last executing test programs:

2m50.006202822s ago: executing program 4 (id=122):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kfree\x00', r1}, 0x18)
sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080)

2m49.977180693s ago: executing program 4 (id=123):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0)
syz_clone(0x1000280, &(0x7f0000000180)="7de170d59123b64454e2969a4ffa078283f3256c99525d0a721039ef68977a858d5baa1fc42ba8f473f95c197c9a60e0171d6b88ae585a3e84266b6d65c37e0e556d01cd8c0571476371fc19bfa74c9cf96865fed1f08aea2fa5f40adb21c14a9c4ae4095ce740807347ae2425161f80cb110ee7f476da04ddf2b23e5e8cde15f513e1246012f50a43362098b882f0d356d1e442f955658122c8257cc4016d5fbfadd597b9984e861fbcbfa2882fd7b9f60565f5da77dd4104ef0ad7cc6ccc111f955960bdb8f9b7c31cb2ac7ac74ce2b44859017c31", 0xd6, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000280)="91313cf59135fd3c812354996155452308a4067960f97d9f112ef484775e5df6e98117bc2ed8e56a77bfb51b889c532c5c6a51838f2ff1919416321aa69761089bbc5e956647e5750e8609a999b4904a5507a4991bce76fd987f03a21bcc7b0047184af66520a8adb2e0f2de14cfbedfd42f92c06c4f0f71a52c0276f260ecd5bb78880e3bdea5b92e68d8a23b98")
perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r3, 0x0)

2m49.607464629s ago: executing program 4 (id=127):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c000180"], 0x118}}, 0x0)

2m49.437520301s ago: executing program 4 (id=131):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x0, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@block_validity}, {@norecovery}, {@auto_da_alloc}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000f80)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrJbdSdJ47bBh6og+lRQKz4Ja0wmIWSSWZJJuwmLTfFVEES04Is++SL4BwjSF99FKNR3UVGkZvVBoe2VO3Onm0xmkhRncpfk94Oz9557Zu73nQlz5tyZu/cGcGE9GRE3ImIsIp6JiKlie1qU2OuU/HH39+8t5iWJLHvp7SSSYlt3X5eL5bXiaRMR8Y2vRnw3ORp3a2d3baHRqG8W9enWevJOlu3eXF1fWKmv1Dfm5mafm39+/tb8zFD6WY2IF77815/88JdfeeG3n33lT7f/fuN7eVr/zbJXo6cfw9TpeqX9WnSNR8TmKIKVZLzdw45bJecCAMDx8vn+hyPik+35/1SMtWdzAAAAwHmSfWEy3kkiMgAAAODcSiNiMpK0VpzvO1mcsXotIj4aV9NGc6v1meXm9sZS3hZRjUq6vNqoz8RE+9yBalSSvD5bnGPbrT/bU5+LiEcj4sdTV9r12mKzsVT2lx8AAABwQVzrOf7/91Sa1mpF417JyQEAAADDUy07AQAAAGDkHP8DAADA+VfN+tyh66h09JkAAAAAI/C1F1/MS9a9//XSyzvba82Xby7Vt9Zq69uLtcXm5p3aSrO50r5m3/pJ+2s0m3c+Fxvbd6db9a3W9NbO7u315vZG6/bqoVtgAwAAAGfo0U+88cckIvY+f6VdcpeKtkpENnbwweNlZAiMygc6p+cvo8sDOHsHP9+vlJgHcPZM6eHiqpSdAFC6k/4D0MCTd34//FwAAIDRuP6xwb//v71camrAiBW//yenugAIcK6MlZ0AUJrO73/vZR1lZwOcpcpxMwAHBXDupcP5/f+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSZZXG/WZiPhQRLw1Vbmc12fbz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3u8HLiX/mWovI+KVn73007sLrdbmbL79n+9vb71ebH+2jG8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNP9/XuL97Msy/bvLZ5l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjB56XRMTYEOLvvRYRj/WLn+RpRbXI4lD8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK4+/uavpwfGfy3i8fH+4083fpLvr0/8p07Zx+98c3d3UFv2i4jr/ca/5HCs6db6nemtnd2bq+sLK/WV+sbc3Oxz88/P35qfmV5ebdSLf/vG+NHHf/Peg9q7R/p/9Zjxt93/Aa//06fs/7tv3t3/SGe15y8Tlfh5lt14qv/f/7F88emj8buffZ8qPgfyev4apq9/q2/8J371hycG5Zb3f2lA/yd6+n+5p/83Ttn/Z77+/T+f8qEAwBnY2tldW2g06ptWDq5E9aFI4+FdyeedpaeRRBL5yluHmhbKT6yz8mrxHltodN9tQ9rz74qDo1EmX9J4BAAAjM6DSX9vS1JOQgAAAAAAAAAAAAAAAAAAAHABnXgZsEFNaUQ82PLtHxxzNbLemHvldBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Fj/CwAA//8GI9aV")
r2 = syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000001dc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090)
sendto$inet6(r0, &(0x7f0000000880)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000300)=""/235, 0xeb})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="3f9d00000000fee0df258cc8a8aa2cab8f05", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'macvlan1\x00', <r9=>0x0})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r11}, 0x10)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r12, 0x0, 0x8}, 0x18)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00001700000000001c0037800b0003006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x814)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r14}, 0x10)

2m48.551719536s ago: executing program 4 (id=142):
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
unshare(0x2000400)
epoll_wait(0xffffffffffffffff, &(0x7f0000000380)=[{}], 0x2, 0x1000)

2m45.78013075s ago: executing program 4 (id=172):
r0 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"})
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x7, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x44)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r6}, 0x10)
r7 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r0, r1, r7, 0x0)

2m45.766888421s ago: executing program 32 (id=172):
r0 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"})
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x7, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x44)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r6}, 0x10)
r7 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r0, r1, r7, 0x0)

2m41.967757862s ago: executing program 5 (id=173):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="830086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef)

2m41.873817303s ago: executing program 5 (id=220):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1006}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
syz_emit_ethernet(0x4e, &(0x7f0000000380)=ANY=[@ANYBLOB="0170c20000006481bf92870086dd60ecdd8000181100fc000000000000000000000000000002ff0200000000000000000000000000010061ed2200189078030000000000ffff0000000000000000cb6b560663b447e9addadb14d81dc4d07cbc45e240fcae5e30aebc0097afae"], 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
ioctl$FS_IOC_GETVERSION(r3, 0xff04, 0x0)
syz_clone(0x40110080, &(0x7f00000027c0)="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", 0x841, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={<r5=>0x0, 0x80}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={r5, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0xfffffffe, @empty, 0x2}, @in6={0xa, 0x4e24, 0x0, @local, 0xffff}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e24, 0x0, @local, 0x4}]}, &(0x7f0000000340)=0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'sit0\x00', @local})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)

2m41.730241086s ago: executing program 5 (id=221):
r0 = socket$netlink(0x10, 0x3, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{0x3, 0xfffffffffffffffd}], 0x1, 0x0, 0x0, 0x0, 0x0, 0x2})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r4}, 0x20)
clock_gettime(0x0, &(0x7f0000000380))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000020000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000010000000000001c00"/28], 0x48)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140))
socket$inet_udplite(0x2, 0x2, 0x88)
statx(0xffffffffffffffff, 0x0, 0x4000, 0x4, 0x0)

2m40.500326825s ago: executing program 5 (id=243):
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
close_range(r3, 0xffffffffffffffff, 0x2)
dup3(r2, r3, 0x80000)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x6)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r9}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x6c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xc}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfa}}]}, 0x6c}}, 0x0)
r10 = dup(r1)
write$P9_RLERRORu(r10, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r10, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r11}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r10])
pipe2$9p(&(0x7f00000007c0)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESHEX=r13, @ANYBLOB=',debug=0'])

2m40.499811636s ago: executing program 33 (id=243):
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
close_range(r3, 0xffffffffffffffff, 0x2)
dup3(r2, r3, 0x80000)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x6)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r9}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x6c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xc}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfa}}]}, 0x6c}}, 0x0)
r10 = dup(r1)
write$P9_RLERRORu(r10, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r10, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r11}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r10])
pipe2$9p(&(0x7f00000007c0)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESHEX=r13, @ANYBLOB=',debug=0'])

1m21.636948415s ago: executing program 0 (id=1489):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000640)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x1, 0x2e8, &(0x7f0000000680)="$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")
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6000)
io_setup(0x4, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000), 0xc)
socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_emit_ethernet(0x11, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r4}, 0x10)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {0x5, 0xe}, {0xd}, {0xfff3}}}, 0x24}}, 0x40)

1m21.473489158s ago: executing program 0 (id=1492):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000280)=0xfffffffe, 0x4)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000080)=0x40)
pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018767a74bf05de44473f8de500000000000000240000002400000005000000000000000100000d00000000050000000200000003000000000000110200000005000000002e2e1000"], 0x0, 0xffffffffffffff6a, 0x0, 0x1, 0x6cb, 0x0, @void, @value}, 0x28)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)

1m21.34728429s ago: executing program 0 (id=1495):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
sched_rr_get_interval(0x0, &(0x7f00000002c0))

1m21.292481941s ago: executing program 0 (id=1498):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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")
mount(0x0, &(0x7f0000005880)='./file0\x00', &(0x7f00000058c0)='sysfs\x00', 0x18010, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000840)={0x2, 0x200003, 0x8, 0xd, 0x7ffd})
r0 = syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
process_madvise(r1, 0x0, 0x0, 0x15, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x0)
setresuid(r2, r2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x70b200, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000003e000701fcfffffffedbdf25017c00000c0003"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x5, &(0x7f0000000000)=0x2, 0x4)
fcntl$setflags(r3, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r8=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r9}, 0x38)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x10)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5c7ac135fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8)

1m21.100697023s ago: executing program 0 (id=1503):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
syz_read_part_table(0x5df, &(0x7f0000000000)="$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")

1m21.000328805s ago: executing program 0 (id=1505):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x28, r1, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x72}}}}}, 0x28}}, 0x0)

1m20.804954168s ago: executing program 34 (id=1505):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x28, r1, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x72}}}}}, 0x28}}, 0x0)

4.733796664s ago: executing program 3 (id=2900):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = dup2(r0, r0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
timer_create(0x0, 0x0, &(0x7f00009b1ffc))
timer_delete(0x0)
mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x21)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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")
r2 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2000000, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50)
ftruncate(r2, 0x2007ffb)
sendfile(r2, r2, 0x0, 0x800000009)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040805}, 0x84)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x1b0, 0x2c, 0xd2b, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x9}, {}, {0x7, 0xf}}, [@TCA_RATE={0x6, 0x5, {0xae, 0x9}}, @filter_kind_options=@f_flow={{0x9}, {0x178, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xd}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xd}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xffff}, @TCA_FLOW_ACT={0x144, 0x9, 0x0, 0x1, [@m_mpls={0x68, 0xd, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x1}]}, {0x33, 0x6, "f8045590eb5987de79436918cc538eb5841b5f2c89098ffeeb4900db46ab16b298989684fb049da0ff83c38712b549"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0xd8, 0x1b, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x200, 0x80000000, 0x20000000, 0x2, 0x2}}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xffe0}}]}, {0x7a, 0x6, "6651a22282f8c9dc41cf681a68e8885e4feba9a0a3ec64b85f64cb630eddd7736bad2dfa4761777d8326c0b965a52ea658b255bfb2f34db0d02766bbefc55b4d33cbe16fcccf4e67252695c9397754b9bcf24318800dadb56ab5fcd3f7f4899ce7fdd3c26d2dd2820f0eead8fdd80416091dfcac0bf4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x1}}]}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x2404c044}, 0x24044094)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
finit_module(0xffffffffffffffff, 0x0, 0x2)
fstatfs(0xffffffffffffffff, 0x0)

4.535705907s ago: executing program 3 (id=2906):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="190000000400000008000000", @ANYRES16], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000140)="24000000010006", 0x7)

4.429149239s ago: executing program 3 (id=2909):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd73, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
socket$packet(0x11, 0xa, 0x300)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

4.256787332s ago: executing program 3 (id=2915):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = dup2(r0, r0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
timer_create(0x0, 0x0, &(0x7f00009b1ffc))
timer_delete(0x0)
mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x21)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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")
r2 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2000000, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50)
ftruncate(r2, 0x2007ffb)
sendfile(r2, r2, 0x0, 0x800000009)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040805}, 0x84)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x1b0, 0x2c, 0xd2b, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x9}, {}, {0x7, 0xf}}, [@TCA_RATE={0x6, 0x5, {0xae, 0x9}}, @filter_kind_options=@f_flow={{0x9}, {0x178, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xd}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xd}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xffff}, @TCA_FLOW_ACT={0x144, 0x9, 0x0, 0x1, [@m_mpls={0x68, 0xd, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x1}]}, {0x33, 0x6, "f8045590eb5987de79436918cc538eb5841b5f2c89098ffeeb4900db46ab16b298989684fb049da0ff83c38712b549"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0xd8, 0x1b, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x200, 0x80000000, 0x20000000, 0x2, 0x2}}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xffe0}}]}, {0x7a, 0x6, "6651a22282f8c9dc41cf681a68e8885e4feba9a0a3ec64b85f64cb630eddd7736bad2dfa4761777d8326c0b965a52ea658b255bfb2f34db0d02766bbefc55b4d33cbe16fcccf4e67252695c9397754b9bcf24318800dadb56ab5fcd3f7f4899ce7fdd3c26d2dd2820f0eead8fdd80416091dfcac0bf4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x1}}]}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x2404c044}, 0x24044094)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
finit_module(0xffffffffffffffff, 0x0, 0x2)
fstatfs(0xffffffffffffffff, 0x0)

3.72226995s ago: executing program 3 (id=2920):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd73, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$packet(0x11, 0xa, 0x300)

3.547232963s ago: executing program 3 (id=2925):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffe0, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0x7000000)

2.978608422s ago: executing program 2 (id=2946):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0xa, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xb, &(0x7f0000000480)=ANY=[@ANYRESHEX=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffec2, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x79af, 0x1000, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000300))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac14141bbd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r5, 0x0, 0x20000000}, 0x18)
clock_settime(0x0, &(0x7f0000003c80)={0x77359400})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x439, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10800}, [@IFLA_MTU={0x8, 0x4, 0x5}]}, 0x28}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0xa, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xb, &(0x7f0000000480)=ANY=[@ANYRESHEX=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffec2, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) (async)
syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x79af, 0x1000, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000300)) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
socket$kcm(0x10, 0x2, 0x4) (async)
sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac14141bbd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r5, 0x0, 0x20000000}, 0x18) (async)
clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x439, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10800}, [@IFLA_MTU={0x8, 0x4, 0x5}]}, 0x28}}, 0x0) (async)

2.794446215s ago: executing program 2 (id=2948):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xb, 0xffffffff})
iopl(0x3)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c)
io_setup(0x1, &(0x7f0000000b80)=<r3=>0x0)
io_destroy(r3)
io_setup(0x8, &(0x7f0000000600))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x1, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x0, 0x5}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r5, 0x0, 0xffffffffffffffff}, 0x18)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x40000)
msgsnd(0x0, &(0x7f00000003c0)={0x1, "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"}, 0x2ae, 0x800)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
removexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00')
io_setup(0x5df, &(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c)

1.785819181s ago: executing program 2 (id=2957):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
dup2(0xffffffffffffffff, r3)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7112, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r5}, 0x18)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01dfffffff9a26000000210000000c0001800800", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x2c, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff3}, {0xa, 0xc}, {0xc, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x651a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44054}, 0x2000010)

1.705941103s ago: executing program 1 (id=2959):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd73, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$packet(0x11, 0xa, 0x300)

1.640651263s ago: executing program 6 (id=2961):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18)
setresuid(0x0, 0x0, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000200)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_gettime(r1, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82)
r3 = dup(r2)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x2000, 0x0, 0x0, 0x0})
clock_gettime(0x0, &(0x7f0000000000)={<r4=>0x0, <r5=>0x0})
timer_settime(r1, 0x0, &(0x7f0000000040)={{0x77359400}, {r4, r5+60000000}}, &(0x7f0000000140))

1.640230954s ago: executing program 2 (id=2962):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10)
write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x2000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

1.637440884s ago: executing program 1 (id=2964):
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x2, 0x1, 0x1, 0x0, 0x0, 0x3, 0xd21, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0xffff, 0x1, 0x1, 0x9, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fgetxattr(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="75736523e70c4ce3d6e95fcbfe6cff0d1b760bf22e00"], 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
pipe(&(0x7f0000000080))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x0, 0xa}, {0x1}, @rumble={0xfff9, 0x8}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES8=r2, @ANYRES16=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x2a, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000002, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]})
io_setup(0x1, &(0x7f0000001300)=<r4=>0x0)
io_destroy(r4)

1.623844524s ago: executing program 6 (id=2965):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = dup2(r0, r0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
timer_create(0x0, 0x0, &(0x7f00009b1ffc))
timer_delete(0x0)
mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x21)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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")
r2 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2000000, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50)
ftruncate(r2, 0x2007ffb)
sendfile(r2, r2, 0x0, 0x800000009)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040805}, 0x84)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x224, 0x2c, 0xd2b, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x9}, {}, {0x7, 0xf}}, [@TCA_RATE={0x6, 0x5, {0xae, 0x9}}, @filter_kind_options=@f_flow={{0x9}, {0x1ec, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xd}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xd}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xffff}, @TCA_FLOW_ACT={0x1b8, 0x9, 0x0, 0x1, [@m_mpls={0x68, 0xd, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x1}]}, {0x33, 0x6, "f8045590eb5987de79436918cc538eb5841b5f2c89098ffeeb4900db46ab16b298989684fb049da0ff83c38712b549"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x74, 0x12, 0x0, 0x0, {{0x9}, {0x4}, {0x45, 0x6, "bac85042acfa4254c7c8b380bc643d5bfab897feaaad80946c466e4a8607a87fbca373a48d5127aca40c5c8bc355f304d8aa9a8bc2b811165e702b84a3d09d3dcd"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0xd8, 0x1b, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x200, 0x80000000, 0x20000000, 0x2, 0x2}}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xffe0}}]}, {0x7a, 0x6, "6651a22282f8c9dc41cf681a68e8885e4feba9a0a3ec64b85f64cb630eddd7736bad2dfa4761777d8326c0b965a52ea658b255bfb2f34db0d02766bbefc55b4d33cbe16fcccf4e67252695c9397754b9bcf24318800dadb56ab5fcd3f7f4899ce7fdd3c26d2dd2820f0eead8fdd80416091dfcac0bf4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x1}}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x2404c044}, 0x24044094)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
finit_module(0xffffffffffffffff, 0x0, 0x2)
fstatfs(0xffffffffffffffff, 0x0)

