last executing test programs:

2m39.2031494s ago: executing program 2 (id=3202):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xfffffffffffffe40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b800)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0xd90}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0)
recvmmsg(r1, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xc52}], 0x2, 0x0, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x10)
pipe2$9p(&(0x7f00000001c0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c76657273696f6e3d3970323008002c0082e11cbf6f35c63ff7b4135e7bbc9528a147b1d9bd9b37af8b708ca40aea"])
write$P9_RVERSION(r12, &(0x7f0000000080)=ANY=[@ANYBLOB="150000"], 0x15)

2m38.305898711s ago: executing program 2 (id=3215):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000"], 0xfc}}, 0x0)

2m38.250864297s ago: executing program 2 (id=3217):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000780)={[{@lazytime}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@abort}, {@data_writeback}]}, 0x1, 0x634, &(0x7f0000001940)="$eJzs3c9vVMcdAPDve17/brsGVW3poVitKpBabGygQlUl8KUnhGiTW04ONoiwYIQdJSZIsSVyiRTlkkOknHII+S8SpFxzyDWHXHKKkFAUcQgRCRu9t2/Neu317/Ua+/ORln2zszszD/m7Mzs78zaAA2u4dpceiYhbSUS5Ia9Uy8qflD3v8Q93L2e3JKrVl75P4u7byUJjWUlxP1i8+JdyJF+lEYe7VtY7O3/n+mSlMn27SI/O3bg1Ojt/58S1G5NXp69O3xz/1/jZM6fPnB07ua3zK6r+Ofvnwr3X3ii/e/GVTz56mox9+s3FJM7Hs+IJ2Xk1v7Z3WzVn/2fDUa15siwjjTi7zbL3ih/L9b+TXG/2B5GUOtkiNiONiHMR0R0Rf4xydMXzYC3HO//raOOAtqomkfdRw1Xg4EmiZda1vuJNYqW+trYJ2A31cUD9s/1qn4NXSts5JAF2yaOJ2lxdLfa7I6Ie/6VibrAvnxsYeJw0zvPkc33bm5mryer48ouL97JbtJiHA9pjYbE+y93c/yd5bA5F7TPAwON0WfxPFKOAtPie4P/NBW9w8ny4KS3+YfcsLEbEn4r+vyc2HP9pEbv1+H91i/WLfwAAAAAAANg5DyYi4p+rrf9Ll9b/9Kyy/mcwIs7vQP3rf/+XPiwOkh2oDmjwaCLiP6uu/11a4zvUVaR+m68H6E6uXKtMn4yI30XE8ejuzdJjTeU2rhA+8d7hD1vV37j+L7tl9dfXAhYlPSw1rSWampyb3O55AxGPFiP+nK//PVo8snz9T9b/J6v0/1l839pgHYf/fv9Sq7z14x9ol+rHEcdW7f+fD7eTta/PMZqPB0bro4KV/vLW+5+1ql/8Q+dk/f/A2vHfmzRer2d2c+X3RMSp+VK1Vf5Wx/89yctd9fIzb07Ozd0ei+hJLqx8fHxzbYb9qh4P9XjJ4v/439ae/1sa/zfEYX9ELGywzj88G/y2VZ7+Hzoni/+ptfv/8vL+f/MH4/eHPm9V/6UN9f+n8z79ePGI+T9otPJ6HBsN0I40FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CaSdGTpOE1HRiIGI+L3MZBWZmbn/nFl5vWbU1le/vv/af2Xfsu1dFL//f+hhvR4U/pURByKiA+6+vP0yOWZylSnTx4AAAAAAAAAAAAAAAAAAAD2iMF8z3+1t3n/f+a7rk63Dmi7UnEv3uHgKW35ldXeHW0IsOu2Hv/Ai2xxU/Hf3da2ALuvdfw/eVrNNT3837+2vU3A7jD+h4Nri/Hv6wLYB/T/cFBtcE6vr93tADpB/w8AAAAAAPvKoaMPvk4iYuHf/fkt01Pk9Xe0ZUC7pZ1uANAx1vDCwVWa6XQLgE6xoR9Ilo5+at7sn2u9+j9pT4MAAAAAAAAAAAAAgBWOHWm9/9/eANjf1t7/b20/7Gdr7P9fLfhdLgD2kdY//aHvh/3OZ3xgvd7e/n8AAAAAAAAAAAAA2AP67lyfrFSmb8/Ov3gH5/ZGMzZ3sDC5vXKqvXvhLJYfPGtPyd0RsTdOcAcOsmCrVKar1Yj1n1y/BEcH29zZtyUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC5XwMAAP//9HMgKQ==")
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18)
r3 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000004000010120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r7], 0x20}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)

2m37.623331898s ago: executing program 2 (id=3224):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800850, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==")
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002064030000000000000020207b1af80e4097e93b791889007886000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macsec0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0317000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="1e"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x80000001, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x5452, &(0x7f00000004c0)='\x02;\xe5\b\x00\x00\x9c\x00\x00\x00\x00\x00\x00')
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180))
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
close_range(r0, 0xffffffffffffffff, 0x0)

2m37.197360486s ago: executing program 2 (id=3229):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

2m37.038218504s ago: executing program 2 (id=3230):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000142dff0012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x1c4, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x188, 0x22, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc0}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x200}]}, {0x4}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x76cc6a85}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4fcb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5af}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffe}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2726}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6cc}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xc}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048045)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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")
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
unshare(0x24000200)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18)
syz_clone3(&(0x7f00000006c0)={0x20040080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x18)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r9}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r10}, 0x10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x18)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r12)
sendmsg$NL80211_CMD_GET_WIPHY(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01030000000000000000010000000800010012000000080003"], 0x30}, 0x1, 0x0, 0x0, 0x4000064}, 0x40)

2m36.938575736s ago: executing program 32 (id=3230):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000142dff0012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x1c4, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x188, 0x22, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc0}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x200}]}, {0x4}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x76cc6a85}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4fcb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5af}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffe}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2726}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6cc}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xc}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048045)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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")
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
unshare(0x24000200)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18)
syz_clone3(&(0x7f00000006c0)={0x20040080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x18)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r9}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r10}, 0x10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x18)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r12)
sendmsg$NL80211_CMD_GET_WIPHY(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01030000000000000000010000000800010012000000080003"], 0x30}, 0x1, 0x0, 0x0, 0x4000064}, 0x40)

1m6.963423491s ago: executing program 3 (id=4769):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000002f00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="01a9af33d3363208e6219f38656c8f1c626580f78cb37e42d0f61158dd5eb21cf1e4bfc2a92b3ebb3bd11894d277439d514d4f3b06d7926b415677e5c119526d5a97391884657695abc003427f4711884036845bc6308ec9d002122702ebb9172cc97bf14ddaf03c3e7d8af1c5ba9bd771dc230c0345c4e8d144ab6a20f2047872866352056070ed707ceff09f878fb13c4802e834c0e02ce24fad74b311abec720e9776f73839219d41e7d599b70c7b07384ae6e166bc62119e26a82c0894f8f47c635bd732d1cfcd93f0c6c462f85c1a39dcd0fe770412bc5b726903235519b975e712a6b5ebb7b537defb721bc37827cab1ca38820940f91fb37633e8499e54fb6c60e248cf3422972fd401d9ec13622a766d3af8e4611b255f1dafbad614aca8a915ba6806811a50f73d59fb955a5cac501e90772cbfa5dba91376d3e011e6f090f94e6ed6ec1f0ac3324b42ff404c9162fb244de31354d2116fbbd56d31703297fe0339411986bdda0c2f8aa8c0e6cb36d8eb18678257440e97356b1e2cd8ec33893f013d7841eb5881a1991a718cf7d7171c680554b27d2f8b07282abf2e8f66210cb3b26c264c407efa368c2bc28afa990556d7b28d1afda60b199a5b4c1b6f6b94702e5411e5403f8152d5751b06355650d09d90c8c39512ca2903665a1ac7f52d00c58cd2c7bd5f3e329051df645ac5fffeacdf98cdce7fdd5d6cf63fe22ea5a7cec4475750ddbe42c1bb65b27b7206b00efdd60e2a191dbc9bd68b4a2423b38894b4ed7b7b919112c000cdc14bdbd93d70d2f0cbb7b341b0c364371a2edc6b2b2ca3387ee82f83ce0f75e2a7871958be02c28dedb6dc9d36098b00e9fbc436315655ca34f40a76db4af1cf97f12a23b2817c12109816b76be2a69aa4a58ddf042ad4a3536fd9e10e7909707a27273961d16c7ecfb8d0199af4077508c5105b7d92feb114b6bfafd219b16af5b3ea2c529a7d836f3974436ab34eb9f53e7c4773f5931530180bc261a7f10b386f2773b05858ff98bc50603286cb48fc7e583ab7c1bd0e0cb8b435995adb40ae5d02fbb60d2da7dc803c7171ea1f035f76da52fe391f49207fa36736ead9732e8ac9100c6331d5e57ef90ac6d7baafe216d64a3981ddcb6afff0de80b4f8f0c527f4212a8ca67148ede494b468d9b942a95e828f28278727a9b3265c733b8b01cbf915ed346d9c57325f636c17adcade13e7fba08d36e5241c8ade76231ced2a6069ff2e15b871ef9411ba31b25e9d784007e58cb902966207d66fb2013c0347f5c41e5730e97a7ffc8250b4ef8af0610b2076a837bd8c8892eb1b5c993453076bc034a860a6528326257b84404a229d8cb2ed6693b403404946a3cd127434842b176760db78ea5a3eaf412e7fd3c9f86bf96674edd19aeaf03df1fa4df85740d39675a3bc15708c3c43bc5ec31a0acf157e0eae697a53f41cff36a8fd15e28e5a0fdfa9d5ebad631e26af81d046258f9ef55d803ab742bb25bd7b5c9c4dd5b5176c271ad611a68eff11bb08841a530a8c1d2122f0187939064d23c744b9b91e9d6e5d803b08bf55f5299184c9697b6d3071a1e4b17bc5ed35f0a124277d6046501a97099e64450f3e3a467a4caf67114d14f194e30333ec8025247a318020e9541a44555ea9cd4e16498632173856322360ef4bfa696862ae80515f2ad231777a63df786ac4aa42652f2225e79a1e4fcba1f18bfe2bdb478d9d01c57510e214c7b0656fe3a5c59c5700b18573ad19d9120b1b91357ecc5a331fbeba37ef4ef120a55a38e16ca153bb0ad8e501c2001c502f1408a16d2a264ceb16d50f2e10beba42d0a92cece98c685f69e9f6b60a200aa183d53cea1cc56ee0875672dc7e95b611a5b6d93a50ff0b86f00228e549540e5223e8d7e51e5f4334ab16e3c4c9b10d88d32f4f98f4fa7577be0de648192ff8ef6d97a084293ff95d607b5d3d970536407e0415876143e63fb678dfd75f761d9a5319e769ce44001cbafb723c758e066f3f7d3b544b20d115d98c54ebc3c948d7aa6d7ce6d177013da6f96ea239222b384e23b997c09ac111ec690df5b1455e75046dae4fe9c7cd44a64541d5c57eb9cbd007436f1a6f5947ceb4241389221bac3c1e717a08cd72c6b3b2c276f40e9d30624b7baffdc9dd83d4ae4527505912964d92f56df5333ed666721a55ca6cdd84d875aef4f1504cc76f561f32cb9c70a7a8645e2f2d32d20c2d7b5e2a3b363871025e4e26455a74af0e062a3cd5e98f1c8593887424403dfc803dfa7f251deb84f5e0fd48725aa2ff926f30ee94df2f1c373ca9a28d11f9ac20bc22c8d6733fd89842834de84765a8df31c183cc36fb94c1b8bc57428701629c53c5b58d76e344b52a2b8df8ce55bb253f16c54702ab27922f96b48d516df5dc1e460d096037a657e5763c3bc6a093c16f63ea106a94cc1c009f7e85f68a633614e66e3b015ff67fa3d1f35f270213bef2f4a8e71393ab5fb30a775c9b947dc2ff3444fddd3d60029bc83fc81e16f9f9cbea19a8176f8d7c5db5e312ac4a2ee3fe81769fcbbdf10eb857a0b05a6360fb4e0c38a4950ecf10d6a0893b7eee4e8de5670246934dd6178b0923cc84338492a02877044e41530337dc1b81787a326a46f6782df58eea54670029c7df4b15e28100fa9c764dff8c974e276fbe45b9d4a29d40ac4e2100c56328922ff571629616732de9e115c2add42d9f125628edff520d3f188247a04a9bf30c574d0df264c4390f099cc8072d8d0f49ed3b0300d20803e077548a7e56e1c88aaf03c92c02c2675f3d024fa43df76a9f7b3524000e1eadfbef47aa12d1318700c26c3541db15eb45e5599cb20f670ca0385f44bc0f302f6a37ed82d2299a0756972eb06e0a17eaf70d45b4e7ce7e8199b6ca5cbdf2686d243cd450beb035f5757dd4bd3797f1f432bcfd40c15ebd0740687d9e09a63d23d1b75e61ded75346bbf894c6bc02b1f9f024623f89f4880511f13e4ae73654171d85a27fa49f7ee7dae45efc4ee1af6e46d23f8bdc7c4ad4f55c06b6b188fcd6ca677afa25753a8b3f78bb85b40ff4d469dd1df6ca64249355c502029edef441ae6321531721fbfb72f9870637f42a8ee229a89fcd34d310174d944a8e2f5e445f2cf420bee82ad581a48f3b967002f797bfa670c1baff84559ba8afe9e8258b3ed27ddae8e7c04552e7e1de0331cfa17931eadc6ccb8d89c988c4ced195a1ca79bbc99d51dd3bf5056f8d1b69fb25f6766ce2141502bf4f95a705238c8d5024f45745ec0ccd44babd60575d1d2d56527e8ed0a16cbe50b37a6c0837f34b7d602f331cf4c06430b167686a905dfb9be60ae44a09c091e2caa3568d1288bc36f6f6ce62c24125bdc8ce30083744b2216ec034f52ffb015461f9862f8de04d62260d118f319a94d3eb8450bf67b2ff94347b6075490bfc15c4c7be6609139a76f61afc2af30d566e485fdaf986943f076b45fda475564ffd167ceb73ba717eeaa3bcd8b792f33435fcd8f798a92c0f3059e1d579f4ac5537524440e9480f390d43a4e5e1a73624e392b34b0d0b45005c52741fe73f87bd155f58a90fcfdd553f0ebafc788b2708be9ae01795b63295ceb0d41584d0cadeec84e241738eed72ff066dcbf6616bf6ca49fe997132254ff4af62f6a7ea290437e436f284576c3cda5142c639e3739e455076e7a14a130937c34688d0cf032771d1e9c7ad27a08d2a051df8671c325b993862d106fb1c9fa72e043c834a91c0a6567e998cc52aac2046aa9585b3e030f7cadfce446624d14194e30b525190579c145301efc80df02366ebd9c153215e42d0bc5b84230cc493671b7c3cb4e8965c7f399e25e0bde95624f1e77c4914d436d8fbdbe8c29b21ec3175fc64930e3d092a58deae4a3228e6fbc05bd09f69e7e177cb00c69e58040d7720c1dbac0b5bb83958b54dabea39410ab59572ff6083b88859dfb047c308e42237629b45c0fa18d6e7756123e690da2dddc83642b8f5b46e28727c09fef06996c6143bb81b6b7a1fe5a7485b1b4bda3282dfd08fd2e94a8acb17d088893bde54822da2a6af00280fd83bb572dfb4d3b17f0f2621ac3f1d764177e21623c684a172000d7c1ef2aa2fe068f592886cc49b8649288f17d57a64b7d5f7a9f280ff9fd57b36f27130e47136e80537b1a23271c8ffff13b6c008037dbe924cc4a9d62e4b36e382e50329e6264a6d0de042bb89357d3f7ed9a55e2baf42d66993de571759e617784b6936305e2a68c80ffd47fa43042dfe27e2288e7b1846604ac65d615b35a5db9b7faca835320ad938cffa28734bb5e9037aa31713513ce1eaf1a587085a0ac94f5e9a3574cd9922c5adaba0faeff58f7af5f6f1ce7f1f8d3317eabb0356bde398ef48f9af12ba8c430c330d7ca8bb72ddfffe2e6bf2b38e5b779d4f526a1f584de749a234dbe6aeddc84a9851fbb9c9af6e9a09266ef1e808ae65a7c604dff10099c4ffb8b406d08922ccf26c68617873e83ba9c8519a1be27d1c26922d3351944fb9b1563b2d63e6cdd241650f5fa990b7815b58d8321940e96678fa98ce033b2792f2ca2ae533daefaff426b25216de7f3b8cb82c4689ac8771bfc5b8c7d03e80fcdcc53c070116b42502acde9af7a9423316fea2918d9a51922a059655bd56c3f77c8f6ae154506d2d493b1d89c63ade4f6903ba55169dcc3616a5b0ff9d7f5ff9ddb53932f9cb4116966f85a31f9d863696115c8f3543b2de209c5f8304cc83204fd07cca51b61912aa16d3f527cb796713f975b11390508354cf5854c7cd953856e4b89e9dc79d8252e5c46980dc066fa281e422a9b6c2eb81fbec417ac3c845827e8792d878e3db4270fd4698e7b508ec7134be05c0f3b99206a8217de3ee08215110adb666bcaf9f0663bd053bdeda85c827c4b69fc421546f07b60eaab9c65a960e4b12ce149ae58721ba7b42589ed369ad4008f95f9021f5332f710888ae1cf5adbfcff67123f708ee48dfa6b9e4b3b2bde5fa811553fa7de3d00b278eb46afe04da432fccc25a2a04aa0b7e5ec7743a22b7a5fd279b787f1fa06ec964c476b371c7355959566c94e52ed942dd8ba91f8ca2c6d822596f7c86feee88d4b695c179259f328aac2225ca5daae6f5119b6816dd1417147b6ee0bcae91a677219c45034eeae28b79f79f8441574171ad4ca7209a898f6d258aacef8db9de763be36f1b06e7576162e671f17bbb6fb9b913029d15c6ef629ede992ee0df882faeb7ff2cc00111f300353bc21bff7ce21c7314049e092d030c010925bc0aed84800e60afd5a17fe95d724f28d0657d45c3edc988f653c033bb61e96712bb14065856876f7dc92bc651fd8a56aca25a4432776e90c8a24c1298b6253c3fdd2e606a3aefe020cbc75457b80adc8c61c3a8e90c42311d1b2c9645bdf2f808e5331050929e20569195ac1cc22bd2357eee05f17ca3f9fb74bdca181b255bb66d593fba50e5278db97afd24054e167ea730bcebb5385207bff0c4b5b2b87a87b36ede72a105496a2e81455db68c6982e96ff6e025569b1aecb619a11ea79f22c1b73b4e6385da1a65cba503940f4f0f2b3f150d4d40ff50499a3682ff45f4f5483e9009898fcceecce0020db5b28f55ab58ef42a82cb03f51519547d08e8f8ae994b538012cb2a266a7af55f1c673a598105d2702f382598c646b6b595f90a2932dc2c742755b616f379c752c5e30fff9701cf3c98a45753dbce45958a6abd49090626583881b462e5ffcb19e19e2427bbb09e53362b396bf90e9a8c6bfc0", @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff32, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0, 0x0, 0x8000000000000}, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
pipe(&(0x7f0000000140))
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r5 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
sendmsg(r3, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4800)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r2, r4})
sendmmsg$inet(r3, &(0x7f000000c3c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000ebe500000500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x800001ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x3)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000003)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f0000000240)={0x0, 0xfffffffffffffe52, &(0x7f0000000000)=[{&(0x7f0000001480)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250401f2800c0018000bac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000880)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@noinit_itable}, {@sb={'sb', 0x3d, 0xfffffffffffffff7}}, {@grpquota}, {@minixdf}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@bh}, {@dioread_nolock}], [{@subj_user={'subj_user', 0x3d, 'kfree\x00'}}]}, 0xfd, 0x55c, &(0x7f0000001600)="$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")
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800114000000000050015000c0000000500010006000000050005000200000005000400000000000900020073797a310000000013000300686173683a6e65742c6966616365"], 0x60}}, 0x0)

1m6.077049912s ago: executing program 3 (id=4782):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001940)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f00000007c0)='workqueue_execute_start\x00', r5}, 0x18)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000140)={0x800, 0x4, 0xd})
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x0, 0x8400}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r8, 0x0, 0x1002}, 0x18)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'gretap0\x00', 0x0})
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000600)={@remote}, 0x14)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000880)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES16=r5, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00'}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}}, 0x0)

1m6.055181504s ago: executing program 3 (id=4783):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4050)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
semtimedop(0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(0x0, 0x0)
socket(0x1a, 0x6, 0x8)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2)
r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001600)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
getsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f0000000b00), &(0x7f0000000b40)=0x4)
setns(r3, 0x8020000)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[], 0x38}}, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x81100)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$OSF_MSG_REMOVE(r1, 0x0, 0x20000000)
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01)
ioctl$SG_GET_SCSI_ID(r6, 0x2276, &(0x7f0000000040))

1m5.900206612s ago: executing program 3 (id=4786):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) (async)
symlinkat(0x0, 0xffffffffffffff9c, 0x0) (async)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10)
fcntl$setlease(r2, 0x400, 0x2) (async)
sendmmsg(r2, &(0x7f0000001800)=[{{&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x4, {0xa, 0x4e22, 0x7ff, @remote, 0xff}}}, 0x80, &(0x7f0000001780)}}], 0x1, 0x2004c849) (async)
r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async)
r4 = fsmount(r3, 0x0, 0x82)
fchdir(r4) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
unlinkat(r4, &(0x7f0000000140)='./file0\x00', 0x200)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001880), r2)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="180afcdbdf25010000000800040009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008c0) (async)
r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) (async)
r7 = fsmount(r6, 0x0, 0x0)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="000100000000"], 0x6) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@float={0x1, 0x0, 0x0, 0x10, 0x8}]}}, 0x0, 0x26}, 0x28)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r10=>r0, {0x100}}, './file0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11, 0xffffffff}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x0, r10, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
r11 = socket(0x1, 0x5, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r11, &(0x7f0000000080)={0x10, 0x0, 0x2, 0x2}, 0x6) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0)

1m5.795823713s ago: executing program 3 (id=4787):
io_setup(0xb, &(0x7f00000003c0)=<r0=>0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x1c50fe, 0x42)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18)
io_submit(r0, 0x2, &(0x7f0000000a80)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x9, r1, &(0x7f0000000380)="ba419f8d4fda55572b", 0x9, 0x8, 0x0, 0x0, r1}])
socket$packet(0x11, 0x3, 0x300)
r4 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4)
socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0xa, 0x300)
socket$kcm(0x2, 0xa, 0x73)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r6 = inotify_init1(0x80000)
inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x400000a0)
r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
futex(&(0x7f0000000100)=0x20000, 0x5, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x35000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r8}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r9}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x10)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r11}, 0x18)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x64)

1m5.691641425s ago: executing program 3 (id=4793):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001940)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f00000007c0)='workqueue_execute_start\x00', r5}, 0x18)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000140)={0x800, 0x4, 0xd})
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x0, 0x8400}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r8, 0x0, 0x1002}, 0x18)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'gretap0\x00', 0x0})
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000600)={@remote}, 0x14)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000880)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYRES16=r5, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00'}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}}, 0x0)

51.418910756s ago: executing program 33 (id=4793):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001940)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f00000007c0)='workqueue_execute_start\x00', r5}, 0x18)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000140)={0x800, 0x4, 0xd})
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x0, 0x8400}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r8, 0x0, 0x1002}, 0x18)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'gretap0\x00', 0x0})
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000600)={@remote}, 0x14)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000880)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYRES16=r5, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00'}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}}, 0x0)

