last executing test programs:

9m58.770872284s ago: executing program 32 (id=159):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x7f, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x7ffffefc, 0x3, 0xfffffffffffffffe, 0x0, 0x4000, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x9)
r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
write$UHID_DESTROY(r0, &(0x7f0000000140), 0x4)

9m47.621219429s ago: executing program 33 (id=117):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x464041, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@o_path={&(0x7f00000003c0)='./file1\x00', r1, 0x4000, r3}, 0x18)

7m24.061915599s ago: executing program 34 (id=1831):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0)

7m2.148670948s ago: executing program 35 (id=2254):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@ifindex, 0xffffffffffffffff, 0x31}, 0x20)
setrlimit(0x2, &(0x7f0000000000)={0x4000051, 0xfffffffa})
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00007d7000/0x2000)=nil)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)

3m46.196757762s ago: executing program 36 (id=5852):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00'})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000041}, 0x80)

3m38.976411331s ago: executing program 37 (id=5955):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)

3m6.689101856s ago: executing program 1 (id=6512):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00', r2}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
socket(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x10000}, 0x18)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$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")
setitimer(0x1, 0x0, 0x0)
lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0x1e, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10)
unlink(0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e36599023629, 0x110004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)={'#! ', './file1'}, 0xfe92)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0)
r8 = syz_io_uring_setup(0x3480, &(0x7f00000002c0)={0x0, 0xf041, 0x2, 0x1000, 0x13a}, &(0x7f0000000240)=<r9=>0x0, &(0x7f0000000680)=<r10=>0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r11, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ_FIXED)
io_uring_enter(r8, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

3m6.572189558s ago: executing program 1 (id=6515):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4)

3m6.556099227s ago: executing program 1 (id=6516):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x1)
setresuid(0xee00, 0xee00, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil)
shmctl$IPC_SET(r3, 0x1, &(0x7f00000020c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x100, 0xa}, 0x9, 0x6, 0x2, 0xf5eb, 0x0, 0x0, 0x3ff})
shmctl$SHM_UNLOCK(r3, 0xc)
r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000001c0)={'fscrypt:', @auto=[0x31, 0x32, 0x32, 0x66, 0x66, 0x64, 0x66, 0x3b, 0x36, 0x65, 0x39, 0x62, 0x32, 0x39, 0x30, 0x66]}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700", 0x2c}, 0x48, 0x0)
keyctl$search(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580), &(0x7f00000005c0)='%-5lx  \x00'}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000a00)={'ip_vti0\x00', &(0x7f0000000d00)={'gretap0\x00', 0x0, 0x40, 0x40, 0x2, 0x0, {{0x40, 0x4, 0x2, 0x35, 0x100, 0x65, 0x0, 0xf0, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x54, 0xcc, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0xffffffff}, {@multicast1, 0x2200}, {@broadcast, 0x4}, {@private=0xa010101, 0x10001}, {@private=0xa090102, 0x6}, {@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@local}, {@empty, 0xffffffff}, {@multicast1, 0x101}]}, @generic={0x83, 0x12, "b7511fe2d1fd8c68bfc6842f89099e05"}, @timestamp_prespec={0x44, 0x44, 0xdb, 0x3, 0xa, [{@empty, 0x6}, {@loopback, 0x10000}, {@private=0xa010102, 0x3}, {@remote, 0x6}, {@private=0xa010102, 0x8}, {@loopback, 0x5}, {@broadcast, 0x8}, {@private=0xa010101, 0x2}]}, @noop, @lsrr={0x83, 0xf, 0x40, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @rr={0x7, 0x17, 0xd5, [@dev={0xac, 0x14, 0x14, 0x16}, @remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @timestamp={0x44, 0x18, 0x43, 0x0, 0x7, [0x6, 0xb, 0x4, 0xb53, 0xd712]}, @end]}}}}})

3m6.508147658s ago: executing program 38 (id=6516):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x1)
setresuid(0xee00, 0xee00, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil)
shmctl$IPC_SET(r3, 0x1, &(0x7f00000020c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x100, 0xa}, 0x9, 0x6, 0x2, 0xf5eb, 0x0, 0x0, 0x3ff})
shmctl$SHM_UNLOCK(r3, 0xc)
r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000001c0)={'fscrypt:', @auto=[0x31, 0x32, 0x32, 0x66, 0x66, 0x64, 0x66, 0x3b, 0x36, 0x65, 0x39, 0x62, 0x32, 0x39, 0x30, 0x66]}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700", 0x2c}, 0x48, 0x0)
keyctl$search(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580), &(0x7f00000005c0)='%-5lx  \x00'}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000a00)={'ip_vti0\x00', &(0x7f0000000d00)={'gretap0\x00', 0x0, 0x40, 0x40, 0x2, 0x0, {{0x40, 0x4, 0x2, 0x35, 0x100, 0x65, 0x0, 0xf0, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x54, 0xcc, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0xffffffff}, {@multicast1, 0x2200}, {@broadcast, 0x4}, {@private=0xa010101, 0x10001}, {@private=0xa090102, 0x6}, {@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@local}, {@empty, 0xffffffff}, {@multicast1, 0x101}]}, @generic={0x83, 0x12, "b7511fe2d1fd8c68bfc6842f89099e05"}, @timestamp_prespec={0x44, 0x44, 0xdb, 0x3, 0xa, [{@empty, 0x6}, {@loopback, 0x10000}, {@private=0xa010102, 0x3}, {@remote, 0x6}, {@private=0xa010102, 0x8}, {@loopback, 0x5}, {@broadcast, 0x8}, {@private=0xa010101, 0x2}]}, @noop, @lsrr={0x83, 0xf, 0x40, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @rr={0x7, 0x17, 0xd5, [@dev={0xac, 0x14, 0x14, 0x16}, @remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @timestamp={0x44, 0x18, 0x43, 0x0, 0x7, [0x6, 0xb, 0x4, 0xb53, 0xd712]}, @end]}}}}})

2m51.987088226s ago: executing program 39 (id=6736):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc))
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x142)
setsockopt(r2, 0x10, 0x3c01, &(0x7f0000000000)="dc06b4909c9578f0734b1ae6054055b9ef99dc689395bde31d007b725450804a2789b1424b675fc0d9347d2274593d227f51377ff99692ca58c64141898911f52b6d", 0x42)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0xf2a, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1m55.140602751s ago: executing program 40 (id=7510):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c0000000000029078ac1e0001e000000112009078e000000192cd"], 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0xec, 0x24, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff1, 0x5}, {0xffe0, 0xfff1}, {0x6, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xfffffff7}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x4}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x7ff}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x200}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x3, 0xc, 0xbb3, 0x2, 0x6, 0x1ff, 0x2}}, {0x8, 0x2, [0x7, 0x2]}}, {{0x1c, 0x1, {0x2, 0xff, 0x4, 0xfffffff9, 0x1, 0x0, 0x4, 0x1}}, {0x6, 0x2, [0xfffa]}}]}, @qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x9}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xc0}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10000}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8e}, @TCA_RATE={0x6, 0x5, {0x3, 0xe}}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9, 0x56}}}, @TCA_RATE={0x6, 0x5, {0x5, 0xfd}}]}, 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
sendfile(r1, r0, 0x0, 0x7ffff000)

1m47.13554458s ago: executing program 41 (id=7600):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r2 = syz_io_uring_setup(0x4ee5, &(0x7f0000000340)={0x0, 0x1342, 0xfa1c1cabf9b4d1c6, 0x0, 0x163}, &(0x7f0000000000), &(0x7f00000003c0))
r3 = syz_io_uring_setup(0x111, &(0x7f00000001c0)={0x0, 0x3de7, 0x100, 0xfffffeff, 0x19e, 0x0, r2}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r3, 0x3516, 0x4, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f", "80031f0000000200"}, 0x38)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/13], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xc, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x515fc3568eb22b17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder-control\x00', 0x800, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0xfffffffffffffffe}, 0x18)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000240)={[{@grpid}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}]}, 0x2, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=")

1m40.188178135s ago: executing program 42 (id=7675):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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")
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'})
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f0000000300)=0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x40}, 0x18)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$chown(0x4, r4, 0xee00, 0xee01)
keyctl$chown(0x4, r4, 0xffffffffffffffff, 0x0)
mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=tcp'])

1m33.583634904s ago: executing program 43 (id=7736):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') (fail_nth: 5)

1m28.847090975s ago: executing program 1 (id=7738):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r4], 0x14}}, 0x44001)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f00000030c0)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@sysvgroups}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5e0, &(0x7f0000000bc0)="$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")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000900, 0x0, &(0x7f00000001c0))
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0)
syz_clone(0x40002000, &(0x7f0000000300)="0baec713b91330a8f82dc3dc96f4ec2e952bdcc3b8a713a6f20d3484ece8eeeb23d80d4f74ea6baf9b00364689aac9f04dbca34d4834b63af19aafd6c47ed8f60b94b9f58ac994be369d3c8de3c8d269be5afc549760e3ccce7791d66de43e471e6e924568ca8eff31b3a0531ef1b48c325683f913a34f71118e84f356107a30d171ace18461d5f6358ffe3b976849f0bce3d16fb1bf797f04b5a05bb95da7902ee5f079c20d9154a2633f38d44749335c307439b8013a865643db3432a83c61392fb03e0350ca6c3883a5f3ea1f8380a16b9bd3473a1910405cd40fa5efd809247f5fd09667a8b0632f", 0xea, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000400)="2e1531bc177c564f197ba527ff28c5635bd1af185a8bd7ec6b81119f5bbd83d343c4a25aa871a6eece312be3145c1f764eca7ae2ffd9cbcc9558a00b93bb39ca97281e2c8e099c9e6bf7cae8aa04d60dfd9d8fcc76088e4c67e251462010a324169359")

1m28.101946927s ago: executing program 1 (id=7805):
io_uring_setup(0x1f38, &(0x7f0000000100)={0x0, 0x631d, 0x800, 0x2, 0x2e0})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet(0x2, 0x2, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r5, 0x0, 0x8000000000004}, 0x18)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010)
sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x6, @tid=r2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x6}, 0x18)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003"], 0xfc}}, 0x20000004)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket(0x400000000010, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fallocate(0xffffffffffffffff, 0x0, 0x400000002000000, 0x2)
r10 = socket$unix(0x1, 0x1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)

1m25.932904549s ago: executing program 44 (id=7827):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = syz_open_dev$sg(0x0, 0x0, 0x8002)
r3 = fcntl$dupfd(r2, 0x0, r2)
read$usbfs(r3, &(0x7f0000001040)=""/192, 0xc0)
write$tun(r3, &(0x7f0000000400)=ANY=[], 0xa2)

1m25.671603563s ago: executing program 1 (id=7830):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0xc4, 0x30, 0x4, 0x8070bd2b, 0x25dfdbfc, {}, [{0xb0, 0x1, [@m_gact={0x78, 0x20, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7a7, 0x7, 0x5, 0x7, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x4, 0x0, 0x9, 0xffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2f1, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xd60, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_tunnel_key={0x34, 0x16, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x81}, 0x800)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r3], 0x14}}, 0x44001)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f00000030c0)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@sysvgroups}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5e0, &(0x7f0000000bc0)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000900, 0x0, &(0x7f00000001c0))
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0)
syz_clone(0x40002000, &(0x7f0000000300)="0baec713b91330a8f82dc3dc96f4ec2e952bdcc3b8a713a6f20d3484ece8eeeb23d80d4f74ea6baf9b00364689aac9f04dbca34d4834b63af19aafd6c47ed8f60b94b9f58ac994be369d3c8de3c8d269be5afc549760e3ccce7791d66de43e471e6e924568ca8eff31b3a0531ef1b48c325683f913a34f71118e84f356107a30d171ace18461d5f6358ffe3b976849f0bce3d16fb1bf797f04b5a05bb95da7902ee5f079c20d9154a2633f38d44749335c307439b8013a865643db3432a83c61392fb03e0350ca6c3883a5f3ea1f8380a16b9bd3473a1910405cd40fa5efd809247f5fd09667a8b0632f", 0xea, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000400)="2e1531bc177c564f197ba527ff28c5635bd1af185a8bd7ec6b81119f5bbd83d343c4a25aa871a6eece312be3145c1f764eca7ae2ffd9cbcc9558a00b93bb39ca97281e2c8e099c9e6bf7cae8aa04d60dfd9d8fcc76088e4c67e251462010a324169359")

1m25.671088043s ago: executing program 45 (id=7830):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0xc4, 0x30, 0x4, 0x8070bd2b, 0x25dfdbfc, {}, [{0xb0, 0x1, [@m_gact={0x78, 0x20, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7a7, 0x7, 0x5, 0x7, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x4, 0x0, 0x9, 0xffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2f1, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xd60, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_tunnel_key={0x34, 0x16, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x81}, 0x800)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r3], 0x14}}, 0x44001)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f00000030c0)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@sysvgroups}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5e0, &(0x7f0000000bc0)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000900, 0x0, &(0x7f00000001c0))
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0)
syz_clone(0x40002000, &(0x7f0000000300)="0baec713b91330a8f82dc3dc96f4ec2e952bdcc3b8a713a6f20d3484ece8eeeb23d80d4f74ea6baf9b00364689aac9f04dbca34d4834b63af19aafd6c47ed8f60b94b9f58ac994be369d3c8de3c8d269be5afc549760e3ccce7791d66de43e471e6e924568ca8eff31b3a0531ef1b48c325683f913a34f71118e84f356107a30d171ace18461d5f6358ffe3b976849f0bce3d16fb1bf797f04b5a05bb95da7902ee5f079c20d9154a2633f38d44749335c307439b8013a865643db3432a83c61392fb03e0350ca6c3883a5f3ea1f8380a16b9bd3473a1910405cd40fa5efd809247f5fd09667a8b0632f", 0xea, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000400)="2e1531bc177c564f197ba527ff28c5635bd1af185a8bd7ec6b81119f5bbd83d343c4a25aa871a6eece312be3145c1f764eca7ae2ffd9cbcc9558a00b93bb39ca97281e2c8e099c9e6bf7cae8aa04d60dfd9d8fcc76088e4c67e251462010a324169359")

1m13.728258183s ago: executing program 2 (id=7923):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000000001140000"], 0xd4}}, 0x0)

1m13.618640174s ago: executing program 2 (id=7924):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000020000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r3}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

1m13.617772234s ago: executing program 2 (id=7926):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x8000001f)
r1 = open(&(0x7f00000004c0)='./file0\x00', 0x78000, 0x40)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x5, &(0x7f0000000500)=[{0x200000000006, 0x2, 0x0, 0x7ffc0002}, {0x3, 0x9, 0x5, 0x101}, {0xff, 0x9, 0x4, 0x1}, {0x6, 0x3, 0x6, 0x300000}, {0x7fe0, 0x6, 0xc5, 0x9}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xf7}, 0x18)
r4 = socket(0x10, 0x6, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r5, 0x2285, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x0, 0x350, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @private=0xa010100, 0x8, 0x1}}}, {{@arp={@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x10, 0x4, {@mac=@local, {[0x0, 0xa23d3d70f50a3e2b, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0xff, 0x0, 0xff]}}, 0x0, 0xb, 0xffff, 0xf, 0x5, 0x7, 'nicvf0\x00', 'gre0\x00', {}, {}, 0x0, 0x42}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @remote, @local, 0x4, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0xff, 0x7, 0xa, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x7, 0x8000, 0xffff, 0x88, 0x9, 0x9, 'veth0_to_team\x00', 'pimreg0\x00', {0x80}, {}, 0x0, 0x62}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xffffffb6, 0xfff9, 0x8, 0x1, 0x0, "7cf86631c43a5a93f7c7ff2c7adffecda09c720ce8c0c3db0aba31046f79c6513f61e0a4be5d5b479a74a7989684adaf49b7fec154078ee81a60b13c27f5ece6"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488)
writev(r5, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r7, 0x0, 0x4ab}, 0x18)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
fsopen(0x0, 0x0)
syz_usbip_server_init(0xaa7f3cec63cbb9d)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080))
syz_usb_connect$hid(0x1, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="efb131f35daf7d3eac054f0240000102020301010909210500060122e90409058103ff03409706adef56c5866cf3407675d8045b444a433e5b1eeb0ad789ba6052d70adba5bf91431a54f1f23bfc52fb34135d29adee32f95de92d361c214bbf86002f44bacffbc642fb6f2b53b1a4d92ae59005b014e00dd42f727c45d5a2824e9b0f865be0f0"], &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x7, 0x3, 0x7, 0x10, 0x81}, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="050f0000"], 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40e}}, {0x22, &(0x7f0000000380)=ANY=[@ANYBLOB="22034edc85aa6d3771757d576e6d54501c7f08a84ca22c6f3b38b73b0d9ceae581b6212b9e3e"]}]})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000001c40)=ANY=[@ANYBLOB="c80d0000", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fbdbdf258900000008000300", @ANYRES16=r9, @ANYBLOB="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"], 0xdc8}, 0x1, 0x0, 0x0, 0x20008840}, 0x4001)
tkill(0x0, 0x21)
fcntl$notify(r1, 0x402, 0x8000003d)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000200), 0x82)
close_range(r0, r1, 0x0)

1m12.688595968s ago: executing program 8 (id=7941):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82)
r3 = dup(r2)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000003c0)={0x5, 0x3, 0x18, 0x20ec, 0x0, 0x100000, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x4092}, 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6)
sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010300000000000000000100"], 0x30}}, 0x44)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
tkill(0x0, 0x12)
r11 = socket$inet(0x2, 0x3, 0x8)
setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)

1m12.5815462s ago: executing program 0 (id=7942):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x619)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4)
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, 0x0)
io_submit(r2, 0x1, &(0x7f0000000d40)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x7ff, r0, &(0x7f0000000080)="450603f05a84", 0x6, 0x6}])

1m12.260108904s ago: executing program 0 (id=7945):
r0 = socket(0x200000000000011, 0x2, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x8, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000580)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4a0c8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000006d0001002abd7000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="240000000808e58e69f9299fa24ec2fabb9bc6431e0014001400626f"], 0x34}}, 0x20008000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r7, 0x2285, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0)
writev(r7, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r10)
sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x14, r11, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x54, r11, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x24}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x20000850)
r13 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet_SIOCGIFBRDADDR(r13, 0x8919, &(0x7f0000000440)={'vlan1\x00', {0x2, 0x0, @loopback}})
r14 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCSIFBR(r14, 0x8941, &(0x7f0000000040)=@generic={0x1, 0x8, 0x8})

1m11.837577001s ago: executing program 0 (id=7948):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x8001, 0x2}, 0x0, 0x10000, 0xfffffff9, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000000))
ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001080000000000", @ANYRES32=0x0, @ANYBLOB="00000000001b000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r7, 0x0, 0x80001}, 0x18)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
membarrier(0x10, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r10)
sendmsg$IEEE802154_LIST_PHY(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r11, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004)

1m11.577047565s ago: executing program 8 (id=7950):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480003001000030500"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003000f"], 0x48}}, 0x40000)

1m11.576757195s ago: executing program 8 (id=7951):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000006c8b, 0x37}, 0x7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
r3 = socket$inet6(0xa, 0x3, 0x6)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$kcm(0x2b, 0x1, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)
fsopen(&(0x7f0000000180)='ubifs\x00', 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0xd, &(0x7f0000000080), 0x24)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000080000009f8400000400000001000000", @ANYRES32=0x1, @ANYBLOB="01000104000000000000000000000000000000007f979e03282ce79f890df5cae38546a85c54cf11201a19346ea34f34ca402eee643cadb43d17b1ed2139befc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000003000000020000000700"/28], 0x50)
ioctl$FIBMAP(r6, 0x1, &(0x7f0000000300)=0x9856)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="e502", 0x2)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
close(r5)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040))
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000003c0), &(0x7f00000001c0)=r0}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)

1m11.438946937s ago: executing program 8 (id=7952):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x44001)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f00000030c0)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@sysvgroups}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5e0, &(0x7f0000000bc0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2f6i7dTO55MsffPeDu9Nt9++t6/vzQZQWf3pP7WI/RExmUT0JrPzZe2RFfbPPe/B35+cTR9J1Otv/JlEkuXlz0+yrz3ZyV0R8fNPSexrW1rv1My1i6MTE+NXs+PB6UuTg1Mz1w5fuDR6fvz8+OXhl4ZPHD92/MTQkXVd1/WCvNM33/+w97ORt7/75p9k6PvfRpI4Ga9mT1x4HRulP/ob35NkaVHPiY2urCRt2c/Jwpc4aS+xQaxJ/vp1RMRT0Rtt8fDF641PXyu1ccCmqicRdaCiEvEPFZWPA2az9/aL3wfXShmVAFvh/qm5CYAHS+K/fW5uMLoacwO7HySxcFoniYj1zcw12xMRd++M3Dx3Z+RmbNI8HFBs9kZEPF0U/0kj/vuiK/oa8V9riv90XHAm+5rmv77O+hdPFYt/2Dpz8d+1bPxHi/h/Z0H8v7vO+vsfJt/rbor/7vVeEgAAAAAAAFTW7VMR8WLR3/9r8+t/omD9T09EnNyA+vsXHS/9+3/t3gZUAxS4fyrilSiO/2z1b19blnqssR6gIzl3YWL8SEQ8HhGHomNXejy0TB2HP9/3dauy/mz9X/5I67+brQXM2nGvfVfzOWOj06OPet1AxP0bEc8Urv9N5vv/pKD/T38fTK6yjn3P3zrTqmzl+Ac2S/3biIOF/f/Du1Yky9+fY7AxHhjMRwVLPfvxFz+0qn+98e8WE/Do0v5/9/Lx35csvF/P1NrrODrTXm9Vtt7xf2fyZuOWM51Z3kej09NXhyI6k9NtaW5T/vDa2ww7UR4Pebyk8X/oueXn/4rG/90RMbvo/07+at5TnHvy357fW7XH+B/Kk8b/2Jr6/7Unhm/1/diq/tX1/8caff2hLMf8H8z5Kg/Tzub8gnBsLyra6vYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwE5Qi4g9kdQG5tO12sBARE9EPBG7axNXpqZfOHflg8tjaVnj8/9r+Sf99s4dJ/nn//ctOB5edHw0IvZGxJdt3Y3jgbNXJsbKvngAAAAAAAAAAAAAAAAAAADYJnpa7P9P/dFWduuATddedgOA0hTE/y9ltAPYevp/qC7xD9Ul/qG6xD9Ul/iH6hL/UF3iH6pL/AMAAAAAwI6y98DtX5OImH25u/FIdWZlHaW2DNhstbIbAJTGLX6guiz9geryHh9IVijvannSSmcuZ/LsI5wMAAAAAAAAAAAAAJVzcL/9/1BV9v9Dddn/D9WV7/8/UHI7gK3nPT4QK+zkL9z/v+JZAAAAAAAAAAAAAMBGmpq5dnF0YmL86o5M7IqIVT/5re3R5q1M1Ov16+lPwXZpz/88kS+F3y7tWZTI9/qt7qzyficBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADN/gsAAP//+tMiow==")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000900, 0x0, &(0x7f00000001c0))
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0)
syz_clone(0x40002000, &(0x7f0000000300)="0baec713b91330a8f82dc3dc96f4ec2e952bdcc3b8a713a6f20d3484ece8eeeb23d80d4f74ea6baf9b00364689aac9f04dbca34d4834b63af19aafd6c47ed8f60b94b9f58ac994be369d3c8de3c8d269be5afc549760e3ccce7791d66de43e471e6e924568ca8eff31b3a0531ef1b48c325683f913a34f71118e84f356107a30d171ace18461d5f6358ffe3b976849f0bce3d16fb1bf797f04b5a05bb95da7902ee5f079c20d9154a2633f38d44749335c307439b8013a865643db3432a83c61392fb03e0350ca6c3883a5f3ea1f8380a16b9bd3473a1910405cd40fa5efd809247f5fd09667a8b0632f", 0xea, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000400)="2e1531bc177c564f197ba527ff28c5635bd1af185a8bd7ec6b81119f5bbd83d343c4a25aa871a6eece312be3145c1f764eca7ae2ffd9cbcc9558a00b93bb39ca97281e2c8e099c9e6bf7cae8aa04d60dfd9d8fcc76088e4c67e251462010a324169359")

