last executing test programs:

4m11.245574869s ago: executing program 2 (id=402):
socket$inet6(0xa, 0x3, 0x8000000003c)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='memory.stat\x00', 0x275a, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r1 = socket(0x10, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "d1b29b99d21d88a2"}, 0x28)
write$binfmt_script(r2, &(0x7f0000000780)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
close_range(r1, r2, 0x0)

4m11.19205074s ago: executing program 2 (id=403):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10)
r3 = fsopen(&(0x7f0000000100)='selinuxfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x6, 0x0, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fspick(r4, &(0x7f00000002c0)='.\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb42}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000004c0)='btrfs_space_reservation\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169)
pwritev(r6, 0x0, 0x0, 0x8, 0x365)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x6, 0x100, &(0x7f00000000c0)="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"})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=<r9=>0x0, &(0x7f0000000300))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)

4m10.494137699s ago: executing program 2 (id=415):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) (fail_nth: 1)

4m10.245343683s ago: executing program 2 (id=417):
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffefffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x5b1, &(0x7f0000000a00)="$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")
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
write$binfmt_register(r3, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000040)=0xdc7d)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
prctl$PR_SET_UNALIGN(0x6, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x150, 0x210, 0xfeffffff, 0xa8, 0xa8, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @rand_addr, @empty, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @broadcast, @loopback}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388)
read(r6, &(0x7f0000000500)=""/28, 0x1c)
getpriority(0x7, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c80c)

4m10.057265816s ago: executing program 2 (id=424):
syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000000000), &(0x7f0000000040))
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000300)="$eJzs2j+LHGUcB/DfnJHEC5dd8R8JiA9aqM2Q3doihyQgLiiaFaIgmXizuuy4e+wsBytirtLWl2AtlnaCpLS5xldgYXfNlSnEkWRjcnesxSHein4+zXzhmS88D8/w8BSz/9rXn44GdT4oZrGWZbF2JXbjbhbtWIs/7carL9/46fl3b7z/5mavd/WdlK5tXu90U0oXXvjxg8+/e/HO7Px731/44WzstT/cP+j+uvfs3sX9369/MqzTsE7jySwV6dZkMituVWXaGtajPKW3q7KoyzQc1+X0yPigmmxvz1Mx3tpY356WdZ2K8TyNynmaTdJsOk/Fx8VwnPI8Txvrwd/R//Zu08RB8/jNaJrmiW/i/J3Y+CVakT2ZsqeuZM/czJ7bzS4eNE1r1VPlH2H//98OHernIqqvdvo7/cVzMb45iGFUUcblaMVvce8zeWCRr73Ru3o53deOL6vbD/q3d/qPHe13ohXt5f3Oop+O9s/G+uF+N1rx9PJ+d2n/XLzy0qF+Hq34+aOYRBVbca/7qP9FJ6XX3+od61+6/x4AwH9Nnh5aen/L878aX/RPcD88dr86E5fOrHbtRNTzz0ZFVZVTQRCEh2HVJxOn4dGmr3omAAAAAAAAAAAAnMRp/E646jUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/bn8EAAD//xrx1cI=")
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
pipe2(&(0x7f0000000000), 0x0)
syz_emit_ethernet(0x1e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180)

4m9.341323816s ago: executing program 2 (id=433):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', <r0=>0x0})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffff54}, 0x18)
creat(&(0x7f00000000c0)='./file0\x00', 0xc54dc60091bfcacc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000008a772da8da51b5d37000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'macvtap0\x00'}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffffc}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x2000, 0x400, &(0x7f00000002c0))

4m9.341132076s ago: executing program 32 (id=433):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', <r0=>0x0})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffff54}, 0x18)
creat(&(0x7f00000000c0)='./file0\x00', 0xc54dc60091bfcacc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000008a772da8da51b5d37000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'macvtap0\x00'}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffffc}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x2000, 0x400, &(0x7f00000002c0))

3m39.689180419s ago: executing program 5 (id=893):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
pipe2$9p(&(0x7f0000000180), 0x84000)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="0000000000000080000000000000000020000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

3m39.639755419s ago: executing program 5 (id=895):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3], [0x0, 0x8, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0)

3m39.61173364s ago: executing program 5 (id=896):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10)
r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0xf, 0x0)
ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x47cdc)

3m39.534132281s ago: executing program 5 (id=898):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0)
acct(&(0x7f0000000140)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x392)
r1 = creat(&(0x7f0000000240)='./file1\x00', 0x0)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write(r2, &(0x7f0000000180)="2cd889f0253e14", 0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r3 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004880}, 0x8000002)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3b, 0x3, @thr={&(0x7f00000000c0)="88db8d3001e6c8132bd8e0f8ac514f8bc7f364f7ce54a11ab086fa9bb11df77a35b36ebd9879868556a71eb305e3af8d647f05205f1ae6d4ff937f2eb8d909a9966dd832b965aad04bdfb1ea778d21a92a1eab7928", &(0x7f0000000540)="c43ff77b945ce2d2828417fe4116ac3eb2880407aeb1d8b91bcbe90d1d9f21be32c9210b381891caad4316403a8497189b876e26d66670dae7456e592b55964064fe9d4cb3e555fd633b"}}, &(0x7f00000005c0))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000)
io_submit(0x0, 0x0, 0x0)
mmap(&(0x7f0000b07000/0x4000)=nil, 0x4000, 0x100000a, 0x2010, r4, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001980)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="0400"], 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