11.778899061s ago: executing program 4 (id=5997):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$eJzs3M1rVFcbAPDn3nwYNb6JL/LyWkoNtGChOBrFSl2py9ZFof0DDHEiIdcPkhRMcBHbhXRVC910UWgXpX9AoetstNBV6aaVFrqXShHdp9zJnWQwM0mqMx4/fj84c8/HZM7z5JK555C5E8BLa6x8yCP2R8S5LGKk6s8jYrBRG4pYWn3eg/vXJh/evzaZxcrKB39nkVV9zdfKquPuqjEUEb+cyeK/n2ycd25hcWaiKOqzVfvw/MUrh+cWFg9NX5y4UL9QvzR+YvzY8RPHjr99pGu5vrv35tmvxk/t+f7Mrauv3fj9yyxOxXA11ppHt4zFWKxUWvv7I2Ki25Ml0lflk7X0Zf0JAwIAYFN5yxrufzESfbG+eBuJW78mDQ4AAADoipW+WPsfFQAAAPCiyuz/AQAA4AXX/BzAg/vXJpsl7ScSnq57pyNitF3+/bHUOA7FQETsepBF622t2eqPPbGxiNj30+iPZYke3Ye8maXrEfH/dvlnjfxHG3dxb8w/j4hu3Jk99kj7ecr/VBfmT50/AC+n5dOrF7KN1798bf0Tba5//W2uXY8j9fWv8/pvPf++Duu/97c5R/3Ap593Gmtd/xXfvnq7nL88PlFS/8K96xGv9Hde/5T5Zx3yP7fNOQb++PmHTmNl/mW+zfK081/5JuJg2/3P+jfaZJt/P9HhqemiXj22nePG7e/2dZq/9fyXpZy/uRd4Gsrzv6tD/lud/yvbnGP5r4N/dhrbOv/87mD2YaM2WPVcnZifnx2PGMzObuw/unkszec0X6PM/83XN//7b5d/+Z6wVP0eyr3A9epYtj9+ZM5D773zxuPn31tl/ucf8/zf3OYcX382e7fTWOr8AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+5BExHFleW6vnea0WsTsi9sWuvLg8N//W1OWPLp0vxyJGYyCfmi7qRyJiZLWdle3xRn29ffSR9rGI2BsRX4zsbLRrk5eL86mTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYM3uiBiOLK9FRB4RD0fyvFZLHRUAAADQdaOpAwAAAAB6zv4fAAAAXnz2/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTY3gPLd7KIWDq5s1FKg9XYQNLIgF7LUwcAJNOXOgAgmf7UAQDJ2OMD2RbjQx1HdnQ9FgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeXQf3L9/JImLp5M5GKQ1WYwNJIwN6LU8dAJBMX+oAgGT6UwcAJGOPD2RbjA91HNnR9VgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHYNN0qW1yIib9TzvFaL2BMRozGQTU0X9SMR8Z+I+G1kYEfZHk8dNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF03t7A4M1EU9VkVFRWVtUrqdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFKYW1icmSiK+uxc6kgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA1OYWFmcmiqI+28NK6hwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEjnnwAAAP///JMJmQ==")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a40)={0x50, r1, 0x1, 0x70bd27, 0x25dfdbfc, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r2, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
r4 = dup3(r2, r3, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa00000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xec, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40080}, 0x40010)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x8e7})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))

11.596897061s ago: executing program 4 (id=6003):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x8, 0x1)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0xb163, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xfffffff5}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0x800, @private0, 0xafe}], 0x68)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='/dev/zero\x00', &(0x7f00000001c0)='f/.\x00', 0x0)
socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})
r2 = socket$igmp6(0xa, 0x3, 0x3a)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000000400085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e23, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xffcffffd, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1000, {[0x9, 0x2, 0xffff6710, 0xfffffcf9, 0x0, 0x40001, 0x3, 0x5]}}, 0x5c)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x5b, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_bp={0x0, 0x2}, 0x230, 0x32, 0x43a1bd76, 0x5, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000400000008000000ad00000000000000", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000f6ffffff0000000000000000"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0100000002000000040000000240000005000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0xffffffdd, 0x1000, 0xfffffffe, 0xcf}, &(0x7f00000003c0)=<r7=>0x0, &(0x7f0000000000))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x18)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r10, 0x0)
io_setup(0x6, &(0x7f0000000200))
ppoll(&(0x7f0000000180)=[{r10}], 0x1, 0x0, 0x0, 0x0)

10.571515607s ago: executing program 4 (id=6013):
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x78, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x8, 0x6}]}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x587, 0x4)
sendmmsg$inet6(r4, &(0x7f0000000e00)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0xf58, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4040884)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18)
io_setup(0x239f, &(0x7f0000000380)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r7, 0x3c573b4983785a15, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20004000)
r8 = eventfd2(0x5, 0x1)
io_submit(r5, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r8, 0x0, 0x300, 0x800002, 0x0, 0x0, r8}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r8, &(0x7f0000000080)="e2", 0x36, 0x5, 0x0, 0x1, r8}])

10.171825262s ago: executing program 4 (id=6016):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x006\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000001"], 0x48)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x40, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r2=>0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = timerfd_create(0x7, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='kmem_cache_free\x00', r8, 0x0, 0x7fff}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
timerfd_settime(r6, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0)
readv(r6, 0x0, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r9 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r9, &(0x7f0000005580)={0x0, 0x0, 0x0}, 0x40400d4)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@gettfilter={0x2c, 0x2e, 0x800, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x10}, {0xb, 0xd}, {0x1, 0x3}}, [{0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000061)

9.488724629s ago: executing program 4 (id=6028):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x81}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xc}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x40000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
io_cancel(0x0, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r3)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r5=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="200000000070000000847fb5008c375bb2c6775aa700000000f600001b0000000000"], 0x20, 0x4000894}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x6, 0x3, 0x8007, 0x10, 0xffff, 0x4, 0x400, 0x0, r5}, 0x20)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = gettid()
tkill(r7, 0x12)
tkill(r7, 0x1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x34, 0x7, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, r7, 0x0, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/attr/fscreate\x00', 0x2, 0x0)
ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0x401}, 0x11)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000d40000000b"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r10}, 0x18)

8.443506027s ago: executing program 4 (id=6056):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000ffffffffffffffe9000000000000000200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x0, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0x9}, 0x18)
socket$netlink(0x10, 0x3, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8, 0x800)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x894)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x138)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000000927010200000000020000000053849ba68ba1d2698bb27900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c00028008"], 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r7}, 0x10)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'geneve0\x00', <r10=>0x0})
sendto$packet(r8, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8", 0x12, 0x0, &(0x7f0000000000)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @link_local}, 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18)

8.33337054s ago: executing program 5 (id=6060):
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 64)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) (rerun: 64)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r3, &(0x7f00000003c0)='system_u:object_r:apt_exec_t:s0\x00', 0xfec2) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES8=r1], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) (async, rerun: 64)
syz_clone3(&(0x7f00000004c0)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, &(0x7f0000000100)=""/161, 0xa1, 0x0, 0x0}, 0x58) (async, rerun: 64)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000400000000000900020073797a31000000000500010007000004050005000a00000015000300686173683a69702c706f72742c6e657400000000"], 0x50}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

6.995391431s ago: executing program 5 (id=6068):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), 0x0}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

6.699691824s ago: executing program 5 (id=6071):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x38, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7a}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7dd}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11aa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x4040086)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@deltclass={0x24, 0x29, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xb, 0xfff3}, {0xffff, 0x9}}}, 0x24}}, 0x74000800)
socket$packet(0x11, 0x3, 0x300)
setfsuid(0xee00)
setresuid(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d6974000000240002800800044000000001"], 0x118}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000052cfab788ae0affb00050000000400000000f4005f5f5f00000000000000"], 0x0, 0x29, 0x0, 0x1}, 0x28)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
fsetxattr$security_evm(r2, &(0x7f0000000480), &(0x7f0000000540)=@v1={0x2, "74dc22f2"}, 0x5, 0x3)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='cgroup\x00')
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18)
lseek(r8, 0xffffff60, 0x1)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x1c, r7, 0x4, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000051}, 0xc0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r7, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x4)
syz_io_uring_setup(0x5c3, &(0x7f0000000140)={0x0, 0x1001, 0x1000, 0x4}, &(0x7f00000001c0), &(0x7f0000000580))

6.162379945s ago: executing program 5 (id=6074):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f00000025c0)={0xfc, {"a2e3ad1bed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f3b3568030890e0879b0af8c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb62913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab002f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='xprtrdma_dma_maperr\x00', r1, 0x0, 0x2}, 0x18)
statx(0xffffffffffffffff, 0x0, 0x6000, 0x200, 0x0)
r2 = io_uring_setup(0x2f9, &(0x7f0000000640)={0x0, 0x443c, 0x800, 0x4, 0x1a})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xfffffffffffffe5f)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000070006000100010000000157a7279995fcdd920ceef3b541f3328a09905023597718"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000540)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r4, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
sendmmsg$inet(r8, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r8, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0)
r9 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0xf7b0, 0x400, 0x8, 0x0, 0x0, r2}, &(0x7f0000010080), &(0x7f0000000000))
r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x141081)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00', 0x800005})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r10, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x80000, 0x80000}, 0x100})
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r11}, 0x18)
io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], &(0x7f0000000700)=[0x380, 0x7fffffff, 0x1, 0x5, 0x6, 0x800000000000f3a3, 0x0], 0x2}, 0x20)

5.535856945s ago: executing program 1 (id=6077):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
pidfd_getfd(r1, r1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x21, @empty, 0x4e24, 0x0, 'rr\x00', 0xa, 0x1ff, 0x61}, {@rand_addr=0x64010101, 0x4e21, 0x3, 0x9, 0xffffff81, 0x5}}, 0x44)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10)
fremovexattr(0xffffffffffffffff, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')

5.535027045s ago: executing program 5 (id=6078):
socket$netlink(0x10, 0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
iopl(0x3)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x2)
pipe2(&(0x7f0000000300), 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)

5.034353662s ago: executing program 1 (id=6079):
ioperm(0x0, 0x2, 0x7e)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYRES64, @ANYRESDEC], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r2], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x810)
pipe(0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fffffff}, 0x18)
r4 = perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x29, 0x1, 0x0, 0x3, 0x0, 0x9, 0x640b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7ffffe, 0x3fff8000}, 0x8000, 0x32, 0x4d9, 0x7, 0x9, 0x6, 0x6428, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
dup(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x82c2, 0x0)
fstatfs(r6, &(0x7f00000008c0)=""/188)
r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8)
dup3(r7, r1, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0)
acct(&(0x7f0000000140)='./file0\x00')
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

3.820461939s ago: executing program 1 (id=6082):
socket$netlink(0x10, 0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
iopl(0x3)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x2)
pipe2(&(0x7f0000000300)={<r2=>0xffffffffffffffff}, 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
tee(r2, r3, 0x4e, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32], 0x90}}, 0x0)

3.317166716s ago: executing program 6 (id=6085):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000040000000800"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x18, &(0x7f0000000080)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='btrfs_reserve_ticket\x00'}, 0x18)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4800)
capget(&(0x7f0000000240)={0x20080522}, 0x0)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000840000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400004d44e5c5850000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = dup(r2)
fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000380)='system_u:object_r:udev_helper_exec_t:s0\x00', 0x28, 0x3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r4}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c", 0xe, 0x4, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xeb, 0x7, 0x40, 0x6, 0x0, 0x38159f52, 0xd21f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x7edf}, 0x100882, 0x7ff, 0x9, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3.006532481s ago: executing program 6 (id=6086):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000020000200000000000000df250a0000cdff0000011300f4ff0800060000000000"], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
socket(0x11, 0x1, 0x7)
r4 = socket(0x2, 0x80805, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5, 0x0, 0x400000000}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'})
r7 = io_uring_setup(0x72e0, &(0x7f0000000600)={0x0, 0x4008270, 0x1000, 0x1, 0xbe})
io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000400)=[{0x0}], 0x1)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x5985, 0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000040000000b7040000020000008500000082000000"], &(0x7f0000000680)='syzkaller\x00', 0x8, 0x1000, &(0x7f00000006c0)=""/4096, 0x41000, 0x88, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000016c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001700)={0x2, 0x2, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000017c0)=[0xffffffffffffffff, r1, r1, r1, r1, r1, 0xffffffffffffffff], &(0x7f0000001800)=[{0x3, 0x5, 0x4, 0xc}, {0x5, 0x2, 0xc, 0x3}, {0x5, 0x5, 0xe, 0x7}, {0x4, 0x3, 0x8, 0x4}], 0x10, 0x5}, 0x94)
io_uring_register$IORING_REGISTER_FILES(r7, 0x1e, &(0x7f0000000000)=[r7], 0x1)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000701000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f1800128014200180090001006c617374000000000400028008000340000001"], 0xa4}}, 0x20050800)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffa0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r9)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060080"], 0x24}}, 0x10)

2.465570622s ago: executing program 6 (id=6088):
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x3}, 0x18)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x1205cb8, &(0x7f0000000b80)={[{@errors_remount}, {@discard}, {@journal_async_commit}, {@noauto_da_alloc}, {@errors_remount}, {@jqfmt_vfsv1}, {@dax_inode}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0)

2.387556031s ago: executing program 1 (id=6090):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\x92Ync_\x00me\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r1)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x6})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0x2, 0x1, 0x2, 0x3, 0x7fffffff})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="85100000faffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000085205f00050000008520000005000000b7080000000000007b8af8ff00000000b7080000c20100007b8af0ff00000000bfa100000000000007010000f8ffff5e18a400000000000007040004f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180000000f00000000000000feffffff18550000040000000000000000000000851000000000000018360000050000000000000000000000072dff0704000000"], &(0x7f0000000180)='syzkaller\x00', 0xfffff800, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x5, 0xe, 0xfffffffc, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000940)=[r3, r3, r3, r3, r3, r3], &(0x7f0000000980)=[{0x0, 0x5, 0x4, 0xb}, {0x4, 0x3, 0xf, 0xa}, {0x0, 0x5, 0x10, 0xb}, {0x0, 0x4, 0x1, 0x1}, {0x0, 0x1, 0x9, 0x1}], 0x10, 0x2}, 0x94)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
read(r4, &(0x7f0000000840)=""/40, 0x28)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a})
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x2)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r8, &(0x7f0000000440), 0x10)
listen(r8, 0x0)
accept4$unix(r8, 0x0, 0x0, 0x0)

2.246309427s ago: executing program 6 (id=6091):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0xfffffffffffffffd}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=0x1, 0x2e, 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], <r2=>0x0}, 0x40)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000400)='/dev/bus/usb/00#/00#\x00', <r3=>0x0}, 0x30)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@fallback=r1, r0, 0xe, 0x38, 0x0, @void, @void, @void, @value=r3, r2}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = msgget$private(0x0, 0x0)
r6 = getgid()
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
msgctl$IPC_SET(r5, 0x1, &(0x7f0000000180)={{0x0, 0x0, r6, 0x0, 0xee00, 0x140, 0x3ff}, 0x0, 0x0, 0xffffffff, 0xc, 0x5, 0xc0e, 0x7, 0x4, 0x1, 0x1, r9})
setxattr$system_posix_acl(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="0200006b6b00020000000000040001000000000008000100", @ANYRES32, @ANYBLOB="10000100000000002000020000000000"], 0x2c, 0x3)
r10 = semget$private(0x0, 0x2, 0xa1)
semop(r10, 0x0, 0x0)
r11 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r11, 0x10c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x28, 0x15, 0x4, 0xfffff004}, {0x6, 0x0, 0x7, 0xffffffff}]}, 0x10)
ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x81, 0x0, 0xffffffff, 0x101, 0x0})
ioctl$USBDEVFS_REAPURBNDELAY(r11, 0x4008550d, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

2.244110227s ago: executing program 5 (id=6092):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "7563928c1287aee0", "7a1dc8b556b44e6b447e7676310cf765", "b911e897", "7da2d95e1f2e9631"}, 0x28)
setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f00000000c0)=0x3, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x11)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100"], 0x3c}, 0x1, 0x0, 0x0, 0x20008050}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x4}, 0x18)
r5 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x5, {0x0, 0x0, 0x0, r6, {0xe, 0x1}, {0x0, 0x3}, {0x0, 0xffe0}}}, 0x24}}, 0x800)

2.223440159s ago: executing program 0 (id=6093):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYRES8=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={@remote, 0x3a})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x1c161, 0x2, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000010000104fafffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3], 0x68}, 0x1, 0x0, 0x0, 0x2000c050}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='qgroup_update_counters\x00', r1}, 0xc)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x28402, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
socket(0x2, 0x80805, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000004c0)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
sched_getparam(0x0, &(0x7f0000000480))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000080)={'wg2\x00', <r10=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, r8, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40040c0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10)

1.50667381s ago: executing program 1 (id=6094):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x10007ffffffff}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', <r3=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r3}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x47a, 0x9000000, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x1, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0)

1.460192145s ago: executing program 6 (id=6095):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000a80)={[0x9145]}, 0x8, 0x80000)
poll(&(0x7f0000000b40)=[{r1, 0x22}], 0x1, 0x1c)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window], 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
socket$inet(0x2, 0x3, 0x4)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10)
syz_io_uring_setup(0x7723, &(0x7f0000000340)={0x0, 0x2c1a, 0x2, 0x1, 0xa00001}, 0x0, 0x0)
bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14)
close(r6)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)

1.06119253s ago: executing program 1 (id=6096):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x65, 0x3, 0xd913, 0x81, 0x1}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}}}, 0x24}}, 0x0)
r4 = socket$kcm(0x29, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000b80)={[{@usrquota}, {@init_itable}], [{@seclabel}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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")
fchmodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x16f)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}], 0x1, 0x0)
close(r4)

489.735205ms ago: executing program 0 (id=6097):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)

186.129309ms ago: executing program 0 (id=6098):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYBLOB])

128.528126ms ago: executing program 6 (id=6099):
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0)
set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) (async)
set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') (async)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000900)='kfree\x00', r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, {}, {0x0, 0xfffffffc}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xc759}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x40}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {0x1}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x4, 0x80000001}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {0x2}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd, 0x0, 0x0, 0x2}, {}, {}, {}, {0x4}, {}, {}, {}, {0x7ff, 0x0, 0x0, 0x4, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x10000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x800000}, {}, {0x0, 0x80b}, {0x0, 0x0, 0x0, 0x8}, {}, {0x10001}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x200000, 0x0, 0x7, 0x0, 0x0, 0xb}], [{0x3}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x1}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, {}, {0x0, 0xfffffffc}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xc759}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x40}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {0x1}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x4, 0x80000001}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {0x2}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd, 0x0, 0x0, 0x2}, {}, {}, {}, {0x4}, {}, {}, {}, {0x7ff, 0x0, 0x0, 0x4, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x10000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x800000}, {}, {0x0, 0x80b}, {0x0, 0x0, 0x0, 0x8}, {}, {0x10001}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x200000, 0x0, 0x7, 0x0, 0x0, 0xb}], [{0x3}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x1}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x8000353a, 0x1}}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
utimes(0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @empty, 0xff, 0x100000100, 'team0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x29, 0x2, 0x40}, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@set2={{0x28}, {{0x2, 0x1, 0x3}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) (async)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000200)='kvm_msi_set_irq\x00', r7, 0x0, 0x1}, 0x18)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

20.282818ms ago: executing program 0 (id=6100):
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x3}, 0x18)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x1205cb8, &(0x7f0000000b80)={[{@errors_remount}, {@discard}, {@journal_async_commit}, {@noauto_da_alloc}, {@errors_remount}, {@jqfmt_vfsv1}, {@dax_inode}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0)

19.981338ms ago: executing program 0 (id=6101):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000b80)={[{@usrquota}, {@init_itable}], [{@seclabel}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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")
fchmodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x16f)

0s ago: executing program 0 (id=6102):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x2, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x2}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
io_setup(0x3fd, &(0x7f0000000500)=<r4=>0x0)
io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)}])
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r5=>0xffffffffffffffff}, 0x0, &(0x7f0000000380)=r1}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r1, <r6=>0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000004c0)='%pI4   \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3f, &(0x7f0000000d00)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYRESHEX=r4, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800007f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018100000", @ANYRES32=r6, @ANYBLOB="000000000000000085100000feffffffb7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7, 0x0, 0x8000000}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x98, 0x0, 0x0, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)
r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000017c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000200), 0x4, 0x51d, &(0x7f0000000600)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x20200, 0x0, 0xfe, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00')

kernel console output (not intermixed with test programs):