1.605955324s ago: executing program 2 (id=2966):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffa", 0xda}, {0x0}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb3dc5", 0xf4}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b88863c73d859acf1d16d599c71547d018aba5064338", 0x5f}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba000000", 0x4d}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff785", 0xde}, {&(0x7f0000000e80)="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", 0x185}], 0x3}}], 0x2, 0xc0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001"], 0x110}}, 0x4008004)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}}}]}]}], {0x14}}, 0xd4}}, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a00), 0x8000, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@private0}, 0x0, @in6=@dev}}, &(0x7f0000000b40)=0xe8)
statx(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', 0x800, 0x800, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r1, {r4, r5}}, './file0/file0\x00'})
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

1.520881356s ago: executing program 1 (id=2968):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98590, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000500), &(0x7f0000000680)=0x4)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0xf)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x4048000}, 0x880)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'l\xf0F\xfeo\xb3\x04\x19\xb7\xbd\x8a\xfcP\r\xb6\x1d\xc7v\x06]\xe9\xdd\xa2W\x8b\fFsj\xc9\xd8\x1f\"\xd8\x1e]\xcc\xff]\x12\x85\xc8\xa8\x84K\xb3\x1e\x19\f.@\xc7\x19Iqv;C\xcf=tN\xb3\xf9\xbb@\x8f\x9d\xfc\x9e\x19\xdeq\xa90\x03&'}, 0xffffff67, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0xea}, @md5sig={0x1d, 0x12}]}}}}}}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000190a010200000000000009000000000000007a2000c9afed864e327a"], 0x44}}, 0x0)
sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x48, 0x6, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}}, 0x4008011)
recvmmsg(r4, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

1.480439346s ago: executing program 1 (id=2969):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
socket(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
time(0x0)
lsm_get_self_attr(0x67, 0x0, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0x8, &(0x7f0000000480)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r2}, 0x18)
r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0)
ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0x14)
unshare(0x62040200)
close(r3)
unshare(0x26000400)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, 0x0, &(0x7f00000001c0))
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x140c, 0x3ff}, 0x10}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
r6 = socket(0x8000000010, 0x2, 0x0)
write(r6, &(0x7f0000001640)="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", 0xfc)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1.171407012s ago: executing program 6 (id=2975):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10)
write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x2000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

1.132598942s ago: executing program 1 (id=2977):
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x2, 0x1, 0x1, 0x0, 0x0, 0x3, 0xd21, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0xffff, 0x1, 0x1, 0x9, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fgetxattr(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="75736523e70c4ce3d6e95fcbfe6cff0d1b760bf22e00"], 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
pipe(&(0x7f0000000080))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x0, 0xa}, {0x1}, @rumble={0xfff9, 0x8}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES8=r2, @ANYRES16=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x2a, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000002, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]})
io_setup(0x1, &(0x7f0000001300)=<r4=>0x0)
io_destroy(r4)

1.024303054s ago: executing program 6 (id=2979):
r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x2, 0x1, 0x1, 0x0, 0x0, 0x3, 0xd21, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0xffff, 0x1, 0x1, 0x9, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fgetxattr(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="75736523e70c4ce3d6e95fcbfe6cff0d1b760bf22e00"], 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000640)="fdff27", 0x5, r4}, 0x38)
pipe(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
close(r7)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x0, 0xa}, {0x1}, @rumble={0xfff9, 0x8}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f00000002c0)=0x3, 0x4)
write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc)
splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES8=r4, @ANYRES16=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x2a, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000002, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0x2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]})
io_setup(0x1, &(0x7f0000001300)=<r9=>0x0)
io_destroy(r9)
write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sysvipc/shm\x00', 0x0, 0x0)
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000300)={0x1e, 0xffff, 0x8, 0x6, 0x4})
close_range(r10, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000040079103000000000001e500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

997.368454ms ago: executing program 1 (id=2980):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
msgrcv(0x0, 0x0, 0xfffffffffffffe7b, 0x1, 0x800)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001640)={0x2, 0x1, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}}]}, 0x40}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="020100030a0000000000000000000000020010000000000200000000000000000300050000000000020000009d1414000000000000000000030006000000000002000000ac14"], 0x50}}, 0x0)
unshare(0x24040000)
r4 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r4, 0x0)
io_uring_setup(0xd54, &(0x7f00000005c0)={0x0, 0x72fa, 0x2, 0x3, 0x1c9})
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x5}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[])
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00')
link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00')
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f00000002c0), &(0x7f00000005c0)=r7}, 0x20)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x6, 0x151, &(0x7f00000006c0)="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"})
unshare(0x2c020400)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000400)={0x0, 0xa, 0x8001}) (fail_nth: 2)

735.348938ms ago: executing program 2 (id=2981):
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f00002c0000/0xc000)=nil, 0xc000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x138)
r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x18)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="8b334db1235b6d37e3ac7fd52711d3001d808578626d"], 0x18}}, 0x0)
write$9p(r6, &(0x7f0000001400)="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", 0x200)
sendfile(r6, r7, 0x0, 0xe065)
unshare(0x40020000)

591.938881ms ago: executing program 6 (id=2984):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = dup2(r0, r0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
timer_create(0x0, 0x0, &(0x7f00009b1ffc))
timer_delete(0x0)
mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x21)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=")
r2 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2000000, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50)
ftruncate(r2, 0x2007ffb)
sendfile(r2, r2, 0x0, 0x800000009)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040805}, 0x84)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x224, 0x2c, 0xd2b, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x9}, {}, {0x7, 0xf}}, [@TCA_RATE={0x6, 0x5, {0xae, 0x9}}, @filter_kind_options=@f_flow={{0x9}, {0x1ec, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xd}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xd}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xffff}, @TCA_FLOW_ACT={0x1b8, 0x9, 0x0, 0x1, [@m_mpls={0x68, 0xd, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x1}]}, {0x33, 0x6, "f8045590eb5987de79436918cc538eb5841b5f2c89098ffeeb4900db46ab16b298989684fb049da0ff83c38712b549"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x74, 0x12, 0x0, 0x0, {{0x9}, {0x4}, {0x45, 0x6, "bac85042acfa4254c7c8b380bc643d5bfab897feaaad80946c466e4a8607a87fbca373a48d5127aca40c5c8bc355f304d8aa9a8bc2b811165e702b84a3d09d3dcd"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0xd8, 0x1b, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x200, 0x80000000, 0x20000000, 0x2, 0x2}}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xffe0}}]}, {0x7a, 0x6, "6651a22282f8c9dc41cf681a68e8885e4feba9a0a3ec64b85f64cb630eddd7736bad2dfa4761777d8326c0b965a52ea658b255bfb2f34db0d02766bbefc55b4d33cbe16fcccf4e67252695c9397754b9bcf24318800dadb56ab5fcd3f7f4899ce7fdd3c26d2dd2820f0eead8fdd80416091dfcac0bf4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x1}}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x2404c044}, 0x24044094)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
finit_module(0xffffffffffffffff, 0x0, 0x2)
fstatfs(0xffffffffffffffff, 0x0)

518.076872ms ago: executing program 7 (id=2985):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x1218088, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000000))

500.663012ms ago: executing program 7 (id=2986):
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') (async)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x5fc, &(0x7f0000000600)="$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") (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f40)='afs_lookup\x00', r0, 0x0, 0x4}, 0x18)
umount2(&(0x7f00000002c0)='./file0\x00', 0x2) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000005000000bfef00000180e50000000100", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="8100"/20, @ANYRES32, @ANYRES32, @ANYBLOB="0000000002000000000000000500"/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x0, 0x9, {{0x14, 0x4, 0x3, 0x2, 0x50, 0x68, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@lsrr={0x83, 0x17, 0xd5, [@private=0xa010100, @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3e}, @remote]}, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0x1b, 0x84, [@loopback, @multicast2, @multicast1, @private=0xa010102, @multicast2, @local]}, @generic={0x44, 0x3, '`'}]}}}}}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000300)={'tunl0\x00', <r5=>0x0, 0x10, 0x7, 0x8, 0x1, {{0x11, 0x4, 0x3, 0x38, 0x44, 0x64, 0x0, 0xff, 0x2f, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0xff, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x44}, @multicast2]}, @generic={0x9b, 0xe, "720839e8134db725ceaa81aa"}, @timestamp_addr={0x44, 0xc, 0x8f, 0x1, 0x1, [{@empty, 0x2}]}]}}}}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockname(r7, &(0x7f00000014c0)=@ll={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80)
sendmsg$nl_route_sched(r6, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000000)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}}, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000001040)={'ip_vti0\x00', <r12=>0x0, 0x8, 0x1, 0x2, 0x35e9, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x68, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', <r13=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'team0\x00', <r14=>0x0}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000580)={'erspan0\x00', <r15=>0x0, 0x20, 0x8000, 0x721b03a0, 0x6, {{0x7, 0x4, 0x0, 0x36, 0x1c, 0x67, 0x0, 0x1, 0x29, 0x0, @empty, @multicast2, {[@ra={0x94, 0x4}, @noop]}}}}})
r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r16, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r17=>0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r18=>0x0, 0x23, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000000000007000085d41da8855f00000000000018110000", @ANYRES32=r16, @ANYRES64=r17], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffc, @void, @value}, 0x94) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c00)={'erspan0\x00', <r19=>0x0, 0x80, 0x700, 0x8000, 0x3, {{0x19, 0x4, 0x0, 0x2e, 0x64, 0x66, 0x0, 0x4, 0x2b, 0x0, @empty, @rand_addr=0x64010101, {[@rr={0x7, 0x2b, 0x1a, [@dev={0xac, 0x14, 0x14, 0x17}, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback, @loopback, @multicast1, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @rand_addr=0x64010101, @broadcast]}, @generic={0x7, 0x3, "0e"}, @rr={0x7, 0x1b, 0x71, [@empty, @dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0x3d}, @multicast1, @empty, @multicast1]}, @ssrr={0x89, 0x7, 0xbd, [@remote]}]}}}}})
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000001c00)=ANY=[@ANYBLOB="78060000", @ANYRES16=0x0, @ANYBLOB="080026bd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="900102804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff7f00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c00040007007b020200000040000500010000000400040300000000000007021bba0000ff070308010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="a401028034000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000040004003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004004e9c0e4108000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400010000007c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004c00040009000905050000000472070000000000090024508000000001040401350200007f00040a010000000600080204000000feff000907000000faff100380000000f5c502400104000008000100", @ANYRES32=0x0, @ANYBLOB="84000280400001002400010071756575655f696400000000000000000000000000000000000000000000000005000300030000000800040081ffffff08000600", @ANYRES64=r2, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="4400028040020000240001007072696f726974790000000000000000000000000099ddce0000ee0000000000000400040000000800f200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b40002803c00010024000300757365725f6ca06e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400030000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="7c00028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ffffffff08000100", @ANYRES32=r14, @ANYBLOB="bc00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r15, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400a20b000008000600", @ANYRES32=r17, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400e6560000"], 0x678}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001)

431.392533ms ago: executing program 7 (id=2987):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98590, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000500), &(0x7f0000000680)=0x4)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0xf)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x4048000}, 0x880)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'l\xf0F\xfeo\xb3\x04\x19\xb7\xbd\x8a\xfcP\r\xb6\x1d\xc7v\x06]\xe9\xdd\xa2W\x8b\fFsj\xc9\xd8\x1f\"\xd8\x1e]\xcc\xff]\x12\x85\xc8\xa8\x84K\xb3\x1e\x19\f.@\xc7\x19Iqv;C\xcf=tN\xb3\xf9\xbb@\x8f\x9d\xfc\x9e\x19\xdeq\xa90\x03&'}, 0xffffff67, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0xea}, @md5sig={0x1d, 0x12}]}}}}}}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000190a010200000000000009000000000000007a2000c9afed864e327a"], 0x44}}, 0x0)
sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x48, 0x6, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}}, 0x4008011)
recvmmsg(r4, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

323.588235ms ago: executing program 7 (id=2988):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10)
write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x2000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

321.569215ms ago: executing program 7 (id=2989):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
copy_file_range(r0, 0x0, r0, &(0x7f0000000180)=0xfffffffffffff470, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7c6, &(0x7f00000030c0)="$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")
chdir(&(0x7f0000000100)='./file0\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4)
sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r2, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0)
link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc0000000a0000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)

81.346179ms ago: executing program 7 (id=2990):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffa", 0xda}, {&(0x7f0000000040)}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb3dc5", 0xf4}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b88863c73d859acf1d16d599c71547d018aba5064338", 0x5f}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba000000", 0x4d}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff785", 0xde}, {&(0x7f0000000e80)="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", 0x185}], 0x3}}], 0x2, 0xc0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001"], 0x110}}, 0x4008004)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}}}]}]}], {0x14}}, 0xd4}}, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a00), 0x8000, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@private0}, 0x0, @in6=@dev}}, &(0x7f0000000b40)=0xe8)
statx(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', 0x800, 0x800, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r1, {r4, r5}}, './file0/file0\x00'})
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

0s ago: executing program 6 (id=2991):
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x138)
r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51)
write$9p(r5, &(0x7f0000001400)="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", 0x200)
sendfile(r5, r6, 0x0, 0xe065) (fail_nth: 9)
unshare(0x40020000)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0xd, 0x8, 0x4}})

kernel console output (not intermixed with test programs):