3m39.300781064s ago: executing program 5 (id=902):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f0000000940), 0x1, 0x79d, &(0x7f0000000980)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=@newlink={0x44, 0x10, 0x403, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x7}]}}}]}, 0x44}, 0x1, 0xba01}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r5, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
sendfile(r6, r7, &(0x7f0000000480)=0x2, 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x5c, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x7, 0xa}, {0xfff3}}, [{0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x40004}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x10001}]}, 0x5c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r10=>0x0})
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb8)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r14}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x811}, [@map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x3b}, @map_val={0x18, 0x3, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0xffffffff}, @map_val={0x18, 0x7, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xd7, &(0x7f00000004c0)=""/215, 0x41100, 0x2, '\x00', r14, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xf, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r12, r12, r12, r12, r11, r12], 0x0, 0x10, 0xd0ad}, 0x94)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x6}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xc0}, @ETHTOOL_A_LINKMODES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x800)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)
close(r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='iocost_iocg_forgive_debt\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c00014000000000000001010c0004400000000000000006080002"], 0x188}}, 0x0)

3m38.600461524s ago: executing program 5 (id=912):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
pipe2$9p(&(0x7f0000000180), 0x84000)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="0000000000000080000000000000000020000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

3m38.531960535s ago: executing program 33 (id=912):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
pipe2$9p(&(0x7f0000000180), 0x84000)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="0000000000000080000000000000000020000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

4.220725181s ago: executing program 6 (id=4595):
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000140)={'veth0_to_hsr\x00', {0x2, 0x4e21, @rand_addr=0x64010100}})

4.142920112s ago: executing program 6 (id=4597):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)

4.142270482s ago: executing program 6 (id=4598):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000))
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r4)
syz_usb_connect(0x4, 0x24, &(0x7f0000000480)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r4, 0x40095505, 0x0)
pause()
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x10})
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=@security={'security\x00', 0x64, 0x4, 0x4f8, 0x100000c, 0xc0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x460, 0x460, 0x460, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff, 0x3}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x2c8, 0x308, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x2, 0x1}}, @common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x558)
unshare(0x20000400)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r9, 0xffffffffffffffff, 0x4, r8}, 0x10)

1.759171516s ago: executing program 0 (id=4639):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4000004)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=")
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xb1, &(0x7f0000000640)=""/177, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
r1 = open(&(0x7f0000000180)='./file2\x00', 0x4000, 0x0)
preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18)
flock(0xffffffffffffffff, 0x8)
syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000040), &(0x7f0000000300))
r4 = socket(0x10, 0x3, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000700)={{0x3, 0x1}, 0x100, './file2\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000030000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wg2\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}]}}]}, 0x40}}, 0x0)

1.686097257s ago: executing program 0 (id=4643):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0x4}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000140)="24000000010006", 0x7)

1.665471797s ago: executing program 0 (id=4645):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x4, &(0x7f0000000280)=@raw=[@jmp={0x5, 0x1, 0xb, 0x6, 0x8, 0x10, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc3100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x1], &(0x7f00000004c0)=[{0x4, 0x3, 0x4, 0x3}], 0x10, 0xffffff92}, 0x94)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)={<r1=>0x0, @loopback, @dev}, &(0x7f00000005c0)=0xc)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r0, r1, 0x25, 0x9, @val=@netfilter={0x5, 0x1, 0x97, 0x1}}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x800020, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_read_part_table(0x5d6, &(0x7f0000000880)="$eJzs0r1rW1cYB+D33lZROgSJEEihSyEmk5oULSlUohSjCi9OCGnJ0H8gGQoJdPBgpCqZU3vqZuOPgvFiOrSToYuxDMYFeTLy6rF0MF00lFtkXbe07sdg7NbmeQade373vHrP5ZzgQkvjpyzLkojIisfZF/mbiGfv/nP1x6uNjybefvDhw0cRSTyNiMl3nn43fJPkK47/9Zt8fj+fTxSrvYXt8cPV8s6t3e7YUhpRGOZXIqI9rG8vl072S+L9038yl8hafbP04uXz5qup+pO95vRBIc9n7y3WWj/erD1OR3dqPf2t5PenyP7ijp2u/9U8n7t2p9DtDapb+bySnLYT/0drv2RDb2bD8/9g+mD+RqffGUzeXincrVzvb7Rmjs79+78rL5zrZgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEttrb5ZevHyeRoR2WujqPHWl43PZu8t1lqf3Kw9Tkfhenqm/ZuvpupP9prTB2O9977+Ibsac9fuFLpXBtWtfF0l+UNZ62x2w3n78/nP3+j0O4PJ2yuf361c72+0ZpKvng3Xvf5fbxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuDAaP+9HxMNHEUl8GhHjaXl5mGfFiPL+yfX3i6NxoljtLWyPH66Wd27tdseWHuT5ehrRjjeOnr89+p06Li2NhsJoaEdEerbfxr/7NQAA//+laYDO")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, 0x0, &(0x7f0000000340)=r5}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x58, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x4048010)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r10)
sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, r11, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x38}}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000e80), r10)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

1.48193744s ago: executing program 1 (id=4648):
bpf$MAP_CREATE(0x0, 0x0, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
r1 = socket$kcm(0x10, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xee00}}, './file0\x00'})
openat$cgroup_ro(r2, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x75}], 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)={0x0, 0xfb, 0x38, 0x0, 0x55, "39ed3204b4948dbaac39b015c6e5b224", "96bd7c8fd296170c60905aeb7c1915b6763df884ac3de49ca96f7c7ca16010849e3b2d"}, 0x38, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="5992000000000000140003006d6163767461703000000000000000000c002b8008000300080000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8044)
sendmsg$can_bcm(r4, 0x0, 0x0)
r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r9, 0x0, 0xfffffffff7fffffe}, 0x18)
r10 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
ftruncate(r10, 0x2007ffc)
sendfile(r10, r10, 0x0, 0x800000009)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat$cgroup_ro(r7, &(0x7f0000000280)='cpuset.memory_pressure\x00', 0x0, 0x0)

