capacity change from 0 to 512
[  715.359462][ T5127] EXT4-fs (loop7): 1 truncate cleaned up
[  715.371228][ T5127] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  715.396948][   T29] audit: type=1326 audit(2000000655.860:49763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.3.9519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f65068af749 code=0x7ffc0000
[  715.420585][   T29] audit: type=1326 audit(2000000655.860:49764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.3.9519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65068af749 code=0x7ffc0000
[  715.444155][   T29] audit: type=1400 audit(2000000655.880:49765): avc:  denied  { read } for  pid=5129 comm="syz.3.9522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  715.480970][   T29] audit: type=1326 audit(2000000656.000:49766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5125 comm="syz.7.9521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a20f749 code=0x7ffc0000
[  715.514733][   T29] audit: type=1326 audit(2000000656.000:49767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5125 comm="syz.7.9521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb30a20f749 code=0x7ffc0000
[  715.538670][   T29] audit: type=1326 audit(2000000656.000:49768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5125 comm="syz.7.9521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a20f749 code=0x7ffc0000
[  715.562250][   T29] audit: type=1326 audit(2000000656.000:49769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5125 comm="syz.7.9521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb30a20f749 code=0x7ffc0000
[  715.585773][   T29] audit: type=1326 audit(2000000656.000:49770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5125 comm="syz.7.9521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a20f749 code=0x7ffc0000
[  715.841763][ T5169] netlink: 'syz.4.9523': attribute type 1 has an invalid length.
[  716.170990][ T5196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  716.217691][T26190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  716.376740][ T5211] program syz.0.9533 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  716.410516][ T5216] hsr_slave_0: left promiscuous mode
[  716.416326][ T5216] hsr_slave_1: left promiscuous mode
[  716.457008][T24390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  716.574047][ T5238] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  716.874266][ T5227] set_capacity_and_notify: 1 callbacks suppressed
[  716.874285][ T5227] loop7: detected capacity change from 0 to 1024
[  716.902407][ T5227] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  716.918491][ T5281] IPv6: NLM_F_CREATE should be specified when creating new route
[  716.927787][ T5227] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  717.052066][ T5293] loop7: detected capacity change from 0 to 4096
[  717.061800][ T5293] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  717.247131][ T5327] loop3: detected capacity change from 0 to 512
[  717.316031][ T5327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  717.333185][ T5327] ext4 filesystem being mounted at /505/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  717.380000][ T5327] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.9546: corrupted xattr block 6: invalid header
[  717.393654][ T5327] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=12
[  717.419647][ T5344] netdevsim netdevsim4: Direct firmware load for ./file1 failed with error -2
[  717.443559][T25336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  717.588127][T26190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  717.676901][ T5380] netdevsim netdevsim4: Direct firmware load for ./file1 failed with error -2
[  717.742890][ T5389] hub 2-0:1.0: USB hub found
[  717.747682][ T5389] hub 2-0:1.0: 8 ports detected
[  717.865095][ T5408] netdevsim netdevsim1: Direct firmware load for ./file1 failed with error -2
[  717.967958][ T5391] loop4: detected capacity change from 0 to 1024
[  717.991664][ T5391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  718.067282][T24390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  718.108390][ T5447] loop4: detected capacity change from 0 to 4096
[  718.476715][ T5507] __nla_validate_parse: 12 callbacks suppressed
[  718.476733][ T5507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9573'.
[  718.542952][ T5510] netdevsim netdevsim3: Direct firmware load for ./file1 failed with error -2
[  718.604879][ T5514] loop7: detected capacity change from 0 to 1024
[  718.612552][ T5514] EXT4-fs: inline encryption not supported
[  718.653053][ T5520] loop3: detected capacity change from 0 to 1024
[  718.665610][ T5520] EXT4-fs: Ignoring removed orlov option
[  718.684895][ T5520] ext4: Unknown parameter 'obj_user'
[  718.724862][ T5520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9578'.
[  718.741981][ T5525] netlink: 68 bytes leftover after parsing attributes in process `syz.7.9580'.
[  718.776923][ T5528] loop3: detected capacity change from 0 to 512
[  718.800842][ T5528] ext4 filesystem being mounted at /510/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  718.825759][ T5528] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.9581: corrupted xattr block 6: invalid header
[  718.852339][ T5528] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=12
[  718.922607][ T5522] 9p: Bad value for 'wfdno'
[  718.987306][ T5554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9585'.
[  718.996544][ T5554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9585'.
[  719.017287][ T5559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9586'.
[  719.124220][ T5575] hub 2-0:1.0: USB hub found
[  719.129354][ T5575] hub 2-0:1.0: 8 ports detected
[  719.265839][ T5589] loop4: detected capacity change from 0 to 512
[  719.290874][ T5589] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  719.336232][ T5589] EXT4-fs (loop4): 1 truncate cleaned up
[  719.453226][ T5631] loop4: detected capacity change from 0 to 2048
[  719.695120][ T5670] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9597'.
[  719.725529][ T5670] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9597'.
[  719.725663][ T5682] EXT4-fs (loop3): 1 truncate cleaned up
[  719.838146][ T5692] EXT4-fs: inline encryption not supported
[  719.928809][ T5703] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9606'.
[  719.938245][ T5699] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  719.961118][ T5706] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9607'.