k 73) failed
[  177.415519][T10736] loop1: detected capacity change from 0 to 2048
[  177.460683][ T3590] Alternate GPT is invalid, using primary GPT.
[  177.467112][ T3590]  loop1: p1 p2 p3
[  177.474927][T10736] Alternate GPT is invalid, using primary GPT.
[  177.481252][T10736]  loop1: p1 p2 p3
[  177.531502][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  177.531666][ T7914] udevd[7914]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  177.542960][ T3590] udevd[3590]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  177.649227][T10750] SELinux: failed to load policy
[  177.777736][T10758] loop2: detected capacity change from 0 to 128
[  177.793891][T10762] xt_nat: multiple ranges no longer supported
[  177.918067][T10758] syz.2.2264: attempt to access beyond end of device
[  177.918067][T10758] loop2: rw=0, sector=121, nr_sectors = 120 limit=128
[  178.015958][T10768] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2268'.
[  178.029098][ T3386] usb 4-1: device descriptor read/8, error -110
[  178.080246][ T8986] kworker/u8:43: attempt to access beyond end of device
[  178.080246][ T8986] loop2: rw=1, sector=241, nr_sectors = 800 limit=128
[  178.123865][T10746] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2258'.
[  178.169764][ T3386] usb 4-1: new SuperSpeed USB device number 18 using vhci_hcd
[  178.191027][ T3386] usb 4-1: enqueue for inactive port 0
[  178.200609][ T3386] usb 4-1: enqueue for inactive port 0
[  178.206127][ T3386] usb 4-1: enqueue for inactive port 0
[  178.216353][T10784] loop2: detected capacity change from 0 to 2048
[  178.265726][T10784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.344402][T10793] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  178.436306][T10792] FAULT_INJECTION: forcing a failure.
[  178.436306][T10792] name failslab, interval 1, probability 0, space 0, times 0
[  178.449128][T10792] CPU: 1 UID: 0 PID: 10792 Comm: syz.3.2274 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) 
[  178.449165][T10792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  178.449255][T10792] Call Trace:
[  178.449264][T10792]  <TASK>
[  178.449273][T10792]  __dump_stack+0x1d/0x30
[  178.449301][T10792]  dump_stack_lvl+0xe8/0x140
[  178.449327][T10792]  dump_stack+0x15/0x1b
[  178.449350][T10792]  should_fail_ex+0x265/0x280
[  178.449464][T10792]  should_failslab+0x8c/0xb0
[  178.449494][T10792]  __kvmalloc_node_noprof+0x123/0x4e0
[  178.449605][T10792]  ? xp_create_and_assign_umem+0x7e/0x5c0
[  178.449734][T10792]  xp_create_and_assign_umem+0x7e/0x5c0
[  178.449779][T10792]  ? __rcu_read_unlock+0x4f/0x70
[  178.449807][T10792]  xsk_bind+0x2e3/0x960
[  178.449879][T10792]  __sys_bind+0x1d1/0x2a0
[  178.449929][T10792]  __x64_sys_bind+0x3f/0x50
[  178.449970][T10792]  x64_sys_call+0x2086/0x2fb0
[  178.449999][T10792]  do_syscall_64+0xd2/0x200
[  178.450027][T10792]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  178.450107][T10792]  ? clear_bhb_loop+0x40/0x90
[  178.450138][T10792]  ? clear_bhb_loop+0x40/0x90
[  178.450166][T10792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.450194][T10792] RIP: 0033:0x7f5c2fc7e929
[  178.450215][T10792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  178.450280][T10792] RSP: 002b:00007f5c2e2e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  178.450301][T10792] RAX: ffffffffffffffda RBX: 00007f5c2fea5fa0 RCX: 00007f5c2fc7e929
[  178.450327][T10792] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000006
[  178.450339][T10792] RBP: 00007f5c2e2e7090 R08: 0000000000000000 R09: 0000000000000000
[  178.450351][T10792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  178.450481][T10792] R13: 0000000000000000 R14: 00007f5c2fea5fa0 R15: 00007ffd812fe9e8
[  178.450509][T10792]  </TASK>
[  178.701742][T10799] openvswitch: netlink: Message has 6 unknown bytes.
[  178.720408][T10801] tipc: Started in network mode
[  178.725487][T10801] tipc: Node identity caca0a69b8e2, cluster identity 4711
[  178.732776][T10801] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.740024][T10799] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  178.757509][T10803] loop3: detected capacity change from 0 to 128
[  178.758520][T10804] loop6: detected capacity change from 0 to 256
[  178.774081][T10798] tipc: Resetting bearer <eth:syzkaller0>
[  178.810327][T10804] tmpfs: Bad value for 'mpol'
[  178.815317][   T29] kauditd_printk_skb: 195 callbacks suppressed
[  178.815334][   T29] audit: type=1400 audit(1749801036.217:4930): avc:  denied  { mounton } for  pid=10800 comm="syz.6.2279" path="/411/file0/file0" dev="loop6" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  178.878545][T10798] tipc: Disabling bearer <eth:syzkaller0>
[  178.911644][T10808] syz.3.2280: attempt to access beyond end of device
[  178.911644][T10808] loop3: rw=0, sector=121, nr_sectors = 120 limit=128
[  178.950171][   T29] audit: type=1326 audit(1749801036.337:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a63a0e929 code=0x7ffc0000
[  178.973970][   T29] audit: type=1326 audit(1749801036.337:4932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a63a0e929 code=0x7ffc0000
[  178.997991][   T29] audit: type=1326 audit(1749801036.337:4933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a63a0e929 code=0x7ffc0000
[  179.021730][   T29] audit: type=1326 audit(1749801036.337:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a63a0e929 code=0x7ffc0000
[  179.045443][   T29] audit: type=1326 audit(1749801036.347:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a63a0e929 code=0x7ffc0000
[  179.069037][   T29] audit: type=1326 audit(1749801036.347:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a63a0e929 code=0x7ffc0000
[  179.092635][   T29] audit: type=1326 audit(1749801036.347:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a63a0e929 code=0x7ffc0000
[  179.116317][   T29] audit: type=1326 audit(1749801036.347:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a63a0e929 code=0x7ffc0000
[  179.139912][   T29] audit: type=1326 audit(1749801036.347:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a63a0e929 code=0x7ffc0000
[  179.209533][ T8983] kworker/u8:40: attempt to access beyond end of device
[  179.209533][ T8983] loop3: rw=1, sector=241, nr_sectors = 800 limit=128
[  179.280210][ T3386] usb usb4-port1: attempt power cycle
[  179.368484][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.660973][T10844] xt_SECMARK: invalid mode: 2
[  179.737032][T10842] SELinux: failed to load policy
[  179.742618][T10828] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2286'.
[  180.047425][T10852] loop2: detected capacity change from 0 to 128
[  180.105451][T10852] syz.2.2294: attempt to access beyond end of device
[  180.105451][T10852] loop2: rw=0, sector=121, nr_sectors = 120 limit=128
[  180.264584][ T8986] kworker/u8:43: attempt to access beyond end of device
[  180.264584][ T8986] loop2: rw=1, sector=241, nr_sectors = 800 limit=128
[  180.409869][   T36] usb 16-1: device descriptor read/8, error -110
[  180.434545][T10874] loop1: detected capacity change from 0 to 512
[  180.474307][T10874] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  180.510895][T10882] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  180.517550][T10882] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  180.525120][T10882] vhci_hcd vhci_hcd.0: Device attached
[  180.530940][   T36] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd
[  180.551050][T10874] EXT4-fs (loop1): orphan cleanup on readonly fs
[  180.563128][   T36] usb 16-1: enqueue for inactive port 0
[  180.567856][T10874] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm +}[@: corrupted inode contents
[  180.568730][   T36] usb 16-1: enqueue for inactive port 0
[  180.585842][   T36] usb 16-1: enqueue for inactive port 0
[  180.628907][T10874] EXT4-fs (loop1): Remounting filesystem read-only
[  180.635610][T10883] vhci_hcd: connection closed
[  180.636044][ T8969] vhci_hcd: stop threads
[  180.645100][ T8969] vhci_hcd: release socket
[  180.649550][ T8969] vhci_hcd: disconnect device
[  180.682598][T10874] EXT4-fs (loop1): 1 truncate cleaned up
[  180.688791][ T8986] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  180.699480][ T8986] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  180.723339][ T8986] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  180.756304][T10874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  180.781499][T10874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.796872][T10889] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2308'.
[  180.995648][T10895] loop2: detected capacity change from 0 to 128
[  181.076022][T10895] syz.2.2311: attempt to access beyond end of device
[  181.076022][T10895] loop2: rw=0, sector=121, nr_sectors = 120 limit=128
[  181.242205][ T3386] usb usb4-port1: unable to enumerate USB device
[  181.251423][ T8983] kworker/u8:40: attempt to access beyond end of device
[  181.251423][ T8983] loop2: rw=1, sector=241, nr_sectors = 800 limit=128
[  181.301143][T10907] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2315'.
[  181.407212][T10918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2313'.
[  181.552071][T10937] loop6: detected capacity change from 0 to 128
[  181.604590][T10937] syz.6.2325: attempt to access beyond end of device
[  181.604590][T10937] loop6: rw=0, sector=121, nr_sectors = 120 limit=128
[  181.620429][   T36] usb usb16-port1: attempt power cycle
[  181.772735][ T8971] kworker/u8:28: attempt to access beyond end of device
[  181.772735][ T8971] loop6: rw=1, sector=241, nr_sectors = 800 limit=128
[  181.951973][T10951] loop6: detected capacity change from 0 to 256
[  181.997510][T10951] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  182.006391][T10951] FAT-fs (loop6): Filesystem has been set read-only
[  182.034006][T10951] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  182.055048][T10958] 9pnet_fd: Insufficient options for proto=fd
[  182.089129][T10951] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  182.132688][T10951] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  182.189999][T10951] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  182.198817][T10951] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  182.207941][T10951] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  182.224915][T10965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2336'.
[  182.257557][T10951] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  182.274342][T10951] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  182.283355][T10951] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  182.351443][T10969] SELinux: failed to load policy
[  182.366617][T10961] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[  182.373219][T10961] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  182.381042][T10961] vhci_hcd vhci_hcd.0: Device attached
[  182.506400][T10951] FAT-fs (loop6): Filesystem has been set read-only
[  182.593324][T10992] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  182.599985][T10992] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  182.607713][T10992] vhci_hcd vhci_hcd.0: Device attached
[  182.658829][T10989] lo speed is unknown, defaulting to 1000
[  182.679801][ T3385] usb 14-1: SetAddress Request (18) to port 0
[  182.686172][ T3385] usb 14-1: new SuperSpeed USB device number 18 using vhci_hcd
[  182.733569][T10989] lo speed is unknown, defaulting to 1000
[  182.839306][T10970] vhci_hcd: connection reset by peer
[  182.851962][ T8952] vhci_hcd: stop threads
[  182.856259][ T8952] vhci_hcd: release socket
[  182.860844][ T8952] vhci_hcd: disconnect device
[  182.879787][ T3386] usb 6-1: SetAddress Request (26) to port 0
[  182.886417][ T3386] usb 6-1: new SuperSpeed USB device number 26 using vhci_hcd
[  182.898212][T11002] loop1: detected capacity change from 0 to 2048
[  182.946576][T11002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.006709][T11002] FAULT_INJECTION: forcing a failure.
[  183.006709][T11002] name failslab, interval 1, probability 0, space 0, times 0
[  183.019463][T11002] CPU: 1 UID: 0 PID: 11002 Comm: syz.1.2347 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) 
[  183.019501][T11002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  183.019518][T11002] Call Trace:
[  183.019526][T11002]  <TASK>
[  183.019535][T11002]  __dump_stack+0x1d/0x30
[  183.019572][T11002]  dump_stack_lvl+0xe8/0x140
[  183.019642][T11002]  dump_stack+0x15/0x1b
[  183.019664][T11002]  should_fail_ex+0x265/0x280
[  183.019729][T11002]  should_failslab+0x8c/0xb0
[  183.019761][T11002]  kmem_cache_alloc_noprof+0x50/0x310
[  183.019797][T11002]  ? alloc_empty_file+0x76/0x200
[  183.019837][T11002]  alloc_empty_file+0x76/0x200
[  183.019942][T11002]  alloc_file_pseudo+0xc6/0x160
[  183.019984][T11002]  anon_inode_getfile+0xa0/0x120
[  183.020021][T11002]  __se_sys_perf_event_open+0xb69/0x11c0
[  183.020117][T11002]  __x64_sys_perf_event_open+0x67/0x80
[  183.020157][T11002]  x64_sys_call+0x27ec/0x2fb0
[  183.020186][T11002]  do_syscall_64+0xd2/0x200
[  183.020214][T11002]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  183.020316][T11002]  ? clear_bhb_loop+0x40/0x90
[  183.020345][T11002]  ? clear_bhb_loop+0x40/0x90
[  183.020376][T11002]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.020399][T11002] RIP: 0033:0x7f0a63a0e929
[  183.020420][T11002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.020441][T11002] RSP: 002b:00007f0a62077038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  183.020510][T11002] RAX: ffffffffffffffda RBX: 00007f0a63c35fa0 RCX: 00007f0a63a0e929
[  183.020526][T11002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040
[  183.020539][T11002] RBP: 00007f0a62077090 R08: 0000000000000003 R09: 0000000000000000
[  183.020551][T11002] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001
[  183.020611][T11002] R13: 0000000000000000 R14: 00007f0a63c35fa0 R15: 00007ffd67a353d8
[  183.020637][T11002]  </TASK>
[  183.251086][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.417728][T10993] vhci_hcd: connection reset by peer
[  183.434810][ T8983] vhci_hcd: stop threads
[  183.439100][ T8983] vhci_hcd: release socket
[  183.443666][ T8983] vhci_hcd: disconnect device
[  183.523570][T11019] rdma_rxe: rxe_newlink: failed to add ipvlan1
[  183.547905][T11018] SELinux: failed to load policy
[  183.674389][   T36] usb usb16-port1: unable to enumerate USB device
[  184.034975][T11045] loop3: detected capacity change from 0 to 256
[  184.088676][T11045] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  184.097549][T11045] FAT-fs (loop3): Filesystem has been set read-only
[  184.100656][T11033] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2357'.
[  184.119251][T11045] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  184.149676][T11045] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  184.159279][T11045] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  184.179533][T11045] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  184.189962][T11045] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  184.198740][T11045] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  184.222892][T11045] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  184.237930][T11045] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  184.247046][T11045] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  184.293726][T11063] FAULT_INJECTION: forcing a failure.
[  184.293726][T11063] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  184.307018][T11063] CPU: 0 UID: 0 PID: 11063 Comm: syz.7.2368 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) 
[  184.307056][T11063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  184.307080][T11063] Call Trace:
[  184.307087][T11063]  <TASK>
[  184.307097][T11063]  __dump_stack+0x1d/0x30
[  184.307127][T11063]  dump_stack_lvl+0xe8/0x140
[  184.307159][T11063]  dump_stack+0x15/0x1b
[  184.307188][T11063]  should_fail_ex+0x265/0x280
[  184.307281][T11063]  should_fail+0xb/0x20
[  184.307409][T11063]  should_fail_usercopy+0x1a/0x20
[  184.307432][T11063]  _copy_from_iter+0xcf/0xe40
[  184.307456][T11063]  ? __build_skb_around+0x1a0/0x200
[  184.307554][T11063]  ? __alloc_skb+0x223/0x320
[  184.307601][T11063]  netlink_sendmsg+0x471/0x6b0
[  184.307635][T11063]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.307724][T11063]  __sock_sendmsg+0x145/0x180
[  184.307894][T11063]  ____sys_sendmsg+0x31e/0x4e0
[  184.307929][T11063]  ___sys_sendmsg+0x17b/0x1d0
[  184.307986][T11063]  __x64_sys_sendmsg+0xd4/0x160
[  184.308027][T11063]  x64_sys_call+0x2999/0x2fb0
[  184.308056][T11063]  do_syscall_64+0xd2/0x200
[  184.308084][T11063]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  184.308180][T11063]  ? clear_bhb_loop+0x40/0x90
[  184.308202][T11063]  ? clear_bhb_loop+0x40/0x90
[  184.308224][T11063]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.308290][T11063] RIP: 0033:0x7f144000e929
[  184.308311][T11063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.308392][T11063] RSP: 002b:00007f143e677038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  184.308418][T11063] RAX: ffffffffffffffda RBX: 00007f1440235fa0 RCX: 00007f144000e929
[  184.308457][T11063] RDX: 0000000000004886 RSI: 0000200000000240 RDI: 0000000000000003
[  184.308550][T11063] RBP: 00007f143e677090 R08: 0000000000000000 R09: 0000000000000000
[  184.308567][T11063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  184.308583][T11063] R13: 0000000000000000 R14: 00007f1440235fa0 R15: 00007fff23c05a88
[  184.308610][T11063]  </TASK>
[  184.581028][T11052] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  184.587611][T11052] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  184.595328][T11052] vhci_hcd vhci_hcd.0: Device attached
[  184.635993][T11045] FAT-fs (loop3): Filesystem has been set read-only
[  184.872953][T11066] vhci_hcd: connection closed
[  184.892321][ T8986] vhci_hcd: stop threads
[  184.901391][ T8986] vhci_hcd: release socket
[  184.905844][ T8986] vhci_hcd: disconnect device
[  184.919945][T11074] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  184.926514][T11074] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  184.934255][T11074] vhci_hcd vhci_hcd.0: Device attached
[  184.959462][   T29] kauditd_printk_skb: 335 callbacks suppressed
[  184.959480][   T29] audit: type=1326 audit(1749801042.357:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.1.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a63a0e929 code=0x7ffc0000
[  184.989345][   T29] audit: type=1326 audit(1749801042.357:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.1.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a63a0e929 code=0x7ffc0000
[  185.012931][   T29] audit: type=1326 audit(1749801042.357:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.1.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a63a0e929 code=0x7ffc0000
[  185.036488][   T29] audit: type=1326 audit(1749801042.357:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.1.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a63a0e929 code=0x7ffc0000
[  185.060384][   T29] audit: type=1326 audit(1749801042.357:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.1.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a63a0e929 code=0x7ffc0000
[  185.083886][   T29] audit: type=1326 audit(1749801042.357:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.1.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a63a0e929 code=0x7ffc0000
[  185.107627][   T29] audit: type=1326 audit(1749801042.357:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.1.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a63a0e929 code=0x7ffc0000
[  185.131171][   T29] audit: type=1326 audit(1749801042.357:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.1.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a63a0e929 code=0x7ffc0000
