last executing test programs:

6m27.694509945s ago: executing program 0 (id=178):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002580)=@delchain={0x5f4, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x5b8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0xd4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0xa0, 0x1b, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x4bc, 0x1, [@m_tunnel_key={0x100, 0x18, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x697, 0x1, 0x4, 0x100}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x20}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}]}, {0x71, 0x6, "39a11532c68866bc11f78348e628abc1ad84d1601df6ec416cf625f90a17a99b39a666020afde2a4e1ff54842056996ead43539758b141e01d4feddfa4f2d6608c468e5ca2264f490beef1d6e6cd9490307b7f21c63dbf597bf51d59a885bce4d88f91e5cc855b5137d18436c7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x164, 0x7, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xf, 0xb411d50005397f39, 0xa, 0x10001}, 0x9e61}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ce, 0xa, 0x0, 0x5, 0x1}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfe1, 0xc0000, 0x1, 0x3, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x28d4483e, 0xa41, 0x20000000, 0x8, 0x14eb}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4a3, 0x6, 0x7, 0x1c05, 0x4}, 0x1000}}]}, {0xa5, 0x6, "79bfcd7af533d072a8c29f36e68ab9904831686d6cd3390377cca5e53a8926070630448b3fc4cd7c92ec53371be4232497d515edab99ceda9fe783a4517aa76f458d17bb770e71e0ba14efb8375ac49ead1660b083f443d1ffcecd5197019986b82c2d3c1f0d2b0de14eead0041991bd7874be9402d799e64d44c3fe6d48dd4a8f6782a95c290cea018ba0470c73b3032f66a39bf3cba21d7301df8362d3324b6a"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x80, 0xf, 0x0, 0x0, {{0x9}, {0x4}, {0x51, 0x6, "01f4310969d021b8053bb1aca7e8d7615c1d03580900c583f834dae8ea05e484960378a34a6b952d073cc12d15ce11e941d47c907715c5f99ee7525bcab58cfe612fa780af8ced2963cf55b349"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x100, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0xd5, 0x6, "a616d32bc9a40ffc05a9cfa844689a40a38f9c9dde823878dadbebac8dfeb6c0573014ab9b67ca56390a49810c141041aa1ce1a4a552f838935a2c6a0c7e50caf726971b4e3a5e4a890a708d5ff8cc5782730d6c40a80692655341d51186010bd7ac039c5590977b6209427e7f3ac341d7c17699720b480343199351638cf1aaa801e3ac2d7f47644169b0fb5df7337d38415bca88827cd00547dd225097fc54ce5876f4cda9be7baa3f1f79f0cc4974bf00b4ec6d9d159d2cb26662e02f2a4354dfa1c19979c576c5891d5ba41f1ae0cf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xd4, 0x12, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x266}, @TCA_CT_ZONE={0x6, 0x4, 0x54}, @TCA_CT_PARMS={0x18, 0x1, {0xdb9, 0x5, 0x3, 0x9, 0x7f}}]}, {0x81, 0x6, "459c319de49c160b14e676c3fc211ba38f8597c3689c3978e9e1555e10640d44f6f6b342ed52a7d3527784cc5f468970aa573ce62cd79f937d133c2f1a1567f7c2f8f29feadeb69353614a9753a9a99407bd7d9b74269371f0506731b5da7a11c39b2076e6305230116c9a40450f152503594d0657b2131f5b16c06e00"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6}}}}]}]}}]}, 0x5f4}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})

6m27.645104456s ago: executing program 0 (id=179):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd6a, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0xffffffffffff7fff, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0xc0e1ed0507c15c08)

6m27.566523057s ago: executing program 0 (id=180):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r4, 0x0, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000240), 0x0, 0xfffffffffffffff9)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r5, 0x40043d0d, 0x0)

6m26.70671112s ago: executing program 0 (id=193):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)

6m26.70623722s ago: executing program 0 (id=194):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x0, 0x6, 0x11, {0x11, 0x9, "46ff4490130a1e0ab42eff40f3c390"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@measure}, {@smackfsfloor}, {@appraise_type}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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")
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, 0xffffffffffffffff, 0x0)
close(r1)

6m26.491422943s ago: executing program 0 (id=196):
syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x538, &(0x7f0000000e00)="$eJzs3c9vI1cdAPDvTOwl201JChxKpf4QXbRbwdqbhrYRh7YIxK0SqNyXKPFG0TrrVey0m6iCrPgDkBCCSpw4cUHixgUJ7Z+AkCqxdwQIhGALBw7AoBmPt1kz3mRbx946n4809ps3M+/7nhOP38wbewI4tZ6LiNcjYi4iXoiIxTI/Lac46E/5eu/ffWc9n/LsN/+WRFLmRRTJe86Vm833nyp19/avrbXbrZ1yvtnbvtHs7u1f2tpe22xttq6vrCy/vPrK6kurl8fSzrxdr37tTz/6/s++/uqvv/j276/85eJ38kp/tVw+aNf4FK9e3Cke6/lrcU8tInbGG2xq5sr21KddEQAAjiXvpX4qIj5X9P8XY67ozRWGu3Tzk68dAAAAMA7Zawvx7yQiAwAAAGbWaxGxEEnaKK8FWIg0bTT61/B+Jh5L251u7wtXO7vXN/JlEUtRT69utVuXy2tql6Ke5PPLRfqD+ReH5lci4omI+OHi2WK+sd5pb0z75AcAAACcEueGjv//udg//gcAAABmzNK0KwAAAACcuFHH/8mE6wEAAACcHOP/AAAAMNO+8cYb+ZQN7n+98dbe7rXOW5c2Wt1rje3d9cZ6Z+dGY7PT2Sx+s2/7QWXVI6Ld6dz4UsTuzWav1e01u3v7V7Y7u9d7V7bcPxAAAACm5Ylnb99JIuLgy2eLKXcmf5gbsYFrBWBmpA+z8h9Prh7A5I36mD+GM+OsBzB5tQ+zke8Fw2w4mHYFgGm77yO9olNw+OKd+84Z/GZUgToJAADwqLnw2dt3vlsx/l8rr+cHZtdDjf8DM+UjjP8DH3MfavwfmAn1h+oB3DrBmgDTctRo/cgf76ga/6+8MjjLjiwLAAA4UQvF9GzaKMcCFyJNG42Ix4uv+teTq1vt1uWI+GRE/G6x/ol8frnYMvE1IAAAAAAAAAAAAAAAAAAAAAAAAAA4pixLIgMAAABmWkT656S8/9eFxfMLw+cHziT/Wozyll5v/+TNH99c6/V2lvP8v9/L771b5r84jTMYAAAAcBrVHrh0cJw+OI4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHF6/+4764NpknH/+pWIWKqKX4v54nk+6hHx2D+SqB3aLomIuTHEP7gVEU9WxU/yasVSWYvh+GlEnJ1M/KezLKuMf24M8eE0u53vf16vev+l8VzxXP3+r5XTR3Xf/u/MLw8tSe/t/+ZG7P8eP2aMp977RXNk/FsRT9Wq9z+D+MmI+M9XFVjxonz7W/v7/5fZLzyyn0ZcqPz8Se6L1ext32h29/YvbW2vbbY2W9dXVpZfXn1l9aXVy82rW+1W+VgVIn7w9K/+OxT9P1lf0f4YEX/piPafzxP1Q5nZcJgy2Hs37366n6wPFVHEv/h89f/fkw+In/9PfL78HMiXXxikD/rpw575+W+fqaxYGX9jRPuP+vtfHFXokBe++b0/HHNVAGACunv719ba7dbOiSfezbJsUrGOn4j0uCsX3cWJvmKTTQx6dycWYv5RaemEE+cfjWo8TGIcZ7YAAIBHzQed/mnXBAAAAAAAAAAAAAAAAAAAAE6v7l6kY/jNsEFxlesMxzyYeCsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI72vwAAAP//9B7WLg==")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x31)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
r2 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)

6m26.477491843s ago: executing program 32 (id=196):
syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x538, &(0x7f0000000e00)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x31)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
r2 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)

59.766160866s ago: executing program 3 (id=3867):
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000480)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000600000008618ecb4a"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=<r3=>r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x31, 0x2, @thr={&(0x7f00000005c0)="13cf8d085e8ebe2754b8bcae1f2677507dec8fce575863e8bab8cea0c8ead322476743fa462d96772d3ef5352c38e8b99776a4194fc93841b7a264be1be3ce8adac8552f36f1a84d7c769046be88842688f1d0bc8844d3a7630c5af48ce1865d1976a80878513083f74c613f7eb5bae91730a16721365bea6bbae4a9ee837104f9c41a825d3ca1b2d2e1c330670e27c05070f379f9f960af00562e95f6bfb60dc4158648863a2b7d7488d7785c46", &(0x7f0000000880)="1256d3165f6955db0577160e5a5a315a3c1edee2fb2662115fa6fde8be494bd751c0aa133a471c7493a60b38a8c0b315f8372a73faad3b529f79be326d2aaf74f3c9454b33e69e0327ee88c0f18282aa41fa85badc2f15a8a057"}}, &(0x7f0000000300))
ioctl$sock_ifreq(0xffffffffffffffff, 0x891a, &(0x7f0000000240)={'veth1_to_bridge\x00', @ifru_ivalue=0x7})
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES8=r3, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x1000}, 0x18)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd)
r5 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0)
flock(r5, 0x5)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000002500"/20], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYRES8=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='sched_kthread_stop\x00', r8}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x8000, 0x10, 0x7fc, 0x9, {{0x35, 0x4, 0x1, 0x4, 0xd4, 0x64, 0x0, 0x9, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xf, 0x44, [@local, @rand_addr, @empty]}, @ssrr={0x89, 0x23, 0x34, [@remote, @dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010101, @local, @remote, @broadcast, @rand_addr=0x64010100, @empty]}, @noop, @generic={0x86, 0x12, "fc2b00ebfd4898147248a6cc89ac0034"}, @ra={0x94, 0x4, 0x1}, @noop, @end, @timestamp_addr={0x44, 0x44, 0x56, 0x1, 0x0, [{@multicast2, 0xe9}, {@rand_addr=0x64010101, 0x2}, {@loopback, 0x101}, {@remote, 0x4}, {@broadcast, 0x3}, {@remote, 0x10}, {@empty, 0xfffffffd}, {@multicast1, 0x9}]}, @cipso={0x86, 0x21, 0xffffffffffffffff, [{0x7, 0xc, "1e20a01de7c3249851d0"}, {0x6, 0x6, "ad4e74cd"}, {0x2, 0x9, "41e0d6ff5ab2e7"}]}, @end, @lsrr={0x83, 0x7, 0x6c, [@loopback]}, @rr={0x7, 0x7, 0x38, [@rand_addr=0x64010101]}, @end]}}}}})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="0000c000020000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x95}, 0x0)
setrlimit(0x7, &(0x7f0000000200)={0x5, 0x6})

58.658301423s ago: executing program 3 (id=3880):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002340)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000850000000e000000850000000500000095000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x14)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x18)
acct(0x0)
sendmsg$rds(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10)
removexattr(0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r5 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000004000/0x4000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000140)=""/67)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f})
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0xdeb, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
timer_settime(0x0, 0x1, 0x0, 0x0)
syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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")
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000007733337edc1cc8e1b1bb5fd8ef4650efb9568ce4ebab1209824ffe627ef0a5e25c47fbe044e0c5f808f604be85f358ec929800a5451b30751473bcc4a621f0e1fe711f0f98d32d62a56ca87f920fafa249a9ad4b73d6fdff9b01030adadc2c2d5cd1dd64d208e5063e97460d9b90f286abab52e095f58f88773c27dbd066c040a5106255c78278ab301c814db0d748", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48)
capget(&(0x7f0000000200)={0x20071026}, &(0x7f0000000300)={0x1, 0x80000000, 0x47f, 0x85, 0x5, 0x8})
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'erspan0\x00'})

58.133540861s ago: executing program 3 (id=3882):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x44}}, 0x0)
r3 = fsopen(&(0x7f00000001c0)='cgroup2\x00', 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0xb}, 0x1c)
syz_emit_ethernet(0x83, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60061000004d1100fe8000000000000000000000000000bbff0200000000000000000000000000014e200e22"], 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
fsmount(r3, 0x0, 0x0)
creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000300))
ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1)
fchdir(0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10000, 0xa)

57.408498332s ago: executing program 3 (id=3887):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1c1002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
writev(r5, &(0x7f0000000100)=[{0x0, 0x20}, {&(0x7f0000001180)='.', 0x1}], 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001a00000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0xa)
creat(&(0x7f00000000c0)='./file0\x00', 0x110)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15)
connect$caif(r1, &(0x7f00000005c0)=@dgm={0x25, 0x9, 0x8}, 0x18)
pipe2$9p(&(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[], 0x15)
r9 = dup(r8)
write$P9_RLERRORu(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r9, &(0x7f0000000340)=ANY=[], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9])
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r10 = socket$rds(0x15, 0x5, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$rds(r10, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xca}}], 0x18, 0x8004}, 0x9000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x200000000007}, 0x18)
syz_clone(0x480, &(0x7f00000004c0)="5bb41724527f33d30cd448d544d5cfb0a46a581fd49a687802c219223fb3751bceb417f3db8d285d056239de8e043f2d3ffe4110e32a0548041ed6792058ca557205a9cd60a95d15e70b1ddb09647b117b68085241f1", 0x56, &(0x7f0000000240), &(0x7f00000003c0), &(0x7f0000000580)="de7da2db244ced581730c47df4eebdf5a3cce2caea20c6a38a5e703ed027c88306afd83570506e017080f77895")
sendfile(r1, r0, 0x0, 0x7bfff000)

57.034667338s ago: executing program 3 (id=3893):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x203}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4048044}, 0x20044840)
getpgid(0x0)

56.586402954s ago: executing program 3 (id=3903):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x4, 0x3}]}], {0x14}}, 0x6c}}, 0x0)

56.566798625s ago: executing program 33 (id=3903):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x4, 0x3}]}], {0x14}}, 0x6c}}, 0x0)

25.385497796s ago: executing program 5 (id=4231):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f00000012c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)