1.229093553s ago: executing program 1 (id=4649):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x1, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r5 = syz_io_uring_setup(0x6b88, &(0x7f0000000000)={0x0, 0x7c87, 0x800, 0x0, 0x39}, 0x0, &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8<X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8\xfb\x16\x8e\x8b-W\xd4\xc9\xbc\x94CR[Du8U^\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1:\xbd+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96', 0x5)
syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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")

1.091554645s ago: executing program 6 (id=4650):
r0 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4800)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {0x2}, {}, @raw32={[0x0, 0x0, 0x3]}}], 0x1c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e052500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x24044, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0)
getresuid(&(0x7f0000000000)=<r5=>0x0, &(0x7f0000000080), &(0x7f00000000c0)=<r6=>0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xb00000, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@grpid}, {@acl}], [{@pcr={'pcr', 0x3d, 0x12}}, {@appraise_type}, {@fowner_gt={'fowner>', r6}}, {@uid_lt={'uid<', r5}}, {@fowner_lt={'fowner<', r5}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_eq={'uid', 0x3d, r6}}, {@subj_type}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]})
r7 = semget$private(0x0, 0x6, 0x3b9)
semtimedop(r7, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0)
semop(r7, &(0x7f0000000180)=[{}, {}], 0x2)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r8}, 0x10)
r9 = socket$kcm(0x29, 0x5, 0x0)
sendmsg(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000000ac0)="93", 0x1}], 0x1}, 0xc810)
close(r9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x0, &(0x7f00000000c0)})
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000b80)={0x2, 0x8, 0x8001, 0x5}, 0x10)
r10 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r10, &(0x7f00000000c0), 0x0, 0x800000, 0x0)

1.023967456s ago: executing program 1 (id=4651):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
inotify_init()
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
r2 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='powernv_throttle\x00', r3}, 0xf)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum64={0x3, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x30, 0x5f, 0x2e]}}, 0x0, 0x29, 0x0, 0x1, 0x9}, 0x28)

998.905976ms ago: executing program 1 (id=4652):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x2, 0x7ffc0003}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c)
r1 = syz_io_uring_setup(0x466c, &(0x7f0000000380)={0x0, 0x0, 0x10100, 0x3, 0x377}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
r5 = socket(0xa, 0x5, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0x5}, 0x1c)
listen(r5, 0x7)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r6, 0x0, 0x0, r6})
io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f0000000400)={0x3, 0x200, 0x4, 0x5, 0x6, 0x9d, 0x100000001, 0x72a}, &(0x7f0000000440)={0x6, 0x200, 0x4, 0x9, 0x4, 0xffff, 0x9, 0x8f10}, &(0x7f0000000480)={0x9, 0x9, 0x0, 0x8, 0xfffffffffffffffa, 0x4, 0x8, 0x1ff}, &(0x7f0000000500)={0x0, 0x3938700}, &(0x7f0000000580)={&(0x7f0000000540)={[0x5]}, 0x8})
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000280)={0x2, r6, 0x0, {0x6, 0x7}, 0x4}, 0x1)
r7 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "541a62d9471f6de01752f1a49aaec1ec0eb85721ee4a08716c257489594b72ecd5a2dbf7e1736ada8be424630182847a7998f90db6cef6e5928387dd2f84ad5e", 0x11}, 0x48, r7)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)

983.153366ms ago: executing program 4 (id=4653):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)

967.961007ms ago: executing program 4 (id=4654):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xd, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
listen(0xffffffffffffffff, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x220c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, 0x0, 0x0)
listen(r4, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x810)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0)

950.184047ms ago: executing program 4 (id=4655):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0x4}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000140)="24000000010006", 0x7)

921.272867ms ago: executing program 3 (id=4657):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

904.213008ms ago: executing program 4 (id=4658):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
inotify_init()
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000740)=ANY=[@ANYRES16=r3, @ANYRES32=r3, @ANYRES64=r4], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='powernv_throttle\x00', r6}, 0xf)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180373f6b4dc0000000000000000000018000000", @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095", @ANYBLOB="64155aa848f582b2ac349d731469155a6b9c1b5a6e775145e8afef100f07fd4746f29a574d2ba69638b5b794444c6099f6920eac480f096bc9761539197bf54a55a7f1fa42ccd53425b5caeefa902f128347de3c22891e862b882d2612d9021935760528b41323683b35c38143836bc0239ed9195e41f4ca4517bc174c00998f2b6bb85f3a25c460271952bdc3117a99c4d49556e4468a86a681946d0596b6b48fce"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum64={0x3, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x30, 0x5f, 0x2e]}}, 0x0, 0x29, 0x0, 0x1, 0x9}, 0x28)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='loginuid\x00')
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0xc0, 0x16, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x70, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x144, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xeb, 0x7, 0x1, 0x0, "edd0c483a84a53fe66eb1c7256d596038f642bda545b913e03073895602dfab28510d406ed328a1cb3ac1b3aa54703da88e0dc8f914e7d097d43e44efecd3e9633da9acaf99ddbbac8037ebae4ef6ba049e8f76eab4ab37d7d0260d6df83566bd7fd62ffcadda8cc64ac3ae1c8b7916190b7ec60eec01867030e3850516cea0f9e9c9206483b1d362946626e13f44efb27a859c8aba516dffdaa3c134fce48561fee0657bde4ef3be8e643738dd4a7de0013b2ef52c35622367885664d47fc1cef53760075be7f5938260de9f630d22adf0f47e57bd79200654b6815e6ee77a694c488ae320708"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x24c}, 0x1, 0x0, 0x0, 0x64841}, 0x40000)
getsockopt(0xffffffffffffffff, 0x1, 0x13, 0x0, &(0x7f0000000080))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