1m11.438349447s ago: executing program 0 (id=7953):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x44001)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f00000030c0)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@sysvgroups}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5e0, &(0x7f0000000bc0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2f6i7dTO55MsffPeDu9Nt9++t6/vzQZQWf3pP7WI/RExmUT0JrPzZe2RFfbPPe/B35+cTR9J1Otv/JlEkuXlz0+yrz3ZyV0R8fNPSexrW1rv1My1i6MTE+NXs+PB6UuTg1Mz1w5fuDR6fvz8+OXhl4ZPHD92/MTQkXVd1/WCvNM33/+w97ORt7/75p9k6PvfRpI4Ga9mT1x4HRulP/ob35NkaVHPiY2urCRt2c/Jwpc4aS+xQaxJ/vp1RMRT0Rtt8fDF641PXyu1ccCmqicRdaCiEvEPFZWPA2az9/aL3wfXShmVAFvh/qm5CYAHS+K/fW5uMLoacwO7HySxcFoniYj1zcw12xMRd++M3Dx3Z+RmbNI8HFBs9kZEPF0U/0kj/vuiK/oa8V9riv90XHAm+5rmv77O+hdPFYt/2Dpz8d+1bPxHi/h/Z0H8v7vO+vsfJt/rbor/7vVeEgAAAAAAAFTW7VMR8WLR3/9r8+t/omD9T09EnNyA+vsXHS/9+3/t3gZUAxS4fyrilSiO/2z1b19blnqssR6gIzl3YWL8SEQ8HhGHomNXejy0TB2HP9/3dauy/mz9X/5I67+brQXM2nGvfVfzOWOj06OPet1AxP0bEc8Urv9N5vv/pKD/T38fTK6yjn3P3zrTqmzl+Ac2S/3biIOF/f/Du1Yky9+fY7AxHhjMRwVLPfvxFz+0qn+98e8WE/Do0v5/9/Lx35csvF/P1NrrODrTXm9Vtt7xf2fyZuOWM51Z3kej09NXhyI6k9NtaW5T/vDa2ww7UR4Pebyk8X/oueXn/4rG/90RMbvo/07+at5TnHvy357fW7XH+B/Kk8b/2Jr6/7Unhm/1/diq/tX1/8caff2hLMf8H8z5Kg/Tzub8gnBsLyra6vYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwE5Qi4g9kdQG5tO12sBARE9EPBG7axNXpqZfOHflg8tjaVnj8/9r+Sf99s4dJ/nn//ctOB5edHw0IvZGxJdt3Y3jgbNXJsbKvngAAAAAAAAAAAAAAAAAAADYJnpa7P9P/dFWduuATddedgOA0hTE/y9ltAPYevp/qC7xD9Ul/qG6xD9Ul/iH6hL/UF3iH6pL/AMAAAAAwI6y98DtX5OImH25u/FIdWZlHaW2DNhstbIbAJTGLX6guiz9geryHh9IVijvannSSmcuZ/LsI5wMAAAAAAAAAAAAAJVzcL/9/1BV9v9Dddn/D9WV7/8/UHI7gK3nPT4QK+zkL9z/v+JZAAAAAAAAAAAAAMBGmpq5dnF0YmL86o5M7IqIVT/5re3R5q1M1Ov16+lPwXZpz/88kS+F3y7tWZTI9/qt7qzyficBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADN/gsAAP//+tMiow==")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000900, 0x0, &(0x7f00000001c0))
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0)
syz_clone(0x40002000, &(0x7f0000000300)="0baec713b91330a8f82dc3dc96f4ec2e952bdcc3b8a713a6f20d3484ece8eeeb23d80d4f74ea6baf9b00364689aac9f04dbca34d4834b63af19aafd6c47ed8f60b94b9f58ac994be369d3c8de3c8d269be5afc549760e3ccce7791d66de43e471e6e924568ca8eff31b3a0531ef1b48c325683f913a34f71118e84f356107a30d171ace18461d5f6358ffe3b976849f0bce3d16fb1bf797f04b5a05bb95da7902ee5f079c20d9154a2633f38d44749335c307439b8013a865643db3432a83c61392fb03e0350ca6c3883a5f3ea1f8380a16b9bd3473a1910405cd40fa5efd809247f5fd09667a8b0632f", 0xea, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000400)="2e1531bc177c564f197ba527ff28c5635bd1af185a8bd7ec6b81119f5bbd83d343c4a25aa871a6eece312be3145c1f764eca7ae2ffd9cbcc9558a00b93bb39ca97281e2c8e099c9e6bf7cae8aa04d60dfd9d8fcc76088e4c67e251462010a324169359")

1m11.061118482s ago: executing program 8 (id=7956):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x37, 0x0, 0x1}, 0x28)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa6d78b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f5c008d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff)
keyctl$chown(0x4, r2, 0xee01, 0xee00)
keyctl$chown(0x4, r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r3, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600)

1m11.057737403s ago: executing program 0 (id=7957):
r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
r3 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x200440c0, 0x1})
io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ce}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r5, 0x0, 0x5}, 0x18)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r7}, 0x18)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000300142603600e120800060000000441a800080004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r9}, 0x18)
r11 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r11, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r11, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002000)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="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"], 0x48}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$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")
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)

1m10.770365157s ago: executing program 0 (id=7962):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x2)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0)
socket(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180))
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x80)

1m10.729485438s ago: executing program 46 (id=7962):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x2)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0)
socket(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180))
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x80)

1m10.611911689s ago: executing program 8 (id=7964):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x34, r2, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000000000000002800000000000003f9da814f48622b20067f87ca34223ee140358814e7202b223689e2cd24c704199c1551665ae79e913885f9c2572046cd0033599579d134212ea5a61c5d1f6bca90998d5716ce602f9013c07e6a9a22cf771a2564f9a0aabe34d5d275b0e5666fc1e111821696837c02f4dfe3b05cea78703dca13c26c1b0989d881f8fef96817058830ac8e2d56ac2014f37fbd09ba3f9ca635cd25e59b35dd8e28d43f6fb344c951c40bb92212e2909d5a3944b102e1ae7fabda9a1b2bfe2c6b7a72cdefad8ec2a88489dc632d71c5c40c2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x18)
alarm(0xfb)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
io_setup(0x6, &(0x7f0000000680)=<r9=>0x0)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=<r10=>0x0)
timer_settime(r10, 0x1, &(0x7f0000000480)={{}, {0x0, 0x989680}}, 0x0)
timer_gettime(r10, 0x0)
clock_gettime(0x0, &(0x7f00000002c0)={<r11=>0x0, <r12=>0x0})
timer_settime(r10, 0x1, &(0x7f0000000540)={{0x0, 0x989680}, {r11, r12+60000000}}, &(0x7f0000000580))
io_submit(r9, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r0, 0x0}])

1m10.585535929s ago: executing program 47 (id=7964):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x34, r2, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000000000000002800000000000003f9da814f48622b20067f87ca34223ee140358814e7202b223689e2cd24c704199c1551665ae79e913885f9c2572046cd0033599579d134212ea5a61c5d1f6bca90998d5716ce602f9013c07e6a9a22cf771a2564f9a0aabe34d5d275b0e5666fc1e111821696837c02f4dfe3b05cea78703dca13c26c1b0989d881f8fef96817058830ac8e2d56ac2014f37fbd09ba3f9ca635cd25e59b35dd8e28d43f6fb344c951c40bb92212e2909d5a3944b102e1ae7fabda9a1b2bfe2c6b7a72cdefad8ec2a88489dc632d71c5c40c2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x18)
alarm(0xfb)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
io_setup(0x6, &(0x7f0000000680)=<r9=>0x0)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=<r10=>0x0)
timer_settime(r10, 0x1, &(0x7f0000000480)={{}, {0x0, 0x989680}}, 0x0)
timer_gettime(r10, 0x0)
clock_gettime(0x0, &(0x7f00000002c0)={<r11=>0x0, <r12=>0x0})
timer_settime(r10, 0x1, &(0x7f0000000540)={{0x0, 0x989680}, {r11, r12+60000000}}, &(0x7f0000000580))
io_submit(r9, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r0, 0x0}])

1m10.57822377s ago: executing program 2 (id=7966):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x44001)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f00000030c0)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@sysvgroups}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5e0, &(0x7f0000000bc0)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000900, 0x0, &(0x7f00000001c0))
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0)
syz_clone(0x40002000, &(0x7f0000000300)="0baec713b91330a8f82dc3dc96f4ec2e952bdcc3b8a713a6f20d3484ece8eeeb23d80d4f74ea6baf9b00364689aac9f04dbca34d4834b63af19aafd6c47ed8f60b94b9f58ac994be369d3c8de3c8d269be5afc549760e3ccce7791d66de43e471e6e924568ca8eff31b3a0531ef1b48c325683f913a34f71118e84f356107a30d171ace18461d5f6358ffe3b976849f0bce3d16fb1bf797f04b5a05bb95da7902ee5f079c20d9154a2633f38d44749335c307439b8013a865643db3432a83c61392fb03e0350ca6c3883a5f3ea1f8380a16b9bd3473a1910405cd40fa5efd809247f5fd09667a8b0632f", 0xea, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000400)="2e1531bc177c564f197ba527ff28c5635bd1af185a8bd7ec6b81119f5bbd83d343c4a25aa871a6eece312be3145c1f764eca7ae2ffd9cbcc9558a00b93bb39ca97281e2c8e099c9e6bf7cae8aa04d60dfd9d8fcc76088e4c67e251462010a324169359")

1m10.096586707s ago: executing program 2 (id=7969):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r3, @ANYBLOB="08000b000000000008000200ac1414"], 0x54}}, 0x0)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r5 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000040), &(0x7f00000001c0))
r6 = epoll_create1(0x0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7f}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x800)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x8, &(0x7f0000000300)=[{0x8, 0xbc, 0x8, 0x7}, {0x5, 0x1, 0x4, 0x5}, {0x3, 0x0, 0x5, 0x24000000}, {0x400, 0x81, 0xe4, 0x2b}, {0x0, 0x62, 0x0, 0x2}, {0x6, 0xff, 0x47, 0x1}, {0x2, 0xc, 0x7, 0x6}, {0x800, 0x9, 0x1, 0x81}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={<r8=>0x0})
r9 = syz_io_uring_setup(0x24d9, &(0x7f00000000c0)={0x0, 0x3e9f, 0x400, 0x8, 0x3}, &(0x7f0000000180), &(0x7f0000000280))
io_uring_register$IORING_REGISTER_FILES(r9, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
io_uring_enter(r9, 0x47f6, 0x0, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000400)={r8, 0x1, r9, 0x7})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000))
r10 = creat(&(0x7f0000000280)='./file0\x00', 0x1e)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@map=r10, r10, 0x26, 0x0, 0x0, @void, @value=r10}, 0x20)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x14, r4, 0x607}, 0x14}}, 0x0)

1m9.828209851s ago: executing program 2 (id=7971):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1, 0x0, 0x40}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x534, &(0x7f0000001840)="$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") (fail_nth: 16)

1m9.776661142s ago: executing program 48 (id=7971):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1, 0x0, 0x40}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x534, &(0x7f0000001840)="$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") (fail_nth: 16)

1m2.902098605s ago: executing program 3 (id=8023):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xc, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000e4000007010a00f8ffffffb702000008f16700b7030000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000005c0)=0x1d, 0x4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=0x1, 0x26, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000047409062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f740e9830000800020000000000080004000000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48)
r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket(0x10, 0x803, 0x0)
r10 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
epoll_create1(0x0)
sendmmsg$unix(r9, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000600)="e9b6b0e64c8571c604c4f19a913a5f5faa9723421966071283dcf88f31ea6a4efa775dcff6392c6dc0093405d497644b03ab4dcec47d0422c0860cfe706a0afe9686aa73e885ef2c570eb36fa7af57fe158fcaa6e9886d69dd0098e60f2a56c742006f6dcf628d0562e43d8ae143938d49", 0x71}, {&(0x7f0000000680)="47c73f1a33a88573fe47290991f43030b6d44b3b139a6b83fed0e96d04c86367cf9a32ff6a98c969cdbb2f6ef3ffbc06378fd10ec6b9a72faf1d39692a6b2a7b8eea9467ee10f201286dbb734c719c092cb050f9115facb100bab36c2d721446", 0x60}], 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES64=r8, @ANYRES32=0x0, @ANYBLOB="0000000028f5ffffffffecff0100000001000000", @ANYRES32=r11, @ANYRES32=r8, @ANYRES32=r8, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r5], 0x48}}], 0x1, 0x24040000)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x4e24, 0x0, 0x4e23, 0x0, 0xa}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, {0xcb29, 0x1000000000, 0x53e5, 0x1}, 0x3, 0x1, 0x1, 0x0, 0x2, 0x3}, {{@in=@remote, 0x0, 0x6c}, 0x2, @in=@private=0xa010102, 0x1504, 0x4, 0x2, 0x0, 0x0, 0xfffffffd}}, 0xe8)
write$binfmt_elf64(r10, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe)
execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="12000000a028000017000000b504000000040000", @ANYRES32=r6, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="08000000010003000000000000000000000000000000000000000000bcd1631e96b3369539f7228c9e79f424f1becec9d7dc50569e6f537887a0bf0a1ab88811"], 0x50)

1m2.779431107s ago: executing program 3 (id=8025):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
socket(0x2, 0x80805, 0x0) (async)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, &(0x7f00000001c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0xd4, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x9, 0x9}, {}, {0xc, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x4, 0x3, 0x7fff, {0xa, 0x82c614eb2c1442bd, 0x1, 0x445, 0x5, 0xfffffff7}, {0x5, 0x1, 0x6, 0x8001, 0x1, 0x3}, 0x3, 0x9, 0x3}}]}, @TCA_U32_SEL={0x64, 0x5, {0x0, 0xf7, 0x5, 0x0, 0x0, 0x0, 0x200, 0xc, [{0x9, 0x2, 0xf2f, 0x24}, {0x72f, 0x1, 0x3, 0x6}, {0x10000000, 0x3, 0x6, 0x4}, {0x8, 0x400000c9, 0x10000, 0x3}, {0x5, 0x3, 0x8, 0x1b}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x20000880)
sendto$packet(r2, &(0x7f0000000280)="4de8fb5d6fb7327dc5272a6ff372074d41c6db100604fd27c52f7629cd26c45b43026f9c0d3f8522466e269fa3a120999145c26d8571055e09768b7f988ca8b040a6f02e071eb4a8c89af77cf7f8ec78c785db2aaac16b9e329033c594ba8f9b53482c39c66722b68816ae8d7f199400323e7dc304a00893ffaa90fb5f5b3ba4203a2ee7f114fa37f68437516ba97b34a5a1e79051e13adc166ecdbbadc299ec64d3c4fc08a06af364278512d1", 0xad, 0x20004001, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r5=>r2, {0x3}}, './file0\x00'})
cachestat(0xffffffffffffffff, &(0x7f0000000040), &(0x7f000009de80), 0x0) (async)
cachestat(0xffffffffffffffff, &(0x7f0000000040), &(0x7f000009de80), 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x6, [@var={0x8, 0x0, 0x0, 0xe, 0x2}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x59, 0x0, 0x10, 0x7}]}, {0x0, [0x0, 0x2e, 0x110e48fdfc3690d8, 0x61]}}, &(0x7f0000000800)=""/137, 0x3e, 0x89, 0x1, 0x3a32, 0x10000}, 0x28)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@generic={&(0x7f0000000980)='./file0\x00', 0x0, 0x8}, 0x18)
pidfd_getfd(0xffffffffffffffff, r2, 0x0) (async)
r8 = pidfd_getfd(0xffffffffffffffff, r2, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a000100000000000000ed79818080000000000008000000140001"], 0x30}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) (async)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{0x1, <r11=>0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)=r0}, 0x20)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
pipe2(&(0x7f0000000b80), 0x4800) (async)
pipe2(&(0x7f0000000b80)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff}, 0x4800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="040402000400000001000000"], 0x50) (async)
r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="040402000400000001000000"], 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000ec18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000955f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000540)='syzkaller\x00', 0x3, 0xd5, &(0x7f0000000700)=""/213, 0x40f00, 0x28, '\x00', r4, 0x18, r6, 0x8, &(0x7f0000000900)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x2, 0x8, 0x5}, 0x10, 0x1ae68, r0, 0x4, &(0x7f0000000bc0)=[r7, r8, 0xffffffffffffffff, r10, r11, r12, r15], &(0x7f0000000c00)=[{0x0, 0x4, 0x2, 0xc}, {0x3, 0x5, 0x7, 0x1}, {0x0, 0x4, 0x5, 0x7}, {0x10003, 0x5, 0xd, 0x7}], 0x10, 0x2}, 0x94)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r16 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, <r17=>0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000013c0)=@bpf_lsm={0x1d, 0x3a, &(0x7f0000000f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @func, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001180)='syzkaller\x00', 0x200, 0xbb, &(0x7f00000011c0)=""/187, 0x41100, 0x1a, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001300)={0x1, 0x2, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001340)=[r15, r13, r14], &(0x7f0000001380)=[{0x1, 0x2, 0xf, 0x7}, {0x0, 0x1, 0xb}, {0x2, 0x5, 0xe, 0x2}], 0x10, 0x6}, 0x94) (async)
r18 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000013c0)=@bpf_lsm={0x1d, 0x3a, &(0x7f0000000f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @func, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001180)='syzkaller\x00', 0x200, 0xbb, &(0x7f00000011c0)=""/187, 0x41100, 0x1a, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001300)={0x1, 0x2, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001340)=[r15, r13, r14], &(0x7f0000001380)=[{0x1, 0x2, 0xf, 0x7}, {0x0, 0x1, 0xb}, {0x2, 0x5, 0xe, 0x2}], 0x10, 0x6}, 0x94)
r19 = syz_open_procfs(r17, &(0x7f0000001480)='net/icmp6\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xb, 0x13, &(0x7f0000000d00)=@raw=[@alu={0x7, 0x0, 0xa, 0xa, 0x9, 0xffffffffffffffc0}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000dc0)='GPL\x00', 0x0, 0xde, &(0x7f0000000e00)=""/222, 0x41000, 0x4, '\x00', r4, @fallback=0x7, r13, 0x8, &(0x7f0000000f00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000f40)={0x2, 0x3, 0x2, 0x80000000}, 0x10, 0x0, r18, 0x1, &(0x7f00000014c0)=[r12, r19, r11], &(0x7f0000001500)=[{0x5, 0x1, 0xd, 0x5}], 0x10, 0x5}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xb, 0x13, &(0x7f0000000d00)=@raw=[@alu={0x7, 0x0, 0xa, 0xa, 0x9, 0xffffffffffffffc0}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000dc0)='GPL\x00', 0x0, 0xde, &(0x7f0000000e00)=""/222, 0x41000, 0x4, '\x00', r4, @fallback=0x7, r13, 0x8, &(0x7f0000000f00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000f40)={0x2, 0x3, 0x2, 0x80000000}, 0x10, 0x0, r18, 0x1, &(0x7f00000014c0)=[r12, r19, r11], &(0x7f0000001500)=[{0x5, 0x1, 0xd, 0x5}], 0x10, 0x5}, 0x94)

1m2.726801097s ago: executing program 3 (id=8027):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2ca73845d177d601880221daeccfda56b75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r1, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
unshare(0x8040600)
socket$phonet_pipe(0x23, 0x5, 0x2)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0)

1m2.689854468s ago: executing program 3 (id=8029):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x44001)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f00000030c0)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@sysvgroups}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5e0, &(0x7f0000000bc0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2f6i7dTO55MsffPeDu9Nt9++t6/vzQZQWf3pP7WI/RExmUT0JrPzZe2RFfbPPe/B35+cTR9J1Otv/JlEkuXlz0+yrz3ZyV0R8fNPSexrW1rv1My1i6MTE+NXs+PB6UuTg1Mz1w5fuDR6fvz8+OXhl4ZPHD92/MTQkXVd1/WCvNM33/+w97ORt7/75p9k6PvfRpI4Ga9mT1x4HRulP/ob35NkaVHPiY2urCRt2c/Jwpc4aS+xQaxJ/vp1RMRT0Rtt8fDF641PXyu1ccCmqicRdaCiEvEPFZWPA2az9/aL3wfXShmVAFvh/qm5CYAHS+K/fW5uMLoacwO7HySxcFoniYj1zcw12xMRd++M3Dx3Z+RmbNI8HFBs9kZEPF0U/0kj/vuiK/oa8V9riv90XHAm+5rmv77O+hdPFYt/2Dpz8d+1bPxHi/h/Z0H8v7vO+vsfJt/rbor/7vVeEgAAAAAAAFTW7VMR8WLR3/9r8+t/omD9T09EnNyA+vsXHS/9+3/t3gZUAxS4fyrilSiO/2z1b19blnqssR6gIzl3YWL8SEQ8HhGHomNXejy0TB2HP9/3dauy/mz9X/5I67+brQXM2nGvfVfzOWOj06OPet1AxP0bEc8Urv9N5vv/pKD/T38fTK6yjn3P3zrTqmzl+Ac2S/3biIOF/f/Du1Yky9+fY7AxHhjMRwVLPfvxFz+0qn+98e8WE/Do0v5/9/Lx35csvF/P1NrrODrTXm9Vtt7xf2fyZuOWM51Z3kej09NXhyI6k9NtaW5T/vDa2ww7UR4Pebyk8X/oueXn/4rG/90RMbvo/07+at5TnHvy357fW7XH+B/Kk8b/2Jr6/7Unhm/1/diq/tX1/8caff2hLMf8H8z5Kg/Tzub8gnBsLyra6vYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwE5Qi4g9kdQG5tO12sBARE9EPBG7axNXpqZfOHflg8tjaVnj8/9r+Sf99s4dJ/nn//ctOB5edHw0IvZGxJdt3Y3jgbNXJsbKvngAAAAAAAAAAAAAAAAAAADYJnpa7P9P/dFWduuATddedgOA0hTE/y9ltAPYevp/qC7xD9Ul/qG6xD9Ul/iH6hL/UF3iH6pL/AMAAAAAwI6y98DtX5OImH25u/FIdWZlHaW2DNhstbIbAJTGLX6guiz9geryHh9IVijvannSSmcuZ/LsI5wMAAAAAAAAAAAAAJVzcL/9/1BV9v9Dddn/D9WV7/8/UHI7gK3nPT4QK+zkL9z/v+JZAAAAAAAAAAAAAMBGmpq5dnF0YmL86o5M7IqIVT/5re3R5q1M1Ov16+lPwXZpz/88kS+F3y7tWZTI9/qt7qzyficBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADN/gsAAP//+tMiow==")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000900, 0x0, &(0x7f00000001c0))
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0)
syz_clone(0x40002000, &(0x7f0000000300)="0baec713b91330a8f82dc3dc96f4ec2e952bdcc3b8a713a6f20d3484ece8eeeb23d80d4f74ea6baf9b00364689aac9f04dbca34d4834b63af19aafd6c47ed8f60b94b9f58ac994be369d3c8de3c8d269be5afc549760e3ccce7791d66de43e471e6e924568ca8eff31b3a0531ef1b48c325683f913a34f71118e84f356107a30d171ace18461d5f6358ffe3b976849f0bce3d16fb1bf797f04b5a05bb95da7902ee5f079c20d9154a2633f38d44749335c307439b8013a865643db3432a83c61392fb03e0350ca6c3883a5f3ea1f8380a16b9bd3473a1910405cd40fa5efd809247f5fd09667a8b0632f", 0xea, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000400)="2e1531bc177c564f197ba527ff28c5635bd1af185a8bd7ec6b81119f5bbd83d343c4a25aa871a6eece312be3145c1f764eca7ae2ffd9cbcc9558a00b93bb39ca97281e2c8e099c9e6bf7cae8aa04d60dfd9d8fcc76088e4c67e251462010a324169359")