[  719.979292][ T5699] EXT4-fs (loop3): 1 truncate cleaned up
[  720.071355][ T5718] EXT4-fs: Ignoring removed orlov option
[  720.077498][ T5718] ext4: Unknown parameter 'obj_user'
[  720.185430][ T5732] EXT4-fs (loop3): 1 truncate cleaned up
[  720.193517][   T29] kauditd_printk_skb: 938 callbacks suppressed
[  720.193535][   T29] audit: type=1326 audit(2000000660.710:50709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5730 comm="syz.3.9613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65068af749 code=0x7ffc0000
[  720.226370][   T29] audit: type=1326 audit(2000000660.740:50710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5730 comm="syz.3.9613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f65068a65e7 code=0x7ffc0000
[  720.250269][   T29] audit: type=1326 audit(2000000660.740:50711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5730 comm="syz.3.9613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f650684b829 code=0x7ffc0000
[  720.273786][   T29] audit: type=1326 audit(2000000660.740:50712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5730 comm="syz.3.9613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65068af749 code=0x7ffc0000
[  720.297396][   T29] audit: type=1326 audit(2000000660.740:50713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5730 comm="syz.3.9613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65068af749 code=0x7ffc0000
[  720.301781][ T5743] EXT4-fs (loop7): 1 truncate cleaned up
[  720.321261][   T29] audit: type=1326 audit(2000000660.740:50714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5730 comm="syz.3.9613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65068af749 code=0x7ffc0000
[  720.321292][   T29] audit: type=1326 audit(2000000660.740:50715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5730 comm="syz.3.9613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65068af749 code=0x7ffc0000
[  720.321316][   T29] audit: type=1326 audit(2000000660.740:50716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5730 comm="syz.3.9613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65068af749 code=0x7ffc0000
[  720.397984][   T29] audit: type=1326 audit(2000000660.740:50717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5730 comm="syz.3.9613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65068af749 code=0x7ffc0000
[  720.422061][   T29] audit: type=1326 audit(2000000660.740:50718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5730 comm="syz.3.9613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65068af749 code=0x7ffc0000
[  720.610992][ T5778] netdevsim netdevsim4: Direct firmware load for ./file1 failed with error -2
[  720.819583][ T5803] program syz.4.9621 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  720.880477][ T5837] netdevsim netdevsim1: Direct firmware load for ./file1 failed with error -2
[  721.082556][ T5859] EXT4-fs: Ignoring removed orlov option
[  721.088982][ T5859] ext4: Unknown parameter 'obj_user'
[  721.136869][ T5873] netdevsim netdevsim7: Direct firmware load for ./file1 failed with error -2
[  721.250898][ T5897] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  721.943698][ T6009] set_capacity_and_notify: 8 callbacks suppressed
[  721.943715][ T6009] loop7: detected capacity change from 0 to 1024
[  721.957532][ T6009] EXT4-fs: inline encryption not supported
[  722.053650][ T6031] netdevsim netdevsim7: Direct firmware load for ./file1 failed with error -2
[  722.220586][ T6032] loop4: detected capacity change from 0 to 512
[  722.243616][ T6032] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  722.301401][ T6032] EXT4-fs (loop4): 1 truncate cleaned up
[  722.501095][ T6102] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  722.753621][ T6122] 9p: Bad value for 'wfdno'
[  722.929853][    T2] ==================================================================
[  722.937972][    T2] BUG: KCSAN: data-race in alloc_pid / copy_process
[  722.944569][    T2] 
[  722.946899][    T2] read-write to 0xffffffff86860008 of 4 bytes by task 1825 on cpu 1:
[  722.955067][    T2]  alloc_pid+0x54c/0x760
[  722.959415][    T2]  copy_process+0xdd1/0x1ef0
[  722.964010][    T2]  kernel_clone+0x16c/0x5c0
[  722.968519][    T2]  user_mode_thread+0x7d/0xb0
[  722.973200][    T2]  call_usermodehelper_exec_work+0x7a/0x160
[  722.979119][    T2]  process_scheduled_works+0x4ce/0x9d0
[  722.984605][    T2]  worker_thread+0x582/0x770
[  722.989224][    T2]  kthread+0x489/0x510
[  722.993300][    T2]  ret_from_fork+0x149/0x290
[  722.997898][    T2]  ret_from_fork_asm+0x1a/0x30
[  723.002666][    T2] 
[  723.005002][    T2] read to 0xffffffff86860008 of 4 bytes by task 2 on cpu 0:
[  723.012281][    T2]  copy_process+0x16d4/0x1ef0
[  723.017066][    T2]  kernel_clone+0x16c/0x5c0
[  723.021572][    T2]  kernel_thread+0xad/0xe0
[  723.026001][    T2]  kthreadd+0x26c/0x340
[  723.030166][    T2]  ret_from_fork+0x149/0x290
[  723.034776][    T2]  ret_from_fork_asm+0x1a/0x30
[  723.039775][    T2] 
[  723.042107][    T2] value changed: 0x80000125 -> 0x80000126
[  723.047910][    T2] 
[  723.050240][    T2] Reported by Kernel Concurrency Sanitizer on:
[  723.056476][    T2] CPU: 0 UID: 0 PID: 2 Comm: kthreadd Not tainted syzkaller #0 PREEMPT(voluntary) 
[  723.065762][    T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  723.075817][    T2] ==================================================================
[  723.145897][ T6155] netlink: 'syz.1.9666': attribute type 1 has an invalid length.