875.666858ms ago: executing program 3 (id=4659):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x10, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x1, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = syz_io_uring_setup(0xd8, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000000c0))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000802000021", @ANYRES32=r4, @ANYRES8=r3], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xd}, 0x4c58, 0x7, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000002c0), 0x0)
creat(&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x120)
r8 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r8, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
close(r8)
ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0xfffffffffffffff9)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080)={[{@errors_remount}, {@noload}, {@nogrpid}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x51f, &(0x7f00000007c0)="$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")

816.397359ms ago: executing program 4 (id=4660):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pB    \x00'}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2309, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100bc08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef)

794.296849ms ago: executing program 0 (id=4661):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x1, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r5 = syz_io_uring_setup(0x6b88, &(0x7f0000000000)={0x0, 0x7c87, 0x800, 0x0, 0x39}, 0x0, &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8<X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8\xfb\x16\x8e\x8b-W\xd4\xc9\xbc\x94CR[Du8U^\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1:\xbd+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96', 0x5)
syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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")

721.19621ms ago: executing program 4 (id=4662):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001", @ANYBLOB], 0x50)
r3 = fcntl$dupfd(r0, 0x406, r2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg2\x00', <r6=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6], 0x22c}}, 0x0)
r7 = socket(0x1e, 0x4, 0x0)
getsockopt$inet6_tcp_buf(r7, 0x6, 0xb, 0x0, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=<r8=>0x0, &(0x7f0000000300)=0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000340)={'wg1\x00', <r9=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000e40)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000426bd7000fbdbdf2501000000140002007767320000000000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="0800050001000000240003000000000000000000000000000000000000000000080001007abdc83b9fbd78a4fd369c25b11f4d0026946cd139610dff6001c7104c7fa2ea120f5910f3b5d0a1e464c946988a69b1d9f9fa25ca9969b37975d537a898eda4f5bb9dbca2d51775d2c24bebb07815a2630bac1a8a12befa6ed5af1e223c7b0a9f657174ca22b9bd5debe71da2aa6bf423387bf75929deb4d615311fdb96ac338f02925a1b9deed36500"/185, @ANYRES32=r9, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x10044}, 0x4c800)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000dc0), &(0x7f0000000040)=0xc)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000380)={[{@nojournal_checksum}]}, 0x1, 0x503, &(0x7f0000000880)="$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")
socket$inet_udp(0x2, 0x2, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
preadv2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f00000003c0)=""/212, 0xd4}, {&(0x7f0000000240)=""/101, 0x65}, {&(0x7f0000000500)=""/119, 0x77}, {&(0x7f0000000580)=""/187, 0xbb}, {&(0x7f0000000640)=""/239, 0xef}, {&(0x7f0000000740)=""/187, 0xbb}], 0x6, 0x8, 0x5, 0x8)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58536667da020000000200000000000000", @ANYRES32=0x0, @ANYBLOB="408f01000a200200280012800e00010069703667726574617000000014000280060011004e210000060010004e240000"], 0x48}}, 0x0)
io_submit(0x0, 0x0, 0x0)
r12 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0xffffffde}, 0x8)
write$binfmt_script(r10, &(0x7f00000001c0), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})

720.36771ms ago: executing program 1 (id=4663):
socket$kcm(0x29, 0x7, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@sysvgroups}, {@i_version}]}, 0x1, 0x50c, &(0x7f0000001000)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x20200, 0x0, 0xfe, 0x0, &(0x7f00000007c0))
socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x2, 0x3, 0x84)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003b)
write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r0], 0xa)
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0x1, 0xfffffffffffff8f5, 0x0, 0x2, 0x0, 0x8})

674.288241ms ago: executing program 1 (id=4664):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x20, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000130016007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200001100000000000000000000008500000028000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfbb00000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xd, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0xfd, 0x3e7, &(0x7f0000000480)="$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")
timer_create(0x5, &(0x7f00000001c0)={0x0, 0x40, 0x4, @thr={&(0x7f00000000c0)="9594cf3722", &(0x7f0000000ac0)="d0a184aba97e79857e2becf732848857c468884965bbeda4c8b7131f44674f86f330df915f24656235c7e39697fa25ef200fd75d5730ebac527650a730e6ecad739c86fbf2a7013edc132b4d7a458b807e445ecc98ea116a9ce96af1a9b728c8e79335866427aa2f1dd38792f31569560ac1715ae6a7b3d6db443eeb3d"}}, &(0x7f0000000880))
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x208000, 0x0)
r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000980)={0x0, 0x79a8, 0x8, 0x1, 0x29a}, &(0x7f0000000140)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
getdents64(r6, &(0x7f0000000c00)=""/209, 0xd1)

544.213243ms ago: executing program 3 (id=4665):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)

504.476013ms ago: executing program 3 (id=4666):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xd, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
listen(0xffffffffffffffff, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x220c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, 0x0, 0x0)
listen(r4, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x810)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0)

421.265574ms ago: executing program 0 (id=4667):
socket$inet6(0xa, 0x5, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
r1 = syz_open_dev$usbfs(&(0x7f0000000e00), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x9, 0xffff, 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x3, 0x8, 0x4}, 0x50)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0xb1, &(0x7f0000000180)={@local, @random="416cee93a4a6", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xa3, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x4, 0x2, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0x4000}, @generic={0x22, 0xf, "3abc6903030000000000000000"}, @window={0x3, 0x3, 0xac}, @timestamp={0x8, 0x2, 0x200, 0x9}, @mss, @fastopen={0x22, 0xe, "54df942f7e09586180bbb068"}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x5, "8537c8"}, @exp_fastopen={0xfe, 0x4}]}}, {"3416af759b3c6a17234d4c2152b5ae2e004fddd386c9b64ad6f215535cc63e143334edc421ad322c3793882feede38"}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e746572001000"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0, 0x50}}, 0x0)