24.48749334s ago: executing program 5 (id=4242):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000001c0)='mm_page_free\x00', r0}, 0x18)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
close(r2)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000027c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x4000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0x1}, {0x6, 0x10}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x3, [0x1, 0xb, 0x80, 0x7, 0x4, 0x5, 0x4, 0x8, 0x2a, 0x6, 0x9, 0x3, 0x5, 0x7, 0xd, 0x9], 0x1, [0x3, 0x3, 0x1, 0x6, 0xfffa, 0x5, 0xffb, 0x0, 0xb4, 0x401, 0x6, 0x7, 0x81, 0xffff, 0x9, 0x4], [0x400, 0x6, 0x800, 0x493, 0x200d, 0x7, 0x5, 0x2, 0x2, 0x8, 0x0, 0x6e, 0x1, 0x9, 0x9, 0xff49]}}}}]}, 0xffffffffffffffc1}, 0x1, 0x0, 0x0, 0x55}, 0x20004000)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="021800000b0000000000000000000000030005000000000002000000e00000010000000000000000030012000000000002000000000000000000000000000000030006000000000002"], 0x58}}, 0x24000894)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002dc0)={0x124c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x814, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x804, 0x4, "fc654c187d6eb5f0ca15095cc8787b50b96435ad3147dd10e867248d37187c2a131a62d105462ce34d5cf8ded36159aea612a3460534d8c298556e91590238f40dd2c7148d365ab6cdd5f2a7f74bac8d59f731c655a46917f18b28ed05e58b70287d26677601258a5c0ab9f679e2e520228c3a1f1aede04c6ba82cc38cc2ab6b35a24fb20e032dedf6f6caf4bfea5435f746f746fd46ca192e3744eb6908b358c10833bf484237ba654641e6186a45957c6345e61ea620fdc74383ce1df4a24e7044bae596f018736424a5bfa438865044e7026fa37a3540fadd0e89d87aecd3bc127e0cb10274991d6127224a0f2a4ef19e2c4dedbe45f2471abcc38c584ead0e3df3f9211022b2421fb6b327361e8f58f2b73134fc5444b350ede95ecef5bbbf9950e75c9f772a3ff0180d2cfac287228709726a6abbab2971982de7f1a9149d71dcbfd212e89ff17cf284b7f8ad82a469cb1c1e3d9d1d3689271c8dad0ba89dda651d4242062ac0bc5877e397236fa9476ac5fac7c2c896babca09d74720004cd0e634327de4fd87ed72ae069c095d2c70caed52e3335478c1c3719925e24f2fd7755baebd5cde385727a0f0440dd3b662248c43ff5afc4f186ff0051ba8eaa07623b79c4bb6985f14c5ac15041a6ff7584f921982e5414481d4db4c76798d70a59b5aeccb6e7882aefe70993758b55b4dc4039c2b1c98452113aaf23ccdf68cb6eff6e048f9da6f39a2def3caaf80cdcbadb83b029b8738391f02fec90c8a8b6f036aae8ceaff5dca7d3e0098423fedc676c6774ab0e6a72bd246c0b3004d1988f802b846d62ca59e9a63ce12814176ec4380e1cf29d27e7b2f7e7eadcaae8f182498ad32e67323fe6ef9508fec40dd38897652053ef92e44a909060c237890c196f0c26ab10248f999001f6231813a81313971bea77a5470f312d185dce689adc99e430e4010a3a341482c51fb71c23c3cdf92303c7580c73775f9a74685a61ce9849eaca52b97ee7ffe2e672dc1be5267c285a102711b1b5d81d6dbb76494f2892fd4f85244ade3cdd3809fd5fdfce5157fc1658f0bceb379489732583707c170fc6392aa4f5b94843aeb18da58e0156e029c2b722918b1b3dc7c151cb9c248ddd18423629b53cd4b0ab2693b0df29c88c04657f4eccdc41357de8186fdc0ec86f92950734975921a2fde57c3e7176b57c871d76ff8a8f36520b67e64930cf34bcde9ad92d057a359ca022b646df18e2b7202845bd8ac4be5e5ebae436dc4b93dfaaf2778a53e7e4be937e83dac7d1d481bdbd8081ab0ac08af067e62580bbdbf397cbc629db9b023734b6fad7824d1a8b3257c1c18d6ebc928140060f004ec484b183560f830a1eb0c527c8600bb2600d761e847454e677aa29486aa407a9e9a5e9dc9542de038e3e55fdfec13184cdb16716556f972eef5c56230c43d146c86a9147265c309a279db6d138647920410896c5397c5f83634fa5e92b5161f786482d84830864388b91c2c1e3e9f9f038d5fa66f7fe904e14df0a60d46066c6b1f37cec6e13c35832f512be21da21a5921b81cc452b0076c2ec10fc5481cd0e1ca917b40cb3aa839b120ce6eb9773e942b74ececac6bdcd22eb8dd6cd9f148e0ebe5ef3094f42adc39bc5ca2259e1eab5059ccf5e82bb57b97d4d13a90747299b2e6b64f962aabf222e4f287503181de3c3a68fb2b0068583f3b97e40ce06e9805a7121eccac0527b8f1b18a62762efe0a9ce4114b7d1ba942bc93533ee0b1bd7f0a607207b976dfa1fbe3ce0868e7f4e31b41a0aada0ac6b291aefe22ea5338f07e57b981b8e4e4a121f231d2f46989fd5dd09a7c1d198f5886b4f1a222eccdabff096a81fef3c9e497621128562880938fe05a1f1c4da81daba55bf326f1e3a1712d79f01fbef2ee230615d4e454be67f0ad4dc2bfffaecbb683742925738b45854ab713ae548b9709e9ea2e28224ef466bced79e3ec6c163d45db187bc01c75afa85f78003927dcd122086acc8dd1b1224de41d62b83e34083dd39fe68aa5a479ba403f5dbddf9b763ca521b7efca6234be16484f1e0112d963672a6d24cdac15e80bcb82b3b22231670c41fe7e8a0a083b6df768e7fb0d94a004f8372f5cf8b9b45cc679eb67828a94d0ffabfe09d95ad2789cb8657f7ea86a46260416a72e6fc7b44e549a2e39fe015c7647cc0bec15fa63d26894be1cc5326331e7e0b1c505934182accf049bab033b026d48fda51de740afc0666e6c891e0c5192f4b2df21493477ff45319d7d8b816f0b73ccfa12d6846362feb4b85063ca42e950eb577c630300dc52698a38ca19cbbb398404a1e8e27d0be49985e59caef03da096d1ccbeed73bd7c9588325b747ab77f4d7c1c1f18388ce1771882ee680ed737ad197ff92f1052e5e79f6ffa5b85ba3fac5db13e0d0046c9dca0ab4b74b20299ba6bdd758940e088df31e1382cee6901503299028467a864d27affae30fd9aef5a6ff948c052124511a75a46d5a316e28fb6c5bfac787be5833c63c535557235b0e09f9a78a338aa8864613fca77a7e252d1975af2c4a6bcc969d1e20e3cd4dfc1b2fe34b70fd7804dbfde4fa4d950e5fb4eb926dece9e4601b12efe322bb42ac808158fef0a26900000000726654987e7de20d1e41e82c607c33c6bae7bb234744b51dc683d5857afd6ba8246cebc734e393806ef102a6baaf04f3a7c3cb888d5830e1c6ae170c5c920e806b4f518be4416b216cdf9b1658a412d9e4eab6c9b20ce99960f27e77fdf9a2e98b35c63859f9db6bdcbef1001a19e12e41370f9358531987851ab64c250e68a8569ace4418e2118caff7d3d4caf1c87bc50a8ae75770fdae88a8490c041b39d08190d8b7c908caddd66331a508929d53dd6bc2"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x1f4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',*\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'mm_page_free\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'mqprio\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xd7 \x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffe81}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/ttyS3\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '#.^\xe4(#[-%-\'/(+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x605b}]}]}, @ETHTOOL_A_BITSET_VALUE={0xf5, 0x4, "82f3dce8a01c07a8c6dfff3461acad047a798231ac920fd927fd2c193be840a6966e2e8d01fb71cedf210a7e2908eba46c004c6d02cda817c5e62a41ea7c81f50cdd4ce8939178afc49f4ee65f28ddedd938bafd51b9bab19ed1a4780504d393666158d1b03921d7fafc76c78da64477bf0c1ea74fab1290f1dd63aefa568e3027c7d289b2d7891cc6724113cabab4c04a31c4546b501dac5269cda7d13112318b140c9a1fb9e830ca83e7628c4fb9c302dd5940addb85f7448dd0cb48bda1d1f01c504156efae62687dfd24a7bc970ee21b6d891e788389e7b2bf4830754f7bf5103d1f664be4646c5d72a8ed7a550509"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x378, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc0, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x905}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}\xa7\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'mqprio\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xa3, 0x5, "59eb6fb7cdaf443bd9414a2d1dc33d9ecbcfe8819745439bf77f660a347bb7bc2fb40120e2d60dde1ce1b3e62af3d0d4617850383d9da8ffeacb6054ff8a38703db11eb47830655f5adf9e7b76afb39d567f7d2c6837cc0e9e5616895059870b21905d4de3a3523ceab9478738db6ec8af86eed074ae51fee287198c5d61d33349c678920442f4f85e5dcec400b825985dba44d5c0b0820bac420cc9dace31"}, @ETHTOOL_A_BITSET_VALUE={0xba, 0x4, "433a35d4810da283d6175c41a84f4d1e51e3a6d8b7bb6d1cfe3fd147034d5843da1e87b18f3182fafb78057e8ec20c3fa458ec707bca2cc5636bd2a241d3294aae4b2fdf600bbb41d66fbda6c91fac2d58c96a1b9465e1bca2d09928fe0d62e759362f0c538e5a407e07ad79bd8a9e9a435f688fff388663589b4664268cac38811a28775e4e814a5f8bc2510299c140ff31407f50f06b0a65849834f98382992235d0d3156194720d5af0998800b4dc1420758d4b99"}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\/$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x30c7}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'mm_page_free\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x4}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f9}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'mm_page_free\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'mm_page_free\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#)@%!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ')!\xa1-{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x3e8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe1, 0x4, "fa26001c9f3f754701522db49ecdc23be18ff799e9f507305134799cdcf1f230538c3de66687fcf89d6d76427b7c524ae823a881672917e92aed760869e8f5f5ed5d27d6c85c62647b05b2d5c2b58034ccd74c644296033eb6f0854400609b257166a8da11c289dff9ef5edc0fb22c41c8b5c1123054e5eb36ac5d35604ad4047f312d7c965d58d64de1949a254f07b2429edba87dc072d4665143db5f7aa710d83af0ff34c6366d8337e2a64c35bf6c2216d03a19082114ae4176d4edad5f0182722ad28d9241ce8490f4f5881883714aefbc891941d48648ac129dcd"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x69, 0x5, "7639182a2386090f22233acda8ecab83a537a5fa2413a441c5b692c2d422e623e3c059063557d1fe30b12466561928d7eb9ae52c2975086f5cb7597dc0006e9ffb3a1ec6a5fd3ed66eaf6e127f27a1c074e045f8a766007981311dd19dbf873c7dae22d4ff"}, @ETHTOOL_A_BITSET_BITS={0x154, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^!-@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ']({+-(\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xe7\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#(+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\'%/+]*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}, @ETHTOOL_A_BITSET_VALUE={0xa3, 0x4, "c04fe5b3bdf0dad24708603bd5f4581134206b5e45906ae74ac3e25faf32c529c85a6926c6068114074c304dccaac311a1f03d07a6d77d69facdf70fe03d47cfbe2b27cbf9314d491b29a4a1c2d169d4a19c0179c1c53b0b8f0c08892c8723309684df841fcc87b91299deb4fbd68c30e41335b505372b9f0de20b307da31d146a243c52efce24d1ca5bb080fa3c6343130632a72c3d5663c3e27e762973ee"}, @ETHTOOL_A_BITSET_VALUE={0x84, 0x4, "6e4879c178ac600fab4175e0b81b2a29fd6eb288836137a13d7d164e2b5210cb5a56704b6eb5b86830dd13d024871f5324ce0a29ffeb02a74a20169ae9443c77866e2dd35e1cf0ef269dd233d98c72b36556a68f9f7aeb65992a27a59d9c3186c48c2675189b7ec8bc1f986681cddf8d1724897516ef61414a4e441162333fa9"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x124c}}, 0x0)
r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r10 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r10}, 0x8)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000978000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000000000000, 0x2)

24.083192646s ago: executing program 5 (id=4246):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)

23.646558533s ago: executing program 5 (id=4251):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00q'], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002104000000000000", @ANYRES32], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0))
semctl$GETPID(0x0, 0x0, 0xb, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r5, 0x2285, 0x0)
sendmsg$TIPC_NL_KEY_SET(r4, 0x0, 0xc4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x22020600)
r6 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r6, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000006c0), 0x5}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

23.401043646s ago: executing program 5 (id=4254):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r1=>0x0})
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
readv(r2, &(0x7f0000000680)=[{&(0x7f0000000500)=""/106, 0x6a}, {0x0}], 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x6, &(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7a200000000000007020000f8ffffffb703000008001500b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x100}, 0x18)
r5 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r5, 0x29, 0x3c, 0x0, 0x0)
r6 = socket(0x10, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10)
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r11=>0x0}, 0x0)
lchown(&(0x7f00000006c0)='./file0\x00', r11, 0xee01)
setxattr$security_capability(0x0, 0x0, &(0x7f0000000200)=@v3={0x3000000, [{0x46, 0x75}, {0x1, 0x4}], r11}, 0x18, 0x1)
ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0)
request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='keyring\x00', 0x0)

23.002564452s ago: executing program 5 (id=4256):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000780)={0x3, 0x8, 0xaaf, {0x5, 0x7ff}, 0x6, 0x400})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8)
recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
pipe2$9p(&(0x7f0000001900), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100490000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x80}, 0x1, 0x7}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r4}, 0x10)
sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000000c0)={[{@oldalloc}, {@stripe={'stripe', 0x3d, 0x6}}, {@noblock_validity}, {@grpjquota}, {@noinit_itable}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")

22.993601802s ago: executing program 34 (id=4256):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000780)={0x3, 0x8, 0xaaf, {0x5, 0x7ff}, 0x6, 0x400})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8)
recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
pipe2$9p(&(0x7f0000001900), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100490000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x80}, 0x1, 0x7}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r4}, 0x10)
sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000000c0)={[{@oldalloc}, {@stripe={'stripe', 0x3d, 0x6}}, {@noblock_validity}, {@grpjquota}, {@noinit_itable}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")

13.678355613s ago: executing program 1 (id=4319):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0x30, 0x0, 0x1, 0x3, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40050}, 0x40000)

13.543094125s ago: executing program 1 (id=4320):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sched_switch\x00', r1}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xfe8e, 0x12)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r2, @ANYBLOB="0000000004000000b705000008bc1f62050000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r5, 0x0, 0x100000000}, 0x18)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000030000004001802c0008001404010002000a00ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000006c74ffa2f6f26c16d2daf9fe49639c751a916a3f9142a94ce193378d625c6272b9ad2b19eab5"], 0x54}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
socket$netlink(0x10, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe4059d1ed18e2292, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8b, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0x800}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000400900020073797a32000000000900010073797a30520000002800048024000180090001006d657461000000001400028008000240000000130800034000000017140000001100010000000000001300000000000a"], 0x7c}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESOCT], 0x0, 0x34, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)

13.22266354s ago: executing program 1 (id=4321):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00q'], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002104000000000000", @ANYRES32], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0))
semctl$GETPID(0x0, 0x0, 0xb, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r5, 0x2285, 0x0)
sendmsg$TIPC_NL_KEY_SET(r4, 0x0, 0xc4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x22020600)
r6 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r6, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000006c0), 0x5}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

12.674291108s ago: executing program 1 (id=4323):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00q'], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002104000000000000", @ANYRES32], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0))
semctl$GETPID(0x0, 0x0, 0xb, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r5, 0x2285, 0x0)
sendmsg$TIPC_NL_KEY_SET(r4, 0x0, 0xc4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x22020600)
r6 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r6, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000006c0), 0x5}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

12.537334771s ago: executing program 1 (id=4324):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10)
r1 = signalfd(r0, &(0x7f0000000000)={[0xfe53]}, 0x8)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000200)=<r2=>0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r3, 0x1, 0x2}}, 0x20)
stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x14)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e00000000000000ffffffff4000000044220400", @ANYRES32, @ANYBLOB="620000000000000000000000008200000000000000e37a", @ANYRES32=r8, @ANYRES32, @ANYBLOB="0100000003000000040000000500"/28], 0x50)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, &(0x7f0000001b80)=[{&(0x7f00000003c0)=ANY=[@ANYRESHEX=r5], 0x14}, {0x0}, {0x0}, {&(0x7f0000001b40)=ANY=[@ANYBLOB], 0x24}], 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000500000000000300000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=<r9=>0xffffffffffffffff, @ANYRES32], 0x50, 0x24040094}, 0x80)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, r4)
r10 = getegid()
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000840)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYBLOB="020002", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES64, @ANYRES8=r3, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r5, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1)
fchownat(r1, &(0x7f0000000080)='./file0\x00', r2, r10, 0x800)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYRESHEX=r5, @ANYRES16=r9], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kfree\x00', r11, 0x0, 0x8}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20000)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r13, 0xc028660f, &(0x7f0000000080)={0x0, r12, 0x18})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})

12.274243754s ago: executing program 1 (id=4325):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3000)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340))

12.253210745s ago: executing program 35 (id=4325):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3000)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340))

10.153117797s ago: executing program 7 (id=4342):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002580)=@delchain={0x580, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x544, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0xd4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0xa0, 0x1b, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x448, 0x1, [@m_tunnel_key={0x100, 0x18, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x697, 0x1, 0x4, 0x100}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x20}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}]}, {0x71, 0x6, "39a11532c68866bc11f78348e628abc1ad84d1601df6ec416cf625f90a17a99b39a666020afde2a4e1ff54842056996ead43539758b141e01d4feddfa4f2d6608c468e5ca2264f490beef1d6e6cd9490307b7f21c63dbf597bf51d59a885bce4d88f91e5cc855b5137d18436c7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x158, 0x7, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xf, 0xb411d50005397f39, 0xa, 0x10001}, 0x9e61}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ce, 0xa, 0x0, 0x5, 0x1}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfe1, 0xc0000, 0x1, 0x3, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x28d4483e, 0xa41, 0x20000000, 0x8, 0x14eb}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4a3, 0x6, 0x7, 0x1c05, 0x4}, 0x1000}}]}, {0x9b, 0x6, "79bfcd7af533d072a8c29f36e68ab9904831686d6cd3390377cca5e53a8926070630448b3fc4cd7c92ec53371be4232497d515edab99ceda9fe783a4517aa76f458d17bb770e71e0ba14efb8375ac49ead1660b083f443d1ffcecd5197019986b82c2d3c1f0d2b0de14eead0041991bd7874be9402d799e64d44c3fe6d48dd4a8f6782a95c290cea018ba0470c73b3032f66a39bf3cba2"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x80, 0xf, 0x0, 0x0, {{0x9}, {0x4}, {0x51, 0x6, "01f4310969d021b8053bb1aca7e8d7615c1d03580900c583f834dae8ea05e484960378a34a6b952d073cc12d15ce11e941d47c907715c5f99ee7525bcab58cfe612fa780af8ced2963cf55b349"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x98, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x6d, 0x6, "a616d32bc9a40ffc05a9cfa844689a40a38f9c9dde823878dadbebac8dfeb6c0573014ab9b67ca56390a49810c141041aa1ce1a4a552f838935a2c6a0c7e50caf726971b4e3a5e4a890a708d5ff8cc5782730d6c40a80692655341d51186010bd7ac039c5590977b62"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xd4, 0x12, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x266}, @TCA_CT_ZONE={0x6, 0x4, 0x54}, @TCA_CT_PARMS={0x18, 0x1, {0xdb9, 0x5, 0x3, 0x9, 0x7f}}]}, {0x81, 0x6, "459c319de49c160b14e676c3fc211ba38f8597c3689c3978e9e1555e10640d44f6f6b342ed52a7d3527784cc5f468970aa573ce62cd79f937d133c2f1a1567f7c2f8f29feadeb69353614a9753a9a99407bd7d9b74269371f0506731b5da7a11c39b2076e6305230116c9a40450f152503594d0657b2131f5b16c06e00"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6}}}}]}]}}]}, 0x580}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

10.055489548s ago: executing program 7 (id=4344):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00')
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000003a40)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000003c0)={r2, 0xcb}, 0x8)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}]}, &(0x7f0000000180)=0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f000075d000/0x3000)=nil, 0x3000, 0x0, 0x7, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
setitimer(0x2, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b1000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
syz_io_uring_setup(0x45c3, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x3, 0xffbffffd}, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
r7 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0)
r8 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=<r9=>0x0, &(0x7f00000001c0)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0)
signalfd4(r7, &(0x7f0000000140), 0x8, 0x0)

9.992201779s ago: executing program 7 (id=4347):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f00000012c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1)
sendfile(0xffffffffffffffff, r0, 0x0, 0x3ffff)
sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000)

9.618299344s ago: executing program 7 (id=4348):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x240}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000180), &(0x7f0000000580)=r4}, 0x20)
io_setup(0x8, &(0x7f0000000600)=<r6=>0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r6, 0x0, &(0x7f0000000080))
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r7}, 0x18)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
creat(0x0, 0x0)

7.96836563s ago: executing program 8 (id=4350):
r0 = socket(0x10, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x5, 0x3, 0x29, @loopback, @mcast2, 0x700, 0x20, 0x1, 0x2}})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000280)={0x4c, 0x5f, 0x6, 0x3, 0x7, "00da900eaf7919c635d4a15ac41e3100", 0x80000000, 0x7fe})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
r3 = dup(r1)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0xb53, 0xb, 0x7, 0xa0, 0x16, "9ef668a98e509a02"})
mknodat(r3, &(0x7f0000000080)='./file0\x00', 0x20, 0x4)
write$UHID_INPUT(r3, &(0x7f0000000300)={0xd, {"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", 0x1000}}, 0x1006)

7.414480068s ago: executing program 8 (id=4352):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000780)={0x3, 0x8, 0xaaf, {0x5, 0x7ff}, 0x6, 0x400})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8)
recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r9}, 0x18)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x80}, 0x1, 0x7}, 0x0)
dup(r5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r6}, 0x10)
sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000000c0)={[{@oldalloc}, {@stripe={'stripe', 0x3d, 0x6}}, {@noblock_validity}, {@grpjquota}, {@noinit_itable}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")

6.447755793s ago: executing program 7 (id=4356):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu<=0||!')
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$eJzs3c+PG1cdAPDvzP6w86PdBHqAqpAAhYCieLNOG1W9NLmAUFUJUXFAHNJl11ktseMQe0t3icT2bwAJBCf4EzggcUDqiQM3jkgcEFI5IAWIQFkESEYznt04WVtxYq/d7H4+0mR+vHnzfU/O+D0/e+cFcGSdjYjtiJiPiHciYqE4nhRLXOku2Xn3791Z2bl3ZyWJTuftvyd5enYsevJkThTXLEfE178S8e1kf9zW5taN5Xq9drvYX2w3bi22NrcurDeW12prtZvV6uWlyxdfu/RqdWx1PdP45d0vr7/5jd/8+lMf/n77S9/PinWySOutxzh1qz63FyczGxFvHkSwKZgp1vP7Ul7qn+HKwZaHJ5NGxMci4rP5/b8QM/n/TgDgMOt0fhqdhd59AOCwyz7/nywnaSUi0rToBFS6Y3gvxPG03my1z19vbtxc7Y6VnYq59Pp6vXbxdOmP381Pnkuy/aU8LU/P96uP7F+KiNMR8aPSsXy/stKsr06nywMAR96J/Duwov2PiH+V0rRSGSprn2/1AIBnRnkKOQGA6eptxUtTLAcAMDk+xQPA0TNE+1982b994GUBACbD538AOHq0/wBw9Dxp++83ggDwTPvaW29lS2eneP716rubG3PNdy+s1lo3Ko2NlcpK8/atylqzuZY/s6fxUOZjPdtFn6DebN5aeiU23lts11rtxdbm1rVGc+Nm+1r+XO9rtbmJ1g4A6Of0mQ/+kETE9uvH8iV65nLQVsPhlk67AMDUzDzYrJ140sw6CPBMe7rZvv4z9nIAkzdUE553En534GUBpqPvw7zLfTcf9pMnCOJ3xvCRcu6Tw4//75/jGXiWGf+Ho2vmqXK9MfZyAJP3dOP/wGHQ6SSPzvk/v5cEABxKI/yEr/ODcXVCgKl63GTeY/n+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6ZkxHxnUjSSj4XeJr9m1YqEc9FxKmYS66v12sXI+L5OBMRc6Vsf2nahQYARpT+NSnm/zq38PLJR1Pnk3+X8nVEfO9nb//4veV2+/ZSdvwfe8dLu9OHVR/kG2FeQQBgOJ3SkCfm7Xe1WPd8kL9/787K7nJQhezn7tX4XzEV8crOvTv50k2ZjexgRDnvSxz/ZxKzRZ5yRLwYETNjiL/9fkR8ol/9k3xs5FQx82lv/ChiPzfR+OlD8dM8rbvOOl8fH0NZ4Kj54GpEXOl3/6VxNl/3v//L+TvU6O5e7V5s971vpyf+bBFppk/87J4/O2yMV3771X0HOwvdtPcjXpztFz/Zi58MiP/ykPH/9NKnf/jGgLTOzyPORf/4vbEW241bi63NrQvrjeW12lo5qtXLS5cvvnbp1epiPka9uDtSvd/fXj///KCyZfU/PiB+uW/95/fyfn7I+v/iv+986zMPdkuPxv/i5/q//i/0jd+VtYlfeDhMZ1D85eO/Gjh9dxZ/dUD9H/f6nx+m8hHx4V+2Voc8FQCYgNbm1o3ler12e6SNNHY647jOvo2siMOdvNtdHC3on+MgavGUG3MjV2daG7N7fcXxXvmb2RUnXJ107LUYaeP+pGJN7z0JmIwHN/20SwIAAAAAAAAAAAAAAAwyiT9dmnYdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLz+HwAA//+WydIx")
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r4, 0x0, 0x58)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6})
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r8, 0x13)
ptrace(0x4206, r8)
ptrace(0x11, r8)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000780)={r5, r7, 0x33, 0x0, @val=@uprobe_multi={&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)=[0x7, 0xf], &(0x7f0000000740)=[0x5, 0x5], 0xc, 0x2, 0x0, r8}}, 0x40)
r9 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0))
ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000100)={0x60, 0x2, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x10000, &(0x7f0000000580)=[{0x8, 0x7ff, 0x5}, {0x5, 0x7, 0x6}, {0xd974, 0x3, 0xfffffffffffff000}, {0x8000, 0x401, 0x4}, {0x1ff, 0x4}, {0x7aed, 0x3, 0x2}, {0x9, 0x100000001, 0xe}, {0xffffffff, 0x4224, 0x7}], 0x8, 0xffffffffffff3539, 0x11, 0x28, 0x24, 0x40})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000500), 0x66)
socket$packet(0x11, 0x2, 0x300)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'})

