last executing test programs:

5.776266429s ago: executing program 1 (id=4072):
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$invalidate(0x15, r0)
keyctl$set_timeout(0xf, r0, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0x20)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x1000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x10, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000003900)=ANY=[@ANYRES16], 0xc4}}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r7, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010020, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
ioctl$KDSKBENT(r6, 0x4b47, &(0x7f00000002c0)={0x1, 0x2, 0x6})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

5.494601175s ago: executing program 1 (id=4074):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1d, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r0}, 0x18)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5e, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80000, 0x4}, 0x50)

5.493967235s ago: executing program 1 (id=4075):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0)
dup3(r0, r1, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
io_uring_setup(0x6bbe, &(0x7f0000000240)={0x0, 0x1f59, 0x40, 0x800103fc, 0x3d, 0x0, r2})
socket(0x40000000015, 0x5, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
timer_create(0x3, &(0x7f0000000b80)={0x0, 0x3e, 0x5, @thr={&(0x7f0000001480)="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", &(0x7f0000000b40)="2933182e167230cfa8505d6f3628bc3ae95ffd70ca72a4300479"}}, &(0x7f0000000cc0))
syz_emit_ethernet(0x46, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x2d, 0x34, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xb, 0x9, [@multicast2, @loopback]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00'}, 0x18)
syz_usbip_server_init(0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0x10000}}, {@timeout={'timeout', 0x3d, 0x3}}]}})
sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000012700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40054)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000ac0)='./file1\x00', 0x21081e, &(0x7f0000000b00)={[{@resgid}, {@nogrpid}, {@grpquota}, {@noquota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

4.646729571s ago: executing program 1 (id=4089):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x44011}, 0x10)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x50)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x2, 0x1}}, 0x2e)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000180)={[{@grpquota}, {@inode_readahead_blks}, {@quota}, {@oldalloc}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000))
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0xc0, 0x9, 0x6, 0x10, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x8, 0x4, 0x535}})
ioctl$EXT4_IOC_MIGRATE(r5, 0x6609)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='rxrpc_propose_ack\x00', r1}, 0xa)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001dc0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8000}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
ptrace$getregset(0x4204, 0x0, 0x1, &(0x7f00000003c0)={&(0x7f0000000bc0)=""/4096, 0x1000})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x4, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="259374c9", 0x0, 0xffffffff, 0x30, 0x0, 0x0})
mlock2(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x1)
sendmsg$nl_generic(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x4040)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0xc, 0x8, 0x0, 0xb5, 0x1002, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x4, 0x2, 0x7f, 0x87ff, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, 0xa8)

4.523152164s ago: executing program 1 (id=4091):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1000000000000}, 0x18)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1ff)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}})

4.307340698s ago: executing program 1 (id=4092):
bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

4.289974088s ago: executing program 32 (id=4092):
bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

3.716866319s ago: executing program 4 (id=4098):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000ac0)={'\x00', 0x6, 0x1, 0x5b8a, 0x7f, 0x2})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x800003, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000007000000000000e4000000f966bd346dfc3b009500000008000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@broadcast, 0x4e24, 0x5, 0x4e21, 0xc, 0x0, 0x20, 0x0, 0x2b}, {0xffffffffffffffff, 0x0, 0xfff, 0x0, 0xbe9f, 0x3, 0x9, 0x6}, {0x8, 0x3, 0x7}, 0x1, 0x6e6bb2, 0x0, 0x0, 0x2, 0x2}, {{@in6=@remote, 0x4d6, 0x3c}, 0x2, @in=@rand_addr=0x64010100, 0x34ff, 0x0, 0x2, 0x2, 0x9, 0x0, 0xd9c5}}, 0xe8)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6)
recvmmsg(r6, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {0x0}, {&(0x7f00000004c0)=""/55, 0x37}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0x1, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)

3.520280113s ago: executing program 4 (id=4099):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008e74350190400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000040)=0x2800, 0x4)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@errors_continue}, {@data_err_abort}, {@nomblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b0}}, {@noblock_validity}, {@grpquota}, {@nobh}, {@user_xattr}, {@inode_readahead_blks}, {@dioread_nolock}]}, 0x21, 0x553, &(0x7f0000000a40)="$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")
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r3, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d", 0x2e)
sendfile(r3, r2, 0x0, 0x3ffff)
sendfile(r3, r2, 0x0, 0x7fffeffd)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r4, 0x0, 0xa20, 0x8000c64)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, 0x61, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x1})

3.12292341s ago: executing program 4 (id=4102):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000008b2c14e16ad7c6e16b775000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRESDEC=r1], 0x4c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'veth1_macvtap\x00'})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0)

2.950439164s ago: executing program 4 (id=4105):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0)
dup3(r0, r1, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
io_uring_setup(0x6bbe, &(0x7f0000000240)={0x0, 0x1f59, 0x40, 0x800103fc, 0x3d, 0x0, r2})
socket(0x40000000015, 0x5, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
timer_create(0x3, &(0x7f0000000b80)={0x0, 0x3e, 0x5, @thr={&(0x7f0000001480)="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", &(0x7f0000000b40)="2933182e167230cfa8505d6f3628bc3ae95ffd70ca72a4300479"}}, &(0x7f0000000cc0))
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x2d, 0x38, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xf, 0x9, [@multicast2, @loopback, @empty]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_usbip_server_init(0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0x10000}}, {@timeout={'timeout', 0x3d, 0x3}}]}})
sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000012700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40054)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000ac0)='./file1\x00', 0x21081e, &(0x7f0000000b00)={[{@resgid}, {@nogrpid}, {@grpquota}, {@noquota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

2.005511862s ago: executing program 4 (id=4113):
r0 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20)
r1 = fsmount(0xffffffffffffffff, 0x1, 0x1)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r1, 0x20, &(0x7f0000000040)={&(0x7f0000000400)=""/4096, 0x1000, <r2=>0x0, &(0x7f0000001400)=""/233, 0xe9}}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRES64], &(0x7f0000000100)='GPL\x00', 0x7ac7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f0000001500)="8dc294ed76d30b712aedc0f7e9ed3b423de8a344dee40ec4d35571b256d8ea0abfbc022c8f97487297bba2a40320934ed4354d3346f97a3def289598f7e616a3d2cf923ff2ed8444082c470513fd5d50d4786fb864dd4e8baae05c8464b3629e043c5d826653b1a769110cd097d321ccb63ffd9ebd17456e840e221dde", &(0x7f0000001580)=""/175, &(0x7f0000001640)="fbb1e9919d491d30c5d047ea8db522afdb0cae2865fe54b45aab8c51af5698d86dd4bfedc9b8f807545d63c1482b6625b5b3bf2d96ffd4cb0c0ca7060bbf64ae129f0097fa60cf5d5f63f11b7089d8f56686a0d8e5e792b48ba83c39f72a4250294aa8f883da2ac9855dd877c24170813eea6ad9fefd1c44ae16304da40f7a60f1359cd7f85515a806e5cee3bafb31da6ecf16068a01673a55e138cd40be62e38c0d1815696b9abe205dd9e35aaca1f77b5521a19c984c8b3f", &(0x7f0000002fc0)="74a1f69b2c4922e84882817aadd213978894ba4221b8448c446d73b36306b3edf8883619b66b34a327d97fd46e992d437611fa078ae6d50f3018c99bd7166e0d3249a2ef84bdf853ea10e631b85f761028cf0bb43053098cb68f15a4e03a415cc172c51d7cfd8a6093bbbe6c5e4f9c9fe8e4cedc4fd748afb8a05b03aca277fd124873ddd044831348d78678a48a606556d1fd5af66a5430b0", 0x6, r1}, 0x38)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
syz_clone(0x40800045, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r4], 0x28}, 0x1, 0x0, 0x0, 0xc4804}, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
sendmmsg(r5, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040881)

1.721589307s ago: executing program 5 (id=4094):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="020360001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000004000000000000030005000000000002004e21ffffffff0000000000000000010018"], 0x98}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='mm_page_free\x00', r4, 0x0, 0x3}, 0x18)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x7ffff088)

1.624869699s ago: executing program 5 (id=4114):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000008b2c14e16ad7c6e16b775000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRESDEC=r1], 0x4c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'veth1_macvtap\x00'})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0)

1.612253009s ago: executing program 5 (id=4115):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)

1.57317357s ago: executing program 5 (id=4116):
unshare(0x20060400)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18)
r4 = syz_io_uring_setup(0x593, &(0x7f0000000400)={0x0, 0xc459, 0x8, 0x2, 0x398}, &(0x7f0000000300)=<r5=>0x0, &(0x7f0000000a40)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1})
io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0)

1.403721814s ago: executing program 5 (id=4118):
r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f494246a77d86dd6700000100103afffe880000000000000000000000000201ff02000000000000000000000019000186009078ff02030005000000f6ffffff"], 0x0)
write$selinux_user(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000010000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
time(0x0)
add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe)
r4 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil)
shmctl$IPC_STAT(r4, 0x2, 0x0)
geteuid()
fstat(r3, &(0x7f00000006c0))
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="0c1200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000e0110380dc1100800800034000000002d0110a801c0002800900020073797a32000000000900020073797a3000000000520001"], 0x120c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
recvmmsg(0xffffffffffffffff, &(0x7f0000003040)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000000740)=[{&(0x7f0000000a00)=""/132, 0x84}], 0x1}, 0x80000000}, {{&(0x7f0000000b00)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000000980)=""/3, 0x3}, {&(0x7f0000000b80)=""/45, 0x2d}, {&(0x7f0000000bc0)=""/17, 0x11}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/73, 0x49}, {&(0x7f0000001cc0)=""/17, 0x11}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/83, 0x53}], 0x8, &(0x7f0000002e00)=""/220, 0xdc}, 0xf}, {{&(0x7f0000002f00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/33, 0x21}, {&(0x7f0000002fc0)}], 0x2}, 0x10001}], 0x3, 0x40000062, &(0x7f0000003100)={0x77359400})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ac0)={'wpan0\x00'})

1.217680567s ago: executing program 4 (id=4127):
r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0)
write$selinux_user(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000010000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
time(0x0)
r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe)
r5 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil)
shmctl$IPC_STAT(r5, 0x2, 0x0)
r6 = geteuid()
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fstat(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="0c1200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000e0110380dc1100800800034000000002d0110a801c0002800900020073797a32000000000900020073797a3000000000520001"], 0x120c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
recvmmsg(0xffffffffffffffff, &(0x7f0000003040)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000000740)=[{&(0x7f0000000a00)=""/132, 0x84}], 0x1}, 0x80000000}, {{&(0x7f0000000b00)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000000980)=""/3, 0x3}, {&(0x7f0000000b80)=""/45, 0x2d}, {&(0x7f0000000bc0)=""/17, 0x11}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/73, 0x49}, {&(0x7f0000001cc0)=""/17, 0x11}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/83, 0x53}], 0x8, &(0x7f0000002e00)=""/220, 0xdc}, 0xf}, {{&(0x7f0000002f00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/33, 0x21}, {&(0x7f0000002fc0)}], 0x2}, 0x10001}], 0x3, 0x40000062, &(0x7f0000003100)={0x77359400})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000800)={0x0, <r9=>0x0})
shmctl$IPC_SET(r5, 0x1, &(0x7f0000000880)={{0x1, r6, r7, 0x0, r8, 0x100, 0x5}, 0x62, 0x6, 0x2b, 0x0, 0xffffffffffffffff, r9, 0x3})
keyctl$KEYCTL_MOVE(0x4, r4, 0x0, 0x0, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', <r12=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r10, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYRES16, @ANYRES16=r11, @ANYBLOB="01002cbd700000dcdf251800000008000300", @ANYRES32=r12, @ANYBLOB="1c003080180001800c0005000000000000008003080001"], 0x38}}, 0x4000)

864.912274ms ago: executing program 0 (id=4139):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$packet(0x11, 0x2, 0x300)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

727.199176ms ago: executing program 0 (id=4142):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0)