392.695715ms ago: executing program 3 (id=4668):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0x4}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000140)="24000000010006", 0x7)

374.706415ms ago: executing program 3 (id=4669):
socket(0x10, 0x3, 0x9)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800ff00bb00551a000000007bf6211318120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
renameat(r3, &(0x7f0000000080)='./mnt\x00', r3, &(0x7f0000000100)='./mnt\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94)
setxattr$security_selinux(&(0x7f0000000140)='./file0/bus\x00', &(0x7f0000000200), &(0x7f00000002c0)='system_u:object_r:fuse_device_t:s0\x00', 0x23, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x22020600)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000740)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})
prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
bind$bt_sco(r5, &(0x7f0000000740)={0x1f, @none}, 0x8)
listen(r5, 0x0)
accept4(r5, 0x0, 0x0, 0x80800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='kfree\x00', r0}, 0x18)

325.985295ms ago: executing program 0 (id=4670):
r0 = socket(0x10, 0x3, 0x9)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdc00}, 0xc)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0)

407.4µs ago: executing program 6 (id=4671):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x44}}, 0x20008000)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', 0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
open(&(0x7f0000000340)='./file0\x00', 0x2080, 0xc)
sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x894, 0x30, 0x12f, 0x6000, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x800, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0xfffffffe, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x7, 0x2, 0x80000000, 0x4, 0x5, 0xfffffff8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x0, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0xfffffffd, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x42000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x5, 0x958, 0x9, 0x4, 0x6, 0x25a, 0x80, 0x5, 0x6, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x77, 0x4, 0x5, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0xfffffffc, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0xff, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x82, 0x0, 0x1, 0x2, 0x3, 0xfff, 0x80000001, 0x6, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x4c31, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x802, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x696, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x7, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x3, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x44, r3, 0x100, 0x2, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x41}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x44}}, 0x24046844)

0s ago: executing program 6 (id=4672):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r1, 0x5453, 0x7cb7562f2d67)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20000023896)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, 0x0, 0x0}, 0x20)
semget$private(0x0, 0x4, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
readlink(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=""/92, 0x5c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
pipe(0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94)
r5 = geteuid()
r6 = syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0xfffffffd}, &(0x7f00000001c0)=<r7=>0x0, &(0x7f0000000580)=<r8=>0x0)
r9 = eventfd(0x1)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f00000010c0)=r9, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x4, &(0x7f0000000280), 0x1, 0x40, 0x1})
io_uring_enter(r6, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x100008, &(0x7f00000001c0)={[{@discard}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@mblk_io_submit}, {@errors_remount}], [{@fowner_lt={'fowner<', r5}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'mblk_io_submit'}}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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")
open(&(0x7f0000000000)='.\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

: auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15754 comm="syz.6.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fe933dde9a9 code=0x7ffc0000
[  276.460083][   T29] audit: type=1326 audit(1753195594.974:28346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15754 comm="syz.6.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe933dde9a9 code=0x7ffc0000
[  276.460185][   T29] audit: type=1326 audit(1753195594.974:28347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15754 comm="syz.6.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe933dde9a9 code=0x7ffc0000
[  276.460276][   T29] audit: type=1326 audit(1753195594.974:28348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15754 comm="syz.6.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fe933dde9a9 code=0x7ffc0000
[  276.460299][   T29] audit: type=1326 audit(1753195594.974:28349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15754 comm="syz.6.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe933dde9a9 code=0x7ffc0000
[  276.460325][   T29] audit: type=1326 audit(1753195594.974:28350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15754 comm="syz.6.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe933dde9a9 code=0x7ffc0000
[  276.460355][   T29] audit: type=1326 audit(1753195594.974:28351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15754 comm="syz.6.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe933dde9a9 code=0x7ffc0000
[  276.470411][T15730] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  276.482657][T15735] syz.1.4029: attempt to access beyond end of device
[  276.482657][T15735] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128
[  276.482765][T15735] Buffer I/O error on dev loop1, logical block 2065, async page read
[  276.482784][T15735] Buffer I/O error on dev loop1, logical block 2066, async page read
[  276.564312][T11548] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1
[  276.946649][T15730] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4028'.
[  277.008386][T12443] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.090377][T15778] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  277.101489][T15779] netlink: 'syz.3.4040': attribute type 13 has an invalid length.
[  277.119972][T15781] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.195722][T15779] gretap0: refused to change device tx_queue_len
[  277.202222][T15779] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  277.223141][T15778] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  277.262014][T15792] hub 6-0:1.0: USB hub found
[  277.266827][T15792] hub 6-0:1.0: 8 ports detected
[  277.286467][T15781] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.314097][T15778] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  277.353877][T15781] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.391800][T15804] FAULT_INJECTION: forcing a failure.
[  277.391800][T15804] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  277.405300][T15804] CPU: 1 UID: 0 PID: 15804 Comm: syz.3.4050 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  277.405375][T15804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  277.405389][T15804] Call Trace:
[  277.405395][T15804]  <TASK>
[  277.405403][T15804]  __dump_stack+0x1d/0x30
[  277.405423][T15804]  dump_stack_lvl+0xe8/0x140
[  277.405491][T15804]  dump_stack+0x15/0x1b
[  277.405509][T15804]  should_fail_ex+0x265/0x280
[  277.405539][T15804]  should_fail+0xb/0x20
[  277.405564][T15804]  should_fail_usercopy+0x1a/0x20
[  277.405621][T15804]  _copy_from_user+0x1c/0xb0
[  277.405643][T15804]  ___sys_sendmsg+0xc1/0x1d0
[  277.405689][T15804]  __x64_sys_sendmsg+0xd4/0x160
[  277.405838][T15804]  x64_sys_call+0x2999/0x2fb0
[  277.405897][T15804]  do_syscall_64+0xd2/0x200
[  277.405921][T15804]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  277.405997][T15804]  ? clear_bhb_loop+0x40/0x90
[  277.406018][T15804]  ? clear_bhb_loop+0x40/0x90
[  277.406119][T15804]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.406140][T15804] RIP: 0033:0x7f93f39ae9a9
[  277.406155][T15804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  277.406170][T15804] RSP: 002b:00007f93f200f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  277.406267][T15804] RAX: ffffffffffffffda RBX: 00007f93f3bd5fa0 RCX: 00007f93f39ae9a9
[  277.406281][T15804] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000007
[  277.406292][T15804] RBP: 00007f93f200f090 R08: 0000000000000000 R09: 0000000000000000
[  277.406303][T15804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  277.406316][T15804] R13: 0000000000000000 R14: 00007f93f3bd5fa0 R15: 00007ffd882ab818
[  277.406335][T15804]  </TASK>
[  277.408250][T15778] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  277.475015][T15802] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4049'.
[  277.638093][T15781] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.697784][T15802] hsr_slave_0 (unregistering): left promiscuous mode
[  277.724813][T15778] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  277.736097][T15778] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  277.748152][T15778] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  277.759563][T15778] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  277.761138][T15811] loop3: detected capacity change from 0 to 2048
[  277.772809][T15781] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  277.786040][T15781] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  277.801033][T15781] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  277.813045][T15781] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  277.822618][T15811] Alternate GPT is invalid, using primary GPT.
[  277.828898][T15811]  loop3: p1 p2 p3
[  277.885363][T15817] tipc: Enabling of bearer <‰ý‘eth:gr> rejected, media not registered
[  277.951529][T15821] loop3: detected capacity change from 0 to 2048
[  277.965417][T15829] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length.
[  277.974858][T15829] team0: Port device dummy0 added
[  277.981303][T15829] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length.
[  277.996145][T15821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  278.007810][T15829] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  278.020849][T15829] team0: Failed to send options change via netlink (err -105)
[  278.035397][T15829] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  278.045101][T15829] team0: Port device dummy0 removed
[  278.048815][T12443] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.053402][T15829] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  278.107348][T15841] xt_hashlimit: max too large, truncated to 1048576
[  278.172461][T15852] loop6: detected capacity change from 0 to 1024
[  278.188847][T15852] EXT4-fs: Ignoring removed nobh option
[  278.195204][T15852] EXT4-fs: Ignoring removed bh option
[  278.225846][T15852] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.256385][T15848] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4063'.
[  278.323522][T15865] IPv6: Can't replace route, no match found
[  278.420163][T15868] loop3: detected capacity change from 0 to 2048
[  278.452528][T15870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4068'.
[  278.532439][T15868] hub 6-0:1.0: USB hub found