1m2.291980014s ago: executing program 3 (id=8034):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
setregid(0xee00, 0xee00)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) (async)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_aout(r1, &(0x7f0000000e40)={{0xcc, 0x21, 0x2, 0x373, 0x389, 0x23, 0x68, 0x5}}, 0x20) (async)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r2, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

1m0.313482054s ago: executing program 3 (id=8064):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000880)=ANY=[@ANYRESHEX=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x18)
write$selinux_user(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u::bject_r:auth_cache_t r'], 0x27)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x3b, 0x2, 0x0, 0x0, 0x0, 0x10000000000007, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x6, 0x31a0000000}, 0x0, 0x10000, 0x1, 0x4, 0x8, 0x20405, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r8, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
listen(r8, 0x0)
connect$unix(r7, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="014ee1b9d68a57da54565fef27bf9b3100"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000f80)=ANY=[@ANYBLOB="7d8b5aa9a2957ce8d4888ddda0ac333fc13d2f9ddaa57ed59b1656cfcb0e48439755296d88591b2cf8681f7411279be6536cdf8624b90a2c38bedaa0310b53a9e7157afea4806605a70bad3253ba98fc506c7da5912297f14762d0fa3a09679f35367194bb39084e7877ea72f36e859d479db6b16c66ac2db83a7fcd2c44f242a69d2948c893f6cacd42aa5fe2081fca59eb4908e5c3ebcf1a529016eefb1344acd8ee377457ea0ee6d78e07b46764f024be4628f3e1e87b2919eefde906f293fe3bdce5057d7be356de565872d783b97dd2db46469342771588888c930894ea3ac2010a273d41ef5ae6c6498108d09c5ccab9c4ca149296d88b9256ea8e3fdc8cda22915ee05f638a8e60364a8e72fa5ef233786e47e826769b012cf98476fa3b27768f64bdf30727124cac0a3a669d95c5498373afc8cbe778c7065e8749e4a1b3d0dbff0cb375ff282d3a482db3d10a5118f1a1d6c2996365938b8621d4975746570493c714cdb8bfb6795bdd1d131345ba6faf7a5aa0a516627c60fa7b90fb4c5732427bdf5544cfa3ca7e7127f94a19f25ddbf07478f5740495a4fec01a598f1529c6abe04eb18c0040466430881f145639ecce9c2f359d45ece863f8a4cb05eb968a2c8cb991c0de6f6d3b7990aa144494590d28870a387ce2bc1335798b871375005f40b54a34fac2c7559363730ef39ffc3de7b6e5b20c816e3acd64e3213cc848abebce77a89cb57eb7b5e2f9db35f541b51c680f7cb78209c7747532fcc89aeac6c3bfbe9ca72aace7adfdfa3e39c694cf85e4af6cafa3f69f8adc6c839a642a7fbb7d084fd3b550f22fb3f3bd15c186b3327866abd7982bb6b1305d64fbba871dbe9621f0423338ba6096d487e332a9129db0e30f8f8288a421b5693db342c9caa75309c58b73a3fbe0cefcdbd37bec4da817141e70d5d5d21b0f0ec41896de41f51c83a3a6584f3dfb1086d734a64c5e9d28b182863a49ad0365bf91a81172f41d15a61f10395b6e013f4182b757fd365a44f3118e0ab45f7d202ed35c0d2750d7f6c9b4975eebdcdd8e64d590f938ec2e5b07da4ae9bdda993f3b624568f6e64ccd8e73bac0e9d22af1222a492fa9302714e866a686bc704ab41dd5c03a73bc99734665d5295a8c80f1470d420f2d2c3ed84746293a3341d2e8c0fb496103d6bee0ca75b531acc73ce7a626486579bd1693099ba6bd4490cfbb8d154f73a2e517bd07c6e222269db10f2390dc69016f443432221d3cb8afb49cbd4a1648f09d1ac5c22fbc99bcee42b67ab2c127f292968eccd0cceafbecdf8282cdb7d388a0c3a8404158b80289a4266027b6ba6ca0da5881172e2d7924d45257dedbc86e602b56e768fce21767c117ab7901588bcd95c32c099c7033d6fefc8c98b5f9d3dc8c9e1497db0c7cdb59c73a203138fd9cc9cd6bcd493c5dabf6371d79ff56a5193be0e7071b904eee63b954919b32379216816bd360a323e177f6f70ec0d35c36e9b9d5c6d513c13601f4c962691a479c44a4abc347913c8f060c795b82436e6ee2880c4209f090c6a445f7b49a459eeb8da393d6f7246b792b1f08e2ee9010658c8e3ca5512474fa72c896c20b9129bf4e263abe49ebe99a12e30beb2bc730c42e03d1d94cc92366acaedbf710ab177582c93272d3b23947cbaf3a1517eba7ad109fde9f861cdc2aa0d33f978e3d86ba18295318da846fb3b9018a5ce23dd82a37fc49c44b67e7dabba8d93b1085da0c110e6676ea8486381c2a545fbcca2333209e88b77c3f6c14a5fbd86014a2477cf4a0bd856cb1de97ea678c52b70f7af2b84c701126997958bc7c0e52204bb54242ed626e42643e5254234bfca30e2655a8bca17b0cbb112421b879ae65bd0ab67bddca63d08a733e572fc8256f916b1f920d594221326e1a1d6ae20954bb2f9ccae962562bc6ca2a06dfa83c1d912beab81b174d96e1f7966b4e49521298c1387a74f4e22c0d95bfae909e57fc7f4ec332948b0fe8a3786a8c5af04efa59f46e9d754afa14800bf54e6da924581482d5564d3fe7a47f7a752e71d5827a90a9bd41193a845dcaacabe62de98f0a31239d7820ef353a002120c3dc9267c5e3ac1c5f691e660103169b7678f2f0830022f4d1d43e2210a673c8ef97dc1586ae5cb9c1ed6f54a1782c4c9627c88f339c420a2435e2163e6f3a83bd4b8f420c23b0554a3a649f3f9fbd4eab135ae91a8face1992a555f505accff69ff9d4c552fdbbb18d4c63dec40921020ae512ea8389a97559075a5704c66cc069150f95e6c2e34edfedba37e7fde64513ae4e160f9d56b7db1f17de77ab52ee45a71446f5423426c23ef77f0bac36e8c635c0a266eceabf14f3acaf6ed4396b477f20872441b9267dd57d3a125337e7706b5729169c7d6f6a9b753eaa446af3b45214469f6ff1079ea23360b0ff9a5953653c3138bf5354c7dbe8ba9d2c41f747df0f52034f071c4b2df3921249b3404cfc8bd2ff5a8db1f30436b30246ac34a5170039c9b76a5be034711d54aed3e772aacf4012d5c6c599f8cf5717ea3cc20d6be57cdba575b33774dbc9aad23f48448a77180e44ee75194ffaf06267a79f6854e6b6ff59bbeefffa03fe4d692e82abe5e59177962fc5aa18b437c5954370bf80f66d0efb58f371215e2574fe4503493e40709d85ee7815d0f013cf8d89ae1608d052d153c1758e02033e226cc09512f57155295a9cbff0d9ffb3302dee5260511c1c831254a89bbb30b556a2c9ac67d9d619ade64aea0c01f79060f4050e9590f092ec10692c059ffe31ab5cf4c8fe4823ed595e1b82b9037ba1702a565f4de89665cd5c36faa4160ea993f9173af13d5ed746ff723064fc2c7dc998f288ff41ec316246345516a2a58eb3b1ab930f476c8181f71ccf2fdebeb904fbf1bb04cad2784abeb9d869324e9c01e2a8afa0965c988f058cf7b22ad88bdbccee7d117b06d552c01ad516ffb00b31cc2f0f2e976d26b91e96d922d21b1e6579f828007d4e508733224e9c9f62dbba9a5ea5ed388430212f9d9c41a29535192d2a19cc4d6f02ab92ea922e6fc4ea1fa4684ad3b49a795d9f7d541ad3f708dae253509ef7cad452e51c2a0c54a8c3cc512ff937834bafa62c87adaff612357bb37322c1676fccec81351ac7c639ef9e473918bce3b7003032c8344b1d6e75dcfe3b3a70128f193f9d74edc1b072875db7032c850e8afd42b81b5bfe40c57d8dcd546eba11b483290015e005e2363ed1018062e4467b02cdefa59ef08bd15fd31eb55fe5238dfbf172feab71533f7fb8af554520310c0b27ae1371b441fcebb853d9f07eaff86fd79621c825a5cceac59f1d2b799d4df62fe0821de94db2b251edf0c4262ed126de137a870d93ff6fbd49617ad2cfbd51364e08cc376bf67ac5f75c5c01d2b55fd596d2c5112d6c301758657ea443556d579a07f3e219502751b733c09fca6b89c3197e6d4e2ed234720974ff368489326a72bab632c08c7e590fc1ef8a3de04a9b0f1008df0e1b9723c0b6bc6101d7fd52daf94afbc7ea096d27e54f218d468853f1b856364e5b90d29d835e2fe167b873dc5d65b7b173b2b53c09738da12b0e0fa750a7172ef61c104779bc389", @ANYRES16=r2, @ANYRES32, @ANYRES16=r5], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r10}, 0x18)
sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001300000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m0.198349476s ago: executing program 49 (id=8064):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000880)=ANY=[@ANYRESHEX=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x18)
write$selinux_user(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u::bject_r:auth_cache_t r'], 0x27)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x3b, 0x2, 0x0, 0x0, 0x0, 0x10000000000007, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x6, 0x31a0000000}, 0x0, 0x10000, 0x1, 0x4, 0x8, 0x20405, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r8, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
listen(r8, 0x0)
connect$unix(r7, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="014ee1b9d68a57da54565fef27bf9b3100"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000f80)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYRES32, @ANYRES16=r5], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r10}, 0x18)
sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001300000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.67464839s ago: executing program 4 (id=9007):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r0, &(0x7f0000000180), 0x8)

2.65449867s ago: executing program 4 (id=9009):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x3ffff)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6}, 0x10)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$selinux_validatetrans(r4, 0x0, 0xfffffffffffffebd)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="e0f22c7619da5b783d5326e95d200000000109000000000000000000000a0000020c00198008000100060e04001a575545fa6f7e338dd80a4281ee1970ae14293596bf7ed6a5c842930dd11077ad4abdb1b95eb1a872a2c3a6353eedfbd4fe38b57f311d3567a1bdc9"], 0x20}, 0x1, 0x0, 0x0, 0x8000850}, 0x20008840)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50)
syz_open_dev$usbfs(&(0x7f0000000000), 0x100, 0x64a40)

2.569860411s ago: executing program 6 (id=9013):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x120d, &(0x7f0000001280)="$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") (async)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
set_mempolicy(0x1, &(0x7f00000000c0)=0xfff, 0xe41)

1.713287604s ago: executing program 6 (id=9026):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10)
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000340), 0xfd, 0x1d5, &(0x7f0000000840)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r4, 0x2000009)
sendfile(r3, r4, 0x0, 0x7ffff004)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000c000000280005801400f4800400020000000000080001000000000008"], 0x3c}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x18)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000002100000000050000000000000095c333d4c0a3ecdd69086b8e4c36439a8808b90ea579cdf8bd475a470064827701f4169ebebecb5bba94f06f020fb64e5594a86f5f00000000000008c7533dc98a94008d7d2a7d2c23bc3f4cc1992aebd29fd21e95b3c7c49de340c24cb6ba1a33740825c424ecd87a3b02ae7840be900964b6948074a8f2ed867fd6601b0ca02215f4c2a5157135575fa1903abe92246853cb7cb868a3b2524a92bfa8aaeaf3ff3f08fb97ec0c126bfea903ef567bdf48aecb23342c8102732b7257f65b1f7d82adec836fd77d2f5c6e6c18ae428531d9e4d906b0a19827bffab9ced1e24e8f063d44fb76dd59e75486"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r8, 0x11, 0x0, 0x0, @void, @value=r7}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'})

1.655985825s ago: executing program 4 (id=9027):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000a9348702030000000000000000c1fd9e5988b1ba19de7f5b513956422cd4920cdbad599c1112db2e3c2d1161fbffdbaf68067373a2a79cec152310472225a35a3eee54585dfe885356678b9611873eebbbdf4c72cdf51876"], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
r2 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa1c406, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES16, @ANYRESDEC], 0x1, 0x2a2, &(0x7f0000001140)="$eJzs3M9r02AYwPGn6dZ0k/04CXrxQS96CbMe1UOVDcSC0q2iHoSMZVpa25EUbUUwZ0/7O4ZHb4L4D+y/8DYE2WknI22zNOu633Wt3fcDI++b5323J3nJeNKSbD1ff1ta9axVuyZGWsUQ8WVHZFaKsisRblOtdiraL/cz4sutuXfbnxdfvHyczeXm86oL2aU7GVWdvvb9/ccv13/ULj37Om2asjn7aut35ufm5c0rW3+W3hQ9LaakUq2prcvVas1eLju6UvRKlurTsmN7jhYrnuPuia+Wq2trDbUrK1OTa67jeWpXGmpIQ2tVTYdZVdSyLJ2abLbTcoGkTjyjsJHP29lOfz7Z34wwDFw3azcXdmLf1VDYGExGAABgkA6u/41ozG79b3TX/yJH1P+fwlHT33rW/56evv5PSlT/l5xW/V9zG2q/tovx+h+H6q7/j8f4N8ngLBJ+rPNgT8h1sxO9J1H/AwAAAAAAAAAAAAAAAAAAAADwP9gJgpkgCGaaW0NEgrBvikgy1u8x9UI9Wz+q4usfxH7McIEPWX+MgNiDe2mRX369UC8kWtt2fOFRbn5OW2IP/m3X64VkFL/djuve+LhMhvFMz3hKbt5ox5uxh09y8fh6vTAhK4dm7vfrFAAAAAAAMPIsjcxGO9MS3d9blprSHW/dv7dbfufzAe28GqgZH5OrY+d5JAAAAAAA4CBe40PJLpcd93wayXP8W6duiJxu+t3A7EsaSRE5Ykx+UWTwJ2pfw5ShSGOUG/f69guDhEh7z3j4z6DrKgAAAAAwWjr3Ayefy9f7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0x5neImYcb/CgjxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYFn8DAAD//8DvvIM=")
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080), 0xc1, 0x7c0, &(0x7f0000000f80)="$eJzs3c9rG9kdAPDvyJZ/Ja1dKLTpyVBoDSFynbpJCz2k9FAKDQTacxMjKya1bAVLDrExJKEUeim0pYfC7iXn/ZG97XV/XHf/iz0sCdldx6yXPSxaRh7Zciw5dtaSDPl8YDzvvZnxe1+/mfGT3iAF8MqaTH/kIs5FxL+TiPGsPImIfCM1GHFlZ7/tzY1iuiRRr//586Sxz9bmRjFajkmdyTI/jogP/hFxPpcWjOyrt7q2vjhXLpdWsvx0ben2dHVt/cKtpbmF0kJp+dLM7OzFy7+6fOnkYv3y4/WzT/7zh5+/feXrv//o0b8+TOJKnM22tcZxUiZjMvub5NM/4T6/P+nK+izpdwN4KemlObBzlce5GI+BRqqD0V62DADolnsRUd8zVAcAXgFJ9LsFAEBvNd8H2NrcKDaX/r4j0VtPf7czNbmVzW1u78Y/mM3ZjTTmQce2kn0zI0lETJxA/ZMR8fq7f30zXaJL85AA7dx/EBE3JiYP3v+TA88sHNcvDttYH26sJp8rdv+D3nkvHf/8ut34L7c7/ok245/hNtfuy3jx9Z97fALVdJSO/37b8mzbdkv8mYmBLPe9xpgvn9y8VS6l97bvR8RU5IfT/Exj1/ZPQU09++ZZp/pbx39f/Pdvb6T1p+u9PXKPB4f3HzM/V5v7rnE3PX0Q8ZPBdvEnu/2fdBj/XjtiHX/8zT9f67QtjT+Nt7kcjL+76g8jfta2//f6Mjn0+cTpxukw3Twp2njnk/+Pdap/r/+HG+u0/uZrgV5I+3/s8PgnktbnNavHr+Ojh+Pvd9rWev63j7/9+T+U/KWRHsrK7s7VaiszEUPJnw6WX9w79m4+S2T7p/FP/bT99d/p/M9lz8be2M0dbvDJZ29lv6pt/A33O8XfXWn888fq/0MS9eyY5zY92l4c6FT/0fp/tpGaykqOcv97QUubiRd3HgAAAAAAAAAAAAAAAAAAAAAAAACcgFxEnI0kV9hN53KFws53eP8wxnLlSrV2/mZldXk+Gt+VPRH5XPOjLsdbPg91Jvs8/Gb+4nP5X0bEDyLif8OjjXyhWCnP9zt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMic2f/9//fSVaGws+3T4X63DgDompF+NwAA6Dn//wHg1XO8//+jXWsHANA7x379X0+60xAAoGdGIn+0HW90uyUAQK+Y/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDLrl29mi71rzY3iml+/s7a6mLlzoX5UnWxsLRaLBQrK7cLC5XKQrlUKFaWOv6i+zurcqVyezaWV+9O10rV2nR1bf36UmV1uXb91tLcQul6Kd+zyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6Kpr64tz5XJpReLQxOjpaMapSQzGqWjGiSXqAzvXw+loz2A0S4b61ozWu8Ron+5OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfftwEAAP//uwceNw==")
mkdir(&(0x7f0000000000)='./control\x00', 0x81)
open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
getrusage(0x1, &(0x7f0000001080))
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0}])
mkdirat(r2, &(0x7f0000000400)='./file1\x00', 0x120)
r6 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f0000000300)={0x18, 0x0, {0x4, @remote, 'ip_vti0\x00'}}, 0x1e)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006000000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
quotactl_fd$Q_SYNC(r6, 0xffffffff80000102, 0x0, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x4000000}, 0xc)
read$ptp(r7, &(0x7f0000000280)=""/244, 0xf4)

1.410743099s ago: executing program 4 (id=9028):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)

1.410090048s ago: executing program 4 (id=9029):
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000040)={0x0, "f713ce12c1fe3c9a2cd6b337dad1ce400cd698adfc4a6bee479ccd9b275e51e4121209972d25880c4f43648580c5c3893b826beb9a17136643db3077a0b7cf3f"}, 0x48, 0xfffffffffffffffe)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
set_tid_address(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x41c902, 0x128, 0x5}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e40)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r2, 0x0, 0x39, 0xef, &(0x7f00000005c0)="0c73cf7f5a230242f6750a711f66a997aca8e15f0cb394484f6dda1d32e6c67ccb8968f1ab48e89ff276df4af8736ad396907eb05f0a3f3b41", &(0x7f00000008c0)=""/239, 0x3, 0x0, 0x1000, 0x1c, &(0x7f0000001340)="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", &(0x7f0000000600)="70756242d15fb7955ef8ccd835c24640206489f47f18dc565e1aff13", 0x45ac38195f9b363b, 0x0, 0x7}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18)
stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getgid()
setxattr$system_posix_acl(&(0x7f0000000640)='./file0/file0/../file0\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000d40)={{}, {0x1, 0x4}, [], {0x4, 0x5}, [{0x8, 0x4}, {}, {}, {0x8, 0x2, r6}, {0x8, 0x5}, {0x8, 0x0, r7}, {0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x6}, {0x20, 0x2}}, 0x5c, 0x2)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x2)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000180)={@mcast2, 0x5b})
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x4, 0x1, 0x9, 0xc6}]})
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r8, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x86}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000098}, 0x4014)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18)

1.181772862s ago: executing program 9 (id=9032):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000"], 0x10c}}, 0x0)

1.149309373s ago: executing program 9 (id=9033):
socket$inet(0x2, 0x4000000000000001, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRESHEX, @ANYBLOB="000000ffffff7f4000000000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8060, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x9, 0x800000, 0x0, 0xd3a4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1)
clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14)
fcntl$setsig(r2, 0xa, 0x13)
fcntl$setlease(r2, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
socket$inet(0x2, 0x1, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r3 = inotify_init1(0x0)
inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0xa4000061)
read(r3, &(0x7f0000000140)=""/68, 0x44)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
splice(r0, 0x0, r4, 0x0, 0x9, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r5, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
shutdown(r5, 0x0)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x68}, 0x8)
close(r5)

1.017954135s ago: executing program 5 (id=9036):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000"], 0x10c}}, 0x0)

998.718595ms ago: executing program 5 (id=9037):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

996.573755ms ago: executing program 7 (id=9038):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, 0x0, 0x300080c1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2931010000000027000c000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000009000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r2}, 0x10)
socket$inet(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x3, &(0x7f00000004c0)=[{0x6, 0x2, 0x0, 0x7fff0000}, {0x3, 0x5, 0x5, 0x4}, {0x101, 0x8, 0xa1, 0x5}]})
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='netlink_extack\x00'}, 0x18)
r3 = socket$netlink(0x10, 0x3, 0x0)
poll(0x0, 0x0, 0xd)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x803fd, 0x1, 0x800})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x6}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x4}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0x58}}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

981.392636ms ago: executing program 5 (id=9039):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)

962.329756ms ago: executing program 5 (id=9040):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
open(&(0x7f0000000180)='./file0\x00', 0x40c5, 0x24)
r0 = dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000bc0)=ANY=[@ANYRESDEC, @ANYBLOB="b7efcca76fd89bec4c198b7a0dfb8d1c97aa02d542f39ac7795baf3fe7604e6879e1710431eca58341edd99596f9c76fd5b870712da63aa0501bf674d72f0e6c9c65eafeca2c7a53919b4fc3a661b86c6c2e641c5ecd4742e25a7cce705033811e3a73775cef2b3e0a678901e0653b7a04ca29d752a23b5c1cc9490221d4f6559e3dfb504e7fe2a08ec8ed66be869765d8432c28a3dc2dfc04df559d9fbc4c938d2d28968faf1ed5dece76ed58361fea571cf8d1e0774896530468e36a", @ANYBLOB="2c7766649a4c34e92bd2d0d7b929ae88013e4c11a99e291c3f95b5379f98f5247c", @ANYRESHEX=r0, @ANYBLOB=',msize=0x0000000000001000'])
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x3, 0x40}, 0x0, 0x0)