677.048068ms ago: executing program 0 (id=4143):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0)
dup3(r0, r1, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
io_uring_setup(0x6bbe, &(0x7f0000000240)={0x0, 0x1f59, 0x40, 0x800103fc, 0x3d, 0x0, r2})
socket(0x40000000015, 0x5, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
timer_create(0x3, &(0x7f0000000b80)={0x0, 0x3e, 0x5, @thr={&(0x7f0000001480)="b297debfb6596848df96f3c7934e5f616ce620771903d3e3583a0a2be0c04819d3bc233caf131b6cc922ad995234688452e534713836cf7aa8d504d710c966d18509296f7b0a61557e93bd40622d304927ba63d7eda729d743e94d9cbe4798224641013aca616eddaf94fcce4d1d9e424f745254c47dfb2ed5aa47ca45ae0cbad5c70250eab3c2170eaebe8e6872b79e425f122dbddca1bb93a7ca2ec5fd56a5e6e7b83c4d7a85d9f3ea3631fdf7b606e98ebe527c6f17256aa19fab409335c401f190c366a84fda94a4b6d9ff376aa1af096dd74dcbe66f48b51d35b4ae6d7e6d701ca48cedd33150d00d45a6d0a7590a49717307231a6b7c735d1c5b58385938763edf51c52923155f49a10d1292f40551c44a7f6e964df2c9bddea3079947bc862a03eca7742b4bb7596d8884a2cf695e02d706e37427faa3b88a51600820adcc73ebd942f7e16cb88df5eecfc3bdf68113afa054e82bb1535e3f3fd848591b515007af944d8cbc3d1968b0fef56a8d31fca9b5cbafec46e6788028b7a23b5f4d38db6f66bff987e0ca407a3952a1540e718f73bd3e03de2a98fcf15f36bda98376113ef6ac844b63b04bb759bf134311ced65d1bfb39921584bef8fc7d3ae4614f3111751f94cd8699fcec88cf2bbac005933d02fcea10cb32f2fe301f7f63d0b937b3bd8c3b5cafe0619bf9dc1daf9f24f56785d7ab66dc1ca553ac3478bef960d617027d48b1b244f3ca49273dc84bd1d877d275aab8b200e3c70237ed3f30660d441b21eb6c1db1c8a57fb93b7ff86fc3b86e0558c2cc4f0e1b81ce2debb8b8dbbcf9690ea6cdf3efbec295040f817e0f40550c8a9ef8f77be575107555d440c908099cc8c1a41af18e9f39b5403bc86a0a8278a6c6c669fa29f818c926b06eacbdd138780ef380cbb5903cf52193bf70113ee068ce8bb8da0ae00ad7aa7e7eed9ad412bd969c6bfa2a22a85d780c5a64b967cef06d99ff6e934f7b0554454c9938cbf9aace8fe4d1db973fcdaf37b614af0da3f53f1451deaaf943a4f2bc11ef4600190b98ce599b65b6ce61de76fd7714557820e327dda55ef29ec30568dc716fed5fcb959d0d1a9d09b31e077d4cdd452e28e8e9505e8587000d282e580f3781c7ad094f6f8bff1a32a3e7f7ac07b3d82a8b6aa18953657713fe26ac9b9cfcb08ba05528d011f5dfc2dbd9775c2cc0fed765e58204e94f48f61bcd7b4e60d0d46a7822e9e89a048e776915c61a1ebf389f568e917f82bef827e6f63c6a3fb4117eaec45d2033f17fcbc881272987748f31f8321bc67ed12cbdb0e9c2957f99b309204d215c80a7aacd9e0158bd2d1e418200c411f5dcabd2737cc3aec91409f907f38a2d8701b06d88ba093751ef0264e7b8409147100c897ed29f1ae713257b6f072bd50955cb18fc9a98b3644c85ac8503f83631cb4bfa9b7477e555883c6dc0d9c383937295ff1d05e2d4d33f398d6b26f2e1195b06171a44987f56af5e5265c2f56e834d4b0d562bc7e934ec4d3a7eb1bed481618a2f39b107b7b0e3bb706465e71981eaef5f5430adc6d090038188370632457665a2133b99d3d83343c37b1f1698c6f8b3986f34e3194c27d8a34a1531d4e9cc6207c665a9462d2763db5a8ac3ab4247273db26366efab2df72317d67090ad2e4f734df9b33ae004436df9409fff0fb63c94c2c2c06b40a4c0eebf93bf4518d7661cba42f3d699873627dd4bc2682ce66a4a0c29bcff77331f8c71adba5197812aa98551e0b9a5fdacd39c5fc6331213c69dc573f432da5824645bd7d6b68ee45fab23d445163151e75abf439995a22bf66da3f9ec8440b941a33bb0475c830105e57b225a28216d77058616f581c5eb379d56e7f3cf366b5e6bf65a020abf62f74451fb1e84fb24334d548a498d2d1dc741fd9b907eb527f810e984480ef72749e1fd173616a24200f1e053cca4405f136f553142171fb57972eb630966f74c80b4a598633c2984a99f505464a060e8e694abad5c554ee0ff8d66c42b4dffa8be3a3bd810018ba7de82c36dff41a1a20e114e27701066a0031bd2dec3a4e85efe33af903e0fcc10792a66e17ca8e01c65de86d0080df558bfd57e6bdc41ebeadf92310265273e2b459d3a350bda858801f67106790a401a8cdecbcf7b8db2e33f834eaf3589b2730b2d84a9f83237358e2c49242c034450936a5a83548f714dfe6ae966a8b59849b24897c5dece5e336e8e9f8459ab1723d15ebec6a83c92d274b570f502dae25ce6cd7321300b5f8b7bf4dfe9ae82d180d1b8504cc07a59781862b57580e506f195b8eaad08dc818c2666e6dfec0a55dccf6c17d234e60046762db3edb199c67d08de34e1d28db3425ad6df6d81972876be28500f28e602ea171f45b3650d39095164f34edead38ee07126be99ee1928f2866baca9f44b70744214de8fa4943a9647f3be8778a9d9cf66d6793a98a36a4b3c43f97b6667442242b432f16363558341a6042171f89132891f597f11055364f5c74abc5b809d4fc4fef25405a0e8488861f6bce8b43ee7701460f1a762e7261cbc143ee100a9e51486f3dfac58a7a7870b51cec8075db980a93a5661fe9b7d624f55116755088dcf4e0803dffa8c3f76ebe84faba4f58703a296428dd3307c042a54ad8beefbe369ec82400e0d4b8da90fceae263a64fe6bb5ba2f9c09f4794d06931098bdd8771a18941080d77cce256820c54fad237e3cd15a6bde80424e9ff3837eb92efab86abd1fdf27dbc5bc313b29a9c5603c92c15bbd5311a3531193be93c5dd5d481cf042aa2004123928009ba876edfa4ca769a538fff1affbc1b4fe3444f6ed61d509c06cbcfd30fe0430418a437164e5ad6cfd9a084641734e59bde8c8f17c7484d646a06997db733b913c974ec675a17e64b766035a7fb12a05a64e210b7ea42212791841ee686a89cc7ac3debcf2d707cd819784bf01e4a50f6dc915ed76b556dca0df8cda44b2e551059012b9bfe517e4efa598a7e1935a2c33d3a12ac9e8fdcbee95eeeda503e3545eb9d7d10f37eeb80c3f527443067233514507953b1a4bacf220458910a52902c96480068bf4c151125e2ec1f31492ba01c2b49e7cc46ed53c31781a044eaf25d2169424b1d6a9f65957f80c3fd8d1413607315f5cf1b2ce18a3cbb370ccaea04e8f118df62fae8b6e416ac551df3fe98dbee6d6e251bf829880528c597079b5031b5d103b030f3300a8763f849ce089413418a3901667a1c823fadbe6d6898d9eabc39c805ce5bb94e08e72b0de09a73dd69b8a46e9f39333371a979515f91db43dc6cad54e1b089bb3b0f558b3a6cdc5f63a36011519cc00830ae80485264b039f4b0e8eb94e66361ff0922db9a8ac9bc1fb93470faa06d733bb39903a1bbc12e0cc5559b159122ce03d51c4db20af688daae87af45c75abdbebab2bfa8d7d85201d1ee2e49af4d7588234149e076857dadbd51f09b40f59163e295e228b8ea2517e6983f3d8116b8ebf5b4a7052c97a7f927320a5409688a9560547cd81e10fe42d6bc45b5d7878484fd5a7fa19b5335f17cf666d49c71f7ec242422004981a530e940a609e80dd046ed2dea8106d4871c47c1ae37dcc52efc051f530de1bb2faf988e032d7c36f2b35ae2ef87a4821547920d4ad5d3855b4e4a0bbd8ee954fa4c485d6ee53a8cc2338ba8366daf741f934a43caa57db6548b0f1e36ce3e84819779f2bbe82176608c94c5b52eed433dc90b783139f8516afa7dc15694ad543ea987144b564517cea9e3aeaba3fc20a33ec4af98bc3d22a7ecea5cc4e97ab73374a9dcf82b1de0d309aed9fc0f9fb46ab1d93c449c13bc46422c6e6f9ef1d086a949bca26fe93b4f1be1fbcb84ebf62437c484271cfc6a75a6c645f3dc4a1835240a1ab0f5d4cc5db1da90bba00d326177958860ff85f98cdc1508ac0fcd319c355a3b427ce5c154e40c556d4da065adee17b687935dab2551e63117dcde273dca68642b4e9d7245aec002ac6721412f44a567aa2f0f0672adeb66add98b8c732d27f408328cb89c08a467febc26c54368bb6e78670ec391ebf823b0d1bee029f196fb74bed5873eb78358ed3e6352c60bd07a583504a3b50d4b022e4e07d700769111468df2475a51258aa1f0088bbdf74df6b4848979897722340e3c7e40fc10ec18904846f95eb642769630c6d91ad7d5bb2d94ec25108189f72b61c0d9a81b99c4d02b0075bb4f640808fa68aef040ddb9b643dd5d7703b4e59d87461a02ea8d5f9ab83eca6e4ac213f7fdd2d3f2e4acb95f7750928b1763993993785f343266c4d10f4dfa81af1d5ee922944bde59864ad783717625367aee7e2637c57d938757f308a915971a068d364474852164fc72b835b62707a5023cdbca781f840600ea1d81b7938a70076a07482dc17ef0248dc8a4a383a5c02dc668473dccf52da861776175de097f19e2a4b6a646fd71b245325083038443d7d766cffa92015e99d3a7d46cf7570ff03a8ad2d01c1f9284dbe61a124e96a45de3188b4503d70554bbdbee114cac152059a2bdb19dd34753b7bd0efe9b846ed57844d5b5477093c990a44f0a4cb2a5473e2519a5fda2b493cbfdc97c6a703811ba9db64ea6577754290ffc5bab065ab2608899a8ea59c699251cd8dbe6b659a687fd72b406479bc0a4e57d58239b39f060a9d948e2100d6faa60e5cc943cae1d8dfddaf21bf4271529bac1bec19106324673691c5cfd4117af73ef721fbc5d60f969815caaaa2c7fad678d0213d9e235bedce8fdd996198e61eaa27a436fa078b479d579caf7d82c6609ae66f768b1159a1408adebba0de32ff5d50d9a30efb030bf83dee31065d6de93cfc3c8b14446833e871129d6a6c64402b7dbdea442759d14165e434a46868d0d72d2ae573a0c5c9f3f50896b9274cc22eab1a338a539d02a609ddb8f6a42c77593963c5208c6c3b7a8277b53410d22c5a9f2c05afda8758d2cf1a57434c5da58f011d6bc95c3b2aba5410b9da46e08ae9976e523298fc09c06d9a4fa45df2a6d62d13a9df9cf3db8c44bcedd1c57ee39d2a368a525301cc269b2f0feaad23fd5605b88e4a0b626876589e25cd1e0cc6d971e35c446eccfcdba841e468aa0b268b2b9e0697f7158f73c544e8e56e6df24b8208d2b3c7b6f525548310bfcde5f71389cfbf28cff61d60e2058237e2203ea7b248b2ee39f93c14cce2b7e4264d6389feaa5b5367ce775330800480dd78e1349f7ca6db480214eb6a6952fd791e3c5b94a664eacad7de542d8dd336fd44f32b1f6776e840174a4dd0b46b614f4ec2e97c9bb225188de86d1a69a4c41af7418f9971a7f2adf2d92b13a29d9ed15b5f731a04acf4b3833485d491137f90facf46a3ea77a1978dc3ef0a81911f1604af7bfe523fa4382317d4ea4adec4efc9c386cfd55a8727114126d0cbc62a7acfb3d441e550eec645636676755a49175cf0951cacbc1f55b53ddd60be05ab0faf0c9c943259076a6746876a4dde5e0b0bc8a4398703a10066ecaab429bea4ffbcb5d7cdcbcc71c9d24489a38593f7aa63e453dccd9a90f1afc3cc92a147f39a8ddc5a83cb692602a13fddda8cb6c96f1d7c6aabea7021630e668d2deb32cc8ba3f1c155dd0aca3735d0a4b903cafbd387b863ffdb907c66026525f0ccfb560d6defd98a95f28841f167d51c8c6539944e9c13b32faaad382486165b5b7ff221f4344dbc1495ec5ad1eb4a3da11cf9f31186cd310448c45e94d49a7a09458be861d1ec61996e28675181b8f7914ac86be8335a9631ec83413", &(0x7f0000000b40)="2933182e167230cfa8505d6f3628bc3ae95ffd70ca72a4300479"}}, &(0x7f0000000cc0))
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x2d, 0x38, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xf, 0x9, [@multicast2, @loopback, @empty]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_usbip_server_init(0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0x10000}}, {@timeout={'timeout', 0x3d, 0x3}}]}})
sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000012700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40054)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000ac0)='./file1\x00', 0x21081e, &(0x7f0000000b00)={[{@resgid}, {@nogrpid}, {@grpquota}, {@noquota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

577.797429ms ago: executing program 2 (id=4147):
bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0xf, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x96, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

555.84945ms ago: executing program 2 (id=4149):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000008b2c14e16ad7c6e16b775000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRESDEC=r1], 0x4c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'veth1_macvtap\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)

535.92874ms ago: executing program 2 (id=4151):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1d, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5e, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80000, 0x4}, 0x50)

492.396551ms ago: executing program 2 (id=4152):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18)
execve(0x0, &(0x7f00000001c0), &(0x7f0000000300))

429.066912ms ago: executing program 2 (id=4153):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0)

428.848532ms ago: executing program 2 (id=4154):
r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[], 0x0)
write$selinux_user(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000010000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
time(0x0)
r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe)
r5 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil)
shmctl$IPC_STAT(r5, 0x2, 0x0)
r6 = geteuid()
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fstat(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="0c1200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000e0110380dc1100800800034000000002d0110a801c0002800900020073797a32000000000900020073797a3000000000520001"], 0x120c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
recvmmsg(0xffffffffffffffff, &(0x7f0000003040)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000000740)=[{&(0x7f0000000a00)=""/132, 0x84}], 0x1}, 0x80000000}, {{&(0x7f0000000b00)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000000980)=""/3, 0x3}, {&(0x7f0000000b80)=""/45, 0x2d}, {&(0x7f0000000bc0)=""/17, 0x11}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/73, 0x49}, {&(0x7f0000001cc0)=""/17, 0x11}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/83, 0x53}], 0x8, &(0x7f0000002e00)=""/220, 0xdc}, 0xf}, {{&(0x7f0000002f00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/33, 0x21}, {&(0x7f0000002fc0)}], 0x2}, 0x10001}], 0x3, 0x40000062, &(0x7f0000003100)={0x77359400})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000800)={0x0, <r9=>0x0})
shmctl$IPC_SET(r5, 0x1, &(0x7f0000000880)={{0x1, r6, r7, 0x0, r8, 0x100, 0x5}, 0x62, 0x6, 0x2b, 0x0, 0xffffffffffffffff, r9, 0x3})
keyctl$KEYCTL_MOVE(0x4, r4, 0x0, 0x0, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', <r12=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r10, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYRES16, @ANYRES16=r11, @ANYBLOB="01002cbd700000dcdf251800000008000300", @ANYRES32=r12, @ANYBLOB="1c003080180001800c0005000000000000008003080001"], 0x38}}, 0x4000)

246.047706ms ago: executing program 3 (id=4162):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1d, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5e, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80000, 0x4}, 0x50)

213.385696ms ago: executing program 3 (id=4163):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18)
execve(0x0, &(0x7f00000001c0), &(0x7f0000000300))

176.710587ms ago: executing program 3 (id=4164):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
shmat(r2, &(0x7f0000ff1000/0x3000)=nil, 0x400c)
mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x17, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xd1, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x17, 0xc, &(0x7f0000000880)=ANY=[@ANYRES64=0x0, @ANYRES32=r3], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', r3, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18)
r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$selinux_load(r9, &(0x7f0000000240)={0xf97cff8c, 0x8}, 0x10)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r6})

176.475807ms ago: executing program 3 (id=4165):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0)

120.951578ms ago: executing program 3 (id=4166):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1025000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
getpgid(0x0)

120.670998ms ago: executing program 3 (id=4167):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008e74350190400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000040)=0x2800, 0x4)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@errors_continue}, {@data_err_abort}, {@nomblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b0}}, {@noblock_validity}, {@grpquota}, {@nobh}, {@user_xattr}, {@inode_readahead_blks}, {@dioread_nolock}]}, 0x21, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r4, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d", 0x2e)
sendfile(r4, r3, 0x0, 0x3ffff)
sendfile(r4, r3, 0x0, 0x7fffeffd)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r5, 0x0, 0xa20, 0x8000c64)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, 0x61, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x1})

106.647598ms ago: executing program 0 (id=4168):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1d, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r0}, 0x18)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5e, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80000, 0x4}, 0x50)

51.185329ms ago: executing program 0 (id=4169):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaa0baaaaaaaaaabb81002f00080048000028fffe0000a02f90787f000001e000000188092b519a3d1fe1255b7593b8"], 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b332abd7000001000001500000008000300", @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x2c}, 0x1, 0x0, 0x0, 0xc040000}, 0x4008040)
r4 = socket(0x6, 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x212}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)={0x8b4, r3, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x1bc, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x6, 0x1, 0x1, 0x0, 0x1}, {0x8}, @device_b, @device_b, @broadcast, {0x0, 0x9}}, @random="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"}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x6b7, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x1}, {0x8}, @initial, @device_a, @device_b, {0x8, 0xffa}}, @random="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"}}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x81}, 0x1000)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0xc0, r0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffffff80, 0x18}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "b764d4dadc528a48639cfb2320c1c737"}, @NL80211_ATTR_PMKID={0x14, 0x55, "0258baa77b0bb6a8f07d26d103de5328"}, @NL80211_ATTR_PMKID={0x14, 0x55, "df87c17e7a76737c5449a5adb16f66ad"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "3abb7977a7851626d31638a40b72d185"}, @NL80211_ATTR_PMK={0x14, 0xfe, "d7637eb2375144f4b836efaad68dcb7f"}, @NL80211_ATTR_PMKID={0x14, 0x55, "27ee12aad32e30342ec4415f89ce8349"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xd}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8044814}, 0x5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x18, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x1, 0x10, 0x8000}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000580)=[r6, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000600)=[{0x1, 0x1, 0x1, 0x6}, {0x1, 0x1, 0x6, 0xb}, {0x3, 0x3, 0x10, 0x7}, {0x3, 0x2, 0x6, 0x2}], 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000780)='fsi_slave_init\x00', r7, 0x0, 0x4}, 0xffffffffffffffdd)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

0s ago: executing program 0 (id=4170):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000ac0)={'\x00', 0x6, 0x1, 0x5b8a, 0x7f, 0x2})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x800003, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000007000000000000e4000000f966bd346dfc3b009500000008000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@broadcast, 0x4e24, 0x5, 0x4e21, 0xc, 0x0, 0x20, 0x0, 0x2b}, {0xffffffffffffffff, 0x0, 0xfff, 0x0, 0xbe9f, 0x3, 0x9, 0x6}, {0x8, 0x3, 0x7}, 0x1, 0x6e6bb2, 0x0, 0x0, 0x2, 0x2}, {{@in6=@remote, 0x4d6, 0x3c}, 0x2, @in=@rand_addr=0x64010100, 0x34ff, 0x0, 0x2, 0x2, 0x9, 0x0, 0xd9c5}}, 0xe8)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6)
recvmmsg(r6, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f00000004c0)=""/55, 0x37}, {&(0x7f0000000440)=""/119, 0x77}], 0x4, &(0x7f0000000540)=""/55, 0x37}}], 0x1, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)

kernel console output (not intermixed with test programs):