[  278.537388][T15868] hub 6-0:1.0: 8 ports detected
[  278.692467][T15877] netlink: 566 bytes leftover after parsing attributes in process `syz.4.4071'.
[  278.704542][T15877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4071'.
[  278.950493][T15435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.122523][T15904] xt_hashlimit: size too large, truncated to 1048576
[  279.366731][ T3472] IPVS: starting estimator thread 0...
[  279.482305][T15915] IPVS: using max 3024 ests per chain, 151200 per kthread
[  280.080065][T15938] loop6: detected capacity change from 0 to 2048
[  280.091711][T15938] EXT4-fs (loop6): failed to initialize system zone (-117)
[  280.099021][T15938] EXT4-fs (loop6): mount failed
[  280.129053][T15943] loop6: detected capacity change from 0 to 2048
[  280.141552][T15943] EXT4-fs (loop6): failed to initialize system zone (-117)
[  280.148837][T15943] EXT4-fs (loop6): mount failed
[  280.263334][T15948] loop6: detected capacity change from 0 to 2048
[  280.293805][T15948] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.417866][T15435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.465938][T15975] loop6: detected capacity change from 0 to 512
[  280.474178][T15975] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  280.499886][T15435] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  280.521342][T15980] 9pnet: p9_errstr2errno: server reported unknown error 
[  280.563566][T15980] 9pnet_fd: Insufficient options for proto=fd
[  280.646037][T15988] loop6: detected capacity change from 0 to 1024
[  280.652795][T15988] EXT4-fs: Ignoring removed nobh option
[  280.658426][T15988] EXT4-fs: Ignoring removed bh option
[  280.672049][T15988] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.908541][   T29] kauditd_printk_skb: 275 callbacks suppressed
[  280.908556][   T29] audit: type=1326 audit(1753195599.527:28626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.1.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  280.939849][   T29] audit: type=1326 audit(1753195599.527:28627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.1.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  280.963855][   T29] audit: type=1326 audit(1753195599.527:28628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.1.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  280.987874][   T29] audit: type=1326 audit(1753195599.527:28629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.1.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  281.011681][   T29] audit: type=1326 audit(1753195599.527:28630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.1.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  281.035334][   T29] audit: type=1326 audit(1753195599.527:28631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.1.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  281.059080][   T29] audit: type=1326 audit(1753195599.527:28632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.1.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  281.082882][   T29] audit: type=1326 audit(1753195599.527:28633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.1.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  281.106443][   T29] audit: type=1326 audit(1753195599.527:28634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.1.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  281.130100][   T29] audit: type=1326 audit(1753195599.527:28635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.1.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  281.220145][T16014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4110'.
[  281.286707][T16017] netlink: 852 bytes leftover after parsing attributes in process `syz.1.4110'.
[  281.295852][T16017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4110'.
[  281.428577][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4113'.
[  281.437630][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4113'.
[  281.449646][T15435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.586278][T16027] serio: Serial port ttyS3
[  281.776357][T16031] loop6: detected capacity change from 0 to 1024
[  281.784096][T16031] EXT4-fs: Ignoring removed orlov option
[  281.808424][T16031] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.899925][T16031] netlink: 420 bytes leftover after parsing attributes in process `syz.6.4116'.
[  281.917687][T16037] pimreg: entered allmulticast mode
[  281.973298][T16044] FAULT_INJECTION: forcing a failure.
[  281.973298][T16044] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  281.986830][T16044] CPU: 1 UID: 0 PID: 16044 Comm: syz.0.4119 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  281.986858][T16044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  281.986890][T16044] Call Trace:
[  281.986897][T16044]  <TASK>
[  281.986905][T16044]  __dump_stack+0x1d/0x30
[  281.986928][T16044]  dump_stack_lvl+0xe8/0x140
[  281.986950][T16044]  dump_stack+0x15/0x1b
[  281.986965][T16044]  should_fail_ex+0x265/0x280
[  281.987083][T16044]  should_fail+0xb/0x20
[  281.987109][T16044]  should_fail_usercopy+0x1a/0x20
[  281.987154][T16044]  _copy_from_user+0x1c/0xb0
[  281.987174][T16044]  ___sys_sendmsg+0xc1/0x1d0
[  281.987218][T16044]  __sys_sendmmsg+0x178/0x300
[  281.987248][T16044]  __x64_sys_sendmmsg+0x57/0x70
[  281.987327][T16044]  x64_sys_call+0x2f2f/0x2fb0
[  281.987347][T16044]  do_syscall_64+0xd2/0x200
[  281.987426][T16044]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  281.987449][T16044]  ? clear_bhb_loop+0x40/0x90
[  281.987467][T16044]  ? clear_bhb_loop+0x40/0x90
[  281.987542][T16044]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.987586][T16044] RIP: 0033:0x7fbb54cae9a9
[  281.987601][T16044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  281.987617][T16044] RSP: 002b:00007fbb53317038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  281.987638][T16044] RAX: ffffffffffffffda RBX: 00007fbb54ed5fa0 RCX: 00007fbb54cae9a9
[  281.987652][T16044] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000007
[  281.987685][T16044] RBP: 00007fbb53317090 R08: 0000000000000000 R09: 0000000000000000
[  281.987698][T16044] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001
[  281.987711][T16044] R13: 0000000000000000 R14: 00007fbb54ed5fa0 R15: 00007ffe0aa61718
[  281.987730][T16044]  </TASK>
[  282.201135][T15435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.250292][T16055] FAULT_INJECTION: forcing a failure.
[  282.250292][T16055] name failslab, interval 1, probability 0, space 0, times 0
[  282.263569][T16055] CPU: 0 UID: 0 PID: 16055 Comm: syz.1.4123 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  282.263599][T16055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  282.263686][T16055] Call Trace:
[  282.263693][T16055]  <TASK>
[  282.263701][T16055]  __dump_stack+0x1d/0x30
[  282.263724][T16055]  dump_stack_lvl+0xe8/0x140
[  282.263792][T16055]  dump_stack+0x15/0x1b
[  282.263848][T16055]  should_fail_ex+0x265/0x280
[  282.263874][T16055]  ? v9fs_mount+0x51/0x590
[  282.263926][T16055]  should_failslab+0x8c/0xb0
[  282.263947][T16055]  __kmalloc_cache_noprof+0x4c/0x320
[  282.263976][T16055]  v9fs_mount+0x51/0x590
[  282.263998][T16055]  ? __pfx_v9fs_mount+0x10/0x10
[  282.264056][T16055]  legacy_get_tree+0x75/0xd0