319.228752][T17435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  319.228760][T17435] R13: 00007f6fb79e6038 R14: 00007f6fb79e5fa0 R15: 00007fffb3808858
[  319.228815][T17435]  </TASK>
[  319.412142][T17438] loop4: detected capacity change from 0 to 164
[  319.414971][T17439] ip6tnl1: entered allmulticast mode
[  319.456840][T17443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5230'.
[  319.476015][T17443] loop4: detected capacity change from 0 to 512
[  319.488867][T17443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.501728][T17443] ext4 filesystem being mounted at /489/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  319.513368][T17443] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.5230: corrupted xattr block 6: invalid header
[  319.526889][T17443] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=12
[  319.535919][T17443] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.5230: corrupted xattr block 6: invalid header
[  319.549385][T17443] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=12
[  319.558543][T17443] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.5230: corrupted xattr block 6: invalid header
[  319.583220][T10437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.925635][   T29] kauditd_printk_skb: 1906 callbacks suppressed
[  319.925653][   T29] audit: type=1326 audit(1768160347.147:171857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17449 comm="syz.4.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6fb77c2005 code=0x7ffc0000
[  319.962452][   T29] audit: type=1326 audit(1768160347.147:171858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.0.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  319.986259][   T29] audit: type=1326 audit(1768160347.147:171859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.0.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  320.010428][   T29] audit: type=1326 audit(1768160347.147:171860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.0.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  320.018742][T17459] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5235'.
[  320.034424][   T29] audit: type=1326 audit(1768160347.147:171861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.0.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  320.067687][   T29] audit: type=1326 audit(1768160347.147:171862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.0.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  320.091460][   T29] audit: type=1326 audit(1768160347.147:171863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.0.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  320.115137][   T29] audit: type=1326 audit(1768160347.147:171864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.0.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  320.139125][   T29] audit: type=1326 audit(1768160347.147:171865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.0.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  320.162849][   T29] audit: type=1326 audit(1768160347.147:171866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.0.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  320.520905][T17482] loop4: detected capacity change from 0 to 512
[  320.545659][T17482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  320.558295][T17482] ext4 filesystem being mounted at /491/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  320.594183][T17482] EXT4-fs error (device loop4): ext4_get_first_dir_block:3527: inode #12: comm syz.4.5243: Attempting to read directory block (0) that is past i_size (3)
[  321.224116][T17515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5258'.
[  321.278366][T17515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5258'.
[  321.287658][T17515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5258'.
[  321.298041][T17515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5258'.
[  321.307681][T17515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5258'.
[  321.317106][T17515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5258'.
[  321.766992][T17536] loop6: detected capacity change from 0 to 512
[  322.063942][T10437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.196645][T17547] SELinux:  Context system_u:object_r:cert_t:s0 is not valid (left unmapped).
[  322.412317][T17562] loop6: detected capacity change from 0 to 512
[  322.447602][T17562] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  322.485563][T17562] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  322.577589][T17562] EXT4-fs error (device loop6): ext4_get_first_dir_block:3527: inode #12: comm syz.6.5277: Attempting to read directory block (0) that is past i_size (3)
[  322.652543][T17568] tipc: Started in network mode
[  322.657484][T17568] tipc: Node identity ac1414aa, cluster identity 4711
[  322.664400][T17568] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  322.714210][T17572] netlink: 'syz.4.5280': attribute type 27 has an invalid length.
[  322.737731][T17572] wg2: left promiscuous mode
[  322.742498][T17572] wg2: left allmulticast mode
[  322.753413][T17572] ip6tnl1: left allmulticast mode
[  322.766179][T17572] loop4: detected capacity change from 0 to 512
[  322.774189][T17572] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  322.789151][T12752] tipc: Left network mode
[  322.797549][T17572] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002]
[  322.805716][T17572] System zones: 1-12
[  322.810114][T17572] EXT4-fs (loop4): 1 truncate cleaned up
[  322.816256][T17572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  322.849181][T10437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.065867][T17579] netlink: 'syz.1.5283': attribute type 27 has an invalid length.
[  323.220030][T17089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.249540][T17596] __nla_validate_parse: 27 callbacks suppressed
[  323.249639][T17596] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5289'.
[  323.265256][T17596] netlink: 'syz.0.5289': attribute type 3 has an invalid length.
[  323.298481][T17605] loop6: detected capacity change from 0 to 1024
[  323.317898][T17605] EXT4-fs (loop6): bad geometry: block count 33554432 exceeds size of device (512 blocks)
[  323.351385][T17607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5293'.
[  323.361793][T17607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5293'.
[  323.371304][T17607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5293'.
[  323.381412][T17607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5293'.
[  323.392832][T17607] netlink: 'syz.0.5293': attribute type 12 has an invalid length.
[  323.485171][T17614] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  323.714159][T17630] tipc: Started in network mode
[  323.719228][T17630] tipc: Node identity ac1414aa, cluster identity 4711
[  323.726335][T17630] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  323.835410][T12730] tipc: Left network mode
[  323.873894][T17646] FAULT_INJECTION: forcing a failure.
[  323.873894][T17646] name failslab, interval 1, probability 0, space 0, times 0
[  323.887017][T17646] CPU: 1 UID: 0 PID: 17646 Comm: syz.4.5307 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  323.887050][T17646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  323.887064][T17646] Call Trace:
[  323.887072][T17646]  <TASK>
[  323.887080][T17646]  __dump_stack+0x1d/0x30
[  323.887154][T17646]  dump_stack_lvl+0x95/0xd0
[  323.887177][T17646]  dump_stack+0x15/0x1b
[  323.887200][T17646]  should_fail_ex+0x265/0x280
[  323.887237][T17646]  should_failslab+0x8c/0xb0
[  323.887315][T17646]  kmem_cache_alloc_lru_noprof+0x6d/0x4c0
[  323.887342][T17646]  ? __d_alloc+0x37/0x340
[  323.887368][T17646]  __d_alloc+0x37/0x340
[  323.887405][T17646]  ? mpol_shared_policy_init+0xbd/0x4c0
[  323.887469][T17646]  d_alloc_pseudo+0x1e/0x80
[  323.887515][T17646]  alloc_file_pseudo+0x71/0x160
[  323.887610][T17646]  __shmem_file_setup+0x1de/0x210
[  323.887634][T17646]  shmem_file_setup+0x3b/0x50
[  323.887655][T17646]  __se_sys_memfd_create+0x2f7/0x6b0
[  323.887684][T17646]  __x64_sys_memfd_create+0x31/0x40
[  323.887722][T17646]  x64_sys_call+0x28cb/0x3000
[  323.887748][T17646]  do_syscall_64+0xca/0x2b0
[  323.887790][T17646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.887814][T17646] RIP: 0033:0x7f6fb778f749
[  323.887833][T17646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  323.887851][T17646] RSP: 002b:00007f6fb61eee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  323.887874][T17646] RAX: ffffffffffffffda RBX: 000000000000061f RCX: 00007f6fb778f749
[  323.887969][T17646] RDX: 00007f6fb61eeef0 RSI: 0000000000000000 RDI: 00007f6fb7814960
[  323.887982][T17646] RBP: 0000200000000b00 R08: 00007f6fb61eebb7 R09: 00007f6fb61eee40
[  323.887994][T17646] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000100
[  323.888008][T17646] R13: 00007f6fb61eeef0 R14: 00007f6fb61eeeb0 R15: 0000200000000640
[  323.888030][T17646]  </TASK>
[  323.895640][T17642] loop6: detected capacity change from 0 to 512
[  323.950147][T17649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5309'.
[  324.103714][T17649] batman_adv: batadv0: Removing interface: batadv_slave_0
[  324.112077][T17642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  324.116409][T17649] batman_adv: batadv0: Removing interface: batadv_slave_1
[  324.133518][T17642] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  324.156747][T17642] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.5305: corrupted xattr block 6: invalid header
[  324.183122][T17642] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=12
[  324.192444][T17642] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.5305: corrupted xattr block 6: invalid header
[  324.207583][T17642] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=12
[  324.216738][T17642] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.5305: corrupted xattr block 6: invalid header
[  324.260265][T17089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.329557][T17684] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5322'.
[  324.342753][T17682] netlink: 'syz.1.5323': attribute type 27 has an invalid length.
[  324.343680][T17684] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5322'.
[  324.697422][   T29] kauditd_printk_skb: 3513 callbacks suppressed
[  324.697437][   T29] audit: type=1326 audit(1768160352.155:175380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17675 comm="syz.6.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f6f972005 code=0x7ffc0000
[  324.727670][   T29] audit: type=1326 audit(1768160352.165:175381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17675 comm="syz.6.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f6f9365e7 code=0x7ffc0000
[  324.751434][   T29] audit: type=1326 audit(1768160352.165:175382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17675 comm="syz.6.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f6f8db829 code=0x7ffc0000
[  324.775199][   T29] audit: type=1326 audit(1768160352.165:175383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17675 comm="syz.6.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f3f6f93f749 code=0x7ffc0000
[  324.799448][   T29] audit: type=1326 audit(1768160352.176:175384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17675 comm="syz.6.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f6f9365e7 code=0x7ffc0000
[  324.823229][   T29] audit: type=1326 audit(1768160352.176:175385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17675 comm="syz.6.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f6f8db829 code=0x7ffc0000
[  324.846828][   T29] audit: type=1326 audit(1768160352.176:175386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17675 comm="syz.6.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f3f6f93f749 code=0x7ffc0000
[  324.871505][   T29] audit: type=1326 audit(1768160352.186:175387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17675 comm="syz.6.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f6f972005 code=0x7ffc0000
[  324.896018][   T29] audit: type=1326 audit(1768160352.186:175388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17675 comm="syz.6.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f6f9365e7 code=0x7ffc0000
[  324.920092][   T29] audit: type=1326 audit(1768160352.186:175389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17675 comm="syz.6.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f6f8db829 code=0x7ffc0000
[  325.086767][T17731] loop4: detected capacity change from 0 to 2048
[  325.098754][T17731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.129326][T17731] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  325.185903][T17740] netlink: 'syz.6.5339': attribute type 1 has an invalid length.
[  325.194044][T17740] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5339'.
[  325.208811][T17740] loop6: detected capacity change from 0 to 1024
[  325.221295][T17740] ext2: Bad value for 'sb'
[  325.823105][T10437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.953439][T17782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  325.962859][T17782] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.990515][   T10] IPVS: starting estimator thread 0...
[  326.087574][T17786] IPVS: using max 2352 ests per chain, 117600 per kthread
[  326.491538][T17796] loop6: detected capacity change from 0 to 1024
[  326.499156][T17796] EXT4-fs (loop6): bad geometry: block count 33554432 exceeds size of device (512 blocks)
[  326.621788][T17811] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5370'.
[  326.691381][T17819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.700420][T17819] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.799869][T17825] loop4: detected capacity change from 0 to 512
[  327.282560][T17861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.291378][T17861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.553359][T17879] FAULT_INJECTION: forcing a failure.
[  327.553359][T17879] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  327.566810][T17879] CPU: 1 UID: 0 PID: 17879 Comm: syz.4.5398 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  327.566920][T17879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  327.566932][T17879] Call Trace:
[  327.566937][T17879]  <TASK>
[  327.566942][T17879]  __dump_stack+0x1d/0x30
[  327.566960][T17879]  dump_stack_lvl+0x95/0xd0
[  327.566974][T17879]  dump_stack+0x15/0x1b
[  327.566986][T17879]  should_fail_ex+0x265/0x280
[  327.567032][T17879]  should_fail+0xb/0x20
[  327.567044][T17879]  should_fail_usercopy+0x1a/0x20
[  327.567060][T17879]  _copy_from_iter+0xcf/0xe70
[  327.567076][T17879]  ? __alloc_skb+0x396/0x4b0
[  327.567151][T17879]  ? __alloc_skb+0x228/0x4b0
[  327.567168][T17879]  netlink_sendmsg+0x471/0x6b0
[  327.567272][T17879]  ? __pfx_netlink_sendmsg+0x10/0x10
[  327.567292][T17879]  __sock_sendmsg+0x145/0x180
[  327.567360][T17879]  ____sys_sendmsg+0x31e/0x4a0
[  327.567385][T17879]  ___sys_sendmsg+0x17b/0x1d0
[  327.567413][T17879]  __x64_sys_sendmsg+0xd4/0x160
[  327.567433][T17879]  x64_sys_call+0x17ba/0x3000
[  327.567449][T17879]  do_syscall_64+0xca/0x2b0
[  327.567537][T17879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.567551][T17879] RIP: 0033:0x7f6fb778f749
[  327.567563][T17879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  327.567575][T17879] RSP: 002b:00007f6fb61ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  327.567638][T17879] RAX: ffffffffffffffda RBX: 00007f6fb79e5fa0 RCX: 00007f6fb778f749
[  327.567693][T17879] RDX: 000000000000c050 RSI: 0000200000000cc0 RDI: 0000000000000006
[  327.567702][T17879] RBP: 00007f6fb61ef090 R08: 0000000000000000 R09: 0000000000000000
[  327.567710][T17879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  327.567719][T17879] R13: 00007f6fb79e6038 R14: 00007f6fb79e5fa0 R15: 00007fffb3808858
[  327.567744][T17879]  </TASK>
[  327.847662][T17886] loop4: detected capacity change from 0 to 1024
[  327.858002][T17892] netlink: 'syz.1.5404': attribute type 27 has an invalid length.
[  327.888477][T17886] EXT4-fs (loop4): bad geometry: block count 33554432 exceeds size of device (512 blocks)
[  328.320265][T17922] __nla_validate_parse: 1 callbacks suppressed
[  328.320284][T17922] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5415'.
[  328.513194][T17914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  328.531955][T17914] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  328.539628][T17928] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  328.551704][T17934] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20004
[  328.689650][T17942] sctp: [Deprecated]: syz.4.5422 (pid 17942) Use of int in maxseg socket option.
[  328.689650][T17942] Use struct sctp_assoc_value instead
[  328.718326][T17939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17939 comm=syz.5.5423
[  328.815550][T17953] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5423'.
[  329.027565][T17969] tipc: Started in network mode
[  329.032888][T17969] tipc: Node identity ac1414aa, cluster identity 4711
[  329.039761][T17969] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  329.156647][T12725] tipc: Left network mode
[  329.226417][T17979] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  329.252278][T17979] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5436'.
[  329.261353][T17979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5436'.
[  329.612646][   T29] kauditd_printk_skb: 2987 callbacks suppressed
[  329.612662][   T29] audit: type=1326 audit(1768160357.309:178377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17983 comm="syz.1.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f228f749 code=0x7ffc0000
[  329.661200][   T29] audit: type=1326 audit(1768160357.341:178378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17983 comm="syz.1.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f228f749 code=0x7ffc0000
[  329.685176][   T29] audit: type=1326 audit(1768160357.341:178379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17983 comm="syz.1.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f228f749 code=0x7ffc0000
[  329.708963][   T29] audit: type=1326 audit(1768160357.341:178380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17983 comm="syz.1.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f228f749 code=0x7ffc0000
[  329.732706][   T29] audit: type=1326 audit(1768160357.341:178381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17983 comm="syz.1.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f30f228f749 code=0x7ffc0000
[  329.756665][   T29] audit: type=1326 audit(1768160357.341:178382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17983 comm="syz.1.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f228f749 code=0x7ffc0000
[  329.780564][   T29] audit: type=1326 audit(1768160357.341:178383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17983 comm="syz.1.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f228f749 code=0x7ffc0000
[  329.804266][   T29] audit: type=1326 audit(1768160357.341:178384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17983 comm="syz.1.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f228f749 code=0x7ffc0000
[  329.828048][   T29] audit: type=1326 audit(1768160357.341:178385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17983 comm="syz.1.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f228f749 code=0x7ffc0000
[  329.851920][   T29] audit: type=1326 audit(1768160357.341:178386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17983 comm="syz.1.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30f228f749 code=0x7ffc0000
[  330.264453][T18007] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5446'.
[  330.385086][T18015] macsec0: entered promiscuous mode
[  330.396432][T18015] dummy0: entered promiscuous mode
[  330.401773][T18015] macsec0: entered allmulticast mode
[  330.425662][T18015] dummy0: entered allmulticast mode
[  330.439899][T18015] dummy0: left allmulticast mode
[  330.449128][T18015] dummy0: left promiscuous mode
[  331.033983][T18032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5456'.
[  331.123758][T18049] loop6: detected capacity change from 0 to 128
[  331.133702][T18049] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.5463'.
[  331.144771][T18049] netlink: zone id is out of range
[  331.150046][T18049] netlink: zone id is out of range
[  331.157496][T18049] netlink: zone id is out of range
[  331.163809][T18049] netlink: zone id is out of range
[  331.169033][T18049] netlink: zone id is out of range
[  331.174177][T18049] netlink: zone id is out of range
[  331.179367][T18049] netlink: zone id is out of range
[  331.184533][T18049] netlink: zone id is out of range
[  331.208547][T18049] netlink: zone id is out of range
[  331.213810][T18049] netlink: zone id is out of range
[  331.214087][T18050] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5463'.
[  331.338290][T18054] netlink: 'syz.1.5465': attribute type 27 has an invalid length.
[  331.419370][T18057] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  331.601589][T18076] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5474'.
[  331.630554][T18076] loop6: detected capacity change from 0 to 512
[  331.664445][T18076] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  331.708334][T18076] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  331.745877][T18076] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.5474: corrupted xattr block 6: invalid header
[  331.814368][T18076] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=12
[  331.837133][T18076] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.5474: corrupted xattr block 6: invalid header
[  331.881291][T18076] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=12
[  331.917959][T18076] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.5474: corrupted xattr block 6: invalid header
[  331.961208][T17089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.274890][T18124] loop6: detected capacity change from 0 to 2048
[  332.333036][T18124] Alternate GPT is invalid, using primary GPT.
[  332.339564][T18124]  loop6: p2 p3 p7
[  332.449579][T18132] macvtap1: entered promiscuous mode
[  332.454985][T18132] bridge0: entered promiscuous mode
[  332.460467][T18132] macvtap1: entered allmulticast mode
[  332.465919][T18132] bridge0: entered allmulticast mode
[  332.471859][T18132] bridge0: port 6(macvtap1) entered blocking state
[  332.478790][T18132] bridge0: port 6(macvtap1) entered disabled state
[  332.506323][T18132] bridge0: left allmulticast mode
[  332.511518][T18132] bridge0: left promiscuous mode
[  332.558356][T18141] netlink: 'syz.6.5497': attribute type 27 has an invalid length.
[  332.594721][T18141] loop6: detected capacity change from 0 to 512
[  332.608071][T18141] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  332.623023][T18141] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002]
[  332.633720][T18141] System zones: 1-12
[  332.638266][T18141] EXT4-fs (loop6): 1 truncate cleaned up
[  332.645641][T18141] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.657299][T18149] FAULT_INJECTION: forcing a failure.
[  332.657299][T18149] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  332.671493][T18149] CPU: 1 UID: 0 PID: 18149 Comm: syz.4.5500 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  332.671514][T18149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  332.671522][T18149] Call Trace:
[  332.671580][T18149]  <TASK>
[  332.671585][T18149]  __dump_stack+0x1d/0x30
[  332.671602][T18149]  dump_stack_lvl+0x95/0xd0
[  332.671617][T18149]  dump_stack+0x15/0x1b
[  332.671666][T18149]  should_fail_ex+0x265/0x280
[  332.671681][T18149]  should_fail+0xb/0x20
[  332.671760][T18149]  should_fail_usercopy+0x1a/0x20
[  332.671855][T18149]  copy_to_user_nofault+0x7f/0x120
[  332.671873][T18149]  bpf_probe_write_user+0x83/0xc0
[  332.671889][T18149]  bpf_prog_8f5dadf009f59a0a+0x44/0x4c
[  332.671980][T18149]  bpf_trace_run4+0x117/0x1e0
[  332.672002][T18149]  __traceiter_sched_switch+0x3f/0x60
[  332.672016][T18149]  __schedule+0xb0f/0xcd0
[  332.672035][T18149]  __cond_resched+0x31/0x60
[  332.672061][T18149]  wait_for_common+0x28/0x1e0
[  332.672078][T18149]  usbfs_start_wait_urb+0xdf/0x1c0
[  332.672125][T18149]  do_proc_control+0x628/0x8b0
[  332.672146][T18149]  proc_control+0x71/0xa0
[  332.672219][T18149]  usbdev_ioctl+0x93c/0x1700
[  332.672235][T18149]  ? __pfx_usbdev_ioctl+0x10/0x10
[  332.672321][T18149]  __se_sys_ioctl+0xce/0x140
[  332.672378][T18149]  __x64_sys_ioctl+0x43/0x50
[  332.672463][T18149]  x64_sys_call+0x14b0/0x3000
[  332.672511][T18149]  do_syscall_64+0xca/0x2b0
[  332.672562][T18149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.672576][T18149] RIP: 0033:0x7f6fb778f749
[  332.672587][T18149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  332.672599][T18149] RSP: 002b:00007f6fb61ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  332.672674][T18149] RAX: ffffffffffffffda RBX: 00007f6fb79e5fa0 RCX: 00007f6fb778f749
[  332.672683][T18149] RDX: 0000200000000280 RSI: 00000000c0185500 RDI: 0000000000000004
[  332.672691][T18149] RBP: 00007f6fb61ef090 R08: 0000000000000000 R09: 0000000000000000
[  332.672700][T18149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  332.672708][T18149] R13: 00007f6fb79e6038 R14: 00007f6fb79e5fa0 R15: 00007fffb3808858
[  332.672720][T18149]  </TASK>
[  332.909303][T17089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.919099][T18159] program syz.4.5505 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  333.070026][T18174] loop6: detected capacity change from 0 to 2048
[  333.111948][T18174] Alternate GPT is invalid, using primary GPT.
[  333.118377][T18174]  loop6: p2 p3 p7
[  333.267809][T18187] netlink: 'syz.5.5515': attribute type 27 has an invalid length.
[  333.294744][T18189] loop6: detected capacity change from 0 to 512