64.497653][T14146] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  264.504974][T14140] EXT4-fs (loop2): orphan cleanup on readonly fs
[  264.513714][T14142] bond1 (unregistering): Released all slaves
[  264.522552][T14140] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.3631: corrupted inode contents
[  264.535494][T14140] EXT4-fs (loop2): Remounting filesystem read-only
[  264.538293][T14151] SELinux:  policydb version 0 does not match my version range 15-35
[  264.550290][T14151] SELinux: failed to load policy
[  264.550321][T14146] loop0: detected capacity change from 0 to 512
[  264.563597][T14140] EXT4-fs (loop2): 1 truncate cleaned up
[  264.569800][  T292] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  264.580457][  T292] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  264.592373][T14146] EXT4-fs (loop0): orphan cleanup on readonly fs
[  264.599694][T14146] EXT4-fs warning (device loop0): ext4_xattr_inode_get:556: inode #11: comm syz.0.3632: EA inode hash validation failed
[  264.612649][T14146] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.3632: corrupted inode contents
[  264.625367][  T292] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  264.635595][T14146] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #15: comm syz.0.3632: mark_inode_dirty error
[  264.647570][T14140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  264.665819][T14146] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.3632: corrupted inode contents
[  264.682343][T14146] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #15: comm syz.0.3632: mark_inode_dirty error
[  264.694900][T14140] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  264.701450][T14140] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  264.708990][T14140] vhci_hcd vhci_hcd.0: Device attached
[  264.735056][T14146] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #15: comm syz.0.3632: mark inode dirty (error -117)
[  264.782762][T14156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3635'.
[  264.849288][T14146] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117)
[  264.876333][T14157] vhci_hcd: connection closed
[  264.876513][   T51] vhci_hcd: stop threads
[  264.876569][T14146] EXT4-fs (loop0): 1 orphan inode deleted
[  264.881245][   T51] vhci_hcd: release socket
[  264.881262][   T51] vhci_hcd: disconnect device
[  264.891702][T14146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  264.925258][T14162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3636'.
[  264.949003][T11676] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.007229][   T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1)
[  265.042071][T14179] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length.
[  265.071966][   T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1)
[  265.096443][T14179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  265.114509][T14182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3640'.
[  265.137224][   T36] hid-generic 0000:0000:0000.004D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  265.179567][T14191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=14191 comm=syz.0.3646
[  265.193562][T14191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3646'.
[  265.209974][T14191] bond1: entered promiscuous mode
[  265.216265][T14191] 8021q: adding VLAN 0 to HW filter on device bond1
[  265.227205][T14191] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x7
[  265.267861][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3646'.
[  265.295533][T14191] bond1 (unregistering): Released all slaves
[  265.358295][   T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1)
[  265.381292][T14212] netlink: 264 bytes leftover after parsing attributes in process `syz.0.3653'.
[  265.428694][T11544] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.469810][   T36] hid-generic 0000:0000:0000.004E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  265.528291][T14227] SELinux: syz.1.3660 (14227) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  265.567964][T14231] Failed to initialize the IGMP autojoin socket (err -2)
[  265.618256][T14238] SELinux:  policydb version 0 does not match my version range 15-35
[  265.626703][T14238] SELinux: failed to load policy
[  265.661375][T14243] netlink: 'syz.2.3666': attribute type 1 has an invalid length.
[  265.679802][T14231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17903 sclass=netlink_route_socket pid=14231 comm=syz.0.3662
[  265.704038][T14243] gretap1: entered allmulticast mode
[  265.711857][T14243] bond1: (slave gretap1): making interface the new active one
[  265.720856][T14243] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  265.730739][T14246] Failed to initialize the IGMP autojoin socket (err -2)
[  265.850333][T14243] Failed to initialize the IGMP autojoin socket (err -2)
[  265.903140][T14246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17903 sclass=netlink_route_socket pid=14246 comm=syz.4.3667
[  265.987490][T14252] loop0: detected capacity change from 0 to 1024
[  265.994235][T14252] EXT4-fs: Ignoring removed nomblk_io_submit option
[  266.001148][T14252] EXT4-fs: Ignoring removed nobh option
[  266.034928][T14254] syzkaller0: entered allmulticast mode
[  266.042075][T14254] syzkaller0 (unregistering): left allmulticast mode
[  266.050421][T14252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.218076][T14264] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.3668: Allocating blocks 497-513 which overlap fs metadata
[  266.232278][   T29] kauditd_printk_skb: 743 callbacks suppressed
[  266.232297][   T29] audit: type=1326 audit(1759459264.884:22713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.2.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b03aeec9 code=0x7ffc0000
[  266.262202][   T29] audit: type=1326 audit(1759459264.884:22714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.2.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b03aeec9 code=0x7ffc0000
[  266.348263][   T29] audit: type=1326 audit(1759459521.015:22715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.2.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b03aeec9 code=0x7ffc0000
[  266.372650][   T29] audit: type=1326 audit(1759459521.015:22716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.2.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b03aeec9 code=0x7ffc0000
[  266.396355][   T29] audit: type=1326 audit(1759459521.015:22717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.2.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b03aeec9 code=0x7ffc0000
[  266.463856][   T36] hid-generic 0000:0000:0000.004F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  266.481959][T14259] EXT4-fs (loop0): pa ffff8881076d67e0: logic 16, phys. 145, len 23
[  266.490146][T14259] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  266.570992][T14282] veth1_to_bond: entered allmulticast mode
[  266.592561][T11676] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.613347][T14287] Failed to initialize the IGMP autojoin socket (err -2)
[  266.658059][   T29] audit: type=1326 audit(1759459521.325:22718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14284 comm="syz.2.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b03aeec9 code=0x7ffc0000
[  266.695452][   T29] audit: type=1326 audit(1759459521.355:22719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14284 comm="syz.2.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7b03aeec9 code=0x7ffc0000
[  266.719150][   T29] audit: type=1326 audit(1759459521.355:22720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14284 comm="syz.2.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b03aeec9 code=0x7ffc0000
[  266.742838][   T29] audit: type=1326 audit(1759459521.355:22721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14284 comm="syz.2.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b03aeec9 code=0x7ffc0000
[  266.766516][   T29] audit: type=1326 audit(1759459521.355:22722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14284 comm="syz.2.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b03aeec9 code=0x7ffc0000
[  266.781916][T14293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17903 sclass=netlink_route_socket pid=14293 comm=syz.0.3678
[  266.893399][ T3373] kernel write not supported for file bpf-prog (pid: 3373 comm: kworker/0:3)
[  267.012110][   T36] hid-generic 0000:0000:0000.0050: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  267.069786][ T3373] kernel write not supported for file bpf-prog (pid: 3373 comm: kworker/0:3)
[  267.326571][T14328] SELinux:  policydb version 0 does not match my version range 15-35
[  267.334781][T14328] SELinux: failed to load policy
[  267.336571][T14273] veth1_to_bond: left allmulticast mode
[  267.373800][T14334] SELinux:  policydb version 0 does not match my version range 15-35
[  267.382107][T14334] SELinux: failed to load policy
[  267.419849][T14336] netlink: 'syz.2.3694': attribute type 39 has an invalid length.
[  267.433297][   T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1)
[  267.435118][T14340] netlink: 'syz.0.3697': attribute type 39 has an invalid length.
[  267.446361][T14336] bridge0: entered promiscuous mode
[  267.455299][T14336] macsec1: entered promiscuous mode
[  267.461762][T14336] bridge0: port 3(macsec1) entered blocking state
[  267.468537][T14336] bridge0: port 3(macsec1) entered disabled state
[  267.475343][T14336] macsec1: entered allmulticast mode
[  267.480741][T14336] bridge0: entered allmulticast mode
[  267.480763][T14342] loop4: detected capacity change from 0 to 512
[  267.492965][T14336] macsec1: left allmulticast mode
[  267.498045][T14336] bridge0: left allmulticast mode
[  267.498580][T14342] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  267.511303][T14342] EXT4-fs (loop4): orphan cleanup on readonly fs
[  267.512235][T14336] bridge0: left promiscuous mode
[  267.519456][T14342] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.3698: corrupted inode contents
[  267.534894][T14342] EXT4-fs (loop4): Remounting filesystem read-only
[  267.541631][T14342] EXT4-fs (loop4): 1 truncate cleaned up
[  267.550177][T14346] bridge0: entered promiscuous mode
[  267.555426][T14346] macsec1: entered promiscuous mode
[  267.560967][   T51] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  267.561812][T14346] bridge0: port 3(macsec1) entered blocking state
[  267.571599][   T51] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  267.578033][T14346] bridge0: port 3(macsec1) entered disabled state
[  267.595075][T14346] macsec1: entered allmulticast mode
[  267.596145][   T51] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  267.600497][T14346] bridge0: entered allmulticast mode
[  267.612623][T14342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  267.629336][T14346] macsec1: left allmulticast mode
[  267.634414][T14346] bridge0: left allmulticast mode
[  267.640935][T14346] bridge0: left promiscuous mode
[  267.667153][T14342] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  267.673713][T14342] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  267.681344][T14342] vhci_hcd vhci_hcd.0: Device attached
[  267.701486][T14348] vhci_hcd: connection closed
[  267.701591][ T3319] vhci_hcd: stop threads
[  267.710639][ T3319] vhci_hcd: release socket
[  267.715051][ T3319] vhci_hcd: disconnect device
[  268.011194][T14371] SELinux:  policydb version 0 does not match my version range 15-35
[  268.020303][T14371] SELinux: failed to load policy
[  268.045272][ T3373] kernel write not supported for file bpf-prog (pid: 3373 comm: kworker/0:3)
[  268.064673][T14375] netlink: 'syz.3.3710': attribute type 10 has an invalid length.
[  268.090492][T14375] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  268.131898][T14380] loop3: detected capacity change from 0 to 512
[  268.136219][T14375] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  268.147135][T14382] loop0: detected capacity change from 0 to 512
[  268.150601][T14375] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  268.159685][T14380] EXT4-fs (loop3): orphan cleanup on readonly fs
[  268.164673][T14382] EXT4-fs (loop0): orphan cleanup on readonly fs
[  268.177298][T14380] EXT4-fs warning (device loop3): ext4_xattr_inode_get:556: inode #11: comm syz.3.3710: EA inode hash validation failed
[  268.190406][T14382] EXT4-fs warning (device loop0): ext4_xattr_inode_get:556: inode #11: comm syz.0.3713: EA inode hash validation failed
[  268.203469][T14380] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.3710: corrupted inode contents
[  268.207427][T14382] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.3713: corrupted inode contents
[  268.227916][T13022] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.228980][T14382] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #15: comm syz.0.3713: mark_inode_dirty error
[  268.237192][T14380] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #15: comm syz.3.3710: mark_inode_dirty error
[  268.249852][T14382] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.3713: corrupted inode contents
[  268.260480][T14386] bridge0: entered promiscuous mode
[  268.272858][T14382] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #15: comm syz.0.3713: mark_inode_dirty error
[  268.278308][T14386] macsec1: entered promiscuous mode
[  268.291146][T14380] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.3710: corrupted inode contents
[  268.307121][T14386] bridge0: port 3(macsec1) entered blocking state
[  268.313689][T14386] bridge0: port 3(macsec1) entered disabled state
[  268.317127][T14382] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #15: comm syz.0.3713: mark inode dirty (error -117)
[  268.320527][T14386] macsec1: entered allmulticast mode
[  268.334158][T14380] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #15: comm syz.3.3710: mark_inode_dirty error
[  268.338032][T14386] bridge0: entered allmulticast mode
[  268.351248][T14382] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117)
[  268.365129][T14380] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #15: comm syz.3.3710: mark inode dirty (error -117)
[  268.378896][T14382] EXT4-fs (loop0): 1 orphan inode deleted
[  268.385311][T14382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  268.397542][T14386] macsec1: left allmulticast mode
[  268.398558][T14380] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117)
[  268.402688][T14386] bridge0: left allmulticast mode
[  268.426083][T14380] EXT4-fs (loop3): 1 orphan inode deleted
[  268.436500][T11676] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.438630][T14380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  268.457872][T14386] bridge0: left promiscuous mode
[  268.482692][T14395] loop0: detected capacity change from 0 to 1024
[  268.496101][T14395] EXT4-fs: Ignoring removed nomblk_io_submit option
[  268.503514][T14395] EXT4-fs: Ignoring removed nobh option
[  268.510598][T11808] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.531965][T14403] SELinux: syz.3.3720 (14403) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  268.533814][T14395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.682392][T14418] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.3718: Allocating blocks 497-513 which overlap fs metadata
[  268.690084][T14417] loop4: detected capacity change from 0 to 1024
[  268.703238][T14417] EXT4-fs: Ignoring removed nomblk_io_submit option
[  268.728559][T14417] EXT4-fs: Ignoring removed nobh option
[  268.747099][T14417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.804552][T14422] FAULT_INJECTION: forcing a failure.
[  268.804552][T14422] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  268.817729][T14422] CPU: 0 UID: 0 PID: 14422 Comm: syz.2.3725 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  268.817765][T14422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  268.817781][T14422] Call Trace:
[  268.817787][T14422]  <TASK>
[  268.817794][T14422]  __dump_stack+0x1d/0x30
[  268.817818][T14422]  dump_stack_lvl+0xe8/0x140
[  268.817906][T14422]  dump_stack+0x15/0x1b
[  268.817928][T14422]  should_fail_ex+0x265/0x280
[  268.817958][T14422]  should_fail+0xb/0x20
[  268.817984][T14422]  should_fail_usercopy+0x1a/0x20
[  268.818064][T14422]  _copy_from_user+0x1c/0xb0
[  268.818097][T14422]  __se_sys_mount+0x10d/0x2e0
[  268.818140][T14422]  ? fput+0x8f/0xc0
[  268.818180][T14422]  ? ksys_write+0x192/0x1a0
[  268.818223][T14422]  __x64_sys_mount+0x67/0x80
[  268.818261][T14422]  x64_sys_call+0x2b51/0x3000
[  268.818328][T14422]  do_syscall_64+0xd2/0x200
[  268.818363][T14422]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  268.818399][T14422]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  268.818438][T14422]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.818460][T14422] RIP: 0033:0x7fc7b03aeec9
[  268.818548][T14422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  268.818615][T14422] RSP: 002b:00007fc7aee17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  268.818637][T14422] RAX: ffffffffffffffda RBX: 00007fc7b0605fa0 RCX: 00007fc7b03aeec9
[  268.818652][T14422] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000
[  268.818664][T14422] RBP: 00007fc7aee17090 R08: 0000200000000240 R09: 0000000000000000
[  268.818728][T14422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  268.818744][T14422] R13: 00007fc7b0606038 R14: 00007fc7b0605fa0 R15: 00007ffda489b218
[  268.818769][T14422]  </TASK>
[  268.861365][T14412] EXT4-fs (loop0): pa ffff8881076d6850: logic 16, phys. 145, len 23
[  269.012308][T14412] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  269.062607][T11676] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.115868][   T36] hid_parser_main: 188 callbacks suppressed
[  269.115886][   T36] hid-generic 0000:0000:0000.0051: unknown main item tag 0x1
[  269.129433][   T36] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0
[  269.136877][   T36] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0
[  269.144305][   T36] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0
[  269.151753][   T36] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0
[  269.159202][   T36] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0
[  269.166755][   T36] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0
[  269.174279][   T36] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0
[  269.181811][   T36] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0
[  269.189245][   T36] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0
[  269.197761][   T36] hid-generic 0000:0000:0000.0051: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  269.278602][T14440] netlink: 'syz.2.3732': attribute type 1 has an invalid length.
[  269.327778][T14417] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.3724: Allocating blocks 1-17 which overlap fs metadata
[  269.342607][T14423] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.3724: Allocating blocks 1-17 which overlap fs metadata
[  269.474754][T14442] __nla_validate_parse: 12 callbacks suppressed
[  269.474773][T14442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3733'.
[  269.495340][T14444] loop0: detected capacity change from 0 to 128