954.458296ms ago: executing program 7 (id=9041):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
epoll_create(0x3ff)
epoll_create1(0x80000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

889.770097ms ago: executing program 7 (id=9042):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x2040400)
unshare(0x100)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10)
setitimer(0x2, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10)
syz_emit_ethernet(0x52, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a3705001c3300fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xfcd66000)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)

795.138878ms ago: executing program 6 (id=9043):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b)
io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
cachestat(r0, &(0x7f0000001180)={0x5, 0x6}, &(0x7f000009de80), 0x0)

550.076682ms ago: executing program 7 (id=9044):
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
truncate(&(0x7f0000000040)='./file2\x00', 0x8000c00)

498.805043ms ago: executing program 4 (id=9045):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmsg$unix(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x404c004}, 0x8000)
recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
r6 = getpid()
r7 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000480), 0x4)
sendmsg$tipc(r7, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x4000001)
recvmmsg(r7, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1, 0x0, 0x18}}], 0x1, 0x0, 0x0)
recvmsg$can_bcm(r7, &(0x7f0000001f40)={&(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000800)=""/83, 0x53}, {&(0x7f00000008c0)=""/103, 0x67}, {&(0x7f0000001cc0)=""/244, 0xf4}, {&(0x7f0000000980)=""/59, 0x3b}, {&(0x7f0000001dc0)=""/28, 0x1c}, {&(0x7f0000001e00)=""/182, 0xb6}], 0x6}, 0x40002000)
kcmp(r6, r6, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)
sched_setscheduler(r6, 0x0, &(0x7f0000000000)=0xd)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000e4ffffffffffffff000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

436.658663ms ago: executing program 6 (id=9046):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

360.120645ms ago: executing program 6 (id=9047):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x3000046, &(0x7f0000000180), 0x1, 0x581, &(0x7f0000000d80)="$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")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000ffdbe8251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(', @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0c0004000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)
sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf255400000008000300", @ANYRES32=r2, @ANYRESOCT], 0x70}, 0x1, 0x0, 0x0, 0x400}, 0x28040880)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00005d91877d29c4ab705176e734575b2bd5d57434acc33dda992eef82ff915ad4f26c5a016b6baaa4b650e66c60d900c3f99fa7d73be3af0affb2d7aa417c9245cdbf1690f626b23db2410200000000000000dbd454bbddd7e4a09885d81a3069aefc4788f8a8a85ce34ca5ab571814bddbe48efa56c7fa517d0a797f0faf8856f5d3b7635e106384fa221dec9fe335b05bac73db59a75bbe8647c441"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40400c0)
r3 = syz_open_dev$loop(&(0x7f00000005c0), 0x1, 0x20000)
sendfile(r3, r0, &(0x7f0000000600)=0xfd0, 0x1f)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x101042, 0x100)
pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
ftruncate(r4, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, 0x0, 0x80)
r8 = socket(0x10, 0x803, 0x0)
sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r9, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x475, &(0x7f0000000900)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2218032, 0x0)
r10 = openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0)
pwritev2(r10, &(0x7f0000000080)=[{&(0x7f0000000e40)="2b8d35e5c6067fcc45428d0428d71e48c5", 0x11}], 0x1, 0x105405, 0x0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3000009, 0x4082172, 0xffffffffffffffff, 0x97c3e000)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
setreuid(0xffffffffffffffff, 0xee00)
io_setup(0x4441380e, &(0x7f0000001140))

299.810495ms ago: executing program 7 (id=9048):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000"], 0x10c}}, 0x0)

213.091337ms ago: executing program 9 (id=9049):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x17, 0x0, 0x0, @multicast1}}}}}, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

212.360677ms ago: executing program 7 (id=9050):
r0 = socket$inet(0x2, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007910480000000000710400000000000095040000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdfb}, 0x21)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
set_mempolicy(0x2, 0x0, 0xa)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e40)={<r2=>0xffffffffffffffff})
r3 = io_uring_setup(0x291c, &(0x7f0000000140)={0x0, 0xd58d, 0x1, 0x0, 0x1})
dup3(r2, r3, 0x0)
prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1)
futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0)
r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000003"], 0x64}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
r8 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000340)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000009c0)="4230a2391d708dac2e8ae0471963dc9299d933f010d871126ce1bfa35455a0a7acde3deb3ff7cb5c7eeaa050e3744d931614d9933a7f535e83c7bcd9161a962551cbcc103e2a76346a0433224bec34eafd172635b9aa8b0ed9270ad3015bf2d2d9ca112c0ab80e7a011105dd15799b7ce5bd1d12b489a978bf0a5c7a647f9ac6a5ae92fa5138abc5e692a2ab704441341cf15c71249d0902f8e9e15f980a3231b78ad9963ec180c40411b098ba7b7a9c56b0902f60cfec3628509da6e84464d82ea0fc6a84c998216368c513e948f11023784b49", 0x60}, {&(0x7f0000000780)="61be95ad764f7fe39cb16c6d7c0df2621c1825e1731d0c8e581c8db156cf5c2c6df9aabbb234449979aee45eba031b8a8d9ea0587ecf95e1fdc4915b8ee30000b5f4df916b5e86b4c79d188ba98a30e4b92752", 0x53}, {&(0x7f00000006c0)="c89349232fa1314b57111e7a4f98bbde9e55b6f9c84309d29c01420ab235965ae9b881ac317e7461b2e4cfda3849a26f8f7eff33c48d3d0f9abb7f41a5d49b182cfd45ea8fcdd7e890fc71d2564eb4fc788e0ca18954eaac76f01372271a4e2b9efd280f6a5c62ca24526c57a424f66f6f132d0a4e8102452ca4ffa31b1037f9caca011ef821d4b74d1ea866073ef003c4daac135030d88ab1be83853841b516e3bf6ab3ef9545267f47addb0f404b7f5aaa1e47cb63a6d75097b90ace82", 0xbe}], 0x3}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000380)="b9", 0x1}], 0x24, 0x0, 0xfffffffffffffe73}}], 0x2, 0x40091)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0)
write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0xffa8)
ioctl$TIOCSLCKTRMIOS(r1, 0x80045440, 0x0)
setuid(0xee01)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010302}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)='\b\x00', 0x2}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810)
unshare(0x2040400)
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0)

135.342058ms ago: executing program 9 (id=9051):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

134.710918ms ago: executing program 9 (id=9052):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x8001, 0x2}, 0x0, 0x10000, 0xfffffff9, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000000))
ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r6, 0x0, 0x80001}, 0x18)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000)

89.520179ms ago: executing program 5 (id=9053):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000"], 0x10c}}, 0x0)

71.082619ms ago: executing program 9 (id=9054):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10)
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000340), 0xfd, 0x1d5, &(0x7f0000000840)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r4, 0x2000009)
sendfile(r3, r4, 0x0, 0x7ffff004)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x18)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r8, 0x11, 0x0, 0x0, @void, @value=r7}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'})

41.69582ms ago: executing program 5 (id=9055):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, 0x0, 0x300080c1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2931010000000027000c000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000009000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r2}, 0x10)
socket$inet(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x3, &(0x7f00000004c0)=[{0x6, 0x2, 0x0, 0x7fff0000}, {0x3, 0x5, 0x5, 0x4}, {0x101, 0x8, 0xa1, 0x5}]})
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='netlink_extack\x00'}, 0x18)
r3 = socket$netlink(0x10, 0x3, 0x0)
poll(0x0, 0x0, 0xd)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x803fd, 0x1, 0x800})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x6}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x4}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0x58}}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 6 (id=9056):
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) (async)
r1 = socket$rds(0x15, 0x5, 0x0) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x1000000}, 0x18) (async)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) (async, rerun: 64)
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) (async)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r5 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async)
write(0xffffffffffffffff, &(0x7f00000004c0)="46ffddb08005af8998e53df1c8e87808e8e660244c36bf17065bcd5b61bae5da143bc8b0556bb2fabed7cc1782510700"/62, 0x3e)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000500)='asymmetric\x00', &(0x7f00000002c0)=@secondary) (async)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) (async, rerun: 32)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) (rerun: 32)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8, 0x0, 0x100000000}, 0x18)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@mask_cswp={0x58, 0x114, 0x9, {{0xc403, 0x5}, &(0x7f0000000140)=0x9, 0x0, 0x1, 0x8000000000000001, 0x40000000bbc, 0xffffffffffffffff, 0x0, 0x5}}], 0x58}, 0x0) (async)
write$selinux_attr(r0, &(0x7f0000000380)='system_u:object_r:logrotate_exec_t:s0\x00', 0x26) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000540)='track_foreign_dirty\x00', r10}, 0x18)

kernel console output (not intermixed with test programs):