[  333.372034][T18194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.381588][T18194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.487411][T18203] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5521'.
[  333.511715][T18205] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5522'.
[  333.655227][T18213] FAULT_INJECTION: forcing a failure.
[  333.655227][T18213] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  333.668475][T18213] CPU: 0 UID: 0 PID: 18213 Comm: syz.6.5524 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  333.668505][T18213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  333.668517][T18213] Call Trace:
[  333.668524][T18213]  <TASK>
[  333.668533][T18213]  __dump_stack+0x1d/0x30
[  333.668603][T18213]  dump_stack_lvl+0x95/0xd0
[  333.668625][T18213]  dump_stack+0x15/0x1b
[  333.668645][T18213]  should_fail_ex+0x265/0x280
[  333.668669][T18213]  should_fail+0xb/0x20
[  333.668747][T18213]  should_fail_usercopy+0x1a/0x20
[  333.668768][T18213]  _copy_from_user+0x1c/0xb0
[  333.668794][T18213]  ___sys_sendmsg+0xc1/0x1d0
[  333.668968][T18213]  __x64_sys_sendmsg+0xd4/0x160
[  333.669051][T18213]  x64_sys_call+0x17ba/0x3000
[  333.669116][T18213]  do_syscall_64+0xca/0x2b0
[  333.669164][T18213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.669185][T18213] RIP: 0033:0x7f3f6f93f749
[  333.669272][T18213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  333.669291][T18213] RSP: 002b:00007f3f6e386038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  333.669388][T18213] RAX: ffffffffffffffda RBX: 00007f3f6fb96090 RCX: 00007f3f6f93f749
[  333.669409][T18213] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003
[  333.669423][T18213] RBP: 00007f3f6e386090 R08: 0000000000000000 R09: 0000000000000000
[  333.669435][T18213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  333.669448][T18213] R13: 00007f3f6fb96128 R14: 00007f3f6fb96090 R15: 00007ffea3bf2cc8
[  333.669468][T18213]  </TASK>
[  334.097549][T18223] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5529'.
[  334.107299][T18223] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  334.174027][T18228] tipc: Started in network mode
[  334.179088][T18228] tipc: Node identity ac1414aa, cluster identity 4711
[  334.185913][T18228] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  334.262035][T12730] tipc: Left network mode
[  334.343328][T18244] netlink: 'syz.0.5538': attribute type 27 has an invalid length.
[  334.376985][T18250] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20004
[  334.397818][   T29] kauditd_printk_skb: 3155 callbacks suppressed
[  334.397837][   T29] audit: type=1326 audit(1768160362.338:181542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18251 comm="syz.5.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe748e3f749 code=0x7ffc0000
[  334.438521][   T29] audit: type=1326 audit(1768160362.338:181543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18251 comm="syz.5.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe748e3f749 code=0x7ffc0000
[  334.462563][   T29] audit: type=1326 audit(1768160362.338:181544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18251 comm="syz.5.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe748e3f749 code=0x7ffc0000
[  334.486415][   T29] audit: type=1326 audit(1768160362.338:181545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18251 comm="syz.5.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fe748e3f749 code=0x7ffc0000
[  334.510229][   T29] audit: type=1326 audit(1768160362.338:181546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18251 comm="syz.5.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe748e3f749 code=0x7ffc0000
[  334.534161][   T29] audit: type=1326 audit(1768160362.338:181547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18251 comm="syz.5.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe748e3f749 code=0x7ffc0000
[  334.558022][   T29] audit: type=1326 audit(1768160362.338:181548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18251 comm="syz.5.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe748e3f749 code=0x7ffc0000
[  334.582561][   T29] audit: type=1326 audit(1768160362.338:181549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18251 comm="syz.5.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe748e3f749 code=0x7ffc0000
[  334.606449][   T29] audit: type=1326 audit(1768160362.338:181550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18251 comm="syz.5.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe748e3f749 code=0x7ffc0000
[  334.630422][   T29] audit: type=1326 audit(1768160362.338:181551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18251 comm="syz.5.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe748e3f749 code=0x7ffc0000
[  335.297853][T18307] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5561'.
[  335.328150][T18310] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5562'.
[  335.364356][T18311] loop6: detected capacity change from 0 to 2048
[  335.406651][T18311] Alternate GPT is invalid, using primary GPT.
[  335.413223][T18311]  loop6: p2 p3 p7
[  335.445726][T18321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5567'.
[  335.654541][T18341] bridge0: Device is already in use.
[  336.099862][T18384] FAULT_INJECTION: forcing a failure.
[  336.099862][T18384] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  336.113260][T18384] CPU: 0 UID: 0 PID: 18384 Comm: syz.6.5593 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  336.113291][T18384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  336.113349][T18384] Call Trace:
[  336.113383][T18384]  <TASK>
[  336.113393][T18384]  __dump_stack+0x1d/0x30
[  336.113431][T18384]  dump_stack_lvl+0x95/0xd0
[  336.113463][T18384]  dump_stack+0x15/0x1b
[  336.113484][T18384]  should_fail_ex+0x265/0x280
[  336.113508][T18384]  should_fail+0xb/0x20
[  336.113529][T18384]  should_fail_usercopy+0x1a/0x20
[  336.113609][T18384]  _copy_from_user+0x1c/0xb0
[  336.113637][T18384]  ___sys_sendmsg+0xc1/0x1d0
[  336.113683][T18384]  __x64_sys_sendmsg+0xd4/0x160
[  336.113716][T18384]  x64_sys_call+0x17ba/0x3000
[  336.113741][T18384]  do_syscall_64+0xca/0x2b0
[  336.113775][T18384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.113817][T18384] RIP: 0033:0x7f3f6f93f749
[  336.113836][T18384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  336.113928][T18384] RSP: 002b:00007f3f6e3a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  336.113951][T18384] RAX: ffffffffffffffda RBX: 00007f3f6fb95fa0 RCX: 00007f3f6f93f749
[  336.114010][T18384] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007
[  336.114024][T18384] RBP: 00007f3f6e3a7090 R08: 0000000000000000 R09: 0000000000000000
[  336.114038][T18384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  336.114052][T18384] R13: 00007f3f6fb96038 R14: 00007f3f6fb95fa0 R15: 00007ffea3bf2cc8
[  336.114073][T18384]  </TASK>
[  336.305176][T18387] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5594'.
[  336.405931][T18395] loop6: detected capacity change from 0 to 512
[  336.426913][T18391] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5595'.
[  336.447950][T18398] pimreg: entered allmulticast mode
[  336.455076][T18398] pimreg: left allmulticast mode
[  336.520283][T18398] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.5598'.
[  336.566544][T18405] loop6: detected capacity change from 0 to 512
[  336.902326][T18424] program syz.4.5607 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  337.112621][T18440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  337.121128][T18440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  337.195836][T18447] tipc: Started in network mode
[  337.200863][T18447] tipc: Node identity ac1414aa, cluster identity 4711
[  337.207676][T18447] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  337.290841][T12732] tipc: Left network mode
[  338.029155][T18462] FAULT_INJECTION: forcing a failure.
[  338.029155][T18462] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  338.042389][T18462] CPU: 1 UID: 0 PID: 18462 Comm: syz.6.5620 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  338.042420][T18462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  338.042434][T18462] Call Trace:
[  338.042482][T18462]  <TASK>
[  338.042491][T18462]  __dump_stack+0x1d/0x30
[  338.042517][T18462]  dump_stack_lvl+0x95/0xd0
[  338.042540][T18462]  dump_stack+0x15/0x1b
[  338.042561][T18462]  should_fail_ex+0x265/0x280
[  338.042586][T18462]  should_fail+0xb/0x20
[  338.042637][T18462]  should_fail_usercopy+0x1a/0x20
[  338.042663][T18462]  _copy_from_iter+0xcf/0xe70
[  338.042689][T18462]  ? __alloc_skb+0x396/0x4b0
[  338.042714][T18462]  ? __alloc_skb+0x228/0x4b0
[  338.042741][T18462]  netlink_sendmsg+0x471/0x6b0
[  338.042798][T18462]  ? __pfx_netlink_sendmsg+0x10/0x10
[  338.042860][T18462]  __sock_sendmsg+0x145/0x180
[  338.042986][T18462]  ____sys_sendmsg+0x31e/0x4a0
[  338.043019][T18462]  ___sys_sendmsg+0x17b/0x1d0
[  338.043093][T18462]  __x64_sys_sendmsg+0xd4/0x160
[  338.043127][T18462]  x64_sys_call+0x17ba/0x3000
[  338.043153][T18462]  do_syscall_64+0xca/0x2b0
[  338.043190][T18462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.043233][T18462] RIP: 0033:0x7f3f6f93f749
[  338.043250][T18462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  338.043269][T18462] RSP: 002b:00007f3f6e3a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  338.043291][T18462] RAX: ffffffffffffffda RBX: 00007f3f6fb95fa0 RCX: 00007f3f6f93f749
[  338.043362][T18462] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  338.043382][T18462] RBP: 00007f3f6e3a7090 R08: 0000000000000000 R09: 0000000000000000
[  338.043464][T18462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  338.043477][T18462] R13: 00007f3f6fb96038 R14: 00007f3f6fb95fa0 R15: 00007ffea3bf2cc8
[  338.043498][T18462]  </TASK>
[  338.401754][T18480] netlink: 'syz.1.5626': attribute type 1 has an invalid length.
[  338.403614][T18482] loop6: detected capacity change from 0 to 128
[  338.420777][T18482] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  338.491568][T18490] loop6: detected capacity change from 0 to 512
[  338.595919][T18503] loop6: detected capacity change from 0 to 512
[  338.725003][T18509] tipc: Started in network mode
[  338.729984][T18509] tipc: Node identity ac1414aa, cluster identity 4711
[  338.737877][T18509] tipc: Enabled bearer <udp:syz2>, priority 10
[  339.046119][T18530] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5644'.
[  339.072070][T18530] IPVS: Error connecting to the multicast addr
[  339.176690][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5646'.
[  339.408610][   T29] kauditd_printk_skb: 426 callbacks suppressed
[  339.408702][   T29] audit: type=1326 audit(1768160367.597:181978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.0.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  339.455556][   T29] audit: type=1326 audit(1768160367.618:181979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.0.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  339.479508][   T29] audit: type=1326 audit(1768160367.618:181980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.0.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  339.503916][   T29] audit: type=1326 audit(1768160367.618:181981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.0.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  339.528074][   T29] audit: type=1326 audit(1768160367.618:181982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.0.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  339.551956][   T29] audit: type=1326 audit(1768160367.618:181983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.0.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  339.575751][   T29] audit: type=1326 audit(1768160367.618:181984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.0.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  339.599601][   T29] audit: type=1326 audit(1768160367.618:181985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.0.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  339.623794][   T29] audit: type=1326 audit(1768160367.618:181986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.0.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  339.647528][   T29] audit: type=1326 audit(1768160367.618:181987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.0.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  339.678659][T18562] tipc: Started in network mode
[  339.683632][T18562] tipc: Node identity ac1414aa, cluster identity 4711
[  339.690698][T18562] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  339.714111][T18564] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5655'.
[  339.778253][T12725] tipc: Left network mode
[  339.804309][ T2973] tipc: Node number set to 2886997162
[  339.862562][T18575] net_ratelimit: 21 callbacks suppressed
[  339.862577][T18575] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  340.664752][T18599] tipc: Started in network mode
[  340.669766][T18599] tipc: Node identity ac1414aa, cluster identity 4711
[  340.676661][T18599] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  340.708184][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5671'.
[  340.755007][T18612] openvswitch: netlink: Missing key (keys=40, expected=100)
[  340.763986][T12725] tipc: Left network mode
[  340.879945][T18633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5682'.
[  341.241208][T18663] qrtr: Invalid version 0
[  341.255143][T18665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5694'.
[  341.336072][T18676] loop6: detected capacity change from 0 to 512
[  341.526130][T18689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5703'.
[  341.535956][T18689] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5703'.
[  341.598477][T18696] qrtr: Invalid version 0
[  341.851203][T18711] netlink: 'syz.1.5712': attribute type 27 has an invalid length.
[  342.213662][T18739] loop6: detected capacity change from 0 to 512
[  342.324708][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5725'.
[  342.436478][T18753] loop6: detected capacity change from 0 to 1024
[  342.447389][T18753] EXT4-fs (loop6): bad geometry: block count 33554432 exceeds size of device (512 blocks)
[  342.682069][T18773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5735'.
[  342.777545][T18785] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  342.810098][T18785] bond0: (slave bridge0): Releasing backup interface
[  342.818512][T18785] bond1: (slave bond0): Releasing active interface
[  342.826620][T18785] bridge_slave_0: left allmulticast mode
[  342.832407][T18785] bridge_slave_0: left promiscuous mode
[  342.838206][T18785] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.846333][T18785] bridge_slave_1: left allmulticast mode
[  342.852065][T18785] bridge_slave_1: left promiscuous mode
[  342.857830][T18785] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.865693][T18790] netlink: 'syz.1.5740': attribute type 10 has an invalid length.
[  342.874539][T18785] bond0: (slave bond_slave_0): Releasing backup interface
[  342.882881][T18785] bond0: (slave bond_slave_1): Releasing backup interface
[  342.891657][T18785] team0: Port device team_slave_0 removed
[  342.898205][T18785] team0: Port device team_slave_1 removed
[  342.904337][T18785] batman_adv: batadv0: Removing interface: batadv_slave_0
[  342.912031][T18785] batman_adv: batadv0: Removing interface: batadv_slave_1
[  342.920785][T18789] team0: Port device team_slave_1 removed
[  342.974397][T18795] netlink: 'syz.6.5744': attribute type 27 has an invalid length.
[  342.993865][T18795] loop6: detected capacity change from 0 to 512
[  343.001323][T18795] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  343.026186][T18795] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002]
[  343.043487][T18795] System zones: 1-12
[  343.053584][T18795] EXT4-fs (loop6): 1 truncate cleaned up
[  343.072201][T18803] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20004
[  343.072531][T18795] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.122552][T17089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.150316][T18811] macsec1: entered promiscuous mode
[  343.155593][T18811] bridge0: entered promiscuous mode
[  343.162696][T18811] bridge0: port 3(macsec1) entered blocking state
[  343.169393][T18811] bridge0: port 3(macsec1) entered disabled state
[  343.178901][T18811] macsec1: entered allmulticast mode
[  343.184409][T18811] bridge0: entered allmulticast mode
[  343.190738][T18811] macsec1: left allmulticast mode
[  343.195949][T18811] bridge0: left allmulticast mode
[  343.209131][T18811] bridge0: left promiscuous mode
[  343.301888][T18824] loop6: detected capacity change from 0 to 512
[  343.311781][T18824] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.324715][T18824] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  343.338425][T18824] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.5755: corrupted xattr block 6: invalid header
[  343.357748][T18824] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=12
[  343.366818][T18824] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.5755: corrupted xattr block 6: invalid header
[  343.384979][T18824] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=12
[  343.394672][T18824] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.5755: corrupted xattr block 6: invalid header
[  343.422505][T17089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.492321][T18835] FAULT_INJECTION: forcing a failure.
[  343.492321][T18835] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  343.505487][T18835] CPU: 1 UID: 0 PID: 18835 Comm: syz.6.5758 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  343.505516][T18835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  343.505529][T18835] Call Trace:
[  343.505537][T18835]  <TASK>
[  343.505545][T18835]  __dump_stack+0x1d/0x30
[  343.505636][T18835]  dump_stack_lvl+0x95/0xd0
[  343.505660][T18835]  dump_stack+0x15/0x1b
[  343.505681][T18835]  should_fail_ex+0x265/0x280
[  343.505707][T18835]  should_fail+0xb/0x20
[  343.505785][T18835]  should_fail_usercopy+0x1a/0x20
[  343.505813][T18835]  _copy_from_user+0x1c/0xb0
[  343.505868][T18835]  ___sys_sendmsg+0xc1/0x1d0
[  343.505913][T18835]  __x64_sys_sendmsg+0xd4/0x160
[  343.505949][T18835]  x64_sys_call+0x17ba/0x3000
[  343.506047][T18835]  do_syscall_64+0xca/0x2b0
[  343.506084][T18835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.506105][T18835] RIP: 0033:0x7f3f6f93f749
[  343.506192][T18835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  343.506212][T18835] RSP: 002b:00007f3f6e3a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  343.506235][T18835] RAX: ffffffffffffffda RBX: 00007f3f6fb95fa0 RCX: 00007f3f6f93f749
[  343.506251][T18835] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  343.506284][T18835] RBP: 00007f3f6e3a7090 R08: 0000000000000000 R09: 0000000000000000
[  343.506298][T18835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  343.506312][T18835] R13: 00007f3f6fb96038 R14: 00007f3f6fb95fa0 R15: 00007ffea3bf2cc8
[  343.506333][T18835]  </TASK>
[  343.729460][T18840] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  343.886216][T18849] vlan1: entered allmulticast mode
[  343.886953][T18853] __nla_validate_parse: 5 callbacks suppressed
[  343.886969][T18853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5765'.
[  343.909134][T18854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  343.927988][T18854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.269837][T18877] tipc: Started in network mode
[  344.274922][T18877] tipc: Node identity ac1414aa, cluster identity 4711
[  344.281908][T18877] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  344.360543][T12732] tipc: Left network mode
[  344.451752][T18887] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.5778'.
[  344.606663][   T29] kauditd_printk_skb: 4014 callbacks suppressed
[  344.606684][   T29] audit: type=1326 audit(1768160373.056:186002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18895 comm="syz.0.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  344.640307][   T29] audit: type=1326 audit(1768160373.056:186003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18895 comm="syz.0.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  344.670486][   T29] audit: type=1326 audit(1768160373.088:186004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18895 comm="syz.0.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  344.694477][   T29] audit: type=1326 audit(1768160373.088:186005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18895 comm="syz.0.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  344.718361][   T29] audit: type=1326 audit(1768160373.088:186006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18895 comm="syz.0.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  344.742350][   T29] audit: type=1326 audit(1768160373.088:186007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18895 comm="syz.0.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  344.766373][   T29] audit: type=1326 audit(1768160373.088:186008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18895 comm="syz.0.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  344.790234][   T29] audit: type=1326 audit(1768160373.088:186009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18895 comm="syz.0.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  344.814203][   T29] audit: type=1326 audit(1768160373.088:186010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18895 comm="syz.0.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  344.838002][   T29] audit: type=1326 audit(1768160373.088:186011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18895 comm="syz.0.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513ce9f749 code=0x7ffc0000
[  345.468660][T18923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5789'.
[  345.477953][T18923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5789'.
[  345.489915][T18923] dummy0: entered promiscuous mode
[  345.498663][T18923] dummy0: left promiscuous mode
[  345.547064][T18925] FAULT_INJECTION: forcing a failure.
[  345.547064][T18925] name failslab, interval 1, probability 0, space 0, times 0
[  345.559900][T18925] CPU: 0 UID: 0 PID: 18925 Comm: syz.6.5793 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  345.559931][T18925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  345.559941][T18925] Call Trace:
[  345.560029][T18925]  <TASK>
[  345.560037][T18925]  __dump_stack+0x1d/0x30
[  345.560061][T18925]  dump_stack_lvl+0x95/0xd0
[  345.560080][T18925]  dump_stack+0x15/0x1b
[  345.560097][T18925]  should_fail_ex+0x265/0x280
[  345.560124][T18925]  should_failslab+0x8c/0xb0
[  345.560165][T18925]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[  345.560185][T18925]  ? __alloc_skb+0x2ff/0x4b0
[  345.560242][T18925]  __alloc_skb+0x2ff/0x4b0
[  345.560296][T18925]  tipc_msg_build+0xbe/0x840
[  345.560315][T18925]  ? handle_mm_fault+0x22dc/0x2c60
[  345.560346][T18925]  __tipc_sendstream+0x663/0xb20
[  345.560479][T18925]  ? __pfx_woken_wake_function+0x10/0x10
[  345.560566][T18925]  tipc_sendstream+0x3e/0x60
[  345.560707][T18925]  ? __pfx_tipc_sendstream+0x10/0x10
[  345.560799][T18925]  __sock_sendmsg+0x145/0x180
[  345.560816][T18925]  ____sys_sendmsg+0x345/0x4a0
[  345.560925][T18925]  ___sys_sendmsg+0x17b/0x1d0
[  345.561023][T18925]  __sys_sendmmsg+0x178/0x300
[  345.561058][T18925]  __x64_sys_sendmmsg+0x57/0x70
[  345.561082][T18925]  x64_sys_call+0x1e28/0x3000
[  345.561104][T18925]  do_syscall_64+0xca/0x2b0
[  345.561211][T18925]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.561230][T18925] RIP: 0033:0x7f3f6f93f749
[  345.561245][T18925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  345.561376][T18925] RSP: 002b:00007f3f6e3a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  345.561395][T18925] RAX: ffffffffffffffda RBX: 00007f3f6fb95fa0 RCX: 00007f3f6f93f749
[  345.561412][T18925] RDX: 04000000000001c0 RSI: 00002000000044c0 RDI: 0000000000000006
[  345.561424][T18925] RBP: 00007f3f6e3a7090 R08: 0000000000000000 R09: 0000000000000000
[  345.561435][T18925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  345.561446][T18925] R13: 00007f3f6fb96038 R14: 00007f3f6fb95fa0 R15: 00007ffea3bf2cc8
[  345.561464][T18925]  </TASK>
[  345.896280][T18937] loop6: detected capacity change from 0 to 512
[  345.921535][T18939] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5800'.
[  345.950209][T18944] netlink: 'syz.6.5803': attribute type 27 has an invalid length.
[  345.994148][T18944] loop6: detected capacity change from 0 to 512
[  346.002960][T18944] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  346.021712][T18944] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002]
[  346.035681][T18944] System zones: 1-12
[  346.040447][T18944] EXT4-fs (loop6): 1 truncate cleaned up
[  346.046718][T18944] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  346.080463][T17089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.122310][T18961] loop6: detected capacity change from 0 to 164
[  346.130246][T18961] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  346.144437][T18961] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  346.156741][T18963] netlink: 'syz.1.5809': attribute type 2 has an invalid length.
[  346.165262][T18961] Symlink component flag not implemented
[  346.170985][T18961] Symlink component flag not implemented
[  346.187070][T18961] Symlink component flag not implemented (7)
[  346.193094][T18961] Symlink component flag not implemented (116)
[  346.194763][T18969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5812'.
[  346.210621][T18963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5809'.
[  346.257671][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5815'.
[  346.295590][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5815'.
[  346.312689][T18982] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  346.475660][T19012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5829'.