[  269.505773][T14444] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  269.518231][T14444] ext4 filesystem being mounted at /152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  269.519793][T13022] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.568549][T14444] 9pnet_fd: Insufficient options for proto=fd
[  269.612913][T11676] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  269.634168][T14453] loop2: detected capacity change from 0 to 512
[  269.658050][T14453] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  269.667089][T14453] EXT4-fs (loop2): orphan cleanup on readonly fs
[  269.678179][T14453] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.3739: corrupted inode contents
[  269.691807][T14453] EXT4-fs (loop2): Remounting filesystem read-only
[  269.698629][T14453] EXT4-fs (loop2): 1 truncate cleaned up
[  269.704573][T11775] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  269.715170][T11775] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  269.729290][T11775] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  269.740309][T14453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  269.750671][T14466] netlink: 'syz.0.3744': attribute type 1 has an invalid length.
[  269.758398][T14467] bridge0: entered promiscuous mode
[  269.760543][T14466] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3744'.
[  269.765787][T14467] macsec1: entered promiscuous mode
[  269.780528][T14453] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  269.787070][T14453] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  269.793609][T14467] bridge0: port 3(macsec1) entered blocking state
[  269.794620][T14453] vhci_hcd vhci_hcd.0: Device attached
[  269.801072][T14467] bridge0: port 3(macsec1) entered disabled state
[  269.803654][T14467] macsec1: entered allmulticast mode
[  269.818391][T14467] bridge0: entered allmulticast mode
[  269.819970][T14468] vhci_hcd: connection closed
[  269.823982][ T3421] vhci_hcd: stop threads
[  269.833076][ T3421] vhci_hcd: release socket
[  269.837554][ T3421] vhci_hcd: disconnect device
[  269.842406][T14467] macsec1: left allmulticast mode
[  269.847564][T14467] bridge0: left allmulticast mode
[  269.853314][T14467] bridge0: left promiscuous mode
[  269.923261][T14473] Failed to initialize the IGMP autojoin socket (err -2)
[  269.964661][T14475] netlink: 'syz.0.3755': attribute type 1 has an invalid length.
[  269.972597][T14475] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3755'.
[  270.001819][T14478] netlink: 'syz.0.3746': attribute type 1 has an invalid length.
[  270.019962][T14478] gretap1: entered allmulticast mode
[  270.027669][T14478] bond1: (slave gretap1): making interface the new active one
[  270.033406][T14473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17903 sclass=netlink_route_socket pid=14473 comm=syz.4.3745
[  270.035429][T14478] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  270.130829][T14478] Failed to initialize the IGMP autojoin socket (err -2)
[  270.240183][T14481] loop0: detected capacity change from 0 to 1024
[  270.247228][T14481] EXT4-fs: Ignoring removed nomblk_io_submit option
[  270.254087][T14481] EXT4-fs: Ignoring removed nobh option
[  270.267686][T14481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.342282][T11544] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.392908][T14491] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.3747: Allocating blocks 497-513 which overlap fs metadata
[  270.462883][T14497] Failed to initialize the IGMP autojoin socket (err -2)
[  270.468287][T14486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3748'.
[  270.566624][T14497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17903 sclass=netlink_route_socket pid=14497 comm=syz.2.3751
[  270.572412][T14481] EXT4-fs (loop0): pa ffff8881076d6690: logic 16, phys. 145, len 23
[  270.587518][T14481] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  270.686675][T14507] loop4: detected capacity change from 0 to 1024
[  270.723859][T14507] EXT4-fs: Ignoring removed orlov option
[  270.747592][T14509] netlink: 'syz.1.3757': attribute type 1 has an invalid length.
[  270.755370][T14509] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3757'.
[  270.798474][T14507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.815219][T11676] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.874311][ T3389] kernel write not supported for file bpf-prog (pid: 3389 comm: kworker/0:5)
[  270.890025][T14517] loop1: detected capacity change from 0 to 512
[  270.899831][T13022] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.909857][T14517] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  270.919628][T14517] EXT4-fs (loop1): orphan cleanup on readonly fs
[  270.930496][T14521] Failed to initialize the IGMP autojoin socket (err -2)
[  270.938954][T14517] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.3760: corrupted inode contents
[  270.955840][T14517] EXT4-fs (loop1): Remounting filesystem read-only
[  270.963722][T14517] EXT4-fs (loop1): 1 truncate cleaned up
[  270.969872][ T3319] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  270.969944][T14525] SELinux: syz.0.3763 (14525) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  270.980493][ T3319] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  271.015991][T14528] SELinux:  policydb version 0 does not match my version range 15-35
[  271.024512][T14528] SELinux: failed to load policy
[  271.036288][ T3319] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  271.052720][T14517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  271.055331][T14521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17903 sclass=netlink_route_socket pid=14521 comm=syz.2.3762
[  271.085517][T14517] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  271.092082][T14517] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  271.099723][T14517] vhci_hcd vhci_hcd.0: Device attached
[  271.121644][T14533] vhci_hcd: connection closed
[  271.122447][   T51] vhci_hcd: stop threads
[  271.131550][   T51] vhci_hcd: release socket
[  271.135987][   T51] vhci_hcd: disconnect device
[  271.168262][T14539] netlink: 'syz.4.3767': attribute type 39 has an invalid length.
[  271.180483][T14539] bridge0: entered promiscuous mode
[  271.185779][T14539] macsec1: entered promiscuous mode
[  271.192128][T14539] bridge0: port 3(macsec1) entered blocking state
[  271.198648][T14539] bridge0: port 3(macsec1) entered disabled state
[  271.215474][T14539] macsec1: entered allmulticast mode
[  271.220899][T14539] bridge0: entered allmulticast mode
[  271.237340][T14539] macsec1: left allmulticast mode
[  271.242423][T14539] bridge0: left allmulticast mode
[  271.248322][T14539] bridge0: left promiscuous mode
[  271.305336][T14542] netlink: 'syz.4.3768': attribute type 1 has an invalid length.
[  271.313169][T14542] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3768'.
[  271.400047][T14550] loop2: detected capacity change from 0 to 1024
[  271.407191][T14550] EXT4-fs: Ignoring removed orlov option
[  271.418994][T14550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  271.459063][T11544] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.468906][   T29] kauditd_printk_skb: 455 callbacks suppressed
[  271.468928][   T29] audit: type=1326 audit(1759460294.138:23158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14551 comm="syz.4.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890ebfeec9 code=0x7ffc0000
[  271.498880][   T29] audit: type=1326 audit(1759460294.138:23159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14551 comm="syz.4.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890ebfeec9 code=0x7ffc0000
[  271.573453][T14552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3773'.
[  271.633750][T12519] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.665202][   T29] audit: type=1326 audit(1759460294.328:23160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14568 comm="syz.1.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932b6ceec9 code=0x7ffc0000
[  271.688873][   T29] audit: type=1326 audit(1759460294.328:23161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14568 comm="syz.1.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932b6ceec9 code=0x7ffc0000
[  271.705146][T14569] netlink: 'syz.1.3779': attribute type 1 has an invalid length.
[  271.713131][   T29] audit: type=1326 audit(1759460294.328:23162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14568 comm="syz.1.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f932b6ceec9 code=0x7ffc0000
[  271.720282][T14569] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3779'.
[  271.753016][   T29] audit: type=1326 audit(1759460294.328:23163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14568 comm="syz.1.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932b6ceec9 code=0x7ffc0000
[  271.776616][   T29] audit: type=1326 audit(1759460294.328:23164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14568 comm="syz.1.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932b6ceec9 code=0x7ffc0000
[  271.800321][   T29] audit: type=1326 audit(1759460294.328:23165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14566 comm="syz.2.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b03aeec9 code=0x7ffc0000
[  271.823921][   T29] audit: type=1326 audit(1759460294.358:23166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14566 comm="syz.2.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7b03aeec9 code=0x7ffc0000
[  271.847436][   T29] audit: type=1326 audit(1759460294.358:23167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14566 comm="syz.2.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b03aeec9 code=0x7ffc0000
[  271.888866][T14567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3778'.
[  271.923363][T14579] Failed to initialize the IGMP autojoin socket (err -2)
[  271.982067][T14583] loop2: detected capacity change from 0 to 1024
[  271.989914][T14583] EXT4-fs: Ignoring removed orlov option
[  271.999743][T14587] SELinux: syz.1.3786 (14587) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  272.015131][T14583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.065861][T11544] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.087796][T14601] loop4: detected capacity change from 0 to 512
[  272.094289][T14603] loop2: detected capacity change from 0 to 512
[  272.107106][T14603] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  272.115246][T14603] EXT4-fs (loop2): orphan cleanup on readonly fs
[  272.122802][T14601] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  272.126121][T14603] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.3790: corrupted inode contents
[  272.131386][T14601] EXT4-fs (loop4): orphan cleanup on readonly fs
[  272.143343][T14603] EXT4-fs (loop2): Remounting filesystem read-only
[  272.151127][T14601] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.3791: corrupted inode contents
[  272.155609][T14603] EXT4-fs (loop2): 1 truncate cleaned up
[  272.168666][T11775] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  272.173404][T14601] EXT4-fs (loop4): Remounting filesystem read-only
[  272.183577][T11775] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  272.183604][T11775] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  272.191282][T14601] EXT4-fs (loop4): 1 truncate cleaned up
[  272.201519][ T3421] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  272.227199][ T3421] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  272.237812][ T3421] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  272.248609][T14603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  272.248731][T14601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  272.267986][T14603] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  272.279989][T14603] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  272.287561][T14603] vhci_hcd vhci_hcd.0: Device attached
[  272.298222][T14601] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  272.304784][T14601] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  272.312401][T14601] vhci_hcd vhci_hcd.0: Device attached
[  272.314402][T14608] vhci_hcd: connection closed
[  272.318486][ T3421] vhci_hcd: stop threads
[  272.327477][ T3421] vhci_hcd: release socket
[  272.331901][ T3421] vhci_hcd: disconnect device
[  272.342157][T14610] vhci_hcd: connection closed
[  272.342342][   T51] vhci_hcd: stop threads
[  272.351317][   T51] vhci_hcd: release socket
[  272.355725][   T51] vhci_hcd: disconnect device
[  272.828883][T11544] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.853688][T13022] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.866374][T14613] SELinux: syz.2.3792 (14613) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  272.890189][T14615] netlink: 'syz.4.3793': attribute type 1 has an invalid length.
[  272.898170][T14615] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3793'.
[  273.016117][T14630] netlink: 'syz.4.3799': attribute type 39 has an invalid length.
[  273.028374][T14630] bridge0: entered promiscuous mode
[  273.033687][T14630] macsec1: entered promiscuous mode
[  273.039924][T14630] bridge0: port 3(macsec1) entered blocking state
[  273.046473][T14630] bridge0: port 3(macsec1) entered disabled state
[  273.052990][T14630] macsec1: entered allmulticast mode
[  273.058306][T14630] bridge0: entered allmulticast mode
[  273.064245][T14630] macsec1: left allmulticast mode
[  273.069309][T14630] bridge0: left allmulticast mode
[  273.074794][T14630] bridge0: left promiscuous mode
[  273.150567][T14635] loop4: detected capacity change from 0 to 1024
[  273.157445][T14635] EXT4-fs: Ignoring removed orlov option
[  273.167984][T14635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.253595][T13022] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.273698][ T3404] kernel write not supported for file bpf-prog (pid: 3404 comm: kworker/1:3)
[  273.298050][ T3404] kernel write not supported for file bpf-prog (pid: 3404 comm: kworker/1:3)
[  273.360222][T14646] netlink: 'syz.4.3805': attribute type 1 has an invalid length.
[  273.537104][T14656] FAULT_INJECTION: forcing a failure.
[  273.537104][T14656] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  273.550260][T14656] CPU: 1 UID: 0 PID: 14656 Comm: syz.4.3810 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  273.550285][T14656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  273.550361][T14656] Call Trace:
[  273.550367][T14656]  <TASK>
[  273.550374][T14656]  __dump_stack+0x1d/0x30
[  273.550393][T14656]  dump_stack_lvl+0xe8/0x140
[  273.550410][T14656]  dump_stack+0x15/0x1b
[  273.550425][T14656]  should_fail_ex+0x265/0x280
[  273.550531][T14656]  should_fail+0xb/0x20
[  273.550584][T14656]  should_fail_usercopy+0x1a/0x20
[  273.550606][T14656]  _copy_to_user+0x20/0xa0
[  273.550632][T14656]  simple_read_from_buffer+0xb5/0x130
[  273.550705][T14656]  proc_fail_nth_read+0x10e/0x150
[  273.550732][T14656]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  273.550863][T14656]  vfs_read+0x1a8/0x770
[  273.550895][T14656]  ? __rcu_read_unlock+0x4f/0x70
[  273.550928][T14656]  ? __fget_files+0x184/0x1c0
[  273.550985][T14656]  ksys_read+0xda/0x1a0
[  273.551015][T14656]  __x64_sys_read+0x40/0x50
[  273.551111][T14656]  x64_sys_call+0x27c0/0x3000
[  273.551133][T14656]  do_syscall_64+0xd2/0x200
[  273.551149][T14656]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  273.551173][T14656]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  273.551250][T14656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.551270][T14656] RIP: 0033:0x7f890ebfd8dc
[  273.551283][T14656] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  273.551300][T14656] RSP: 002b:00007f890d65f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  273.551316][T14656] RAX: ffffffffffffffda RBX: 00007f890ee55fa0 RCX: 00007f890ebfd8dc
[  273.551327][T14656] RDX: 000000000000000f RSI: 00007f890d65f0a0 RDI: 0000000000000007
[  273.551385][T14656] RBP: 00007f890d65f090 R08: 0000000000000000 R09: 0000000000000000
[  273.551395][T14656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  273.551406][T14656] R13: 00007f890ee56038 R14: 00007f890ee55fa0 R15: 00007ffe01f1b328
[  273.551423][T14656]  </TASK>
[  273.775103][T14660] loop3: detected capacity change from 0 to 1024
[  273.781914][T14660] EXT4-fs: Ignoring removed orlov option
[  273.794341][T14662] loop4: detected capacity change from 0 to 512
[  273.808140][T14662] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  273.808756][T14660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.816323][T14662] EXT4-fs (loop4): orphan cleanup on readonly fs
[  273.835639][T14662] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.3813: corrupted inode contents
[  273.847861][T14662] EXT4-fs (loop4): Remounting filesystem read-only
[  273.854471][T14662] EXT4-fs (loop4): 1 truncate cleaned up
[  273.860402][ T3319] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  273.870975][ T3319] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  273.881670][ T3319] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  273.892322][T14662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  273.914566][T14662] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  273.921115][T14662] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  273.928719][T14662] vhci_hcd vhci_hcd.0: Device attached
[  273.935038][T11808] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.949684][T14668] vhci_hcd: connection closed
[  273.949982][ T3319] vhci_hcd: stop threads
[  273.956670][ T3404] kernel write not supported for file bpf-prog (pid: 3404 comm: kworker/1:3)
[  273.958990][ T3319] vhci_hcd: release socket
[  273.972163][ T3319] vhci_hcd: disconnect device
[  274.015561][ T3404] kernel write not supported for file bpf-prog (pid: 3404 comm: kworker/1:3)
[  274.139179][T14685] gretap1: entered allmulticast mode
[  274.146344][T14685] bond1: (slave gretap1): making interface the new active one
[  274.154080][T14685] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  274.171051][T14685] Failed to initialize the IGMP autojoin socket (err -2)
[  274.331430][T14688] SELinux: syz.3.3822 (14688) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  274.463845][T13022] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.502280][T14693] __nla_validate_parse: 1 callbacks suppressed
[  274.502298][T14693] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3824'.
[  274.535179][ T3389] kernel write not supported for file bpf-prog (pid: 3389 comm: kworker/0:5)
[  274.607605][ T3389] kernel write not supported for file bpf-prog (pid: 3389 comm: kworker/0:5)
[  274.645465][T14705] loop4: detected capacity change from 0 to 512
[  274.653592][T14705] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002]
[  274.661565][T14705] System zones: 1-12
[  274.665840][T14705] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.3830: corrupted in-inode xattr: e_value size too large
[  274.680400][T14705] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3830: couldn't read orphan inode 15 (err -117)
[  274.693203][T14705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  274.708521][T14705] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.3830: Unrecognised inode hash code 4