6.336125355s ago: executing program 8 (id=4358):
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000200)={[{@inlinecrypt}, {@jqfmt_vfsv1}, {@quota}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@sysvgroups}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}], [{@appraise}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r0, 0x20, 0x0, 0x8)
unshare(0x8000000)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f00000002c0)="9fcc", 0x2, r1)
keyctl$instantiate(0xc, r2, 0x0, 0x0, r2)
semget$private(0x0, 0x4000, 0x555)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f00000012c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r4, &(0x7f0000004200)='t', 0x1)
fsopen(&(0x7f0000000000)='cpuset\x00', 0x0)
sendfile(r4, r3, 0x0, 0x3ffff)
sendfile(r4, r3, 0x0, 0x7ffff000)
semtimedop(0x0, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}], 0xf, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

6.091099628s ago: executing program 7 (id=4361):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x240}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000180), &(0x7f0000000580)=r4}, 0x20)
io_setup(0x8, &(0x7f0000000600)=<r6=>0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r6, 0x0, &(0x7f0000000080))
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r7}, 0x18)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
creat(0x0, 0x0)

5.32392338s ago: executing program 8 (id=4365):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r4, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c)
shutdown(r4, 0x1)
setsockopt(r4, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @mcast2, 0x235}}}, 0x84)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0x7, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRESDEC=r7], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r8}, 0x18)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="6357fd", @ANYRES32=0x0, @ANYBLOB="0c009900020000007200000010001d800c00008008000d8004000380"], 0x38}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

4.153311427s ago: executing program 8 (id=4375):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="757466383d302c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c756e695f786c6174653d312c756e695f786c6174653d302c726f6469722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d302c757466383d312c73686f72746e616d653d77696e39352c726f6469722c6e66733d6e6f7374616c655f726f2c726f6469722c757466383d312c73686f72746e616d653d77696e6e742c636865636b3d72656c617865642c00c63b831754d4eeec4cf38c28cf1e3409b9950bbab09abe8d407d1c7c935e034461a37ac3113829124efad15a202673b20ad011cb0f0cedb0cef9f6ec5e2634db26ef8581fd506844d0133ac021c0172b4b36a109949512e8dc6a8c7d603e3ef3cd57451eaee1b0e4804b9ea88fcad7afb59594dcfeaf8d34935fa0e54a36c57d964429e7ec869287810e5d97759017ace0c3f5"], 0x6, 0x2c3, &(0x7f0000000900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00q'], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002104000000000000", @ANYRES32], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0))
semctl$GETPID(0x0, 0x0, 0xb, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r5, 0x2285, 0x0)
sendmsg$TIPC_NL_KEY_SET(r4, 0x0, 0xc4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x22020600)
r6 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r6, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000006c0), 0x5}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

3.890113242s ago: executing program 8 (id=4377):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

3.745982933s ago: executing program 4 (id=4383):
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000480)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000600000008618ecb4a"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=<r3=>r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x31, 0x2, @thr={&(0x7f00000005c0)="13cf8d085e8ebe2754b8bcae1f2677507dec8fce575863e8bab8cea0c8ead322476743fa462d96772d3ef5352c38e8b99776a4194fc93841b7a264be1be3ce8adac8552f36f1a84d7c769046be88842688f1d0bc8844d3a7630c5af48ce1865d1976a80878513083f74c613f7eb5bae91730a16721365bea6bbae4a9ee837104f9c41a825d3ca1b2d2e1c330670e27c05070f379f9f960af00562e95f6bfb60dc4158648863a2b7d7488d7785c46", &(0x7f0000000880)="1256d3165f6955db0577160e5a5a315a3c1edee2fb2662115fa6fde8be494bd751c0aa133a471c7493a60b38a8c0b315f8372a73faad3b529f79be326d2aaf74f3c9454b33e69e0327ee88c0f18282aa41fa85badc2f15a8a057"}}, &(0x7f0000000300))
ioctl$sock_ifreq(0xffffffffffffffff, 0x891a, &(0x7f0000000240)={'veth1_to_bridge\x00', @ifru_ivalue=0x7})
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES8=r3, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x1000}, 0x18)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd)
r5 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0)
flock(r5, 0x5)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000250000000000"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYRES8=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='sched_kthread_stop\x00', r8}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x8000, 0x10, 0x7fc, 0x9, {{0x35, 0x4, 0x1, 0x4, 0xd4, 0x64, 0x0, 0x9, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xf, 0x44, [@local, @rand_addr, @empty]}, @ssrr={0x89, 0x23, 0x34, [@remote, @dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010101, @local, @remote, @broadcast, @rand_addr=0x64010100, @empty]}, @noop, @generic={0x86, 0x12, "fc2b00ebfd4898147248a6cc89ac0034"}, @ra={0x94, 0x4, 0x1}, @noop, @end, @timestamp_addr={0x44, 0x44, 0x56, 0x1, 0x0, [{@multicast2, 0xe9}, {@rand_addr=0x64010101, 0x2}, {@loopback, 0x101}, {@remote, 0x4}, {@broadcast, 0x3}, {@remote, 0x10}, {@empty, 0xfffffffd}, {@multicast1, 0x9}]}, @cipso={0x86, 0x21, 0xffffffffffffffff, [{0x7, 0xc, "1e20a01de7c3249851d0"}, {0x6, 0x6, "ad4e74cd"}, {0x2, 0x9, "41e0d6ff5ab2e7"}]}, @end, @lsrr={0x83, 0x7, 0x6c, [@loopback]}, @rr={0x7, 0x7, 0x38, [@rand_addr=0x64010101]}, @end]}}}}})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="0000c000020000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x95}, 0x0)
setrlimit(0x7, &(0x7f0000000200)={0x5, 0x6})

2.873355947s ago: executing program 4 (id=4388):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x109300, 0xb8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
lsetxattr$security_ima(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000280)=@md5={0x1, "baf070768b69dcc40dd67ea8b8fdc637"}, 0x11, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x22, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x800)
lsetxattr$security_capability(&(0x7f00000005c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000600), &(0x7f0000000680)=@v3={0x3000000, [{0x80000001, 0x427}, {0x8000, 0x3994aa5e}], r4}, 0x18, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@dev}, {@in=@local, 0x0, 0x6c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0)
write$binfmt_aout(r6, 0x0, 0xff2e)
unshare(0x2c020400)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
lseek(r8, 0x3, 0x2)
add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc3}, &(0x7f0000000540)={0x0, "f389780264b936ebb57a613f767f6b72da94a25a824e42f8f60e0e294a431402c5dc627e2650aff73badc67f73a42086da0fdf502419470764a8347ee3898da4", 0x1c}, 0x48, 0xfffffffffffffffa)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x18)
statfs(&(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0)=""/66)
setreuid(0x0, 0xee00)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70700000000000063118b000000000040000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23)
sendfile(r9, r0, 0x0, 0x3a)

2.770367498s ago: executing program 4 (id=4389):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000780)={0x3, 0x8, 0xaaf, {0x5, 0x7ff}, 0x6, 0x400})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8)
recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r9}, 0x18)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x80}, 0x1, 0x7}, 0x0)
dup(r5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r6}, 0x10)
sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000000c0)={[{@oldalloc}, {@stripe={'stripe', 0x3d, 0x6}}, {@noblock_validity}, {@grpjquota}, {@noinit_itable}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")

2.353595724s ago: executing program 4 (id=4397):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x240}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000180), &(0x7f0000000580)=r4}, 0x20)
io_setup(0x8, &(0x7f0000000600)=<r6=>0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r6, 0x0, &(0x7f0000000080))
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r7}, 0x18)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
creat(0x0, 0x0)

2.308990625s ago: executing program 6 (id=4399):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x5, 0x3, "91"}]}], {0x14}}, 0x50}}, 0x0)

2.308608875s ago: executing program 6 (id=4400):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f00000004c0)=0x3, 0x8, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000003ac0)=0x4d)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20004004}, 0x800)
r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
unshare(0x2040400)
readv(r3, &(0x7f0000000000)=[{&(0x7f0000000100)=""/251, 0x3c00}], 0x59)

1.593206706s ago: executing program 2 (id=4403):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002580)=@delchain={0x584, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x548, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0xd4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0xa0, 0x1b, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x44c, 0x1, [@m_tunnel_key={0x100, 0x18, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x697, 0x1, 0x4, 0x100}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x20}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}]}, {0x71, 0x6, "39a11532c68866bc11f78348e628abc1ad84d1601df6ec416cf625f90a17a99b39a666020afde2a4e1ff54842056996ead43539758b141e01d4feddfa4f2d6608c468e5ca2264f490beef1d6e6cd9490307b7f21c63dbf597bf51d59a885bce4d88f91e5cc855b5137d18436c7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x15c, 0x7, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xf, 0xb411d50005397f39, 0xa, 0x10001}, 0x9e61}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ce, 0xa, 0x0, 0x5, 0x1}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfe1, 0xc0000, 0x1, 0x3, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x28d4483e, 0xa41, 0x20000000, 0x8, 0x14eb}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4a3, 0x6, 0x7, 0x1c05, 0x4}, 0x1000}}]}, {0xa0, 0x6, "79bfcd7af533d072a8c29f36e68ab9904831686d6cd3390377cca5e53a8926070630448b3fc4cd7c92ec53371be4232497d515edab99ceda9fe783a4517aa76f458d17bb770e71e0ba14efb8375ac49ead1660b083f443d1ffcecd5197019986b82c2d3c1f0d2b0de14eead0041991bd7874be9402d799e64d44c3fe6d48dd4a8f6782a95c290cea018ba0470c73b3032f66a39bf3cba21d7301df83"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x80, 0xf, 0x0, 0x0, {{0x9}, {0x4}, {0x51, 0x6, "01f4310969d021b8053bb1aca7e8d7615c1d03580900c583f834dae8ea05e484960378a34a6b952d073cc12d15ce11e941d47c907715c5f99ee7525bcab58cfe612fa780af8ced2963cf55b349"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x98, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x6d, 0x6, "a616d32bc9a40ffc05a9cfa844689a40a38f9c9dde823878dadbebac8dfeb6c0573014ab9b67ca56390a49810c141041aa1ce1a4a552f838935a2c6a0c7e50caf726971b4e3a5e4a890a708d5ff8cc5782730d6c40a80692655341d51186010bd7ac039c5590977b62"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xd4, 0x12, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x266}, @TCA_CT_ZONE={0x6, 0x4, 0x54}, @TCA_CT_PARMS={0x18, 0x1, {0xdb9, 0x5, 0x3, 0x9, 0x7f}}]}, {0x81, 0x6, "459c319de49c160b14e676c3fc211ba38f8597c3689c3978e9e1555e10640d44f6f6b342ed52a7d3527784cc5f468970aa573ce62cd79f937d133c2f1a1567f7c2f8f29feadeb69353614a9753a9a99407bd7d9b74269371f0506731b5da7a11c39b2076e6305230116c9a40450f152503594d0657b2131f5b16c06e00"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6}}}}]}]}}]}, 0x584}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

1.273863051s ago: executing program 2 (id=4404):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x2005c013}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x218a5e, &(0x7f00000000c0)={[], [{@smackfsroot={'smackfsroot', 0x3d, '$#'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}, 0x1, 0x528, &(0x7f0000000b00)="$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")

1.269717261s ago: executing program 6 (id=4405):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r4, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c)
shutdown(r4, 0x1)
setsockopt(r4, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @mcast2, 0x235}}}, 0x84)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0x7, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRESDEC=r7, @ANYBLOB], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r8}, 0x18)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="6357fd", @ANYRES32=0x0, @ANYBLOB="0c009900020000007200000010001d800c00008008000d8004000380"], 0x38}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1.112951733s ago: executing program 2 (id=4406):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002580)=@delchain={0x53c, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x500, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0xd4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0xa0, 0x1b, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x404, 0x1, [@m_tunnel_key={0x100, 0x18, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x697, 0x1, 0x4, 0x100}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x20}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}]}, {0x71, 0x6, "39a11532c68866bc11f78348e628abc1ad84d1601df6ec416cf625f90a17a99b39a666020afde2a4e1ff54842056996ead43539758b141e01d4feddfa4f2d6608c468e5ca2264f490beef1d6e6cd9490307b7f21c63dbf597bf51d59a885bce4d88f91e5cc855b5137d18436c7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x164, 0x7, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xf, 0xb411d50005397f39, 0xa, 0x10001}, 0x9e61}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ce, 0xa, 0x0, 0x5, 0x1}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfe1, 0xc0000, 0x1, 0x3, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x28d4483e, 0xa41, 0x20000000, 0x8, 0x14eb}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4a3, 0x6, 0x7, 0x1c05, 0x4}, 0x1000}}]}, {0xa5, 0x6, "79bfcd7af533d072a8c29f36e68ab9904831686d6cd3390377cca5e53a8926070630448b3fc4cd7c92ec53371be4232497d515edab99ceda9fe783a4517aa76f458d17bb770e71e0ba14efb8375ac49ead1660b083f443d1ffcecd5197019986b82c2d3c1f0d2b0de14eead0041991bd7874be9402d799e64d44c3fe6d48dd4a8f6782a95c290cea018ba0470c73b3032f66a39bf3cba21d7301df8362d3324b6a"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x80, 0xf, 0x0, 0x0, {{0x9}, {0x4}, {0x51, 0x6, "01f4310969d021b8053bb1aca7e8d7615c1d03580900c583f834dae8ea05e484960378a34a6b952d073cc12d15ce11e941d47c907715c5f99ee7525bcab58cfe612fa780af8ced2963cf55b349"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x98, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x6d, 0x6, "a616d32bc9a40ffc05a9cfa844689a40a38f9c9dde823878dadbebac8dfeb6c0573014ab9b67ca56390a49810c141041aa1ce1a4a552f838935a2c6a0c7e50caf726971b4e3a5e4a890a708d5ff8cc5782730d6c40a80692655341d51186010bd7ac039c5590977b62"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x84, 0x12, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x266}, @TCA_CT_ZONE={0x6, 0x4, 0x54}, @TCA_CT_PARMS={0x18, 0x1, {0xdb9, 0x5, 0x3, 0x9, 0x7f}}]}, {0x33, 0x6, "459c319de49c160b14e676c3fc211ba38f8597c3689c3978e9e1555e10640d44f6f6b342ed52a7d3527784cc5f4689"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6}}}}]}]}}]}, 0x53c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

962.512726ms ago: executing program 2 (id=4407):
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))

961.915446ms ago: executing program 2 (id=4408):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000780)={0x3, 0x8, 0xaaf, {0x5, 0x7ff}, 0x6, 0x400})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8)
recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, 0x0, 0x0)
dup(r5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r6}, 0x10)
sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000000c0)={[{@oldalloc}, {@stripe={'stripe', 0x3d, 0x6}}, {@noblock_validity}, {@grpjquota}, {@noinit_itable}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")

580.290911ms ago: executing program 6 (id=4409):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

530.001612ms ago: executing program 6 (id=4410):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (fail_nth: 2)

206.442007ms ago: executing program 6 (id=4411):
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000200)={[{@inlinecrypt}, {@jqfmt_vfsv1}, {@quota}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@sysvgroups}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}], [{@appraise}]}, 0x1, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r0, 0x20, 0x0, 0x8)
unshare(0x8000000)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f00000002c0)="9fcc", 0x2, r1)
keyctl$instantiate(0xc, r2, 0x0, 0x0, r2)
semget$private(0x0, 0x4000, 0x555)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f00000012c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r4, &(0x7f0000004200)='t', 0x1)
fsopen(&(0x7f0000000000)='cpuset\x00', 0x0)
sendfile(r4, r3, 0x0, 0x3ffff)
sendfile(r4, r3, 0x0, 0x7ffff000)
semtimedop(0x0, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}], 0xf, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r6)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

177.319228ms ago: executing program 4 (id=4412):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x218a5e, &(0x7f00000000c0)={[], [{@smackfsroot={'smackfsroot', 0x3d, '$#'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}, 0x1, 0x528, &(0x7f0000000b00)="$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")
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'})

165.720798ms ago: executing program 2 (id=4413):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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")