84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29380 comm="syz.4.8351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f25dc71d58a code=0x7ffc0000
[  601.791016][   T29] audit: type=1326 audit(1055.568:46885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29380 comm="syz.4.8351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25dc71e929 code=0x7ffc0000
[  601.859446][T29394] loop5: detected capacity change from 0 to 128
[  601.871962][T29396] loop7: detected capacity change from 0 to 512
[  601.885125][T29404] netlink: 'syz.6.8359': attribute type 10 has an invalid length.
[  601.886570][T29396] EXT4-fs: test_dummy_encryption option not supported
[  601.902358][T29394] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[  601.910247][T29394] FAT-fs (loop5): Filesystem has been set read-only
[  601.918691][T29394] syz.5.8352: attempt to access beyond end of device
[  601.918691][T29394] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  601.955231][T29408] loop7: detected capacity change from 0 to 1024
[  601.962338][T29408] EXT4-fs: Ignoring removed oldalloc option
[  601.968797][T29408] EXT4-fs: Ignoring removed orlov option
[  601.975060][T29394] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[  601.983236][T29394] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[  601.992021][T29408] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  601.999226][T29409] syz.5.8352: attempt to access beyond end of device
[  601.999226][T29409] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128
[  602.015120][T29409] buffer_io_error: 11734 callbacks suppressed
[  602.015172][T29409] Buffer I/O error on dev loop5, logical block 2065, async page read
[  602.049438][T29408] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  602.067189][T29409] syz.5.8352: attempt to access beyond end of device
[  602.067189][T29409] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128
[  602.080731][T29409] Buffer I/O error on dev loop5, logical block 2066, async page read
[  602.117096][T29409] syz.5.8352: attempt to access beyond end of device
[  602.117096][T29409] loop5: rw=0, sector=2067, nr_sectors = 1 limit=128
[  602.130500][T29409] Buffer I/O error on dev loop5, logical block 2067, async page read
[  602.147082][T29409] syz.5.8352: attempt to access beyond end of device
[  602.147082][T29409] loop5: rw=0, sector=2068, nr_sectors = 1 limit=128
[  602.160452][T29409] Buffer I/O error on dev loop5, logical block 2068, async page read
[  602.171353][T29409] syz.5.8352: attempt to access beyond end of device
[  602.171353][T29409] loop5: rw=0, sector=2069, nr_sectors = 1 limit=128
[  602.182787][T29408] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.8361: Allocating blocks 497-513 which overlap fs metadata
[  602.184705][T29409] Buffer I/O error on dev loop5, logical block 2069, async page read
[  602.206786][T29409] syz.5.8352: attempt to access beyond end of device
[  602.206786][T29409] loop5: rw=0, sector=2070, nr_sectors = 1 limit=128
[  602.220094][T29409] Buffer I/O error on dev loop5, logical block 2070, async page read
[  602.230552][T29409] syz.5.8352: attempt to access beyond end of device
[  602.230552][T29409] loop5: rw=0, sector=2071, nr_sectors = 1 limit=128
[  602.243898][T29409] Buffer I/O error on dev loop5, logical block 2071, async page read
[  602.260878][T29406] loop9: detected capacity change from 0 to 512
[  602.271594][T29409] syz.5.8352: attempt to access beyond end of device
[  602.271594][T29409] loop5: rw=0, sector=2072, nr_sectors = 1 limit=128
[  602.284910][T29409] Buffer I/O error on dev loop5, logical block 2072, async page read
[  602.293555][T29406] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  602.302049][T29406] EXT4-fs (loop9): orphan cleanup on readonly fs
[  602.309962][T29409] Buffer I/O error on dev loop5, logical block 2065, async page read
[  602.312380][T29406] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.8360: Failed to acquire dquot type 1
[  602.318155][T29409] Buffer I/O error on dev loop5, logical block 2066, async page read
[  602.376665][T28156] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  602.392457][T29406] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.8360: bg 0: block 40: padding at end of block bitmap is not set
[  602.417376][T29406] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  602.426610][T29406] EXT4-fs (loop9): 1 truncate cleaned up
[  602.435039][T29406] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  602.504693][T29421] bond0: (slave bond_slave_0): Releasing backup interface
[  602.835875][T29434] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  602.952080][T29446] FAULT_INJECTION: forcing a failure.
[  602.952080][T29446] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  602.965621][T29446] CPU: 1 UID: 0 PID: 29446 Comm: syz.4.8375 Tainted: G        W           6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) 
[  602.965657][T29446] Tainted: [W]=WARN
[  602.965666][T29446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  602.965679][T29446] Call Trace:
[  602.965686][T29446]  <TASK>
[  602.965709][T29446]  __dump_stack+0x1d/0x30
[  602.965737][T29446]  dump_stack_lvl+0xe8/0x140
[  602.965760][T29446]  dump_stack+0x15/0x1b
[  602.965880][T29446]  should_fail_ex+0x265/0x280
[  602.965910][T29446]  should_fail+0xb/0x20
[  602.965935][T29446]  should_fail_usercopy+0x1a/0x20
[  602.965970][T29446]  _copy_from_user+0x1c/0xb0
[  602.965997][T29446]  ___sys_sendmsg+0xc1/0x1d0
[  602.966048][T29446]  __sys_sendmmsg+0x178/0x300
[  602.966144][T29446]  __x64_sys_sendmmsg+0x57/0x70
[  602.966219][T29446]  x64_sys_call+0x2f2f/0x2fb0
[  602.966240][T29446]  do_syscall_64+0xd2/0x200
[  602.966259][T29446]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  602.966289][T29446]  ? clear_bhb_loop+0x40/0x90
[  602.966380][T29446]  ? clear_bhb_loop+0x40/0x90
[  602.966408][T29446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  602.966482][T29446] RIP: 0033:0x7f25dc71e929
[  602.966499][T29446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  602.966517][T29446] RSP: 002b:00007f25dad87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  602.966537][T29446] RAX: ffffffffffffffda RBX: 00007f25dc945fa0 RCX: 00007f25dc71e929
[  602.966554][T29446] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000006
[  602.966629][T29446] RBP: 00007f25dad87090 R08: 0000000000000000 R09: 0000000000000000
[  602.966642][T29446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  602.966653][T29446] R13: 0000000000000000 R14: 00007f25dc945fa0 R15: 00007ffeea8549c8
[  602.966673][T29446]  </TASK>
[  602.977333][T29444] loop6: detected capacity change from 0 to 1764
[  603.193152][T29452] __nla_validate_parse: 21 callbacks suppressed
[  603.193179][T29452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8378'.
[  603.209817][T29453] veth0: entered promiscuous mode
[  603.237549][T27195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  603.289960][T29448] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8376'.
[  603.314752][T29464] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  603.332657][T29464] vhci_hcd: default hub control req: 0200 v0000 i0000 l31125
[  603.406843][T29458] hub 9-0:1.0: USB hub found
[  603.435789][T29472] FAULT_INJECTION: forcing a failure.
[  603.435789][T29472] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  603.449146][T29472] CPU: 1 UID: 0 PID: 29472 Comm: syz.5.8384 Tainted: G        W           6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) 
[  603.449201][T29472] Tainted: [W]=WARN
[  603.449207][T29472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  603.449273][T29472] Call Trace:
[  603.449282][T29472]  <TASK>
[  603.449291][T29472]  __dump_stack+0x1d/0x30
[  603.449316][T29472]  dump_stack_lvl+0xe8/0x140
[  603.449371][T29472]  dump_stack+0x15/0x1b
[  603.449387][T29472]  should_fail_ex+0x265/0x280
[  603.449418][T29472]  should_fail+0xb/0x20
[  603.449446][T29472]  should_fail_usercopy+0x1a/0x20
[  603.449498][T29472]  _copy_from_user+0x1c/0xb0
[  603.449521][T29472]  ___sys_sendmsg+0xc1/0x1d0
[  603.449615][T29472]  __x64_sys_sendmsg+0xd4/0x160
[  603.449662][T29472]  x64_sys_call+0x2999/0x2fb0
[  603.449690][T29472]  do_syscall_64+0xd2/0x200
[  603.449714][T29472]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  603.449763][T29472]  ? clear_bhb_loop+0x40/0x90
[  603.449790][T29472]  ? clear_bhb_loop+0x40/0x90
[  603.449824][T29472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.449847][T29472] RIP: 0033:0x7f623de3e929
[  603.449862][T29472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  603.449883][T29472] RSP: 002b:00007f623c4a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  603.449906][T29472] RAX: ffffffffffffffda RBX: 00007f623e065fa0 RCX: 00007f623de3e929
[  603.449923][T29472] RDX: 0000000000008000 RSI: 00002000000000c0 RDI: 0000000000000003
[  603.449958][T29472] RBP: 00007f623c4a7090 R08: 0000000000000000 R09: 0000000000000000
[  603.449970][T29472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  603.449986][T29472] R13: 0000000000000000 R14: 00007f623e065fa0 R15: 00007ffefba8cad8
[  603.450012][T29472]  </TASK>
[  603.636214][T29458] hub 9-0:1.0: 8 ports detected
[  603.739334][T29482] netlink: 'syz.4.8388': attribute type 4 has an invalid length.
[  603.747386][T29482] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8388'.
[  603.790313][T29482] : renamed from bond0 (while UP)
[  603.813522][T29485] SELinux:  Context system_u:object_r:groupadd_exec_t:s0 is not valid (left unmapped).
[  603.855926][T29490] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8391'.
[  603.886470][T29496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8393'.
[  603.896000][T29495] loop5: detected capacity change from 0 to 1024
[  603.907667][T29495] ext4: Unknown parameter 'uid<00000000000000000000'
[  604.135275][T29521] lo speed is unknown, defaulting to 1000
[  604.152702][T29521] lo speed is unknown, defaulting to 1000
[  604.293870][T29550] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8406'.
[  604.303845][T29539] netlink: 14 bytes leftover after parsing attributes in process `syz.6.8398'.
[  604.317554][T29539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  604.367648][T29539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  604.406133][T29539] bond0 (unregistering): Released all slaves
[  604.449535][T29541] IPv6: Can't replace route, no match found
[  604.461393][T29561] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8409'.
[  604.575245][T29581] loop5: detected capacity change from 0 to 4096
[  604.586340][T29581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  604.695281][T29579] loop7: detected capacity change from 0 to 512
[  604.702187][T29579] EXT4-fs: Ignoring removed i_version option
[  604.708449][T29579] EXT4-fs: Ignoring removed nobh option
[  604.711553][T29592] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8417'.
[  604.714772][T28150] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  604.731978][T29592] loop6: detected capacity change from 0 to 512
[  604.732389][T29579] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  604.739793][T29592] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  604.758938][T29592] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)!
[  604.767842][T29579] EXT4-fs (loop7): 1 truncate cleaned up
[  604.769096][T29592] EXT4-fs (loop6): group descriptors corrupted!
[  604.775257][T29579] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  604.826319][T28156] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  604.854735][T29606] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8422'.
[  604.939210][T29618] loop7: detected capacity change from 0 to 128
[  604.946583][T29618] EXT4-fs: Ignoring removed nobh option
[  604.955867][T29618] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  605.041210][T29632] netlink: 'syz.6.8430': attribute type 4 has an invalid length.
[  605.127752][T29618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  605.136278][T29618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  605.272169][T29640] loop6: detected capacity change from 0 to 512
[  605.279859][T29640] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal
[  605.298923][T29640] loop6: detected capacity change from 0 to 512
[  605.306466][T29640] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  605.315902][T29640] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[  605.328370][T29640] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.8434: corrupted in-inode xattr: e_value size too large
[  605.343658][T29640] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.8434: couldn't read orphan inode 15 (err -117)
[  605.356426][T29640] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  605.413527][T28533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  605.431248][T29645] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  605.450660][T29647] FAULT_INJECTION: forcing a failure.
[  605.450660][T29647] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  605.463818][T29647] CPU: 1 UID: 0 PID: 29647 Comm: syz.6.8437 Tainted: G        W           6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) 
[  605.463884][T29647] Tainted: [W]=WARN
[  605.463893][T29647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  605.463909][T29647] Call Trace:
[  605.463917][T29647]  <TASK>
[  605.463928][T29647]  __dump_stack+0x1d/0x30
[  605.463954][T29647]  dump_stack_lvl+0xe8/0x140
[  605.463976][T29647]  dump_stack+0x15/0x1b
[  605.464025][T29647]  should_fail_ex+0x265/0x280
[  605.464062][T29647]  should_fail+0xb/0x20
[  605.464087][T29647]  should_fail_usercopy+0x1a/0x20
[  605.464125][T29647]  _copy_from_user+0x1c/0xb0
[  605.464185][T29647]  __sys_sendto+0x19e/0x330
[  605.464232][T29647]  __x64_sys_sendto+0x76/0x90
[  605.464266][T29647]  x64_sys_call+0x2eb6/0x2fb0
[  605.464349][T29647]  do_syscall_64+0xd2/0x200
[  605.464371][T29647]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  605.464404][T29647]  ? clear_bhb_loop+0x40/0x90
[  605.464429][T29647]  ? clear_bhb_loop+0x40/0x90
[  605.464450][T29647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  605.464486][T29647] RIP: 0033:0x7f6bc0ade929
[  605.464502][T29647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  605.464525][T29647] RSP: 002b:00007f6bbf147038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  605.464548][T29647] RAX: ffffffffffffffda RBX: 00007f6bc0d05fa0 RCX: 00007f6bc0ade929
[  605.464564][T29647] RDX: 00000000000005c4 RSI: 0000000000000000 RDI: 0000000000000006
[  605.464601][T29647] RBP: 00007f6bbf147090 R08: 0000200000000540 R09: 000000000000001c
[  605.464617][T29647] R10: 000000000404c844 R11: 0000000000000246 R12: 0000000000000001
[  605.464633][T29647] R13: 0000000000000000 R14: 00007f6bc0d05fa0 R15: 00007ffd05dcfd48
[  605.464655][T29647]  </TASK>
[  605.890948][T28156] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  605.991926][T29670] hub 6-0:1.0: USB hub found
[  606.002323][T29670] hub 6-0:1.0: 8 ports detected
[  606.080683][   T29] kauditd_printk_skb: 356 callbacks suppressed
[  606.080697][   T29] audit: type=1400 audit(1060.058:47240): avc:  denied  { connect } for  pid=29672 comm="syz.5.8447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  606.110632][T29673] netlink: 'syz.5.8447': attribute type 13 has an invalid length.
[  606.186100][   T29] audit: type=1326 audit(1060.158:47241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29675 comm="syz.4.8448" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f25dc7158e7 code=0x0
[  606.233168][T29673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  606.462367][   T29] audit: type=1400 audit(1060.438:47242): avc:  denied  { write } for  pid=29682 comm="syz.5.8451" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  606.496438][   T29] audit: type=1400 audit(1060.438:47243): avc:  denied  { open } for  pid=29682 comm="syz.5.8451" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  606.589736][   T29] audit: type=1400 audit(1060.568:47244): avc:  denied  { create } for  pid=29684 comm="syz.5.8452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  606.661609][   T29] audit: type=1326 audit(1060.638:47245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29689 comm="syz.6.8453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6bc0ad58e7 code=0x7ffc0000
[  606.689953][T29690] loop6: detected capacity change from 0 to 256
[  606.707650][   T29] audit: type=1326 audit(1060.638:47246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29689 comm="syz.6.8453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6bc0a7ab19 code=0x7ffc0000
[  606.730716][   T29] audit: type=1326 audit(1060.638:47247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29689 comm="syz.6.8453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6bc0ad58e7 code=0x7ffc0000
[  606.753767][   T29] audit: type=1326 audit(1060.638:47248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29689 comm="syz.6.8453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6bc0a7ab19 code=0x7ffc0000
[  606.776903][   T29] audit: type=1326 audit(1060.638:47249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29689 comm="syz.6.8453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc0ade929 code=0x7ffc0000
[  606.924478][T29701] loop7: detected capacity change from 0 to 2048
[  606.934676][T29699] loop6: detected capacity change from 0 to 256
[  606.978627][T29701]  loop7: p1 < > p3 p4 < >
[  606.983886][T29701] loop7: p3 start 4284289 is beyond EOD, truncated
[  607.033868][T29707] loop9: detected capacity change from 0 to 1024
[  607.045942][T29707] EXT4-fs: Ignoring removed orlov option
[  607.051911][T29707] EXT4-fs: Ignoring removed nomblk_io_submit option
[  607.068247][T29702] lo speed is unknown, defaulting to 1000
[  607.075166][T29702] lo speed is unknown, defaulting to 1000
[  607.101575][T29707] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  607.191256][T29725] loop6: detected capacity change from 0 to 512
[  607.204944][T29727] IPVS: Error connecting to the multicast addr
[  607.219557][T29725] EXT4-fs (loop6): too many log groups per flexible block group
[  607.227554][T29725] EXT4-fs (loop6): failed to initialize mballoc (-12)
[  607.235385][T29725] EXT4-fs (loop6): mount failed
[  607.279718][T29734] program syz.4.8464 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  607.318895][T27195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  607.350340][T29737] loop6: detected capacity change from 0 to 256
[  607.435837][T29742] netlink: 'syz.6.8469': attribute type 21 has an invalid length.
[  607.467858][T29742] netlink: 'syz.6.8469': attribute type 1 has an invalid length.
[  607.816172][T29744] FAULT_INJECTION: forcing a failure.
[  607.816172][T29744] name failslab, interval 1, probability 0, space 0, times 0
[  607.828936][T29744] CPU: 0 UID: 0 PID: 29744 Comm: syz.6.8470 Tainted: G        W           6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) 
[  607.828977][T29744] Tainted: [W]=WARN
[  607.828985][T29744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  607.828999][T29744] Call Trace:
[  607.829007][T29744]  <TASK>
[  607.829044][T29744]  __dump_stack+0x1d/0x30
[  607.829070][T29744]  dump_stack_lvl+0xe8/0x140
[  607.829093][T29744]  dump_stack+0x15/0x1b
[  607.829114][T29744]  should_fail_ex+0x265/0x280
[  607.829149][T29744]  should_failslab+0x8c/0xb0
[  607.829175][T29744]  kmem_cache_alloc_noprof+0x50/0x310
[  607.829208][T29744]  ? mas_alloc_nodes+0x265/0x520
[  607.829228][T29744]  mas_alloc_nodes+0x265/0x520
[  607.829248][T29744]  mas_preallocate+0x33e/0x520
[  607.829291][T29744]  __split_vma+0x240/0x650
[  607.829321][T29744]  ? __rcu_read_unlock+0x4f/0x70
[  607.829347][T29744]  ? avc_has_perm_noaudit+0x1b1/0x200
[  607.829390][T29744]  vms_gather_munmap_vmas+0x172/0x7a0
[  607.829414][T29744]  ? selinux_file_open+0x2df/0x330
[  607.829437][T29744]  do_vmi_align_munmap+0x1a4/0x3d0
[  607.829475][T29744]  do_vmi_munmap+0x1db/0x220
[  607.829502][T29744]  do_munmap+0x8a/0xc0
[  607.829548][T29744]  mremap_to+0x35b/0x540
[  607.829581][T29744]  __se_sys_mremap+0x549/0x6f0
[  607.829611][T29744]  ? ksys_write+0x192/0x1a0
[  607.829641][T29744]  __x64_sys_mremap+0x67/0x80
[  607.829667][T29744]  x64_sys_call+0x2ba9/0x2fb0
[  607.829694][T29744]  do_syscall_64+0xd2/0x200
[  607.829714][T29744]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  607.829747][T29744]  ? clear_bhb_loop+0x40/0x90
[  607.829781][T29744]  ? clear_bhb_loop+0x40/0x90
[  607.829801][T29744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  607.829824][T29744] RIP: 0033:0x7f6bc0ade929
[  607.829841][T29744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  607.829864][T29744] RSP: 002b:00007f6bbf147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  607.829886][T29744] RAX: ffffffffffffffda RBX: 00007f6bc0d05fa0 RCX: 00007f6bc0ade929
[  607.829900][T29744] RDX: 0000000000200000 RSI: 0000000000600600 RDI: 0000200000000000
[  607.829915][T29744] RBP: 00007f6bbf147090 R08: 0000200000a00000 R09: 0000000000000000
[  607.829930][T29744] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[  607.829945][T29744] R13: 0000000000000000 R14: 00007f6bc0d05fa0 R15: 00007ffd05dcfd48
[  607.829964][T29744]  </TASK>
[  608.336608][T29748] __nla_validate_parse: 15 callbacks suppressed
[  608.336624][T29748] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8472'.
[  608.360341][T29754] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8475'.
[  608.660580][T29780] netlink: 'syz.9.8483': attribute type 2 has an invalid length.
[  608.660596][T29780] netlink: 'syz.9.8483': attribute type 1 has an invalid length.
[  608.660607][T29780] netlink: 199820 bytes leftover after parsing attributes in process `syz.9.8483'.
[  608.842020][T29786] FAULT_INJECTION: forcing a failure.
[  608.842020][T29786] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  608.842055][T29786] CPU: 1 UID: 0 PID: 29786 Comm: syz.4.8485 Tainted: G        W           6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) 
[  608.842176][T29786] Tainted: [W]=WARN
[  608.842186][T29786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  608.842202][T29786] Call Trace:
[  608.842210][T29786]  <TASK>
[  608.842218][T29786]  __dump_stack+0x1d/0x30
[  608.842245][T29786]  dump_stack_lvl+0xe8/0x140
[  608.842266][T29786]  dump_stack+0x15/0x1b
[  608.842303][T29786]  should_fail_ex+0x265/0x280
[  608.842334][T29786]  should_fail+0xb/0x20
[  608.842359][T29786]  should_fail_usercopy+0x1a/0x20
[  608.842391][T29786]  _copy_from_user+0x1c/0xb0
[  608.842458][T29786]  proc_control+0x43/0xa0
[  608.842492][T29786]  usbdev_ioctl+0x948/0x1710
[  608.842522][T29786]  ? __pfx_usbdev_ioctl+0x10/0x10
[  608.842567][T29786]  __se_sys_ioctl+0xcb/0x140
[  608.842603][T29786]  __x64_sys_ioctl+0x43/0x50
[  608.842637][T29786]  x64_sys_call+0x19a8/0x2fb0
[  608.842658][T29786]  do_syscall_64+0xd2/0x200
[  608.842674][T29786]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  608.842721][T29786]  ? clear_bhb_loop+0x40/0x90
[  608.842745][T29786]  ? clear_bhb_loop+0x40/0x90
[  608.842824][T29786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.843005][T29786] RIP: 0033:0x7f25dc71e929
[  608.843024][T29786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  608.843117][T29786] RSP: 002b:00007f25dad66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  608.843140][T29786] RAX: ffffffffffffffda RBX: 00007f25dc946080 RCX: 00007f25dc71e929
[  608.843234][T29786] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000004
[  608.843250][T29786] RBP: 00007f25dad66090 R08: 0000000000000000 R09: 0000000000000000
[  608.843264][T29786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  608.843278][T29786] R13: 0000000000000000 R14: 00007f25dc946080 R15: 00007ffeea8549c8
[  608.843304][T29786]  </TASK>
[  609.281367][T29798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8488'.
[  609.435333][T29804] loop7: detected capacity change from 0 to 512
[  609.435850][T29804] EXT4-fs: quotafile must be on filesystem root
[  609.537423][T29813] Cannot find set identified by id 0 to match
[  610.032819][T29824] loop5: detected capacity change from 0 to 512
[  610.043771][T29824] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  610.092815][T29824] EXT4-fs (loop5): 1 truncate cleaned up
[  610.110597][T29829] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8496'.
[  610.123425][T29824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  610.148744][T29826] netlink: 'syz.7.8497': attribute type 1 has an invalid length.
[  610.156752][T29826] netlink: 224 bytes leftover after parsing attributes in process `syz.7.8497'.
[  610.371969][T29822] lo speed is unknown, defaulting to 1000
[  610.390973][T29836] loop9: detected capacity change from 0 to 512
[  610.398772][T29822] lo speed is unknown, defaulting to 1000
[  610.415319][T29836] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  610.447150][T29838] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8501'.
[  610.458612][T29836] EXT4-fs (loop9): 1 truncate cleaned up
[  610.595303][T29842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8502'.
[  610.978644][T29849] loop7: detected capacity change from 0 to 8192
[  610.996230][T29855] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8508'.
[  611.037133][T29853] FAULT_INJECTION: forcing a failure.
[  611.037133][T29853] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  611.050331][T29853] CPU: 0 UID: 0 PID: 29853 Comm: syz.4.8506 Tainted: G        W           6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) 
[  611.050373][T29853] Tainted: [W]=WARN
[  611.050382][T29853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  611.050398][T29853] Call Trace:
[  611.050406][T29853]  <TASK>
[  611.050415][T29853]  __dump_stack+0x1d/0x30
[  611.050441][T29853]  dump_stack_lvl+0xe8/0x140
[  611.050513][T29853]  dump_stack+0x15/0x1b
[  611.050535][T29853]  should_fail_ex+0x265/0x280
[  611.050567][T29853]  should_fail+0xb/0x20
[  611.050593][T29853]  should_fail_usercopy+0x1a/0x20
[  611.050701][T29853]  _copy_from_user+0x1c/0xb0
[  611.050727][T29853]  get_timespec64+0x4c/0x100
[  611.050753][T29853]  __se_sys_clock_nanosleep+0x10b/0x250
[  611.050807][T29853]  __x64_sys_clock_nanosleep+0x55/0x70
[  611.050847][T29853]  x64_sys_call+0x1df0/0x2fb0
[  611.050875][T29853]  do_syscall_64+0xd2/0x200
[  611.050897][T29853]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  611.050929][T29853]  ? clear_bhb_loop+0x40/0x90
[  611.050955][T29853]  ? clear_bhb_loop+0x40/0x90
[  611.050982][T29853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  611.051058][T29853] RIP: 0033:0x7f25dc71e929
[  611.051076][T29853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  611.051098][T29853] RSP: 002b:00007f25dad66038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[  611.051122][T29853] RAX: ffffffffffffffda RBX: 00007f25dc946080 RCX: 00007f25dc71e929
[  611.051137][T29853] RDX: 0000200000000080 RSI: 00000000fffffdfc RDI: 0000000000000002
[  611.051152][T29853] RBP: 00007f25dad66090 R08: 0000000000000000 R09: 0000000000000000
[  611.051167][T29853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  611.051237][T29853] R13: 0000000000000000 R14: 00007f25dc946080 R15: 00007ffeea8549c8
[  611.051261][T29853]  </TASK>
[  611.073280][T29849] bio_check_eod: 31248 callbacks suppressed
[  611.073299][T29849] syz.7.8504: attempt to access beyond end of device
[  611.073299][T29849] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  611.073594][T29849] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[  611.073616][T29849] FAT-fs (loop7): Filesystem has been set read-only
[  611.074081][T29849] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[  611.074266][T29849] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[  611.076263][T29860] loop9: detected capacity change from 0 to 2048
[  611.107975][T29860]  loop9: p1 < > p4
[  611.108569][T29860] loop9: p4 size 8388608 extends beyond EOD, truncated
[  611.278443][   T29] kauditd_printk_skb: 181 callbacks suppressed
[  611.278520][   T29] audit: type=1326 audit(1065.258:47431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29862 comm="syz.9.8510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848aae929 code=0x7ffc0000
[  611.278551][   T29] audit: type=1326 audit(1065.258:47432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29862 comm="syz.9.8510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848aae929 code=0x7ffc0000
[  611.280397][   T29] audit: type=1326 audit(1065.258:47433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29862 comm="syz.9.8510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff848aae929 code=0x7ffc0000
[  611.280449][   T29] audit: type=1326 audit(1065.258:47434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29862 comm="syz.9.8510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848aae929 code=0x7ffc0000
[  611.280556][   T29] audit: type=1326 audit(1065.258:47435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29862 comm="syz.9.8510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848aae929 code=0x7ffc0000