[  274.719896][T14705] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3830: Corrupt directory, running e2fsck is recommended
[  275.512215][T14711] validate_nla: 2 callbacks suppressed
[  275.512228][T14711] netlink: 'syz.4.3832': attribute type 1 has an invalid length.
[  275.534494][T14711] gretap1: entered allmulticast mode
[  275.542066][T14711] bond1: (slave gretap1): making interface the new active one
[  275.549880][T14711] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  275.563819][T14711] Failed to initialize the IGMP autojoin socket (err -2)
[  275.660244][T14714] FAULT_INJECTION: forcing a failure.
[  275.660244][T14714] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  275.673447][T14714] CPU: 0 UID: 0 PID: 14714 Comm: syz.4.3833 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  275.673486][T14714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  275.673498][T14714] Call Trace:
[  275.673506][T14714]  <TASK>
[  275.673515][T14714]  __dump_stack+0x1d/0x30
[  275.673535][T14714]  dump_stack_lvl+0xe8/0x140
[  275.673554][T14714]  dump_stack+0x15/0x1b
[  275.673570][T14714]  should_fail_ex+0x265/0x280
[  275.673614][T14714]  should_fail+0xb/0x20
[  275.673638][T14714]  should_fail_usercopy+0x1a/0x20
[  275.673670][T14714]  _copy_from_user+0x1c/0xb0
[  275.673702][T14714]  get_sg_io_hdr+0x82/0x360
[  275.673735][T14714]  ? path_openat+0x1bf8/0x2170
[  275.673800][T14714]  ? __rcu_read_unlock+0x4f/0x70
[  275.673828][T14714]  sg_new_write+0xc3/0x890
[  275.673860][T14714]  ? do_vfs_ioctl+0x866/0xe10
[  275.673945][T14714]  sg_ioctl+0xb81/0x1360
[  275.673980][T14714]  ? __pfx_sg_ioctl+0x10/0x10
[  275.674016][T14714]  __se_sys_ioctl+0xce/0x140
[  275.674085][T14714]  __x64_sys_ioctl+0x43/0x50
[  275.674113][T14714]  x64_sys_call+0x1816/0x3000
[  275.674134][T14714]  do_syscall_64+0xd2/0x200
[  275.674235][T14714]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  275.674270][T14714]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  275.674363][T14714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.674383][T14714] RIP: 0033:0x7f890ebfeec9
[  275.674396][T14714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  275.674413][T14714] RSP: 002b:00007f890d65f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  275.674430][T14714] RAX: ffffffffffffffda RBX: 00007f890ee55fa0 RCX: 00007f890ebfeec9
[  275.674483][T14714] RDX: 0000200000000040 RSI: 0000000000002285 RDI: 0000000000000003
[  275.674494][T14714] RBP: 00007f890d65f090 R08: 0000000000000000 R09: 0000000000000000
[  275.674505][T14714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  275.674516][T14714] R13: 00007f890ee56038 R14: 00007f890ee55fa0 R15: 00007ffe01f1b328
[  275.674533][T14714]  </TASK>
[  276.068892][T14721] loop0: detected capacity change from 0 to 512
[  276.068895][T14722] netlink: 'syz.4.3836': attribute type 1 has an invalid length.
[  276.082999][T14722] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3836'.
[  276.087172][T14721] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  276.101343][T14721] EXT4-fs (loop0): orphan cleanup on readonly fs
[  276.109112][T14721] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.3835: corrupted inode contents
[  276.122403][T14721] EXT4-fs (loop0): Remounting filesystem read-only
[  276.127125][ T3389] kernel write not supported for file bpf-prog (pid: 3389 comm: kworker/0:5)
[  276.129096][T14721] EXT4-fs (loop0): 1 truncate cleaned up
[  276.146582][ T3421] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  276.157210][ T3421] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  276.168058][ T3421] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  276.191778][T14721] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  276.198324][T14721] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  276.205881][T14721] vhci_hcd vhci_hcd.0: Device attached
[  276.220205][T14729] vhci_hcd: connection closed
[  276.220759][ T3319] vhci_hcd: stop threads
[  276.227879][   T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1)
[  276.229761][ T3319] vhci_hcd: release socket
[  276.229771][ T3319] vhci_hcd: disconnect device
[  276.305556][T14736] SELinux: failed to load policy
[  276.312729][T14736] netlink: 'syz.4.3841': attribute type 1 has an invalid length.
[  276.328493][T14736] 8021q: adding VLAN 0 to HW filter on device bond2
[  276.416442][T14745] SELinux: syz.4.3846 (14745) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  276.486871][   T29] kauditd_printk_skb: 536 callbacks suppressed
[  276.486888][   T29] audit: type=1326 audit(1759460299.158:23680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14744 comm="syz.4.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890ebfeec9 code=0x7ffc0000
[  276.516846][   T29] audit: type=1326 audit(1759460299.158:23681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14744 comm="syz.4.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890ebfeec9 code=0x7ffc0000
[  276.773307][   T29] audit: type=1400 audit(1759460299.438:23682): avc:  denied  { read } for  pid=14751 comm="syz.0.3848" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  276.797815][   T29] audit: type=1400 audit(1759460299.438:23683): avc:  denied  { open } for  pid=14751 comm="syz.0.3848" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  276.822698][   T29] audit: type=1400 audit(1759460299.448:23684): avc:  denied  { ioctl } for  pid=14751 comm="syz.0.3848" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  276.916017][   T29] audit: type=1326 audit(1759460299.578:23685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14753 comm="syz.0.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2560eec9 code=0x7ffc0000
[  276.942407][   T29] audit: type=1326 audit(1759460299.578:23686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14753 comm="syz.0.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff2560eec9 code=0x7ffc0000
[  276.966029][   T29] audit: type=1326 audit(1759460299.588:23687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14753 comm="syz.0.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2560eec9 code=0x7ffc0000
[  276.972083][T14754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3849'.
[  276.989642][   T29] audit: type=1326 audit(1759460299.588:23688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14753 comm="syz.0.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff2560eec9 code=0x7ffc0000
[  276.989696][   T29] audit: type=1326 audit(1759460299.588:23689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14753 comm="syz.0.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2560eec9 code=0x7ffc0000
[  277.070817][ T3389] kernel write not supported for file bpf-prog (pid: 3389 comm: kworker/0:5)
[  277.098232][ T3389] kernel write not supported for file bpf-prog (pid: 3389 comm: kworker/0:5)
[  277.114773][T14763] loop1: detected capacity change from 0 to 1024
[  277.121687][T14763] EXT4-fs: Ignoring removed orlov option
[  277.132080][T14765] netlink: 'syz.0.3853': attribute type 1 has an invalid length.
[  277.150086][T14765] Failed to initialize the IGMP autojoin socket (err -2)
[  277.425112][T14784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3860'.
[  277.441851][T14790] Failed to initialize the IGMP autojoin socket (err -2)
[  277.661275][T14793] SELinux: syz.1.3862 (14793) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  277.992537][T14786] Set syz1 is full, maxelem 65536 reached
[  278.004326][T14800] loop2: detected capacity change from 0 to 1024
[  278.011265][T14800] EXT4-fs: Ignoring removed orlov option
[  278.114763][T14809] netlink: 'syz.2.3866': attribute type 1 has an invalid length.
[  278.138560][T14809] Failed to initialize the IGMP autojoin socket (err -2)
[  278.230752][T14820] netlink: '+}[@': attribute type 10 has an invalid length.
[  278.241921][T14820] team0: Port device dummy0 added
[  278.249598][T14822] netlink: 'syz.0.3873': attribute type 10 has an invalid length.
[  278.274202][T14822] team0: Device hsr_slave_0 failed to register rx_handler
[  278.306766][T14822] Failed to initialize the IGMP autojoin socket (err -2)
[  278.306874][T14820] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  278.439305][T14827] loop2: detected capacity change from 0 to 512
[  278.457329][T14827] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  278.465392][T14827] EXT4-fs (loop2): orphan cleanup on readonly fs
[  278.473849][T14827] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.3875: corrupted inode contents
[  278.486064][T14827] EXT4-fs (loop2): Remounting filesystem read-only
[  278.493537][T14827] EXT4-fs (loop2): 1 truncate cleaned up
[  278.499406][ T3421] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  278.510042][ T3421] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  278.520819][ T3421] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  278.535385][T14827] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  278.541925][T14827] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  278.549570][T14827] vhci_hcd vhci_hcd.0: Device attached
[  278.554008][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3874'.
[  278.580307][T14832] vhci_hcd: connection closed
[  278.580605][   T51] vhci_hcd: stop threads
[  278.589854][   T51] vhci_hcd: release socket
[  278.594327][   T51] vhci_hcd: disconnect device
[  279.123764][T14835] netlink: 'syz.2.3876': attribute type 1 has an invalid length.
[  279.131576][T14835] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3876'.
[  279.162027][T14837] loop2: detected capacity change from 0 to 1024
[  279.169228][T14837] EXT4-fs: Ignoring removed orlov option
[  279.289281][T14824] syz.0.3874 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  279.300418][T14824] CPU: 0 UID: 0 PID: 14824 Comm: syz.0.3874 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  279.300500][T14824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  279.300517][T14824] Call Trace:
[  279.300525][T14824]  <TASK>
[  279.300535][T14824]  __dump_stack+0x1d/0x30
[  279.300562][T14824]  dump_stack_lvl+0xe8/0x140
[  279.300587][T14824]  dump_stack+0x15/0x1b
[  279.300678][T14824]  dump_header+0x81/0x220
[  279.300719][T14824]  oom_kill_process+0x342/0x400
[  279.300754][T14824]  out_of_memory+0x979/0xb80
[  279.300789][T14824]  try_charge_memcg+0x5e6/0x9e0
[  279.300841][T14824]  charge_memcg+0x51/0xc0
[  279.300878][T14824]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  279.300918][T14824]  __read_swap_cache_async+0x1df/0x350
[  279.300953][T14824]  swap_cluster_readahead+0x376/0x3e0
[  279.301070][T14824]  swapin_readahead+0xde/0x6f0
[  279.301104][T14824]  ? __filemap_get_folio+0x4f7/0x6b0
[  279.301195][T14824]  ? __rcu_read_unlock+0x34/0x70
[  279.301237][T14824]  ? swap_cache_get_folio+0x77/0x200
[  279.301332][T14824]  do_swap_page+0x301/0x2430
[  279.301410][T14824]  ? css_rstat_updated+0xb7/0x240
[  279.301465][T14824]  ? __pfx_default_wake_function+0x10/0x10
[  279.301493][T14824]  handle_mm_fault+0x9a5/0x2c20
[  279.301581][T14824]  do_user_addr_fault+0x630/0x1080
[  279.301606][T14824]  exc_page_fault+0x62/0xa0
[  279.301660][T14824]  asm_exc_page_fault+0x26/0x30
[  279.301685][T14824] RIP: 0033:0x7eff254e57a8
[  279.301701][T14824] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d 1a 26 38 00 00 0f 8e 09 fe ff ff e8 13 9d fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d e6 fe ea 00 e8 03 00 00 48 8d 1d e7 07 38 00 e8 62 96 12 00
[  279.301724][T14824] RSP: 002b:00007ffd6aad2650 EFLAGS: 00010246
[  279.301745][T14824] RAX: 00000000000445cd RBX: 00007eff25867da0 RCX: 00000000000445c0
[  279.301762][T14824] RDX: 000000000000000d RSI: 00007ffd6aad2630 RDI: 0000000000000001
[  279.301794][T14824] RBP: 00007eff25867da0 R08: 0000000000d57e89 R09: 7fffffffffffffff
[  279.301806][T14824] R10: 3fffffffffffffff R11: 0000000000000293 R12: 00000000000445cd
[  279.301817][T14824] R13: 00007ffd6aad2740 R14: ffffffffffffffff R15: 00007ffd6aad2760
[  279.301840][T14824]  </TASK>
[  279.301849][T14824] memory: usage 307200kB, limit 307200kB, failcnt 437
[  279.326298][ T3404] warn_unsupported: 2 callbacks suppressed
[  279.326317][ T3404] kernel write not supported for file bpf-prog (pid: 3404 comm: kworker/1:3)
[  279.328641][T14824] memory+swap: usage 323780kB, limit 9007199254740988kB, failcnt 0
[  279.539905][T14824] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0
[  279.547224][T14824] Memory cgroup stats for /syz0:
[  279.553745][T14824] cache 0
[  279.561778][T14824] rss 0
[  279.564550][T14824] shmem 0
[  279.567546][T14824] mapped_file 0
[  279.571018][T14824] dirty 0
[  279.573949][T14824] writeback 0
[  279.577257][T14824] workingset_refault_anon 141
[  279.581941][T14824] workingset_refault_file 3691
[  279.586780][T14824] swap 16977920
[  279.590233][T14824] swapcached 0
[  279.593614][T14824] pgpgin 462829
[  279.597103][T14824] pgpgout 462826
[  279.600683][T14824] pgfault 275933
[  279.604247][T14824] pgmajfault 72
[  279.607744][T14824] inactive_anon 0
[  279.611382][T14824] active_anon 0
[  279.614841][T14824] inactive_file 0
[  279.618550][T14824] active_file 12288
[  279.622359][T14824] unevictable 0
[  279.625821][T14824] hierarchical_memory_limit 314572800
[  279.631202][T14824] hierarchical_memsw_limit 9223372036854771712
[  279.637518][T14824] total_cache 0
[  279.641001][T14824] total_rss 0
[  279.644287][T14824] total_shmem 0
[  279.647771][T14824] total_mapped_file 0
[  279.651819][T14824] total_dirty 0
[  279.655269][T14824] total_writeback 0
[  279.659102][T14824] total_workingset_refault_anon 141
[  279.664306][T14824] total_workingset_refault_file 3691
[  279.669594][T14824] total_swap 16977920
[  279.673564][T14824] total_swapcached 0
[  279.677462][T14824] total_pgpgin 462829
[  279.681458][T14824] total_pgpgout 462826
[  279.685518][T14824] total_pgfault 275933
[  279.689703][T14824] total_pgmajfault 72
[  279.693683][T14824] total_inactive_anon 0
[  279.697850][T14824] total_active_anon 0
[  279.701820][T14824] total_inactive_file 0
[  279.705967][T14824] total_active_file 12288
[  279.710301][T14824] total_unevictable 0
[  279.714370][T14824] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3874,pid=14824,uid=0
[  279.729213][T14824] Memory cgroup out of memory: Killed process 14824 (syz.0.3874) total-vm:93824kB, anon-rss:1120kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  279.797976][T14852] netlink: 'syz.3.3884': attribute type 39 has an invalid length.
[  279.810650][T14852] bridge0: entered promiscuous mode
[  279.815918][T14852] macsec1: entered promiscuous mode
[  279.822137][T14852] bridge0: port 3(macsec1) entered blocking state
[  279.828674][T14852] bridge0: port 3(macsec1) entered disabled state
[  279.835260][T14852] macsec1: entered allmulticast mode
[  279.840646][T14852] bridge0: entered allmulticast mode
[  279.856871][T14852] macsec1: left allmulticast mode
[  279.861954][T14852] bridge0: left allmulticast mode
[  279.877464][T14852] bridge0: left promiscuous mode
[  279.900934][T14857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3885'.
[  280.001472][T14864] SELinux: syz.3.3887 (14864) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  280.055578][T14866] loop2: detected capacity change from 0 to 1024
[  280.062875][T14866] EXT4-fs: Ignoring removed orlov option
[  280.104481][ T3404] kernel write not supported for file bpf-prog (pid: 3404 comm: kworker/1:3)
[  280.130386][T14876] netlink: 'syz.0.3892': attribute type 1 has an invalid length.
[  280.147892][T14876] Failed to initialize the IGMP autojoin socket (err -2)
[  280.263168][ T3389] kernel write not supported for file bpf-prog (pid: 3389 comm: kworker/0:5)
[  280.279267][T14887] Failed to initialize the IGMP autojoin socket (err -2)
[  280.388293][T14895] bridge0: entered promiscuous mode
[  280.393658][T14895] macsec1: entered promiscuous mode
[  280.400405][T14895] bridge0: port 3(macsec1) entered blocking state
[  280.406898][T14895] bridge0: port 3(macsec1) entered disabled state
[  280.414475][T14895] macsec1: entered allmulticast mode
[  280.419808][T14895] bridge0: entered allmulticast mode
[  280.426087][T14895] macsec1: left allmulticast mode
[  280.431200][T14895] bridge0: left allmulticast mode
[  280.438992][T14895] bridge0: left promiscuous mode
[  280.473526][T14893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3899'.
[  280.539188][T14903] loop2: detected capacity change from 0 to 512
[  280.547982][T14903] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.3902: corrupted in-inode xattr: invalid ea_ino
[  280.562572][T14903] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3902: couldn't read orphan inode 15 (err -117)
[  280.592166][ T3404] kernel write not supported for file bpf-prog (pid: 3404 comm: kworker/1:3)
[  280.653271][T14914] validate_nla: 2 callbacks suppressed
[  280.653291][T14914] netlink: 'syz.2.3907': attribute type 1 has an invalid length.
[  280.677884][ T3389] kernel write not supported for file bpf-prog (pid: 3389 comm: kworker/0:5)
[  280.684056][T14914] Failed to initialize the IGMP autojoin socket (err -2)
[  280.781068][T14925] netlink: 'syz.0.3912': attribute type 39 has an invalid length.
[  280.793422][T14925] bridge0: entered promiscuous mode
[  280.799027][T14925] macsec1: entered promiscuous mode
[  280.805190][T14925] bridge0: port 3(macsec1) entered blocking state
[  280.811746][T14925] bridge0: port 3(macsec1) entered disabled state
[  280.818618][T14925] macsec1: entered allmulticast mode
[  280.823931][T14925] bridge0: entered allmulticast mode
[  280.829781][T14925] macsec1: left allmulticast mode
[  280.834826][T14925] bridge0: left allmulticast mode
[  280.840710][T14925] bridge0: left promiscuous mode
[  280.942218][T14927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3911'.
[  281.129712][ T3404] kernel write not supported for file bpf-prog (pid: 3404 comm: kworker/1:3)
[  281.152590][T14948] FAULT_INJECTION: forcing a failure.
[  281.152590][T14948] name failslab, interval 1, probability 0, space 0, times 0
[  281.165462][T14948] CPU: 0 UID: 0 PID: 14948 Comm: syz.0.3921 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  281.165535][T14948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  281.165552][T14948] Call Trace:
[  281.165559][T14948]  <TASK>
[  281.165568][T14948]  __dump_stack+0x1d/0x30
[  281.165593][T14948]  dump_stack_lvl+0xe8/0x140
[  281.165612][T14948]  dump_stack+0x15/0x1b
[  281.165684][T14948]  should_fail_ex+0x265/0x280
[  281.165710][T14948]  should_failslab+0x8c/0xb0
[  281.165729][T14948]  kmem_cache_alloc_noprof+0x50/0x310
[  281.165814][T14948]  ? mm_alloc+0x2b/0xa0
[  281.165874][T14948]  mm_alloc+0x2b/0xa0
[  281.165897][T14948]  alloc_bprm+0x20e/0x350
[  281.165935][T14948]  do_execveat_common+0x12e/0x750
[  281.165970][T14948]  __x64_sys_execve+0x5c/0x70
[  281.166124][T14948]  x64_sys_call+0x271a/0x3000
[  281.166143][T14948]  do_syscall_64+0xd2/0x200
[  281.166160][T14948]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  281.166225][T14948]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  281.166299][T14948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.166354][T14948] RIP: 0033:0x7eff2560eec9
[  281.166369][T14948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  281.166446][T14948] RSP: 002b:00007eff2406f038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  281.166469][T14948] RAX: ffffffffffffffda RBX: 00007eff25865fa0 RCX: 00007eff2560eec9