[  347.318769][T19049] chnl_net:caif_netlink_parms(): no params data found
[  347.391781][T19049] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.398975][T19049] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.406316][T19049] bridge_slave_0: entered allmulticast mode
[  347.412982][T19049] bridge_slave_0: entered promiscuous mode
[  347.425695][T19049] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.432909][T19049] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.443212][T19049] bridge_slave_1: entered allmulticast mode
[  347.450221][T19049] bridge_slave_1: entered promiscuous mode
[  347.476200][T19049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  347.490773][T19049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.532941][T19049] team0: Port device team_slave_0 added
[  347.550047][T19049] team0: Port device team_slave_1 added
[  347.581575][T19098] netlink: 'syz.1.5856': attribute type 27 has an invalid length.
[  347.619419][T19049] batman_adv: batadv0: Adding interface: batadv_slave_0
[  347.626652][T19049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  347.653054][T19049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  347.677477][T19049] batman_adv: batadv0: Adding interface: batadv_slave_1
[  347.684508][T19049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  347.710611][T19049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  347.767544][T19049] hsr_slave_0: entered promiscuous mode
[  347.774956][T19049] hsr_slave_1: entered promiscuous mode
[  347.795504][T19049] debugfs: 'hsr0' already exists in 'hsr'
[  347.801369][T19049] Cannot create hsr debugfs directory
[  348.144571][T19049] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  348.153789][T19049] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  348.163882][T19049] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  348.172940][T19049] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  348.191719][T19049] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.198824][T19049] bridge0: port 2(bridge_slave_1) entered forwarding state
[  348.206155][T19049] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.213237][T19049] bridge0: port 1(bridge_slave_0) entered forwarding state
[  348.253711][T19049] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.267022][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.275243][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.289921][T19049] 8021q: adding VLAN 0 to HW filter on device team0
[  348.300046][T12722] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.307344][T12722] bridge0: port 1(bridge_slave_0) entered forwarding state
[  348.319202][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.326396][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  348.416460][T19049] 8021q: adding VLAN 0 to HW filter on device batadv0
[  348.546157][T19049] veth0_vlan: entered promiscuous mode
[  348.554304][T19049] veth1_vlan: entered promiscuous mode
[  348.570405][T19049] veth0_macvtap: entered promiscuous mode
[  348.578444][T19049] veth1_macvtap: entered promiscuous mode
[  348.589379][T19049] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.600440][T19049] batman_adv: batadv0: Interface activated: batadv_slave_1
[  348.611965][   T61] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.620938][   T61] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.630325][   T61] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.640064][   T61] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.749881][T19169] loop5: detected capacity change from 0 to 512
[  348.756671][T19169] EXT4-fs: Ignoring removed i_version option
[  348.762849][T19169] EXT4-fs: Ignoring removed bh option
[  348.780100][T19169] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  348.794238][T19169] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  348.822835][T19173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  348.831464][T19173] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  348.893720][T19049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.080365][T19197] netlink: 'syz.4.5877': attribute type 1 has an invalid length.
[  349.088326][T19197] __nla_validate_parse: 3 callbacks suppressed
[  349.088342][T19197] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5877'.
[  349.140462][T19180] chnl_net:caif_netlink_parms(): no params data found
[  349.176775][T19180] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.184034][T19180] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.191368][T19180] bridge_slave_0: entered allmulticast mode
[  349.198013][T19180] bridge_slave_0: entered promiscuous mode
[  349.205100][T19180] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.212229][T19180] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.222924][T19180] bridge_slave_1: entered allmulticast mode
[  349.229474][T19180] bridge_slave_1: entered promiscuous mode
[  349.249661][T19180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  349.260274][T19180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  349.260647][T19208] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20004
[  349.284178][T19180] team0: Port device team_slave_0 added
[  349.291007][T19180] team0: Port device team_slave_1 added
[  349.311384][T19180] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.318380][T19180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.344490][T19180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.355988][T19180] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.362996][T19180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.389164][T19180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.429671][T19180] hsr_slave_0: entered promiscuous mode
[  349.445078][T19180] hsr_slave_1: entered promiscuous mode
[  349.451454][T19180] debugfs: 'hsr0' already exists in 'hsr'
[  349.457274][T19180] Cannot create hsr debugfs directory
[  349.473244][   T29] kauditd_printk_skb: 1361 callbacks suppressed
[  349.473260][   T29] audit: type=1326 audit(1768160378.148:187373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.1.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f228f749 code=0x7ffc0000
[  349.503650][   T29] audit: type=1326 audit(1768160378.148:187374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.1.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f228f749 code=0x7ffc0000
[  349.528064][   T29] audit: type=1326 audit(1768160378.158:187375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.1.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30f228f749 code=0x7ffc0000
[  349.551949][   T29] audit: type=1326 audit(1768160378.158:187376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.1.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f228f749 code=0x7ffc0000
[  349.575950][   T29] audit: type=1326 audit(1768160378.158:187377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.1.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f228f749 code=0x7ffc0000
[  349.607939][   T29] audit: type=1326 audit(1768160378.221:187378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.1.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f30f228f749 code=0x7ffc0000
[  349.631794][   T29] audit: type=1326 audit(1768160378.221:187379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.1.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f228f749 code=0x7ffc0000
[  349.656051][T19218] loop6: detected capacity change from 0 to 1024
[  349.656071][   T29] audit: type=1326 audit(1768160378.221:187380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.1.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f30f228f749 code=0x7ffc0000
[  349.663469][T19218] EXT4-fs (loop6): bad geometry: block count 33554432 exceeds size of device (512 blocks)
[  349.686411][   T29] audit: type=1326 audit(1768160378.221:187381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.1.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f228f749 code=0x7ffc0000
[  349.686452][   T29] audit: type=1326 audit(1768160378.221:187382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.1.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30f228f749 code=0x7ffc0000
[  349.793559][T19223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5888'.
[  349.802705][T19223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5888'.
[  349.824306][T19223] gretap0: entered promiscuous mode
[  349.830838][T19223] gretap0: left promiscuous mode
[  349.929860][T19233] netlink: 'syz.5.5893': attribute type 27 has an invalid length.
[  349.947528][T19235] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20004
[  349.984510][T19238] loop5: detected capacity change from 0 to 512
[  349.994343][T19233] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.000216][T19238] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  350.001786][T19233] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.022804][T19238] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002]
[  350.031179][T19238] System zones: 1-12
[  350.035632][T19238] EXT4-fs (loop5): 1 truncate cleaned up
[  350.042094][T19238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  350.068617][T19245] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  350.086280][T19233] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  350.098039][T19233] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.144031][   T61] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.158951][   T61] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.173233][   T61] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.182899][   T61] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.220842][T19049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.281273][T19180] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  350.295282][T19180] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  350.302998][T19261] netlink: 'syz.1.5905': attribute type 10 has an invalid length.
[  350.310842][T19261] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5905'.
[  350.322181][T19180] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  350.340040][T19180] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  350.348317][T19255] netlink: 'syz.4.5900': attribute type 1 has an invalid length.
[  350.356150][T19255] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5900'.
[  350.449247][T19271] loop6: detected capacity change from 0 to 4096
[  350.450390][T19180] 8021q: adding VLAN 0 to HW filter on device bond0
[  350.458994][T19271] EXT4-fs: Ignoring removed nomblk_io_submit option
[  350.469019][T19180] 8021q: adding VLAN 0 to HW filter on device team0
[  350.478373][T19271] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  350.502731][T12736] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.509929][T12736] bridge0: port 1(bridge_slave_0) entered forwarding state
[  350.541411][T19283] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  350.552506][T12736] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.559604][T12736] bridge0: port 2(bridge_slave_1) entered forwarding state
[  350.673843][T17089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.688795][T19180] 8021q: adding VLAN 0 to HW filter on device batadv0
[  350.759530][T19306] FAULT_INJECTION: forcing a failure.
[  350.759530][T19306] name failslab, interval 1, probability 0, space 0, times 0
[  350.772386][T19306] CPU: 1 UID: 0 PID: 19306 Comm: syz.6.5915 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  350.772456][T19306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  350.772469][T19306] Call Trace:
[  350.772479][T19306]  <TASK>
[  350.772487][T19306]  __dump_stack+0x1d/0x30
[  350.772564][T19306]  dump_stack_lvl+0x95/0xd0
[  350.772586][T19306]  dump_stack+0x15/0x1b
[  350.772608][T19306]  should_fail_ex+0x265/0x280
[  350.772737][T19306]  should_failslab+0x8c/0xb0
[  350.772757][T19306]  kmem_cache_alloc_noprof+0x69/0x4b0
[  350.772780][T19306]  ? alloc_empty_file+0x76/0x200
[  350.772855][T19306]  alloc_empty_file+0x76/0x200
[  350.772883][T19306]  path_openat+0x63/0x23b0
[  350.772917][T19306]  ? xas_load+0x413/0x430
[  350.772958][T19306]  ? xas_load+0x413/0x430
[  350.772986][T19306]  ? __rcu_read_unlock+0x4f/0x70
[  350.773007][T19306]  ? xa_load+0xb1/0xe0
[  350.773135][T19306]  ? try_charge_memcg+0x215/0xa10
[  350.773164][T19306]  do_filp_open+0x109/0x230
[  350.773201][T19306]  io_openat2+0x272/0x390
[  350.773282][T19306]  io_openat+0x1b/0x30
[  350.773302][T19306]  __io_issue_sqe+0xfe/0x2e0
[  350.773330][T19306]  ? io_wq_submit_work+0x5a2/0x5f0
[  350.773480][T19306]  io_issue_sqe+0x56/0xa80
[  350.773521][T19306]  ? io_openat_prep+0x271/0x2c0
[  350.773538][T19306]  io_submit_sqes+0x78b/0x11b0
[  350.773644][T19306]  __se_sys_io_uring_enter+0x1bd/0x1a30
[  350.773665][T19306]  ? 0xffffffff81000000
[  350.773716][T19306]  ? __rcu_read_unlock+0x4f/0x70
[  350.773730][T19306]  ? proc_fail_nth_write+0x13b/0x160
[  350.773748][T19306]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  350.773765][T19306]  ? vfs_write+0x7e8/0x960
[  350.773920][T19306]  ? __rcu_read_unlock+0x4f/0x70
[  350.773934][T19306]  ? __fget_files+0x184/0x1c0
[  350.773949][T19306]  ? mutex_unlock+0x4f/0x90
[  350.773966][T19306]  ? fput+0x8f/0xc0
[  350.774019][T19306]  __x64_sys_io_uring_enter+0x78/0x90
[  350.774039][T19306]  x64_sys_call+0x27e4/0x3000
[  350.774106][T19306]  do_syscall_64+0xca/0x2b0
[  350.774127][T19306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.774190][T19306] RIP: 0033:0x7f3f6f93f749
[  350.774200][T19306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  350.774213][T19306] RSP: 002b:00007f3f6e3a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  350.774228][T19306] RAX: ffffffffffffffda RBX: 00007f3f6fb95fa0 RCX: 00007f3f6f93f749
[  350.774300][T19306] RDX: 000000000000addf RSI: 0000000000003518 RDI: 0000000000000008
[  350.774316][T19306] RBP: 00007f3f6e3a7090 R08: 0000000000000000 R09: 0000000000000000
[  350.774330][T19306] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[  350.774343][T19306] R13: 00007f3f6fb96038 R14: 00007f3f6fb95fa0 R15: 00007ffea3bf2cc8
[  350.774360][T19306]  </TASK>
[  351.095360][T19180] veth0_vlan: entered promiscuous mode
[  351.106957][T19180] veth1_vlan: entered promiscuous mode
[  351.132934][T19180] veth0_macvtap: entered promiscuous mode
[  351.150667][T19180] veth1_macvtap: entered promiscuous mode
[  351.184247][T19180] batman_adv: batadv0: Interface activated: batadv_slave_0
[  351.217350][T19180] batman_adv: batadv0: Interface activated: batadv_slave_1
[  351.244613][T12736] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  351.287364][T12736] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  351.306032][T12736] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  351.340310][T12736] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  351.461181][T19350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.489694][T19350] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  351.501603][T19355] loop5: detected capacity change from 0 to 512
[  351.611007][T19356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5935'.
[  351.637620][T19356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5935'.
[  351.648995][T19365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5939'.
[  351.684534][T19369] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5941'.
[  351.732413][T19375] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5944'.
[  351.770272][T19379] netlink: 'syz.0.5945': attribute type 1 has an invalid length.
[  351.805192][T19382] loop5: detected capacity change from 0 to 512
[  351.856377][T19385] FAULT_INJECTION: forcing a failure.
[  351.856377][T19385] name failslab, interval 1, probability 0, space 0, times 0
[  351.869183][T19385] CPU: 1 UID: 0 PID: 19385 Comm: syz.5.5948 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  351.869204][T19385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  351.869212][T19385] Call Trace:
[  351.869216][T19385]  <TASK>
[  351.869221][T19385]  __dump_stack+0x1d/0x30
[  351.869239][T19385]  dump_stack_lvl+0x95/0xd0
[  351.869368][T19385]  dump_stack+0x15/0x1b
[  351.869383][T19385]  should_fail_ex+0x265/0x280
[  351.869399][T19385]  should_failslab+0x8c/0xb0
[  351.869413][T19385]  kmem_cache_alloc_noprof+0x69/0x4b0
[  351.869427][T19385]  ? configfs_new_dirent+0x37/0x240
[  351.869517][T19385]  configfs_new_dirent+0x37/0x240
[  351.869538][T19385]  configfs_dir_open+0x9e/0xf0
[  351.869556][T19385]  ? __pfx_configfs_dir_open+0x10/0x10
[  351.869574][T19385]  do_dentry_open+0x54b/0xa60
[  351.869723][T19385]  vfs_open+0x37/0x1e0
[  351.869817][T19385]  path_openat+0x1ddd/0x23b0
[  351.869836][T19385]  ? _parse_integer_limit+0x170/0x190
[  351.869916][T19385]  do_filp_open+0x109/0x230
[  351.869940][T19385]  do_sys_openat2+0xa6/0x150
[  351.870033][T19385]  __x64_sys_openat+0xf2/0x120
[  351.870075][T19385]  x64_sys_call+0x2b07/0x3000
[  351.870090][T19385]  do_syscall_64+0xca/0x2b0
[  351.870111][T19385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.870124][T19385] RIP: 0033:0x7f3f8398f749
[  351.870212][T19385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  351.870225][T19385] RSP: 002b:00007f3f823ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  351.870240][T19385] RAX: ffffffffffffffda RBX: 00007f3f83be5fa0 RCX: 00007f3f8398f749
[  351.870249][T19385] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: ffffffffffffff9c
[  351.870257][T19385] RBP: 00007f3f823ef090 R08: 0000000000000000 R09: 0000000000000000
[  351.870266][T19385] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000001
[  351.870274][T19385] R13: 00007f3f83be6038 R14: 00007f3f83be5fa0 R15: 00007ffd33570dc8
[  351.870363][T19385]  </TASK>
[  352.112201][T19400] loop5: detected capacity change from 0 to 512
[  352.140783][T19400] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  352.159481][T19400] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  352.183517][T19400] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.5953: corrupted xattr block 6: invalid header
[  352.213408][T19400] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=12
[  352.222875][T19400] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.5953: corrupted xattr block 6: invalid header
[  352.240701][T19400] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=12
[  352.250590][T19400] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.5953: corrupted xattr block 6: invalid header
[  352.315457][T19049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.492191][T19477] bridge_slave_0: left allmulticast mode
[  353.498153][T19477] bridge_slave_0: left promiscuous mode
[  353.504183][T19477] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.518582][T19477] bridge_slave_1: left allmulticast mode
[  353.524442][T19477] bridge_slave_1: left promiscuous mode
[  353.530256][T19477] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.539158][T19484] netlink: 'syz.6.5984': attribute type 10 has an invalid length.
[  353.548218][T19477] bond0: (slave bond_slave_0): Releasing backup interface
[  353.565156][T19477] bond0: (slave bond_slave_1): Releasing backup interface
[  353.574467][T19477] team0: Port device team_slave_0 removed
[  353.581395][T19477] team0: Port device team_slave_1 removed
[  353.587318][T19477] batman_adv: batadv0: Removing interface: batadv_slave_0
[  353.598091][T19477] batman_adv: batadv0: Removing interface: batadv_slave_1
[  353.605794][T19477] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  353.626258][T19484] veth1_vlan: left promiscuous mode
[  353.646191][T19484] batman_adv: batadv0: Adding interface: veth1_vlan
[  353.652916][T19484] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  353.657989][T19492] FAULT_INJECTION: forcing a failure.
[  353.657989][T19492] name failslab, interval 1, probability 0, space 0, times 0
[  353.679590][T19484] batman_adv: batadv0: Interface activated: veth1_vlan
[  353.691338][T19492] CPU: 1 UID: 0 PID: 19492 Comm: syz.4.5988 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  353.691433][T19492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  353.691445][T19492] Call Trace:
[  353.691454][T19492]  <TASK>
[  353.691464][T19492]  __dump_stack+0x1d/0x30
[  353.691553][T19492]  dump_stack_lvl+0x95/0xd0
[  353.691709][T19492]  dump_stack+0x15/0x1b
[  353.691729][T19492]  should_fail_ex+0x265/0x280
[  353.691751][T19492]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  353.691788][T19492]  should_failslab+0x8c/0xb0
[  353.691848][T19492]  kmem_cache_alloc_lru_noprof+0x6d/0x4c0
[  353.691870][T19492]  ? shmem_alloc_inode+0x34/0x50
[  353.691896][T19492]  ? kstrtouint_from_user+0x9f/0xf0
[  353.691918][T19492]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  353.691949][T19492]  shmem_alloc_inode+0x34/0x50
[  353.691975][T19492]  alloc_inode+0x40/0x170
[  353.692030][T19492]  new_inode+0x1d/0xe0
[  353.692052][T19492]  shmem_get_inode+0x246/0x750
[  353.692113][T19492]  __shmem_file_setup+0x113/0x210
[  353.692146][T19492]  shmem_file_setup+0x3b/0x50
[  353.692169][T19492]  __se_sys_memfd_create+0x2f7/0x6b0
[  353.692201][T19492]  __x64_sys_memfd_create+0x31/0x40
[  353.692294][T19492]  x64_sys_call+0x28cb/0x3000
[  353.692346][T19492]  do_syscall_64+0xca/0x2b0
[  353.692379][T19492]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.692401][T19492] RIP: 0033:0x7f6fb778f749
[  353.692419][T19492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.692512][T19492] RSP: 002b:00007f6fb61eee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  353.692557][T19492] RAX: ffffffffffffffda RBX: 0000000000000483 RCX: 00007f6fb778f749
[  353.692642][T19492] RDX: 00007f6fb61eeef0 RSI: 0000000000000000 RDI: 00007f6fb7814960
[  353.692654][T19492] RBP: 0000200000001040 R08: 00007f6fb61eebb7 R09: 00007f6fb61eee40
[  353.692667][T19492] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0
[  353.692749][T19492] R13: 00007f6fb61eeef0 R14: 00007f6fb61eeeb0 R15: 00002000000002c0
[  353.692769][T19492]  </TASK>
[  354.042440][T19512] SELinux:  Context system_u:object_r:dri_device_t:s0 is not valid (left unmapped).
[  354.114860][T19521] netlink: 'syz.1.6000': attribute type 3 has an invalid length.
[  354.122829][T19521] netlink: 'syz.1.6000': attribute type 1 has an invalid length.
[  354.130578][T19521] __nla_validate_parse: 12 callbacks suppressed
[  354.130598][T19521] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.6000'.
[  354.816705][   T29] kauditd_printk_skb: 949 callbacks suppressed
[  354.816725][   T29] audit: type=1400 audit(1768160383.754:188332): avc:  denied  { create } for  pid=19541 comm="syz.6.6007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  354.985646][   T29] audit: type=1400 audit(1768160383.796:188333): avc:  denied  { sys_admin } for  pid=19541 comm="syz.6.6007" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  355.166818][   T29] audit: type=1400 audit(1768160384.132:188334): avc:  denied  { read } for  pid=19544 comm="syz.5.6008" path="socket:[68283]" dev="sockfs" ino=68283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  355.716156][   T29] audit: type=1326 audit(1768160384.709:188335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19563 comm="syz.4.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb778f749 code=0x7ffc0000
[  355.758337][T19564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6016'.
[  355.786917][   T29] audit: type=1326 audit(1768160384.751:188336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19563 comm="syz.4.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f6fb778f749 code=0x7ffc0000
[  355.810942][   T29] audit: type=1326 audit(1768160384.751:188337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19563 comm="syz.4.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb778f749 code=0x7ffc0000
[  355.834795][   T29] audit: type=1326 audit(1768160384.751:188338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19563 comm="syz.4.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f6fb778f749 code=0x7ffc0000
[  355.859110][   T29] audit: type=1326 audit(1768160384.751:188339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19563 comm="syz.4.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb778f749 code=0x7ffc0000
[  355.883780][   T29] audit: type=1326 audit(1768160384.751:188340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19563 comm="syz.4.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6fb778f749 code=0x7ffc0000
[  355.894517][T19564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6016'.
[  355.907622][   T29] audit: type=1326 audit(1768160384.751:188341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19563 comm="syz.4.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb778f749 code=0x7ffc0000
[  356.007858][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6018'.
[  356.092771][T19577] netlink: 'syz.0.6020': attribute type 1 has an invalid length.
[  356.100676][T19577] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6020'.
[  356.400173][T19607] FAULT_INJECTION: forcing a failure.
[  356.400173][T19607] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  356.413424][T19607] CPU: 1 UID: 0 PID: 19607 Comm: syz.0.6032 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  356.413456][T19607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  356.413482][T19607] Call Trace:
[  356.413490][T19607]  <TASK>
[  356.413499][T19607]  __dump_stack+0x1d/0x30
[  356.413591][T19607]  dump_stack_lvl+0x95/0xd0
[  356.413613][T19607]  dump_stack+0x15/0x1b
[  356.413632][T19607]  should_fail_ex+0x265/0x280
[  356.413653][T19607]  should_fail+0xb/0x20
[  356.413695][T19607]  should_fail_usercopy+0x1a/0x20
[  356.413795][T19607]  _copy_from_iter+0xcf/0xe70
[  356.413817][T19607]  ? __alloc_skb+0x396/0x4b0
[  356.413839][T19607]  ? __alloc_skb+0x228/0x4b0
[  356.413861][T19607]  netlink_sendmsg+0x471/0x6b0
[  356.413945][T19607]  ? __pfx_netlink_sendmsg+0x10/0x10
[  356.413972][T19607]  __sock_sendmsg+0x145/0x180