[  611.281120][   T29] audit: type=1326 audit(1065.258:47436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29862 comm="syz.9.8510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff848aae929 code=0x7ffc0000
[  611.281425][   T29] audit: type=1326 audit(1065.258:47437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29862 comm="syz.9.8510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848aae929 code=0x7ffc0000
[  611.758919][   T29] audit: type=1326 audit(1065.508:47438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29862 comm="syz.9.8510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff848aae929 code=0x7ffc0000
[  611.783095][   T29] audit: type=1326 audit(1065.508:47439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29862 comm="syz.9.8510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848aae929 code=0x7ffc0000
[  611.783907][T29865] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8513'.
[  611.807315][   T29] audit: type=1326 audit(1065.508:47440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29862 comm="syz.9.8510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848aae929 code=0x7ffc0000
[  612.066898][T29880] loop6: detected capacity change from 0 to 128
[  612.137265][T29877] lo speed is unknown, defaulting to 1000
[  612.161645][T29877] lo speed is unknown, defaulting to 1000
[  612.226170][T29891] 
: renamed from bond_slave_0 (while UP)
[  612.239307][T29880] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[  612.247541][T29880] FAT-fs (loop6): Filesystem has been set read-only
[  612.265738][T29886] lo speed is unknown, defaulting to 1000
[  612.284158][T29886] lo speed is unknown, defaulting to 1000
[  612.303735][T29880] syz.6.8516: attempt to access beyond end of device
[  612.303735][T29880] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  612.380230][T29880] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[  612.388650][T29880] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[  612.424404][T29880] syz.6.8516: attempt to access beyond end of device
[  612.424404][T29880] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128
[  612.446801][T29893] syz.6.8516: attempt to access beyond end of device
[  612.446801][T29893] loop6: rw=0, sector=2065, nr_sectors = 1 limit=128
[  612.460779][T29893] buffer_io_error: 31246 callbacks suppressed
[  612.460869][T29893] Buffer I/O error on dev loop6, logical block 2065, async page read
[  612.479525][T29880] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[  612.531334][T29893] syz.6.8516: attempt to access beyond end of device
[  612.531334][T29893] loop6: rw=0, sector=2066, nr_sectors = 1 limit=128
[  612.544707][T29893] Buffer I/O error on dev loop6, logical block 2066, async page read
[  612.591343][T29880] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[  612.599375][T29880] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[  612.681645][T29893] syz.6.8516: attempt to access beyond end of device
[  612.681645][T29893] loop6: rw=0, sector=2067, nr_sectors = 1 limit=128
[  612.685599][T29915] loop7: detected capacity change from 0 to 256
[  612.695087][T29893] Buffer I/O error on dev loop6, logical block 2067, async page read
[  612.722493][T29916] loop9: detected capacity change from 0 to 256
[  612.785014][T29893] syz.6.8516: attempt to access beyond end of device
[  612.785014][T29893] loop6: rw=0, sector=2068, nr_sectors = 1 limit=128
[  612.798353][T29893] Buffer I/O error on dev loop6, logical block 2068, async page read
[  612.855819][T29893] syz.6.8516: attempt to access beyond end of device
[  612.855819][T29893] loop6: rw=0, sector=2069, nr_sectors = 1 limit=128
[  612.869134][T29893] Buffer I/O error on dev loop6, logical block 2069, async page read
[  612.899386][T29893] syz.6.8516: attempt to access beyond end of device
[  612.899386][T29893] loop6: rw=0, sector=2070, nr_sectors = 1 limit=128
[  612.913348][T29893] Buffer I/O error on dev loop6, logical block 2070, async page read
[  613.008297][T29893] syz.6.8516: attempt to access beyond end of device
[  613.008297][T29893] loop6: rw=0, sector=2071, nr_sectors = 1 limit=128
[  613.022609][T29893] Buffer I/O error on dev loop6, logical block 2071, async page read
[  613.050490][T29929] loop5: detected capacity change from 0 to 512
[  613.062453][T29893] Buffer I/O error on dev loop6, logical block 2072, async page read
[  613.080579][T29929] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #16: comm syz.5.8533: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  613.123504][T29929] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.8533: couldn't read orphan inode 16 (err -117)
[  613.202400][T29929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  613.245531][T29929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  613.544390][T29950] hub 6-0:1.0: USB hub found
[  613.555775][T29950] hub 6-0:1.0: 8 ports detected
[  613.636813][T29958] __nla_validate_parse: 8 callbacks suppressed
[  613.636865][T29958] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8544'.
[  613.761845][T29961] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8545'.
[  613.796322][T29958] netlink: 268 bytes leftover after parsing attributes in process `syz.7.8544'.
[  614.081408][T29966] lo speed is unknown, defaulting to 1000
[  614.104720][T29966] lo speed is unknown, defaulting to 1000
[  614.142470][T29982] loop9: detected capacity change from 0 to 512
[  614.182249][T29982] EXT4-fs (loop9): 1 orphan inode deleted
[  614.200411][T17383] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:45: Failed to release dquot type 1
[  614.302413][T29989] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8557'.
[  614.319681][T29991] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8556'.
[  614.352917][T29993] FAULT_INJECTION: forcing a failure.
[  614.352917][T29993] name failslab, interval 1, probability 0, space 0, times 0
[  614.366112][T29993] CPU: 1 UID: 0 PID: 29993 Comm: syz.9.8558 Tainted: G        W           6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) 
[  614.366155][T29993] Tainted: [W]=WARN
[  614.366162][T29993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  614.366175][T29993] Call Trace:
[  614.366182][T29993]  <TASK>
[  614.366261][T29993]  __dump_stack+0x1d/0x30
[  614.366288][T29993]  dump_stack_lvl+0xe8/0x140
[  614.366313][T29993]  dump_stack+0x15/0x1b
[  614.366354][T29993]  should_fail_ex+0x265/0x280
[  614.366410][T29993]  should_failslab+0x8c/0xb0
[  614.366435][T29993]  kmem_cache_alloc_noprof+0x50/0x310
[  614.366466][T29993]  ? audit_log_start+0x365/0x6c0
[  614.366532][T29993]  audit_log_start+0x365/0x6c0
[  614.366631][T29993]  audit_seccomp+0x48/0x100
[  614.366665][T29993]  ? __seccomp_filter+0x68c/0x10d0
[  614.366693][T29993]  __seccomp_filter+0x69d/0x10d0
[  614.366770][T29993]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  614.366812][T29993]  ? vfs_write+0x75e/0x8e0
[  614.366934][T29993]  ? __rcu_read_unlock+0x4f/0x70
[  614.366956][T29993]  ? __fget_files+0x184/0x1c0
[  614.366977][T29993]  __secure_computing+0x82/0x150
[  614.367003][T29993]  syscall_trace_enter+0xcf/0x1e0
[  614.367031][T29993]  do_syscall_64+0xac/0x200
[  614.367052][T29993]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  614.367105][T29993]  ? clear_bhb_loop+0x40/0x90
[  614.367133][T29993]  ? clear_bhb_loop+0x40/0x90
[  614.367187][T29993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.367213][T29993] RIP: 0033:0x7ff848aae929
[  614.367230][T29993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  614.367251][T29993] RSP: 002b:00007ff847117038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a
[  614.367274][T29993] RAX: ffffffffffffffda RBX: 00007ff848cd5fa0 RCX: 00007ff848aae929
[  614.367289][T29993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  614.367305][T29993] RBP: 00007ff847117090 R08: 0000000000000000 R09: 0000000000000000
[  614.367352][T29993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  614.367363][T29993] R13: 0000000000000000 R14: 00007ff848cd5fa0 R15: 00007ffc1fb3b9b8
[  614.367394][T29993]  </TASK>
[  614.736030][T30003] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  614.768790][T30003] SELinux: failed to load policy
[  616.232552][T30045] loop6: detected capacity change from 0 to 1024
[  616.259032][T30037] loop7: detected capacity change from 0 to 8192
[  616.289503][T30045] EXT4-fs: Ignoring removed orlov option
[  616.465678][T30037] bio_check_eod: 1 callbacks suppressed
[  616.465707][T30037] syz.7.8569: attempt to access beyond end of device
[  616.465707][T30037] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  616.643022][T30037] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[  616.651342][T30037] FAT-fs (loop7): Filesystem has been set read-only
[  616.797686][   T29] kauditd_printk_skb: 405 callbacks suppressed
[  616.797716][   T29] audit: type=1326 audit(1070.778:47843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30064 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623de3e929 code=0x7ffc0000
[  616.931723][   T29] audit: type=1326 audit(1070.808:47844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30064 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623de3e929 code=0x7ffc0000
[  616.955648][   T29] audit: type=1326 audit(1070.808:47845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30064 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f623de3e929 code=0x7ffc0000
[  616.979110][   T29] audit: type=1326 audit(1070.808:47846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30064 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623de3e929 code=0x7ffc0000
[  617.003240][   T29] audit: type=1326 audit(1070.808:47847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30064 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623de3e929 code=0x7ffc0000
[  617.026453][   T29] audit: type=1326 audit(1070.808:47848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30064 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f623de3e929 code=0x7ffc0000
[  617.049927][   T29] audit: type=1400 audit(1070.808:47849): avc:  denied  { execute } for  pid=30064 comm="gtp" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=102855 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  617.076313][   T29] audit: type=1326 audit(1070.808:47850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30064 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623de3e929 code=0x7ffc0000
[  617.099603][   T29] audit: type=1326 audit(1070.808:47851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30064 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623de3e929 code=0x7ffc0000
[  617.123169][   T29] audit: type=1326 audit(1070.818:47852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30064 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f623de3e929 code=0x7ffc0000
[  617.132668][T30037] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[  617.181681][T30037] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[  617.204935][T28533] EXT4-fs unmount: 8 callbacks suppressed
[  617.205001][T28533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.261505][T30077] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8581'.
[  617.415652][T30094] loop7: detected capacity change from 0 to 512
[  617.469050][T30094] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.8591: corrupted in-inode xattr: invalid ea_ino
[  617.503664][T30094] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.8591: couldn't read orphan inode 15 (err -117)
[  617.517804][T30094] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  617.728889][T28156] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.834904][T30112] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8598'.
[  617.893658][T30116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8600'.
[  618.088927][T30128] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8603'.
[  618.105130][T30132] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[  618.113584][T30132] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[  618.145137][T30128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8603'.
[  618.305431][T30153] loop7: detected capacity change from 0 to 1024
[  618.324529][T30153] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  618.351312][T30158] loop9: detected capacity change from 0 to 128
[  618.365747][T30158] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100)
[  618.373719][T30158] FAT-fs (loop9): Filesystem has been set read-only
[  618.396604][T30153] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.8611: Allocating blocks 449-513 which overlap fs metadata
[  618.411977][T30158] syz.9.8612: attempt to access beyond end of device
[  618.411977][T30158] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  618.434810][T30158] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100)
[  618.442805][T30158] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100)
[  618.453827][T30159] syz.9.8612: attempt to access beyond end of device
[  618.453827][T30159] loop9: rw=0, sector=2065, nr_sectors = 1 limit=128
[  618.455792][T30153] EXT4-fs (loop7): pa ffff888106a9b9a0: logic 48, phys. 177, len 21
[  618.467729][T30159] Buffer I/O error on dev loop9, logical block 2065, async page read
[  618.475183][T30153] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4
[  618.534612][T30159] syz.9.8612: attempt to access beyond end of device
[  618.534612][T30159] loop9: rw=0, sector=2066, nr_sectors = 1 limit=128
[  618.548700][T30159] Buffer I/O error on dev loop9, logical block 2066, async page read
[  618.558789][T30159] syz.9.8612: attempt to access beyond end of device
[  618.558789][T30159] loop9: rw=0, sector=2067, nr_sectors = 1 limit=128
[  618.572765][T30159] Buffer I/O error on dev loop9, logical block 2067, async page read
[  618.581660][T30159] syz.9.8612: attempt to access beyond end of device
[  618.581660][T30159] loop9: rw=0, sector=2068, nr_sectors = 1 limit=128
[  618.595657][T30159] Buffer I/O error on dev loop9, logical block 2068, async page read
[  618.604624][T30159] syz.9.8612: attempt to access beyond end of device
[  618.604624][T30159] loop9: rw=0, sector=2069, nr_sectors = 1 limit=128
[  618.618453][T30159] Buffer I/O error on dev loop9, logical block 2069, async page read
[  618.627741][T30159] syz.9.8612: attempt to access beyond end of device
[  618.627741][T30159] loop9: rw=0, sector=2070, nr_sectors = 1 limit=128
[  618.630981][T28156] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  618.641570][T30159] Buffer I/O error on dev loop9, logical block 2070, async page read
[  618.658929][T30159] syz.9.8612: attempt to access beyond end of device
[  618.658929][T30159] loop9: rw=0, sector=2071, nr_sectors = 1 limit=128
[  618.673211][T30159] Buffer I/O error on dev loop9, logical block 2071, async page read
[  618.681939][T30159] syz.9.8612: attempt to access beyond end of device
[  618.681939][T30159] loop9: rw=0, sector=2072, nr_sectors = 1 limit=128
[  618.695703][T30159] Buffer I/O error on dev loop9, logical block 2072, async page read
[  618.704358][T30159] Buffer I/O error on dev loop9, logical block 2065, async page read
[  618.712879][T30159] Buffer I/O error on dev loop9, logical block 2066, async page read
[  618.753502][T30163] SELinux: syz.7.8614 (30163) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  618.869199][T30165] loop6: detected capacity change from 0 to 512
[  618.888606][T30165] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a04fc128, mo2=0002]
[  618.929795][T30165] System zones: 1-12
[  618.939975][T30165] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.8613: invalid indirect mapped block 11 (level 0)
[  618.976483][T30179] loop7: detected capacity change from 0 to 128
[  618.992730][T30165] EXT4-fs (loop6): Remounting filesystem read-only
[  619.004913][T30165] EXT4-fs (loop6): 1 truncate cleaned up
[  619.017098][T30165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  619.111827][T30188] atomic_op ffff888109a21928 conn xmit_atomic 0000000000000000
[  619.190497][T30190] __nla_validate_parse: 4 callbacks suppressed
[  619.190518][T30190] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8620'.
[  619.391627][T30199] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8624'.
[  619.720281][T28533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  619.863433][T30218] syzkaller0: entered allmulticast mode
[  619.872858][T30218] syzkaller0: entered promiscuous mode
[  619.886591][T30218] syzkaller0 (unregistering): left allmulticast mode
[  619.893723][T30218] syzkaller0 (unregistering): left promiscuous mode
[  619.909076][T30220] loop7: detected capacity change from 0 to 1024
[  619.916040][T30220] EXT4-fs: Ignoring removed orlov option
[  619.924565][T30220] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  619.956327][T30225] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  619.977107][T30225] vhci_hcd: default hub control req: 2314 v0008 i0002 l0
[  620.017182][T30228] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8635'.
[  620.033487][T30224] lo speed is unknown, defaulting to 1000
[  620.047155][T30224] lo speed is unknown, defaulting to 1000
[  620.210766][T28156] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.233134][T30238] loop9: detected capacity change from 0 to 256
[  620.486308][T30257] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8647'.
[  620.610689][T30238] netlink: 88 bytes leftover after parsing attributes in process `syz.9.8640'.
[  620.678773][T30259] openvswitch: netlink: Message has 6 unknown bytes.
[  620.880989][T30258] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  620.891545][T30258] FAT-fs (loop9): Filesystem has been set read-only
[  620.941519][T30258] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  620.965999][T30258] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  621.036968][T30246] syz.4.8643 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  621.051278][T30246] CPU: 0 UID: 0 PID: 30246 Comm: syz.4.8643 Tainted: G        W           6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) 
[  621.051327][T30246] Tainted: [W]=WARN
[  621.051336][T30246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  621.051353][T30246] Call Trace:
[  621.051362][T30246]  <TASK>
[  621.051373][T30246]  __dump_stack+0x1d/0x30
[  621.051471][T30246]  dump_stack_lvl+0xe8/0x140
[  621.051496][T30246]  dump_stack+0x15/0x1b
[  621.051583][T30246]  dump_header+0x81/0x220
[  621.051625][T30246]  oom_kill_process+0x334/0x3f0
[  621.051664][T30246]  out_of_memory+0x979/0xb80
[  621.051696][T30246]  try_charge_memcg+0x5e6/0x9e0
[  621.051828][T30246]  obj_cgroup_charge_pages+0xa6/0x150
[  621.051865][T30246]  __memcg_kmem_charge_page+0x9f/0x170
[  621.051898][T30246]  __alloc_frozen_pages_noprof+0x188/0x360
[  621.051944][T30246]  alloc_pages_mpol+0xb3/0x250
[  621.052018][T30246]  alloc_pages_noprof+0x90/0x130
[  621.052114][T30246]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  621.052256][T30246]  __kvmalloc_node_noprof+0x30f/0x4e0
[  621.052378][T30246]  ? ip_set_alloc+0x1f/0x30
[  621.052463][T30246]  ? ip_set_alloc+0x1f/0x30
[  621.052498][T30246]  ? __kmalloc_cache_noprof+0x189/0x320
[  621.052587][T30246]  ip_set_alloc+0x1f/0x30
[  621.052614][T30246]  hash_netiface_create+0x282/0x740
[  621.052644][T30246]  ? __pfx_hash_netiface_create+0x10/0x10
[  621.052677][T30246]  ip_set_create+0x3c9/0x960
[  621.052740][T30246]  ? __nla_parse+0x40/0x60
[  621.052777][T30246]  nfnetlink_rcv_msg+0x4c3/0x590
[  621.052883][T30246]  ? selinux_capable+0x1f9/0x270
[  621.052922][T30246]  netlink_rcv_skb+0x120/0x220
[  621.052960][T30246]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  621.053054][T30246]  nfnetlink_rcv+0x16b/0x1690
[  621.053086][T30246]  ? __kfree_skb+0x109/0x150
[  621.053115][T30246]  ? nlmon_xmit+0x4f/0x60
[  621.053140][T30246]  ? consume_skb+0x49/0x150
[  621.053187][T30246]  ? nlmon_xmit+0x4f/0x60
[  621.053212][T30246]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  621.053251][T30246]  ? __dev_queue_xmit+0x11c0/0x1fb0
[  621.053281][T30246]  ? __dev_queue_xmit+0x182/0x1fb0
[  621.053405][T30246]  ? ref_tracker_free+0x37d/0x3e0
[  621.053485][T30246]  ? __netlink_deliver_tap+0x4dc/0x500
[  621.053521][T30246]  netlink_unicast+0x5a5/0x680
[  621.053553][T30246]  netlink_sendmsg+0x58b/0x6b0
[  621.053715][T30246]  ? __pfx_netlink_sendmsg+0x10/0x10
[  621.053735][T30246]  __sock_sendmsg+0x145/0x180
[  621.053759][T30246]  ____sys_sendmsg+0x31e/0x4e0
[  621.053793][T30246]  ___sys_sendmsg+0x17b/0x1d0
[  621.053880][T30246]  __x64_sys_sendmsg+0xd4/0x160
[  621.053922][T30246]  x64_sys_call+0x2999/0x2fb0
[  621.053965][T30246]  do_syscall_64+0xd2/0x200
[  621.053987][T30246]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  621.054020][T30246]  ? clear_bhb_loop+0x40/0x90
[  621.054100][T30246]  ? clear_bhb_loop+0x40/0x90
[  621.054134][T30246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.054161][T30246] RIP: 0033:0x7f25dc71e929
[  621.054181][T30246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  621.054204][T30246] RSP: 002b:00007f25dad87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  621.054238][T30246] RAX: ffffffffffffffda RBX: 00007f25dc945fa0 RCX: 00007f25dc71e929
[  621.054271][T30246] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000015
[  621.054287][T30246] RBP: 00007f25dc7a0b39 R08: 0000000000000000 R09: 0000000000000000
[  621.054299][T30246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  621.054310][T30246] R13: 0000000000000000 R14: 00007f25dc945fa0 R15: 00007ffeea8549c8
[  621.054330][T30246]  </TASK>
[  621.054394][T30246] memory: usage 307200kB, limit 307200kB, failcnt 199
[  621.282693][T30268] FAULT_INJECTION: forcing a failure.
[  621.282693][T30268] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  621.285884][T30246] memory+swap: usage 307328kB, limit 9007199254740988kB, failcnt 0
[  621.285910][T30246] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[  621.285924][T30246] Memory cgroup stats for /syz4:
[  621.293629][T30246] cache 0
[  621.295990][T30268] CPU: 1 UID: 0 PID: 30268 Comm: syz.7.8650 Tainted: G        W           6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) 
[  621.296040][T30268] Tainted: [W]=WARN
[  621.296050][T30268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  621.296067][T30268] Call Trace:
[  621.296077][T30268]  <TASK>
[  621.296089][T30268]  __dump_stack+0x1d/0x30
[  621.296161][T30268]  dump_stack_lvl+0xe8/0x140
[  621.296197][T30268]  dump_stack+0x15/0x1b
[  621.296278][T30268]  should_fail_ex+0x265/0x280
[  621.296319][T30268]  should_fail+0xb/0x20
[  621.296355][T30268]  should_fail_usercopy+0x1a/0x20
[  621.296465][T30268]  _copy_from_user+0x1c/0xb0
[  621.296557][T30268]  do_replace+0x8a/0x320
[  621.296717][T30268]  do_ebt_set_ctl+0x12e/0xac0
[  621.296758][T30268]  ? _parse_integer_limit+0x170/0x190
[  621.296858][T30268]  ? _parse_integer+0x27/0x40
[  621.296891][T30268]  ? _raw_spin_unlock_bh+0x36/0x40
[  621.296923][T30268]  ? lock_sock_nested+0x112/0x140
[  621.296962][T30268]  ? __rcu_read_unlock+0x4f/0x70
[  621.297033][T30268]  ? _raw_spin_unlock_bh+0x36/0x40
[  621.297064][T30268]  ? release_sock+0x116/0x150
[  621.297099][T30268]  ? sockopt_release_sock+0x42/0x50
[  621.297148][T30268]  ? do_ip_setsockopt+0x1af3/0x2240
[  621.297189][T30268]  nf_setsockopt+0x196/0x1b0
[  621.297223][T30268]  ip_setsockopt+0x102/0x110
[  621.297262][T30268]  sctp_setsockopt+0x116/0xe30
[  621.297373][T30268]  sock_common_setsockopt+0x69/0x80
[  621.297408][T30268]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  621.297523][T30268]  __sys_setsockopt+0x184/0x200
[  621.297557][T30268]  __x64_sys_setsockopt+0x64/0x80
[  621.297679][T30268]  x64_sys_call+0x2bd5/0x2fb0
[  621.297711][T30268]  do_syscall_64+0xd2/0x200
[  621.297734][T30268]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  621.297776][T30268]  ? clear_bhb_loop+0x40/0x90
[  621.297867][T30268]  ? clear_bhb_loop+0x40/0x90
[  621.297898][T30268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.298002][T30268] RIP: 0033:0x7fa02f60e929
[  621.298024][T30268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  621.298049][T30268] RSP: 002b:00007fa02dc56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  621.298150][T30268] RAX: ffffffffffffffda RBX: 00007fa02f836080 RCX: 00007fa02f60e929
[  621.298167][T30268] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000004
[  621.298185][T30268] RBP: 00007fa02dc56090 R08: 0000000000000108 R09: 0000000000000000
[  621.298202][T30268] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001
[  621.298218][T30268] R13: 0000000000000000 R14: 00007fa02f836080 R15: 00007ffcc92a8a18
[  621.298246][T30268]  </TASK>
[  621.471039][T30273] FAULT_INJECTION: forcing a failure.
[  621.471039][T30273] name failslab, interval 1, probability 0, space 0, times 0
[  621.473955][T30246] rss 4096
[  621.473967][T30246] shmem 0
[  621.473975][T30246] mapped_file 0
[  621.474030][T30246] dirty 0
[  621.474039][T30246] writeback 0
[  621.474048][T30246] workingset_refault_anon 22
[  621.474086][T30246] workingset_refault_file 0
[  621.474099][T30246] swap 131072
[  621.474106][T30246] swapcached 12288
[  621.474113][T30246] pgpgin 483034
[  621.474122][T30246] pgpgout 483031
[  621.484588][T30273] CPU: 1 UID: 0 PID: 30273 Comm: syz.7.8653 Tainted: G        W           6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) 
[  621.484728][T30273] Tainted: [W]=WARN
[  621.484738][T30273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  621.484755][T30273] Call Trace:
[  621.484764][T30273]  <TASK>
[  621.484775][T30273]  __dump_stack+0x1d/0x30
[  621.484805][T30273]  dump_stack_lvl+0xe8/0x140
[  621.484854][T30273]  dump_stack+0x15/0x1b
[  621.484974][T30273]  should_fail_ex+0x265/0x280
[  621.485091][T30273]  should_failslab+0x8c/0xb0
[  621.485121][T30273]  kmem_cache_alloc_lru_noprof+0x55/0x310
[  621.485204][T30273]  ? sock_alloc_inode+0x34/0xa0
[  621.485238][T30273]  ? __pfx_sock_alloc_inode+0x10/0x10
[  621.485269][T30273]  sock_alloc_inode+0x34/0xa0
[  621.485328][T30273]  alloc_inode+0x3d/0x170
[  621.485371][T30273]  __sock_create+0x122/0x5b0
[  621.485409][T30273]  __sys_socket+0xb0/0x180
[  621.485444][T30273]  __x64_sys_socket+0x3f/0x50
[  621.485493][T30273]  x64_sys_call+0x285a/0x2fb0
[  621.485670][T30273]  do_syscall_64+0xd2/0x200
[  621.485695][T30273]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  621.485819][T30273]  ? clear_bhb_loop+0x40/0x90
[  621.485864][T30273]  ? clear_bhb_loop+0x40/0x90
[  621.485895][T30273]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.485925][T30273] RIP: 0033:0x7fa02f610847
[  621.485946][T30273] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  621.485972][T30273] RSP: 002b:00007fa02dc75fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  621.486006][T30273] RAX: ffffffffffffffda RBX: 00007fa02f835fa0 RCX: 00007fa02f610847
[  621.486068][T30273] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  621.486084][T30273] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  621.486102][T30273] R10: 0000200000000040 R11: 0000000000000286 R12: 0000000000000001
[  621.486120][T30273] R13: 0000000000000000 R14: 00007fa02f835fa0 R15: 00007ffcc92a8a18
[  621.486147][T30273]  </TASK>
[  621.486233][T30273] socket: no more sockets
[  621.487521][T30246] pgfault 241546
[  621.487532][T30246] pgmajfault 23
[  621.487541][T30246] inactive_anon 12288
[  621.521487][T30238] bio_check_eod: 32092 callbacks suppressed
[  621.521564][T30238] syz.9.8640: attempt to access beyond end of device
[  621.521564][T30238] loop9: rw=2049, sector=312, nr_sectors = 40 limit=256
[  621.522190][T30246] active_anon 0
[  621.522201][T30246] inactive_file 0
[  621.522210][T30246] active_file 0
[  621.522216][T30246] unevictable 0
[  621.522223][T30246] hierarchical_memory_limit 314572800
[  621.522234][T30246] hierarchical_memsw_limit 9223372036854771712
[  621.529440][T30238] syz.9.8640: attempt to access beyond end of device
[  621.529440][T30238] loop9: rw=2049, sector=384, nr_sectors = 32 limit=256
[  621.531185][T30246] total_cache 0
[  621.531197][T30246] total_rss 4096
[  621.531205][T30246] total_shmem 0
[  621.531268][T30246] total_mapped_file 0
[  621.537557][T30238] syz.9.8640: attempt to access beyond end of device
[  621.537557][T30238] loop9: rw=2049, sector=448, nr_sectors = 32 limit=256
[  621.541343][T30246] total_dirty 0
[  621.541357][T30246] total_writeback 0
[  621.541367][T30246] total_workingset_refault_anon 22
[  621.541444][T30246] total_workingset_refault_file 0
[  621.548098][T30238] syz.9.8640: attempt to access beyond end of device
[  621.548098][T30238] loop9: rw=2049, sector=512, nr_sectors = 32 limit=256
[  621.551661][T30246] total_swap 131072
[  621.551674][T30246] total_swapcached 12288
[  621.551710][T30246] total_pgpgin 483034
[  621.551717][T30246] total_pgpgout 483031
[  621.551725][T30246] total_pgfault 241546
[  621.551735][T30246] total_pgmajfault 23
[  621.551745][T30246] total_inactive_anon 12288
[  621.551754][T30246] total_active_anon 0
[  621.551763][T30246] total_inactive_file 0