[  281.166483][T14948] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400
[  281.166496][T14948] RBP: 00007eff2406f090 R08: 0000000000000000 R09: 0000000000000000
[  281.166572][T14948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  281.166588][T14948] R13: 00007eff25866038 R14: 00007eff25865fa0 R15: 00007ffd6aad24e8
[  281.166612][T14948]  </TASK>
[  281.431905][T14952] Failed to initialize the IGMP autojoin socket (err -2)
[  281.493399][T14954] netlink: 'syz.4.3924': attribute type 39 has an invalid length.
[  281.505460][T14954] bridge0: entered promiscuous mode
[  281.510868][T14954] macsec1: entered promiscuous mode
[  281.517260][T14954] bridge0: port 3(macsec1) entered blocking state
[  281.523795][T14954] bridge0: port 3(macsec1) entered disabled state
[  281.530651][T14954] macsec1: entered allmulticast mode
[  281.535968][T14954] bridge0: entered allmulticast mode
[  281.541898][T14954] macsec1: left allmulticast mode
[  281.547006][T14954] bridge0: left allmulticast mode
[  281.552688][T14954] bridge0: left promiscuous mode
[  281.689554][   T29] kauditd_printk_skb: 425 callbacks suppressed
[  281.689612][   T29] audit: type=1326 audit(1759460304.358:24109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14970 comm="syz.4.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890ebfeec9 code=0x7ffc0000
[  281.693710][ T3373] kernel write not supported for file bpf-prog (pid: 3373 comm: kworker/0:3)
[  281.695839][   T29] audit: type=1326 audit(1759460304.358:24110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14970 comm="syz.4.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890ebfeec9 code=0x7ffc0000
[  281.695868][   T29] audit: type=1326 audit(1759460304.358:24111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14970 comm="syz.4.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f890ebfeec9 code=0x7ffc0000
[  281.775429][   T29] audit: type=1326 audit(1759460304.358:24112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14970 comm="syz.4.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890ebfeec9 code=0x7ffc0000
[  281.799523][   T29] audit: type=1326 audit(1759460304.358:24113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14970 comm="syz.4.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890ebfeec9 code=0x7ffc0000
[  281.823273][   T29] audit: type=1326 audit(1759460304.358:24114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14970 comm="syz.4.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f890ebfeec9 code=0x7ffc0000
[  281.846869][   T29] audit: type=1326 audit(1759460304.358:24115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14970 comm="syz.4.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890ebfeec9 code=0x7ffc0000
[  281.870465][   T29] audit: type=1326 audit(1759460304.358:24116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14970 comm="syz.4.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890ebfeec9 code=0x7ffc0000
[  281.894058][   T29] audit: type=1326 audit(1759460304.358:24117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14970 comm="syz.4.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f890ebfeec9 code=0x7ffc0000
[  281.917774][   T29] audit: type=1326 audit(1759460304.358:24118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14970 comm="syz.4.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890ebfeec9 code=0x7ffc0000
[  281.962666][T14979] SELinux: syz.0.3935 (14979) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  281.997707][T14974] netlink: 'syz.4.3933': attribute type 1 has an invalid length.
[  282.005477][T14974] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3933'.
[  282.037107][T14983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.045954][T14983] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.047185][T14981] Failed to initialize the IGMP autojoin socket (err -2)
[  282.145212][T14988] loop2: detected capacity change from 0 to 1024
[  282.151899][T14988] EXT4-fs: Ignoring removed orlov option
[  282.187016][T14993] netlink: 'syz.2.3939': attribute type 39 has an invalid length.
[  282.198775][T14993] bridge0: entered promiscuous mode
[  282.204016][T14993] macsec1: entered promiscuous mode
[  282.210103][T14993] bridge0: port 3(macsec1) entered blocking state
[  282.216760][T14993] bridge0: port 3(macsec1) entered disabled state
[  282.223641][T14993] macsec1: entered allmulticast mode
[  282.229014][T14993] bridge0: entered allmulticast mode
[  282.234775][T14993] macsec1: left allmulticast mode
[  282.239932][T14993] bridge0: left allmulticast mode
[  282.245357][T14993] bridge0: left promiscuous mode
[  282.350455][T15000] loop2: detected capacity change from 0 to 2048
[  282.428815][ T3373] kernel write not supported for file bpf-prog (pid: 3373 comm: kworker/0:3)
[  282.540543][T15006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3944'.
[  282.614548][T15013] loop2: detected capacity change from 0 to 512
[  282.649346][T15013] EXT4-fs mount: 19 callbacks suppressed
[  282.649362][T15013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.668957][T15013] ext4 filesystem being mounted at /263/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  282.684072][T15013] EXT4-fs: Cannot change journaled quota options when quota turned on
[  282.751957][T15011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3945'.
[  282.790406][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3948'.
[  282.800032][T15023] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3948'.
[  282.810065][T11544] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.843707][T15027] netlink: 'syz.1.3950': attribute type 39 has an invalid length.
[  282.856890][T15027] bridge0: entered promiscuous mode
[  282.862170][T15027] macsec1: entered promiscuous mode
[  282.868726][T15027] bridge0: port 3(macsec1) entered blocking state
[  282.875352][T15027] bridge0: port 3(macsec1) entered disabled state
[  282.883258][T15027] macsec1: entered allmulticast mode
[  282.888624][T15027] bridge0: entered allmulticast mode
[  282.894579][T15027] macsec1: left allmulticast mode
[  282.899751][T15027] bridge0: left allmulticast mode
[  282.905565][T15027] bridge0: left promiscuous mode
[  282.914269][T15026] Failed to initialize the IGMP autojoin socket (err -2)
[  282.953908][T15035] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3953'.
[  282.983789][ T3373] kernel write not supported for file bpf-prog (pid: 3373 comm: kworker/0:3)
[  283.106424][T15043] netlink: 'syz.1.3955': attribute type 1 has an invalid length.
[  283.114263][T15043] netlink: 'syz.1.3955': attribute type 2 has an invalid length.
[  283.123596][T15048] SELinux: syz.2.3957 (15048) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  283.169543][T15042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3956'.
[  283.990576][T15053] loop4: detected capacity change from 0 to 512
[  284.007120][T15053] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  284.015215][T15053] EXT4-fs (loop4): orphan cleanup on readonly fs
[  284.022798][T15053] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.3958: corrupted inode contents
[  284.035142][T15053] EXT4-fs (loop4): Remounting filesystem read-only
[  284.042753][T15053] EXT4-fs (loop4): 1 truncate cleaned up
[  284.048633][ T3319] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  284.059236][ T3319] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  284.069859][ T3319] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  284.080497][T15053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  284.096472][T15053] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  284.103088][T15053] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  284.110613][T15053] vhci_hcd vhci_hcd.0: Device attached
[  284.139841][T15058] vhci_hcd: connection closed
[  284.140143][   T51] vhci_hcd: stop threads
[  284.149210][   T51] vhci_hcd: release socket
[  284.153711][   T51] vhci_hcd: disconnect device
[  284.223632][T15067] loop1: detected capacity change from 0 to 1024
[  284.230499][T15067] EXT4-fs: Ignoring removed orlov option
[  284.248128][T15067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.270982][T12519] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.359648][T15078] netlink: 'syz.1.3965': attribute type 39 has an invalid length.
[  284.371270][T15078] bridge0: entered promiscuous mode
[  284.376690][T15078] macsec1: entered promiscuous mode
[  284.382993][T15078] bridge0: port 3(macsec1) entered blocking state
[  284.389601][T15078] bridge0: port 3(macsec1) entered disabled state
[  284.396210][T15078] macsec1: entered allmulticast mode
[  284.401590][T15078] bridge0: entered allmulticast mode
[  284.407608][T15078] macsec1: left allmulticast mode
[  284.412790][T15078] bridge0: left allmulticast mode
[  284.418527][T15078] bridge0: left promiscuous mode
[  284.484390][   T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1)
[  284.599684][T15088] SELinux: failed to load policy
[  284.649484][T15090] FAULT_INJECTION: forcing a failure.
[  284.649484][T15090] name failslab, interval 1, probability 0, space 0, times 0
[  284.662256][T15090] CPU: 1 UID: 0 PID: 15090 Comm: syz.1.3970 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  284.662292][T15090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  284.662315][T15090] Call Trace:
[  284.662323][T15090]  <TASK>
[  284.662332][T15090]  __dump_stack+0x1d/0x30
[  284.662353][T15090]  dump_stack_lvl+0xe8/0x140
[  284.662372][T15090]  dump_stack+0x15/0x1b
[  284.662497][T15090]  should_fail_ex+0x265/0x280
[  284.662522][T15090]  should_failslab+0x8c/0xb0
[  284.662542][T15090]  kmem_cache_alloc_noprof+0x50/0x310
[  284.662567][T15090]  ? skb_clone+0x151/0x1f0
[  284.662596][T15090]  skb_clone+0x151/0x1f0
[  284.662625][T15090]  __netlink_deliver_tap+0x2c9/0x500
[  284.662655][T15090]  ? netlink_attachskb+0x2d0/0x600
[  284.662757][T15090]  netlink_sendskb+0x126/0x150
[  284.662781][T15090]  netlink_unicast+0x2a2/0x690
[  284.662806][T15090]  netlink_ack+0x4c8/0x500
[  284.662833][T15090]  netlink_rcv_skb+0x192/0x220
[  284.662858][T15090]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  284.663000][T15090]  rtnetlink_rcv+0x1c/0x30
[  284.663038][T15090]  netlink_unicast+0x5bd/0x690
[  284.663063][T15090]  netlink_sendmsg+0x58b/0x6b0
[  284.663163][T15090]  ? __pfx_netlink_sendmsg+0x10/0x10
[  284.663190][T15090]  __sock_sendmsg+0x142/0x180
[  284.663225][T15090]  ____sys_sendmsg+0x31e/0x4e0
[  284.663291][T15090]  ___sys_sendmsg+0x17b/0x1d0
[  284.663332][T15090]  __x64_sys_sendmsg+0xd4/0x160
[  284.663364][T15090]  x64_sys_call+0x191e/0x3000
[  284.663484][T15090]  do_syscall_64+0xd2/0x200
[  284.663503][T15090]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  284.663531][T15090]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  284.663563][T15090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.663586][T15090] RIP: 0033:0x7f932b6ceec9
[  284.663616][T15090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  284.663635][T15090] RSP: 002b:00007f932a12f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  284.663654][T15090] RAX: ffffffffffffffda RBX: 00007f932b925fa0 RCX: 00007f932b6ceec9
[  284.663667][T15090] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  284.663679][T15090] RBP: 00007f932a12f090 R08: 0000000000000000 R09: 0000000000000000
[  284.663692][T15090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  284.663704][T15090] R13: 00007f932b926038 R14: 00007f932b925fa0 R15: 00007fff8a547f68
[  284.663723][T15090]  </TASK>
[  284.904035][T13022] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.971539][T15102] netlink: 'syz.1.3976': attribute type 39 has an invalid length.
[  284.985569][T15102] bridge0: entered promiscuous mode
[  284.989691][ T3373] kernel write not supported for file bpf-prog (pid: 3373 comm: kworker/0:3)
[  284.991299][T15102] macsec1: entered promiscuous mode
[  285.007455][T15102] bridge0: port 3(macsec1) entered blocking state
[  285.013987][T15102] bridge0: port 3(macsec1) entered disabled state
[  285.021569][T15102] macsec1: entered allmulticast mode
[  285.023073][T15106] FAULT_INJECTION: forcing a failure.
[  285.023073][T15106] name failslab, interval 1, probability 0, space 0, times 0
[  285.027003][T15102] bridge0: entered allmulticast mode
[  285.039617][T15106] CPU: 0 UID: 0 PID: 15106 Comm: syz.4.3978 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  285.039650][T15106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  285.039678][T15106] Call Trace:
[  285.039689][T15106]  <TASK>
[  285.039700][T15106]  __dump_stack+0x1d/0x30
[  285.039791][T15106]  dump_stack_lvl+0xe8/0x140
[  285.039842][T15106]  dump_stack+0x15/0x1b
[  285.039866][T15106]  should_fail_ex+0x265/0x280
[  285.039900][T15106]  ? pagemap_read+0x184/0x5e0
[  285.039994][T15106]  should_failslab+0x8c/0xb0
[  285.040022][T15106]  __kmalloc_cache_noprof+0x4c/0x320
[  285.040061][T15106]  pagemap_read+0x184/0x5e0
[  285.040091][T15106]  ? __pfx_pagemap_read+0x10/0x10
[  285.040185][T15106]  vfs_read+0x1a8/0x770
[  285.040228][T15106]  ? __fget_files+0x184/0x1c0
[  285.040253][T15106]  ? __rcu_read_unlock+0x4f/0x70
[  285.040320][T15106]  ? __fget_files+0x184/0x1c0
[  285.040350][T15106]  __x64_sys_pread64+0xfd/0x150
[  285.040378][T15106]  x64_sys_call+0x29e6/0x3000
[  285.040409][T15106]  do_syscall_64+0xd2/0x200
[  285.040449][T15106]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  285.040486][T15106]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  285.040557][T15106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.040588][T15106] RIP: 0033:0x7f890ebfeec9
[  285.040610][T15106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  285.040636][T15106] RSP: 002b:00007f890d65f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  285.040663][T15106] RAX: ffffffffffffffda RBX: 00007f890ee55fa0 RCX: 00007f890ebfeec9
[  285.040681][T15106] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 0000000000000006
[  285.040697][T15106] RBP: 00007f890d65f090 R08: 0000000000000000 R09: 0000000000000000
[  285.040797][T15106] R10: 0000000fffff7ff8 R11: 0000000000000246 R12: 0000000000000001
[  285.040815][T15106] R13: 00007f890ee56038 R14: 00007f890ee55fa0 R15: 00007ffe01f1b328
[  285.040841][T15106]  </TASK>
[  285.240244][T15102] macsec1: left allmulticast mode
[  285.245394][T15102] bridge0: left allmulticast mode
[  285.253380][T15102] bridge0: left promiscuous mode
[  285.284208][T15117] loop3: detected capacity change from 0 to 2048
[  285.332405][T15117]  loop3: p1 < > p4 < >
[  285.348025][T15121] FAULT_INJECTION: forcing a failure.
[  285.348025][T15121] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  285.361243][T15121] CPU: 0 UID: 0 PID: 15121 Comm: syz.1.3985 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  285.361270][T15121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  285.361285][T15121] Call Trace:
[  285.361294][T15121]  <TASK>
[  285.361304][T15121]  __dump_stack+0x1d/0x30
[  285.361329][T15121]  dump_stack_lvl+0xe8/0x140
[  285.361351][T15121]  dump_stack+0x15/0x1b
[  285.361440][T15121]  should_fail_ex+0x265/0x280
[  285.361463][T15121]  should_fail+0xb/0x20
[  285.361522][T15121]  should_fail_usercopy+0x1a/0x20
[  285.361604][T15121]  strncpy_from_user+0x25/0x230
[  285.361644][T15121]  ? kmem_cache_alloc_noprof+0x186/0x310
[  285.361705][T15121]  ? getname_flags+0x80/0x3b0
[  285.361735][T15121]  getname_flags+0xae/0x3b0
[  285.361763][T15121]  do_sys_openat2+0x60/0x110
[  285.361831][T15121]  __x64_sys_openat+0xf2/0x120
[  285.361867][T15121]  x64_sys_call+0x2eab/0x3000
[  285.361895][T15121]  do_syscall_64+0xd2/0x200
[  285.361961][T15121]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  285.361994][T15121]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  285.362035][T15121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.362062][T15121] RIP: 0033:0x7f932b6cd710
[  285.362127][T15121] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[  285.362225][T15121] RSP: 002b:00007f932a12cef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  285.362249][T15121] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f932b6cd710
[  285.362264][T15121] RDX: 0000000000000002 RSI: 00007f932b751c6c RDI: 00000000ffffff9c
[  285.362279][T15121] RBP: 00007f932b751c6c R08: 0000000000000000 R09: 0000000000000000
[  285.362295][T15121] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  285.362309][T15121] R13: 0000000000000036 R14: 0000200000000000 R15: 00007fff8a547f68
[  285.362357][T15121]  </TASK>
[  285.581498][ T3373] kernel write not supported for file bpf-prog (pid: 3373 comm: kworker/0:3)
[  285.803785][T15147] SELinux: failed to load policy
[  285.809532][T15147] __nla_validate_parse: 3 callbacks suppressed
[  285.809546][T15147] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3994'.
[  285.848214][ T3373] kernel write not supported for file bpf-prog (pid: 3373 comm: kworker/0:3)
[  285.850521][   T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1)
[  285.915726][ T3373] kernel write not supported for file bpf-prog (pid: 3373 comm: kworker/0:3)
[  285.948498][T15163] FAULT_INJECTION: forcing a failure.
[  285.948498][T15163] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  285.961611][T15163] CPU: 0 UID: 0 PID: 15163 Comm: syz.4.4002 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  285.961693][T15163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  285.961710][T15163] Call Trace:
[  285.961719][T15163]  <TASK>
[  285.961729][T15163]  __dump_stack+0x1d/0x30
[  285.961770][T15163]  dump_stack_lvl+0xe8/0x140
[  285.961799][T15163]  dump_stack+0x15/0x1b
[  285.961817][T15163]  should_fail_ex+0x265/0x280
[  285.961840][T15163]  should_fail+0xb/0x20
[  285.961859][T15163]  should_fail_usercopy+0x1a/0x20
[  285.961897][T15163]  _copy_to_user+0x20/0xa0
[  285.961935][T15163]  simple_read_from_buffer+0xb5/0x130
[  285.961976][T15163]  proc_fail_nth_read+0x10e/0x150
[  285.962021][T15163]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  285.962043][T15163]  vfs_read+0x1a8/0x770
[  285.962075][T15163]  ? __rcu_read_unlock+0x4f/0x70
[  285.962144][T15163]  ? __fget_files+0x184/0x1c0
[  285.962179][T15163]  ksys_read+0xda/0x1a0
[  285.962220][T15163]  __x64_sys_read+0x40/0x50
[  285.962278][T15163]  x64_sys_call+0x27c0/0x3000
[  285.962303][T15163]  do_syscall_64+0xd2/0x200
[  285.962322][T15163]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  285.962351][T15163]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  285.962441][T15163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.962465][T15163] RIP: 0033:0x7f890ebfd8dc
[  285.962531][T15163] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  285.962549][T15163] RSP: 002b:00007f890d65f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  285.962570][T15163] RAX: ffffffffffffffda RBX: 00007f890ee55fa0 RCX: 00007f890ebfd8dc
[  285.962584][T15163] RDX: 000000000000000f RSI: 00007f890d65f0a0 RDI: 0000000000000003
[  285.962650][T15163] RBP: 00007f890d65f090 R08: 0000000000000000 R09: 0000000000000000
[  285.962663][T15163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  285.962676][T15163] R13: 00007f890ee56038 R14: 00007f890ee55fa0 R15: 00007ffe01f1b328