0s ago: executing program 4 (id=4414):
r0 = syz_usbip_server_init(0x1)
writev(r0, &(0x7f0000002a80)=[{&(0x7f0000001540)="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", 0xfa}, {&(0x7f0000001640)="18341a5067cb07a923df4c91ab6b8938093cbd958bbe5a222a1447a85eadaea0616a0cf201a0110664912204c66db80cb571ee6ac2d6c2ba5ebb28a4e0ce17aa8fc4fc8117beb5f59cdc925a4362d3bc2d9fb593eca65acccf1b9bf7e91e64e924ee2197bb6a6a974bac44358d34f22a6cfbda8426b26b663daa32399e67a8d58fafec7b4605c7081b28ff78a47e18e36a4c3e5714fc433a8c91eabbba1bbf898b50e4dce9129fda0b982c1ac5a60f2aab4bea8e7598bbab444f8ea9f46fd394312c21dbd52d79", 0xc7}, {&(0x7f0000001740)}, {&(0x7f0000001780)="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", 0xfa}, {&(0x7f0000001880)="ca0c289a2a93f09ed420221ee81c15a8e87111ff7836a54ab826c50ee2712e047d5bd43c6f65db65db24f497dcc8f3faad71d56f54c73442f745e1accf72dc930a5d1d26c1a8dfe1fd4ba565632992f7cdefa2b0d662699df0ac5e945e2aa9e48fb24df31d7f0e6c4e4be2fc1c7dc7f8a9b1e9196d1fbb0a21fa409abd7327043e5907047c9009424d7bf464ac5bb6e690ff88f10bcae62c1f184ec4a8053c81c40097b612c70fecbd2d0f9ea5fed426d3688b3b05d1b4affe9e1cb7eee832e0f5", 0xc1}, {&(0x7f0000001980)="3062f878b92ae87554e5d7cb13aae5b8303b906ba6b3ec748260c8f3fe950bc63ebcebd94cb52fdcd1d24c3a6e7086e024962cc7edd385772b5a67bfb90ed62c9cb15c6854276538d5d2e117fa6974d170b943dd191b26ea26044414208df02ae3e382e3a2cd2309486e0318c0387794c5fab6c042c5379472e7611f147318e59a00121ed16cdd9c5714c26a3cfeccf1baf3d401bdd2791e228729202cc73dd8ccfa27f609ca7999ab031ccda503151356e2e1b3108a397da436219440dc9f058ad43caa75c90da8ceb11a764d2062b36297a666db086d726d8e634c0c02b5ddf8a5b237297a6b", 0xe7}, {&(0x7f0000001a80)}], 0x7)

kernel console output (not intermixed with test programs):