[  621.551772][T30246] total_active_file 0
[  621.558976][T30238] syz.9.8640: attempt to access beyond end of device
[  621.558976][T30238] loop9: rw=2049, sector=640, nr_sectors = 32 limit=256
[  621.561917][T30246] total_unevictable 0
[  621.561931][T30246] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8643,pid=30245,uid=0
[  621.562021][T30246] Memory cgroup out of memory: Killed process 30245 (syz.4.8643) total-vm:89916kB, anon-rss:1072kB, file-rss:21672kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000
[  621.567884][T30238] syz.9.8640: attempt to access beyond end of device
[  621.567884][T30238] loop9: rw=2049, sector=704, nr_sectors = 32 limit=256
[  622.140094][   T29] kauditd_printk_skb: 275 callbacks suppressed
[  622.140113][   T29] audit: type=1326 audit(1076.118:48128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30274 comm="syz.5.8654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623de3e929 code=0x7ffc0000
[  622.144351][T30238] syz.9.8640: attempt to access beyond end of device
[  622.144351][T30238] loop9: rw=2049, sector=768, nr_sectors = 32 limit=256
[  622.171401][   T29] audit: type=1326 audit(1076.148:48129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30274 comm="syz.5.8654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f623de3d3df code=0x7ffc0000
[  622.174224][T30238] syz.9.8640: attempt to access beyond end of device
[  622.174224][T30238] loop9: rw=2049, sector=832, nr_sectors = 32 limit=256
[  622.225934][   T29] audit: type=1326 audit(1076.148:48130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30274 comm="syz.5.8654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623de3e929 code=0x7ffc0000
[  622.281336][T30238] syz.9.8640: attempt to access beyond end of device
[  622.281336][T30238] loop9: rw=2049, sector=896, nr_sectors = 32 limit=256
[  622.304211][   T29] audit: type=1326 audit(1076.168:48131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30274 comm="syz.5.8654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623de3e929 code=0x7ffc0000
[  622.304246][   T29] audit: type=1326 audit(1076.168:48132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30274 comm="syz.5.8654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f623de3e929 code=0x7ffc0000
[  622.304279][   T29] audit: type=1326 audit(1076.168:48133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30274 comm="syz.5.8654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623de3e929 code=0x7ffc0000
[  622.304323][   T29] audit: type=1326 audit(1076.168:48134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30274 comm="syz.5.8654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623de3e929 code=0x7ffc0000
[  622.304356][   T29] audit: type=1326 audit(1076.168:48135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30274 comm="syz.5.8654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f623de3d3df code=0x7ffc0000
[  622.304446][   T29] audit: type=1326 audit(1076.168:48136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30274 comm="syz.5.8654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623de3e929 code=0x7ffc0000
[  622.304500][   T29] audit: type=1326 audit(1076.168:48137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30274 comm="syz.5.8654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623de3e929 code=0x7ffc0000
[  622.524242][T30238] syz.9.8640: attempt to access beyond end of device
[  622.524242][T30238] loop9: rw=2049, sector=960, nr_sectors = 32 limit=256
[  622.572911][T30284] loop9: detected capacity change from 0 to 1024
[  622.610688][T30284] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  622.712423][T30308] loop7: detected capacity change from 0 to 1024
[  622.754422][T30308] EXT4-fs: Ignoring removed orlov option
[  622.754448][T27195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  622.788437][T30308] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  622.811032][T30317] loop9: detected capacity change from 0 to 1024
[  622.817910][T30317] EXT4-fs: Ignoring removed orlov option
[  622.828547][T30317] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  623.621286][T30331] lo speed is unknown, defaulting to 1000
[  623.660261][T30331] lo speed is unknown, defaulting to 1000
[  623.871276][T27195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  624.079270][T28156] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  624.123622][T30342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8680'.
[  624.152111][T30342] SELinux: failed to load policy
[  624.376007][T30350] loop6: detected capacity change from 0 to 512
[  624.386566][T30352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8685'.
[  624.400753][T30350] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8684: bg 0: block 131: padding at end of block bitmap is not set
[  624.426554][T30350] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  624.447282][T30350] EXT4-fs (loop6): 1 truncate cleaned up
[  624.453415][T30350] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  624.502557][T30356] hub 6-0:1.0: USB hub found
[  624.509155][T30356] hub 6-0:1.0: 8 ports detected
[  624.539861][T28533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  624.649865][T17393] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  624.729343][T17393] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  624.790220][T17393] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  624.841935][T30360] lo speed is unknown, defaulting to 1000
[  624.858166][T17393] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  624.905310][T30360] lo speed is unknown, defaulting to 1000
[  624.943312][T30376] 9pnet_virtio: no channels available for device 127.0.0.1
[  624.986760][T30377] loop6: detected capacity change from 0 to 2048
[  625.012746][T30377] EXT4-fs: Ignoring removed mblk_io_submit option
[  625.019361][T30377] EXT4-fs: Ignoring removed i_version option
[  625.057378][T17393] bridge_slave_1: left allmulticast mode
[  625.063185][T17393] bridge_slave_1: left promiscuous mode
[  625.069315][T17393] bridge0: port 2(bridge_slave_1) entered disabled state
[  625.090889][T17393] bridge_slave_0: left allmulticast mode
[  625.096751][T17393] bridge_slave_0: left promiscuous mode
[  625.102573][T17393] bridge0: port 1(bridge_slave_0) entered disabled state
[  625.113137][T30377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  625.148094][ T3392] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13)
[  625.222718][T17393]  (unregistering): (slave bond_slave_0): Releasing backup interface
[  625.232412][T17393]  (unregistering): (slave bond_slave_1): Releasing backup interface
[  625.246439][T17393]  (unregistering): Released all slaves
[  625.451218][T30370] lo speed is unknown, defaulting to 1000
[  625.466677][T30360] chnl_net:caif_netlink_parms(): no params data found
[  625.608045][T30370] lo speed is unknown, defaulting to 1000
[  625.666984][T17393] hsr_slave_0: left promiscuous mode
[  625.674708][T17393] hsr_slave_1: left promiscuous mode
[  625.749554][T17393] team0 (unregistering): Port device team_slave_1 removed
[  625.808622][T30376] 9pnet_fd: p9_fd_create_tcp (30376): problem connecting socket to 127.0.0.1
[  625.846672][T30394] loop7: detected capacity change from 0 to 256
[  625.856918][T30360] bridge0: port 1(bridge_slave_0) entered blocking state
[  625.864216][T30360] bridge0: port 1(bridge_slave_0) entered disabled state
[  625.872113][T30360] bridge_slave_0: entered allmulticast mode
[  625.878898][T30360] bridge_slave_0: entered promiscuous mode
[  625.885863][T30360] bridge0: port 2(bridge_slave_1) entered blocking state
[  625.893092][T30360] bridge0: port 2(bridge_slave_1) entered disabled state
[  625.900427][T30360] bridge_slave_1: entered allmulticast mode
[  625.900950][T28533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.907322][T30360] bridge_slave_1: entered promiscuous mode
[  625.919399][T30404] netlink: 27 bytes leftover after parsing attributes in process `syz.7.8695'.
[  625.943838][T30360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  625.955139][T30360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  625.986710][T30360] team0: Port device team_slave_0 added
[  625.993829][T30360] team0: Port device team_slave_1 added
[  626.004783][T30410] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8699'.
[  626.025681][T17393] IPVS: stop unused estimator thread 0...
[  626.032263][T30360] batman_adv: batadv0: Adding interface: batadv_slave_0
[  626.039294][T30360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  626.065612][T30360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  626.121484][T30360] batman_adv: batadv0: Adding interface: batadv_slave_1
[  626.128547][T30360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  626.154557][T30360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  626.229416][T30360] hsr_slave_0: entered promiscuous mode
[  626.243671][T30360] hsr_slave_1: entered promiscuous mode
[  626.263872][T30360] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  626.285910][T30360] Cannot create hsr debugfs directory
[  626.518330][T30431] lo speed is unknown, defaulting to 1000
[  626.525565][T30431] lo speed is unknown, defaulting to 1000
[  626.578654][T30435] netlink: 'syz.6.8705': attribute type 1 has an invalid length.
[  626.588425][T30435] netlink: 'syz.6.8705': attribute type 2 has an invalid length.
[  626.664823][T30440] IPVS: Error connecting to the multicast addr
[  626.681599][T30360] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  626.694630][T30360] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  626.708638][T30360] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  626.734646][T30360] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  626.767454][T30360] bridge0: port 2(bridge_slave_1) entered blocking state
[  626.774627][T30360] bridge0: port 2(bridge_slave_1) entered forwarding state
[  626.782006][T30360] bridge0: port 1(bridge_slave_0) entered blocking state
[  626.789119][T30360] bridge0: port 1(bridge_slave_0) entered forwarding state
[  626.810346][T30452] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8713'.
[  626.827722][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[  626.837050][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.882687][T30458] loop6: detected capacity change from 0 to 1024
[  626.891202][T30458] EXT4-fs: Ignoring removed orlov option
[  626.892029][T30360] 8021q: adding VLAN 0 to HW filter on device bond0
[  626.909803][T30458] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  626.912629][T30360] 8021q: adding VLAN 0 to HW filter on device team0
[  626.943575][T17393] bridge0: port 1(bridge_slave_0) entered blocking state
[  626.950744][T17393] bridge0: port 1(bridge_slave_0) entered forwarding state
[  626.969302][T17393] bridge0: port 2(bridge_slave_1) entered blocking state
[  626.976424][T17393] bridge0: port 2(bridge_slave_1) entered forwarding state
[  627.130453][T30360] 8021q: adding VLAN 0 to HW filter on device batadv0
[  627.148532][T30481] loop7: detected capacity change from 0 to 256
[  627.223525][T30488] netlink: 27 bytes leftover after parsing attributes in process `syz.7.8719'.
[  627.246771][T30490] netlink: 128 bytes leftover after parsing attributes in process `syz.9.8723'.
[  627.256311][T30490] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8723'.
[  627.274082][   T29] kauditd_printk_skb: 236 callbacks suppressed
[  627.274101][   T29] audit: type=1326 audit(1081.248:48374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30472 comm="syz.7.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02f60e929 code=0x7ffc0000
[  627.303677][   T29] audit: type=1326 audit(1081.248:48375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30472 comm="syz.7.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02f60e929 code=0x7ffc0000
[  627.347366][   T29] audit: type=1326 audit(1081.248:48376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30472 comm="syz.7.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa02f60e929 code=0x7ffc0000
[  627.370773][   T29] audit: type=1326 audit(1081.248:48377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30472 comm="syz.7.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02f60e929 code=0x7ffc0000
[  627.393871][   T29] audit: type=1326 audit(1081.248:48378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30472 comm="syz.7.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02f60e929 code=0x7ffc0000
[  627.416996][   T29] audit: type=1326 audit(1081.278:48379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30472 comm="syz.7.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa02f60e929 code=0x7ffc0000
[  627.440298][   T29] audit: type=1326 audit(1081.278:48380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30472 comm="syz.7.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02f60e929 code=0x7ffc0000
[  627.463466][   T29] audit: type=1326 audit(1081.288:48381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30472 comm="syz.7.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa02f60e929 code=0x7ffc0000
[  627.468881][T30360] veth0_vlan: entered promiscuous mode
[  627.486862][   T29] audit: type=1326 audit(1081.288:48382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30472 comm="syz.7.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02f60e929 code=0x7ffc0000
[  627.486902][   T29] audit: type=1326 audit(1081.288:48383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30472 comm="syz.7.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa02f60e929 code=0x7ffc0000
[  627.553542][T30360] veth1_vlan: entered promiscuous mode
[  627.561357][T28533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  627.573268][T30360] veth0_macvtap: entered promiscuous mode
[  627.585385][T30360] veth1_macvtap: entered promiscuous mode
[  627.600682][T30360] batman_adv: batadv0: Interface activated: batadv_slave_0
[  627.614404][T30500] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8725'.
[  627.615162][T30360] batman_adv: batadv0: Interface activated: batadv_slave_1
[  627.634340][T30504] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8726'.
[  627.638091][T30360] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  627.652639][T30360] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  627.661747][T30360] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  627.670788][T30360] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  627.704539][T30508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8728'.
[  627.778998][T30515] loop9: detected capacity change from 0 to 512
[  627.785442][T30516] loop6: detected capacity change from 0 to 128
[  627.800830][T30515] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  627.815519][T30510] msdos: Unknown parameter ''
[  627.827616][T30515] EXT4-fs (loop9): 1 truncate cleaned up
[  627.850249][T30515] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  628.043414][T30535] loop6: detected capacity change from 0 to 1764
[  628.051909][T30535] iso9660: Bad value for 'gid'
[  628.056903][T30535] iso9660: Bad value for 'gid'
[  628.083503][T30535] loop6: detected capacity change from 0 to 512
[  628.113672][T30535] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.8737: Failed to acquire dquot type 1
[  628.120279][T27195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  628.133418][T30535] EXT4-fs (loop6): 1 truncate cleaned up
[  628.141692][T30535] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  628.165147][T30535] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.8737: deleted inode referenced: 12
[  628.204651][T28533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  628.287293][T30562] wireguard0: entered promiscuous mode
[  628.296390][T30564] loop9: detected capacity change from 0 to 256
[  628.356039][T30569] netlink: 'syz.6.8748': attribute type 13 has an invalid length.
[  628.483159][T30569] bridge0: port 2(bridge_slave_1) entered disabled state
[  628.490461][T30569] bridge0: port 1(bridge_slave_0) entered disabled state
[  628.549351][T30575] loop7: detected capacity change from 0 to 512
[  628.585160][T30575] EXT4-fs (loop7): 1 orphan inode deleted
[  628.601937][T30575] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  628.622938][   T37] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[  628.651532][T30569] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  628.660942][T30569] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  628.670132][T30569] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  628.679414][T30569] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  628.758447][T28156] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  628.986540][T30610] FAULT_INJECTION: forcing a failure.
[  628.986540][T30610] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  629.000340][T30610] CPU: 1 UID: 0 PID: 30610 Comm: syz.4.8762 Tainted: G        W           6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) 
[  629.000377][T30610] Tainted: [W]=WARN
[  629.000383][T30610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  629.000401][T30610] Call Trace:
[  629.000409][T30610]  <TASK>
[  629.000430][T30610]  __dump_stack+0x1d/0x30
[  629.000455][T30610]  dump_stack_lvl+0xe8/0x140
[  629.000473][T30610]  dump_stack+0x15/0x1b
[  629.000491][T30610]  should_fail_ex+0x265/0x280
[  629.000577][T30610]  should_fail+0xb/0x20
[  629.000602][T30610]  should_fail_usercopy+0x1a/0x20
[  629.000639][T30610]  _copy_from_user+0x1c/0xb0
[  629.000718][T30610]  do_sys_poll+0x149/0xbd0
[  629.000739][T30610]  ? cmp_ex_search+0x25/0x40
[  629.000763][T30610]  ? __pfx_cmp_ex_search+0x10/0x10
[  629.000782][T30610]  ? strncpy_from_kernel_nofault+0x78/0x130
[  629.000831][T30610]  ? search_extable+0x53/0x80
[  629.000901][T30610]  __se_sys_poll+0xdd/0x200
[  629.000938][T30610]  __x64_sys_poll+0x43/0x50
[  629.000975][T30610]  x64_sys_call+0x2dc4/0x2fb0
[  629.001001][T30610]  do_syscall_64+0xd2/0x200
[  629.001020][T30610]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  629.001054][T30610]  ? clear_bhb_loop+0x40/0x90
[  629.001088][T30610]  ? clear_bhb_loop+0x40/0x90
[  629.001112][T30610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.001186][T30610] RIP: 0033:0x7f46e9efe929
[  629.001204][T30610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  629.001222][T30610] RSP: 002b:00007f46e8567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007
[  629.001311][T30610] RAX: ffffffffffffffda RBX: 00007f46ea125fa0 RCX: 00007f46e9efe929
[  629.001326][T30610] RDX: ffffffffffbffff8 RSI: 000000000000002c RDI: 0000200000b2c000
[  629.001343][T30610] RBP: 00007f46e8567090 R08: 0000000000000000 R09: 0000000000000000
[  629.001358][T30610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  629.001374][T30610] R13: 0000000000000000 R14: 00007f46ea125fa0 R15: 00007ffe61745028
[  629.001399][T30610]  </TASK>
[  629.295848][T30626] FAULT_INJECTION: forcing a failure.
[  629.295848][T30626] name failslab, interval 1, probability 0, space 0, times 0
[  629.308567][T30626] CPU: 0 UID: 0 PID: 30626 Comm: syz.6.8767 Tainted: G        W           6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) 
[  629.308639][T30626] Tainted: [W]=WARN
[  629.308646][T30626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  629.308660][T30626] Call Trace:
[  629.308667][T30626]  <TASK>
[  629.308675][T30626]  __dump_stack+0x1d/0x30
[  629.308697][T30626]  dump_stack_lvl+0xe8/0x140
[  629.308717][T30626]  dump_stack+0x15/0x1b
[  629.308734][T30626]  should_fail_ex+0x265/0x280
[  629.308788][T30626]  should_failslab+0x8c/0xb0
[  629.308811][T30626]  kmem_cache_alloc_noprof+0x50/0x310
[  629.308917][T30626]  ? getname_flags+0x80/0x3b0
[  629.308940][T30626]  getname_flags+0x80/0x3b0
[  629.308992][T30626]  do_sys_openat2+0x60/0x110
[  629.309021][T30626]  __x64_sys_openat+0xf2/0x120
[  629.309109][T30626]  x64_sys_call+0x1af/0x2fb0
[  629.309131][T30626]  do_syscall_64+0xd2/0x200
[  629.309149][T30626]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  629.309176][T30626]  ? clear_bhb_loop+0x40/0x90
[  629.309204][T30626]  ? clear_bhb_loop+0x40/0x90
[  629.309236][T30626]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.309258][T30626] RIP: 0033:0x7f6bc0ade929
[  629.309315][T30626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  629.309334][T30626] RSP: 002b:00007f6bbf147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  629.309354][T30626] RAX: ffffffffffffffda RBX: 00007f6bc0d05fa0 RCX: 00007f6bc0ade929
[  629.309367][T30626] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  629.309386][T30626] RBP: 00007f6bbf147090 R08: 0000000000000000 R09: 0000000000000000
[  629.309398][T30626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  629.309411][T30626] R13: 0000000000000000 R14: 00007f6bc0d05fa0 R15: 00007ffd05dcfd48
[  629.309432][T30626]  </TASK>
[  629.313924][T30626] loop6: detected capacity change from 0 to 512
[  629.518669][T30626] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  629.536892][T30626] EXT4-fs (loop6): mount failed
[  629.555087][T30633] __nla_validate_parse: 3 callbacks suppressed
[  629.555101][T30633] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8769'.
[  629.560341][T30626] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8767'.
[  629.561852][T30633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8769'.
[  629.590131][T30626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8767'.
[  629.686550][T30644] loop9: detected capacity change from 0 to 512
[  629.707658][T30644] ext4: Unknown parameter 'subj_user'
[  629.769516][T30648] ALSA: seq fatal error: cannot create timer (-19)
[  629.784709][T30650] loop7: detected capacity change from 0 to 512
[  629.792411][T30647] ALSA: seq fatal error: cannot create timer (-19)
[  629.837379][T30650] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  629.860492][T30650] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal
[  629.897670][T30650] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  630.255170][T30689] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  630.470447][T30698] loop9: detected capacity change from 0 to 256
[  630.612681][T30706] lo speed is unknown, defaulting to 1000
[  630.627504][T30706] lo speed is unknown, defaulting to 1000
[  631.262774][T30724] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8803'.
[  631.446887][T30736] loop6: detected capacity change from 0 to 256
[  631.508750][T30739] netlink: 27 bytes leftover after parsing attributes in process `syz.6.8807'.
[  631.784591][T30748] lo speed is unknown, defaulting to 1000
[  631.798225][T30748] lo speed is unknown, defaulting to 1000
[  631.923749][T30757] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  631.976629][T30761] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8816'.
[  631.987637][T30757] loop7: detected capacity change from 0 to 128
[  632.013842][T30757] EXT4-fs error (device loop7): __ext4_fill_super:5500: inode #2: comm syz.7.8815: iget: checksum invalid
[  632.031893][T30757] EXT4-fs (loop7): get root inode failed
[  632.037847][T30757] EXT4-fs (loop7): mount failed
[  632.109379][T30767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  632.172470][T30767] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  632.277070][   T29] kauditd_printk_skb: 171 callbacks suppressed
[  632.277279][   T29] audit: type=1326 audit(1086.248:48551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30773 comm="syz.6.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bc0ade929 code=0x7ffc0000
[  632.339436][   T29] audit: type=1326 audit(1086.298:48552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30773 comm="syz.6.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc0ade929 code=0x7ffc0000
[  632.363880][   T29] audit: type=1326 audit(1086.298:48553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30773 comm="syz.6.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc0ade929 code=0x7ffc0000
[  632.388451][   T29] audit: type=1326 audit(1086.298:48554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30773 comm="syz.6.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bc0ade929 code=0x7ffc0000
[  632.412346][   T29] audit: type=1326 audit(1086.298:48555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30773 comm="syz.6.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc0ade929 code=0x7ffc0000
[  632.436618][   T29] audit: type=1326 audit(1086.298:48556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30773 comm="syz.6.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f6bc0ade929 code=0x7ffc0000
[  632.460489][   T29] audit: type=1326 audit(1086.298:48557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30773 comm="syz.6.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc0ade929 code=0x7ffc0000
[  632.606727][T30779] can: request_module (can-proto-3) failed.
[  632.642225][T30783] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.673486][   T29] audit: type=1326 audit(1086.478:48558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30775 comm="syz.6.8823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6bc0ad58e7 code=0x7ffc0000
[  632.697561][   T29] audit: type=1326 audit(1086.478:48559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30775 comm="syz.6.8823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6bc0a7ab19 code=0x7ffc0000
[  632.721529][   T29] audit: type=1326 audit(1086.478:48560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30775 comm="syz.6.8823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6bc0ad58e7 code=0x7ffc0000
[  632.760262][T30787] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8827'.
[  632.773481][T30783] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.801228][T30789] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length.
[  632.813426][T30789] team0: Port device dummy0 added
[  632.890077][T30783] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.970089][T30783] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.054765][T30783] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  633.070910][T30783] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  633.092837][T30783] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  633.098812][T30799] loop7: detected capacity change from 0 to 256
[  633.112524][T30783] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  633.179723][T30803] SELinux:  Context system_u:object_r:auditd_exec_t:s0 is not valid (left unmapped).
[  633.192141][T30804] netlink: 27 bytes leftover after parsing attributes in process `syz.7.8832'.
[  633.205806][T30803] netlink: 'syz.5.8834': attribute type 3 has an invalid length.
[  633.560843][T30810] rdma_rxe: rxe_newlink: failed to add vxcan1
[  633.613302][T30810] loop9: detected capacity change from 0 to 2048
[  633.633409][T30810] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  633.773458][T27195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  633.816773][T30817] FAULT_INJECTION: forcing a failure.
[  633.816773][T30817] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  633.830614][T30817] CPU: 1 UID: 0 PID: 30817 Comm: syz.4.8839 Tainted: G        W           6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) 
[  633.830659][T30817] Tainted: [W]=WARN
[  633.830679][T30817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  633.830694][T30817] Call Trace:
[  633.830703][T30817]  <TASK>
[  633.830713][T30817]  __dump_stack+0x1d/0x30
[  633.830770][T30817]  dump_stack_lvl+0xe8/0x140
[  633.830792][T30817]  dump_stack+0x15/0x1b
[  633.830883][T30817]  should_fail_ex+0x265/0x280
[  633.830913][T30817]  should_fail+0xb/0x20
[  633.831029][T30817]  should_fail_usercopy+0x1a/0x20
[  633.831193][T30817]  strncpy_from_user+0x25/0x230
[  633.831223][T30817]  ? kmem_cache_alloc_noprof+0x186/0x310
[  633.831255][T30817]  ? getname_flags+0x80/0x3b0
[  633.831283][T30817]  getname_flags+0xae/0x3b0
[  633.831312][T30817]  __x64_sys_rename+0x33/0x70
[  633.831416][T30817]  x64_sys_call+0x2aee/0x2fb0
[  633.831444][T30817]  do_syscall_64+0xd2/0x200
[  633.831466][T30817]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  633.831498][T30817]  ? clear_bhb_loop+0x40/0x90
[  633.831518][T30817]  ? clear_bhb_loop+0x40/0x90
[  633.831563][T30817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  633.831589][T30817] RIP: 0033:0x7f46e9efe929
[  633.831604][T30817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  633.831687][T30817] RSP: 002b:00007f46e8567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  633.831709][T30817] RAX: ffffffffffffffda RBX: 00007f46ea125fa0 RCX: 00007f46e9efe929
[  633.831723][T30817] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000000
[  633.831738][T30817] RBP: 00007f46e8567090 R08: 0000000000000000 R09: 0000000000000000
[  633.831772][T30817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  633.831786][T30817] R13: 0000000000000000 R14: 00007f46ea125fa0 R15: 00007ffe61745028
[  633.831809][T30817]  </TASK>
[  634.214617][T30825] FAULT_INJECTION: forcing a failure.
[  634.214617][T30825] name failslab, interval 1, probability 0, space 0, times 0