[  185.154997][   T29] audit: type=1326 audit(1749801042.357:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.1.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a63a0e929 code=0x7ffc0000
[  185.178812][   T29] audit: type=1326 audit(1749801042.357:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.1.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a63a0e929 code=0x7ffc0000
[  185.260979][   T36] usb 4-1: SetAddress Request (22) to port 0
[  185.267181][   T36] usb 4-1: new SuperSpeed USB device number 22 using vhci_hcd
[  185.416806][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2375'.
[  185.506299][T11097] loop7: detected capacity change from 0 to 128
[  185.540596][T11102] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.592362][T11104] SELinux: failed to load policy
[  185.594039][T11102] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.629336][T11109] xt_connbytes: Forcing CT accounting to be enabled
[  185.636217][T11109] Cannot find set identified by id 0 to match
[  185.640763][T11110] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.2381'.
[  185.651530][T11110] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2381'.
[  185.663089][T11102] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.672527][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2382'.
[  185.703987][T11109] hsr_slave_1 (unregistering): left promiscuous mode
[  185.732016][T11102] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.742233][T11075] vhci_hcd: connection reset by peer
[  185.753488][ T8983] vhci_hcd: stop threads
[  185.757802][ T8983] vhci_hcd: release socket
[  185.762345][ T8983] vhci_hcd: disconnect device
[  185.828196][T11102] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.843564][T11102] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.857611][T11102] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.870176][T11102] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.880929][T11125] loop7: detected capacity change from 0 to 256
[  185.899969][T11125] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  185.908796][T11125] FAT-fs (loop7): Filesystem has been set read-only
[  185.923181][T11125] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  185.932786][T11125] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  185.942195][T11125] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  185.951844][T11125] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  185.961471][T11125] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  185.989148][T11125] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  185.998992][T11125] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  186.008055][T11125] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  186.016917][T11125] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  186.067024][T11126] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6)
[  186.073628][T11126] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  186.081736][T11126] vhci_hcd vhci_hcd.0: Device attached
[  186.123591][T11125] FAT-fs (loop7): Filesystem has been set read-only
[  186.272076][T11138] loop6: detected capacity change from 0 to 764
[  186.305014][T11138] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  186.350082][    T9] usb 16-1: SetAddress Request (6) to port 0
[  186.356295][    T9] usb 16-1: new SuperSpeed USB device number 6 using vhci_hcd
[  186.413189][T11146] FAULT_INJECTION: forcing a failure.
[  186.413189][T11146] name failslab, interval 1, probability 0, space 0, times 0
[  186.426016][T11146] CPU: 0 UID: 0 PID: 11146 Comm: syz.6.2394 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) 
[  186.426108][T11146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  186.426125][T11146] Call Trace:
[  186.426132][T11146]  <TASK>
[  186.426142][T11146]  __dump_stack+0x1d/0x30
[  186.426166][T11146]  dump_stack_lvl+0xe8/0x140
[  186.426191][T11146]  dump_stack+0x15/0x1b
[  186.426250][T11146]  should_fail_ex+0x265/0x280
[  186.426297][T11146]  should_failslab+0x8c/0xb0
[  186.426329][T11146]  kmem_cache_alloc_node_noprof+0x57/0x320
[  186.426363][T11146]  ? __alloc_skb+0x101/0x320
[  186.426470][T11146]  __alloc_skb+0x101/0x320
[  186.426557][T11146]  netlink_alloc_large_skb+0xba/0xf0
[  186.426603][T11146]  netlink_sendmsg+0x3cf/0x6b0
[  186.426729][T11146]  ? __pfx_netlink_sendmsg+0x10/0x10
[  186.426760][T11146]  __sock_sendmsg+0x145/0x180
[  186.426794][T11146]  ____sys_sendmsg+0x31e/0x4e0
[  186.426870][T11146]  ___sys_sendmsg+0x17b/0x1d0
[  186.426917][T11146]  __x64_sys_sendmsg+0xd4/0x160
[  186.426959][T11146]  x64_sys_call+0x2999/0x2fb0
[  186.426983][T11146]  do_syscall_64+0xd2/0x200
[  186.427082][T11146]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  186.427112][T11146]  ? clear_bhb_loop+0x40/0x90
[  186.427194][T11146]  ? clear_bhb_loop+0x40/0x90
[  186.427224][T11146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.427258][T11146] RIP: 0033:0x7f150927e929
[  186.427329][T11146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.427353][T11146] RSP: 002b:00007f15078e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  186.427395][T11146] RAX: ffffffffffffffda RBX: 00007f15094a5fa0 RCX: 00007f150927e929
[  186.427412][T11146] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000005
[  186.427428][T11146] RBP: 00007f15078e7090 R08: 0000000000000000 R09: 0000000000000000
[  186.427599][T11146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  186.427617][T11146] R13: 0000000000000000 R14: 00007f15094a5fa0 R15: 00007ffde600a138
[  186.427643][T11146]  </TASK>
[  186.662269][T11147] SELinux: failed to load policy
[  186.709781][T11129] vhci_hcd: connection reset by peer
[  186.720087][ T8983] vhci_hcd: stop threads
[  186.724459][ T8983] vhci_hcd: release socket
[  186.728938][ T8983] vhci_hcd: disconnect device
[  186.769148][T11158] loop1: detected capacity change from 0 to 128
[  186.831241][T11162] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2398'.
[  186.900458][T11167] loop3: detected capacity change from 0 to 128
[  186.938949][T11167] syz.3.2402: attempt to access beyond end of device
[  186.938949][T11167] loop3: rw=0, sector=121, nr_sectors = 120 limit=128
[  187.013234][T11176] FAULT_INJECTION: forcing a failure.
[  187.013234][T11176] name failslab, interval 1, probability 0, space 0, times 0
[  187.025932][T11176] CPU: 0 UID: 0 PID: 11176 Comm: syz.1.2405 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) 
[  187.025969][T11176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  187.025986][T11176] Call Trace:
[  187.025993][T11176]  <TASK>
[  187.026003][T11176]  __dump_stack+0x1d/0x30
[  187.026088][T11176]  dump_stack_lvl+0xe8/0x140
[  187.026110][T11176]  dump_stack+0x15/0x1b
[  187.026132][T11176]  should_fail_ex+0x265/0x280
[  187.026182][T11176]  should_failslab+0x8c/0xb0
[  187.026212][T11176]  kmem_cache_alloc_node_noprof+0x57/0x320
[  187.026242][T11176]  ? __alloc_skb+0x101/0x320
[  187.026372][T11176]  __alloc_skb+0x101/0x320
[  187.026411][T11176]  ? audit_log_start+0x365/0x6c0
[  187.026452][T11176]  audit_log_start+0x380/0x6c0
[  187.026499][T11176]  audit_seccomp+0x48/0x100
[  187.026542][T11176]  ? __seccomp_filter+0x68c/0x10d0
[  187.026574][T11176]  __seccomp_filter+0x69d/0x10d0
[  187.026670][T11176]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  187.026767][T11176]  ? vfs_write+0x75e/0x8e0
[  187.026850][T11176]  ? __rcu_read_unlock+0x4f/0x70
[  187.026960][T11176]  ? __fget_files+0x184/0x1c0
[  187.026991][T11176]  __secure_computing+0x82/0x150
[  187.027016][T11176]  syscall_trace_enter+0xcf/0x1e0
[  187.027049][T11176]  do_syscall_64+0xac/0x200
[  187.027077][T11176]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  187.027139][T11176]  ? clear_bhb_loop+0x40/0x90
[  187.027168][T11176]  ? clear_bhb_loop+0x40/0x90
[  187.027198][T11176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.027224][T11176] RIP: 0033:0x7f0a63a0e929
[  187.027245][T11176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  187.027266][T11176] RSP: 002b:00007f0a62077038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ff
[  187.027298][T11176] RAX: ffffffffffffffda RBX: 00007f0a63c35fa0 RCX: 00007f0a63a0e929
[  187.027315][T11176] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004
[  187.027328][T11176] RBP: 00007f0a62077090 R08: 0000000000000000 R09: 0000000000000000
[  187.027343][T11176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  187.027356][T11176] R13: 0000000000000000 R14: 00007f0a63c35fa0 R15: 00007ffd67a353d8
[  187.027375][T11176]  </TASK>
[  187.027648][T11177] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.2403'.
[  187.261177][T11177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2403'.
[  187.273277][ T8971] kworker/u8:28: attempt to access beyond end of device
[  187.273277][ T8971] loop3: rw=1, sector=241, nr_sectors = 800 limit=128
[  187.347594][T11181] SELinux: failed to load policy
[  187.670484][T11213] loop1: detected capacity change from 0 to 512
[  187.714365][T11213] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  187.758609][T11216] netlink: 2036 bytes leftover after parsing attributes in process `syz.6.2420'.
[  187.767885][T11216] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2420'.
[  187.780147][ T3385] usb 14-1: device descriptor read/8, error -110
[  187.839339][T11213] EXT4-fs (loop1): 1 truncate cleaned up
[  187.845590][T11213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.890745][ T3385] usb 14-1: new SuperSpeed USB device number 18 using vhci_hcd
[  187.908357][T11203] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2415'.
[  187.926469][ T3385] usb 14-1: enqueue for inactive port 0
[  187.932570][ T3386] usb 6-1: device descriptor read/8, error -110
[  187.938957][ T3385] usb 14-1: enqueue for inactive port 0
[  187.944996][ T3385] usb 14-1: enqueue for inactive port 0
[  188.022979][T11224] SELinux: failed to load policy
[  188.039812][ T3386] usb 6-1: new SuperSpeed USB device number 26 using vhci_hcd
[  188.061562][ T3386] usb 6-1: enqueue for inactive port 0
[  188.067300][ T3386] usb 6-1: enqueue for inactive port 0
[  188.076990][ T3386] usb 6-1: enqueue for inactive port 0
[  188.081279][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.145943][T11226] loop6: detected capacity change from 0 to 128
[  188.193040][T11226] syz.6.2423: attempt to access beyond end of device
[  188.193040][T11226] loop6: rw=0, sector=121, nr_sectors = 120 limit=128
[  188.294581][ T8971] kworker/u8:28: attempt to access beyond end of device
[  188.294581][ T8971] loop6: rw=1, sector=241, nr_sectors = 800 limit=128
[  188.308961][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2422'.
[  188.325230][T11235] vlan2: entered promiscuous mode
[  188.330679][T11235] vlan2: entered allmulticast mode
[  188.335949][T11235] hsr_slave_1: entered allmulticast mode
[  188.372377][T11239] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  188.379025][T11239] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  188.386694][T11239] vhci_hcd vhci_hcd.0: Device attached
[  188.395893][T11237] FAULT_INJECTION: forcing a failure.
[  188.395893][T11237] name failslab, interval 1, probability 0, space 0, times 0
[  188.408668][T11237] CPU: 0 UID: 0 PID: 11237 Comm: syz.7.2425 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) 
[  188.408706][T11237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  188.408723][T11237] Call Trace:
[  188.408803][T11237]  <TASK>
[  188.408813][T11237]  __dump_stack+0x1d/0x30
[  188.408842][T11237]  dump_stack_lvl+0xe8/0x140
[  188.408906][T11237]  dump_stack+0x15/0x1b
[  188.408929][T11237]  should_fail_ex+0x265/0x280
[  188.408982][T11237]  should_failslab+0x8c/0xb0
[  188.409051][T11237]  __kmalloc_noprof+0xa5/0x3e0
[  188.409086][T11237]  ? security_sk_alloc+0x52/0x120
[  188.409112][T11237]  ? should_failslab+0x8c/0xb0
[  188.409219][T11237]  security_sk_alloc+0x52/0x120
[  188.409240][T11237]  sk_prot_alloc+0xc2/0x190
[  188.409399][T11237]  sk_alloc+0x34/0x360
[  188.409449][T11237]  bpf_prog_test_run_skb+0x234/0xbd0
[  188.409470][T11237]  ? __rcu_read_unlock+0x4f/0x70
[  188.409498][T11237]  ? __fget_files+0x184/0x1c0
[  188.409566][T11237]  ? __rcu_read_unlock+0x4f/0x70
[  188.409598][T11237]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  188.409623][T11237]  bpf_prog_test_run+0x227/0x390
[  188.409669][T11237]  __sys_bpf+0x3dc/0x790
[  188.409773][T11237]  __x64_sys_bpf+0x41/0x50
[  188.409816][T11237]  x64_sys_call+0x2478/0x2fb0
[  188.409844][T11237]  do_syscall_64+0xd2/0x200
[  188.409940][T11237]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  188.409973][T11237]  ? clear_bhb_loop+0x40/0x90
[  188.410001][T11237]  ? clear_bhb_loop+0x40/0x90
[  188.410031][T11237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.410059][T11237] RIP: 0033:0x7f144000e929
[  188.410081][T11237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.410154][T11237] RSP: 002b:00007f143e677038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  188.410180][T11237] RAX: ffffffffffffffda RBX: 00007f1440235fa0 RCX: 00007f144000e929
[  188.410197][T11237] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  188.410213][T11237] RBP: 00007f143e677090 R08: 0000000000000000 R09: 0000000000000000
[  188.410300][T11237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  188.410315][T11237] R13: 0000000000000000 R14: 00007f1440235fa0 R15: 00007fff23c05a88
[  188.410336][T11237]  </TASK>
[  188.656760][T11244] loop2: detected capacity change from 0 to 2048
[  188.668254][T11240] vhci_hcd: connection closed
[  188.668585][ T8983] vhci_hcd: stop threads
[  188.677633][ T8983] vhci_hcd: release socket
[  188.682153][ T8983] vhci_hcd: disconnect device
[  188.690691][T11244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.696741][T11243] loop1: detected capacity change from 0 to 128
[  188.784889][T11253] loop3: detected capacity change from 0 to 128
[  188.812909][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.817752][T11257] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2428'.
[  188.867030][ T8987] kworker/u8:44: attempt to access beyond end of device
[  188.867030][ T8987] loop1: rw=1, sector=145, nr_sectors = 8 limit=128
[  188.886091][ T8987] kworker/u8:44: attempt to access beyond end of device
[  188.886091][ T8987] loop1: rw=1, sector=161, nr_sectors = 8 limit=128
[  188.903073][ T8987] kworker/u8:44: attempt to access beyond end of device
[  188.903073][ T8987] loop1: rw=1, sector=177, nr_sectors = 8 limit=128
[  188.916948][ T8987] kworker/u8:44: attempt to access beyond end of device
[  188.916948][ T8987] loop1: rw=1, sector=193, nr_sectors = 8 limit=128
[  188.930735][T11253] syz.3.2429: attempt to access beyond end of device
[  188.930735][T11253] loop3: rw=0, sector=121, nr_sectors = 120 limit=128
[  188.944368][ T8987] kworker/u8:44: attempt to access beyond end of device
[  188.944368][ T8987] loop1: rw=1, sector=209, nr_sectors = 8 limit=128
[  188.950267][T11261] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.2431'.
[  188.966980][T11261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2431'.
[  189.090697][ T3385] usb usb14-port1: attempt power cycle
[  189.104083][T11274] loop2: detected capacity change from 0 to 128
[  189.160448][ T3400] vhci_hcd: vhci_device speed not set
[  189.198335][ T3555] syz1: Port: 1 Link DOWN
[  189.277568][T11287] loop2: detected capacity change from 0 to 512
[  189.300226][ T3386] usb usb6-port1: attempt power cycle
[  189.306514][T11287] EXT4-fs: Ignoring removed nobh option
[  189.315743][T11287] ext4: Unknown parameter 'dioread_lock"'
[  189.437101][T11296] loop2: detected capacity change from 0 to 128
[  189.452585][T11297] FAULT_INJECTION: forcing a failure.
[  189.452585][T11297] name failslab, interval 1, probability 0, space 0, times 0
[  189.465326][T11297] CPU: 1 UID: 0 PID: 11297 Comm: syz.1.2443 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) 
[  189.465391][T11297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  189.465409][T11297] Call Trace:
[  189.465416][T11297]  <TASK>
[  189.465425][T11297]  __dump_stack+0x1d/0x30
[  189.465452][T11297]  dump_stack_lvl+0xe8/0x140
[  189.465481][T11297]  dump_stack+0x15/0x1b
[  189.465529][T11297]  should_fail_ex+0x265/0x280
[  189.465599][T11297]  ? audit_log_d_path+0x8d/0x150
[  189.465643][T11297]  should_failslab+0x8c/0xb0
[  189.465751][T11297]  __kmalloc_cache_noprof+0x4c/0x320
[  189.465787][T11297]  audit_log_d_path+0x8d/0x150
[  189.465902][T11297]  audit_log_d_path_exe+0x42/0x70
[  189.465943][T11297]  audit_log_task+0x1e9/0x250
[  189.465983][T11297]  audit_seccomp+0x61/0x100
[  189.466012][T11297]  ? __seccomp_filter+0x68c/0x10d0
[  189.466037][T11297]  __seccomp_filter+0x69d/0x10d0
[  189.466121][T11297]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  189.466151][T11297]  ? vfs_write+0x75e/0x8e0
[  189.466171][T11297]  ? __rcu_read_unlock+0x4f/0x70
[  189.466251][T11297]  ? __fget_files+0x184/0x1c0
[  189.466285][T11297]  __secure_computing+0x82/0x150
[  189.466316][T11297]  syscall_trace_enter+0xcf/0x1e0
[  189.466427][T11297]  do_syscall_64+0xac/0x200
[  189.466535][T11297]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  189.466567][T11297]  ? clear_bhb_loop+0x40/0x90
[  189.466671][T11297]  ? clear_bhb_loop+0x40/0x90
[  189.466695][T11297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.466733][T11297] RIP: 0033:0x7f0a63a0e929
[  189.466753][T11297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.466776][T11297] RSP: 002b:00007f0a62077038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e1
[  189.466799][T11297] RAX: ffffffffffffffda RBX: 00007f0a63c35fa0 RCX: 00007f0a63a0e929
[  189.466811][T11297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  189.466823][T11297] RBP: 00007f0a62077090 R08: 0000000000000000 R09: 0000000000000000
[  189.466913][T11297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  189.466929][T11297] R13: 0000000000000000 R14: 00007f0a63c35fa0 R15: 00007ffd67a353d8
[  189.466953][T11297]  </TASK>
[  189.882128][T11314] SELinux: failed to load policy
[  189.896584][T11319] FAULT_INJECTION: forcing a failure.
[  189.896584][T11319] name failslab, interval 1, probability 0, space 0, times 0
[  189.909432][T11319] CPU: 0 UID: 0 PID: 11319 Comm: syz.2.2453 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) 
[  189.909464][T11319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  189.909478][T11319] Call Trace:
[  189.909487][T11319]  <TASK>
[  189.909497][T11319]  __dump_stack+0x1d/0x30
[  189.909524][T11319]  dump_stack_lvl+0xe8/0x140
[  189.909547][T11319]  dump_stack+0x15/0x1b
[  189.909567][T11319]  should_fail_ex+0x265/0x280
[  189.909697][T11319]  should_failslab+0x8c/0xb0
[  189.909732][T11319]  __kmalloc_noprof+0xa5/0x3e0
[  189.909766][T11319]  ? ethnl_default_start+0xe6/0x330
[  189.909840][T11319]  ethnl_default_start+0xe6/0x330
[  189.909871][T11319]  ? __pfx_ethnl_default_start+0x10/0x10
[  189.909903][T11319]  genl_start+0x2e0/0x390
[  189.909942][T11319]  __netlink_dump_start+0x334/0x520
[  189.910042][T11319]  genl_family_rcv_msg_dumpit+0x115/0x180
[  189.910082][T11319]  ? __pfx_genl_start+0x10/0x10
[  189.910116][T11319]  ? __pfx_genl_dumpit+0x10/0x10
[  189.910203][T11319]  ? __pfx_genl_done+0x10/0x10
[  189.910240][T11319]  genl_rcv_msg+0x3f0/0x460
[  189.910267][T11319]  ? __pfx_ethnl_default_start+0x10/0x10
[  189.910293][T11319]  ? __pfx_ethnl_default_dumpit+0x10/0x10
[  189.910342][T11319]  ? __pfx_ethnl_default_done+0x10/0x10
[  189.910373][T11319]  netlink_rcv_skb+0x123/0x220
[  189.910399][T11319]  ? __pfx_genl_rcv_msg+0x10/0x10
[  189.910444][T11319]  genl_rcv+0x28/0x40
[  189.910557][T11319]  netlink_unicast+0x5a1/0x670
[  189.910601][T11319]  netlink_sendmsg+0x58b/0x6b0
[  189.910686][T11319]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.910745][T11319]  __sock_sendmsg+0x145/0x180
[  189.910850][T11319]  ____sys_sendmsg+0x31e/0x4e0
[  189.910877][T11319]  ___sys_sendmsg+0x17b/0x1d0
[  189.910923][T11319]  __x64_sys_sendmsg+0xd4/0x160