[  356.414051][T19607]  ____sys_sendmsg+0x31e/0x4a0
[  356.414145][T19607]  ___sys_sendmsg+0x17b/0x1d0
[  356.414182][T19607]  __x64_sys_sendmsg+0xd4/0x160
[  356.414282][T19607]  x64_sys_call+0x17ba/0x3000
[  356.414303][T19607]  do_syscall_64+0xca/0x2b0
[  356.414334][T19607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.414398][T19607] RIP: 0033:0x7f7a3b11f749
[  356.414414][T19607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  356.414431][T19607] RSP: 002b:00007f7a39b87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  356.414450][T19607] RAX: ffffffffffffffda RBX: 00007f7a3b375fa0 RCX: 00007f7a3b11f749
[  356.414481][T19607] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000003
[  356.414492][T19607] RBP: 00007f7a39b87090 R08: 0000000000000000 R09: 0000000000000000
[  356.414504][T19607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  356.414515][T19607] R13: 00007f7a3b376038 R14: 00007f7a3b375fa0 R15: 00007fffadbce808
[  356.414533][T19607]  </TASK>
[  356.617930][T19610] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6033'.
[  356.637846][T19613] hub 9-0:1.0: USB hub found
[  356.644651][T19616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6034'.
[  356.655577][T19613] hub 9-0:1.0: 8 ports detected
[  356.676498][T19620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6036'.
[  356.726307][T19627] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6037'.
[  356.749365][T19627] loop6: detected capacity change from 0 to 512
[  356.757448][T19627] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  356.781784][T19627] EXT4-fs (loop6): 1 truncate cleaned up
[  356.792739][T19627] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  356.841560][T17089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.028247][T19649] netlink: 'syz.5.6046': attribute type 27 has an invalid length.
[  357.051860][T19649] loop5: detected capacity change from 0 to 512
[  357.074170][T19649] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  357.087384][T19654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6048'.
[  357.087526][T19649] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002]
[  357.105217][T19649] System zones: 1-12
[  357.109857][T19649] EXT4-fs (loop5): 1 truncate cleaned up
[  357.116404][T19649] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  357.129771][T19654] team0: Port device team_slave_1 removed
[  357.149411][T19049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.199695][T19659] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20004
[  357.337063][T19668] team0: Port device team_slave_1 removed
[  357.446692][T19681] loop5: detected capacity change from 0 to 512
[  357.560924][T19694] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20004
[  358.154226][T19684] cgroup: fork rejected by pids controller in /syz5
[  359.149295][T19749] __nla_validate_parse: 2 callbacks suppressed
[  359.149314][T19749] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6071'.
[  359.366405][T19750] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  360.056563][   T29] kauditd_printk_skb: 1101 callbacks suppressed
[  360.056580][   T29] audit: type=1326 audit(1768160389.276:189443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19759 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3b11f749 code=0x7ffc0000
[  360.286816][T19766] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20004
[  360.292357][T19765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6076'.
[  360.306666][   T29] audit: type=1326 audit(1768160389.307:189444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19759 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a3b11f749 code=0x7ffc0000
[  360.330525][   T29] audit: type=1326 audit(1768160389.307:189445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19759 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3b11f749 code=0x7ffc0000
[  360.354435][   T29] audit: type=1326 audit(1768160389.307:189446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19759 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3b11f749 code=0x7ffc0000
[  360.378221][   T29] audit: type=1326 audit(1768160389.339:189447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19759 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7a3b11f749 code=0x7ffc0000
[  360.402052][   T29] audit: type=1326 audit(1768160389.339:189448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19759 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3b11f749 code=0x7ffc0000
[  360.426007][   T29] audit: type=1326 audit(1768160389.339:189449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19759 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3b11f749 code=0x7ffc0000
[  360.450032][   T29] audit: type=1326 audit(1768160389.339:189450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19759 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f7a3b11f749 code=0x7ffc0000
[  360.474053][   T29] audit: type=1326 audit(1768160389.339:189451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19759 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3b11f749 code=0x7ffc0000
[  360.497979][   T29] audit: type=1326 audit(1768160389.339:189452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19759 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3b11f749 code=0x7ffc0000
[  360.881143][T19722] syz.5.6060 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  360.891095][T19722] CPU: 1 UID: 0 PID: 19722 Comm: syz.5.6060 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  360.891128][T19722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  360.891143][T19722] Call Trace:
[  360.891151][T19722]  <TASK>
[  360.891234][T19722]  __dump_stack+0x1d/0x30
[  360.891260][T19722]  dump_stack_lvl+0x95/0xd0
[  360.891287][T19722]  dump_stack+0x15/0x1b
[  360.891371][T19722]  dump_header+0x81/0x240
[  360.891396][T19722]  oom_kill_process+0x295/0x350
[  360.891423][T19722]  out_of_memory+0x97b/0xb80
[  360.891451][T19722]  try_charge_memcg+0x610/0xa10
[  360.891581][T19722]  charge_memcg+0x51/0xc0
[  360.891616][T19722]  __mem_cgroup_charge+0x28/0xb0
[  360.891731][T19722]  shmem_get_folio_gfp+0x470/0xd50
[  360.891837][T19722]  shmem_write_begin+0xfc/0x1f0
[  360.891862][T19722]  generic_perform_write+0x184/0x490
[  360.891903][T19722]  ? __mark_inode_dirty+0x1af/0x750
[  360.891933][T19722]  shmem_file_write_iter+0xc5/0xf0
[  360.891968][T19722]  __kernel_write_iter+0x2d6/0x540
[  360.891986][T19722]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  360.892017][T19722]  dump_user_range+0x61e/0x8f0
[  360.892122][T19722]  elf_core_dump+0x1de7/0x1f80
[  360.892152][T19722]  ? 0xffffffffff600000
[  360.892178][T19722]  coredump_write+0xacf/0xdf0
[  360.892275][T19722]  vfs_coredump+0x24f7/0x2e60
[  360.892381][T19722]  ? __memcg_slab_free_hook+0xbc/0x230
[  360.892473][T19722]  ? kmem_cache_free+0xe3/0x3a0
[  360.892532][T19722]  ? proc_coredump_connector+0x114/0x220
[  360.892632][T19722]  get_signal+0xd84/0xf70
[  360.892663][T19722]  arch_do_signal_or_restart+0x96/0x450
[  360.892691][T19722]  irqentry_exit+0xf9/0x560
[  360.892734][T19722]  ? force_sig+0x68/0x90
[  360.892763][T19722]  exc_general_protection+0x15b/0x1e0
[  360.892787][T19722]  asm_exc_general_protection+0x26/0x30
[  360.892807][T19722] RIP: 0033:0x7f3f8398f751
[  360.892822][T19722] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  360.892916][T19722] RSP: 002b:00002000000001a1 EFLAGS: 00010217
[  360.892933][T19722] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f3f8398f749
[  360.892945][T19722] RDX: 00007f3f823cdf20 RSI: 0000000000000058 RDI: 00007f3f823cdf20
[  360.892956][T19722] RBP: 00007f3f83a13f91 R08: 0000000000000000 R09: 0000000000000058
[  360.893035][T19722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  360.893047][T19722] R13: 00007f3f83be6128 R14: 00007f3f83be6090 R15: 00007ffd33570dc8
[  360.893137][T19722]  </TASK>
[  360.893207][T19722] memory: usage 307200kB, limit 307200kB, failcnt 20180
[  361.026302][T19778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6080'.
[  361.026748][T19722] memory+swap: usage 426888kB, limit 9007199254740988kB, failcnt 0
[  361.164108][T19781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6080'.
[  361.165190][T19722] kmem: usage 7228kB, limit 9007199254740988kB, failcnt 0
[  361.181331][T19722] Memory cgroup stats for /syz5:
[  361.208384][T19722] cache 306778112
[  361.217128][T19722] rss 262144
[  361.220376][T19722] shmem 306778112
[  361.224066][T19722] mapped_file 0
[  361.227663][T19722] dirty 0
[  361.230625][T19722] writeback 0
[  361.233926][T19722] workingset_refault_anon 988
[  361.238647][T19722] workingset_refault_file 1792
[  361.243432][T19722] swap 122564608
[  361.247165][T19722] swapcached 139264
[  361.250991][T19722] pgpgin 314306
[  361.254595][T19722] pgpgout 239313
[  361.258260][T19722] pgfault 195783
[  361.261994][T19722] pgmajfault 146
[  361.265552][T19722] inactive_anon 176504832
[  361.270002][T19722] active_anon 130666496
[  361.274181][T19722] inactive_file 0
[  361.277838][T19722] active_file 0
[  361.281299][T19722] unevictable 0
[  361.284951][T19722] hierarchical_memory_limit 314572800
[  361.290366][T19722] hierarchical_memsw_limit 9223372036854771712
[  361.296621][T19722] total_cache 306778112
[  361.300850][T19722] total_rss 262144
[  361.304586][T19722] total_shmem 306778112
[  361.308735][T19722] total_mapped_file 0
[  361.312926][T19722] total_dirty 0
[  361.316393][T19722] total_writeback 0
[  361.320249][T19722] total_workingset_refault_anon 988
[  361.325552][T19722] total_workingset_refault_file 1792
[  361.330841][T19722] total_swap 122564608
[  361.335064][T19722] total_swapcached 139264
[  361.339593][T19722] total_pgpgin 314306
[  361.343594][T19722] total_pgpgout 239313
[  361.347763][T19722] total_pgfault 195783
[  361.351868][T19722] total_pgmajfault 146
[  361.355956][T19722] total_inactive_anon 176504832
[  361.360821][T19722] total_active_anon 130666496
[  361.365720][T19722] total_inactive_file 0
[  361.369917][T19722] total_active_file 0
[  361.373936][T19722] total_unevictable 0
[  361.377931][T19722] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.6060,pid=19690,uid=0
[  361.392695][T19722] Memory cgroup out of memory: Killed process 19690 (syz.5.6060) total-vm:90260kB, anon-rss:1164kB, file-rss:42496kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000
[  361.925342][T19692] syz.5.6060 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  361.935244][T19692] CPU: 1 UID: 0 PID: 19692 Comm: syz.5.6060 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  361.935270][T19692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  361.935345][T19692] Call Trace:
[  361.935353][T19692]  <TASK>
[  361.935362][T19692]  __dump_stack+0x1d/0x30
[  361.935390][T19692]  dump_stack_lvl+0x95/0xd0
[  361.935446][T19692]  dump_stack+0x15/0x1b
[  361.935469][T19692]  dump_header+0x81/0x240
[  361.935492][T19692]  oom_kill_process+0x295/0x350
[  361.935514][T19692]  out_of_memory+0x97b/0xb80
[  361.935541][T19692]  try_charge_memcg+0x610/0xa10
[  361.935655][T19692]  charge_memcg+0x51/0xc0
[  361.935686][T19692]  __mem_cgroup_charge+0x28/0xb0
[  361.935749][T19692]  shmem_get_folio_gfp+0x470/0xd50
[  361.935786][T19692]  shmem_write_begin+0xfc/0x1f0
[  361.935852][T19692]  generic_perform_write+0x184/0x490
[  361.935888][T19692]  shmem_file_write_iter+0xc5/0xf0
[  361.935959][T19692]  __kernel_write_iter+0x2d6/0x540
[  361.935979][T19692]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  361.936027][T19692]  dump_user_range+0x61e/0x8f0
[  361.936063][T19692]  elf_core_dump+0x1de7/0x1f80
[  361.936108][T19692]  ? 0xffffffffff600000
[  361.936139][T19692]  coredump_write+0xacf/0xdf0
[  361.936176][T19692]  vfs_coredump+0x24f7/0x2e60
[  361.936214][T19692]  ? __memcg_slab_free_hook+0xbc/0x230
[  361.936313][T19692]  ? kmem_cache_free+0xe3/0x3a0
[  361.936341][T19692]  ? proc_coredump_connector+0x114/0x220
[  361.936393][T19692]  get_signal+0xd84/0xf70
[  361.936423][T19692]  arch_do_signal_or_restart+0x96/0x450
[  361.936459][T19692]  irqentry_exit+0xf9/0x560
[  361.936554][T19692]  ? force_sig+0x68/0x90
[  361.936612][T19692]  exc_general_protection+0x15b/0x1e0
[  361.936637][T19692]  asm_exc_general_protection+0x26/0x30
[  361.936658][T19692] RIP: 0033:0x7f3f8398f751
[  361.936673][T19692] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  361.936766][T19692] RSP: 002b:00002000000001a1 EFLAGS: 00010217
[  361.936782][T19692] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f3f8398f749
[  361.936794][T19692] RDX: 00007f3f823cdf20 RSI: 0000000000000058 RDI: 00007f3f823cdf20
[  361.936806][T19692] RBP: 00007f3f83a13f91 R08: 0000000000000000 R09: 0000000000000058
[  361.936818][T19692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  361.936879][T19692] R13: 00007f3f83be6128 R14: 00007f3f83be6090 R15: 00007ffd33570dc8
[  361.936897][T19692]  </TASK>
[  361.936903][T19692] memory: usage 307200kB, limit 307200kB, failcnt 23067
[  362.187554][T19692] memory+swap: usage 424976kB, limit 9007199254740988kB, failcnt 0
[  362.195498][T19692] kmem: usage 7100kB, limit 9007199254740988kB, failcnt 0
[  362.202750][T19692] Memory cgroup stats for /syz5:
[  362.387018][T19796] loop6: detected capacity change from 0 to 512
[  362.522322][T19793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6083'.
[  362.531566][T19793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6083'.
[  362.542568][T19761] chnl_net:caif_netlink_parms(): no params data found
[  362.551482][T19692] cache 306946048
[  362.555292][T19692] rss 225280
[  362.558513][T19692] shmem 306946048
[  362.562303][T19692] mapped_file 0
[  362.565864][T19692] dirty 0
[  362.568862][T19692] writeback 16384
[  362.572533][T19692] workingset_refault_anon 1026
[  362.577343][T19692] workingset_refault_file 1792
[  362.582204][T19692] swap 127922176
[  362.585770][T19692] swapcached 73728
[  362.589712][T19692] pgpgin 321016
[  362.593502][T19692] pgpgout 246007
[  362.596072][T19768] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6078'.
[  362.597063][T19692] pgfault 196198
[  362.606252][T19768] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6078'.
[  362.609874][T19692] pgmajfault 146
[  362.609887][T19692] inactive_anon 180785152
[  362.626819][T19692] active_anon 126451712
[  362.631069][T19692] inactive_file 0
[  362.634716][T19692] active_file 0
[  362.638206][T19692] unevictable 0
[  362.641774][T19692] hierarchical_memory_limit 314572800
[  362.647320][T19692] hierarchical_memsw_limit 9223372036854771712
[  362.653523][T19692] total_cache 306946048
[  362.657749][T19692] total_rss 225280
[  362.661456][T19692] total_shmem 306946048
[  362.665632][T19692] total_mapped_file 0
[  362.669616][T19692] total_dirty 0
[  362.673089][T19692] total_writeback 16384
[  362.677246][T19692] total_workingset_refault_anon 1026
[  362.682525][T19692] total_workingset_refault_file 1792
[  362.687828][T19692] total_swap 127922176
[  362.691888][T19692] total_swapcached 73728
[  362.694508][T19795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6082'.
[  362.696145][T19692] total_pgpgin 321016
[  362.696155][T19692] total_pgpgout 246007
[  362.696162][T19692] total_pgfault 196198
[  362.696198][T19692] total_pgmajfault 146
[  362.696206][T19692] total_inactive_anon 180785152
[  362.705297][T19795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6082'.
[  362.709174][T19692] total_active_anon 126451712
[  362.709185][T19692] total_inactive_file 0
[  362.709192][T19692] total_active_file 0
[  362.709199][T19692] total_unevictable 0
[  362.709207][T19692] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null)
[  362.748916][T19692] ,cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.6060,pid=19692,uid=0
[  362.770000][T19692] Memory cgroup out of memory: Killed process 19692 (syz.5.6060) total-vm:90260kB, anon-rss:1164kB, file-rss:41984kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000
[  362.801915][T19793] bond0: entered promiscuous mode
[  362.807013][T19793] bond_slave_0: entered promiscuous mode
[  362.812818][T19793] bond_slave_1: entered promiscuous mode
[  362.931690][T19719] syz.5.6060 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  362.941679][T19719] CPU: 1 UID: 0 PID: 19719 Comm: syz.5.6060 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  362.941712][T19719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  362.941727][T19719] Call Trace:
[  362.941736][T19719]  <TASK>
[  362.941746][T19719]  __dump_stack+0x1d/0x30
[  362.941863][T19719]  dump_stack_lvl+0x95/0xd0
[  362.941884][T19719]  dump_stack+0x15/0x1b
[  362.941921][T19719]  dump_header+0x81/0x240
[  362.941943][T19719]  oom_kill_process+0x295/0x350
[  362.941969][T19719]  out_of_memory+0x97b/0xb80
[  362.941997][T19719]  try_charge_memcg+0x610/0xa10
[  362.942056][T19719]  charge_memcg+0x51/0xc0
[  362.942089][T19719]  __mem_cgroup_charge+0x28/0xb0
[  362.942125][T19719]  shmem_get_folio_gfp+0x470/0xd50
[  362.942189][T19719]  shmem_write_begin+0xfc/0x1f0
[  362.942234][T19719]  generic_perform_write+0x184/0x490
[  362.942269][T19719]  shmem_file_write_iter+0xc5/0xf0
[  362.942299][T19719]  __kernel_write_iter+0x2d6/0x540
[  362.942335][T19719]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  362.942410][T19719]  dump_user_range+0x61e/0x8f0
[  362.942446][T19719]  elf_core_dump+0x1de7/0x1f80
[  362.942536][T19719]  ? 0xffffffffff600000
[  362.942569][T19719]  coredump_write+0xacf/0xdf0
[  362.942709][T19719]  vfs_coredump+0x24f7/0x2e60
[  362.942779][T19719]  ? __memcg_slab_free_hook+0xbc/0x230
[  362.942895][T19719]  ? kmem_cache_free+0xe3/0x3a0
[  362.942935][T19719]  ? proc_coredump_connector+0x114/0x220
[  362.942992][T19719]  get_signal+0xd84/0xf70
[  362.943083][T19719]  arch_do_signal_or_restart+0x96/0x450
[  362.943153][T19719]  irqentry_exit+0xf9/0x560
[  362.943250][T19719]  ? force_sig+0x68/0x90
[  362.943272][T19719]  exc_general_protection+0x15b/0x1e0
[  362.943300][T19719]  asm_exc_general_protection+0x26/0x30
[  362.943334][T19719] RIP: 0033:0x7f3f8398f751
[  362.943355][T19719] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  362.943377][T19719] RSP: 002b:00002000000001a1 EFLAGS: 00010217
[  362.943395][T19719] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f3f8398f749
[  362.943424][T19719] RDX: 00007f3f823cdf20 RSI: 0000000000000058 RDI: 00007f3f823cdf20
[  362.943436][T19719] RBP: 00007f3f83a13f91 R08: 0000000000000000 R09: 0000000000000058
[  362.943452][T19719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  362.943467][T19719] R13: 00007f3f83be6128 R14: 00007f3f83be6090 R15: 00007ffd33570dc8
[  362.943489][T19719]  </TASK>
[  363.184981][T19719] memory: usage 307200kB, limit 307200kB, failcnt 25210
[  363.192065][T19719] memory+swap: usage 432180kB, limit 9007199254740988kB, failcnt 0
[  363.200204][T19719] kmem: usage 6892kB, limit 9007199254740988kB, failcnt 0
[  363.207368][T19719] Memory cgroup stats for /syz5:
[  363.207477][T19793] bond0: left promiscuous mode
[  363.217429][T19793] bond_slave_0: left promiscuous mode
[  363.222975][T19793] bond_slave_1: left promiscuous mode
[  363.262479][T19768] bond0: entered promiscuous mode
[  363.267692][T19768] bond_slave_0: entered promiscuous mode
[  363.273414][T19768] bond_slave_1: entered promiscuous mode
[  363.280986][T19768] bond0: left promiscuous mode
[  363.285904][T19768] bond_slave_0: left promiscuous mode
[  363.291541][T19768] bond_slave_1: left promiscuous mode
[  363.402950][T19809] loop6: detected capacity change from 0 to 512
[  363.531139][T19719] cache 307290112
[  363.534966][T19719] rss 217088
[  363.538353][T19719] shmem 307290112
[  363.542000][T19719] mapped_file 0
[  363.545554][T19719] dirty 0
[  363.548506][T19719] writeback 0
[  363.551857][T19719] workingset_refault_anon 1026
[  363.556625][T19719] workingset_refault_file 1792
[  363.561675][T19719] swap 127995904
[  363.565356][T19719] swapcached 0
[  363.568826][T19719] pgpgin 326768
[  363.572301][T19719] pgpgout 251693
[  363.575872][T19719] pgfault 196568
[  363.579407][T19719] pgmajfault 146
[  363.583056][T19719] inactive_anon 249155584
[  363.587786][T19719] active_anon 58351616
[  363.591903][T19719] inactive_file 0
[  363.595555][T19719] active_file 0
[  363.599076][T19719] unevictable 0
[  363.602574][T19719] hierarchical_memory_limit 314572800
[  363.608055][T19719] hierarchical_memsw_limit 9223372036854771712
[  363.614220][T19719] total_cache 307290112
[  363.618371][T19719] total_rss 217088
[  363.622307][T19719] total_shmem 307290112
[  363.626451][T19719] total_mapped_file 0
[  363.630614][T19719] total_dirty 0
[  363.634082][T19719] total_writeback 0
[  363.637927][T19719] total_workingset_refault_anon 1026
[  363.643271][T19719] total_workingset_refault_file 1792
[  363.648574][T19719] total_swap 127995904
[  363.652702][T19719] total_swapcached 0
[  363.656604][T19719] total_pgpgin 326768
[  363.660773][T19719] total_pgpgout 251693
[  363.664991][T19719] total_pgfault 196568
[  363.669082][T19719] total_pgmajfault 146
[  363.673145][T19719] total_inactive_anon 249155584
[  363.678004][T19719] total_active_anon 58351616
[  363.682588][T19719] total_inactive_file 0
[  363.686792][T19719] total_active_file 0
[  363.690761][T19719] total_unevictable 0
[  363.694747][T19719] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.6060,pid=19713,uid=0
[  363.709649][T19719] Memory cgroup out of memory: Killed process 19713 (syz.5.6060) total-vm:90260kB, anon-rss:1164kB, file-rss:44160kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000
[  363.749456][T19818] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  363.755464][T19819] ipvlan2: entered promiscuous mode
[  363.800491][T19818] vhci_hcd vhci_hcd.2: invalid port number 96
[  363.806679][T19818] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[  363.986078][T19703] syz.5.6060 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  363.996105][T19703] CPU: 0 UID: 0 PID: 19703 Comm: syz.5.6060 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  363.996150][T19703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  363.996162][T19703] Call Trace:
[  363.996170][T19703]  <TASK>
[  363.996178][T19703]  __dump_stack+0x1d/0x30
[  363.996271][T19703]  dump_stack_lvl+0x95/0xd0
[  363.996295][T19703]  dump_stack+0x15/0x1b
[  363.996315][T19703]  dump_header+0x81/0x240
[  363.996363][T19703]  oom_kill_process+0x295/0x350
[  363.996395][T19703]  out_of_memory+0x97b/0xb80
[  363.996422][T19703]  try_charge_memcg+0x610/0xa10
[  363.996527][T19703]  charge_memcg+0x51/0xc0
[  363.996561][T19703]  __mem_cgroup_charge+0x28/0xb0
[  363.996589][T19703]  shmem_get_folio_gfp+0x470/0xd50
[  363.996616][T19703]  shmem_write_begin+0xfc/0x1f0
[  363.996684][T19703]  generic_perform_write+0x184/0x490
[  363.996715][T19703]  shmem_file_write_iter+0xc5/0xf0
[  363.996761][T19703]  __kernel_write_iter+0x2d6/0x540
[  363.996783][T19703]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  363.996816][T19703]  dump_user_range+0x61e/0x8f0
[  363.996851][T19703]  elf_core_dump+0x1de7/0x1f80
[  363.996947][T19703]  ? 0xffffffffff600000
[  363.996972][T19703]  coredump_write+0xacf/0xdf0
[  363.997006][T19703]  vfs_coredump+0x24f7/0x2e60
[  363.997115][T19703]  ? __memcg_slab_free_hook+0xbc/0x230
[  363.997150][T19703]  ? kmem_cache_free+0xe3/0x3a0
[  363.997194][T19703]  ? proc_coredump_connector+0x114/0x220
[  363.997219][T19703]  get_signal+0xd84/0xf70
[  363.997255][T19703]  arch_do_signal_or_restart+0x96/0x450
[  363.997288][T19703]  irqentry_exit+0xf9/0x560
[  363.997367][T19703]  ? force_sig+0x68/0x90
[  363.997400][T19703]  exc_general_protection+0x15b/0x1e0
[  363.997430][T19703]  asm_exc_general_protection+0x26/0x30
[  363.997509][T19703] RIP: 0033:0x7f3f8398f751
[  363.997524][T19703] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  363.997573][T19703] RSP: 002b:00002000000001a1 EFLAGS: 00010217
[  363.997592][T19703] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f3f8398f749
[  363.997629][T19703] RDX: 00007f3f823cdf20 RSI: 0000000000000058 RDI: 00007f3f823cdf20
[  363.997642][T19703] RBP: 00007f3f83a13f91 R08: 0000000000000000 R09: 0000000000000058
[  363.997654][T19703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  363.997666][T19703] R13: 00007f3f83be6128 R14: 00007f3f83be6090 R15: 00007ffd33570dc8
[  363.997683][T19703]  </TASK>
[  363.997692][T19703] memory: usage 307016kB, limit 307200kB, failcnt 26613
[  364.047551][T19761] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.051200][T19703] memory+swap: usage 430444kB, limit 9007199254740988kB, failcnt 0
[  364.051286][T19703] kmem: usage 6824kB, limit 9007199254740988kB, failcnt 0
[  364.056225][T19761] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.060578][T19703] Memory cgroup stats for /syz5
[  364.158362][T19761] bridge_slave_0: entered allmulticast mode
[  364.161063][T19703] :
[  364.314531][T19761] bridge_slave_0: entered promiscuous mode
[  364.342326][T19703] cache 307621888
[  364.346055][T19703] rss 98304
[  364.349198][T19703] shmem 307621888
[  364.353193][T19703] mapped_file 0
[  364.356735][T19703] dirty 0
[  364.359681][T19703] writeback 0
[  364.362999][T19703] workingset_refault_anon 1032
[  364.367864][T19703] workingset_refault_file 1792
[  364.372850][T19703] swap 127987712
[  364.376413][T19703] swapcached 8192
[  364.377283][T19761] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.380052][T19703] pgpgin 329470
[  364.387239][T19761] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.390702][T19703] pgpgout 254343
[  364.390713][T19703] pgfault 196767
[  364.405030][T19703] pgmajfault 148
[  364.408582][T19703] inactive_anon 272556032
[  364.413170][T19703] active_anon 34373632
[  364.417248][T19703] inactive_file 0
[  364.420975][T19703] active_file 0
[  364.424442][T19703] unevictable 0
[  364.427898][T19703] hierarchical_memory_limit 314572800
[  364.433361][T19703] hierarchical_memsw_limit 9223372036854771712
[  364.439772][T19703] total_cache 307621888