 when QUOTA feature is enabled
[  392.901537][T16537] bridge22: entered promiscuous mode
[  392.912944][T16537] bridge22: entered allmulticast mode
[  392.926016][T16537] bridge23: entered promiscuous mode
[  392.931534][T16537] bridge23: entered allmulticast mode
[  392.936972][T16543] EXT4-fs (loop2): orphan cleanup on readonly fs
[  392.951050][T16537] bridge24: entered promiscuous mode
[  392.951086][   T29] audit: type=1326 audit(1750026075.771:21149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16548 comm="syz.1.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bbdcde929 code=0x7ffc0000
[  392.956375][T16537] bridge24: entered allmulticast mode
[  392.970190][T16537] bridge25: entered promiscuous mode
[  392.980158][   T29] audit: type=1326 audit(1750026075.771:21150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16548 comm="syz.1.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbdcde929 code=0x7ffc0000
[  392.985396][T16537] bridge25: entered allmulticast mode
[  392.990864][   T29] audit: type=1326 audit(1750026075.791:21151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16548 comm="syz.1.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bbdcde929 code=0x7ffc0000
[  393.043460][   T29] audit: type=1326 audit(1750026075.791:21152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16548 comm="syz.1.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbdcde929 code=0x7ffc0000
[  393.043596][T16553] loop4: detected capacity change from 0 to 1024
[  393.067163][   T29] audit: type=1326 audit(1750026075.791:21153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16548 comm="syz.1.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2bbdcde929 code=0x7ffc0000
[  393.101364][T16543] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4036: bg 0: block 248: padding at end of block bitmap is not set
[  393.116042][T16543] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4036: Failed to acquire dquot type 1
[  393.129496][T16543] EXT4-fs (loop2): 1 truncate cleaned up
[  393.136321][T16543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  393.159377][T16554] loop6: detected capacity change from 0 to 128
[  393.178166][T16553] EXT4-fs: inline encryption not supported
[  393.194325][T16553] EXT4-fs: Ignoring removed orlov option
[  393.200079][T16553] ext4: Unknown parameter 'appraise'
[  393.230379][T16543] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.309314][T16553] loop4: detected capacity change from 0 to 1024
[  393.354901][T16553] EXT4-fs: Ignoring removed orlov option
[  393.376663][T16553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  393.410609][T16566] sd 0:0:1:0: device reset
[  393.504875][T16572] loop2: detected capacity change from 0 to 512
[  393.537703][T16572] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  393.549082][T16572] EXT4-fs (loop2): orphan cleanup on readonly fs
[  393.565168][T16572] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.4047: Block bitmap for bg 0 marked uninitialized
[  393.568282][T16574] lo speed is unknown, defaulting to 1000
[  393.587065][T16572] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  393.599949][T16572] EXT4-fs (loop2): 1 orphan inode deleted
[  393.618813][T16572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  393.631501][T16574] lo speed is unknown, defaulting to 1000
[  393.718658][T13554] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.803807][T12855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.855788][T16580] loop4: detected capacity change from 0 to 1024
[  393.918308][T16580] EXT4-fs: inline encryption not supported
[  393.928599][T16580] EXT4-fs: Ignoring removed orlov option
[  393.934313][T16580] ext4: Unknown parameter 'appraise'
[  394.017740][T16583] Falling back ldisc for ttyS3.
[  394.372350][T16602] sd 0:0:1:0: device reset
[  394.438008][T16605] loop1: detected capacity change from 0 to 512
[  394.448223][T16605] EXT4-fs: Ignoring removed oldalloc option
[  394.454214][T16605] EXT4-fs: Ignoring removed orlov option
[  394.518609][T16605] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  394.567942][T16607] lo speed is unknown, defaulting to 1000
[  394.574088][T16607] lo speed is unknown, defaulting to 1000
[  394.603611][T16605] EXT4-fs (loop1): orphan cleanup on readonly fs
[  394.656089][T16610] hub 1-0:1.0: USB hub found
[  394.662287][T16610] hub 1-0:1.0: 8 ports detected
[  394.674348][T16605] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4057: bg 0: block 248: padding at end of block bitmap is not set
[  394.760351][T16605] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4057: Failed to acquire dquot type 1
[  394.783442][T16605] EXT4-fs (loop1): 1 truncate cleaned up
[  394.791710][T16615] sd 0:0:1:0: device reset
[  394.818964][T16605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  394.902726][T16605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.046301][T16623] loop2: detected capacity change from 0 to 2048
[  395.061158][T16623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  395.681645][T16615] lo speed is unknown, defaulting to 1000
[  395.702144][T16632] Falling back ldisc for ttyS3.
[  395.957967][T16615] lo speed is unknown, defaulting to 1000
[  395.978615][T16632] loop5: detected capacity change from 0 to 2048
[  396.725661][T13554] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.790777][T16648] FAULT_INJECTION: forcing a failure.
[  396.790777][T16648] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  396.803969][T16648] CPU: 0 UID: 0 PID: 16648 Comm: syz.2.4070 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) 
[  396.803999][T16648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  396.804014][T16648] Call Trace:
[  396.804066][T16648]  <TASK>
[  396.804075][T16648]  __dump_stack+0x1d/0x30
[  396.804113][T16648]  dump_stack_lvl+0xe8/0x140
[  396.804131][T16648]  dump_stack+0x15/0x1b
[  396.804145][T16648]  should_fail_ex+0x265/0x280
[  396.804180][T16648]  should_fail+0xb/0x20
[  396.804258][T16648]  should_fail_usercopy+0x1a/0x20
[  396.804294][T16648]  _copy_from_user+0x1c/0xb0
[  396.804313][T16648]  ___sys_sendmsg+0xc1/0x1d0
[  396.804342][T16648]  __x64_sys_sendmsg+0xd4/0x160
[  396.804368][T16648]  x64_sys_call+0x2999/0x2fb0
[  396.804389][T16648]  do_syscall_64+0xd2/0x200
[  396.804405][T16648]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  396.804464][T16648]  ? clear_bhb_loop+0x40/0x90
[  396.804535][T16648]  ? clear_bhb_loop+0x40/0x90
[  396.804643][T16648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.804710][T16648] RIP: 0033:0x7efcd255e929
[  396.804729][T16648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  396.804751][T16648] RSP: 002b:00007efcd0bc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  396.804774][T16648] RAX: ffffffffffffffda RBX: 00007efcd2785fa0 RCX: 00007efcd255e929
[  396.804790][T16648] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  396.804806][T16648] RBP: 00007efcd0bc7090 R08: 0000000000000000 R09: 0000000000000000
[  396.804871][T16648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  396.804884][T16648] R13: 0000000000000000 R14: 00007efcd2785fa0 R15: 00007fff3ec74c68
[  396.804905][T16648]  </TASK>
[  397.197776][   T29] kauditd_printk_skb: 294 callbacks suppressed
[  397.197792][   T29] audit: type=1326 audit(1750026080.081:21444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7f6532d3df code=0x7ffc0000
[  397.233012][   T29] audit: type=1326 audit(1750026080.091:21445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16664 comm="syz.2.4078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efcd255e929 code=0x0
[  397.256366][   T29] audit: type=1326 audit(1750026080.121:21446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6532e929 code=0x7ffc0000
[  397.279463][   T29] audit: type=1326 audit(1750026080.121:21447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6532e929 code=0x7ffc0000
[  397.302549][   T29] audit: type=1326 audit(1750026080.121:21448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f7f6532e929 code=0x7ffc0000
[  397.325824][   T29] audit: type=1326 audit(1750026080.121:21449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6532e929 code=0x7ffc0000
[  397.349277][   T29] audit: type=1326 audit(1750026080.121:21450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f7f6532e929 code=0x7ffc0000
[  397.372394][   T29] audit: type=1326 audit(1750026080.121:21451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6532e929 code=0x7ffc0000
[  397.395483][   T29] audit: type=1326 audit(1750026080.121:21452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f6532d290 code=0x7ffc0000
[  397.418588][   T29] audit: type=1326 audit(1750026080.121:21453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6532e929 code=0x7ffc0000
[  397.510324][T16679] FAULT_INJECTION: forcing a failure.
[  397.510324][T16679] name failslab, interval 1, probability 0, space 0, times 0
[  397.523122][T16679] CPU: 0 UID: 0 PID: 16679 Comm: syz.4.4081 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) 
[  397.523156][T16679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  397.523171][T16679] Call Trace:
[  397.523179][T16679]  <TASK>
[  397.523187][T16679]  __dump_stack+0x1d/0x30
[  397.523209][T16679]  dump_stack_lvl+0xe8/0x140
[  397.523288][T16679]  dump_stack+0x15/0x1b
[  397.523303][T16679]  should_fail_ex+0x265/0x280
[  397.523361][T16679]  should_failslab+0x8c/0xb0
[  397.523432][T16679]  kmem_cache_alloc_lru_noprof+0x55/0x310
[  397.523481][T16679]  ? shmem_alloc_inode+0x34/0x50
[  397.523505][T16679]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  397.523527][T16679]  shmem_alloc_inode+0x34/0x50
[  397.523607][T16679]  alloc_inode+0x3d/0x170
[  397.523675][T16679]  new_inode+0x1d/0xe0
[  397.523705][T16679]  shmem_get_inode+0x244/0x750
[  397.523729][T16679]  __shmem_file_setup+0x113/0x210
[  397.523764][T16679]  shmem_file_setup+0x3b/0x50
[  397.523869][T16679]  __se_sys_memfd_create+0x2c3/0x590
[  397.523924][T16679]  __x64_sys_memfd_create+0x31/0x40
[  397.523984][T16679]  x64_sys_call+0x122f/0x2fb0
[  397.524039][T16679]  do_syscall_64+0xd2/0x200
[  397.524061][T16679]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  397.524089][T16679]  ? clear_bhb_loop+0x40/0x90
[  397.524134][T16679]  ? clear_bhb_loop+0x40/0x90
[  397.524155][T16679]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.524175][T16679] RIP: 0033:0x7fa03426e929
[  397.524189][T16679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  397.524211][T16679] RSP: 002b:00007fa0328b5e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  397.524282][T16679] RAX: ffffffffffffffda RBX: 0000000000000775 RCX: 00007fa03426e929
[  397.524297][T16679] RDX: 00007fa0328b5ef0 RSI: 0000000000000000 RDI: 00007fa0342f14cc
[  397.524313][T16679] RBP: 0000200000001180 R08: 00007fa0328b5bb7 R09: 00007fa0328b5e40
[  397.524328][T16679] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000007c0
[  397.524340][T16679] R13: 00007fa0328b5ef0 R14: 00007fa0328b5eb0 R15: 0000200000000340
[  397.524358][T16679]  </TASK>
[  397.749222][T16678] loop5: detected capacity change from 0 to 128
[  397.756508][T16678] EXT4-fs: Ignoring removed nobh option
[  397.767696][T16669] loop1: detected capacity change from 0 to 512
[  397.774645][T16669] EXT4-fs: Ignoring removed oldalloc option
[  397.784144][T16669] EXT4-fs: Ignoring removed orlov option
[  397.793379][T16678] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  397.819094][T16669] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  397.828033][T16678] ext4 filesystem being mounted at /202/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  397.840016][T16669] EXT4-fs (loop1): orphan cleanup on readonly fs
[  397.847053][T16669] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4077: bg 0: block 248: padding at end of block bitmap is not set
[  397.866290][T16678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4083'.
[  397.890489][T13842] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  397.922688][T16669] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4077: Failed to acquire dquot type 1
[  397.935989][T16669] EXT4-fs (loop1): 1 truncate cleaned up
[  397.942803][T16669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  397.980653][T16669] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.250570][T16693] loop5: detected capacity change from 0 to 128
[  398.577872][T16699] Falling back ldisc for ttyS3.
[  398.616462][T16699] loop4: detected capacity change from 0 to 2048
[  398.722681][T16709] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.809346][T16709] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.851092][T16714] loop5: detected capacity change from 0 to 1024
[  398.860177][T16714] EXT4-fs: Ignoring removed orlov option
[  398.890476][T16714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  398.899760][T16717] loop6: detected capacity change from 0 to 1024
[  398.910801][T16717] EXT4-fs: Ignoring removed orlov option
[  398.921005][T16709] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.940474][T16717] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  398.968907][T16709] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.024817][T16709] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  399.036914][T16709] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  399.048950][T16709] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  399.072595][T16709] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  399.198547][T16726] hub 1-0:1.0: USB hub found
[  399.204591][T16726] hub 1-0:1.0: 8 ports detected
[  399.432703][ T3372] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  399.454600][ T3372] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  399.467863][T16735] Falling back ldisc for ttyS3.
[  399.504878][T16735] loop4: detected capacity change from 0 to 2048
[  399.739896][T13842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.790634][T16747] loop1: detected capacity change from 0 to 1024
[  399.815552][T16747] EXT4-fs: Ignoring removed orlov option
[  399.821723][T16749] Falling back ldisc for ttyS3.
[  399.837103][T16749] loop5: detected capacity change from 0 to 2048
[  399.841677][T16747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  399.970925][T16753] loop2: detected capacity change from 0 to 1024
[  399.978304][T16758] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  399.984844][T16758] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  399.992295][T16758] vhci_hcd vhci_hcd.0: Device attached
[  400.011581][T16758] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6)
[  400.011930][T16125] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  400.018132][T16758] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  400.018229][T16758] vhci_hcd vhci_hcd.0: Device attached
[  400.032961][T16753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  400.044402][T16762] usbip_core: unknown command
[  400.057011][T16762] vhci_hcd: unknown pdu 43757719
[  400.062034][T16762] usbip_core: unknown command
[  400.067403][T16759] vhci_hcd: connection closed
[  400.098961][T16753] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  400.119465][T16753] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  400.131746][T16753] EXT4-fs (loop2): This should not happen!! Data will be lost
[  400.131746][T16753] 
[  400.141557][T16753] EXT4-fs (loop2): Total free blocks count 0
[  400.147688][T16753] EXT4-fs (loop2): Free/Dirty block details
[  400.153589][T16753] EXT4-fs (loop2): free_blocks=68451041280
[  400.159491][T16753] EXT4-fs (loop2): dirty_blocks=16
[  400.164630][T16753] EXT4-fs (loop2): Block reservation details
[  400.170722][T16753] EXT4-fs (loop2): i_reserved_data_blocks=1
[  400.191301][ T6748] vhci_hcd: stop threads
[  400.191342][   T37] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  400.195694][ T6748] vhci_hcd: release socket
[  400.208013][ T1037] vhci_hcd: vhci_device speed not set
[  400.217684][ T6748] vhci_hcd: disconnect device
[  400.224511][ T6748] vhci_hcd: stop threads
[  400.228867][ T6748] vhci_hcd: release socket
[  400.233419][ T6748] vhci_hcd: disconnect device
[  400.281063][T16767] SELinux: failed to load policy
[  400.288597][T16767] 9pnet_fd: Insufficient options for proto=fd
[  400.297857][ T1037] usb 11-1: new full-speed USB device number 2 using vhci_hcd
[  400.305642][ T1037] usb 11-1: enqueue for inactive port 0
[  400.312885][ T1037] usb 11-1: enqueue for inactive port 0
[  400.322010][ T1037] usb 11-1: enqueue for inactive port 0
[  400.365506][T16773] FAULT_INJECTION: forcing a failure.
[  400.365506][T16773] name failslab, interval 1, probability 0, space 0, times 0
[  400.378239][T16773] CPU: 1 UID: 0 PID: 16773 Comm: syz.2.4114 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) 
[  400.378313][T16773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  400.378324][T16773] Call Trace:
[  400.378330][T16773]  <TASK>
[  400.378338][T16773]  __dump_stack+0x1d/0x30
[  400.378362][T16773]  dump_stack_lvl+0xe8/0x140
[  400.378384][T16773]  dump_stack+0x15/0x1b
[  400.378461][T16773]  should_fail_ex+0x265/0x280
[  400.378506][T16773]  should_failslab+0x8c/0xb0
[  400.378605][T16773]  kmem_cache_alloc_node_noprof+0x57/0x320
[  400.378640][T16773]  ? __alloc_skb+0x101/0x320
[  400.378678][T16773]  __alloc_skb+0x101/0x320
[  400.378705][T16773]  netlink_alloc_large_skb+0xba/0xf0
[  400.378816][T16773]  netlink_sendmsg+0x3cf/0x6b0
[  400.378843][T16773]  ? __pfx_netlink_sendmsg+0x10/0x10
[  400.378864][T16773]  __sock_sendmsg+0x142/0x180
[  400.378892][T16773]  ____sys_sendmsg+0x31e/0x4e0
[  400.379012][T16773]  ___sys_sendmsg+0x17b/0x1d0
[  400.379066][T16773]  __x64_sys_sendmsg+0xd4/0x160
[  400.379093][T16773]  x64_sys_call+0x2999/0x2fb0
[  400.379114][T16773]  do_syscall_64+0xd2/0x200
[  400.379130][T16773]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  400.379222][T16773]  ? clear_bhb_loop+0x40/0x90
[  400.379248][T16773]  ? clear_bhb_loop+0x40/0x90
[  400.379350][T16773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.379371][T16773] RIP: 0033:0x7efcd255e929
[  400.379406][T16773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  400.379488][T16773] RSP: 002b:00007efcd0bc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  400.379508][T16773] RAX: ffffffffffffffda RBX: 00007efcd2785fa0 RCX: 00007efcd255e929
[  400.379523][T16773] RDX: 0000000000004040 RSI: 0000200000000080 RDI: 0000000000000006
[  400.379538][T16773] RBP: 00007efcd0bc7090 R08: 0000000000000000 R09: 0000000000000000
[  400.379611][T16773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  400.379623][T16773] R13: 0000000000000000 R14: 00007efcd2785fa0 R15: 00007fff3ec74c68
[  400.379641][T16773]  </TASK>
[  400.598196][ T1037] vhci_hcd: vhci_device speed not set
[  400.658431][T16776] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.713924][T16781] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.715772][T12696] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  400.735121][T16776] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.759778][T16781] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.773570][T16784] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.795735][T16786] bridge0: entered promiscuous mode
[  400.795979][T16788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4120'.
[  400.805540][T16786] macvlan2: entered promiscuous mode
[  400.816856][T16786] bridge0: port 3(macvlan2) entered blocking state
[  400.823590][T16786] bridge0: port 3(macvlan2) entered disabled state
[  400.830604][T16786] macvlan2: entered allmulticast mode
[  400.835991][T16786] bridge0: entered allmulticast mode
[  400.842037][T16786] macvlan2: left allmulticast mode
[  400.847245][T16786] bridge0: left allmulticast mode
[  400.854099][T16786] bridge0: left promiscuous mode
[  400.869869][T16784] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.884153][T16781] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.904911][T16776] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.926929][T16789] bridge0: entered promiscuous mode
[  400.935735][T16789] macvlan2: entered promiscuous mode
[  400.945542][T16789] bridge0: port 3(macvlan2) entered blocking state
[  400.952302][T16789] bridge0: port 3(macvlan2) entered disabled state
[  400.968291][T16789] macvlan2: entered allmulticast mode
[  400.973737][T16789] bridge0: entered allmulticast mode
[  400.983305][T16789] macvlan2: left allmulticast mode
[  400.988538][T16789] bridge0: left allmulticast mode
[  401.001295][T16789] bridge0: left promiscuous mode
[  401.011136][T16781] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.025148][T16784] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.042147][T16776] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.073597][T16781] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.089219][T16784] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.109381][T16781] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.122087][T16781] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.134980][T16781] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.139258][T16794] loop4: detected capacity change from 0 to 512
[  401.170051][T16803] loop1: detected capacity change from 0 to 2048
[  401.176939][T16794] EXT4-fs: Ignoring removed oldalloc option
[  401.183061][T16794] EXT4-fs: Ignoring removed orlov option
[  401.191147][T16794] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  401.196650][T16776] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.200980][T16794] EXT4-fs (loop4): orphan cleanup on readonly fs
[  401.216369][T16794] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4121: bg 0: block 248: padding at end of block bitmap is not set
[  401.233416][T16794] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4121: Failed to acquire dquot type 1
[  401.249864][T16794] EXT4-fs (loop4): 1 truncate cleaned up
[  401.268610][T16794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  401.272643][T16776] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.294513][T16801] Falling back ldisc for ttyS3.
[  401.295046][T16794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.332855][T16776] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.382591][T16776] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.498204][T16784] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.634858][T16784] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.689503][T16819] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  401.696159][T16819] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  401.703657][T16819] vhci_hcd vhci_hcd.0: Device attached
[  401.772323][T16784] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.862744][T16824] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7)
[  401.869395][T16824] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  401.877043][T16824] vhci_hcd vhci_hcd.0: Device attached
[  401.887689][   T36] vhci_hcd: vhci_device speed not set
[  401.927173][T16784] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.967719][   T36] usb 5-1: new full-speed USB device number 2 using vhci_hcd
[  402.002280][T16825] usbip_core: unknown command
[  402.007046][T16825] vhci_hcd: unknown pdu 43757719
[  402.012044][T16825] usbip_core: unknown command
[  402.035275][   T37] vhci_hcd: stop threads
[  402.039667][   T37] vhci_hcd: release socket
[  402.042601][T16820] vhci_hcd: connection reset by peer
[  402.044120][   T37] vhci_hcd: disconnect device
[  402.063359][   T37] vhci_hcd: stop threads
[  402.067842][   T37] vhci_hcd: release socket
[  402.072304][   T37] vhci_hcd: disconnect device
[  402.145591][T16835] loop4: detected capacity change from 0 to 1024
[  402.152887][T16835] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  402.164337][T16835] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  402.177458][T16837] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.191698][T16835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  402.232794][T16839] bridge0: entered promiscuous mode
[  402.240576][T16839] macvlan2: entered promiscuous mode
[  402.246797][T16839] bridge0: port 3(macvlan2) entered blocking state
[  402.253552][T16839] bridge0: port 3(macvlan2) entered disabled state
[  402.260220][T16835] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 48: comm syz.4.4135: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0
[  402.268825][T16839] macvlan2: entered allmulticast mode
[  402.285655][T16839] bridge0: entered allmulticast mode
[  402.292396][T16835] EXT4-fs (loop4): Remounting filesystem read-only
[  402.312962][T16839] macvlan2: left allmulticast mode
[  402.318292][T16839] bridge0: left allmulticast mode
[  402.323906][T12855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.324400][T16839] bridge0: left promiscuous mode
[  402.381716][T16837] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.401090][T16850] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.438470][T16837] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.469564][T16850] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.485430][   T29] kauditd_printk_skb: 269 callbacks suppressed
[  402.485446][   T29] audit: type=1326 audit(1750026085.371:21719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16855 comm="syz.6.4143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  402.516036][   T29] audit: type=1326 audit(1750026085.371:21720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16855 comm="syz.6.4143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  402.539847][   T29] audit: type=1326 audit(1750026085.371:21721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16855 comm="syz.6.4143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  402.563522][   T29] audit: type=1326 audit(1750026085.371:21722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16855 comm="syz.6.4143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  402.587198][   T29] audit: type=1326 audit(1750026085.371:21723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16855 comm="syz.6.4143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  402.611143][   T29] audit: type=1326 audit(1750026085.371:21724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16855 comm="syz.6.4143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  402.634784][   T29] audit: type=1326 audit(1750026085.371:21725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16855 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  402.658077][   T29] audit: type=1326 audit(1750026085.371:21726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16855 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  402.681420][   T29] audit: type=1326 audit(1750026085.371:21727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16855 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  402.704741][   T29] audit: type=1326 audit(1750026085.371:21728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16855 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  402.730601][T16837] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.745400][T16859] sd 0:0:1:0: device reset
[  402.820956][T16850] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.881262][T16871] sd 0:0:1:0: device reset
[  402.890287][T16850] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.134774][T16859] lo speed is unknown, defaulting to 1000
[  403.181347][T16859] lo speed is unknown, defaulting to 1000
[  403.348185][T16875] lo speed is unknown, defaulting to 1000
[  403.385063][T16875] lo speed is unknown, defaulting to 1000
[  403.785881][T16894] loop2: detected capacity change from 0 to 128
[  403.830819][T16899] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  403.837403][T16899] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  403.845031][T16899] vhci_hcd vhci_hcd.0: Device attached
[  403.851653][T16900] usbip_core: unknown command
[  403.856393][T16900] vhci_hcd: unknown pdu 43757719
[  403.861452][T16900] usbip_core: unknown command
[  403.866293][ T6728] vhci_hcd: stop threads