[  189.911008][T11319]  x64_sys_call+0x2999/0x2fb0
[  189.911040][T11319]  do_syscall_64+0xd2/0x200
[  189.911068][T11319]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  189.911103][T11319]  ? clear_bhb_loop+0x40/0x90
[  189.911181][T11319]  ? clear_bhb_loop+0x40/0x90
[  189.911203][T11319]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.911226][T11319] RIP: 0033:0x7f9d0ad1e929
[  189.911246][T11319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.911273][T11319] RSP: 002b:00007f9d09387038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  189.911299][T11319] RAX: ffffffffffffffda RBX: 00007f9d0af45fa0 RCX: 00007f9d0ad1e929
[  189.911316][T11319] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  189.911413][T11319] RBP: 00007f9d09387090 R08: 0000000000000000 R09: 0000000000000000
[  189.911429][T11319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  189.911442][T11319] R13: 0000000000000000 R14: 00007f9d0af45fa0 R15: 00007fffa2bbb6b8
[  189.911462][T11319]  </TASK>
[  190.225923][T11310] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2449'.
[  190.330288][   T36] usb 4-1: device descriptor read/8, error -110
[  190.514738][   T36] usb 4-1: new SuperSpeed USB device number 22 using vhci_hcd
[  190.540606][   T36] usb 4-1: enqueue for inactive port 0
[  190.550158][   T36] usb 4-1: enqueue for inactive port 0
[  190.555719][   T36] usb 4-1: enqueue for inactive port 0
[  191.037941][T11371] loop2: detected capacity change from 0 to 128
[  191.085572][   T29] kauditd_printk_skb: 223 callbacks suppressed
[  191.085657][   T29] audit: type=1326 audit(1749801049.490:5500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.6.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150927e929 code=0x7ffc0000
[  191.120872][T11373] loop6: detected capacity change from 0 to 512
[  191.142409][T11373] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.162534][   T29] audit: type=1326 audit(1749801049.520:5501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.6.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f150927e929 code=0x7ffc0000
[  191.186281][   T29] audit: type=1326 audit(1749801049.520:5502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.6.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150927e929 code=0x7ffc0000
[  191.209481][T11373] ext4 filesystem being mounted at /451/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  191.209873][   T29] audit: type=1326 audit(1749801049.520:5503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.6.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150927e929 code=0x7ffc0000
[  191.225038][T11382] netlink: 'syz.7.2473': attribute type 10 has an invalid length.
[  191.243573][   T29] audit: type=1326 audit(1749801049.520:5504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.6.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f150927e929 code=0x7ffc0000
[  191.275204][   T29] audit: type=1326 audit(1749801049.520:5505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.6.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150927e929 code=0x7ffc0000
[  191.299011][   T29] audit: type=1326 audit(1749801049.520:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.6.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150927e929 code=0x7ffc0000
[  191.322547][   T29] audit: type=1326 audit(1749801049.520:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.6.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f150927e929 code=0x7ffc0000
[  191.324806][T11382] netlink: 'syz.7.2473': attribute type 10 has an invalid length.
[  191.346170][   T29] audit: type=1326 audit(1749801049.520:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.6.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f150927e963 code=0x7ffc0000
[  191.346215][   T29] audit: type=1326 audit(1749801049.520:5509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.6.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f150927d3df code=0x7ffc0000
[  191.359683][T11373] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.2471: corrupted inode contents
[  191.413928][T11373] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.2471: mark_inode_dirty error
[  191.414276][T11382] team0: Port device dummy0 removed
[  191.428356][T11373] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.2471: corrupted inode contents
[  191.443220][T11373] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.2471: mark_inode_dirty error
[  191.458718][T11382] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  191.462754][    T9] usb 16-1: device descriptor read/8, error -110
[  191.507992][T11389] loop2: detected capacity change from 0 to 128
[  191.519353][T11386] loop7: detected capacity change from 0 to 512
[  191.527350][T11386] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  191.557401][T11386] EXT4-fs error (device loop7): xattr_find_entry:333: inode #15: comm syz.7.2476: corrupted xattr entries
[  191.575510][T11386] EXT4-fs (loop7): Remounting filesystem read-only
[  191.587111][T11386] EXT4-fs (loop7): 1 truncate cleaned up
[  191.591203][    T9] usb 16-1: new SuperSpeed USB device number 6 using vhci_hcd
[  191.600168][   T36] usb usb4-port1: attempt power cycle
[  191.606942][T11386] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.620274][    T9] usb 16-1: enqueue for inactive port 0
[  191.624620][T11386] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  191.626038][    T9] usb 16-1: enqueue for inactive port 0
[  191.651873][    T9] usb 16-1: enqueue for inactive port 0
[  191.746632][T11401] SELinux:  policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c
[  191.756916][T11401] SELinux: failed to load policy
[  191.764424][T11400] SELinux: failed to load policy
[  191.830654][T11386] netlink: 'syz.7.2476': attribute type 21 has an invalid length.
[  191.838638][T11386] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2476'.
[  191.898180][ T8445] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.960320][ T3386] usb usb6-port1: unable to enumerate USB device
[  192.336472][ T4398] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.356126][T11434] SELinux: failed to load policy
[  192.390089][ T3385] usb usb14-port1: unable to enumerate USB device
[  192.417118][T11438] Invalid ELF header magic: != ELF
[  192.455607][T11438] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.465705][T11442] loop2: detected capacity change from 0 to 1024
[  192.473119][T11442] EXT4-fs: Ignoring removed oldalloc option
[  192.483425][T11442] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  192.503229][T11442] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec019, mo2=0083]
[  192.513750][T11438] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.514902][T11442] System zones: 1-12
[  192.528233][T11442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.563410][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.598961][T11438] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.625593][T11453] FAULT_INJECTION: forcing a failure.
[  192.625593][T11453] name failslab, interval 1, probability 0, space 0, times 0
[  192.638426][T11453] CPU: 1 UID: 0 PID: 11453 Comm: syz.7.2500 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) 
[  192.638464][T11453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  192.638486][T11453] Call Trace:
[  192.638499][T11453]  <TASK>
[  192.638509][T11453]  __dump_stack+0x1d/0x30
[  192.638544][T11453]  dump_stack_lvl+0xe8/0x140
[  192.638583][T11453]  dump_stack+0x15/0x1b
[  192.638606][T11453]  should_fail_ex+0x265/0x280
[  192.638678][T11453]  should_failslab+0x8c/0xb0
[  192.638709][T11453]  kmem_cache_alloc_noprof+0x50/0x310
[  192.638795][T11453]  ? getname_flags+0x80/0x3b0
[  192.638867][T11453]  ? fput+0x8f/0xc0
[  192.638898][T11453]  getname_flags+0x80/0x3b0
[  192.638931][T11453]  __x64_sys_execve+0x42/0x70
[  192.638985][T11453]  x64_sys_call+0x13ab/0x2fb0
[  192.639015][T11453]  do_syscall_64+0xd2/0x200
[  192.639042][T11453]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  192.639145][T11453]  ? clear_bhb_loop+0x40/0x90
[  192.639175][T11453]  ? clear_bhb_loop+0x40/0x90
[  192.639205][T11453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.639254][T11453] RIP: 0033:0x7f144000e929
[  192.639273][T11453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.639298][T11453] RSP: 002b:00007f143e677038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  192.639324][T11453] RAX: ffffffffffffffda RBX: 00007f1440235fa0 RCX: 00007f144000e929
[  192.639341][T11453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  192.639421][T11453] RBP: 00007f143e677090 R08: 0000000000000000 R09: 0000000000000000
[  192.639438][T11453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  192.639452][T11453] R13: 0000000000000000 R14: 00007f1440235fa0 R15: 00007fff23c05a88
[  192.639474][T11453]  </TASK>
[  192.847833][T11454] __nla_validate_parse: 4 callbacks suppressed
[  192.847851][T11454] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.2499'.
[  192.863359][T11454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2499'.
[  192.875399][T11438] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.886508][    T9] usb usb16-port1: attempt power cycle
[  192.949942][T11438] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.979402][T11438] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.021197][T11438] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.052960][T11438] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.102049][T11461] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  193.108631][T11461] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  193.116527][T11461] vhci_hcd vhci_hcd.0: Device attached
[  193.145307][T11461] netlink: 'syz.2.2503': attribute type 21 has an invalid length.
[  193.158155][T11457] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2501'.
[  193.242310][T11469] SELinux: failed to load policy
[  193.247533][T11473] loop6: detected capacity change from 0 to 128
[  193.300737][T11473] bio_check_eod: 116 callbacks suppressed
[  193.300758][T11473] syz.6.2507: attempt to access beyond end of device
[  193.300758][T11473] loop6: rw=0, sector=121, nr_sectors = 120 limit=128
[  193.338200][T11479] loop1: detected capacity change from 0 to 1024
[  193.389857][ T3555] usb 6-1: SetAddress Request (30) to port 0
[  193.396581][ T3555] usb 6-1: new SuperSpeed USB device number 30 using vhci_hcd
[  193.448963][ T9047] kworker/u8:68: attempt to access beyond end of device
[  193.448963][ T9047] loop6: rw=1, sector=241, nr_sectors = 800 limit=128
[  193.476499][T11490] netlink: 2036 bytes leftover after parsing attributes in process `syz.7.2512'.
[  193.485742][T11490] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2512'.
[  193.495352][T11489] geneve0: entered allmulticast mode
[  193.641892][T11501] SELinux: failed to load policy
[  193.670101][   T36] usb usb4-port1: unable to enumerate USB device
[  193.688369][T11505] netlink: 'syz.7.2521': attribute type 10 has an invalid length.
[  193.719918][T11507] loop3: detected capacity change from 0 to 128
[  193.735526][T11509] loop1: detected capacity change from 0 to 128
[  193.745432][T11505] bond0: (slave dummy0): Releasing backup interface
[  193.754962][T11510] FAULT_INJECTION: forcing a failure.
[  193.754962][T11510] name failslab, interval 1, probability 0, space 0, times 0
[  193.767792][T11510] CPU: 0 UID: 0 PID: 11510 Comm: syz.7.2521 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) 
[  193.767825][T11510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  193.767838][T11510] Call Trace:
[  193.767845][T11510]  <TASK>
[  193.767853][T11510]  __dump_stack+0x1d/0x30
[  193.767876][T11510]  dump_stack_lvl+0xe8/0x140
[  193.767962][T11510]  dump_stack+0x15/0x1b
[  193.767979][T11510]  should_fail_ex+0x265/0x280
[  193.768064][T11510]  should_failslab+0x8c/0xb0
[  193.768090][T11510]  kmem_cache_alloc_node_noprof+0x57/0x320
[  193.768121][T11510]  ? __alloc_skb+0x101/0x320
[  193.768164][T11510]  __alloc_skb+0x101/0x320
[  193.768261][T11510]  netlink_alloc_large_skb+0xba/0xf0
[  193.768300][T11510]  netlink_sendmsg+0x3cf/0x6b0
[  193.768442][T11510]  ? __pfx_netlink_sendmsg+0x10/0x10
[  193.768467][T11510]  __sock_sendmsg+0x145/0x180
[  193.768568][T11510]  ____sys_sendmsg+0x31e/0x4e0
[  193.768595][T11510]  ___sys_sendmsg+0x17b/0x1d0
[  193.768635][T11510]  __x64_sys_sendmsg+0xd4/0x160
[  193.768664][T11510]  x64_sys_call+0x2999/0x2fb0
[  193.768708][T11510]  do_syscall_64+0xd2/0x200
[  193.768734][T11510]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  193.768764][T11510]  ? clear_bhb_loop+0x40/0x90
[  193.768787][T11510]  ? clear_bhb_loop+0x40/0x90
[  193.768810][T11510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.768899][T11510] RIP: 0033:0x7f144000e929
[  193.768949][T11510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  193.768969][T11510] RSP: 002b:00007f143e656038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  193.768989][T11510] RAX: ffffffffffffffda RBX: 00007f1440236080 RCX: 00007f144000e929
[  193.769003][T11510] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004
[  193.769016][T11510] RBP: 00007f143e656090 R08: 0000000000000000 R09: 0000000000000000
[  193.769107][T11510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  193.769197][T11510] R13: 0000000000000000 R14: 00007f1440236080 R15: 00007fff23c05a88
[  193.769218][T11510]  </TASK>
[  193.988402][T11505] team0: Failed to send options change via netlink (err -105)
[  193.996003][T11505] team0: Port device dummy0 added
[  194.003109][T11462] vhci_hcd: connection reset by peer
[  194.020043][T11511] syz.3.2522: attempt to access beyond end of device
[  194.020043][T11511] loop3: rw=0, sector=121, nr_sectors = 120 limit=128
[  194.038448][T11509] syz.1.2523: attempt to access beyond end of device
[  194.038448][T11509] loop1: rw=0, sector=121, nr_sectors = 120 limit=128
[  194.052583][ T8983] vhci_hcd: stop threads
[  194.056866][ T8983] vhci_hcd: release socket
[  194.061405][ T8983] vhci_hcd: disconnect device
[  194.089840][ T8952] kworker/u8:11: attempt to access beyond end of device
[  194.089840][ T8952] loop1: rw=1, sector=241, nr_sectors = 800 limit=128
[  194.118629][ T8987] kworker/u8:44: attempt to access beyond end of device
[  194.118629][ T8987] loop3: rw=1, sector=241, nr_sectors = 800 limit=128
[  194.278678][T11526] netlink: 'syz.7.2528': attribute type 10 has an invalid length.
[  194.306791][T11526] FAULT_INJECTION: forcing a failure.
[  194.306791][T11526] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  194.320005][T11526] CPU: 1 UID: 0 PID: 11526 Comm: syz.7.2528 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) 
[  194.320042][T11526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  194.320059][T11526] Call Trace:
[  194.320066][T11526]  <TASK>
[  194.320073][T11526]  __dump_stack+0x1d/0x30
[  194.320145][T11526]  dump_stack_lvl+0xe8/0x140
[  194.320171][T11526]  dump_stack+0x15/0x1b
[  194.320192][T11526]  should_fail_ex+0x265/0x280
[  194.320328][T11526]  should_fail+0xb/0x20
[  194.320362][T11526]  should_fail_usercopy+0x1a/0x20
[  194.320383][T11526]  _copy_from_iter+0xcf/0xe40
[  194.320480][T11526]  ? __build_skb_around+0x1a0/0x200
[  194.320514][T11526]  ? __alloc_skb+0x223/0x320
[  194.320623][T11526]  netlink_sendmsg+0x471/0x6b0
[  194.320655][T11526]  ? __pfx_netlink_sendmsg+0x10/0x10
[  194.320685][T11526]  __sock_sendmsg+0x145/0x180
[  194.320723][T11526]  ____sys_sendmsg+0x31e/0x4e0
[  194.320752][T11526]  ___sys_sendmsg+0x17b/0x1d0
[  194.320817][T11526]  __x64_sys_sendmsg+0xd4/0x160
[  194.320842][T11526]  x64_sys_call+0x2999/0x2fb0
[  194.320868][T11526]  do_syscall_64+0xd2/0x200
[  194.320896][T11526]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  194.320931][T11526]  ? clear_bhb_loop+0x40/0x90
[  194.320973][T11526]  ? clear_bhb_loop+0x40/0x90
[  194.320994][T11526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.321067][T11526] RIP: 0033:0x7f144000e929
[  194.321097][T11526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  194.321165][T11526] RSP: 002b:00007f143e677038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  194.321190][T11526] RAX: ffffffffffffffda RBX: 00007f1440235fa0 RCX: 00007f144000e929
[  194.321206][T11526] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004
[  194.321233][T11526] RBP: 00007f143e677090 R08: 0000000000000000 R09: 0000000000000000
[  194.321246][T11526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  194.321258][T11526] R13: 0000000000000000 R14: 00007f1440235fa0 R15: 00007fff23c05a88
[  194.321301][T11526]  </TASK>
[  194.627180][T11537] netlink: 2036 bytes leftover after parsing attributes in process `syz.6.2530'.
[  194.636484][T11537] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2530'.
[  194.729678][T11541] SELinux: failed to load policy
[  194.774833][T11545] loop3: detected capacity change from 0 to 2048
[  194.805759][T11546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2534'.
[  194.815505][T11545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.834614][T11555] loop6: detected capacity change from 0 to 128
[  194.842229][T11545] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.888379][T11557] usb usb8: usbfs: process 11557 (syz.7.2538) did not claim interface 0 before use
[  194.910151][T11555] syz.6.2537: attempt to access beyond end of device
[  194.910151][T11555] loop6: rw=0, sector=121, nr_sectors = 120 limit=128
[  194.960080][    T9] usb usb16-port1: unable to enumerate USB device
[  194.975240][ T9047] kworker/u8:68: attempt to access beyond end of device
[  194.975240][ T9047] loop6: rw=1, sector=241, nr_sectors = 800 limit=128
[  195.015413][T11566] FAULT_INJECTION: forcing a failure.
[  195.015413][T11566] name failslab, interval 1, probability 0, space 0, times 0
[  195.028362][T11566] CPU: 0 UID: 0 PID: 11566 Comm: syz.6.2541 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) 
[  195.028466][T11566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  195.028483][T11566] Call Trace:
[  195.028491][T11566]  <TASK>
[  195.028501][T11566]  __dump_stack+0x1d/0x30
[  195.028528][T11566]  dump_stack_lvl+0xe8/0x140
[  195.028607][T11566]  dump_stack+0x15/0x1b
[  195.028624][T11566]  should_fail_ex+0x265/0x280
[  195.028715][T11566]  should_failslab+0x8c/0xb0
[  195.028738][T11566]  kmem_cache_alloc_noprof+0x50/0x310
[  195.028769][T11566]  ? audit_log_start+0x365/0x6c0
[  195.028878][T11566]  audit_log_start+0x365/0x6c0
[  195.029001][T11566]  audit_seccomp+0x48/0x100
[  195.029030][T11566]  ? __seccomp_filter+0x68c/0x10d0
[  195.029057][T11566]  __seccomp_filter+0x69d/0x10d0
[  195.029089][T11566]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  195.029150][T11566]  ? vfs_write+0x75e/0x8e0
[  195.029176][T11566]  __secure_computing+0x82/0x150
[  195.029199][T11566]  syscall_trace_enter+0xcf/0x1e0
[  195.029365][T11566]  do_syscall_64+0xac/0x200
[  195.029387][T11566]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  195.029439][T11566]  ? clear_bhb_loop+0x40/0x90
[  195.029529][T11566]  ? clear_bhb_loop+0x40/0x90
[  195.029613][T11566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.029700][T11566] RIP: 0033:0x7f150927e929
[  195.029725][T11566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  195.029749][T11566] RSP: 002b:00007f15078e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[  195.029773][T11566] RAX: ffffffffffffffda RBX: 00007f15094a5fa0 RCX: 00007f150927e929
[  195.029790][T11566] RDX: 0000200000000980 RSI: 0000200000000940 RDI: 0000200000000900
[  195.029805][T11566] RBP: 00007f15078e7090 R08: 0000000000000000 R09: 0000000000000000
[  195.029818][T11566] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000001
[  195.029893][T11566] R13: 0000000000000000 R14: 00007f15094a5fa0 R15: 00007ffde600a138
[  195.029919][T11566]  </TASK>
[  195.241598][T11566] SELinux:  Context system_u:object is not valid (left unmapped).
[  195.263100][T11573] SELinux:  Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped).