[  364.443937][T19703] total_rss 98304
[  364.447677][T19703] total_shmem 307621888
[  364.447711][T19761] bridge_slave_1: entered allmulticast mode
[  364.451835][T19703] total_mapped_file 0
[  364.451846][T19703] total_dirty 0
[  364.451854][T19703] total_writeback 0
[  364.451863][T19703] total_workingset_refault_anon 1032
[  364.474543][T19703] total_workingset_refault_file 1792
[  364.476598][T19761] bridge_slave_1: entered promiscuous mode
[  364.479888][T19703] total_swap 127987712
[  364.489831][T19703] total_swapcached 8192
[  364.494063][T19703] total_pgpgin 329470
[  364.498205][T19703] total_pgpgout 254343
[  364.502283][T19703] total_pgfault 196767
[  364.506405][T19703] total_pgmajfault 148
[  364.510572][T19703] total_inactive_anon 272556032
[  364.515471][T19703] total_active_anon 34373632
[  364.520074][T19703] total_inactive_file 0
[  364.524260][T19703] total_active_file 0
[  364.528249][T19703] total_unevictable 0
[  364.532244][T19703] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.6060,pid=19695,uid=0
[  364.547055][T19703] Memory cgroup out of memory: Killed process 19695 (syz.5.6060) total-vm:90260kB, anon-rss:1164kB, file-rss:52608kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000
[  364.627108][T19761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  364.636761][T12732] batadv2: left allmulticast mode
[  364.641969][T12732] batadv2: left promiscuous mode
[  364.647070][T12732] bridge0: port 5(batadv2) entered disabled state
[  364.801217][T19830] __nla_validate_parse: 1 callbacks suppressed
[  364.801234][T19830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6096'.
[  364.867046][   T29] kauditd_printk_skb: 622 callbacks suppressed
[  364.867065][   T29] audit: type=1326 audit(1768160394.325:190075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19815 comm="syz.0.6093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7a3b11f749 code=0x7ffc0000
[  364.924192][T12732] batadv1: left allmulticast mode
[  364.929297][T12732] batadv1: left promiscuous mode
[  364.934493][T12732] bridge0: port 4(batadv1) entered disabled state
[  365.017370][T19721] syz.5.6060 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  365.027662][T19721] CPU: 1 UID: 0 PID: 19721 Comm: syz.5.6060 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  365.027689][T19721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  365.027700][T19721] Call Trace:
[  365.027708][T19721]  <TASK>
[  365.027717][T19721]  __dump_stack+0x1d/0x30
[  365.027742][T19721]  dump_stack_lvl+0x95/0xd0
[  365.027762][T19721]  dump_stack+0x15/0x1b
[  365.027887][T19721]  dump_header+0x81/0x240
[  365.027907][T19721]  oom_kill_process+0x295/0x350
[  365.027928][T19721]  out_of_memory+0x97b/0xb80
[  365.027949][T19721]  try_charge_memcg+0x610/0xa10
[  365.028009][T19721]  charge_memcg+0x51/0xc0
[  365.028123][T19721]  __mem_cgroup_charge+0x28/0xb0
[  365.028205][T19721]  shmem_get_folio_gfp+0x470/0xd50
[  365.028234][T19721]  shmem_write_begin+0xfc/0x1f0
[  365.028258][T19721]  generic_perform_write+0x184/0x490
[  365.028389][T19721]  shmem_file_write_iter+0xc5/0xf0
[  365.028417][T19721]  __kernel_write_iter+0x2d6/0x540
[  365.028434][T19721]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  365.028500][T19721]  dump_user_range+0x61e/0x8f0
[  365.028535][T19721]  elf_core_dump+0x1de7/0x1f80
[  365.028572][T19721]  ? 0xffffffffff600000
[  365.028601][T19721]  coredump_write+0xacf/0xdf0
[  365.028712][T19721]  vfs_coredump+0x24f7/0x2e60
[  365.028742][T19721]  ? __memcg_slab_free_hook+0xbc/0x230
[  365.028771][T19721]  ? kmem_cache_free+0xe3/0x3a0
[  365.028837][T19721]  ? proc_coredump_connector+0x114/0x220
[  365.028860][T19721]  get_signal+0xd84/0xf70
[  365.028891][T19721]  arch_do_signal_or_restart+0x96/0x450
[  365.028993][T19721]  irqentry_exit+0xf9/0x560
[  365.029091][T19721]  ? force_sig+0x68/0x90
[  365.029113][T19721]  exc_general_protection+0x15b/0x1e0
[  365.029137][T19721]  asm_exc_general_protection+0x26/0x30
[  365.029228][T19721] RIP: 0033:0x7f3f8398f751
[  365.029244][T19721] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  365.029262][T19721] RSP: 002b:00002000000001a1 EFLAGS: 00010217
[  365.029278][T19721] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f3f8398f749
[  365.029291][T19721] RDX: 00007f3f823cdf20 RSI: 0000000000000058 RDI: 00007f3f823cdf20
[  365.029303][T19721] RBP: 00007f3f83a13f91 R08: 0000000000000000 R09: 0000000000000058
[  365.029383][T19721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  365.029398][T19721] R13: 00007f3f83be6128 R14: 00007f3f83be6090 R15: 00007ffd33570dc8
[  365.029415][T19721]  </TASK>
[  365.271184][T19721] memory: usage 307200kB, limit 307200kB, failcnt 28500
[  365.278253][T19721] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0
[  365.286349][T19721] kmem: usage 6500kB, limit 9007199254740988kB, failcnt 0
[  365.293473][T19721] Memory cgroup stats for /syz5:
[  365.345807][T12732] bond0: left allmulticast mode
[  365.355805][T12732] bond0: left promiscuous mode
[  365.360696][T12732] bridge0: port 3(bond0) entered disabled state
[  365.397270][T12732] bridge_slave_1: left allmulticast mode
[  365.403129][T12732] bridge_slave_1: left promiscuous mode
[  365.408874][T12732] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.419982][T19837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=19837 comm=syz.0.6097
[  365.473788][T12732] bridge_slave_0: left allmulticast mode
[  365.479620][T12732] bridge_slave_0: left promiscuous mode
[  365.485418][T12732] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.679985][T12732] team0: Port device $Hÿ removed
[  365.687560][T12732] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface
[  365.715329][T12732] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface
[  365.731126][T12732] $Hÿ (unregistering): (slave dummy0): Releasing backup interface
[  365.740207][T12732] $Hÿ (unregistering): Released all slaves
[  365.760590][T12732] bond0 (unregistering): Released all slaves
[  365.812603][   T29] audit: type=1326 audit(1768160395.312:190076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.0.6102" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a3b11f749 code=0x0
[  365.837612][T19761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  365.840121][T19721] cache 307781632
[  365.850521][T19721] rss 90112
[  365.853725][T19721] shmem 307777536
[  365.857436][T19721] mapped_file 0
[  365.860916][T19721] dirty 0
[  365.863840][T19721] writeback 0
[  365.867135][T19721] workingset_refault_anon 1032
[  365.872055][T19721] workingset_refault_file 2372
[  365.877095][T19721] swap 127995904
[  365.880717][T19721] swapcached 0
[  365.884075][T19721] pgpgin 341435
[  365.887607][T19721] pgpgout 266271
[  365.891442][T19721] pgfault 197486
[  365.894972][T19721] pgmajfault 152
[  365.898537][T19721] inactive_anon 43589632
[  365.902799][T19721] active_anon 264278016
[  365.907178][T19721] inactive_file 0
[  365.910837][T19721] active_file 4096
[  365.914686][T19721] unevictable 0
[  365.918177][T19721] hierarchical_memory_limit 314572800
[  365.923552][T19721] hierarchical_memsw_limit 9223372036854771712
[  365.929710][T19721] total_cache 307781632
[  365.933910][T19721] total_rss 90112
[  365.937532][T19721] total_shmem 307777536
[  365.941692][T19721] total_mapped_file 0
[  365.945687][T19721] total_dirty 0
[  365.949208][T19721] total_writeback 0
[  365.953035][T19721] total_workingset_refault_anon 1032
[  365.958376][T19721] total_workingset_refault_file 2372
[  365.963661][T19721] total_swap 127995904
[  365.967818][T19721] total_swapcached 0
[  365.971793][T19721] total_pgpgin 341435
[  365.975836][T19721] total_pgpgout 266271
[  365.979932][T19721] total_pgfault 197486
[  365.984013][T19721] total_pgmajfault 152
[  365.988078][T19721] total_inactive_anon 43589632
[  365.992860][T19721] total_active_anon 264278016
[  365.997528][T19721] total_inactive_file 0
[  366.001731][T19721] total_active_file 4096
[  366.005992][T19721] total_unevictable 0
[  366.010009][T19721] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.6060,pid=19704,uid=0
[  366.024793][T19721] Memory cgroup out of memory: Killed process 19704 (syz.5.6060) total-vm:90260kB, anon-rss:1164kB, file-rss:53944kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000
[  366.171612][T19696] ==================================================================
[  366.179767][T19696] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64
[  366.189687][T19696] 
[  366.192025][T19696] read-write to 0xffffffff86809a00 of 8 bytes by interrupt on cpu 0:
[  366.200202][T19696]  tick_do_update_jiffies64+0x113/0x1c0
[  366.205780][T19696]  tick_nohz_handler+0x8d/0x3d0
[  366.210652][T19696]  __hrtimer_run_queues+0x20f/0x5a0
[  366.215877][T19696]  hrtimer_interrupt+0x21a/0x460
[  366.220918][T19696]  __sysvec_apic_timer_interrupt+0x5f/0x1d0
[  366.227004][T19696]  sysvec_apic_timer_interrupt+0x6f/0x80
[  366.232665][T19696]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  366.238848][T19696]  _raw_spin_lock_irqsave+0x1f/0xb0
[  366.244340][T19696]  cgroup_file_notify+0x22/0x110
[  366.249402][T19696]  try_charge_memcg+0x324/0xa10
[  366.254332][T19696]  charge_memcg+0x51/0xc0
[  366.258679][T19696]  __mem_cgroup_charge+0x28/0xb0
[  366.263657][T19696]  shmem_get_folio_gfp+0x470/0xd50
[  366.268792][T19696]  shmem_write_begin+0xfc/0x1f0
[  366.273673][T19696]  generic_perform_write+0x184/0x490
[  366.278984][T19696]  shmem_file_write_iter+0xc5/0xf0
[  366.284255][T19696]  __kernel_write_iter+0x2d6/0x540
[  366.289557][T19696]  dump_user_range+0x61e/0x8f0
[  366.294426][T19696]  elf_core_dump+0x1de7/0x1f80
[  366.299208][T19696]  coredump_write+0xacf/0xdf0
[  366.303994][T19696]  vfs_coredump+0x24f7/0x2e60
[  366.308766][T19696]  get_signal+0xd84/0xf70
[  366.313165][T19696]  arch_do_signal_or_restart+0x96/0x450
[  366.318827][T19696]  irqentry_exit+0xf9/0x560
[  366.323442][T19696]  exc_general_protection+0x15b/0x1e0
[  366.328830][T19696]  asm_exc_general_protection+0x26/0x30
[  366.334393][T19696] 
[  366.336731][T19696] read to 0xffffffff86809a00 of 8 bytes by task 19696 on cpu 1:
[  366.344379][T19696]  mem_cgroup_flush_stats_ratelimited+0x29/0x70
[  366.350647][T19696]  count_shadow_nodes+0x6a/0x230
[  366.355700][T19696]  do_shrink_slab+0x63/0x680
[  366.360337][T19696]  shrink_slab+0x4f5/0x840
[  366.364785][T19696]  shrink_node+0x6a9/0x2010
[  366.369318][T19696]  do_try_to_free_pages+0x3f6/0xcd0
[  366.374549][T19696]  try_to_free_mem_cgroup_pages+0x1ab/0x410
[  366.380466][T19696]  try_charge_memcg+0x383/0xa10
[  366.385357][T19696]  charge_memcg+0x51/0xc0
[  366.389903][T19696]  __mem_cgroup_charge+0x28/0xb0
[  366.394877][T19696]  shmem_get_folio_gfp+0x470/0xd50
[  366.400010][T19696]  shmem_write_begin+0xfc/0x1f0
[  366.405055][T19696]  generic_perform_write+0x184/0x490
[  366.410373][T19696]  shmem_file_write_iter+0xc5/0xf0
[  366.415529][T19696]  __kernel_write_iter+0x2d6/0x540
[  366.420661][T19696]  dump_user_range+0x61e/0x8f0
[  366.425543][T19696]  elf_core_dump+0x1de7/0x1f80
[  366.430447][T19696]  coredump_write+0xacf/0xdf0
[  366.435143][T19696]  vfs_coredump+0x24f7/0x2e60
[  366.439841][T19696]  get_signal+0xd84/0xf70
[  366.444208][T19696]  arch_do_signal_or_restart+0x96/0x450
[  366.449878][T19696]  irqentry_exit+0xf9/0x560
[  366.454412][T19696]  exc_general_protection+0x15b/0x1e0
[  366.459804][T19696]  asm_exc_general_protection+0x26/0x30
[  366.465377][T19696] 
[  366.467759][T19696] value changed: 0x0000000100001b5b -> 0x0000000100001b5c
[  366.474987][T19696] 
[  366.477327][T19696] Reported by Kernel Concurrency Sanitizer on:
[  366.483508][T19696] CPU: 1 UID: 0 PID: 19696 Comm: syz.5.6060 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  366.493424][T19696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  366.503532][T19696] ==================================================================
[  366.636362][T12732] tipc: Disabling bearer <udp:syz2>
[  366.641645][T12732] tipc: Left network mode
[  366.647457][T19761] team0: Port device team_slave_0 added
[  366.765546][T12732] hsr_slave_0: left promiscuous mode
[  366.814102][T12732] hsr_slave_1: left promiscuous mode
[  366.946289][T19710] syz.5.6060 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  366.956240][T19710] CPU: 0 UID: 0 PID: 19710 Comm: syz.5.6060 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  366.956267][T19710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  366.956281][T19710] Call Trace:
[  366.956289][T19710]  <TASK>
[  366.956299][T19710]  __dump_stack+0x1d/0x30
[  366.956384][T19710]  dump_stack_lvl+0x95/0xd0
[  366.956406][T19710]  dump_stack+0x15/0x1b
[  366.956429][T19710]  dump_header+0x81/0x240
[  366.956449][T19710]  oom_kill_process+0x295/0x350
[  366.956534][T19710]  out_of_memory+0x97b/0xb80
[  366.956562][T19710]  try_charge_memcg+0x610/0xa10
[  366.956608][T19710]  charge_memcg+0x51/0xc0
[  366.956636][T19710]  __mem_cgroup_charge+0x28/0xb0
[  366.956703][T19710]  shmem_get_folio_gfp+0x470/0xd50
[  366.956734][T19710]  shmem_write_begin+0xfc/0x1f0
[  366.956766][T19710]  generic_perform_write+0x184/0x490
[  366.956831][T19710]  ? __mark_inode_dirty+0x1af/0x750
[  366.956862][T19710]  shmem_file_write_iter+0xc5/0xf0
[  366.956948][T19710]  __kernel_write_iter+0x2d6/0x540
[  366.957005][T19710]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  366.957173][T19710]  dump_user_range+0x61e/0x8f0
[  366.957201][T19710]  elf_core_dump+0x1de7/0x1f80
[  366.957236][T19710]  ? 0xffffffffff600000
[  366.957293][T19710]  coredump_write+0xacf/0xdf0
[  366.957326][T19710]  vfs_coredump+0x24f7/0x2e60
[  366.957363][T19710]  ? __memcg_slab_free_hook+0xbc/0x230
[  366.957421][T19710]  ? kmem_cache_free+0xe3/0x3a0
[  366.957447][T19710]  ? proc_coredump_connector+0x114/0x220
[  366.957474][T19710]  get_signal+0xd84/0xf70
[  366.957504][T19710]  arch_do_signal_or_restart+0x96/0x450
[  366.957557][T19710]  irqentry_exit+0xf9/0x560
[  366.957624][T19710]  ? force_sig+0x68/0x90
[  366.957645][T19710]  exc_general_protection+0x15b/0x1e0
[  366.957671][T19710]  asm_exc_general_protection+0x26/0x30
[  366.957798][T19710] RIP: 0033:0x7f3f8398f751
[  366.957818][T19710] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  366.957840][T19710] RSP: 002b:00002000000001a1 EFLAGS: 00010217
[  366.957859][T19710] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f3f8398f749
[  366.957872][T19710] RDX: 00007f3f823cdf20 RSI: 0000000000000058 RDI: 00007f3f823cdf20
[  366.957967][T19710] RBP: 00007f3f83a13f91 R08: 0000000000000000 R09: 0000000000000058
[  366.957982][T19710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  366.957996][T19710] R13: 00007f3f83be6128 R14: 00007f3f83be6090 R15: 00007ffd33570dc8
[  366.958016][T19710]  </TASK>
[  366.958024][T19710] memory: usage 306372kB, limit 307200kB, failcnt 32747
[  367.212679][T19710] memory+swap: usage 431444kB, limit 9007199254740988kB, failcnt 0
[  367.220773][T19710] kmem: usage 6260kB, limit 9007199254740988kB, failcnt 0
[  367.227981][T19710] Memory cgroup stats for /syz5:
[  367.439468][T12732] team0 (unregistering): Port device team_slave_0 removed
[  367.605166][T19710] cache 308113408
[  367.608836][T19710] rss 65536
[  367.611990][T19710] shmem 308113408
[  367.615634][T19710] mapped_file 0
[  367.619192][T19710] dirty 0
[  367.622172][T19710] writeback 0
[  367.625577][T19710] workingset_refault_anon 1034
[  367.630362][T19710] workingset_refault_file 2372
[  367.635296][T19710] swap 127987712
[  367.639082][T19710] swapcached 8192
[  367.642728][T19710] pgpgin 350106
[  367.646277][T19710] pgpgout 274867
[  367.650631][T19710] pgfault 198037
[  367.654193][T19710] pgmajfault 154
[  367.657842][T19710] inactive_anon 51425280
[  367.662191][T19710] active_anon 256491520
[  367.666355][T19710] inactive_file 0
[  367.670034][T19710] active_file 0
[  367.673505][T19710] unevictable 0
[  367.677007][T19710] hierarchical_memory_limit 314572800
[  367.682415][T19710] hierarchical_memsw_limit 9223372036854771712
[  367.688765][T19710] total_cache 308113408
[  367.693099][T19710] total_rss 65536
[  367.696754][T19710] total_shmem 308113408
[  367.700905][T19710] total_mapped_file 0
[  367.704944][T19710] total_dirty 0
[  367.708446][T19710] total_writeback 0
[  367.712263][T19710] total_workingset_refault_anon 1034
[  367.717576][T19710] total_workingset_refault_file 2372
[  367.722929][T19710] total_swap 127987712
[  367.727072][T19710] total_swapcached 8192
[  367.731579][T19710] total_pgpgin 350106
[  367.735680][T19710] total_pgpgout 274867
[  367.739736][T19710] total_pgfault 198037
[  367.743845][T19710] total_pgmajfault 154
[  367.747922][T19710] total_inactive_anon 51425280
[  367.752707][T19710] total_active_anon 256491520
[  367.757692][T19710] total_inactive_file 0
[  367.758668][T19761] team0: Port device team_slave_1 added
[  367.761977][T19710] total_active_file 0
[  367.761990][T19710] total_unevictable 0
[  367.762001][T19710] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.6060,pid=19696,uid=0
[  367.790557][T19710] Memory cgroup out of memory: Killed process 19696 (syz.5.6060) total-vm:90260kB, anon-rss:1164kB, file-rss:53248kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000
[  367.814804][T19761] batman_adv: batadv0: Adding interface: batadv_slave_0
[  367.821832][T19761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  367.848670][T19761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.101638][T19719] syz.5.6060 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  368.111678][T19719] CPU: 1 UID: 0 PID: 19719 Comm: syz.5.6060 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  368.111710][T19719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  368.111723][T19719] Call Trace:
[  368.111731][T19719]  <TASK>
[  368.111739][T19719]  __dump_stack+0x1d/0x30
[  368.111787][T19719]  dump_stack_lvl+0x95/0xd0
[  368.111807][T19719]  dump_stack+0x15/0x1b
[  368.111877][T19719]  dump_header+0x81/0x240
[  368.111900][T19719]  oom_kill_process+0x295/0x350
[  368.112005][T19719]  out_of_memory+0x97b/0xb80
[  368.112032][T19719]  try_charge_memcg+0x610/0xa10
[  368.112086][T19719]  charge_memcg+0x51/0xc0
[  368.112112][T19719]  __mem_cgroup_charge+0x28/0xb0
[  368.112142][T19719]  shmem_get_folio_gfp+0x470/0xd50
[  368.112177][T19719]  shmem_write_begin+0xfc/0x1f0
[  368.112229][T19719]  generic_perform_write+0x184/0x490
[  368.112263][T19719]  shmem_file_write_iter+0xc5/0xf0
[  368.112298][T19719]  __kernel_write_iter+0x2d6/0x540
[  368.112347][T19719]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  368.112384][T19719]  dump_user_range+0x61e/0x8f0
[  368.112415][T19719]  elf_core_dump+0x1de7/0x1f80
[  368.112451][T19719]  ? 0xffffffffff600000
[  368.112624][T19719]  coredump_write+0xacf/0xdf0
[  368.112655][T19719]  vfs_coredump+0x24f7/0x2e60
[  368.112737][T19719]  ? __memcg_slab_free_hook+0xbc/0x230
[  368.112773][T19719]  ? kmem_cache_free+0xe3/0x3a0
[  368.112865][T19719]  ? proc_coredump_connector+0x114/0x220
[  368.112889][T19719]  get_signal+0xd84/0xf70
[  368.112922][T19719]  arch_do_signal_or_restart+0x96/0x450
[  368.113030][T19719]  irqentry_exit+0xf9/0x560
[  368.113061][T19719]  ? force_sig+0x68/0x90
[  368.113095][T19719]  exc_general_protection+0x15b/0x1e0
[  368.113201][T19719]  asm_exc_general_protection+0x26/0x30
[  368.113301][T19719] RIP: 0033:0x7f3f8398f751
[  368.113319][T19719] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  368.113340][T19719] RSP: 002b:00002000000001a1 EFLAGS: 00010217
[  368.113360][T19719] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f3f8398f749
[  368.113373][T19719] RDX: 00007f3f823cdf20 RSI: 0000000000000058 RDI: 00007f3f823cdf20
[  368.113385][T19719] RBP: 00007f3f83a13f91 R08: 0000000000000000 R09: 0000000000000058
[  368.113456][T19719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  368.113482][T19719] R13: 00007f3f83be6128 R14: 00007f3f83be6090 R15: 00007ffd33570dc8
[  368.113503][T19719]  </TASK>
[  368.113510][T19719] memory: usage 307200kB, limit 307200kB, failcnt 34375
[  368.296840][T19761] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.307220][T19719] memory+swap: usage 432052kB, limit 9007199254740988kB, failcnt 0
[  368.307244][T19719] kmem: usage 6100kB, limit 9007199254740988kB, failcnt 0
[  368.313310][T19761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  368.321426][T19719] Memory cgroup stats for /syz5
[  368.329512][T19761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.337775][T19719] :
[  368.454483][T19719] cache 308273152
[  368.460609][T19719] rss 65536
[  368.463735][T19719] shmem 308273152
[  368.467594][T19719] mapped_file 0
[  368.471061][T19719] dirty 0
[  368.474141][T19719] writeback 0
[  368.477557][T19719] workingset_refault_anon 1034
[  368.482331][T19719] workingset_refault_file 2372
[  368.487277][T19719] swap 127983616
[  368.492913][T19719] swapcached 8192
[  368.496631][T19719] pgpgin 358344
[  368.500164][T19719] pgpgout 283066
[  368.503813][T19719] pgfault 198553
[  368.509863][T19719] pgmajfault 154
[  368.513442][T19719] inactive_anon 298078208
[  368.517840][T19719] active_anon 10260480
[  368.521922][T19719] inactive_file 0
[  368.525800][T19719] active_file 0
[  368.529294][T19719] unevictable 0
[  368.532803][T19719] hierarchical_memory_limit 314572800
[  368.538192][T19719] hierarchical_memsw_limit 9223372036854771712
[  368.544475][T19719] total_cache 308273152
[  368.548724][T19719] total_rss 65536
[  368.552345][T19719] total_shmem 308273152
[  368.556513][T19719] total_mapped_file 0
[  368.560482][T19719] total_dirty 0
[  368.564080][T19719] total_writeback 0
[  368.567961][T19719] total_workingset_refault_anon 1034
[  368.573370][T19719] total_workingset_refault_file 2372
[  368.578688][T19719] total_swap 127983616
[  368.582798][T19719] total_swapcached 8192
[  368.586944][T19719] total_pgpgin 358344
[  368.590931][T19719] total_pgpgout 283066
[  368.595153][T19719] total_pgfault 198553
[  368.599310][T19719] total_pgmajfault 154
[  368.603434][T19719] total_inactive_anon 298078208
[  368.608326][T19719] total_active_anon 10260480
[  368.613071][T19719] total_inactive_file 0
[  368.617598][T19719] total_active_file 0
[  368.621610][T19719] total_unevictable 0
[  368.625754][T19719] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.6060,pid=19702,uid=0
[  368.640759][T19719] Memory cgroup out of memory: Killed process 19702 (syz.5.6060) total-vm:90260kB, anon-rss:1164kB, file-rss:52352kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000
[  368.805197][T19761] hsr_slave_0: entered promiscuous mode
[  368.890522][T19761] hsr_slave_1: entered promiscuous mode
[  368.957059][T19761] debugfs: 'hsr0' already exists in 'hsr'
[  368.962976][T19761] Cannot create hsr debugfs directory
[  369.153997][T19714] syz.5.6060 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  369.163889][T19714] CPU: 0 UID: 0 PID: 19714 Comm: syz.5.6060 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  369.163959][T19714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  369.163973][T19714] Call Trace:
[  369.163982][T19714]  <TASK>
[  369.163992][T19714]  __dump_stack+0x1d/0x30
[  369.164020][T19714]  dump_stack_lvl+0x95/0xd0
[  369.164094][T19714]  dump_stack+0x15/0x1b
[  369.164113][T19714]  dump_header+0x81/0x240
[  369.164132][T19714]  oom_kill_process+0x295/0x350
[  369.164301][T19714]  out_of_memory+0x97b/0xb80
[  369.164353][T19714]  try_charge_memcg+0x610/0xa10
[  369.164390][T19714]  charge_memcg+0x51/0xc0
[  369.164423][T19714]  __mem_cgroup_charge+0x28/0xb0
[  369.164494][T19714]  shmem_get_folio_gfp+0x470/0xd50
[  369.164526][T19714]  shmem_write_begin+0xfc/0x1f0
[  369.164612][T19714]  generic_perform_write+0x184/0x490
[  369.164682][T19714]  shmem_file_write_iter+0xc5/0xf0
[  369.164720][T19714]  __kernel_write_iter+0x2d6/0x540
[  369.164739][T19714]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  369.164777][T19714]  dump_user_range+0x61e/0x8f0
[  369.164811][T19714]  elf_core_dump+0x1de7/0x1f80
[  369.164909][T19714]  ? 0xffffffffff600000
[  369.164935][T19714]  coredump_write+0xacf/0xdf0
[  369.164965][T19714]  vfs_coredump+0x24f7/0x2e60
[  369.164994][T19714]  ? __memcg_slab_free_hook+0xbc/0x230
[  369.165103][T19714]  ? kmem_cache_free+0xe3/0x3a0
[  369.165123][T19714]  ? proc_coredump_connector+0x114/0x220
[  369.165193][T19714]  get_signal+0xd84/0xf70
[  369.165234][T19714]  arch_do_signal_or_restart+0x96/0x450
[  369.165262][T19714]  irqentry_exit+0xf9/0x560
[  369.165294][T19714]  ? force_sig+0x68/0x90
[  369.165391][T19714]  exc_general_protection+0x15b/0x1e0
[  369.165416][T19714]  asm_exc_general_protection+0x26/0x30
[  369.165491][T19714] RIP: 0033:0x7f3f8398f751
[  369.165507][T19714] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  369.165598][T19714] RSP: 002b:00002000000001a1 EFLAGS: 00010217
[  369.165617][T19714] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f3f8398f749
[  369.165630][T19714] RDX: 00007f3f823cdf20 RSI: 0000000000000058 RDI: 00007f3f823cdf20
[  369.165643][T19714] RBP: 00007f3f83a13f91 R08: 0000000000000000 R09: 0000000000000058
[  369.165656][T19714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  369.165667][T19714] R13: 00007f3f83be6128 R14: 00007f3f83be6090 R15: 00007ffd33570dc8
[  369.165685][T19714]  </TASK>
[  369.165691][T19714] memory: usage 306916kB, limit 307200kB, failcnt 37380
[  369.417471][T19714] memory+swap: usage 425776kB, limit 9007199254740988kB, failcnt 0
[  369.425834][T19714] kmem: usage 6084kB, limit 9007199254740988kB, failcnt 0
[  369.433047][T19714] Memory cgroup stats for /syz5:
[  369.793337][T19714] cache 308449280
[  369.802038][T19714] rss 57344
[  369.805188][T19714] shmem 308449280
[  369.808819][T19714] mapped_file 0
[  369.812420][T19714] dirty 0
[  369.815423][T19714] writeback 0
[  369.818712][T19714] workingset_refault_anon 1034
[  369.823612][T19714] workingset_refault_file 2372
[  369.828485][T19714] swap 127995904
[  369.832070][T19714] swapcached 0
[  369.835440][T19714] pgpgin 366337
[  369.838917][T19714] pgpgout 291018