[  285.962758][T15163]  </TASK>
[  286.180641][T15165] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4003'.
[  286.195237][T15165] loop4: detected capacity change from 0 to 1024
[  286.204652][T15165] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.4003: Failed to acquire dquot type 0
[  286.217133][T15165] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  286.223934][T15161] SELinux: failed to load policy
[  286.232135][T15165] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.4003: corrupted inode contents
[  286.248685][T15165] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.4003: mark_inode_dirty error
[  286.260167][T15165] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.4003: corrupted inode contents
[  286.272313][T15165] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.4003: mark_inode_dirty error
[  286.283977][T15165] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.4003: corrupted inode contents
[  286.297202][T15165] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  286.309182][T15165] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.4003: corrupted inode contents
[  286.321490][T15165] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.4003: mark_inode_dirty error
[  286.334417][T15165] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  286.353962][T15165] EXT4-fs (loop4): 1 truncate cleaned up
[  286.361145][T15171] loop1: detected capacity change from 0 to 4096
[  286.373630][T15165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.387509][T15165] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.4003: Failed to acquire dquot type 0
[  286.389338][T15173] Failed to initialize the IGMP autojoin socket (err -2)
[  286.413414][T15171] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4004'.
[  286.424555][T13022] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.455629][ T3625] kernel write not supported for file bpf-prog (pid: 3625 comm: kworker/1:4)
[  286.557125][T15189] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4013'.
[  286.587891][T15191] netlink: 'syz.3.4014': attribute type 1 has an invalid length.
[  286.592729][T15193] loop4: detected capacity change from 0 to 128
[  286.595649][T15191] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4014'.
[  286.624437][T15193] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  286.638030][T15193] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 7 (only 1 groups)
[  286.665871][T13022] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  286.681693][   T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1)
[  286.699216][T15204] FAULT_INJECTION: forcing a failure.
[  286.699216][T15204] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  286.712470][T15204] CPU: 1 UID: 0 PID: 15204 Comm: syz.4.4017 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  286.712501][T15204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  286.712515][T15204] Call Trace:
[  286.712522][T15204]  <TASK>
[  286.712594][T15204]  __dump_stack+0x1d/0x30
[  286.712621][T15204]  dump_stack_lvl+0xe8/0x140
[  286.712645][T15204]  dump_stack+0x15/0x1b
[  286.712666][T15204]  should_fail_ex+0x265/0x280
[  286.712692][T15204]  should_fail+0xb/0x20
[  286.712714][T15204]  should_fail_usercopy+0x1a/0x20
[  286.712759][T15204]  _copy_to_user+0x20/0xa0
[  286.712815][T15204]  simple_read_from_buffer+0xb5/0x130
[  286.712850][T15204]  proc_fail_nth_read+0x10e/0x150
[  286.712875][T15204]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  286.712898][T15204]  vfs_read+0x1a8/0x770
[  286.713009][T15204]  ? __rcu_read_unlock+0x4f/0x70
[  286.713033][T15204]  ? __fget_files+0x184/0x1c0
[  286.713109][T15204]  ksys_read+0xda/0x1a0
[  286.713143][T15204]  __x64_sys_read+0x40/0x50
[  286.713176][T15204]  x64_sys_call+0x27c0/0x3000
[  286.713209][T15204]  do_syscall_64+0xd2/0x200
[  286.713229][T15204]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  286.713264][T15204]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  286.713296][T15204]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.713320][T15204] RIP: 0033:0x7f890ebfd8dc
[  286.713349][T15204] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  286.713377][T15204] RSP: 002b:00007f890d65f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  286.713397][T15204] RAX: ffffffffffffffda RBX: 00007f890ee55fa0 RCX: 00007f890ebfd8dc
[  286.713410][T15204] RDX: 000000000000000f RSI: 00007f890d65f0a0 RDI: 0000000000000005
[  286.713454][T15204] RBP: 00007f890d65f090 R08: 0000000000000000 R09: 0000000000000000
[  286.713467][T15204] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[  286.713480][T15204] R13: 00007f890ee56038 R14: 00007f890ee55fa0 R15: 00007ffe01f1b328
[  286.713563][T15204]  </TASK>
[  286.714428][T15208] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4021'.
[  286.961279][   T29] kauditd_printk_skb: 396 callbacks suppressed
[  286.961297][   T29] audit: type=1326 audit(287.724:24503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932b6ceec9 code=0x7ffc0000
[  286.992000][   T29] audit: type=1326 audit(287.734:24504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932b6ceec9 code=0x7ffc0000
[  287.015293][   T29] audit: type=1326 audit(287.734:24505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f932b6ceec9 code=0x7ffc0000
[  287.038334][   T29] audit: type=1326 audit(287.734:24506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932b6ceec9 code=0x7ffc0000
[  287.061788][   T29] audit: type=1326 audit(287.734:24507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f932b6ceec9 code=0x7ffc0000
[  287.085004][   T29] audit: type=1326 audit(287.734:24508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932b6ceec9 code=0x7ffc0000
[  287.108073][   T29] audit: type=1326 audit(287.734:24509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f932b6ceec9 code=0x7ffc0000
[  287.122575][ T3625] kernel write not supported for file bpf-prog (pid: 3625 comm: kworker/1:4)
[  287.131137][   T29] audit: type=1326 audit(287.734:24510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932b6ceec9 code=0x7ffc0000
[  287.163107][   T29] audit: type=1326 audit(287.734:24511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f932b6ceec9 code=0x7ffc0000
[  287.187268][   T29] audit: type=1326 audit(287.844:24512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932b6ceec9 code=0x7ffc0000
[  287.231663][T15225] netlink: 'syz.1.4027': attribute type 1 has an invalid length.
[  287.239653][T15225] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4027'.
[  287.313706][ T3625] kernel write not supported for file bpf-prog (pid: 3625 comm: kworker/1:4)
[  287.336816][T15234] SELinux:  policydb magic number 0x61746162 does not match expected magic number 0xf97cff8c
[  287.366824][T15234] SELinux: failed to load policy
[  287.371842][T15238] can: request_module (can-proto-5) failed.
[  287.472248][T15246] SELinux: syz.0.4036 (15246) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  287.903814][T15251] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.4037'.
[  287.928728][T15253] netlink: 'syz.4.4038': attribute type 39 has an invalid length.
[  287.941381][T15253] bridge0: entered promiscuous mode
[  287.946710][T15253] macsec1: entered promiscuous mode
[  287.952959][T15253] bridge0: port 3(macsec1) entered blocking state
[  287.959815][T15253] bridge0: port 3(macsec1) entered disabled state
[  287.966643][T15253] macsec1: entered allmulticast mode
[  287.971954][T15253] bridge0: entered allmulticast mode
[  287.977755][T15253] macsec1: left allmulticast mode
[  287.982816][T15253] bridge0: left allmulticast mode
[  287.988763][T15253] bridge0: left promiscuous mode
[  288.084535][T15258] netlink: 'syz.4.4040': attribute type 1 has an invalid length.
[  288.092371][T15258] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4040'.
[  288.123566][T15262] netlink: 'syz.4.4041': attribute type 10 has an invalid length.
[  288.132915][T15261] SELinux: failed to load policy
[  288.138967][T15261] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4042'.
[  288.190684][T15266] Failed to initialize the IGMP autojoin socket (err -2)
[  288.233775][T15274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.239909][T15276] netlink: 'syz.2.4049': attribute type 39 has an invalid length.
[  288.242383][T15274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.268696][T15276] bridge0: entered promiscuous mode
[  288.269770][T15274] loop4: detected capacity change from 0 to 1024
[  288.274236][T15276] macsec1: entered promiscuous mode
[  288.286975][T15276] bridge0: port 3(macsec1) entered blocking state
[  288.293478][T15276] bridge0: port 3(macsec1) entered disabled state
[  288.298897][T15274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.300218][T15276] macsec1: entered allmulticast mode
[  288.317340][T15276] bridge0: entered allmulticast mode
[  288.340261][T15276] macsec1: left allmulticast mode
[  288.345448][T15276] bridge0: left allmulticast mode
[  288.361524][T15276] bridge0: left promiscuous mode
[  288.440549][T15290] loop1: detected capacity change from 0 to 1024
[  288.447823][T15290] EXT4-fs: Ignoring removed orlov option
[  288.458180][T15290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.481398][T12519] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.526510][T15299] SELinux: failed to load policy
[  288.532455][T15301] SELinux: syz.2.4058 (15301) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  288.637013][T15310] Failed to initialize the IGMP autojoin socket (err -2)
[  288.789078][T15316] netlink: 'syz.1.4064': attribute type 39 has an invalid length.
[  288.802314][T15316] bridge0: entered promiscuous mode
[  288.807860][T15316] macsec1: entered promiscuous mode
[  288.813959][T15316] bridge0: port 3(macsec1) entered blocking state
[  288.820435][T15316] bridge0: port 3(macsec1) entered disabled state
[  288.826964][T15316] macsec1: entered allmulticast mode
[  288.832250][T15316] bridge0: entered allmulticast mode
[  288.838264][T15316] macsec1: left allmulticast mode
[  288.843342][T15316] bridge0: left allmulticast mode
[  288.849276][T15316] bridge0: left promiscuous mode
[  288.929334][T15319] loop1: detected capacity change from 0 to 1024
[  288.936193][T15319] EXT4-fs: Ignoring removed orlov option
[  288.948074][T15319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.970465][T12519] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.038246][T15329] SELinux: failed to load policy
[  289.078256][T15333] FAULT_INJECTION: forcing a failure.
[  289.078256][T15333] name failslab, interval 1, probability 0, space 0, times 0
[  289.091039][T15333] CPU: 1 UID: 0 PID: 15333 Comm: syz.1.4071 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  289.091073][T15333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  289.091188][T15333] Call Trace:
[  289.091194][T15333]  <TASK>
[  289.091201][T15333]  __dump_stack+0x1d/0x30
[  289.091257][T15333]  dump_stack_lvl+0xe8/0x140
[  289.091274][T15333]  dump_stack+0x15/0x1b
[  289.091289][T15333]  should_fail_ex+0x265/0x280
[  289.091311][T15333]  should_failslab+0x8c/0xb0
[  289.091328][T15333]  __kmalloc_noprof+0xa5/0x3e0
[  289.091358][T15333]  ? tracepoint_probe_unregister+0x168/0x650
[  289.091390][T15333]  ? __pfx___bpf_trace_kfree+0x10/0x10
[  289.091412][T15333]  tracepoint_probe_unregister+0x168/0x650
[  289.091530][T15333]  ? __pfx_bpf_link_release+0x10/0x10
[  289.091559][T15333]  bpf_probe_unregister+0x37/0x50
[  289.091585][T15333]  bpf_raw_tp_link_release+0x27/0x50
[  289.091650][T15333]  bpf_link_free+0xab/0x340
[  289.091743][T15333]  ? __pfx_bpf_link_release+0x10/0x10
[  289.091772][T15333]  bpf_link_release+0x45/0x60
[  289.091800][T15333]  __fput+0x298/0x650
[  289.091897][T15333]  ____fput+0x1c/0x30
[  289.091919][T15333]  task_work_run+0x12e/0x1a0
[  289.091943][T15333]  exit_to_user_mode_loop+0xe1/0xf0
[  289.091965][T15333]  do_syscall_64+0x1d6/0x200
[  289.091982][T15333]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  289.092151][T15333]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  289.092238][T15333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.092374][T15333] RIP: 0033:0x7f932b6ceec9
[  289.092387][T15333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  289.092464][T15333] RSP: 002b:00007f932a12f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  289.092480][T15333] RAX: 0000000000000000 RBX: 00007f932b925fa0 RCX: 00007f932b6ceec9
[  289.092491][T15333] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000
[  289.092502][T15333] RBP: 00007f932a12f090 R08: 0000000000000000 R09: 0000000000000000
[  289.092513][T15333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  289.092523][T15333] R13: 00007f932b926038 R14: 00007f932b925fa0 R15: 00007fff8a547f68
[  289.092541][T15333]  </TASK>
[  289.507362][T13022] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.542757][T15338] Failed to initialize the IGMP autojoin socket (err -2)
[  289.610742][T15342] loop1: detected capacity change from 0 to 512
[  289.627093][T15342] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  289.635261][T15344] loop4: detected capacity change from 0 to 1024
[  289.635301][T15342] EXT4-fs (loop1): orphan cleanup on readonly fs
[  289.642311][T15344] EXT4-fs: Ignoring removed orlov option
[  289.651418][T15342] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.4075: corrupted inode contents
[  289.665905][T15342] EXT4-fs (loop1): Remounting filesystem read-only
[  289.672676][T15342] EXT4-fs (loop1): 1 truncate cleaned up
[  289.674297][T15344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  289.690652][ T3319] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  289.701229][ T3319] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  289.721159][ T3319] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  289.732361][T15342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  289.733247][T13022] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.749201][T15342] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  289.760241][T15342] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  289.767798][T15342] vhci_hcd vhci_hcd.0: Device attached
[  289.788170][T15349] vhci_hcd: connection closed
[  289.788311][   T56] vhci_hcd: stop threads
[  289.797373][   T56] vhci_hcd: release socket
[  289.801924][   T56] vhci_hcd: disconnect device
[  289.808975][ T3404] warn_unsupported: 5 callbacks suppressed
[  289.808989][ T3404] kernel write not supported for file bpf-prog (pid: 3404 comm: kworker/1:3)
[  289.840414][T15358] SELinux: failed to load policy
[  289.848244][T15360] tracefs: Bad value for 'uid'
[  289.853043][T15360] tracefs: Bad value for 'uid'
[  289.870984][T15362] loop3: detected capacity change from 0 to 512
[  289.888062][T15362] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  289.896061][T15362] EXT4-fs (loop3): orphan cleanup on readonly fs
[  289.896152][T15364] loop4: detected capacity change from 0 to 4096
[  289.904218][T15362] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.4082: corrupted inode contents
[  289.920959][T15362] EXT4-fs (loop3): Remounting filesystem read-only
[  289.927647][T15362] EXT4-fs (loop3): 1 truncate cleaned up
[  289.933383][  T292] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  289.943961][  T292] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  289.944004][  T292] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  289.968428][T15362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  289.988919][T15362] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[  289.995469][T15362] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  290.003028][T15362] vhci_hcd vhci_hcd.0: Device attached
[  290.010552][T15370] FAULT_INJECTION: forcing a failure.
[  290.010552][T15370] name failslab, interval 1, probability 0, space 0, times 0
[  290.023278][T15370] CPU: 0 UID: 0 PID: 15370 Comm: syz.4.4084 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  290.023311][T15370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  290.023325][T15370] Call Trace:
[  290.023332][T15370]  <TASK>
[  290.023340][T15370]  __dump_stack+0x1d/0x30
[  290.023365][T15370]  dump_stack_lvl+0xe8/0x140
[  290.023388][T15370]  dump_stack+0x15/0x1b
[  290.023486][T15370]  should_fail_ex+0x265/0x280
[  290.023512][T15370]  should_failslab+0x8c/0xb0
[  290.023535][T15370]  kmem_cache_alloc_node_noprof+0x57/0x320
[  290.023622][T15370]  ? dup_task_struct+0x70/0x6a0
[  290.023655][T15370]  dup_task_struct+0x70/0x6a0
[  290.023683][T15370]  ? _parse_integer+0x27/0x40
[  290.023707][T15370]  copy_process+0x399/0x2000
[  290.023734][T15370]  ? kstrtouint+0x76/0xc0
[  290.023766][T15370]  ? kstrtouint_from_user+0x9f/0xf0
[  290.023791][T15370]  ? __rcu_read_unlock+0x4f/0x70
[  290.023861][T15370]  kernel_clone+0x16c/0x5c0
[  290.023892][T15370]  ? vfs_write+0x7e8/0x960
[  290.024000][T15370]  __x64_sys_clone+0xe6/0x120
[  290.024040][T15370]  x64_sys_call+0x119c/0x3000
[  290.024065][T15370]  do_syscall_64+0xd2/0x200
[  290.024085][T15370]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  290.024119][T15370]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  290.024155][T15370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.024180][T15370] RIP: 0033:0x7f890ebfeec9
[  290.024197][T15370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  290.024220][T15370] RSP: 002b:00007f890d65efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  290.024242][T15370] RAX: ffffffffffffffda RBX: 00007f890ee55fa0 RCX: 00007f890ebfeec9
[  290.024256][T15370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ae12e400
[  290.024269][T15370] RBP: 00007f890d65f090 R08: 0000000000000000 R09: 0000000000000000
[  290.024283][T15370] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  290.024297][T15370] R13: 00007f890ee56038 R14: 00007f890ee55fa0 R15: 00007ffe01f1b328
[  290.024317][T15370]  </TASK>
[  290.249186][T15372] 8021q: adding VLAN 0 to HW filter on device bond3
[  290.255863][T15367] vhci_hcd: connection closed
[  290.256415][ T3319] vhci_hcd: stop threads
[  290.265389][ T3319] vhci_hcd: release socket
[  290.269864][ T3319] vhci_hcd: disconnect device
[  290.274455][T15372] vlan0: entered allmulticast mode
[  290.279770][T15372] bond3: entered allmulticast mode
[  290.296305][ T3373] vhci_hcd: vhci_device speed not set
[  290.399821][T15377] loop4: detected capacity change from 0 to 1024
[  290.406737][T15377] EXT4-fs: Ignoring removed orlov option
[  290.417792][T15377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.441553][T13022] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.451189][T12519] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.471787][T15382] loop1: detected capacity change from 0 to 512
[  290.478506][T15382] EXT4-fs: Ignoring removed oldalloc option
[  290.488676][T15382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  290.521021][T12519] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 217: padding at end of block bitmap is not set