[  195.322965][T11581] loop6: detected capacity change from 0 to 256
[  195.358937][T11581] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  195.367874][T11581] FAT-fs (loop6): Filesystem has been set read-only
[  195.376236][T11580] SELinux: failed to load policy
[  195.388282][T11581] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  195.401483][T11581] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  195.410450][T11581] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  195.426727][T11581] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  195.435948][T11581] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  195.444906][T11581] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  195.455402][T11581] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  195.464322][T11581] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  195.473840][T11581] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  195.494460][T11586] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[  195.501044][T11586] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  195.508865][T11586] vhci_hcd vhci_hcd.0: Device attached
[  195.571779][T11597] netlink: 'syz.1.2553': attribute type 10 has an invalid length.
[  195.580060][T11581] FAT-fs (loop6): Filesystem has been set read-only
[  195.625861][T11603] netlink: 'syz.1.2553': attribute type 10 has an invalid length.
[  195.637088][T11600] loop7: detected capacity change from 0 to 512
[  195.654593][T11597] team0: Port device dummy0 added
[  195.668141][T11603] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  195.680165][T11600] EXT4-fs: Ignoring removed i_version option
[  195.698319][T11600] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  195.719053][T11603] team0: Failed to send options change via netlink (err -105)
[  195.738517][T11603] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  195.764502][T11603] team0: Port device dummy0 removed
[  195.777286][T11600] EXT4-fs (loop7): can't mount with journal_checksum, fs mounted w/o journal
[  195.794236][ T3386] usb 14-1: SetAddress Request (22) to port 0
[  195.797705][T11603] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  195.802751][ T3386] usb 14-1: new SuperSpeed USB device number 22 using vhci_hcd
[  196.011600][T11626] loop2: detected capacity change from 0 to 128
[  196.075276][T11626] syz.2.2561: attempt to access beyond end of device
[  196.075276][T11626] loop2: rw=0, sector=121, nr_sectors = 120 limit=128
[  196.162756][T11591] vhci_hcd: connection reset by peer
[  196.168490][ T8983] vhci_hcd: stop threads
[  196.172834][ T8983] vhci_hcd: release socket
[  196.177302][ T8983] vhci_hcd: disconnect device
[  196.200072][ T8971] kworker/u8:28: attempt to access beyond end of device
[  196.200072][ T8971] loop2: rw=1, sector=241, nr_sectors = 800 limit=128
[  196.215934][T11634] loop1: detected capacity change from 0 to 128
[  196.252718][T11622] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2559'.
[  196.343286][T11638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2565'.
[  196.406013][   T29] kauditd_printk_skb: 434 callbacks suppressed
[  196.406029][   T29] audit: type=1400 audit(1749801054.810:5942): avc:  denied  { append } for  pid=11643 comm="syz.7.2568" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  196.463232][T11647] netlink: 'syz.3.2570': attribute type 10 has an invalid length.
[  196.505203][T11647] team0: Port device dummy0 added
[  196.517310][T11651] netlink: 'syz.3.2570': attribute type 10 has an invalid length.
[  196.538282][T11651] team0: Port device dummy0 removed
[  196.551552][T11651] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  196.577746][T11652] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  196.577746][T11652] The task syz.7.2571 (11652) triggered the difference, watch for misbehavior.
[  196.608038][   T29] audit: type=1400 audit(1749801055.010:5943): avc:  denied  { create } for  pid=11649 comm="syz.7.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  196.630799][   T29] audit: type=1400 audit(1749801055.010:5944): avc:  denied  { write } for  pid=11649 comm="syz.7.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  196.650532][   T29] audit: type=1400 audit(1749801055.010:5945): avc:  denied  { ioctl } for  pid=11649 comm="syz.7.2571" path="socket:[32149]" dev="sockfs" ino=32149 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  196.735363][   T29] audit: type=1400 audit(1749801055.140:5946): avc:  denied  { setattr } for  pid=11655 comm="syz.6.2573" name="file0" dev="tmpfs" ino=2517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  196.767930][T11658] SELinux: failed to load policy
[  196.807717][T11661] netlink: 'syz.3.2575': attribute type 10 has an invalid length.
[  196.818930][T11661] bond0: (slave dummy0): Releasing backup interface
[  196.828627][T11661] team0: Port device dummy0 added
[  196.854144][T11666] loop3: detected capacity change from 0 to 128
[  196.921701][   T29] audit: type=1326 audit(1749801055.330:5947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11669 comm="syz.3.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2fc7e929 code=0x7ffc0000
[  196.945384][   T29] audit: type=1326 audit(1749801055.330:5948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11669 comm="syz.3.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2fc7e929 code=0x7ffc0000
[  196.969123][   T29] audit: type=1326 audit(1749801055.350:5949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11669 comm="syz.3.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c2fc7e929 code=0x7ffc0000
[  196.992860][   T29] audit: type=1326 audit(1749801055.350:5950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11669 comm="syz.3.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2fc7e929 code=0x7ffc0000
[  197.016450][   T29] audit: type=1326 audit(1749801055.350:5951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11669 comm="syz.3.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2fc7e929 code=0x7ffc0000
[  197.350362][T11684] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  197.357042][T11684] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  197.364890][T11684] vhci_hcd vhci_hcd.0: Device attached
[  197.425799][T11684] netlink: 'syz.3.2582': attribute type 21 has an invalid length.
[  197.659097][T11717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.676841][T11717] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.726850][T11719] SELinux: failed to load policy
[  198.172509][T11685] vhci_hcd: connection closed
[  198.172628][ T8971] vhci_hcd: stop threads
[  198.181873][ T8971] vhci_hcd: release socket
[  198.186378][ T8971] vhci_hcd: disconnect device
[  198.234933][T11732] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  198.247799][T11732] loop1: detected capacity change from 0 to 512
[  198.256227][T11732] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  198.272345][T11732] EXT4-fs (loop1): 1 orphan inode deleted
[  198.278174][T11732] EXT4-fs (loop1): 1 truncate cleaned up
[  198.292785][T11732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.313245][T11738] FAULT_INJECTION: forcing a failure.
[  198.313245][T11738] name failslab, interval 1, probability 0, space 0, times 0
[  198.326086][T11738] CPU: 0 UID: 0 PID: 11738 Comm: syz.7.2603 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) 
[  198.326126][T11738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  198.326144][T11738] Call Trace:
[  198.326153][T11738]  <TASK>
[  198.326164][T11738]  __dump_stack+0x1d/0x30
[  198.326264][T11738]  dump_stack_lvl+0xe8/0x140
[  198.326320][T11738]  dump_stack+0x15/0x1b
[  198.326344][T11738]  should_fail_ex+0x265/0x280
[  198.326392][T11738]  ? sctp_add_bind_addr+0x71/0x1e0
[  198.326427][T11738]  should_failslab+0x8c/0xb0
[  198.326468][T11738]  __kmalloc_cache_noprof+0x4c/0x320
[  198.326510][T11738]  sctp_add_bind_addr+0x71/0x1e0
[  198.326547][T11738]  sctp_copy_local_addr_list+0x199/0x220
[  198.326665][T11738]  sctp_copy_one_addr+0x7f/0x280
[  198.326705][T11738]  sctp_bind_addr_copy+0x79/0x290
[  198.326742][T11738]  sctp_assoc_set_bind_addr_from_ep+0xce/0xe0
[  198.326851][T11738]  sctp_connect_new_asoc+0x1c3/0x3a0
[  198.326980][T11738]  sctp_sendmsg+0xf10/0x18d0
[  198.327093][T11738]  ? selinux_socket_sendmsg+0x121/0x1b0
[  198.327146][T11738]  ? __pfx_sctp_sendmsg+0x10/0x10
[  198.327214][T11738]  inet_sendmsg+0xc2/0xd0
[  198.327244][T11738]  __sock_sendmsg+0x102/0x180
[  198.327283][T11738]  ____sys_sendmsg+0x345/0x4e0
[  198.327316][T11738]  ___sys_sendmsg+0x17b/0x1d0
[  198.327396][T11738]  __sys_sendmmsg+0x178/0x300
[  198.327438][T11738]  __x64_sys_sendmmsg+0x57/0x70
[  198.327539][T11738]  x64_sys_call+0x2f2f/0x2fb0
[  198.327601][T11738]  do_syscall_64+0xd2/0x200
[  198.327630][T11738]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  198.327665][T11738]  ? clear_bhb_loop+0x40/0x90
[  198.327694][T11738]  ? clear_bhb_loop+0x40/0x90
[  198.327724][T11738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.327763][T11738] RIP: 0033:0x7f144000e929
[  198.327783][T11738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  198.327811][T11738] RSP: 002b:00007f143e677038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  198.327837][T11738] RAX: ffffffffffffffda RBX: 00007f1440235fa0 RCX: 00007f144000e929
[  198.327855][T11738] RDX: 0000000000000002 RSI: 0000200000000880 RDI: 0000000000000006
[  198.327873][T11738] RBP: 00007f143e677090 R08: 0000000000000000 R09: 0000000000000000
[  198.327905][T11738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  198.327922][T11738] R13: 0000000000000000 R14: 00007f1440235fa0 R15: 00007fff23c05a88
[  198.327948][T11738]  </TASK>
[  198.489830][ T3555] usb 6-1: device descriptor read/8, error -110
[  198.610726][T11742] loop6: detected capacity change from 0 to 128
[  198.640713][T11744] bridge0: entered promiscuous mode
[  198.647836][T11744] macsec1: entered promiscuous mode
[  198.648929][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.654876][T11744] bridge0: port 3(macsec1) entered blocking state
[  198.668648][T11744] bridge0: port 3(macsec1) entered disabled state
[  198.680086][ T3555] usb 6-1: new SuperSpeed USB device number 30 using vhci_hcd
[  198.696920][T11744] macsec1: entered allmulticast mode
[  198.702324][T11744] bridge0: entered allmulticast mode
[  198.710470][T11744] macsec1: left allmulticast mode
[  198.715580][T11744] bridge0: left allmulticast mode
[  198.722112][ T3555] usb 6-1: enqueue for inactive port 0
[  198.733652][T11748] bio_check_eod: 4 callbacks suppressed
[  198.733667][T11748] syz.6.2605: attempt to access beyond end of device
[  198.733667][T11748] loop6: rw=0, sector=121, nr_sectors = 120 limit=128
[  198.733821][T11744] bridge0: left promiscuous mode
[  198.742837][ T3555] usb 6-1: enqueue for inactive port 0
[  198.763782][ T3555] usb 6-1: enqueue for inactive port 0
[  198.823445][ T8983] kworker/u8:40: attempt to access beyond end of device
[  198.823445][ T8983] loop6: rw=1, sector=241, nr_sectors = 800 limit=128
[  198.953971][T11766] SELinux: failed to load policy
[  199.009967][T11773] __nla_validate_parse: 9 callbacks suppressed
[  199.009989][T11773] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.2613'.
[  199.025394][T11773] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2613'.
[  199.188600][T11781] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2615'.
[  199.344913][T11788] loop7: detected capacity change from 0 to 128
[  199.406604][T11788] syz.7.2621: attempt to access beyond end of device
[  199.406604][T11788] loop7: rw=0, sector=121, nr_sectors = 120 limit=128
[  199.442034][T11796] loop3: detected capacity change from 0 to 256
[  199.475593][T11796] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  199.484467][T11796] FAT-fs (loop3): Filesystem has been set read-only
[  199.510274][ T8986] kworker/u8:43: attempt to access beyond end of device
[  199.510274][ T8986] loop7: rw=1, sector=241, nr_sectors = 800 limit=128
[  199.524680][T11796] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  199.541755][T11796] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  199.552079][T11796] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  199.561216][T11796] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  199.575603][T11801] SELinux: failed to load policy
[  199.578247][T11796] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  199.589957][T11796] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  199.603089][T11796] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  199.631764][T11796] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  199.640655][T11796] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  199.659808][T11802] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  199.666436][T11802] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  199.674297][T11802] vhci_hcd vhci_hcd.0: Device attached
[  199.685815][T11809] netlink: 'syz.6.2628': attribute type 10 has an invalid length.
[  199.722598][T11796] FAT-fs (loop3): Filesystem has been set read-only
[  199.727099][T11819] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.2629'.
[  199.738639][T11819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2629'.
[  199.780151][ T3555] usb usb6-port1: attempt power cycle
[  199.968021][T11836] loop2: detected capacity change from 0 to 128
[  199.995773][T11816] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2631'.
[  200.040920][T11836] syz.2.2637: attempt to access beyond end of device
[  200.040920][T11836] loop2: rw=0, sector=121, nr_sectors = 120 limit=128
[  200.155587][ T8971] kworker/u8:28: attempt to access beyond end of device
[  200.155587][ T8971] loop2: rw=1, sector=241, nr_sectors = 800 limit=128
[  200.215473][T11850] netlink: 'syz.1.2641': attribute type 13 has an invalid length.
[  200.304393][T11854] SELinux: failed to load policy
[  200.318420][T11858] FAULT_INJECTION: forcing a failure.
[  200.318420][T11858] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  200.331715][T11858] CPU: 0 UID: 0 PID: 11858 Comm: syz.7.2643 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) 
[  200.331757][T11858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  200.331785][T11858] Call Trace:
[  200.331793][T11858]  <TASK>
[  200.331801][T11858]  __dump_stack+0x1d/0x30
[  200.331824][T11858]  dump_stack_lvl+0xe8/0x140
[  200.331846][T11858]  dump_stack+0x15/0x1b
[  200.331868][T11858]  should_fail_ex+0x265/0x280
[  200.331906][T11858]  should_fail+0xb/0x20
[  200.331992][T11858]  should_fail_usercopy+0x1a/0x20
[  200.332051][T11858]  strncpy_from_user+0x25/0x230
[  200.332079][T11858]  ? kmem_cache_alloc_noprof+0x186/0x310
[  200.332173][T11858]  ? getname_flags+0x80/0x3b0
[  200.332201][T11858]  getname_flags+0xae/0x3b0
[  200.332226][T11858]  __x64_sys_link+0x33/0x70
[  200.332246][T11858]  x64_sys_call+0x2af9/0x2fb0
[  200.332276][T11858]  do_syscall_64+0xd2/0x200
[  200.332384][T11858]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  200.332480][T11858]  ? clear_bhb_loop+0x40/0x90
[  200.332510][T11858]  ? clear_bhb_loop+0x40/0x90
[  200.332615][T11858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.332644][T11858] RIP: 0033:0x7f144000e929
[  200.332665][T11858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.332685][T11858] RSP: 002b:00007f143e677038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056
[  200.332709][T11858] RAX: ffffffffffffffda RBX: 00007f1440235fa0 RCX: 00007f144000e929
[  200.332728][T11858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040
[  200.332771][T11858] RBP: 00007f143e677090 R08: 0000000000000000 R09: 0000000000000000
[  200.332791][T11858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.332807][T11858] R13: 0000000000000000 R14: 00007f1440235fa0 R15: 00007fff23c05a88
[  200.332828][T11858]  </TASK>
[  200.419829][T11811] vhci_hcd: connection closed
[  200.576549][   T36] lo speed is unknown, defaulting to 1000
[  200.631191][T11868] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.2646'.
[  200.640467][T11868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2646'.
[  200.674972][ T8986] vhci_hcd: stop threads
[  200.679277][ T8986] vhci_hcd: release socket
[  200.683811][ T8986] vhci_hcd: disconnect device
[  200.818542][T11878] loop1: detected capacity change from 0 to 128
[  200.886003][T11878] syz.1.2650: attempt to access beyond end of device
[  200.886003][T11878] loop1: rw=0, sector=121, nr_sectors = 120 limit=128
[  200.900046][ T3386] usb 14-1: device descriptor read/8, error -110
[  200.984474][ T8983] kworker/u8:40: attempt to access beyond end of device
[  200.984474][ T8983] loop1: rw=1, sector=241, nr_sectors = 800 limit=128
[  201.022196][ T3386] usb 14-1: new SuperSpeed USB device number 22 using vhci_hcd
[  201.047265][T11898] loop1: detected capacity change from 0 to 128
[  201.058096][T11900] SELinux:  policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c
[  201.069461][T11898] vfat: Unknown parameter '�'
[  201.073667][ T3386] usb 14-1: enqueue for inactive port 0
[  201.080088][ T3386] usb 14-1: enqueue for inactive port 0
[  201.088188][T11900] SELinux: failed to load policy
[  201.093431][ T3386] usb 14-1: enqueue for inactive port 0
[  201.138078][T11904] bridge0: entered promiscuous mode
[  201.144408][T11904] macsec0: entered promiscuous mode
[  201.168666][T11904] bridge0: port 1(macsec0) entered blocking state
[  201.175303][T11904] bridge0: port 1(macsec0) entered disabled state
[  201.188128][T11904] macsec0: entered allmulticast mode
[  201.193584][T11904] bridge0: entered allmulticast mode
[  201.199598][T11904] macsec0: left allmulticast mode
[  201.204917][T11904] bridge0: left allmulticast mode
[  201.211348][T11904] bridge0: left promiscuous mode
[  201.238144][T11911] netlink: 2036 bytes leftover after parsing attributes in process `syz.7.2662'.
[  201.247411][T11911] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2662'.
[  201.421078][T11926] netlink: 'syz.2.2667': attribute type 4 has an invalid length.
[  201.472161][T11934] loop2: detected capacity change from 0 to 128
[  201.490785][   T29] kauditd_printk_skb: 208 callbacks suppressed
[  201.490804][   T29] audit: type=1400 audit(1749801060.895:6160): avc:  denied  { ioctl } for  pid=11931 comm="syz.3.2669" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  201.569692][T11938] SELinux: failed to load policy
[  201.578205][T11934] syz.2.2670: attempt to access beyond end of device
[  201.578205][T11934] loop2: rw=0, sector=121, nr_sectors = 120 limit=128
[  201.648117][T11945] loop7: detected capacity change from 0 to 1024
[  201.670245][ T3555] usb usb6-port1: unable to enumerate USB device
[  201.681523][T11945] EXT4-fs: Ignoring removed i_version option
[  201.688964][ T9047] kworker/u8:68: attempt to access beyond end of device
[  201.688964][ T9047] loop2: rw=1, sector=241, nr_sectors = 800 limit=128
[  201.706568][T11945] EXT4-fs: Ignoring removed mblk_io_submit option
[  201.713376][T11945] EXT4-fs: Ignoring removed nobh option
[  201.719018][T11945] EXT4-fs: Ignoring removed bh option
[  201.761993][T11945] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.776884][T11945] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.2675: Allocating blocks 385-513 which overlap fs metadata
[  201.797500][T11945] EXT4-fs (loop7): pa ffff888106e8b2a0: logic 16, phys. 129, len 24
[  201.805682][T11945] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[  201.827880][   T29] audit: type=1326 audit(1749801061.225:6161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.3.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2fc7e929 code=0x7ffc0000
[  201.851679][   T29] audit: type=1326 audit(1749801061.225:6162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.3.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2fc7e929 code=0x7ffc0000