[  403.870686][ T6728] vhci_hcd: release socket
[  403.875141][ T6728] vhci_hcd: disconnect device
[  404.122515][T16850] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  404.133847][T16850] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  404.145173][T16850] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.156235][T16850] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.205010][T16905] loop4: detected capacity change from 0 to 1024
[  404.214382][T16905] EXT4-fs: inline encryption not supported
[  404.220673][T16905] EXT4-fs: Ignoring removed orlov option
[  404.226373][T16905] ext4: Unknown parameter 'appraise'
[  404.243219][T16905] loop4: detected capacity change from 0 to 1024
[  404.250680][T16905] EXT4-fs: Ignoring removed orlov option
[  404.261700][T16905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  405.053478][T16919] loop6: detected capacity change from 0 to 128
[  405.108107][T12855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.202743][T16927] loop2: detected capacity change from 0 to 512
[  405.213329][T16927] EXT4-fs: test_dummy_encryption option not supported
[  405.415642][T16938] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.426040][T16936] Falling back ldisc for ttyS3.
[  405.446903][T16933] loop4: detected capacity change from 0 to 2048
[  405.469809][T16943] bridge0: entered promiscuous mode
[  405.475147][T16943] macvlan2: entered promiscuous mode
[  405.482330][T16943] bridge0: port 3(macvlan2) entered blocking state
[  405.489069][T16943] bridge0: port 3(macvlan2) entered disabled state
[  405.498312][T16943] macvlan2: entered allmulticast mode
[  405.503745][T16943] bridge0: entered allmulticast mode
[  405.511330][T16943] macvlan2: left allmulticast mode
[  405.512027][T16944] loop1: detected capacity change from 0 to 2048
[  405.516513][T16943] bridge0: left allmulticast mode
[  405.528658][T16942] Falling back ldisc for ttyS3.
[  405.536600][T16943] bridge0: left promiscuous mode
[  405.558407][T16938] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.580074][T16947] hub 1-0:1.0: USB hub found
[  405.585912][T16947] hub 1-0:1.0: 8 ports detected
[  405.685148][T16953] loop4: detected capacity change from 0 to 512
[  405.692522][T16938] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.703849][T16953] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  405.720870][T16953] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4177: invalid indirect mapped block 4294967295 (level 1)
[  405.736599][T16953] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4177: invalid indirect mapped block 4294967295 (level 1)
[  405.752801][T16938] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.763427][T16953] EXT4-fs (loop4): 2 truncates cleaned up
[  405.770764][T16953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  405.834035][T16953] bridge_slave_0: left allmulticast mode
[  405.839769][T16953] bridge_slave_0: left promiscuous mode
[  405.845472][T16953] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.863746][T16953] bridge_slave_1: left allmulticast mode
[  405.869536][T16953] bridge_slave_1: left promiscuous mode
[  405.875272][T16953] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.887490][T16953] bond0: (slave bond_slave_0): Releasing backup interface
[  405.897309][T16953] bond0: (slave bond_slave_1): Releasing backup interface
[  405.909392][T16953] team0: Port device team_slave_0 removed
[  405.920384][T16953] team0: Port device team_slave_1 removed
[  405.928218][T16953] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  405.936698][T16953] batman_adv: batadv0: Removing interface: batadv_slave_0
[  405.947342][T16953] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  405.954852][   T51] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2
[  405.964476][   T51] ref_tracker: batadv_slave_0@ffff888119e2f550 has 1/1 users at
[  405.964476][   T51]      batadv_hard_if_event+0x758/0x1070
[  405.964476][   T51]      raw_notifier_call_chain+0x6f/0x1b0
[  405.964476][   T51]      call_netdevice_notifiers_info+0xae/0x100
[  405.964476][   T51]      register_netdevice+0xd48/0xf00
[  405.964476][   T51]      veth_newlink+0x49b/0x770
[  405.964476][   T51]      rtnl_newlink_create+0x1bc/0x620
[  405.964476][   T51]      rtnl_newlink+0xf29/0x12d0
[  405.964476][   T51]      rtnetlink_rcv_msg+0x5fe/0x6d0
[  405.964476][   T51]      netlink_rcv_skb+0x123/0x220
[  405.964476][   T51]      rtnetlink_rcv+0x1c/0x30
[  405.964476][   T51]      netlink_unicast+0x59e/0x670
[  405.964476][   T51]      netlink_sendmsg+0x58b/0x6b0
[  405.964476][   T51]      __sock_sendmsg+0x142/0x180
[  405.964476][   T51]      __sys_sendto+0x268/0x330
[  405.964476][   T51]      __x64_sys_sendto+0x76/0x90
[  405.964476][   T51]      x64_sys_call+0x2eb6/0x2fb0
[  405.964476][   T51] 
[  406.018923][T16953] batman_adv: batadv0: Removing interface: batadv_slave_1
[  406.090236][T16953] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  406.098747][T16953] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  406.107157][T16953] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  406.115666][T16953] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  406.143754][T12855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.493538][T16837] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  406.530601][T16837] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.562853][T16837] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  406.608979][T16837] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  406.729522][T16970] 9pnet_fd: Insufficient options for proto=fd
[  406.801260][T16972] loop1: detected capacity change from 0 to 128
[  406.855965][T16974] loop5: detected capacity change from 0 to 1024
[  406.870077][T16974] EXT4-fs: inline encryption not supported
[  406.885643][T16974] EXT4-fs: Ignoring removed orlov option
[  406.891417][T16974] ext4: Unknown parameter 'appraise'
[  407.165473][T16938] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  407.242096][T16938] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  407.287213][T16980] hub 1-0:1.0: USB hub found
[  407.300145][T16938] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  407.313589][T16980] hub 1-0:1.0: 8 ports detected
[  407.341086][T16938] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.365848][T16982] loop1: detected capacity change from 0 to 2048
[  407.394426][T16981] Falling back ldisc for ttyS3.
[  407.505971][T16987] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4188'.
[  407.530818][T16984] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4188'.
[  407.548393][   T29] kauditd_printk_skb: 155 callbacks suppressed
[  407.548406][   T29] audit: type=1326 audit(1750026090.441:21884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.1.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bbdcde929 code=0x7ffc0000
[  407.548926][   T36] usb 5-1: enqueue for inactive port 0
[  407.554638][   T29] audit: type=1326 audit(1750026090.441:21885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.1.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbdcde929 code=0x7ffc0000
[  407.578226][   T36] usb 5-1: enqueue for inactive port 0
[  407.657816][T16984] loop2: detected capacity change from 0 to 512
[  407.669788][   T36] vhci_hcd: vhci_device speed not set
[  407.692886][T16984] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  407.702528][T16984] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4188: invalid indirect mapped block 2683928664 (level 1)
[  407.717694][T16984] EXT4-fs (loop2): Remounting filesystem read-only
[  407.727129][T16984] EXT4-fs (loop2): 1 truncate cleaned up
[  407.748878][T16984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  407.762435][   T29] audit: type=1326 audit(1750026090.511:21886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.1.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f2bbdcde929 code=0x7ffc0000
[  407.786180][   T29] audit: type=1326 audit(1750026090.511:21887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.1.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbdcde929 code=0x7ffc0000
[  407.809802][   T29] audit: type=1326 audit(1750026090.511:21888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.1.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2bbdcde929 code=0x7ffc0000
[  407.833744][   T29] audit: type=1326 audit(1750026090.511:21889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.1.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbdcde929 code=0x7ffc0000
[  407.857829][   T29] audit: type=1326 audit(1750026090.511:21890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.1.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2bbdcde929 code=0x7ffc0000
[  407.881498][   T29] audit: type=1326 audit(1750026090.511:21891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.1.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbdcde929 code=0x7ffc0000
[  407.905631][   T29] audit: type=1326 audit(1750026090.511:21892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.1.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2bbdcde929 code=0x7ffc0000
[  407.929417][   T29] audit: type=1326 audit(1750026090.511:21893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.1.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbdcde929 code=0x7ffc0000
[  407.994689][T13554] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.052794][T17003] loop5: detected capacity change from 0 to 512
[  408.060604][T17003] EXT4-fs: Ignoring removed oldalloc option
[  408.068383][T17006] Falling back ldisc for ttyS3.
[  408.091495][T17010] loop1: detected capacity change from 0 to 1024
[  408.091499][T17006] loop2: detected capacity change from 0 to 2048
[  408.092242][T17003] EXT4-fs: Ignoring removed orlov option
[  408.112512][T17003] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  408.114033][T17010] EXT4-fs: inline encryption not supported
[  408.150768][T17010] EXT4-fs: Ignoring removed orlov option
[  408.156731][T17010] ext4: Unknown parameter 'appraise'
[  408.183699][T17003] EXT4-fs (loop5): orphan cleanup on readonly fs
[  408.210725][T17010] loop1: detected capacity change from 0 to 1024
[  408.221060][T17010] EXT4-fs: Ignoring removed orlov option
[  408.223702][T17003] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4194: bg 0: block 248: padding at end of block bitmap is not set
[  408.246686][T17010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  408.279470][T17003] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4194: Failed to acquire dquot type 1
[  408.334509][T17017] loop6: detected capacity change from 0 to 128
[  408.353994][T17003] EXT4-fs (loop5): 1 truncate cleaned up
[  408.402686][T17017] bio_check_eod: 32 callbacks suppressed
[  408.402701][T17017] syz.6.4199: attempt to access beyond end of device
[  408.402701][T17017] loop6: rw=2049, sector=132, nr_sectors = 8 limit=128
[  408.448779][T17017] syz.6.4199: attempt to access beyond end of device
[  408.448779][T17017] loop6: rw=2049, sector=148, nr_sectors = 8 limit=128
[  408.477303][T17017] syz.6.4199: attempt to access beyond end of device
[  408.477303][T17017] loop6: rw=2049, sector=142, nr_sectors = 1 limit=128
[  408.491130][T17017] buffer_io_error: 26 callbacks suppressed
[  408.491144][T17017] Buffer I/O error on dev loop6, logical block 142, lost async page write
[  408.517857][T17017] syz.6.4199: attempt to access beyond end of device
[  408.517857][T17017] loop6: rw=2049, sector=143, nr_sectors = 1 limit=128
[  408.531419][T17017] Buffer I/O error on dev loop6, logical block 143, lost async page write
[  408.558355][T17022] loop4: detected capacity change from 0 to 128
[  408.573161][T17017] syz.6.4199: attempt to access beyond end of device
[  408.573161][T17017] loop6: rw=2049, sector=144, nr_sectors = 1 limit=128
[  408.586855][T17017] Buffer I/O error on dev loop6, logical block 144, lost async page write
[  408.604070][T17017] syz.6.4199: attempt to access beyond end of device
[  408.604070][T17017] loop6: rw=2049, sector=145, nr_sectors = 1 limit=128
[  408.615206][T17022] syz.4.4200: attempt to access beyond end of device
[  408.615206][T17022] loop4: rw=2049, sector=132, nr_sectors = 8 limit=128
[  408.617681][T17017] Buffer I/O error on dev loop6, logical block 145, lost async page write
[  408.619241][T17017] syz.6.4199: attempt to access beyond end of device
[  408.619241][T17017] loop6: rw=2049, sector=146, nr_sectors = 1 limit=128
[  408.645971][T17022] syz.4.4200: attempt to access beyond end of device
[  408.645971][T17022] loop4: rw=2049, sector=148, nr_sectors = 8 limit=128
[  408.653112][T17017] Buffer I/O error on dev loop6, logical block 146, lost async page write
[  408.663902][T17017] syz.6.4199: attempt to access beyond end of device
[  408.663902][T17017] loop6: rw=2049, sector=147, nr_sectors = 1 limit=128
[  408.674998][T17022] Buffer I/O error on dev loop4, logical block 142, lost async page write
[  408.675232][T17017] Buffer I/O error on dev loop6, logical block 147, lost async page write
[  408.703222][T17022] Buffer I/O error on dev loop4, logical block 143, lost async page write
[  408.716452][T17017] Buffer I/O error on dev loop6, logical block 156, lost async page write
[  408.727524][T17022] Buffer I/O error on dev loop4, logical block 144, lost async page write
[  408.913667][T17028] FAULT_INJECTION: forcing a failure.
[  408.913667][T17028] name failslab, interval 1, probability 0, space 0, times 0
[  408.926534][T17028] CPU: 0 UID: 0 PID: 17028 Comm: syz.6.4202 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) 
[  408.926593][T17028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  408.926649][T17028] Call Trace:
[  408.926658][T17028]  <TASK>
[  408.926667][T17028]  __dump_stack+0x1d/0x30
[  408.926688][T17028]  dump_stack_lvl+0xe8/0x140
[  408.926706][T17028]  dump_stack+0x15/0x1b
[  408.926762][T17028]  should_fail_ex+0x265/0x280
[  408.926799][T17028]  should_failslab+0x8c/0xb0
[  408.926831][T17028]  kmem_cache_alloc_noprof+0x50/0x310
[  408.926929][T17028]  ? audit_log_start+0x365/0x6c0
[  408.926961][T17028]  audit_log_start+0x365/0x6c0
[  408.926999][T17028]  audit_seccomp+0x48/0x100
[  408.927031][T17028]  ? __seccomp_filter+0x68c/0x10d0
[  408.927093][T17028]  __seccomp_filter+0x69d/0x10d0
[  408.927122][T17028]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  408.927146][T17028]  ? vfs_write+0x75e/0x8e0
[  408.927200][T17028]  ? __rcu_read_unlock+0x4f/0x70
[  408.927225][T17028]  ? __fget_files+0x184/0x1c0
[  408.927292][T17028]  __secure_computing+0x82/0x150
[  408.927314][T17028]  syscall_trace_enter+0xcf/0x1e0
[  408.927340][T17028]  do_syscall_64+0xac/0x200
[  408.927360][T17028]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  408.927433][T17028]  ? clear_bhb_loop+0x40/0x90
[  408.927458][T17028]  ? clear_bhb_loop+0x40/0x90
[  408.927482][T17028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.927581][T17028] RIP: 0033:0x7f3b7561e929
[  408.927598][T17028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  408.927633][T17028] RSP: 002b:00007f3b73c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d
[  408.927655][T17028] RAX: ffffffffffffffda RBX: 00007f3b75845fa0 RCX: 00007f3b7561e929
[  408.927669][T17028] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000000000000
[  408.927680][T17028] RBP: 00007f3b73c87090 R08: 0000000000000000 R09: 0000000000000000
[  408.927690][T17028] R10: 0000200000ffa000 R11: 0000000000000246 R12: 0000000000000001
[  408.927701][T17028] R13: 0000000000000000 R14: 00007f3b75845fa0 R15: 00007fff6c30d918
[  408.927773][T17028]  </TASK>
[  409.149380][T17033] loop4: detected capacity change from 0 to 2048
[  409.177717][T17029] Falling back ldisc for ttyS3.
[  409.260255][T17042] loop6: detected capacity change from 0 to 1024
[  409.267990][T17039] Falling back ldisc for ttyS3.
[  409.282825][T17039] loop4: detected capacity change from 0 to 2048
[  409.305713][T17042] EXT4-fs: Ignoring removed orlov option
[  409.375690][T17048] sd 0:0:1:0: device reset
[  409.437363][T17058] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  409.444031][T17058] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  409.451643][T17058] vhci_hcd vhci_hcd.0: Device attached
[  409.480249][T17056] loop2: detected capacity change from 0 to 512
[  409.483073][T17062] lo speed is unknown, defaulting to 1000
[  409.489989][T17056] EXT4-fs: Ignoring removed oldalloc option
[  409.508145][T17062] lo speed is unknown, defaulting to 1000
[  409.535544][T17057] syzkaller0: entered promiscuous mode
[  409.541188][T17057] syzkaller0: entered allmulticast mode
[  409.570524][T17056] EXT4-fs: Ignoring removed orlov option
[  409.572410][T17059] vhci_hcd: connection closed
[  409.578381][T17056] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  409.586950][ T3327] vhci_hcd: stop threads
[  409.595911][ T3327] vhci_hcd: release socket
[  409.600364][ T3327] vhci_hcd: disconnect device
[  409.637778][ T3415] vhci_hcd: vhci_device speed not set
[  409.669897][T17056] EXT4-fs (loop2): orphan cleanup on readonly fs
[  409.706267][T17056] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4211: bg 0: block 248: padding at end of block bitmap is not set
[  409.771008][T17056] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4211: Failed to acquire dquot type 1
[  409.828062][T17056] EXT4-fs (loop2): 1 truncate cleaned up
[  409.856238][T17056] EXT4-fs mount: 4 callbacks suppressed
[  409.856256][T17056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  409.973319][T17056] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.153618][T17079] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  410.180498][T17077] loop5: detected capacity change from 0 to 512
[  410.198797][T17077] EXT4-fs: Ignoring removed oldalloc option
[  410.205172][T17083] siw: device registration error -23
[  410.224567][T17077] EXT4-fs: Ignoring removed orlov option
[  410.254489][T16125] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.278081][T17077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  410.297916][T17082] Falling back ldisc for ttyS3.
[  410.308713][T17077] EXT4-fs (loop5): orphan cleanup on readonly fs
[  410.322344][T17082] loop2: detected capacity change from 0 to 2048
[  410.340593][T17077] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4217: bg 0: block 248: padding at end of block bitmap is not set
[  410.393853][T17077] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4217: Failed to acquire dquot type 1
[  410.476596][T17077] EXT4-fs (loop5): 1 truncate cleaned up
[  410.489603][T17077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  410.493433][T17099] loop2: detected capacity change from 0 to 1024
[  410.508736][T17097] loop1: detected capacity change from 0 to 1024
[  410.515849][T17097] EXT4-fs: inline encryption not supported
[  410.538121][T17099] EXT4-fs: inline encryption not supported
[  410.545046][T17097] EXT4-fs: Ignoring removed orlov option
[  410.550774][T17097] ext4: Unknown parameter 'appraise'
[  410.552656][T17099] EXT4-fs: Ignoring removed orlov option
[  410.561859][T17099] ext4: Unknown parameter 'appraise'
[  410.570210][T17077] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.636342][T17099] loop2: detected capacity change from 0 to 1024
[  410.650891][T17103] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  410.660744][T17099] EXT4-fs: Ignoring removed orlov option
[  410.671411][T17103] siw: device registration error -23
[  410.689489][T17099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  410.737677][T17107] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  410.744290][T17107] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  410.751864][T17107] vhci_hcd vhci_hcd.0: Device attached
[  410.772831][T17108] vhci_hcd: connection closed
[  410.774781][   T37] vhci_hcd: stop threads
[  410.784004][   T37] vhci_hcd: release socket
[  410.788477][   T37] vhci_hcd: disconnect device
[  411.235058][T17120] loop5: detected capacity change from 0 to 1024
[  411.260346][T17120] EXT4-fs: Ignoring removed orlov option
[  411.273761][T17120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  411.339666][T17123] 9pnet_fd: Insufficient options for proto=fd
[  411.383799][T17125] loop6: detected capacity change from 0 to 256
[  411.439672][T13554] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  411.556216][T17132] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  411.564327][T17129] Falling back ldisc for ttyS3.
[  411.585372][T17132] siw: device registration error -23
[  411.610711][T17129] loop2: detected capacity change from 0 to 2048
[  411.852520][T17143] loop1: detected capacity change from 0 to 512
[  411.883631][T17143] EXT4-fs: Ignoring removed oldalloc option
[  411.899327][T17143] EXT4-fs: Ignoring removed orlov option
[  411.906394][T17143] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  411.926037][T17143] EXT4-fs (loop1): orphan cleanup on readonly fs
[  411.929778][T17148] loop2: detected capacity change from 0 to 256
[  411.999655][T17143] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4239: bg 0: block 248: padding at end of block bitmap is not set
[  412.097709][T17143] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4239: Failed to acquire dquot type 1
[  412.110943][T13842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.159840][T17143] EXT4-fs (loop1): 1 truncate cleaned up
[  412.176864][T17152] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.190296][T17143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  412.203563][T17143] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.231301][T17153] bridge0: entered promiscuous mode
[  412.236677][T17153] macvlan2: entered promiscuous mode
[  412.243344][T17153] bridge0: port 3(macvlan2) entered blocking state
[  412.249968][T17153] bridge0: port 3(macvlan2) entered disabled state
[  412.261491][T17153] macvlan2: entered allmulticast mode
[  412.266907][T17153] bridge0: entered allmulticast mode
[  412.277777][T17153] macvlan2: left allmulticast mode
[  412.283039][T17153] bridge0: left allmulticast mode
[  412.298239][T17153] bridge0: left promiscuous mode
[  412.320594][T17152] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.372213][T17156] 9pnet_fd: Insufficient options for proto=fd
[  412.380557][T17152] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.439850][T17159] loop4: detected capacity change from 0 to 1024
[  412.449181][T17152] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.458481][T17159] EXT4-fs: inline encryption not supported
[  412.475270][T17159] EXT4-fs: Ignoring removed orlov option
[  412.481088][T17159] ext4: Unknown parameter 'appraise'
[  412.516610][T17152] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  412.524430][T17159] loop4: detected capacity change from 0 to 1024
[  412.528923][T17152] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  412.556502][T17159] EXT4-fs: Ignoring removed orlov option
[  412.562670][T17152] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  412.578449][T17152] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  412.591898][   T29] kauditd_printk_skb: 365 callbacks suppressed
[  412.591915][   T29] audit: type=1326 audit(1750026095.481:22249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17162 comm="syz.6.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  412.632742][   T29] audit: type=1326 audit(1750026095.481:22250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17162 comm="syz.6.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  412.656531][   T29] audit: type=1326 audit(1750026095.481:22251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17162 comm="syz.6.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  412.680267][   T29] audit: type=1326 audit(1750026095.491:22252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17162 comm="syz.6.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  412.704108][   T29] audit: type=1326 audit(1750026095.491:22253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17162 comm="syz.6.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  412.727778][   T29] audit: type=1326 audit(1750026095.491:22254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17162 comm="syz.6.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  412.751513][   T29] audit: type=1326 audit(1750026095.491:22255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17162 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  412.774716][   T29] audit: type=1326 audit(1750026095.491:22256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17162 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  412.797825][   T29] audit: type=1326 audit(1750026095.491:22257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17162 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  412.820940][   T29] audit: type=1326 audit(1750026095.491:22258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17162 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  412.846769][T17159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  412.866544][T17168] loop1: detected capacity change from 0 to 1024
[  412.891690][T17168] EXT4-fs: inline encryption not supported
[  412.920100][T17174] loop5: detected capacity change from 0 to 256
[  412.946112][T17168] EXT4-fs: Ignoring removed orlov option
[  412.952045][T17168] ext4: Unknown parameter 'appraise'
[  412.982670][T17168] loop1: detected capacity change from 0 to 1024
[  412.994254][T17168] EXT4-fs: Ignoring removed orlov option
[  413.009113][T17168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  413.147352][T17188] loop2: detected capacity change from 0 to 1024
[  413.154412][T17184] sd 0:0:1:0: device reset
[  413.162703][T17188] EXT4-fs: Ignoring removed orlov option
[  413.195919][T13842] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  413.204514][T13842] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  413.216594][T17188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  413.333236][T12855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.407286][T17184] lo speed is unknown, defaulting to 1000
[  413.416676][T17184] lo speed is unknown, defaulting to 1000
[  413.566020][T17196] 9pnet_fd: Insufficient options for proto=fd
[  413.628304][T17199] loop4: detected capacity change from 0 to 128
[  413.675090][T17199] bio_check_eod: 18 callbacks suppressed
[  413.675108][T17199] syz.4.4258: attempt to access beyond end of device
[  413.675108][T17199] loop4: rw=2049, sector=132, nr_sectors = 8 limit=128
[  413.713297][T17199] syz.4.4258: attempt to access beyond end of device
[  413.713297][T17199] loop4: rw=2049, sector=148, nr_sectors = 8 limit=128
[  413.727135][T17199] syz.4.4258: attempt to access beyond end of device
[  413.727135][T17199] loop4: rw=2049, sector=142, nr_sectors = 1 limit=128
[  413.740701][T17199] buffer_io_error: 14 callbacks suppressed
[  413.740714][T17199] Buffer I/O error on dev loop4, logical block 142, lost async page write
[  413.767036][T17199] syz.4.4258: attempt to access beyond end of device
[  413.767036][T17199] loop4: rw=2049, sector=143, nr_sectors = 1 limit=128
[  413.780537][T17199] Buffer I/O error on dev loop4, logical block 143, lost async page write
[  413.790256][T17199] syz.4.4258: attempt to access beyond end of device
[  413.790256][T17199] loop4: rw=2049, sector=144, nr_sectors = 1 limit=128
[  413.803782][T17199] Buffer I/O error on dev loop4, logical block 144, lost async page write
[  413.812749][T17199] syz.4.4258: attempt to access beyond end of device
[  413.812749][T17199] loop4: rw=2049, sector=145, nr_sectors = 1 limit=128
[  413.826235][T17199] Buffer I/O error on dev loop4, logical block 145, lost async page write
[  413.837266][T17199] syz.4.4258: attempt to access beyond end of device
[  413.837266][T17199] loop4: rw=2049, sector=146, nr_sectors = 1 limit=128
[  413.850779][T17199] Buffer I/O error on dev loop4, logical block 146, lost async page write
[  413.860268][T17199] syz.4.4258: attempt to access beyond end of device