[  290.535834][T12519] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  290.545148][T12519] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  290.558181][T12519] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  290.768046][T15391] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.788480][T11808] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.808688][  T292] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.820981][T15393] SELinux: failed to load policy
[  290.827041][T15393] __nla_validate_parse: 5 callbacks suppressed
[  290.827126][T15393] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4093'.
[  290.861807][T15399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=15399 comm=syz.3.4095
[  290.875344][T15399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4095'.
[  290.892068][T15399] bond2: entered promiscuous mode
[  290.897317][T15399] 8021q: adding VLAN 0 to HW filter on device bond2
[  290.906436][  T292] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.918190][T15399] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x7
[  290.928935][T15399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4095'.
[  290.940944][T15399] bond2 (unregistering): Released all slaves
[  290.958029][  T292] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.978611][T15395] Failed to initialize the IGMP autojoin socket (err -2)
[  291.036987][T15408] loop3: detected capacity change from 0 to 512
[  291.044217][  T292] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.044503][T15408] EXT4-fs (loop3): orphan cleanup on readonly fs
[  291.061022][T15408] EXT4-fs warning (device loop3): ext4_xattr_inode_get:556: inode #11: comm syz.3.4096: EA inode hash validation failed
[  291.074383][T15408] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.4096: corrupted inode contents
[  291.090148][T15408] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #15: comm syz.3.4096: mark_inode_dirty error
[  291.103056][T15408] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.4096: corrupted inode contents
[  291.108796][T15395] chnl_net:caif_netlink_parms(): no params data found
[  291.122186][T15408] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #15: comm syz.3.4096: mark_inode_dirty error
[  291.136299][T15408] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #15: comm syz.3.4096: mark inode dirty (error -117)
[  291.150325][T15408] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117)
[  291.159544][T15408] EXT4-fs (loop3): 1 orphan inode deleted
[  291.165795][T15408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  291.187056][  T292] bridge_slave_1: left allmulticast mode
[  291.192813][  T292] bridge_slave_1: left promiscuous mode
[  291.198708][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.206670][T11808] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.215996][  T292] bridge_slave_0: left allmulticast mode
[  291.221704][  T292] bridge_slave_0: left promiscuous mode
[  291.227595][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.244985][T15415] loop3: detected capacity change from 0 to 512
[  291.257331][T15415] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.4097: casefold flag without casefold feature
[  291.273465][T15415] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.4097: couldn't read orphan inode 15 (err -117)
[  291.285953][T15415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.368814][  T292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.387872][  T292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  291.418324][  T292] bond0 (unregistering): Released all slaves
[  291.450144][T15395] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.454802][T15419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4098'.
[  291.457320][T15395] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.473488][T15395] bridge_slave_0: entered allmulticast mode
[  291.480412][T15395] bridge_slave_0: entered promiscuous mode
[  291.496539][T15395] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.503761][T15395] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.510991][T15395] bridge_slave_1: entered allmulticast mode
[  291.517707][T15395] bridge_slave_1: entered promiscuous mode
[  291.530941][  T292] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  291.538475][  T292] batman_adv: batadv0: Removing interface: batadv_slave_0
[  291.548045][  T292] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  291.555469][  T292] batman_adv: batadv0: Removing interface: batadv_slave_1
[  291.579378][  T292] veth1_macvtap: left promiscuous mode
[  291.585003][  T292] veth0_macvtap: left promiscuous mode
[  291.595781][T11808] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.600607][T15426] loop4: detected capacity change from 0 to 1024
[  291.612086][T15426] EXT4-fs: Ignoring removed nomblk_io_submit option
[  291.619166][T15426] EXT4-fs: Ignoring removed nobh option
[  291.628988][T15426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.644778][T15430] SELinux:  policydb version 0 does not match my version range 15-35
[  291.655074][T15430] SELinux: failed to load policy
[  291.760388][  T292] team0 (unregistering): Port device team_slave_1 removed
[  291.761108][T15437] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.4099: Allocating blocks 497-513 which overlap fs metadata
[  291.782051][  T292] team0 (unregistering): Port device team_slave_0 removed
[  291.807350][T15432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4101'.
[  291.848479][T15395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.864839][T15395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.899238][T15426] EXT4-fs (loop4): pa ffff8881076d65b0: logic 16, phys. 145, len 23
[  291.899958][T15395] team0: Port device team_slave_0 added
[  291.907367][T15426] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  291.915877][T15395] team0: Port device team_slave_1 added
[  291.959623][T15395] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.966676][T15395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.992631][T15395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.004369][T15395] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.007294][T13022] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.011448][T15395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.046191][T15395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  292.079575][T15395] hsr_slave_0: entered promiscuous mode
[  292.086165][T15395] hsr_slave_1: entered promiscuous mode
[  292.092193][T15395] debugfs: 'hsr0' already exists in 'hsr'
[  292.098147][T15395] Cannot create hsr debugfs directory
[  292.098629][T15442] SELinux: failed to load policy
[  292.111146][T15442] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4104'.
[  292.143028][T15446] loop4: detected capacity change from 0 to 512
[  292.170049][T15446] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  292.186421][T15446] EXT4-fs (loop4): orphan cleanup on readonly fs
[  292.206343][T15446] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.4105: corrupted inode contents
[  292.228368][T15446] EXT4-fs (loop4): Remounting filesystem read-only
[  292.231383][T15395] netdevsim netdevsim5 netdevsim0: renamed from eth5
[  292.242090][T15446] EXT4-fs (loop4): 1 truncate cleaned up
[  292.248203][T11775] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  292.250147][T15395] netdevsim netdevsim5 netdevsim1: renamed from eth6
[  292.258789][T11775] __quota_error: 364 callbacks suppressed
[  292.258802][T11775] Quota error (device loop4): write_blk: dquota write failed
[  292.258815][T11775] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries
[  292.258831][T11775] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  292.299367][T11775] Quota error (device loop4): write_blk: dquota write failed
[  292.306914][T11775] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list
[  292.316806][T11775] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  292.320386][T15395] netdevsim netdevsim5 netdevsim2: renamed from eth7
[  292.326931][T11775] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  292.342791][T11775] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  292.360455][T15446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  292.360588][T15395] netdevsim netdevsim5 netdevsim3: renamed from eth8
[  292.382426][T15446] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  292.389010][T15446] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  292.396642][T15446] vhci_hcd vhci_hcd.0: Device attached
[  292.449161][T15454] vhci_hcd: connection closed
[  292.449884][   T56] vhci_hcd: stop threads
[  292.458945][   T56] vhci_hcd: release socket
[  292.459549][   T29] audit: type=1326 audit(549.226:24865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15457 comm="syz.3.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fc0ceec9 code=0x7ffc0000
[  292.463390][   T56] vhci_hcd: disconnect device
[  292.493655][   T29] audit: type=1326 audit(549.256:24866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15457 comm="syz.3.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa6fc0ceec9 code=0x7ffc0000
[  292.516705][   T29] audit: type=1326 audit(549.256:24867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15457 comm="syz.3.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fc0ceec9 code=0x7ffc0000
[  292.539715][   T29] audit: type=1326 audit(549.256:24868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15457 comm="syz.3.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6fc0ceec9 code=0x7ffc0000
[  292.587642][T15395] 8021q: adding VLAN 0 to HW filter on device team0
[  292.594681][T15460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4108'.
[  292.605544][T15471] SELinux:  policydb version 0 does not match my version range 15-35
[  292.613948][T15471] SELinux: failed to load policy
[  292.625314][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.632479][ T3319] bridge0: port 1(bridge_slave_0) entered forwarding state
[  292.660844][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.668013][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[  292.750856][T15479] Failed to initialize the IGMP autojoin socket (err -2)
[  292.794477][T15395] 8021q: adding VLAN 0 to HW filter on device batadv0
[  292.863462][T15479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17903 sclass=netlink_route_socket pid=15479 comm=syz.3.4112
[  292.991606][T15395] veth0_vlan: entered promiscuous mode
[  293.002507][T15395] veth1_vlan: entered promiscuous mode
[  293.038421][T13022] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.056529][T15395] veth0_macvtap: entered promiscuous mode
[  293.074217][T15395] veth1_macvtap: entered promiscuous mode
[  293.134109][T15395] batman_adv: batadv0: Interface activated: batadv_slave_0
[  293.170932][T15395] batman_adv: batadv0: Interface activated: batadv_slave_1
[  293.198471][T15395] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  293.248320][T15395] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  293.286702][T15395] wireguard: wg0: Could not create IPv4 socket
[  293.304783][T15395] wireguard: wg1: Could not create IPv4 socket
[  293.328626][T15395] wireguard: wg2: Could not create IPv4 socket
[  293.584304][T15514] netlink: 'syz.2.4117': attribute type 39 has an invalid length.
[  293.612488][T15509] Failed to initialize the IGMP autojoin socket (err -2)
[  293.629722][T15514] bridge0: entered promiscuous mode
[  293.646572][T15514] macsec1: entered promiscuous mode
[  293.652903][T15514] bridge0: port 3(macsec1) entered blocking state
[  293.659448][T15514] bridge0: port 3(macsec1) entered disabled state
[  293.676602][T15514] macsec1: entered allmulticast mode
[  293.681993][T15514] bridge0: entered allmulticast mode
[  293.696916][T15516] SELinux: syz.5.4118 (15516) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  293.711225][T15514] macsec1: left allmulticast mode
[  293.716365][T15514] bridge0: left allmulticast mode
[  293.722401][T15514] bridge0: left promiscuous mode
[  293.742727][T15522] SELinux:  policydb version 0 does not match my version range 15-35
[  293.751390][T15522] SELinux: failed to load policy
[  293.769848][ T3404] kernel write not supported for file bpf-prog (pid: 3404 comm: kworker/1:3)
[  293.806975][T15531] loop3: detected capacity change from 0 to 512
[  293.841418][T15531] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.4123: casefold flag without casefold feature
[  293.856533][T15531] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.4123: couldn't read orphan inode 15 (err -117)
[  293.882681][T15531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.891743][   T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1)
[  293.904827][T15543] SELinux: syz.4.4127 (15543) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  294.109961][T11808] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.132292][ T9953] kernel write not supported for file bpf-prog (pid: 9953 comm: kworker/0:7)
[  294.138230][   T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1)
[  294.192472][T15565] netlink: 'syz.3.4137': attribute type 10 has an invalid length.
[  294.203294][T15565] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  294.215500][T15565] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  294.228021][T15565] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  294.242258][T15565] loop3: detected capacity change from 0 to 512
[  294.242328][T15568] Failed to initialize the IGMP autojoin socket (err -2)
[  294.259056][T15565] EXT4-fs (loop3): orphan cleanup on readonly fs
[  294.265982][T15565] EXT4-fs warning (device loop3): ext4_xattr_inode_get:556: inode #11: comm syz.3.4137: EA inode hash validation failed
[  294.281669][T15565] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.4137: corrupted inode contents
[  294.293871][T15565] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #15: comm syz.3.4137: mark_inode_dirty error
[  294.313070][T15565] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.4137: corrupted inode contents
[  294.331076][T15565] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #15: comm syz.3.4137: mark_inode_dirty error
[  294.338589][T15574] netlink: 'syz.2.4141': attribute type 1 has an invalid length.
[  294.350887][T15574] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4141'.
[  294.352078][T15565] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #15: comm syz.3.4137: mark inode dirty (error -117)
[  294.373337][T15565] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117)
[  294.382699][T15565] EXT4-fs (loop3): 1 orphan inode deleted
[  294.389001][T15565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  294.417385][T15578] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  294.418282][T11808] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.423967][T15578] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  294.424133][T15578] vhci_hcd vhci_hcd.0: Device attached
[  294.474623][T15579] vhci_hcd: connection closed
[  294.475464][T11775] vhci_hcd: stop threads
[  294.484542][T11775] vhci_hcd: release socket
[  294.489036][T11775] vhci_hcd: disconnect device
[  294.495481][   T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1)
[  294.642246][T15603] SELinux: syz.2.4154 (15603) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  294.698610][T15605] loop3: detected capacity change from 0 to 4096
[  294.763746][ T9953] kernel write not supported for file bpf-prog (pid: 9953 comm: kworker/0:7)
[  294.803574][T15618] netlink: 'syz.3.4160': attribute type 1 has an invalid length.
[  294.811391][T15618] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4160'.
[  294.902947][T15626] SELinux: failed to load policy
[  294.947717][T15630] loop3: detected capacity change from 0 to 4096
[  294.981118][T15632] loop3: detected capacity change from 0 to 1024
[  294.987956][T15632] EXT4-fs: Ignoring removed nomblk_io_submit option
[  294.994772][T15632] EXT4-fs: Ignoring removed nobh option
[  295.010787][T15632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  295.051602][T15638] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4169'.
[  295.135010][T15645] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.4167: Allocating blocks 497-513 which overlap fs metadata
[  295.227744][T15632] ==================================================================
[  295.235886][T15632] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark
[  295.244208][T15632] 
[  295.246547][T15632] write to 0xffff8881004b53ec of 4 bytes by task 15642 on cpu 1:
[  295.254305][T15632]  xas_set_mark+0x12b/0x140
[  295.258847][T15632]  __folio_start_writeback+0x1dd/0x440
[  295.264321][T15632]  ext4_bio_write_folio+0x5ad/0x9f0
[  295.269543][T15632]  mpage_process_page_bufs+0x4a1/0x620
[  295.275037][T15632]  mpage_prepare_extent_to_map+0x786/0xc00
[  295.280882][T15632]  ext4_do_writepages+0xa05/0x2750
[  295.286030][T15632]  ext4_writepages+0x176/0x300
[  295.290822][T15632]  do_writepages+0x1c3/0x310
[  295.295431][T15632]  file_write_and_wait_range+0x156/0x2c0
[  295.301084][T15632]  generic_buffers_fsync_noflush+0x45/0x120
[  295.307010][T15632]  ext4_sync_file+0x1ab/0x690
[  295.311705][T15632]  vfs_fsync_range+0x10a/0x130
[  295.316488][T15632]  ext4_buffered_write_iter+0x34f/0x3c0
[  295.322049][T15632]  ext4_file_write_iter+0xdbf/0xf00
[  295.327265][T15632]  iter_file_splice_write+0x666/0xa60
[  295.332655][T15632]  direct_splice_actor+0x156/0x2a0
[  295.337787][T15632]  splice_direct_to_actor+0x312/0x680
[  295.343175][T15632]  do_splice_direct+0xda/0x150
[  295.347955][T15632]  do_sendfile+0x380/0x650
[  295.352384][T15632]  __x64_sys_sendfile64+0x105/0x150
[  295.357620][T15632]  x64_sys_call+0x2bb4/0x3000
[  295.362314][T15632]  do_syscall_64+0xd2/0x200
[  295.366825][T15632]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.372738][T15632] 
[  295.375066][T15632] read to 0xffff8881004b53ec of 4 bytes by task 15632 on cpu 0:
[  295.382697][T15632]  filemap_write_and_wait_range+0xfc/0x340
[  295.388541][T15632]  filemap_invalidate_pages+0xa4/0x1a0
[  295.394018][T15632]  kiocb_invalidate_pages+0x6e/0x80
[  295.399235][T15632]  __iomap_dio_rw+0x5d1/0x1240
[  295.404030][T15632]  iomap_dio_rw+0x40/0x90
[  295.408399][T15632]  ext4_file_write_iter+0xad9/0xf00
[  295.413629][T15632]  iter_file_splice_write+0x666/0xa60
[  295.419032][T15632]  direct_splice_actor+0x156/0x2a0
[  295.424185][T15632]  splice_direct_to_actor+0x312/0x680
[  295.429597][T15632]  do_splice_direct+0xda/0x150
[  295.434386][T15632]  do_sendfile+0x380/0x650
[  295.438824][T15632]  __x64_sys_sendfile64+0x105/0x150
[  295.444037][T15632]  x64_sys_call+0x2bb4/0x3000
[  295.448729][T15632]  do_syscall_64+0xd2/0x200
[  295.453250][T15632]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.459164][T15632] 
[  295.461497][T15632] value changed: 0x0a000021 -> 0x04000021
[  295.467220][T15632] 
[  295.469561][T15632] Reported by Kernel Concurrency Sanitizer on:
[  295.475756][T15632] CPU: 0 UID: 0 PID: 15632 Comm: syz.3.4167 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  295.485674][T15632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  295.495747][T15632] ==================================================================
[  295.551247][T15632] EXT4-fs (loop3): pa ffff8881076d6540: logic 16, phys. 145, len 23
[  295.559324][T15632] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  295.589997][T11808] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.