[  369.842469][T19714] pgfault 199051
[  369.846021][T19714] pgmajfault 154
[  369.849753][T19714] inactive_anon 236937216
[  369.854097][T19714] active_anon 71045120
[  369.858308][T19714] inactive_file 0
[  369.861953][T19714] active_file 0
[  369.865424][T19714] unevictable 0
[  369.868950][T19714] hierarchical_memory_limit 314572800
[  369.874343][T19714] hierarchical_memsw_limit 9223372036854771712
[  369.880663][T19714] total_cache 308449280
[  369.884819][T19714] total_rss 57344
[  369.888588][T19714] total_shmem 308449280
[  369.892752][T19714] total_mapped_file 0
[  369.896781][T19714] total_dirty 0
[  369.900272][T19714] total_writeback 0
[  369.904802][T19714] total_workingset_refault_anon 1034
[  369.910590][T19714] total_workingset_refault_file 2372
[  369.916372][T19714] total_swap 127995904
[  369.920465][T19714] total_swapcached 0
[  369.924472][T19714] total_pgpgin 366337
[  369.928699][T19714] total_pgpgout 291018
[  369.932795][T19714] total_pgfault 199051
[  369.936949][T19714] total_pgmajfault 154
[  369.941033][T19714] total_inactive_anon 236937216
[  369.946039][T19714] total_active_anon 71045120
[  369.950707][T19714] total_inactive_file 0
[  369.954919][T19714] total_active_file 0
[  369.959003][T19714] total_unevictable 0
[  369.963052][T19714] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.6060,pid=19698,uid=0
[  369.977926][T19714] Memory cgroup out of memory: Killed process 19698 (syz.5.6060) total-vm:90260kB, anon-rss:1164kB, file-rss:49024kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000
[  370.267506][T19727] syz.5.6060 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  370.277524][T19727] CPU: 0 UID: 0 PID: 19727 Comm: syz.5.6060 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  370.277551][T19727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  370.277564][T19727] Call Trace:
[  370.277570][T19727]  <TASK>
[  370.277578][T19727]  __dump_stack+0x1d/0x30
[  370.277670][T19727]  dump_stack_lvl+0x95/0xd0
[  370.277691][T19727]  dump_stack+0x15/0x1b
[  370.277767][T19727]  dump_header+0x81/0x240
[  370.277786][T19727]  oom_kill_process+0x295/0x350
[  370.277887][T19727]  out_of_memory+0x97b/0xb80
[  370.277908][T19727]  try_charge_memcg+0x610/0xa10
[  370.277981][T19727]  charge_memcg+0x51/0xc0
[  370.278009][T19727]  __mem_cgroup_charge+0x28/0xb0
[  370.278082][T19727]  shmem_get_folio_gfp+0x470/0xd50
[  370.278111][T19727]  shmem_write_begin+0xfc/0x1f0
[  370.278144][T19727]  generic_perform_write+0x184/0x490
[  370.278169][T19727]  ? __mark_inode_dirty+0x1af/0x750
[  370.278229][T19727]  shmem_file_write_iter+0xc5/0xf0
[  370.278258][T19727]  __kernel_write_iter+0x2d6/0x540
[  370.278276][T19727]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  370.278307][T19727]  dump_user_range+0x61e/0x8f0
[  370.278342][T19727]  elf_core_dump+0x1de7/0x1f80
[  370.278371][T19727]  ? 0xffffffffff600000
[  370.278396][T19727]  coredump_write+0xacf/0xdf0
[  370.278490][T19727]  vfs_coredump+0x24f7/0x2e60
[  370.278520][T19727]  ? __memcg_slab_free_hook+0xbc/0x230
[  370.278591][T19727]  ? kmem_cache_free+0xe3/0x3a0
[  370.278611][T19727]  ? proc_coredump_connector+0x114/0x220
[  370.278635][T19727]  get_signal+0xd84/0xf70
[  370.278665][T19727]  arch_do_signal_or_restart+0x96/0x450
[  370.278773][T19727]  irqentry_exit+0xf9/0x560
[  370.278799][T19727]  ? force_sig+0x68/0x90
[  370.278821][T19727]  exc_general_protection+0x15b/0x1e0
[  370.278845][T19727]  asm_exc_general_protection+0x26/0x30
[  370.278962][T19727] RIP: 0033:0x7f3f8398f751
[  370.278978][T19727] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  370.278996][T19727] RSP: 002b:00002000000001a1 EFLAGS: 00010217
[  370.279062][T19727] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f3f8398f749
[  370.279074][T19727] RDX: 00007f3f823cdf20 RSI: 0000000000000058 RDI: 00007f3f823cdf20
[  370.279086][T19727] RBP: 00007f3f83a13f91 R08: 0000000000000000 R09: 0000000000000058
[  370.279170][T19727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  370.279182][T19727] R13: 00007f3f83be6128 R14: 00007f3f83be6090 R15: 00007ffd33570dc8
[  370.279199][T19727]  </TASK>
[  370.279206][T19727] memory: usage 307200kB, limit 307200kB, failcnt 40015
[  370.344962][T19761] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  370.346769][T19727] memory+swap: usage 432096kB, limit 9007199254740988kB, failcnt 0
[  370.346786][T19727] kmem: usage 5748kB, limit 9007199254740988kB, failcnt 0
[  370.556134][T19727] Memory cgroup stats for /syz5:
[  370.558214][T19761] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  370.572793][T19761] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  370.595562][T19761] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  370.758516][T19727] cache 308584448
[  370.762199][T19727] rss 53248
[  370.765500][T19727] shmem 308584448
[  370.769134][T19727] mapped_file 0
[  370.772622][T19727] dirty 0
[  370.775569][T19727] writeback 0
[  370.778857][T19727] workingset_refault_anon 1034
[  370.783738][T19727] workingset_refault_file 2372
[  370.788750][T19727] swap 127995904
[  370.792325][T19727] swapcached 0
[  370.795738][T19727] pgpgin 373495
[  370.799232][T19727] pgpgout 298144
[  370.802829][T19727] pgfault 199498
[  370.806380][T19727] pgmajfault 154
[  370.810137][T19727] inactive_anon 126251008
[  370.814536][T19727] active_anon 182386688
[  370.818692][T19727] inactive_file 0
[  370.822347][T19727] active_file 0
[  370.825813][T19727] unevictable 0
[  370.829332][T19727] hierarchical_memory_limit 314572800
[  370.834944][T19727] hierarchical_memsw_limit 9223372036854771712
[  370.841148][T19727] total_cache 308584448
[  370.845304][T19727] total_rss 53248
[  370.848964][T19727] total_shmem 308584448
[  370.853221][T19727] total_mapped_file 0
[  370.857342][T19727] total_dirty 0
[  370.860826][T19727] total_writeback 0
[  370.864700][T19727] total_workingset_refault_anon 1034
[  370.870277][T19727] total_workingset_refault_file 2372
[  370.875653][T19727] total_swap 127995904
[  370.879756][T19727] total_swapcached 0
[  370.883662][T19727] total_pgpgin 373495
[  370.887767][T19727] total_pgpgout 298144
[  370.891896][T19727] total_pgfault 199498
[  370.896134][T19727] total_pgmajfault 154
[  370.900328][T19727] total_inactive_anon 126251008
[  370.905187][T19727] total_active_anon 182386688
[  370.909893][T19727] total_inactive_file 0
[  370.914094][T19727] total_active_file 0
[  370.918158][T19727] total_unevictable 0
[  370.922151][T19727] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.6060,pid=19691,uid=0
[  370.937123][T19727] Memory cgroup out of memory: Killed process 19691 (syz.5.6060) total-vm:90260kB, anon-rss:1164kB, file-rss:51072kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000
[  371.036786][T19761] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.173376][T19761] 8021q: adding VLAN 0 to HW filter on device team0
[  371.266271][T12732] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.273755][T12732] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.283787][T19716] syz.5.6060 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  371.293932][T19716] CPU: 0 UID: 0 PID: 19716 Comm: syz.5.6060 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  371.293996][T19716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  371.294008][T19716] Call Trace:
[  371.294015][T19716]  <TASK>
[  371.294023][T19716]  __dump_stack+0x1d/0x30
[  371.294053][T19716]  dump_stack_lvl+0x95/0xd0
[  371.294157][T19716]  dump_stack+0x15/0x1b
[  371.294180][T19716]  dump_header+0x81/0x240
[  371.294204][T19716]  oom_kill_process+0x295/0x350
[  371.294293][T19716]  out_of_memory+0x97b/0xb80
[  371.294318][T19716]  try_charge_memcg+0x610/0xa10
[  371.294403][T19716]  charge_memcg+0x51/0xc0
[  371.294437][T19716]  __mem_cgroup_charge+0x28/0xb0
[  371.294466][T19716]  shmem_get_folio_gfp+0x470/0xd50
[  371.294506][T19716]  shmem_write_begin+0xfc/0x1f0
[  371.294537][T19716]  generic_perform_write+0x184/0x490
[  371.294596][T19716]  shmem_file_write_iter+0xc5/0xf0
[  371.294631][T19716]  __kernel_write_iter+0x2d6/0x540
[  371.294651][T19716]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  371.294723][T19716]  dump_user_range+0x61e/0x8f0
[  371.294757][T19716]  elf_core_dump+0x1de7/0x1f80
[  371.294794][T19716]  ? 0xffffffffff600000
[  371.294821][T19716]  coredump_write+0xacf/0xdf0
[  371.294924][T19716]  vfs_coredump+0x24f7/0x2e60
[  371.294953][T19716]  ? __memcg_slab_free_hook+0xbc/0x230
[  371.295036][T19716]  ? kmem_cache_free+0xe3/0x3a0
[  371.295124][T19716]  ? proc_coredump_connector+0x114/0x220
[  371.295149][T19716]  get_signal+0xd84/0xf70
[  371.295246][T19716]  arch_do_signal_or_restart+0x96/0x450
[  371.295280][T19716]  irqentry_exit+0xf9/0x560
[  371.295388][T19716]  ? force_sig+0x68/0x90
[  371.295484][T19716]  exc_general_protection+0x15b/0x1e0
[  371.295516][T19716]  asm_exc_general_protection+0x26/0x30
[  371.295539][T19716] RIP: 0033:0x7f3f8398f751
[  371.295558][T19716] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  371.295603][T19716] RSP: 002b:00002000000001a1 EFLAGS: 00010217
[  371.295625][T19716] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f3f8398f749
[  371.295694][T19716] RDX: 00007f3f823cdf20 RSI: 0000000000000058 RDI: 00007f3f823cdf20
[  371.295710][T19716] RBP: 00007f3f83a13f91 R08: 0000000000000000 R09: 0000000000000058
[  371.295804][T19716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  371.295820][T19716] R13: 00007f3f83be6128 R14: 00007f3f83be6090 R15: 00007ffd33570dc8
[  371.295842][T19716]  </TASK>
[  371.295851][T19716] memory: usage 306776kB, limit 307200kB, failcnt 41824
[  371.450604][T12732] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.453376][T19716] memory+swap: usage 426800kB, limit 9007199254740988kB, failcnt 0
[  371.458805][T12732] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.464334][T19716] kmem: usage 5636kB, limit 9007199254740988kB, failcnt 0
[  371.574866][T19716] Memory cgroup stats for /syz5:
[  371.729996][T19761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  371.753951][T19716] cache 308682752
[  371.757629][T19716] rss 49152
[  371.760845][T19716] shmem 308682752
[  371.764612][T19716] mapped_file 0
[  371.768088][T19716] dirty 0
[  371.771054][T19716] writeback 0
[  371.774421][T19716] workingset_refault_anon 1034
[  371.779284][T19716] workingset_refault_file 2372
[  371.784085][T19716] swap 127991808
[  371.787643][T19716] swapcached 4096
[  371.791289][T19716] pgpgin 379411
[  371.794817][T19716] pgpgout 304036
[  371.798409][T19716] pgfault 199866
[  371.801980][T19716] pgmajfault 154
[  371.805605][T19716] inactive_anon 146485248
[  371.810001][T19716] active_anon 161988608
[  371.814273][T19716] inactive_file 0
[  371.817915][T19716] active_file 0
[  371.821402][T19716] unevictable 0
[  371.824878][T19716] hierarchical_memory_limit 314572800
[  371.830352][T19716] hierarchical_memsw_limit 9223372036854771712
[  371.836765][T19716] total_cache 308682752
[  371.840949][T19716] total_rss 49152
[  371.844633][T19716] total_shmem 308682752
[  371.848862][T19716] total_mapped_file 0
[  371.853010][T19716] total_dirty 0
[  371.856524][T19716] total_writeback 0
[  371.860363][T19716] total_workingset_refault_anon 1034
[  371.865769][T19716] total_workingset_refault_file 2372
[  371.871283][T19716] total_swap 127991808
[  371.875371][T19716] total_swapcached 4096
[  371.879609][T19716] total_pgpgin 379411
[  371.883709][T19716] total_pgpgout 304036
[  371.887836][T19716] total_pgfault 199866
[  371.891954][T19716] total_pgmajfault 154
[  371.896039][T19716] total_inactive_anon 146485248
[  371.901182][T19716] total_active_anon 161988608
[  371.905927][T19716] total_inactive_file 0
[  371.910099][T19716] total_active_file 0
[  371.914098][T19716] total_unevictable 0
[  371.918117][T19716] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.6060,pid=19697,uid=0
[  371.933116][T19716] Memory cgroup out of memory: Killed process 19697 (syz.5.6060) total-vm:90260kB, anon-rss:1164kB, file-rss:53120kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:1000
[  372.540731][T19761] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.470530][T19761] veth0_vlan: entered promiscuous mode
[  373.500135][T19700] syz.5.6060 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  373.510194][T19700] CPU: 0 UID: 0 PID: 19700 Comm: syz.5.6060 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  373.510249][T19700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  373.510262][T19700] Call Trace:
[  373.510272][T19700]  <TASK>
[  373.510282][T19700]  __dump_stack+0x1d/0x30
[  373.510389][T19700]  dump_stack_lvl+0x95/0xd0
[  373.510409][T19700]  dump_stack+0x15/0x1b
[  373.510431][T19700]  dump_header+0x81/0x240
[  373.510455][T19700]  oom_kill_process+0x295/0x350
[  373.510576][T19700]  out_of_memory+0x97b/0xb80
[  373.510604][T19700]  try_charge_memcg+0x610/0xa10
[  373.510648][T19700]  charge_memcg+0x51/0xc0
[  373.510684][T19700]  __mem_cgroup_charge+0x28/0xb0
[  373.510740][T19700]  shmem_get_folio_gfp+0x470/0xd50
[  373.510768][T19700]  shmem_write_begin+0xfc/0x1f0
[  373.510793][T19700]  generic_perform_write+0x184/0x490
[  373.510878][T19700]  ? __mark_inode_dirty+0x1af/0x750
[  373.510906][T19700]  shmem_file_write_iter+0xc5/0xf0
[  373.510954][T19700]  __kernel_write_iter+0x2d6/0x540
[  373.511048][T19700]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  373.511095][T19700]  dump_user_range+0x61e/0x8f0
[  373.511130][T19700]  elf_core_dump+0x1de7/0x1f80
[  373.511240][T19700]  ? 0xffffffffff600000
[  373.511290][T19700]  coredump_write+0xacf/0xdf0
[  373.511319][T19700]  vfs_coredump+0x24f7/0x2e60
[  373.511354][T19700]  ? __memcg_slab_free_hook+0xbc/0x230
[  373.511391][T19700]  ? kmem_cache_free+0xe3/0x3a0
[  373.511430][T19700]  ? proc_coredump_connector+0x114/0x220
[  373.511461][T19700]  get_signal+0xd84/0xf70
[  373.511491][T19700]  arch_do_signal_or_restart+0x96/0x450
[  373.511519][T19700]  irqentry_exit+0xf9/0x560
[  373.511543][T19700]  ? force_sig+0x68/0x90
[  373.511571][T19700]  exc_general_protection+0x15b/0x1e0
[  373.511597][T19700]  asm_exc_general_protection+0x26/0x30
[  373.511693][T19700] RIP: 0033:0x7f3f8398f751
[  373.511712][T19700] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  373.511732][T19700] RSP: 002b:00002000000001a1 EFLAGS: 00010217
[  373.511749][T19700] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f3f8398f749
[  373.511762][T19700] RDX: 00007f3f823cdf20 RSI: 0000000000000058 RDI: 00007f3f823cdf20
[  373.511775][T19700] RBP: 00007f3f83a13f91 R08: 0000000000000000 R09: 0000000000000058
[  373.511835][T19700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  373.511851][T19700] R13: 00007f3f83be6128 R14: 00007f3f83be6090 R15: 00007ffd33570dc8
[  373.511873][T19700]  </TASK>
[  373.511881][T19700] memory: usage 307200kB, limit 307200kB, failcnt 49176
[  373.592952][T19761] veth1_vlan: entered promiscuous mode
[  373.594731][T19700] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0
[  373.608298][T19761] veth0_macvtap: entered promiscuous mode
[  373.610361][T19700] kmem: usage 5644kB, limit 9007199254740988kB, failcnt 0
[  373.628104][T19761] veth1_macvtap: entered promiscuous mode
[  373.629992][T19700] Memory cgroup stats for /syz5:
[  373.730359][T19700] cache 285765632
[  373.807568][T19700] rss 45056
[  373.810727][T19700] shmem 285765632
[  373.814401][T19700] mapped_file 0
[  373.817966][T19700] dirty 0
[  373.820951][T19700] writeback 0
[  373.824315][T19700] workingset_refault_anon 1034
[  373.829087][T19700] workingset_refault_file 2717
[  373.833894][T19700] swap 117841920
[  373.837450][T19700] swapcached 0
[  373.840928][T19700] pgpgin 381595
[  373.844456][T19700] pgpgout 311817
[  373.848015][T19700] pgfault 199984
[  373.851610][T19700] pgmajfault 158
[  373.855173][T19700] inactive_anon 110301184
[  373.859602][T19700] active_anon 175509504
[  373.863839][T19700] inactive_file 0
[  373.867565][T19700] active_file 0
[  373.871110][T19700] unevictable 0
[  373.874604][T19700] hierarchical_memory_limit 314572800
[  373.880001][T19700] hierarchical_memsw_limit 9223372036854771712
[  373.883237][T19761] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.886266][T19700] total_cache 285765632
[  373.895348][T19761] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.897686][T19700] total_rss 45056
[  373.897697][T19700] total_shmem 285765632
[  373.897706][T19700] total_mapped_file 0
[  373.897714][T19700] total_dirty 0
[  373.897722][T19700] total_writeback 0
[  373.924228][T19700] total_workingset_refault_anon 1034
[  373.929642][T19700] total_workingset_refault_file 2717
[  373.935056][T19700] total_swap 117841920
[  373.939128][T19700] total_swapcached 0
[  373.943143][T19700] total_pgpgin 381595
[  373.947164][T19700] total_pgpgout 311817
[  373.951345][T19700] total_pgfault 199984
[  373.955440][T19700] total_pgmajfault 158
[  373.959653][T19700] total_inactive_anon 110301184
[  373.964543][T19700] total_active_anon 175509504
[  373.969304][T19700] total_inactive_file 0
[  373.973487][T19700] total_active_file 0
[  373.977504][T19700] total_unevictable 0
[  373.981527][T19700] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.6060,pid=19708,uid=0
[  373.996310][T19700] Memory cgroup out of memory: Killed process 19708 (syz.5.6060) total-vm:90260kB, anon-rss:1164kB, file-rss:53888kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000
[  374.024284][T19840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  374.039182][T19840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  374.128490][T19840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  374.189508][T19840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  374.339074][T19689] syz.5.6060 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  374.348982][T19689] CPU: 1 UID: 0 PID: 19689 Comm: syz.5.6060 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  374.349088][T19689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  374.349102][T19689] Call Trace:
[  374.349111][T19689]  <TASK>
[  374.349121][T19689]  __dump_stack+0x1d/0x30
[  374.349149][T19689]  dump_stack_lvl+0x95/0xd0
[  374.349169][T19689]  dump_stack+0x15/0x1b
[  374.349258][T19689]  dump_header+0x81/0x240
[  374.349315][T19689]  oom_kill_process+0x295/0x350
[  374.349342][T19689]  out_of_memory+0x97b/0xb80
[  374.349369][T19689]  try_charge_memcg+0x610/0xa10
[  374.349481][T19689]  charge_memcg+0x51/0xc0
[  374.349574][T19689]  __mem_cgroup_charge+0x28/0xb0
[  374.349670][T19689]  shmem_get_folio_gfp+0x470/0xd50
[  374.349766][T19689]  shmem_write_begin+0xfc/0x1f0
[  374.349795][T19689]  generic_perform_write+0x184/0x490
[  374.349831][T19689]  shmem_file_write_iter+0xc5/0xf0
[  374.349877][T19689]  __kernel_write_iter+0x2d6/0x540
[  374.349896][T19689]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  374.349925][T19689]  dump_user_range+0x61e/0x8f0
[  374.350008][T19689]  elf_core_dump+0x1de7/0x1f80
[  374.350049][T19689]  ? 0xffffffffff600000
[  374.350073][T19689]  coredump_write+0xacf/0xdf0
[  374.350140][T19689]  vfs_coredump+0x24f7/0x2e60
[  374.350177][T19689]  ? __memcg_slab_free_hook+0xbc/0x230
[  374.350204][T19689]  ? kmem_cache_free+0xe3/0x3a0
[  374.350233][T19689]  ? proc_coredump_connector+0x114/0x220
[  374.350261][T19689]  get_signal+0xd84/0xf70
[  374.350357][T19689]  arch_do_signal_or_restart+0x96/0x450
[  374.350430][T19689]  irqentry_exit+0xf9/0x560
[  374.350457][T19689]  ? force_sig+0x68/0x90
[  374.350512][T19689]  exc_general_protection+0x15b/0x1e0
[  374.350542][T19689]  asm_exc_general_protection+0x26/0x30
[  374.350578][T19689] RIP: 0033:0x7f3f8398f751
[  374.350593][T19689] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  374.350652][T19689] RSP: 002b:00002000000001a1 EFLAGS: 00010217
[  374.350669][T19689] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f3f8398f749
[  374.350681][T19689] RDX: 00007f3f823cdf20 RSI: 0000000000000058 RDI: 00007f3f823cdf20
[  374.350693][T19689] RBP: 00007f3f83a13f91 R08: 0000000000000000 R09: 0000000000000058
[  374.350707][T19689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  374.350722][T19689] R13: 00007f3f83be6128 R14: 00007f3f83be6090 R15: 00007ffd33570dc8
[  374.350814][T19689]  </TASK>
[  374.350822][T19689] memory: usage 307196kB, limit 307200kB, failcnt 50178
[  374.600332][T19689] memory+swap: usage 412964kB, limit 9007199254740988kB, failcnt 0
[  374.608358][T19689] kmem: usage 5368kB, limit 9007199254740988kB, failcnt 0
[  374.615687][T19689] Memory cgroup stats for /syz5:
[  374.789363][T19689] cache 294047744
[  374.798137][T19689] rss 45056
[  374.801259][T19689] shmem 291950592
[  374.805008][T19689] mapped_file 1331200
[  374.808994][T19689] dirty 0
[  374.812081][T19689] writeback 0
[  374.815448][T19689] workingset_refault_anon 1034
[  374.820285][T19689] workingset_refault_file 4395
[  374.825129][T19689] swap 127995904
[  374.828862][T19689] swapcached 0
[  374.832350][T19689] pgpgin 395747
[  374.835849][T19689] pgpgout 323947
[  374.839446][T19689] pgfault 200785
[  374.843034][T19689] pgmajfault 168
[  374.846623][T19689] inactive_anon 265859072
[  374.851025][T19689] active_anon 24907776
[  374.855100][T19689] inactive_file 2097152
[  374.859316][T19689] active_file 0
[  374.862784][T19689] unevictable 0
[  374.866247][T19689] hierarchical_memory_limit 314572800
[  374.871720][T19689] hierarchical_memsw_limit 9223372036854771712
[  374.878091][T19689] total_cache 294047744
[  374.882256][T19689] total_rss 45056
[  374.886030][T19689] total_shmem 291950592
[  374.890262][T19689] total_mapped_file 1331200
[  374.894874][T19689] total_dirty 0
[  374.898566][T19689] total_writeback 0
[  374.902392][T19689] total_workingset_refault_anon 1034
[  374.907720][T19689] total_workingset_refault_file 4395
[  374.913018][T19689] total_swap 127995904
[  374.917213][T19689] total_swapcached 0
[  374.921647][T19689] total_pgpgin 395747
[  374.925684][T19689] total_pgpgout 323947
[  374.929762][T19689] total_pgfault 200785
[  374.933856][T19689] total_pgmajfault 168
[  374.938064][T19689] total_inactive_anon 265859072
[  374.942922][T19689] total_active_anon 24907776
[  374.947651][T19689] total_inactive_file 2097152
[  374.952390][T19689] total_active_file 0
[  374.956440][T19689] total_unevictable 0
[  374.960451][T19689] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.6060,pid=19699,uid=0
[  374.975390][T19689] Memory cgroup out of memory: Killed process 19699 (syz.5.6060) total-vm:90260kB, anon-rss:1164kB, file-rss:55172kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000
[  375.839511][T19721] syz.5.6060 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  375.851123][T19721] CPU: 1 UID: 0 PID: 19721 Comm: syz.5.6060 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  375.851184][T19721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  375.851200][T19721] Call Trace:
[  375.851209][T19721]  <TASK>
[  375.851219][T19721]  __dump_stack+0x1d/0x30
[  375.851250][T19721]  dump_stack_lvl+0x95/0xd0
[  375.851276][T19721]  dump_stack+0x15/0x1b
[  375.851335][T19721]  dump_header+0x81/0x240
[  375.851360][T19721]  oom_kill_process+0x295/0x350
[  375.851382][T19721]  out_of_memory+0x97b/0xb80
[  375.851447][T19721]  try_charge_memcg+0x610/0xa10
[  375.851484][T19721]  charge_memcg+0x51/0xc0
[  375.851576][T19721]  __mem_cgroup_charge+0x28/0xb0
[  375.851632][T19721]  filemap_add_folio+0x111/0x360
[  375.851657][T19721]  __filemap_get_folio_mpol+0x326/0x650
[  375.851727][T19721]  filemap_fault+0x44d/0xb70
[  375.851751][T19721]  __do_fault+0xbc/0x200
[  375.851781][T19721]  handle_mm_fault+0xfab/0x2c60
[  375.851830][T19721]  ? _raw_spin_lock+0x52/0xa0
[  375.851851][T19721]  ? __pte_offset_map_lock+0x1d9/0x240
[  375.851878][T19721]  __get_user_pages+0x1024/0x1ed0
[  375.851940][T19721]  get_dump_page+0xb5/0x250
[  375.851968][T19721]  dump_user_range+0x145/0x8f0
[  375.852041][T19721]  elf_core_dump+0x1de7/0x1f80
[  375.852088][T19721]  ? 0xffffffffff600000
[  375.852119][T19721]  coredump_write+0xacf/0xdf0
[  375.852232][T19721]  vfs_coredump+0x24f7/0x2e60
[  375.852270][T19721]  ? __memcg_slab_free_hook+0xbc/0x230
[  375.852299][T19721]  ? kmem_cache_free+0xe3/0x3a0
[  375.852381][T19721]  ? proc_coredump_connector+0x114/0x220
[  375.852411][T19721]  get_signal+0xd84/0xf70
[  375.852456][T19721]  arch_do_signal_or_restart+0x96/0x450
[  375.852488][T19721]  irqentry_exit+0xf9/0x560
[  375.852516][T19721]  ? force_sig+0x68/0x90
[  375.852538][T19721]  exc_general_protection+0x15b/0x1e0
[  375.852567][T19721]  asm_exc_general_protection+0x26/0x30
[  375.852590][T19721] RIP: 0033:0x7f3f8398f751
[  375.852609][T19721] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  375.852629][T19721] RSP: 002b:00002000000001a1 EFLAGS: 00010217
[  375.852645][T19721] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f3f8398f749
[  375.852701][T19721] RDX: 00007f3f823cdf20 RSI: 0000000000000058 RDI: 00007f3f823cdf20
[  375.852713][T19721] RBP: 00007f3f83a13f91 R08: 0000000000000000 R09: 0000000000000058
[  375.852726][T19721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  375.852737][T19721] R13: 00007f3f83be6128 R14: 00007f3f83be6090 R15: 00007ffd33570dc8
[  375.852759][T19721]  </TASK>
[  375.852784][T19721] memory: usage 307200kB, limit 307200kB, failcnt 52352
[  376.115351][T19721] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0
[  376.123361][T19721] kmem: usage 5268kB, limit 9007199254740988kB, failcnt 0
[  376.130496][T19721] Memory cgroup stats for /syz5:
[  376.133197][T19721] cache 309149696
[  376.141799][T19721] rss 24576
[  376.144957][T19721] shmem 309137408
[  376.148615][T19721] mapped_file 0
[  376.152101][T19721] dirty 0
[  376.155092][T19721] writeback 0
[  376.158380][T19721] workingset_refault_anon 1034
[  376.163291][T19721] workingset_refault_file 7092
[  376.168257][T19721] swap 127995904
[  376.171803][T19721] swapcached 0
[  376.175198][T19721] pgpgin 411485
[  376.178733][T19721] pgpgout 336002
[  376.182279][T19721] pgfault 201673
[  376.185837][T19721] pgmajfault 214