[  201.875380][   T29] audit: type=1326 audit(1749801061.225:6163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.3.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f5c2fc7e929 code=0x7ffc0000
[  201.899135][   T29] audit: type=1326 audit(1749801061.225:6164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.3.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2fc7e929 code=0x7ffc0000
[  201.922673][   T29] audit: type=1326 audit(1749801061.225:6165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.3.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2fc7e929 code=0x7ffc0000
[  201.946363][   T29] audit: type=1326 audit(1749801061.225:6166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.3.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c2fc7e929 code=0x7ffc0000
[  201.969937][   T29] audit: type=1326 audit(1749801061.225:6167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.3.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2fc7e929 code=0x7ffc0000
[  201.993469][   T29] audit: type=1326 audit(1749801061.225:6168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.3.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2fc7e929 code=0x7ffc0000
[  202.017127][   T29] audit: type=1326 audit(1749801061.225:6169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.3.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c2fc7e929 code=0x7ffc0000
[  202.063618][ T8445] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.250039][ T3386] usb usb14-port1: attempt power cycle
[  202.452361][T11974] lo speed is unknown, defaulting to 1000
[  202.518804][T11974] lo speed is unknown, defaulting to 1000
[  203.109403][T11984] SELinux: failed to load policy
[  203.125522][T11986] loop7: detected capacity change from 0 to 128
[  203.212113][T11994] netlink: 'syz.3.2691': attribute type 4 has an invalid length.
[  203.610222][T12024] SELinux: failed to load policy
[  203.652374][T12026] loop2: detected capacity change from 0 to 128
[  203.799557][ T8983] bio_check_eod: 3 callbacks suppressed
[  203.799573][ T8983] kworker/u8:40: attempt to access beyond end of device
[  203.799573][ T8983] loop2: rw=1, sector=241, nr_sectors = 800 limit=128
[  204.002341][T12054] SELinux: failed to load policy
[  204.133721][T12065] loop3: detected capacity change from 0 to 128
[  204.184457][T12067] __nla_validate_parse: 11 callbacks suppressed
[  204.184476][T12067] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.2721'.
[  204.200195][T12067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2721'.
[  204.211700][T12065] syz.3.2722: attempt to access beyond end of device
[  204.211700][T12065] loop3: rw=0, sector=121, nr_sectors = 120 limit=128
[  204.236354][T12048] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2714'.
[  204.351049][ T8971] kworker/u8:28: attempt to access beyond end of device
[  204.351049][ T8971] loop3: rw=1, sector=241, nr_sectors = 800 limit=128
[  204.427363][T12087] SELinux: failed to load policy
[  204.475888][T12092] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2730'.
[  204.631122][T12106] loop2: detected capacity change from 0 to 128
[  204.687127][T12113] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.2741'.
[  204.696391][T12113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2741'.
[  204.708743][T12106] syz.2.2740: attempt to access beyond end of device
[  204.708743][T12106] loop2: rw=0, sector=121, nr_sectors = 120 limit=128
[  204.830673][ T8987] kworker/u8:44: attempt to access beyond end of device
[  204.830673][ T8987] loop2: rw=1, sector=241, nr_sectors = 800 limit=128
[  204.849966][ T3386] usb usb14-port1: unable to enumerate USB device
[  204.882288][T12120] SELinux: failed to load policy
[  204.919302][T12110] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2742'.
[  205.131913][T12140] loop2: detected capacity change from 0 to 128
[  205.148183][T12139] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2753'.
[  205.180515][T12140] syz.2.2755: attempt to access beyond end of device
[  205.180515][T12140] loop2: rw=0, sector=121, nr_sectors = 120 limit=128
[  205.276474][ T8971] kworker/u8:28: attempt to access beyond end of device
[  205.276474][ T8971] loop2: rw=1, sector=241, nr_sectors = 800 limit=128
[  205.322181][T12154] netlink: 2036 bytes leftover after parsing attributes in process `syz.7.2756'.
[  205.331498][T12154] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2756'.
[  205.350888][T12156] FAULT_INJECTION: forcing a failure.
[  205.350888][T12156] name failslab, interval 1, probability 0, space 0, times 0
[  205.363604][T12156] CPU: 0 UID: 0 PID: 12156 Comm: syz.1.2760 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) 
[  205.363636][T12156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  205.363649][T12156] Call Trace:
[  205.363662][T12156]  <TASK>
[  205.363670][T12156]  __dump_stack+0x1d/0x30
[  205.363721][T12156]  dump_stack_lvl+0xe8/0x140
[  205.363741][T12156]  dump_stack+0x15/0x1b
[  205.363787][T12156]  should_fail_ex+0x265/0x280
[  205.363828][T12156]  should_failslab+0x8c/0xb0
[  205.363892][T12156]  kmem_cache_alloc_node_noprof+0x57/0x320
[  205.363922][T12156]  ? __alloc_skb+0x101/0x320
[  205.363957][T12156]  __alloc_skb+0x101/0x320
[  205.363997][T12156]  ? audit_log_start+0x365/0x6c0
[  205.364114][T12156]  audit_log_start+0x380/0x6c0
[  205.364155][T12156]  audit_seccomp+0x48/0x100
[  205.364188][T12156]  ? __seccomp_filter+0x68c/0x10d0
[  205.364212][T12156]  __seccomp_filter+0x69d/0x10d0
[  205.364266][T12156]  __secure_computing+0x82/0x150
[  205.364306][T12156]  syscall_trace_enter+0xcf/0x1e0
[  205.364337][T12156]  do_syscall_64+0xac/0x200
[  205.364427][T12156]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  205.364455][T12156]  ? clear_bhb_loop+0x40/0x90
[  205.364477][T12156]  ? clear_bhb_loop+0x40/0x90
[  205.364507][T12156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.364596][T12156] RIP: 0033:0x7f0a63a0d33c
[  205.364617][T12156] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  205.364637][T12156] RSP: 002b:00007f0a62077030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  205.364667][T12156] RAX: ffffffffffffffda RBX: 00007f0a63c35fa0 RCX: 00007f0a63a0d33c
[  205.364681][T12156] RDX: 000000000000000f RSI: 00007f0a620770a0 RDI: 0000000000000007
[  205.364696][T12156] RBP: 00007f0a62077090 R08: 0000000000000000 R09: 0000000000000000
[  205.364738][T12156] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  205.364751][T12156] R13: 0000000000000000 R14: 00007f0a63c35fa0 R15: 00007ffd67a353d8
[  205.364774][T12156]  </TASK>
[  205.574312][T12158] FAULT_INJECTION: forcing a failure.
[  205.574312][T12158] name failslab, interval 1, probability 0, space 0, times 0
[  205.587070][T12158] CPU: 1 UID: 0 PID: 12158 Comm: syz.3.2761 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) 
[  205.587144][T12158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  205.587220][T12158] Call Trace:
[  205.587229][T12158]  <TASK>
[  205.587239][T12158]  __dump_stack+0x1d/0x30
[  205.587266][T12158]  dump_stack_lvl+0xe8/0x140
[  205.587291][T12158]  dump_stack+0x15/0x1b
[  205.587308][T12158]  should_fail_ex+0x265/0x280
[  205.587352][T12158]  should_failslab+0x8c/0xb0
[  205.587410][T12158]  kmem_cache_alloc_lru_noprof+0x55/0x310
[  205.587444][T12158]  ? __d_alloc+0x3d/0x350
[  205.587546][T12158]  __d_alloc+0x3d/0x350
[  205.587655][T12158]  ? from_vfsgid+0x70/0xa0
[  205.587687][T12158]  d_alloc_pseudo+0x1e/0x80
[  205.587715][T12158]  alloc_file_pseudo+0x71/0x160
[  205.587752][T12158]  ? hugetlbfs_get_inode+0x267/0x370
[  205.587861][T12158]  hugetlb_file_setup+0x298/0x3d0
[  205.587894][T12158]  ksys_mmap_pgoff+0x157/0x310
[  205.587950][T12158]  x64_sys_call+0x1602/0x2fb0
[  205.587979][T12158]  do_syscall_64+0xd2/0x200
[  205.588013][T12158]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  205.588040][T12158]  ? clear_bhb_loop+0x40/0x90
[  205.588063][T12158]  ? clear_bhb_loop+0x40/0x90
[  205.588135][T12158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.588163][T12158] RIP: 0033:0x7f5c2fc7e929
[  205.588179][T12158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.588202][T12158] RSP: 002b:00007f5c2e2e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  205.588244][T12158] RAX: ffffffffffffffda RBX: 00007f5c2fea5fa0 RCX: 00007f5c2fc7e929
[  205.588257][T12158] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000
[  205.588270][T12158] RBP: 00007f5c2e2e7090 R08: ffffffffffffffff R09: 0000000000000000
[  205.588359][T12158] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001
[  205.588375][T12158] R13: 0000000000000000 R14: 00007f5c2fea5fa0 R15: 00007ffd812fe9e8
[  205.588408][T12158]  </TASK>
[  205.803011][T12153] SELinux: failed to load policy
[  205.915211][T12174] loop1: detected capacity change from 0 to 128
[  205.976048][T12174] syz.1.2769: attempt to access beyond end of device
[  205.976048][T12174] loop1: rw=0, sector=121, nr_sectors = 120 limit=128
[  206.070153][ T8986] kworker/u8:43: attempt to access beyond end of device
[  206.070153][ T8986] loop1: rw=1, sector=241, nr_sectors = 800 limit=128
[  206.154624][T12188] SELinux: failed to load policy
[  206.390060][T12206] FAULT_INJECTION: forcing a failure.
[  206.390060][T12206] name failslab, interval 1, probability 0, space 0, times 0
[  206.402804][T12206] CPU: 1 UID: 0 PID: 12206 Comm: syz.2.2781 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) 
[  206.402842][T12206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  206.402859][T12206] Call Trace:
[  206.402868][T12206]  <TASK>
[  206.402877][T12206]  __dump_stack+0x1d/0x30
[  206.402930][T12206]  dump_stack_lvl+0xe8/0x140
[  206.403022][T12206]  dump_stack+0x15/0x1b
[  206.403044][T12206]  should_fail_ex+0x265/0x280
[  206.403114][T12206]  should_failslab+0x8c/0xb0
[  206.403217][T12206]  kmem_cache_alloc_noprof+0x50/0x310
[  206.403250][T12206]  ? sctp_get_port_local+0x420/0xab0
[  206.403315][T12206]  sctp_get_port_local+0x420/0xab0
[  206.403354][T12206]  sctp_do_bind+0x398/0x4b0
[  206.403395][T12206]  sctp_connect_new_asoc+0x153/0x3a0
[  206.403442][T12206]  sctp_sendmsg+0xf10/0x18d0
[  206.403559][T12206]  ? selinux_socket_sendmsg+0x121/0x1b0
[  206.403597][T12206]  ? __pfx_sctp_sendmsg+0x10/0x10
[  206.403685][T12206]  inet_sendmsg+0xc2/0xd0
[  206.403712][T12206]  __sock_sendmsg+0x102/0x180
[  206.403767][T12206]  __sys_sendto+0x268/0x330
[  206.403829][T12206]  __x64_sys_sendto+0x76/0x90
[  206.403905][T12206]  x64_sys_call+0x2eb6/0x2fb0
[  206.403927][T12206]  do_syscall_64+0xd2/0x200
[  206.403950][T12206]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  206.403980][T12206]  ? clear_bhb_loop+0x40/0x90
[  206.404153][T12206]  ? clear_bhb_loop+0x40/0x90
[  206.404184][T12206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.404212][T12206] RIP: 0033:0x7f9d0ad1e929
[  206.404232][T12206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  206.404256][T12206] RSP: 002b:00007f9d09387038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  206.404280][T12206] RAX: ffffffffffffffda RBX: 00007f9d0af45fa0 RCX: 00007f9d0ad1e929
[  206.404339][T12206] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000006
[  206.404356][T12206] RBP: 00007f9d09387090 R08: 0000200000000200 R09: 000000000000001c
[  206.404373][T12206] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001
[  206.404390][T12206] R13: 0000000000000000 R14: 00007f9d0af45fa0 R15: 00007fffa2bbb6b8
[  206.404411][T12206]  </TASK>
[  206.649158][T12211] loop2: detected capacity change from 0 to 128
[  206.698886][T12211] syz.2.2784: attempt to access beyond end of device
[  206.698886][T12211] loop2: rw=0, sector=121, nr_sectors = 120 limit=128
[  206.819405][   T29] kauditd_printk_skb: 547 callbacks suppressed
[  206.819422][   T29] audit: type=1326 audit(1749801066.215:6715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.2.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0ad1e929 code=0x7ffc0000
[  206.878569][   T29] audit: type=1326 audit(1749801066.255:6716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.2.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f9d0ad1e929 code=0x7ffc0000
[  206.902255][   T29] audit: type=1326 audit(1749801066.255:6717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.2.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0ad1e929 code=0x7ffc0000
[  206.925890][   T29] audit: type=1326 audit(1749801066.255:6718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.2.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0ad1e929 code=0x7ffc0000
[  206.949536][   T29] audit: type=1326 audit(1749801066.255:6719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.2.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d0ad1e929 code=0x7ffc0000
[  206.956853][T12224] SELinux: failed to load policy
[  206.973199][   T29] audit: type=1326 audit(1749801066.255:6720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.2.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0ad1e929 code=0x7ffc0000
[  207.001658][   T29] audit: type=1326 audit(1749801066.255:6721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.2.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0ad1e929 code=0x7ffc0000
[  207.025189][   T29] audit: type=1326 audit(1749801066.255:6722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.2.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d0ad1e929 code=0x7ffc0000
[  207.048779][   T29] audit: type=1326 audit(1749801066.255:6723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.2.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0ad1e929 code=0x7ffc0000
[  207.072644][   T29] audit: type=1326 audit(1749801066.255:6724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.2.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0ad1e929 code=0x7ffc0000
[  207.146720][T12238] loop6: detected capacity change from 0 to 1764
[  207.154121][T12238] iso9660: Unknown parameter 's1f�͇��*howassoc'
[  207.166781][T12238] loop6: detected capacity change from 0 to 512
[  207.187358][T12238] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  207.230941][T12238] EXT4-fs (loop6): 1 truncate cleaned up
[  207.250278][T12238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.263000][T12248] loop2: detected capacity change from 0 to 128
[  207.323133][ T4398] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.597613][T12262] SELinux: failed to load policy
[  207.752391][T12280] bond2: entered promiscuous mode
[  207.757524][T12280] bond2: entered allmulticast mode
[  207.763264][T12280] 8021q: adding VLAN 0 to HW filter on device bond2
[  207.811371][T12280] bond2 (unregistering): Released all slaves
[  207.839684][T12285] loop2: detected capacity change from 0 to 128
[  207.999973][ T3555] usb usb6-port1: attempt power cycle
[  208.073444][T12298] SELinux: failed to load policy
[  208.258649][T12319] loop2: detected capacity change from 0 to 128
[  208.446101][T12332] SELinux: failed to load policy
[  208.687919][T12344] loop1: detected capacity change from 0 to 128
[  208.858242][ T8971] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.865630][T12356] SELinux: failed to load policy
[  208.961528][ T8971] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.034521][ T8971] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.083246][ T8971] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.098069][T12357] lo speed is unknown, defaulting to 1000
[  209.225174][T12385] loop3: detected capacity change from 0 to 128
[  209.309520][T12385] bio_check_eod: 9 callbacks suppressed
[  209.309539][T12385] syz.3.2853: attempt to access beyond end of device
[  209.309539][T12385] loop3: rw=0, sector=121, nr_sectors = 120 limit=128
[  209.321335][T12389] SELinux: failed to load policy
[  209.488606][ T8971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.509115][ T8971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.524794][T12394] __nla_validate_parse: 17 callbacks suppressed
[  209.524816][T12394] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2856'.
[  209.545001][ T8971] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  209.584551][ T8971] bond0 (unregistering): Released all slaves
[  209.594897][ T8971] bond1 (unregistering): Released all slaves
[  209.612596][T12357] lo speed is unknown, defaulting to 1000
[  209.640884][ T8983] kworker/u8:40: attempt to access beyond end of device
[  209.640884][ T8983] loop3: rw=1, sector=241, nr_sectors = 800 limit=128
[  209.673860][ T8971] tipc: Disabling bearer <udp:s>
[  209.678894][ T8971] tipc: Left network mode
[  209.727255][T12403] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.2857'.
[  209.736494][T12403] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2857'.
[  209.767544][ T8971] hsr_slave_0: left promiscuous mode
[  209.777701][ T8971] hsr_slave_1: left promiscuous mode
[  209.784903][ T8971] veth1_macvtap: left promiscuous mode
[  209.791453][ T8971] veth0_macvtap: left promiscuous mode
[  209.797135][ T8971] veth1_vlan: left promiscuous mode
[  209.802456][ T8971] veth0_vlan: left promiscuous mode
[  209.820220][ T3555] usb usb6-port1: unable to enumerate USB device
[  209.961307][ T8971] team0 (unregistering): Port device team_slave_1 removed
[  210.002024][ T8971] team0 (unregistering): Port device team_slave_0 removed
[  210.011647][ T8983] smc: removing ib device syz1
[  210.018949][T12417] SELinux: failed to load policy
[  210.031457][T12419] loop7: detected capacity change from 0 to 128
[  210.075128][T12419] syz.7.2866: attempt to access beyond end of device
[  210.075128][T12419] loop7: rw=0, sector=121, nr_sectors = 120 limit=128
[  210.093598][T12422] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2867'.
[  210.105577][ T3555] lo speed is unknown, defaulting to 1000
[  210.107988][T12357] chnl_net:caif_netlink_parms(): no params data found
[  210.111425][ T3555] infiniband syz0: ib_query_port failed (-19)
[  210.220605][ T8986] kworker/u8:43: attempt to access beyond end of device
[  210.220605][ T8986] loop7: rw=1, sector=241, nr_sectors = 800 limit=128
[  210.309329][T12441] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.2871'.
[  210.318614][T12441] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2871'.
[  210.337313][T12357] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.344558][T12357] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.388564][T12357] bridge_slave_0: entered allmulticast mode
[  210.402683][T12449] loop2: detected capacity change from 0 to 256
[  210.409831][T12357] bridge_slave_0: entered promiscuous mode
[  210.420445][T12357] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.427582][T12357] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.484341][T12357] bridge_slave_1: entered allmulticast mode
[  210.529257][T12357] bridge_slave_1: entered promiscuous mode
[  210.543177][T12457] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2881'.
[  210.560910][T12452] SELinux: failed to load policy
[  210.584626][ T8971] IPVS: stop unused estimator thread 0...
[  210.604503][T12357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.614243][T12459] loop2: detected capacity change from 0 to 128
[  210.674797][T12357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.704270][T12459] syz.2.2882: attempt to access beyond end of device
[  210.704270][T12459] loop2: rw=0, sector=121, nr_sectors = 120 limit=128
[  210.737538][T12470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2887'.
[  210.765515][T12357] team0: Port device team_slave_0 added
[  210.795135][T12357] team0: Port device team_slave_1 added
[  210.822664][ T8983] kworker/u8:40: attempt to access beyond end of device
[  210.822664][ T8983] loop2: rw=1, sector=241, nr_sectors = 800 limit=128
[  210.844016][T12357] batman_adv: batadv0: Adding interface: batadv_slave_0
[  210.847178][T12477] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2883'.
[  210.851158][T12357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.863763][T12478] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.2888'.