[  413.860268][T17199] loop4: rw=2049, sector=147, nr_sectors = 1 limit=128
[  413.873937][T17199] Buffer I/O error on dev loop4, logical block 147, lost async page write
[  413.905238][T17199] syz.4.4258: attempt to access beyond end of device
[  413.905238][T17199] loop4: rw=2049, sector=156, nr_sectors = 1 limit=128
[  413.918879][T17199] Buffer I/O error on dev loop4, logical block 156, lost async page write
[  413.927824][T17199] syz.4.4258: attempt to access beyond end of device
[  413.927824][T17199] loop4: rw=2049, sector=157, nr_sectors = 1 limit=128
[  413.941326][T17199] Buffer I/O error on dev loop4, logical block 157, lost async page write
[  413.952528][T17199] Buffer I/O error on dev loop4, logical block 160, lost async page write
[  413.961581][T17199] Buffer I/O error on dev loop4, logical block 161, lost async page write
[  413.965107][T12696] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.006004][T13554] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.073505][T17210] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  414.101791][T17214] sd 0:0:1:0: device reset
[  414.196301][T17219] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.218989][T17200] lo speed is unknown, defaulting to 1000
[  414.225133][T17200] lo speed is unknown, defaulting to 1000
[  414.241244][T17222] bridge0: entered promiscuous mode
[  414.246586][T17222] macvlan2: entered promiscuous mode
[  414.253324][T17222] bridge0: port 3(macvlan2) entered blocking state
[  414.259943][T17222] bridge0: port 3(macvlan2) entered disabled state
[  414.267005][T17222] macvlan2: entered allmulticast mode
[  414.272475][T17222] bridge0: entered allmulticast mode
[  414.289068][T17222] macvlan2: left allmulticast mode
[  414.294227][T17222] bridge0: left allmulticast mode
[  414.300360][T17222] bridge0: left promiscuous mode
[  414.326650][T17219] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.370026][T17219] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.386144][T17214] lo speed is unknown, defaulting to 1000
[  414.413365][T17214] lo speed is unknown, defaulting to 1000
[  414.437866][T17219] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.493762][T17200] chnl_net:caif_netlink_parms(): no params data found
[  414.635423][T17200] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.642659][T17200] bridge0: port 1(bridge_slave_0) entered disabled state
[  414.650344][T17200] bridge_slave_0: entered allmulticast mode
[  414.657311][T17200] bridge_slave_0: entered promiscuous mode
[  414.679781][T17232] loop6: detected capacity change from 0 to 1024
[  414.687276][T17232] EXT4-fs: Ignoring removed nobh option
[  414.692920][T17200] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.692981][T17200] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.693277][T17200] bridge_slave_1: entered allmulticast mode
[  414.713805][T17200] bridge_slave_1: entered promiscuous mode
[  414.737188][T17232] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  414.766592][T17200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  414.766932][T16125] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.778649][T17200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  414.825222][T17200] team0: Port device team_slave_0 added
[  414.840475][T17200] team0: Port device team_slave_1 added
[  414.847563][T17237] sd 0:0:1:0: device reset
[  414.892027][T17200] batman_adv: batadv0: Adding interface: batadv_slave_0
[  414.899086][T17200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  414.925254][T17200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  414.960899][T17200] batman_adv: batadv0: Adding interface: batadv_slave_1
[  414.967993][T17200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  414.994002][T17200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  415.001096][T17243] sd 0:0:1:0: device reset
[  415.021640][T17246] FAULT_INJECTION: forcing a failure.
[  415.021640][T17246] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  415.034767][T17246] CPU: 1 UID: 0 PID: 17246 Comm: syz.4.4269 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) 
[  415.034867][T17246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  415.034883][T17246] Call Trace:
[  415.034891][T17246]  <TASK>
[  415.034969][T17246]  __dump_stack+0x1d/0x30
[  415.034990][T17246]  dump_stack_lvl+0xe8/0x140
[  415.035011][T17246]  dump_stack+0x15/0x1b
[  415.035031][T17246]  should_fail_ex+0x265/0x280
[  415.035125][T17246]  should_fail+0xb/0x20
[  415.035157][T17246]  should_fail_usercopy+0x1a/0x20
[  415.035192][T17246]  _copy_to_user+0x20/0xa0
[  415.035212][T17246]  simple_read_from_buffer+0xb5/0x130
[  415.035314][T17246]  proc_fail_nth_read+0x100/0x140
[  415.035333][T17246]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  415.035350][T17246]  vfs_read+0x1a0/0x6f0
[  415.035384][T17246]  ? __rcu_read_unlock+0x4f/0x70
[  415.035435][T17246]  ? __rcu_read_unlock+0x4f/0x70
[  415.035455][T17246]  ? __fget_files+0x184/0x1c0
[  415.035544][T17246]  ksys_read+0xda/0x1a0
[  415.035573][T17246]  __x64_sys_read+0x40/0x50
[  415.035601][T17246]  x64_sys_call+0x2d77/0x2fb0
[  415.035675][T17246]  do_syscall_64+0xd2/0x200
[  415.035692][T17246]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  415.035717][T17246]  ? clear_bhb_loop+0x40/0x90
[  415.035736][T17246]  ? clear_bhb_loop+0x40/0x90
[  415.035770][T17246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.035793][T17246] RIP: 0033:0x7fa03426d33c
[  415.035807][T17246] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  415.035874][T17246] RSP: 002b:00007fa0328d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  415.035918][T17246] RAX: ffffffffffffffda RBX: 00007fa034495fa0 RCX: 00007fa03426d33c
[  415.035931][T17246] RDX: 000000000000000f RSI: 00007fa0328d70a0 RDI: 0000000000000006
[  415.035947][T17246] RBP: 00007fa0328d7090 R08: 0000000000000000 R09: 0000000000000000
[  415.035992][T17246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  415.036008][T17246] R13: 0000000000000000 R14: 00007fa034495fa0 R15: 00007ffce16a1a68
[  415.036032][T17246]  </TASK>
[  415.151577][T17248] lo speed is unknown, defaulting to 1000
[  415.262735][T17200] hsr_slave_0: entered promiscuous mode
[  415.270788][T17200] hsr_slave_1: entered promiscuous mode
[  415.288643][T17251] loop4: detected capacity change from 0 to 1024
[  415.289867][T17200] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  415.296591][T17251] EXT4-fs: Ignoring removed orlov option
[  415.313772][T17200] Cannot create hsr debugfs directory
[  415.319546][T17248] lo speed is unknown, defaulting to 1000
[  415.339349][T17251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  415.475559][T17200] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  415.486778][T17200] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  415.517577][T17200] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  415.528650][T17237] lo speed is unknown, defaulting to 1000
[  415.538017][T17200] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  415.554275][T17237] lo speed is unknown, defaulting to 1000
[  415.622945][T17263] loop1: detected capacity change from 0 to 128
[  415.742489][T17265] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  415.750685][T17265] siw: device registration error -23
[  415.876480][T17200] 8021q: adding VLAN 0 to HW filter on device bond0
[  415.896681][T17200] 8021q: adding VLAN 0 to HW filter on device team0
[  415.921044][ T6728] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.928194][ T6728] bridge0: port 1(bridge_slave_0) entered forwarding state
[  415.940456][T17271] loop1: detected capacity change from 0 to 1024
[  415.949099][T17271] EXT4-fs: inline encryption not supported
[  415.955139][T17271] EXT4-fs: Ignoring removed orlov option
[  415.960944][T17271] ext4: Unknown parameter 'appraise'
[  415.983281][T17271] loop1: detected capacity change from 0 to 1024
[  415.994912][T17271] EXT4-fs: Ignoring removed orlov option
[  416.019791][T17271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  416.035357][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.042476][ T3327] bridge0: port 2(bridge_slave_1) entered forwarding state
[  416.180672][T12855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.180941][T17200] 8021q: adding VLAN 0 to HW filter on device batadv0
[  416.373970][T17219] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  416.386853][T17219] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  416.402471][T17219] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  416.415716][T17293] sch_tbf: peakrate 5 is lower than or equals to rate 8 !
[  416.427342][T17219] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  416.517334][T17303] loop2: detected capacity change from 0 to 128
[  416.525546][T17200] veth0_vlan: entered promiscuous mode
[  416.536687][T17200] veth1_vlan: entered promiscuous mode
[  416.561563][T17200] veth0_macvtap: entered promiscuous mode
[  416.572125][T17200] veth1_macvtap: entered promiscuous mode
[  416.593865][T17200] batman_adv: batadv0: Interface activated: batadv_slave_0
[  416.604493][T17200] batman_adv: batadv0: Interface activated: batadv_slave_1
[  416.615824][T17200] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  416.624616][T17200] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  416.633394][T17200] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  416.642151][T17200] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  416.784820][T17307] loop6: detected capacity change from 0 to 2048
[  416.925877][T17307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  417.081623][T17311] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  417.512964][T17322] FAULT_INJECTION: forcing a failure.
[  417.512964][T17322] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  417.526222][T17322] CPU: 0 UID: 0 PID: 17322 Comm: syz.4.4286 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) 
[  417.526254][T17322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  417.526268][T17322] Call Trace:
[  417.526275][T17322]  <TASK>
[  417.526283][T17322]  __dump_stack+0x1d/0x30
[  417.526306][T17322]  dump_stack_lvl+0xe8/0x140
[  417.526323][T17322]  dump_stack+0x15/0x1b
[  417.526406][T17322]  should_fail_ex+0x265/0x280
[  417.526504][T17322]  should_fail+0xb/0x20
[  417.526535][T17322]  should_fail_usercopy+0x1a/0x20
[  417.526573][T17322]  copy_fpstate_to_sigframe+0x628/0x7d0
[  417.526675][T17322]  ? copy_fpstate_to_sigframe+0xe6/0x7d0
[  417.526709][T17322]  ? x86_task_fpu+0x36/0x60
[  417.526816][T17322]  get_sigframe+0x34d/0x490
[  417.526835][T17322]  ? get_signal+0xdc8/0xf70
[  417.526947][T17322]  x64_setup_rt_frame+0xa8/0x580
[  417.526980][T17322]  arch_do_signal_or_restart+0x27c/0x480
[  417.527001][T17322]  exit_to_user_mode_loop+0x7a/0x100
[  417.527026][T17322]  do_syscall_64+0x1d6/0x200
[  417.527042][T17322]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  417.527091][T17322]  ? clear_bhb_loop+0x40/0x90
[  417.527145][T17322]  ? clear_bhb_loop+0x40/0x90
[  417.527171][T17322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.527195][T17322] RIP: 0033:0x7fa03426e929
[  417.527262][T17322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  417.527280][T17322] RSP: 002b:00007fa0328d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  417.527297][T17322] RAX: 0000000000000000 RBX: 00007fa034495fa0 RCX: 00007fa03426e929
[  417.527307][T17322] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  417.527318][T17322] RBP: 00007fa0328d7090 R08: 0000000000000000 R09: 0000000000000000
[  417.527350][T17322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  417.527363][T17322] R13: 0000000000000000 R14: 00007fa034495fa0 R15: 00007ffce16a1a68
[  417.527381][T17322]  </TASK>
[  417.806360][T17327] loop4: detected capacity change from 0 to 1024
[  417.815671][T17327] EXT4-fs: Ignoring removed orlov option
[  417.883862][T17327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  418.310561][T17320] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.314139][T12855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.323188][T12696] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.349151][T17332] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.365853][T17341] loop4: detected capacity change from 0 to 1024
[  418.380697][T17343] loop1: detected capacity change from 0 to 256
[  418.388240][T17341] EXT4-fs: Ignoring removed orlov option
[  418.404614][T16125] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.416345][T17341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  418.432178][T17334] bridge0: entered promiscuous mode
[  418.437525][T17334] macvlan2: entered promiscuous mode
[  418.459057][T17334] bridge0: port 3(macvlan2) entered blocking state
[  418.465739][T17334] bridge0: port 3(macvlan2) entered disabled state
[  418.472552][T17334] macvlan2: entered allmulticast mode
[  418.477995][T17334] bridge0: entered allmulticast mode
[  418.483839][T17346] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  418.490378][T17346] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  418.497948][T17346] vhci_hcd vhci_hcd.0: Device attached
[  418.505424][T17347] vhci_hcd: connection closed
[  418.505787][   T37] vhci_hcd: stop threads
[  418.505859][T17334] macvlan2: left allmulticast mode
[  418.510592][   T37] vhci_hcd: release socket
[  418.514764][T17334] bridge0: left allmulticast mode
[  418.519915][   T37] vhci_hcd: disconnect device
[  418.534779][T17334] bridge0: left promiscuous mode
[  418.549441][T17335] bridge0: entered promiscuous mode
[  418.554899][T17335] macvlan2: entered promiscuous mode
[  418.561465][T17335] bridge0: port 3(macvlan2) entered blocking state
[  418.568076][T17335] bridge0: port 3(macvlan2) entered disabled state
[  418.575078][T17335] macvlan2: entered allmulticast mode
[  418.580561][T17335] bridge0: entered allmulticast mode
[  418.586838][T17335] macvlan2: left allmulticast mode
[  418.592035][T17335] bridge0: left allmulticast mode
[  418.605448][T17335] bridge0: left promiscuous mode
[  418.615597][T17320] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.680208][T17320] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.713978][T17332] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.759787][T17320] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.803692][T17354] FAULT_INJECTION: forcing a failure.
[  418.803692][T17354] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  418.816876][T17354] CPU: 1 UID: 0 PID: 17354 Comm: syz.1.4295 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) 
[  418.816911][T17354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  418.816923][T17354] Call Trace:
[  418.816930][T17354]  <TASK>
[  418.816937][T17354]  __dump_stack+0x1d/0x30
[  418.817001][T17354]  dump_stack_lvl+0xe8/0x140
[  418.817020][T17354]  dump_stack+0x15/0x1b
[  418.817104][T17354]  should_fail_ex+0x265/0x280
[  418.817144][T17354]  should_fail+0xb/0x20
[  418.817187][T17354]  should_fail_usercopy+0x1a/0x20
[  418.817242][T17354]  _copy_from_user+0x1c/0xb0
[  418.817260][T17354]  tls_setsockopt+0x3ec/0xce0
[  418.817307][T17354]  sock_common_setsockopt+0x66/0x80
[  418.817331][T17354]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  418.817361][T17354]  __sys_setsockopt+0x181/0x200
[  418.817463][T17354]  __x64_sys_setsockopt+0x64/0x80
[  418.817497][T17354]  x64_sys_call+0x2bd5/0x2fb0
[  418.817600][T17354]  do_syscall_64+0xd2/0x200
[  418.817626][T17354]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  418.817659][T17354]  ? clear_bhb_loop+0x40/0x90
[  418.817683][T17354]  ? clear_bhb_loop+0x40/0x90
[  418.817709][T17354]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.817799][T17354] RIP: 0033:0x7f2bbdcde929
[  418.817818][T17354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  418.817841][T17354] RSP: 002b:00007f2bbc347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  418.817883][T17354] RAX: ffffffffffffffda RBX: 00007f2bbdf05fa0 RCX: 00007f2bbdcde929
[  418.817900][T17354] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000005
[  418.817915][T17354] RBP: 00007f2bbc347090 R08: 0000000000000028 R09: 0000000000000000
[  418.817930][T17354] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  418.817944][T17354] R13: 0000000000000000 R14: 00007f2bbdf05fa0 R15: 00007ffe0ad1b708
[  418.817962][T17354]  </TASK>
[  419.243787][T17360] loop1: detected capacity change from 0 to 2048
[  419.281314][T17360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  419.394856][   T29] kauditd_printk_skb: 105 callbacks suppressed
[  419.394929][   T29] audit: type=1326 audit(1750026102.281:22364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.6.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  419.565690][   T29] audit: type=1326 audit(1750026102.321:22365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.6.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  419.589400][   T29] audit: type=1326 audit(1750026102.321:22366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.6.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  419.613044][   T29] audit: type=1326 audit(1750026102.321:22367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.6.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  419.636655][   T29] audit: type=1326 audit(1750026102.321:22368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.6.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  419.660351][   T29] audit: type=1326 audit(1750026102.321:22369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.6.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  419.683997][   T29] audit: type=1326 audit(1750026102.321:22370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.6.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  419.707729][   T29] audit: type=1326 audit(1750026102.321:22371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.6.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  419.731361][   T29] audit: type=1326 audit(1750026102.321:22372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.6.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  419.754853][   T29] audit: type=1326 audit(1750026102.321:22373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.6.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7561e929 code=0x7ffc0000
[  420.079123][T12855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.430184][T17332] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.859846][T17378] 9pnet_fd: Insufficient options for proto=fd
[  420.867164][T17332] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.927351][T17332] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  420.951066][T12696] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.959309][T17332] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  420.974083][T17332] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  420.989463][T17332] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  421.027255][T17386] loop4: detected capacity change from 0 to 512
[  421.034116][T17386] EXT4-fs: Ignoring removed oldalloc option
[  421.040512][T17387] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4305'.
[  421.042607][T17386] EXT4-fs: Ignoring removed orlov option
[  421.056146][T17386] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  421.059947][T17383] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4305'.
[  421.067766][T17386] EXT4-fs (loop4): orphan cleanup on readonly fs
[  421.086115][T17385] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.096587][T17386] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4304: bg 0: block 248: padding at end of block bitmap is not set
[  421.118089][T17387] loop1: detected capacity change from 0 to 512
[  421.126285][T17387] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  421.136682][T17387] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4305: invalid indirect mapped block 2683928664 (level 1)
[  421.142171][T17391] bridge0: entered promiscuous mode
[  421.156061][T17386] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4304: Failed to acquire dquot type 1
[  421.169891][T17391] macvlan2: entered promiscuous mode
[  421.176172][T17391] bridge0: port 3(macvlan2) entered blocking state
[  421.182767][T17391] bridge0: port 3(macvlan2) entered disabled state
[  421.189511][T17387] EXT4-fs (loop1): Remounting filesystem read-only
[  421.204133][T17387] EXT4-fs (loop1): 1 truncate cleaned up
[  421.210390][T17387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  421.223436][T17391] macvlan2: entered allmulticast mode
[  421.229042][T17391] bridge0: entered allmulticast mode
[  421.237788][T17391] macvlan2: left allmulticast mode
[  421.243033][T17391] bridge0: left allmulticast mode
[  421.245274][T17386] EXT4-fs (loop4): 1 truncate cleaned up
[  421.248995][T17391] bridge0: left promiscuous mode
[  421.264812][T17385] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.275421][T17386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  421.291665][T17386] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.339392][T17385] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.381170][T17385] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.831334][T12696] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.855402][T17402] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4311'.
[  421.874855][T17406] sd 0:0:1:0: device reset
[  421.932373][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4311'.
[  421.941362][T17402] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4311'.
[  421.950856][T17415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4311'.
[  421.959813][T17415] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4311'.
[  421.973810][T17402] loop4: detected capacity change from 0 to 1024
[  421.981960][T17417] 9pnet_fd: Insufficient options for proto=fd
[  422.000308][T17402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  422.017669][T17402] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  422.031059][T17402] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 3: comm syz.4.4311: lblock 3 mapped to illegal pblock 3 (length 1)
[  422.049490][T17402] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  422.061882][T17402] EXT4-fs (loop4): This should not happen!! Data will be lost
[  422.061882][T17402] 
[  422.079873][T17425] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  422.086451][T17425] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  422.093993][T17425] vhci_hcd vhci_hcd.0: Device attached
[  422.094296][T17414] loop1: detected capacity change from 0 to 512
[  422.111289][T17414] EXT4-fs: Ignoring removed oldalloc option
[  422.111955][T17427] usbip_core: unknown command
[  422.117265][T17414] EXT4-fs: Ignoring removed orlov option
[  422.122000][T17427] vhci_hcd: unknown pdu 43757719
[  422.132654][T17427] usbip_core: unknown command
[  422.137543][T17414] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  422.146182][T17420] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  422.161158][ T3327] vhci_hcd: stop threads
[  422.165435][ T3327] vhci_hcd: release socket
[  422.169931][ T3327] vhci_hcd: disconnect device
[  422.176969][T17414] EXT4-fs (loop1): orphan cleanup on readonly fs
[  422.184386][T17414] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4313: bg 0: block 248: padding at end of block bitmap is not set
[  422.203578][T17414] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4313: Failed to acquire dquot type 1
[  422.216246][T17414] EXT4-fs (loop1): 1 truncate cleaned up
[  422.224225][T17414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  422.237536][T17414] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  422.636647][T17431] loop6: detected capacity change from 0 to 1024
[  422.645316][T17431] EXT4-fs: inline encryption not supported
[  422.651973][T17431] EXT4-fs: Ignoring removed orlov option
[  422.657823][T17431] ext4: Unknown parameter 'appraise'
[  422.674106][T17431] loop6: detected capacity change from 0 to 1024
[  422.683649][T17431] EXT4-fs: Ignoring removed orlov option
[  422.704334][T17431] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  422.720038][T12855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.192114][T17444] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4320'.
[  423.374946][T17447] loop1: detected capacity change from 0 to 256
[  423.810710][T16125] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.926876][T17451] loop1: detected capacity change from 0 to 256
[  424.058456][T12696] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  424.066475][T12696] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  424.405446][T17458] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  424.412080][T17458] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  424.419852][T17458] vhci_hcd vhci_hcd.0: Device attached
[  424.422562][T17462] sd 0:0:1:0: device reset
[  424.432868][T17460] usbip_core: unknown command
[  424.437765][T17460] vhci_hcd: unknown pdu 43757719
[  424.442893][T17460] usbip_core: unknown command
[  424.450030][T17316] vhci_hcd: stop threads
[  424.454309][T17316] vhci_hcd: release socket
[  424.458772][T17316] vhci_hcd: disconnect device
[  424.518612][T17454] lo speed is unknown, defaulting to 1000
[  424.524742][T17454] lo speed is unknown, defaulting to 1000
[  424.569463][T17462] lo speed is unknown, defaulting to 1000
[  424.577311][T17462] lo speed is unknown, defaulting to 1000
[  424.641763][T17454] chnl_net:caif_netlink_parms(): no params data found
[  424.759109][T17454] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.766262][T17454] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.774465][T17454] bridge_slave_0: entered allmulticast mode
[  424.784241][T17454] bridge_slave_0: entered promiscuous mode
[  424.797354][T17320] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  424.813027][T17320] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  424.822210][T17454] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.829576][T17454] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.840156][T17454] bridge_slave_1: entered allmulticast mode
[  424.846941][T17454] bridge_slave_1: entered promiscuous mode
[  424.867507][T17454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  424.879488][T17320] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  424.890536][T17385] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  424.900437][T17454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  424.912287][T17385] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  424.936861][T17385] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  424.959652][T17320] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  424.971695][T17454] team0: Port device team_slave_0 added
[  424.983642][T17385] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  425.002335][T17454] team0: Port device team_slave_1 added
[  425.046101][T17454] batman_adv: batadv0: Adding interface: batadv_slave_0
[  425.053118][T17454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  425.079277][T17454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  425.128494][T17490] FAULT_INJECTION: forcing a failure.
[  425.128494][T17490] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  425.141635][T17490] CPU: 1 UID: 0 PID: 17490 Comm: syz.7.4331 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) 
[  425.141672][T17490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  425.141688][T17490] Call Trace:
[  425.141697][T17490]  <TASK>
[  425.141707][T17490]  __dump_stack+0x1d/0x30
[  425.141772][T17490]  dump_stack_lvl+0xe8/0x140
[  425.141798][T17490]  dump_stack+0x15/0x1b
[  425.141816][T17490]  should_fail_ex+0x265/0x280
[  425.141872][T17490]  should_fail+0xb/0x20
[  425.141908][T17490]  should_fail_usercopy+0x1a/0x20
[  425.141969][T17490]  _copy_to_user+0x20/0xa0
[  425.141999][T17490]  simple_read_from_buffer+0xb5/0x130
[  425.142032][T17490]  proc_fail_nth_read+0x100/0x140