[  634.227483][T30825] CPU: 0 UID: 0 PID: 30825 Comm: syz.4.8843 Tainted: G        W           6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) 
[  634.227521][T30825] Tainted: [W]=WARN
[  634.227528][T30825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  634.227540][T30825] Call Trace:
[  634.227546][T30825]  <TASK>
[  634.227555][T30825]  __dump_stack+0x1d/0x30
[  634.227579][T30825]  dump_stack_lvl+0xe8/0x140
[  634.227715][T30825]  dump_stack+0x15/0x1b
[  634.227787][T30825]  should_fail_ex+0x265/0x280
[  634.227826][T30825]  should_failslab+0x8c/0xb0
[  634.227901][T30825]  kmem_cache_alloc_noprof+0x50/0x310
[  634.227925][T30825]  ? radix_tree_node_alloc+0x8a/0x1f0
[  634.228092][T30825]  radix_tree_node_alloc+0x8a/0x1f0
[  634.228209][T30825]  radix_tree_extend+0xcf/0x370
[  634.228250][T30825]  idr_get_free+0x12d/0x550
[  634.228284][T30825]  idr_alloc_u32+0xca/0x180
[  634.228394][T30825]  ? __pfx_loop_control_ioctl+0x10/0x10
[  634.228431][T30825]  idr_alloc+0x6e/0xd0
[  634.228528][T30825]  loop_add+0x145/0x590
[  634.228569][T30825]  ? __pfx_loop_control_ioctl+0x10/0x10
[  634.228602][T30825]  loop_control_ioctl+0xd0/0x3f0
[  634.228660][T30825]  ? __pfx_loop_control_ioctl+0x10/0x10
[  634.228690][T30825]  __se_sys_ioctl+0xcb/0x140
[  634.228723][T30825]  __x64_sys_ioctl+0x43/0x50
[  634.228767][T30825]  x64_sys_call+0x19a8/0x2fb0
[  634.228811][T30825]  do_syscall_64+0xd2/0x200
[  634.228829][T30825]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  634.228859][T30825]  ? clear_bhb_loop+0x40/0x90
[  634.228885][T30825]  ? clear_bhb_loop+0x40/0x90
[  634.228929][T30825]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  634.228956][T30825] RIP: 0033:0x7f46e9efe929
[  634.228975][T30825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  634.228999][T30825] RSP: 002b:00007f46e8567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  634.229020][T30825] RAX: ffffffffffffffda RBX: 00007f46ea125fa0 RCX: 00007f46e9efe929
[  634.229064][T30825] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000003
[  634.229080][T30825] RBP: 00007f46e8567090 R08: 0000000000000000 R09: 0000000000000000
[  634.229096][T30825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  634.229112][T30825] R13: 0000000000000000 R14: 00007f46ea125fa0 R15: 00007ffe61745028
[  634.229213][T30825]  </TASK>
[  634.715298][T30847] loop9: detected capacity change from 0 to 164
[  634.724626][T30847] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  634.735623][T30849] netlink: 14 bytes leftover after parsing attributes in process `syz.7.8848'.
[  634.781778][T30849] hsr_slave_0: left promiscuous mode
[  634.808679][T30849] hsr_slave_1: left promiscuous mode
[  634.885697][T30852] loop6: detected capacity change from 0 to 512
[  634.929951][T30858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8857'.
[  634.940719][T30852] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  634.961290][T30852] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.8854: corrupted inode contents
[  634.989882][T30852] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.8854: mark_inode_dirty error
[  635.012963][T30852] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.8854: corrupted inode contents
[  635.067565][T30856] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.8854: corrupted inode contents
[  635.069668][T30869] netlink: 132 bytes leftover after parsing attributes in process `syz.9.8861'.
[  635.108917][T30856] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.8854: mark_inode_dirty error
[  635.142796][T30856] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.8854: corrupted inode contents
[  635.175859][T30856] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.8854: mark_inode_dirty error
[  635.206470][T30856] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.8854: corrupted inode contents
[  635.207011][T30871] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  635.224272][T30856] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.8854: mark_inode_dirty error
[  635.265169][T30875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8863'.
[  635.292149][T28533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  635.393163][T30884] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  635.421057][T30889] netlink: 'syz.6.8867': attribute type 1 has an invalid length.
[  635.482182][T30887] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8868'.
[  635.524991][T30889] 8021q: adding VLAN 0 to HW filter on device bond0
[  635.561249][T30889] bond0: (slave bridge1): making interface the new active one
[  635.625235][T30895] SELinux: syz.9.8870 (30895) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  635.663128][T30889] bond0: (slave bridge1): Enslaving as an active interface with an up link
[  635.744881][T30912] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8875'.
[  635.797607][T30921] netlink: 'syz.4.8877': attribute type 29 has an invalid length.
[  635.831010][T30921] netlink: 'syz.4.8877': attribute type 29 has an invalid length.
[  635.888002][T30916] netlink: 500 bytes leftover after parsing attributes in process `syz.4.8877'.
[  635.938101][T30928] rtc_cmos 00:00: Alarms can be up to one day in the future
[  635.992667][T30926] lo speed is unknown, defaulting to 1000
[  636.005771][T30926] lo speed is unknown, defaulting to 1000
[  636.026630][T30924] smc: net device bond0 applied user defined pnetid SYZ2
[  636.038683][T30924] smc: net device bond0 erased user defined pnetid SYZ2
[  636.049955][T30931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8882'.
[  636.214268][T30940] loop7: detected capacity change from 0 to 1024
[  636.227570][T30940] EXT4-fs: inline encryption not supported
[  636.266618][T30940] EXT4-fs: Ignoring removed bh option
[  636.300400][T30940] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e857c028, mo2=0002]
[  636.315533][T30940] System zones: 1-12
[  636.325754][T30940] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  636.342136][T30940] netlink: 'syz.7.8885': attribute type 2 has an invalid length.
[  636.379372][T28156] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  636.427858][T30950] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8889'.
[  636.437236][T30950] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8889'.
[  636.447586][ T3399] rtc_cmos 00:00: Alarms can be up to one day in the future
[  636.455365][ T3399] rtc_cmos 00:00: Alarms can be up to one day in the future
[  636.463081][ T3399] rtc_cmos 00:00: Alarms can be up to one day in the future
[  636.470740][ T3399] rtc_cmos 00:00: Alarms can be up to one day in the future
[  636.478103][ T3399] rtc rtc0: __rtc_set_alarm: err=-22
[  636.503881][T30943] lo speed is unknown, defaulting to 1000
[  636.510200][T30943] lo speed is unknown, defaulting to 1000
[  636.590678][T30958] loop9: detected capacity change from 0 to 1024
[  636.605707][T30958] EXT4-fs: Ignoring removed orlov option
[  636.614078][T30958] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  637.043333][T27195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  637.048736][T30970] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  637.060445][T30970] batman_adv: batadv0: Removing interface: batadv_slave_0
[  637.068580][T30970] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  637.076130][T30970] batman_adv: batadv0: Removing interface: batadv_slave_1
[  637.124047][T30976] loop9: detected capacity change from 0 to 1024
[  637.131367][T30976] EXT4-fs: inline encryption not supported
[  637.137460][T30976] EXT4-fs: Ignoring removed i_version option
[  637.143931][T30976] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  637.156291][T30976] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 2: comm syz.9.8899: lblock 2 mapped to illegal pblock 2 (length 1)
[  637.172055][T30976] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 48: comm syz.9.8899: lblock 0 mapped to illegal pblock 48 (length 1)
[  637.186987][T30976] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.8899: Failed to acquire dquot type 0
[  637.200041][T30976] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  637.210042][T30976] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.8899: mark_inode_dirty error
[  637.223165][T30976] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  637.234743][T30976] EXT4-fs (loop9): 1 orphan inode deleted
[  637.241448][T30976] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  637.254047][T17396] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:58: lblock 1 mapped to illegal pblock 1 (length 1)
[  637.274185][T17396] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:58: Failed to release dquot type 0
[  637.286990][T30976] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  637.296355][T30976] EXT4-fs error (device loop9): __ext4_get_inode_loc:4792: comm syz.9.8899: Invalid inode table block 1 in block_group 0
[  637.317956][T30976] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  637.328647][T30976] EXT4-fs error (device loop9): ext4_quota_off:7217: inode #3: comm syz.9.8899: mark_inode_dirty error
[  637.342084][   T29] kauditd_printk_skb: 313 callbacks suppressed
[  637.342099][   T29] audit: type=1326 audit(1347.312:48871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30987 comm="syz.5.8903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623de3e929 code=0x7ffc0000
[  637.373446][T30976] loop9: detected capacity change from 0 to 512
[  637.380805][T30976] EXT4-fs: Ignoring removed orlov option
[  637.387079][   T29] audit: type=1326 audit(1347.352:48872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30987 comm="syz.5.8903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f623de3e929 code=0x7ffc0000
[  637.410467][   T29] audit: type=1326 audit(1347.352:48873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30987 comm="syz.5.8903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623de3e929 code=0x7ffc0000
[  637.438744][T30976] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  637.448078][T30976] EXT4-fs (loop9): orphan cleanup on readonly fs
[  637.455040][T30976] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.8899: bg 0: block 248: padding at end of block bitmap is not set
[  637.470134][T30976] Quota error (device loop9): write_blk: dquota write failed
[  637.477660][T30976] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[  637.487663][T30976] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.8899: Failed to acquire dquot type 1
[  637.513752][T30976] EXT4-fs (loop9): 1 truncate cleaned up
[  637.527090][T30976] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  637.559469][T27195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  637.895824][   T29] audit: type=1326 audit(1347.862:48874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31014 comm="syz.9.8914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff848aa58e7 code=0x7ffc0000
[  637.918978][   T29] audit: type=1326 audit(1347.862:48875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31014 comm="syz.9.8914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff848a4ab19 code=0x7ffc0000
[  637.942050][   T29] audit: type=1326 audit(1347.862:48876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31014 comm="syz.9.8914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff848aa58e7 code=0x7ffc0000
[  637.965129][   T29] audit: type=1326 audit(1347.862:48877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31014 comm="syz.9.8914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff848a4ab19 code=0x7ffc0000
[  637.988291][   T29] audit: type=1326 audit(1347.862:48878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31014 comm="syz.9.8914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848aae929 code=0x7ffc0000
[  638.095268][T31021] loop9: detected capacity change from 0 to 164
[  638.138189][T31021] ISOFS: unable to read i-node block
[  638.143588][T31021] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  638.227574][T31026] FAULT_INJECTION: forcing a failure.
[  638.227574][T31026] name failslab, interval 1, probability 0, space 0, times 0
[  638.240430][T31026] CPU: 0 UID: 0 PID: 31026 Comm: syz.7.8919 Tainted: G        W           6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) 
[  638.240469][T31026] Tainted: [W]=WARN
[  638.240478][T31026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  638.240494][T31026] Call Trace:
[  638.240575][T31026]  <TASK>
[  638.240592][T31026]  __dump_stack+0x1d/0x30
[  638.240617][T31026]  dump_stack_lvl+0xe8/0x140
[  638.240636][T31026]  dump_stack+0x15/0x1b
[  638.240652][T31026]  should_fail_ex+0x265/0x280
[  638.240751][T31026]  ? hash_ipmac_create+0x21b/0x740
[  638.240789][T31026]  should_failslab+0x8c/0xb0
[  638.240817][T31026]  __kmalloc_cache_noprof+0x4c/0x320
[  638.240851][T31026]  hash_ipmac_create+0x21b/0x740
[  638.241004][T31026]  ? __find_set_type_get+0x220/0x2f0
[  638.241110][T31026]  ? __pfx_hash_ipmac_create+0x10/0x10
[  638.241170][T31026]  ip_set_create+0x3c9/0x960
[  638.241219][T31026]  ? __nla_parse+0x40/0x60
[  638.241335][T31026]  nfnetlink_rcv_msg+0x4c3/0x590
[  638.241365][T31026]  ? avc_has_perm_noaudit+0x1b1/0x200
[  638.241421][T31026]  ? selinux_capable+0x1f9/0x270
[  638.241467][T31026]  netlink_rcv_skb+0x120/0x220
[  638.241520][T31026]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  638.241562][T31026]  nfnetlink_rcv+0x16b/0x1690
[  638.241663][T31026]  ? __kfree_skb+0x109/0x150
[  638.241761][T31026]  ? nlmon_xmit+0x4f/0x60
[  638.241788][T31026]  ? consume_skb+0x49/0x150
[  638.241822][T31026]  ? nlmon_xmit+0x4f/0x60
[  638.241845][T31026]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  638.241914][T31026]  ? __dev_queue_xmit+0x11c0/0x1fb0
[  638.241955][T31026]  ? __dev_queue_xmit+0x182/0x1fb0
[  638.242039][T31026]  ? ref_tracker_free+0x37d/0x3e0
[  638.242083][T31026]  ? __netlink_deliver_tap+0x4dc/0x500
[  638.242131][T31026]  netlink_unicast+0x5a5/0x680
[  638.242240][T31026]  netlink_sendmsg+0x58b/0x6b0
[  638.242268][T31026]  ? __pfx_netlink_sendmsg+0x10/0x10
[  638.242292][T31026]  __sock_sendmsg+0x145/0x180
[  638.242320][T31026]  ____sys_sendmsg+0x31e/0x4e0
[  638.242436][T31026]  ___sys_sendmsg+0x17b/0x1d0
[  638.242525][T31026]  __x64_sys_sendmsg+0xd4/0x160
[  638.242572][T31026]  x64_sys_call+0x2999/0x2fb0
[  638.242629][T31026]  do_syscall_64+0xd2/0x200
[  638.242648][T31026]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  638.242685][T31026]  ? clear_bhb_loop+0x40/0x90
[  638.242773][T31026]  ? clear_bhb_loop+0x40/0x90
[  638.242802][T31026]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.242828][T31026] RIP: 0033:0x7fa02f60e929
[  638.242845][T31026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  638.242923][T31026] RSP: 002b:00007fa02dc77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  638.242946][T31026] RAX: ffffffffffffffda RBX: 00007fa02f835fa0 RCX: 00007fa02f60e929
[  638.242961][T31026] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  638.242977][T31026] RBP: 00007fa02dc77090 R08: 0000000000000000 R09: 0000000000000000
[  638.242993][T31026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  638.243008][T31026] R13: 0000000000000000 R14: 00007fa02f835fa0 R15: 00007ffcc92a8a18
[  638.243041][T31026]  </TASK>
[  638.687457][T31047] loop7: detected capacity change from 0 to 4096
[  638.712592][T31047] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  638.767625][T31051] netlink: 'syz.9.8929': attribute type 10 has an invalid length.
[  638.784066][T31059] netlink: zone id is out of range
[  638.791354][T31059] netlink: zone id is out of range
[  638.798550][T31059] netlink: zone id is out of range
[  638.801262][T31051] geneve1: entered promiscuous mode
[  638.803936][T31059] netlink: zone id is out of range
[  638.809104][T31051] geneve1: entered allmulticast mode
[  638.820933][T31051] team0: Port device geneve1 added
[  638.827508][T31059] netlink: zone id is out of range
[  638.833016][T31059] netlink: zone id is out of range
[  638.876998][T31059] netlink: del zone limit has 8 unknown bytes
[  639.049835][T28156] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  639.151328][T31085] loop7: detected capacity change from 0 to 512
[  639.167178][T18359] hid-generic 0000:0000:8000.0029: unknown main item tag 0x0
[  639.176627][T18359] hid-generic 0000:0000:8000.0029: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  639.201381][T31085] EXT4-fs: Ignoring removed nomblk_io_submit option
[  639.230291][T31085] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  639.311989][T31096] netlink: '’': attribute type 10 has an invalid length.
[  639.330633][T31096] netlink: '’': attribute type 10 has an invalid length.
[  639.348209][T31096] dummy0: left promiscuous mode
[  639.364670][T31096] dummy0: left allmulticast mode
[  639.397687][T28156] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  639.408570][T31096] team0: Port device dummy0 removed
[  639.427403][T31096] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  639.440136][T31100] loop7: detected capacity change from 0 to 128
[  639.540956][T31109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31109 comm=syz.9.8952
[  639.583874][T31109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31109 comm=syz.9.8952
[  639.601163][T31109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31109 comm=syz.9.8952
[  639.614228][T31109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31109 comm=syz.9.8952
[  639.628623][T31109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31109 comm=syz.9.8952
[  639.641852][T31109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31109 comm=syz.9.8952
[  639.656835][T31111] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5)
[  639.663400][T31111] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  639.671093][T31111] vhci_hcd vhci_hcd.0: Device attached
[  639.681743][T31112] vhci_hcd: connection closed
[  639.682038][T19448] vhci_hcd: stop threads
[  639.691098][T19448] vhci_hcd: release socket
[  639.695602][T19448] vhci_hcd: disconnect device
[  639.775217][T31119] __nla_validate_parse: 7 callbacks suppressed
[  639.781571][T31119] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8955'.
[  639.860047][T31126] erspan1: entered allmulticast mode
[  639.908362][T31130] netlink: 216 bytes leftover after parsing attributes in process `syz.7.8959'.
[  639.917884][T31130] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8959'.
[  639.927168][T31130] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8959'.
[  639.944048][T31130] loop7: detected capacity change from 0 to 1024
[  639.952747][T31130] EXT4-fs: inline encryption not supported
[  639.958961][T31130] EXT4-fs: Ignoring removed i_version option
[  639.965831][T31130] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  639.978829][T31130] EXT4-fs error (device loop7): ext4_map_blocks:816: inode #3: block 1: comm syz.7.8959: lblock 1 mapped to illegal pblock 1 (length 1)
[  639.995103][T31130] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.8959: Failed to acquire dquot type 0
[  640.016826][T31130] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.8959: Freeing blocks not in datazone - block = 0, count = 4096
[  640.031900][T31130] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.8959: Invalid inode bitmap blk 0 in block_group 0
[  640.044874][T31130] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem
[  640.054039][T19448] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:68: lblock 1 mapped to illegal pblock 1 (length 1)
[  640.055829][T31130] EXT4-fs (loop7): 1 orphan inode deleted
[  640.068767][T19448] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:68: Failed to release dquot type 0
[  640.087953][T31130] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  640.197213][T31151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8966'.
[  640.306906][T31164] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8972'.
[  640.802759][T31179] lo speed is unknown, defaulting to 1000
[  640.809875][T31179] lo speed is unknown, defaulting to 1000
[  641.016716][T28156] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.190074][T31186] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8979'.
[  641.253763][T31188] lo speed is unknown, defaulting to 1000
[  641.260130][T31188] lo speed is unknown, defaulting to 1000
[  641.290155][T31197] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 51757 - 0
[  641.298557][T31197] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 51757 - 0
[  641.307061][T31197] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 51757 - 0
[  641.315549][T31197] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 51757 - 0
[  641.374732][T31197] netdevsim netdevsim5 eth0: set [1, 2] type 2 family 0 port 40300 - 0
[  641.383080][T31197] netdevsim netdevsim5 eth1: set [1, 2] type 2 family 0 port 40300 - 0
[  641.391497][T31197] netdevsim netdevsim5 eth2: set [1, 2] type 2 family 0 port 40300 - 0
[  641.399849][T31197] netdevsim netdevsim5 eth3: set [1, 2] type 2 family 0 port 40300 - 0
[  641.408427][T31197] geneve2: entered promiscuous mode
[  641.413689][T31197] geneve2: entered allmulticast mode
[  641.429265][T31207] SELinux: syz.7.8985 (31207) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  641.488363][T31211] pimreg: entered allmulticast mode
[  641.633235][T31219] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8991'.
[  641.642624][T31219] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8991'.
[  641.686176][T31226] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8993'.
[  642.428809][T31242] pim6reg1: entered promiscuous mode
[  642.434210][T31242] pim6reg1: entered allmulticast mode
[  642.534706][   T29] kauditd_printk_skb: 299 callbacks suppressed
[  642.534721][   T29] audit: type=1326 audit(1352.514:49175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31243 comm="syz.4.8999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e9efe929 code=0x7ffc0000
[  642.589272][   T29] audit: type=1326 audit(1352.544:49176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31243 comm="syz.4.8999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46e9efe929 code=0x7ffc0000
[  642.613389][   T29] audit: type=1326 audit(1352.544:49177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31243 comm="syz.4.8999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e9efe929 code=0x7ffc0000
[  642.637420][   T29] audit: type=1326 audit(1352.544:49178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31243 comm="syz.4.8999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e9efe929 code=0x7ffc0000
[  642.661458][   T29] audit: type=1326 audit(1352.544:49179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31243 comm="syz.4.8999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46e9efe929 code=0x7ffc0000
[  642.685430][   T29] audit: type=1326 audit(1352.544:49180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31243 comm="syz.4.8999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e9efe929 code=0x7ffc0000
[  642.709350][   T29] audit: type=1326 audit(1352.544:49181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31243 comm="syz.4.8999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e9efe929 code=0x7ffc0000
[  642.733285][   T29] audit: type=1326 audit(1352.544:49182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31243 comm="syz.4.8999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46e9efe929 code=0x7ffc0000
[  642.757087][   T29] audit: type=1326 audit(1352.544:49183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31243 comm="syz.4.8999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e9efe929 code=0x7ffc0000
[  642.780938][   T29] audit: type=1326 audit(1352.544:49184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31243 comm="syz.4.8999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46e9efe929 code=0x7ffc0000
[  642.938209][T31257] bridge0: port 3(team0) entered disabled state
[  642.944957][T31257] bridge0: port 2(bridge_slave_1) entered disabled state
[  642.952415][T31257] bridge0: port 1(bridge_slave_0) entered disabled state
[  643.050200][T31272] loop6: detected capacity change from 0 to 8192
[  643.098079][T31257] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  643.118253][T31257] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  643.165663][T31257] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  643.174283][T31257] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  643.182818][T31257] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  643.191333][T31257] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  643.249384][T18359] lo speed is unknown, defaulting to 1000
[  643.255310][T18359] syz0: Port: 1 Link DOWN
[  643.311816][T31283] xt_CT: No such helper "pptp"
[  643.792502][T31307] loop7: detected capacity change from 0 to 256
[  643.963069][T31313] loop6: detected capacity change from 0 to 256
[  644.707888][T31357] loop7: detected capacity change from 0 to 2048
[  644.720522][T31357] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  645.041635][T28156] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  645.137242][T31368] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  645.138655][T31367] loop7: detected capacity change from 0 to 8192
[  645.158100][T31367] bio_check_eod: 1 callbacks suppressed
[  645.158118][T31367] syz.7.9044: attempt to access beyond end of device
[  645.158118][T31367] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  645.196674][T31367] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[  645.204637][T31367] FAT-fs (loop7): Filesystem has been set read-only
[  645.222286][T31373] loop6: detected capacity change from 0 to 1024
[  645.222282][T31368] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  645.240402][T31367] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[  645.251788][T31367] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[  645.283690][T31373] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  645.296502][T31378] __nla_validate_parse: 12 callbacks suppressed
[  645.296520][T31378] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9048'.
[  645.298345][T31368] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  645.384085][T31368] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  645.402257][T31373] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 16: block 161:freeing already freed block (bit 10); block bitmap corrupt.
[  645.421155][T31373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9047'.
[  645.492280][T31373] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  645.502355][T31389] netlink: 64 bytes leftover after parsing attributes in process `syz.5.9053'.
[  645.520375][T31368] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  645.534390][T31368] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  645.546396][T31368] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  645.547462][T28533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  645.558313][T31368] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  645.577470][T31382] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9050'.
[  645.588414][T31398] ==================================================================
[  645.596542][T31398] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry
[  645.604142][T31398] 
[  645.606481][T31398] write to 0xffff888104544360 of 8 bytes by task 31394 on cpu 0:
[  645.614224][T31398]  mas_wr_store_entry+0x1581/0x2b50
[  645.619540][T31398]  mas_store_prealloc+0x74d/0x9e0
[  645.624593][T31398]  commit_merge+0x6a5/0x730
[  645.629114][T31398]  vma_expand+0x1d0/0x370
[  645.633455][T31398]  vma_merge_new_range+0x296/0x310
[  645.638578][T31398]  mmap_region+0x9fa/0x1580
[  645.643107][T31398]  do_mmap+0x9b3/0xbe0
[  645.647199][T31398]  vm_mmap_pgoff+0x17a/0x2e0
[  645.651806][T31398]  ksys_mmap_pgoff+0xc2/0x310
[  645.656536][T31398]  x64_sys_call+0x1602/0x2fb0
[  645.661227][T31398]  do_syscall_64+0xd2/0x200
[  645.665739][T31398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  645.671735][T31398] 
[  645.674098][T31398] read to 0xffff888104544360 of 8 bytes by task 31398 on cpu 1:
[  645.681742][T31398]  mas_state_walk+0x2f5/0x650
[  645.686447][T31398]  mas_walk+0x30/0x120
[  645.690541][T31398]  lock_vma_under_rcu+0xa2/0x2f0
[  645.695498][T31398]  do_user_addr_fault+0x233/0x1090
[  645.700633][T31398]  exc_page_fault+0x62/0xa0
[  645.705162][T31398]  asm_exc_page_fault+0x26/0x30
[  645.710024][T31398] 
[  645.712356][T31398] value changed: 0x00007f6bbf0e4fff -> 0x00007f6bbf0c3fff
[  645.719473][T31398] 
[  645.721801][T31398] Reported by Kernel Concurrency Sanitizer on:
[  645.727962][T31398] CPU: 1 UID: 0 PID: 31398 Comm: syz.6.9056 Tainted: G        W           6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) 
[  645.742044][T31398] Tainted: [W]=WARN
[  645.745853][T31398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  645.755918][T31398] ==================================================================
[  645.765485][T31396] loop9: detected capacity change from 0 to 256
[  645.790792][T31382] SELinux: failed to load policy