[  210.886058][T12357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  210.916194][T12357] batman_adv: batadv0: Adding interface: batadv_slave_1
[  210.923275][T12357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.931483][T12480] loop2: detected capacity change from 0 to 256
[  210.949390][T12357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  210.990030][T12357] hsr_slave_0: entered promiscuous mode
[  210.996612][T12357] hsr_slave_1: entered promiscuous mode
[  211.095044][T12483] SELinux: failed to load policy
[  211.246981][T12504] loop3: detected capacity change from 0 to 128
[  211.286343][T12506] loop2: detected capacity change from 0 to 256
[  211.294026][T12504] syz.3.2900: attempt to access beyond end of device
[  211.294026][T12504] loop3: rw=0, sector=121, nr_sectors = 120 limit=128
[  211.412791][ T8952] kworker/u8:11: attempt to access beyond end of device
[  211.412791][ T8952] loop3: rw=1, sector=241, nr_sectors = 800 limit=128
[  211.442789][T12357] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  211.466757][T12357] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  211.499279][T12522] SELinux:  policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c
[  211.500500][T12357] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  211.520110][T12522] SELinux: failed to load policy
[  211.573344][T12357] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  211.678438][T12357] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.715469][T12357] 8021q: adding VLAN 0 to HW filter on device team0
[  211.732338][ T8986] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.739471][ T8986] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.748687][T12543] loop3: detected capacity change from 0 to 128
[  211.749511][ T8986] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.762199][ T8986] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.797999][T12357] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  211.808523][T12357] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  211.820862][T12543] syz.3.2915: attempt to access beyond end of device
[  211.820862][T12543] loop3: rw=0, sector=121, nr_sectors = 120 limit=128
[  211.890411][   T29] kauditd_printk_skb: 759 callbacks suppressed
[  211.890427][   T29] audit: type=1326 audit(1749801071.295:7484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12548 comm="syz.7.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144000e929 code=0x7ffc0000
[  211.920415][   T29] audit: type=1326 audit(1749801071.295:7485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12548 comm="syz.7.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144000e929 code=0x7ffc0000
[  211.964829][   T29] audit: type=1326 audit(1749801071.345:7486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12548 comm="syz.7.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f144000e929 code=0x7ffc0000
[  211.986969][T12357] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.988549][   T29] audit: type=1326 audit(1749801071.345:7487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12548 comm="syz.7.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144000e929 code=0x7ffc0000
[  212.018826][   T29] audit: type=1326 audit(1749801071.345:7488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12548 comm="syz.7.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144000e929 code=0x7ffc0000
[  212.042437][   T29] audit: type=1326 audit(1749801071.355:7489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12548 comm="syz.7.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f144000e929 code=0x7ffc0000
[  212.053944][T12541] lo speed is unknown, defaulting to 1000
[  212.065951][   T29] audit: type=1326 audit(1749801071.355:7490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12548 comm="syz.7.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144000e929 code=0x7ffc0000
[  212.095389][   T29] audit: type=1326 audit(1749801071.355:7491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12548 comm="syz.7.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144000e929 code=0x7ffc0000
[  212.118995][   T29] audit: type=1326 audit(1749801071.355:7492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12548 comm="syz.7.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f144000e929 code=0x7ffc0000
[  212.142662][   T29] audit: type=1326 audit(1749801071.355:7493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12548 comm="syz.7.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144000e929 code=0x7ffc0000
[  212.207802][T12357] veth0_vlan: entered promiscuous mode
[  212.218247][ T8975] kworker/u8:32: attempt to access beyond end of device
[  212.218247][ T8975] loop3: rw=1, sector=241, nr_sectors = 800 limit=128
[  212.223498][T12357] veth1_vlan: entered promiscuous mode
[  212.267663][T12357] veth0_macvtap: entered promiscuous mode
[  212.278954][T12357] veth1_macvtap: entered promiscuous mode
[  212.320243][T12357] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.345969][T12357] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.357270][T12357] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.366181][T12357] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.374951][T12357] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.383833][T12357] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.558646][T12598] loop1: detected capacity change from 0 to 128
[  212.685364][ T9047] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.742935][ T9047] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.801556][ T9047] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.814130][T12619] random: crng reseeded on system resumption
[  212.864953][ T9047] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.004538][T12645] loop6: detected capacity change from 0 to 128
[  213.261820][ T9047] bond1 (unregistering): (slave ip6erspan0): Releasing active interface
[  213.875186][T12662] loop1: detected capacity change from 0 to 256
[  214.052089][ T9047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  214.062284][ T9047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  214.072129][ T9047] bond0 (unregistering): Released all slaves
[  214.081810][ T9047] bond1 (unregistering): Released all slaves
[  214.140392][T12610] lo speed is unknown, defaulting to 1000
[  214.232996][ T9047] hsr_slave_0: left promiscuous mode
[  214.239119][ T9047] hsr_slave_1: left promiscuous mode
[  214.262306][ T9047] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.269955][ T9047] batman_adv: batadv0: Removing interface: batadv_slave_0
[  214.287080][ T9047] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.295323][ T9047] batman_adv: batadv0: Removing interface: batadv_slave_1
[  214.315562][ T9047] veth1_vlan: left promiscuous mode
[  214.326539][ T9047] veth0_vlan: left promiscuous mode
[  214.418081][ T9047] team0 (unregistering): Port device team_slave_1 removed
[  214.443255][ T9047] team0 (unregistering): Port device team_slave_0 removed
[  214.474657][ T9047] team0 (unregistering): Port device dummy0 removed
[  214.593430][T12717] $H�: renamed from bond0 (while UP)
[  214.603599][T12717] $H�: entered promiscuous mode
[  214.608792][T12717] bond_slave_0: entered promiscuous mode
[  214.614654][T12717] bond_slave_1: entered promiscuous mode
[  214.637964][T12709] lo speed is unknown, defaulting to 1000
[  214.645079][T12610] chnl_net:caif_netlink_parms(): no params data found
[  214.746914][T12610] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.754143][T12610] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.764056][T12610] bridge_slave_0: entered allmulticast mode
[  214.772796][T12610] bridge_slave_0: entered promiscuous mode
[  214.803103][ T9047] IPVS: stop unused estimator thread 0...
[  214.809305][T12610] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.816519][T12610] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.855942][T12610] bridge_slave_1: entered allmulticast mode
[  214.873995][T12610] bridge_slave_1: entered promiscuous mode
[  214.898356][T12732] FAULT_INJECTION: forcing a failure.
[  214.898356][T12732] name failslab, interval 1, probability 0, space 0, times 0
[  214.911160][T12732] CPU: 0 UID: 0 PID: 12732 Comm: syz.7.2978 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) 
[  214.911199][T12732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  214.911216][T12732] Call Trace:
[  214.911224][T12732]  <TASK>
[  214.911232][T12732]  __dump_stack+0x1d/0x30
[  214.911324][T12732]  dump_stack_lvl+0xe8/0x140
[  214.911350][T12732]  dump_stack+0x15/0x1b
[  214.911446][T12732]  should_fail_ex+0x265/0x280
[  214.911494][T12732]  should_failslab+0x8c/0xb0
[  214.911518][T12732]  kmem_cache_alloc_node_noprof+0x57/0x320
[  214.911634][T12732]  ? __alloc_skb+0x101/0x320
[  214.911717][T12732]  __alloc_skb+0x101/0x320
[  214.911751][T12732]  inet_netconf_notify_devconf+0x173/0x230
[  214.911789][T12732]  inetdev_event+0x743/0xc10
[  214.911880][T12732]  ? __pfx_ib_netdevice_event+0x10/0x10
[  214.911914][T12732]  ? ib_netdevice_event+0x186/0x5f0
[  214.911959][T12732]  ? __pfx_arp_netdev_event+0x10/0x10
[  214.912062][T12732]  ? __pfx_inetdev_event+0x10/0x10
[  214.912106][T12732]  raw_notifier_call_chain+0x6c/0x1b0
[  214.912147][T12732]  ? call_netdevice_notifiers_info+0x9c/0x100
[  214.912192][T12732]  call_netdevice_notifiers_info+0xae/0x100
[  214.912229][T12732]  unregister_netdevice_many_notify+0xd9d/0x1690
[  214.912260][T12732]  unregister_netdevice_queue+0x1f5/0x220
[  214.912320][T12732]  vti6_siocdevprivate+0x273/0x8e0
[  214.912498][T12732]  dev_ifsioc+0x8f5/0xaa0
[  214.912522][T12732]  dev_ioctl+0x78d/0x960
[  214.912545][T12732]  sock_ioctl+0x593/0x610
[  214.912581][T12732]  ? __pfx_sock_ioctl+0x10/0x10
[  214.912634][T12732]  __se_sys_ioctl+0xce/0x140
[  214.912677][T12732]  __x64_sys_ioctl+0x43/0x50
[  214.912714][T12732]  x64_sys_call+0x19a8/0x2fb0
[  214.912736][T12732]  do_syscall_64+0xd2/0x200
[  214.912786][T12732]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  214.912827][T12732]  ? clear_bhb_loop+0x40/0x90
[  214.912856][T12732]  ? clear_bhb_loop+0x40/0x90
[  214.912886][T12732]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.912907][T12732] RIP: 0033:0x7f144000e929
[  214.912993][T12732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  214.913041][T12732] RSP: 002b:00007f143e677038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  214.913066][T12732] RAX: ffffffffffffffda RBX: 00007f1440235fa0 RCX: 00007f144000e929
[  214.913084][T12732] RDX: 0000200000000600 RSI: 00000000000089f2 RDI: 0000000000000003
[  214.913099][T12732] RBP: 00007f143e677090 R08: 0000000000000000 R09: 0000000000000000
[  214.913115][T12732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  214.913131][T12732] R13: 0000000000000000 R14: 00007f1440235fa0 R15: 00007fff23c05a88
[  214.913232][T12732]  </TASK>
[  214.917300][T12610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.028265][T12739] __nla_validate_parse: 20 callbacks suppressed
[  215.028288][T12739] netlink: 2036 bytes leftover after parsing attributes in process `syz.6.2979'.
[  215.035528][T12610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.039641][T12739] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2979'.
[  215.150189][T12740] FAULT_INJECTION: forcing a failure.
[  215.150189][T12740] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  215.240492][T12740] CPU: 0 UID: 0 PID: 12740 Comm: syz.1.2980 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) 
[  215.240559][T12740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  215.240575][T12740] Call Trace:
[  215.240584][T12740]  <TASK>
[  215.240594][T12740]  __dump_stack+0x1d/0x30
[  215.240620][T12740]  dump_stack_lvl+0xe8/0x140
[  215.240646][T12740]  dump_stack+0x15/0x1b
[  215.240674][T12740]  should_fail_ex+0x265/0x280
[  215.240742][T12740]  should_fail+0xb/0x20
[  215.240784][T12740]  should_fail_usercopy+0x1a/0x20
[  215.240811][T12740]  _copy_from_user+0x1c/0xb0
[  215.240903][T12740]  kstrtouint_from_user+0x69/0xf0
[  215.240939][T12740]  ? 0xffffffff81000000
[  215.240955][T12740]  ? selinux_file_permission+0x1e4/0x320
[  215.240991][T12740]  proc_fail_nth_write+0x50/0x160
[  215.241087][T12740]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  215.241108][T12740]  vfs_write+0x266/0x8e0
[  215.241132][T12740]  ? __rcu_read_unlock+0x4f/0x70
[  215.241160][T12740]  ? __fget_files+0x184/0x1c0
[  215.241219][T12740]  ? finish_task_switch+0xad/0x2b0
[  215.241247][T12740]  ksys_write+0xda/0x1a0
[  215.241269][T12740]  __x64_sys_write+0x40/0x50
[  215.241330][T12740]  x64_sys_call+0x2cdd/0x2fb0
[  215.241397][T12740]  do_syscall_64+0xd2/0x200
[  215.241421][T12740]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  215.241500][T12740]  ? clear_bhb_loop+0x40/0x90
[  215.241527][T12740]  ? clear_bhb_loop+0x40/0x90
[  215.241554][T12740]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.241622][T12740] RIP: 0033:0x7f875c08d3df
[  215.241641][T12740] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  215.241695][T12740] RSP: 002b:00007f875a6d6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  215.241721][T12740] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f875c08d3df
[  215.241738][T12740] RDX: 0000000000000001 RSI: 00007f875a6d60a0 RDI: 0000000000000004
[  215.241755][T12740] RBP: 00007f875a6d6090 R08: 0000000000000000 R09: 0000000000000000
[  215.241771][T12740] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  215.241788][T12740] R13: 0000000000000000 R14: 00007f875c2b6080 R15: 00007ffebdce1e38
[  215.241813][T12740]  </TASK>
[  215.335196][T12610] team0: Port device team_slave_0 added
[  215.336378][T12610] team0: Port device team_slave_1 added
[  215.390261][T12610] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.390276][T12610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.390331][T12610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.391140][T12610] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.391152][T12610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.391236][T12610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.428105][T12610] hsr_slave_0: entered promiscuous mode
[  215.428560][T12610] hsr_slave_1: entered promiscuous mode
[  215.428946][T12610] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  215.428965][T12610] Cannot create hsr debugfs directory
[  215.480676][T12755] ==================================================================
[  215.480707][T12755] BUG: KCSAN: data-race in mas_replace_node / mas_state_walk
[  215.480736][T12755] 
[  215.480742][T12755] write to 0xffff888103fbde00 of 8 bytes by task 12757 on cpu 1:
[  215.480759][T12755]  mas_replace_node+0x1a6/0x410
[  215.480785][T12755]  mas_wr_store_entry+0x2406/0x2b50
[  215.480812][T12755]  mas_store_prealloc+0x74d/0x9e0
[  215.480831][T12755]  vma_iter_store_new+0x1c5/0x200
[  215.480855][T12755]  mmap_region+0x1058/0x1560
[  215.480879][T12755]  do_mmap+0x9b3/0xbe0
[  215.480909][T12755]  vm_mmap_pgoff+0x17a/0x2e0
[  215.480934][T12755]  ksys_mmap_pgoff+0xc2/0x310
[  215.480967][T12755]  x64_sys_call+0x1602/0x2fb0
[  215.480990][T12755]  do_syscall_64+0xd2/0x200
[  215.481010][T12755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.481032][T12755] 
[  215.481038][T12755] read to 0xffff888103fbde00 of 8 bytes by task 12755 on cpu 0:
[  215.481057][T12755]  mas_state_walk+0x485/0x650
[  215.481075][T12755]  mas_walk+0x30/0x120
[  215.481090][T12755]  lock_vma_under_rcu+0xa2/0x2f0
[  215.481122][T12755]  do_user_addr_fault+0x233/0x1090
[  215.481155][T12755]  exc_page_fault+0x62/0xa0
[  215.481187][T12755]  asm_exc_page_fault+0x26/0x30
[  215.481207][T12755] 
[  215.481211][T12755] value changed: 0xffff8881067c1c06 -> 0xffff888103fbde00
[  215.481223][T12755] 
[  215.481227][T12755] Reported by Kernel Concurrency Sanitizer on:
[  215.481239][T12755] CPU: 0 UID: 0 PID: 12755 Comm: syz.7.2986 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) 
[  215.481268][T12755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  215.481282][T12755] ==================================================================
[  215.545279][T12747] lo speed is unknown, defaulting to 1000
[  216.241667][T12773] FAULT_INJECTION: forcing a failure.
[  216.241667][T12773] name failslab, interval 1, probability 0, space 0, times 0
[  216.254399][T12773] CPU: 0 UID: 0 PID: 12773 Comm: syz.6.2991 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) 
[  216.254434][T12773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  216.254451][T12773] Call Trace:
[  216.254458][T12773]  <TASK>
[  216.254468][T12773]  __dump_stack+0x1d/0x30
[  216.254556][T12773]  dump_stack_lvl+0xe8/0x140
[  216.254577][T12773]  dump_stack+0x15/0x1b
[  216.254654][T12773]  should_fail_ex+0x265/0x280
[  216.254691][T12773]  should_failslab+0x8c/0xb0
[  216.254717][T12773]  __kmalloc_noprof+0xa5/0x3e0
[  216.254759][T12773]  ? iter_file_splice_write+0xfe/0x970
[  216.254827][T12773]  iter_file_splice_write+0xfe/0x970
[  216.254862][T12773]  ? atime_needs_update+0x3be/0x3e0
[  216.254941][T12773]  ? shmem_file_splice_read+0x5c2/0x600
[  216.254971][T12773]  ? __pfx_iter_file_splice_write+0x10/0x10
[  216.255078][T12773]  direct_splice_actor+0x156/0x2a0
[  216.255114][T12773]  ? shmem_file_open+0x21/0x40
[  216.255136][T12773]  splice_direct_to_actor+0x312/0x680
[  216.255224][T12773]  ? __pfx_direct_splice_actor+0x10/0x10
[  216.255264][T12773]  do_splice_direct+0xda/0x150
[  216.255365][T12773]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  216.255390][T12773]  do_sendfile+0x380/0x650
[  216.255422][T12773]  __x64_sys_sendfile64+0x105/0x150
[  216.255515][T12773]  x64_sys_call+0xb39/0x2fb0
[  216.255538][T12773]  do_syscall_64+0xd2/0x200
[  216.255561][T12773]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  216.255670][T12773]  ? clear_bhb_loop+0x40/0x90
[  216.255694][T12773]  ? clear_bhb_loop+0x40/0x90
[  216.255717][T12773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.255758][T12773] RIP: 0033:0x7f150927e929
[  216.255774][T12773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  216.255794][T12773] RSP: 002b:00007f15078c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  216.255865][T12773] RAX: ffffffffffffffda RBX: 00007f15094a6080 RCX: 00007f150927e929
[  216.255878][T12773] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005
[  216.255892][T12773] RBP: 00007f15078c6090 R08: 0000000000000000 R09: 0000000000000000
[  216.255905][T12773] R10: 000000000000e065 R11: 0000000000000246 R12: 0000000000000001
[  216.255918][T12773] R13: 0000000000000000 R14: 00007f15094a6080 R15: 00007ffde600a138
[  216.255938][T12773]  </TASK>
[  216.612489][T12773] lo speed is unknown, defaulting to 1000
[  216.763005][ T8975] bridge_slave_1: left allmulticast mode
[  216.768730][ T8975] bridge_slave_1: left promiscuous mode
[  216.774500][ T8975] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.801634][ T8975] bridge_slave_0: left allmulticast mode
[  216.807357][ T8975] bridge_slave_0: left promiscuous mode
[  216.813319][ T8975] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.910747][   T29] kauditd_printk_skb: 686 callbacks suppressed
[  216.910806][   T29] audit: type=1400 audit(1749801076.315:8180): avc:  denied  { read write } for  pid=4398 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  216.945365][ T8975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.956115][ T8975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.966489][ T8975] bond0 (unregistering): Released all slaves
[  217.032313][ T8975] hsr_slave_0: left promiscuous mode
[  217.037995][ T8975] hsr_slave_1: left promiscuous mode
[  217.044780][ T8975] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.053957][ T8975] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.093852][ T8975] team0 (unregistering): Port device team_slave_1 removed
[  217.104952][ T8975] team0 (unregistering): Port device team_slave_0 removed