[  425.142104][T17490]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  425.142126][T17490]  vfs_read+0x1a0/0x6f0
[  425.142170][T17490]  ? __rcu_read_unlock+0x4f/0x70
[  425.142269][T17490]  ? __fget_files+0x184/0x1c0
[  425.142291][T17490]  ksys_read+0xda/0x1a0
[  425.142328][T17490]  __x64_sys_read+0x40/0x50
[  425.142367][T17490]  x64_sys_call+0x2d77/0x2fb0
[  425.142393][T17490]  do_syscall_64+0xd2/0x200
[  425.142454][T17490]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  425.142483][T17490]  ? clear_bhb_loop+0x40/0x90
[  425.142708][T17490]  ? clear_bhb_loop+0x40/0x90
[  425.142732][T17490]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.142756][T17490] RIP: 0033:0x7f9ec5f5d33c
[  425.142774][T17490] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  425.142859][T17490] RSP: 002b:00007f9ec45c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  425.142881][T17490] RAX: ffffffffffffffda RBX: 00007f9ec6185fa0 RCX: 00007f9ec5f5d33c
[  425.142896][T17490] RDX: 000000000000000f RSI: 00007f9ec45c70a0 RDI: 0000000000000004
[  425.142910][T17490] RBP: 00007f9ec45c7090 R08: 0000000000000000 R09: 0000000000000000
[  425.142924][T17490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  425.142938][T17490] R13: 0000000000000000 R14: 00007f9ec6185fa0 R15: 00007ffd264aa1e8
[  425.142959][T17490]  </TASK>
[  425.354722][T17485] pimreg: entered allmulticast mode
[  425.360080][T17488] pimreg: left allmulticast mode
[  425.382149][T17454] batman_adv: batadv0: Adding interface: batadv_slave_1
[  425.389215][T17454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  425.415359][T17454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  425.443125][T17485] loop4: detected capacity change from 0 to 2048
[  425.471351][T17485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  425.490475][T17454] hsr_slave_0: entered promiscuous mode
[  425.500222][T17454] hsr_slave_1: entered promiscuous mode
[  425.506096][T17454] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  425.532067][T17454] Cannot create hsr debugfs directory
[  425.688358][T17511] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  425.694967][T17511] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  425.702562][T17511] vhci_hcd vhci_hcd.0: Device attached
[  425.735587][T17506] loop6: detected capacity change from 0 to 512
[  425.740960][T17454] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  425.748679][T17512] vhci_hcd: connection closed
[  425.748806][ T6760] vhci_hcd: stop threads
[  425.757840][ T6760] vhci_hcd: release socket
[  425.762262][ T6760] vhci_hcd: disconnect device
[  425.769636][T17454] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  425.778800][T17454] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  425.785865][T17507] loop7: detected capacity change from 0 to 512
[  425.794768][T17454] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  425.802900][T17506] EXT4-fs: Ignoring removed oldalloc option
[  425.811370][T17507] EXT4-fs: Ignoring removed oldalloc option
[  425.822460][T17507] EXT4-fs: Ignoring removed orlov option
[  425.832872][T17506] EXT4-fs: Ignoring removed orlov option
[  425.843339][T17507] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  425.867647][T17506] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  425.886488][T17507] EXT4-fs (loop7): orphan cleanup on readonly fs
[  425.899013][T17507] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4336: bg 0: block 248: padding at end of block bitmap is not set
[  425.927438][T17506] EXT4-fs (loop6): orphan cleanup on readonly fs
[  425.939155][T17454] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.948164][T12855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  425.970292][T17507] __quota_error: 37 callbacks suppressed
[  425.970307][T17507] Quota error (device loop7): write_blk: dquota write failed
[  425.971515][T17454] 8021q: adding VLAN 0 to HW filter on device team0
[  425.976057][T17507] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  426.000113][T17507] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.4336: Failed to acquire dquot type 1
[  426.014005][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.021175][ T3327] bridge0: port 1(bridge_slave_0) entered forwarding state
[  426.032652][T17506] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4335: bg 0: block 248: padding at end of block bitmap is not set
[  426.052188][T17527] sd 0:0:1:0: device reset
[  426.060042][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.067145][ T3327] bridge0: port 2(bridge_slave_1) entered forwarding state
[  426.077203][T17506] Quota error (device loop6): write_blk: dquota write failed
[  426.084701][T17506] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  426.094774][T17506] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4335: Failed to acquire dquot type 1
[  426.120901][T17506] EXT4-fs (loop6): 1 truncate cleaned up
[  426.130550][T17506] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  426.136237][T17507] EXT4-fs (loop7): 1 truncate cleaned up
[  426.157408][T17507] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  426.159571][T17529] lo speed is unknown, defaulting to 1000
[  426.173300][T17506] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.178387][T17507] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.204706][T17529] lo speed is unknown, defaulting to 1000
[  426.255906][T17454] 8021q: adding VLAN 0 to HW filter on device batadv0
[  426.296509][T17538] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.351324][T17541] bridge0: entered promiscuous mode
[  426.356926][T17541] macvlan2: entered promiscuous mode
[  426.365941][T17541] bridge0: port 3(macvlan2) entered blocking state
[  426.372565][T17541] bridge0: port 3(macvlan2) entered disabled state
[  426.383913][T17541] macvlan2: entered allmulticast mode
[  426.389449][T17541] bridge0: entered allmulticast mode
[  426.407434][T17541] macvlan2: left allmulticast mode
[  426.412764][T17541] bridge0: left allmulticast mode
[  426.423627][T17541] bridge0: left promiscuous mode
[  426.455388][T17538] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.529944][T17538] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.563149][T17553] netlink: 'syz.7.4344': attribute type 1 has an invalid length.
[  426.571556][T17553] syz.7.4344 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  426.609252][T17538] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.626321][T17563] loop7: detected capacity change from 0 to 1024
[  426.633404][T17563] EXT4-fs: Ignoring removed orlov option
[  426.641223][T17563] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  426.877196][T17567] loop4: detected capacity change from 0 to 2048
[  426.943281][T17567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  426.980401][T17200] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  427.037171][T17454] veth0_vlan: entered promiscuous mode
[  427.063746][T17454] veth1_vlan: entered promiscuous mode
[  427.136850][T17454] veth0_macvtap: entered promiscuous mode
[  427.170592][T17454] veth1_macvtap: entered promiscuous mode
[  427.192984][T17454] batman_adv: batadv0: Interface activated: batadv_slave_0
[  427.205941][T17454] batman_adv: batadv0: Interface activated: batadv_slave_1
[  427.219262][T17454] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  427.228244][T17454] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  427.236979][T17454] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  427.245822][T17454] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  427.960861][T17580] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  427.967444][T17580] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  427.975077][T17580] vhci_hcd vhci_hcd.0: Device attached
[  428.572028][T17578] loop7: detected capacity change from 0 to 2048
[  428.590319][T17581] usbip_core: unknown command
[  428.595050][T17581] vhci_hcd: unknown pdu 43757719
[  428.600040][T17581] usbip_core: unknown command
[  428.704437][T12855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.722759][T17316] vhci_hcd: stop threads
[  428.727077][T17316] vhci_hcd: release socket
[  428.731567][T17316] vhci_hcd: disconnect device
[  428.759583][T17578] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  429.244564][T17594] loop4: detected capacity change from 0 to 512
[  429.260925][T17595] loop8: detected capacity change from 0 to 512
[  429.267655][T17595] EXT4-fs: Ignoring removed oldalloc option
[  429.326322][T17595] EXT4-fs: Ignoring removed orlov option
[  429.335606][T17594] EXT4-fs: Ignoring removed oldalloc option
[  429.361222][T17599] sd 0:0:1:0: device reset
[  429.376034][T17594] EXT4-fs: Ignoring removed orlov option
[  429.399744][T17595] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  429.433849][T17594] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  429.465993][T17601] lo speed is unknown, defaulting to 1000
[  429.484857][T17595] EXT4-fs (loop8): orphan cleanup on readonly fs
[  429.500076][T17601] lo speed is unknown, defaulting to 1000
[  429.509583][T17594] EXT4-fs (loop4): orphan cleanup on readonly fs
[  429.587695][T17594] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4351: bg 0: block 248: padding at end of block bitmap is not set
[  429.619782][T17595] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4352: bg 0: block 248: padding at end of block bitmap is not set
[  429.702308][T17595] Quota error (device loop8): write_blk: dquota write failed
[  429.710073][T17595] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[  429.720055][T17595] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.4352: Failed to acquire dquot type 1
[  429.745697][T17594] Quota error (device loop4): write_blk: dquota write failed
[  429.753359][T17594] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  429.763299][T17594] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4351: Failed to acquire dquot type 1
[  429.896385][T17538] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  429.906271][T17595] EXT4-fs (loop8): 1 truncate cleaned up
[  429.931564][T17538] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  429.970774][T17595] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  429.986777][T17538] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  429.999366][T17594] EXT4-fs (loop4): 1 truncate cleaned up
[  430.014162][T17594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  430.036157][T17538] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.064360][T17594] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.075958][T17595] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.147500][T17200] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.189053][   T29] audit: type=1400 audit(1750026113.081:22407): avc:  denied  { write } for  pid=17608 comm="syz.7.4356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  430.215040][T17611] loop7: detected capacity change from 0 to 512
[  430.257371][T17614] loop2: detected capacity change from 0 to 1024
[  430.257693][T17614] EXT4-fs: inline encryption not supported
[  430.257820][T17614] EXT4-fs: Ignoring removed orlov option
[  430.257841][T17614] ext4: Unknown parameter 'appraise'
[  430.268875][T17614] loop2: detected capacity change from 0 to 1024
[  430.269120][T17614] EXT4-fs: Ignoring removed orlov option
[  430.270561][T17611] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  430.270616][T17611] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  430.271356][T17611] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 3: comm syz.7.4356: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  430.271562][T17611] EXT4-fs (loop7): Remounting filesystem read-only
[  430.278827][T17614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  430.381036][T17621] loop8: detected capacity change from 0 to 1024
[  430.420742][T17621] EXT4-fs: inline encryption not supported
[  430.427303][T17621] EXT4-fs: Ignoring removed orlov option
[  430.433041][T17621] ext4: Unknown parameter 'appraise'
[  430.490342][T17621] loop8: detected capacity change from 0 to 1024
[  430.497166][T17621] EXT4-fs: Ignoring removed orlov option
[  430.518768][T17621] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  430.689840][T17633] loop4: detected capacity change from 0 to 256
[  430.749630][T17638] loop6: detected capacity change from 0 to 256
[  431.274196][T17454] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.353442][T17647] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.365832][T17646] sd 0:0:1:0: device reset
[  431.409577][T17649] bridge0: entered promiscuous mode
[  431.415287][T17649] macvlan2: entered promiscuous mode
[  431.428688][T17649] bridge0: port 3(macvlan2) entered blocking state
[  431.435298][T17649] bridge0: port 3(macvlan2) entered disabled state
[  431.459315][T17649] macvlan2: entered allmulticast mode
[  431.464774][T17649] bridge0: entered allmulticast mode
[  431.471087][T13554] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.485945][T17649] macvlan2: left allmulticast mode
[  431.491237][T17649] bridge0: left allmulticast mode
[  431.507217][T17649] bridge0: left promiscuous mode
[  431.517705][   T29] audit: type=1326 audit(1750026114.411:22408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.2.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd255e929 code=0x7ffc0000
[  431.558129][T17654] FAULT_INJECTION: forcing a failure.
[  431.558129][T17654] name failslab, interval 1, probability 0, space 0, times 0
[  431.570961][T17654] CPU: 1 UID: 0 PID: 17654 Comm: syz.2.4367 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) 
[  431.571063][T17654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  431.571079][T17654] Call Trace:
[  431.571087][T17654]  <TASK>
[  431.571095][T17654]  __dump_stack+0x1d/0x30
[  431.571116][T17654]  dump_stack_lvl+0xe8/0x140
[  431.571150][T17654]  dump_stack+0x15/0x1b
[  431.571247][T17654]  should_fail_ex+0x265/0x280
[  431.571359][T17654]  should_failslab+0x8c/0xb0
[  431.571383][T17654]  kmem_cache_alloc_noprof+0x50/0x310
[  431.571419][T17654]  ? audit_log_start+0x365/0x6c0
[  431.571521][T17654]  audit_log_start+0x365/0x6c0
[  431.571566][T17654]  audit_seccomp+0x48/0x100
[  431.571601][T17654]  ? __seccomp_filter+0x68c/0x10d0
[  431.571690][T17654]  __seccomp_filter+0x69d/0x10d0
[  431.571722][T17654]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  431.571752][T17654]  ? vfs_write+0x75e/0x8e0
[  431.571787][T17654]  ? __rcu_read_unlock+0x4f/0x70
[  431.571807][T17654]  ? __fget_files+0x184/0x1c0
[  431.571834][T17654]  __secure_computing+0x82/0x150
[  431.571864][T17654]  syscall_trace_enter+0xcf/0x1e0
[  431.571946][T17654]  do_syscall_64+0xac/0x200
[  431.571970][T17654]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  431.572062][T17654]  ? clear_bhb_loop+0x40/0x90
[  431.572159][T17654]  ? clear_bhb_loop+0x40/0x90
[  431.572240][T17654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.572273][T17654] RIP: 0033:0x7efcd255e929
[  431.572290][T17654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  431.572312][T17654] RSP: 002b:00007efcd0bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000123
[  431.572353][T17654] RAX: ffffffffffffffda RBX: 00007efcd2785fa0 RCX: 00007efcd255e929
[  431.572364][T17654] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  431.572376][T17654] RBP: 00007efcd0bc7090 R08: 0000000000000000 R09: 0000000000000000
[  431.572426][T17654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  431.572450][T17654] R13: 0000000000000000 R14: 00007efcd2785fa0 R15: 00007fff3ec74c68
[  431.572472][T17654]  </TASK>
[  431.572481][T17654] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64
[  431.575026][   T29] audit: type=1326 audit(1750026114.411:22409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.2.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcd255e929 code=0x7ffc0000
[  431.584991][T17654] audit: out of memory in audit_log_start
[  431.823141][   T29] audit: type=1326 audit(1750026114.411:22410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.2.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd255e929 code=0x7ffc0000
[  431.846755][   T29] audit: type=1326 audit(1750026114.411:22411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.2.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcd255e929 code=0x7ffc0000
[  431.870547][   T29] audit: type=1326 audit(1750026114.451:22412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.2.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd255e929 code=0x7ffc0000
[  431.894416][   T29] audit: type=1326 audit(1750026114.451:22413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.2.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efcd255d290 code=0x7ffc0000
[  431.918020][   T29] audit: type=1326 audit(1750026114.451:22414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.2.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efcd255d3df code=0x7ffc0000
[  431.943431][   T29] audit: type=1326 audit(1750026114.501:22415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.2.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7efcd255d33c code=0x7ffc0000
[  431.969413][T17647] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.005227][T17650] lo speed is unknown, defaulting to 1000
[  432.011597][T17650] lo speed is unknown, defaulting to 1000
[  432.028536][T17647] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.035941][T17656] loop6: detected capacity change from 0 to 512
[  432.059812][T17656] EXT4-fs: Ignoring removed oldalloc option
[  432.077731][T17656] EXT4-fs: Ignoring removed orlov option
[  432.096469][T17656] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  432.118748][T17647] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.150169][T17656] EXT4-fs (loop6): orphan cleanup on readonly fs
[  432.180782][T17669] 9pnet_fd: Insufficient options for proto=fd
[  432.216100][T17647] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  432.258543][T17647] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  432.305659][T17656] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4368: bg 0: block 248: padding at end of block bitmap is not set
[  432.334517][T17647] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  432.358778][T17656] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4368: Failed to acquire dquot type 1
[  432.374836][T17647] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  432.412746][T17656] EXT4-fs (loop6): 1 truncate cleaned up
[  432.416786][T17673] lo speed is unknown, defaulting to 1000
[  432.419235][T17656] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  432.436957][T17673] lo speed is unknown, defaulting to 1000
[  432.449410][T17680] loop8: detected capacity change from 0 to 256
[  432.476472][T17656] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.705068][T17454] FAT-fs (loop8): error, corrupted directory (invalid entries)
[  432.750996][T17454] FAT-fs (loop8): error, corrupted directory (invalid entries)
[  432.935727][T17708] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.979014][T17708] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.996547][T17709] bridge0: entered promiscuous mode
[  433.002069][T17709] macvlan2: entered promiscuous mode
[  433.010100][T17709] bridge0: port 3(macvlan2) entered blocking state
[  433.016734][T17709] bridge0: port 3(macvlan2) entered disabled state
[  433.024007][T17709] macvlan2: entered allmulticast mode
[  433.029492][T17709] bridge0: entered allmulticast mode
[  433.038003][T17709] macvlan2: left allmulticast mode
[  433.043215][T17709] bridge0: left allmulticast mode
[  433.050638][T17709] bridge0: left promiscuous mode
[  433.061039][T17708] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.111338][T17708] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.921854][T17723] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  433.936212][T17722] IPVS: stopping master sync thread 17723 ...
[  433.946182][T17724] loop4: detected capacity change from 0 to 512
[  433.979977][T17724] EXT4-fs: Ignoring removed oldalloc option
[  433.986211][T17724] EXT4-fs: Ignoring removed orlov option
[  433.999258][T17708] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  434.009937][T17724] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  434.020739][T17724] EXT4-fs (loop4): orphan cleanup on readonly fs
[  434.021504][T17708] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  434.036296][T17724] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4389: bg 0: block 248: padding at end of block bitmap is not set
[  434.068453][T17724] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4389: Failed to acquire dquot type 1
[  434.079783][T17708] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  434.100916][T17724] EXT4-fs (loop4): 1 truncate cleaned up
[  434.115228][T17708] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  434.452827][T17747] loop4: detected capacity change from 0 to 2048
[  434.463697][T17740] Falling back ldisc for ttyS3.
[  434.698226][T17752] loop2: detected capacity change from 0 to 512
[  434.724282][T17752] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  435.344217][T17758] loop2: detected capacity change from 0 to 512
[  435.360726][T17760] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.399595][T17761] bridge0: entered promiscuous mode
[  435.405400][T17761] macvlan2: entered promiscuous mode
[  435.426199][T17761] bridge0: port 3(macvlan2) entered blocking state
[  435.433031][T17761] bridge0: port 3(macvlan2) entered disabled state
[  435.440565][T17758] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  435.485031][T17761] macvlan2: entered allmulticast mode
[  435.490519][T17761] bridge0: entered allmulticast mode
[  435.516940][T17761] macvlan2: left allmulticast mode
[  435.522321][T17761] bridge0: left allmulticast mode
[  435.538592][T17761] bridge0: left promiscuous mode
[  435.564379][T17760] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.643164][T17760] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.719284][T17760] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.777291][T17771] loop2: detected capacity change from 0 to 512
[  435.799027][T17760] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  435.839659][T17760] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  435.850052][T17771] EXT4-fs: Ignoring removed oldalloc option
[  435.856064][T17771] EXT4-fs: Ignoring removed orlov option
[  435.879383][T17760] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  435.916150][T17760] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  435.980004][T17771] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  436.020512][T17771] EXT4-fs (loop2): orphan cleanup on readonly fs
[  436.077961][T17771] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4408: bg 0: block 248: padding at end of block bitmap is not set
[  436.095489][T17776] FAULT_INJECTION: forcing a failure.
[  436.095489][T17776] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  436.108750][T17776] CPU: 0 UID: 0 PID: 17776 Comm: syz.6.4410 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) 
[  436.108785][T17776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  436.108801][T17776] Call Trace:
[  436.108808][T17776]  <TASK>
[  436.108816][T17776]  __dump_stack+0x1d/0x30
[  436.108835][T17776]  dump_stack_lvl+0xe8/0x140
[  436.108853][T17776]  dump_stack+0x15/0x1b
[  436.108925][T17776]  should_fail_ex+0x265/0x280
[  436.108962][T17776]  should_fail+0xb/0x20
[  436.109060][T17776]  should_fail_usercopy+0x1a/0x20
[  436.109203][T17776]  strncpy_from_user+0x25/0x230
[  436.109232][T17776]  ? kmem_cache_alloc_noprof+0x186/0x310
[  436.109257][T17776]  ? getname_flags+0x80/0x3b0
[  436.109278][T17776]  getname_flags+0xae/0x3b0
[  436.109334][T17776]  __se_sys_move_mount+0x16d/0x440
[  436.109355][T17776]  __x64_sys_move_mount+0x67/0x80
[  436.109372][T17776]  x64_sys_call+0x1f00/0x2fb0
[  436.109391][T17776]  do_syscall_64+0xd2/0x200
[  436.109443][T17776]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  436.109466][T17776]  ? clear_bhb_loop+0x40/0x90
[  436.109495][T17776]  ? clear_bhb_loop+0x40/0x90
[  436.109581][T17776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.109603][T17776] RIP: 0033:0x7f3b7561e929
[  436.109620][T17776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  436.109640][T17776] RSP: 002b:00007f3b73c87038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad
[  436.109674][T17776] RAX: ffffffffffffffda RBX: 00007f3b75845fa0 RCX: 00007f3b7561e929
[  436.109688][T17776] RDX: ffffffffffffff9c RSI: 0000200000000140 RDI: 0000000000000005
[  436.109702][T17776] RBP: 00007f3b73c87090 R08: 0000000000000000 R09: 0000000000000000
[  436.109716][T17776] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  436.109731][T17776] R13: 0000000000000000 R14: 00007f3b75845fa0 R15: 00007fff6c30d918
[  436.109752][T17776]  </TASK>
[  436.157228][T17771] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4408: Failed to acquire dquot type 1
[  436.352045][T17778] loop6: detected capacity change from 0 to 1024
[  436.359852][T17771] EXT4-fs (loop2): 1 truncate cleaned up
[  436.366034][T17778] EXT4-fs: inline encryption not supported
[  436.376457][T17778] EXT4-fs: Ignoring removed orlov option
[  436.382262][T17778] ext4: Unknown parameter 'appraise'
[  436.439778][T17778] loop6: detected capacity change from 0 to 1024
[  436.446420][T17778] EXT4-fs: Ignoring removed orlov option
[  436.455427][T17780] loop4: detected capacity change from 0 to 512
[  436.463762][T17780] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  436.659246][T17787] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  436.665925][T17787] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  436.673528][T17787] vhci_hcd vhci_hcd.0: Device attached
[  436.691526][T17788] usbip_core: unknown command
[  436.696258][T17788] vhci_hcd: unknown pdu 43757719
[  436.701395][T17788] usbip_core: unknown command
[  436.758035][   T56] vhci_hcd: stop threads
[  436.762363][   T56] vhci_hcd: release socket
[  436.766814][   T56] vhci_hcd: disconnect device
[  436.830865][T17792] loop2: detected capacity change from 0 to 128
[  436.949431][T17785] ==================================================================
[  436.957597][T17785] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read
[  436.965743][T17785] 
[  436.968090][T17785] write to 0xffff888118ead768 of 8 bytes by task 17778 on cpu 0:
[  436.975823][T17785]  filemap_splice_read+0x47e/0x6b0
[  436.980985][T17785]  ext4_file_splice_read+0x8f/0xb0
[  436.986135][T17785]  splice_direct_to_actor+0x26f/0x680
[  436.991551][T17785]  do_splice_direct+0xda/0x150
[  436.996353][T17785]  do_sendfile+0x380/0x650
[  437.000805][T17785]  __x64_sys_sendfile64+0x105/0x150
[  437.006038][T17785]  x64_sys_call+0xb39/0x2fb0
[  437.010657][T17785]  do_syscall_64+0xd2/0x200
[  437.015187][T17785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.021096][T17785] 
[  437.023435][T17785] write to 0xffff888118ead768 of 8 bytes by task 17785 on cpu 1:
[  437.031174][T17785]  filemap_splice_read+0x47e/0x6b0
[  437.036334][T17785]  ext4_file_splice_read+0x8f/0xb0
[  437.041480][T17785]  splice_direct_to_actor+0x26f/0x680
[  437.046897][T17785]  do_splice_direct+0xda/0x150
[  437.051710][T17785]  do_sendfile+0x380/0x650
[  437.056162][T17785]  __x64_sys_sendfile64+0x105/0x150
[  437.061395][T17785]  x64_sys_call+0xb39/0x2fb0
[  437.066022][T17785]  do_syscall_64+0xd2/0x200
[  437.070543][T17785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.076462][T17785] 
[  437.078801][T17785] value changed: 0x000000000000056d -> 0x000000000000056e
[  437.085930][T17785] 
[  437.088270][T17785] Reported by Kernel Concurrency Sanitizer on:
[  437.094442][T17785] CPU: 1 UID: 0 PID: 17785 Comm: syz.6.4411 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) 
[  437.106955][T17785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  437.117031][T17785] ==================================================================