[  282.264096][T16055]  vfs_get_tree+0x57/0x1d0
[  282.264126][T16055]  do_new_mount+0x207/0x680
[  282.264162][T16055]  path_mount+0x4a4/0xb20
[  282.264301][T16055]  ? user_path_at+0x109/0x130
[  282.264323][T16055]  __se_sys_mount+0x28f/0x2e0
[  282.264350][T16055]  ? fput+0x8f/0xc0
[  282.264374][T16055]  __x64_sys_mount+0x67/0x80
[  282.264441][T16055]  x64_sys_call+0xd36/0x2fb0
[  282.264453][T16055]  do_syscall_64+0xd2/0x200
[  282.264479][T16055]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  282.264563][T16055]  ? clear_bhb_loop+0x40/0x90
[  282.264574][T16055]  ? clear_bhb_loop+0x40/0x90
[  282.264585][T16055]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.264640][T16055] RIP: 0033:0x7f99d3bee9a9
[  282.264650][T16055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.264660][T16055] RSP: 002b:00007f99d224f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  282.264673][T16055] RAX: ffffffffffffffda RBX: 00007f99d3e15fa0 RCX: 00007f99d3bee9a9
[  282.264680][T16055] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000
[  282.264687][T16055] RBP: 00007f99d224f090 R08: 0000200000000080 R09: 0000000000000000
[  282.264694][T16055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  282.264701][T16055] R13: 0000000000000000 R14: 00007f99d3e15fa0 R15: 00007fff6aeb9ef8
[  282.264711][T16055]  </TASK>
[  282.514836][T16016] syz.3.4111 (16016) used greatest stack depth: 9104 bytes left
[  282.564562][T16066] loop1: detected capacity change from 0 to 1024
[  282.572227][T16066] EXT4-fs: Ignoring removed nobh option
[  282.577837][T16066] EXT4-fs: Ignoring removed bh option
[  282.639428][T16066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.683555][T16068] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4127'.
[  282.822037][T16091] netlink: 'syz.0.4132': attribute type 16 has an invalid length.
[  282.829989][T16091] netlink: 'syz.0.4132': attribute type 17 has an invalid length.
[  282.943408][T16096] FAULT_INJECTION: forcing a failure.
[  282.943408][T16096] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  282.957285][T16096] CPU: 0 UID: 0 PID: 16096 Comm: syz.3.4133 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  282.957310][T16096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  282.957321][T16096] Call Trace:
[  282.957326][T16096]  <TASK>
[  282.957333][T16096]  __dump_stack+0x1d/0x30
[  282.957370][T16096]  dump_stack_lvl+0xe8/0x140
[  282.957387][T16096]  dump_stack+0x15/0x1b
[  282.957457][T16096]  should_fail_ex+0x265/0x280
[  282.957480][T16096]  should_fail_alloc_page+0xf2/0x100
[  282.957501][T16096]  __alloc_frozen_pages_noprof+0xff/0x360
[  282.957561][T16096]  alloc_pages_mpol+0xb3/0x250
[  282.957597][T16096]  alloc_migration_target_by_mpol+0x11b/0x280
[  282.957695][T16096]  migrate_pages_batch+0x2e4/0x17d0
[  282.957761][T16096]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  282.957807][T16096]  ? __walk_page_range+0x324/0x340
[  282.957830][T16096]  ? mas_ascend+0x1e9/0x560
[  282.957852][T16096]  migrate_pages+0xf5f/0x1770
[  282.957928][T16096]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  282.957974][T16096]  __se_sys_mbind+0x975/0xac0
[  282.958005][T16096]  __x64_sys_mbind+0x78/0x90
[  282.958061][T16096]  x64_sys_call+0x14af/0x2fb0
[  282.958081][T16096]  do_syscall_64+0xd2/0x200
[  282.958098][T16096]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  282.958119][T16096]  ? clear_bhb_loop+0x40/0x90
[  282.958159][T16096]  ? clear_bhb_loop+0x40/0x90
[  282.958179][T16096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.958197][T16096] RIP: 0033:0x7f93f39ae9a9
[  282.958212][T16096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.958228][T16096] RSP: 002b:00007f93f200f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  282.958274][T16096] RAX: ffffffffffffffda RBX: 00007f93f3bd5fa0 RCX: 00007f93f39ae9a9
[  282.958286][T16096] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000
[  282.958298][T16096] RBP: 00007f93f200f090 R08: 0000000000000000 R09: 0000000000000002
[  282.958309][T16096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  282.958320][T16096] R13: 0000000000000000 R14: 00007f93f3bd5fa0 R15: 00007ffd882ab818
[  282.958388][T16096]  </TASK>
[  283.341087][T12211] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.373659][T16113] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  283.519642][T16117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.528191][T16117] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.558379][T16117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.587498][T16117] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.748187][T16121] __nla_validate_parse: 1 callbacks suppressed
[  283.748221][T16121] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4141'.
[  283.892271][T16138] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4143'.
[  284.142622][T16162] loop6: detected capacity change from 0 to 512
[  284.161358][T16162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.174400][T16162] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  284.197815][T15435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.286861][T16173] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4155'.
[  284.312219][T16182] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4157'.
[  284.672068][T16195] loop6: detected capacity change from 0 to 512
[  284.678726][T16195] EXT4-fs: Ignoring removed mblk_io_submit option
[  284.685419][T16195] EXT4-fs: dax option not supported
[  284.694445][T16195] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4163'.
[  284.794412][T16200] loop6: detected capacity change from 0 to 2048
[  284.834418][T16202] FAULT_INJECTION: forcing a failure.
[  284.834418][T16202] name failslab, interval 1, probability 0, space 0, times 0
[  284.838829][T16200] Alternate GPT is invalid, using primary GPT.
[  284.847672][T16202] CPU: 0 UID: 0 PID: 16202 Comm: syz.3.4165 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  284.847701][T16202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  284.847713][T16202] Call Trace:
[  284.847720][T16202]  <TASK>
[  284.847728][T16202]  __dump_stack+0x1d/0x30
[  284.847750][T16202]  dump_stack_lvl+0xe8/0x140
[  284.847770][T16202]  dump_stack+0x15/0x1b
[  284.847837][T16202]  should_fail_ex+0x265/0x280
[  284.847865][T16202]  should_failslab+0x8c/0xb0
[  284.847897][T16202]  __kmalloc_noprof+0xa5/0x3e0
[  284.847917][T16202]  ? kobject_get_path+0x92/0x1c0
[  284.848019][T16202]  kobject_get_path+0x92/0x1c0
[  284.848042][T16202]  kobject_uevent_env+0x1da/0x570
[  284.848094][T16202]  kobject_uevent+0x1d/0x30
[  284.848127][T16202]  __kobject_del+0x88/0x190
[  284.848208][T16202]  kobject_put+0x127/0x190
[  284.848230][T16202]  net_rx_queue_update_kobjects+0x477/0x520
[  284.848381][T16202]  netdev_unregister_kobject+0xbf/0x270
[  284.848425][T16202]  unregister_netdevice_many_notify+0x1292/0x1690
[  284.848452][T16202]  unregister_netdevice_queue+0x1f5/0x220
[  284.848511][T16202]  unregister_netdev+0xb3/0xe0
[  284.848530][T16202]  slip_close+0xe4/0x100
[  284.848619][T16202]  ? __pfx_slip_hangup+0x10/0x10
[  284.848639][T16202]  slip_hangup+0x15/0x20
[  284.848715][T16202]  tty_ldisc_hangup+0x12f/0x370
[  284.848805][T16202]  __tty_hangup+0x395/0x510
[  284.848829][T16202]  tty_ioctl+0x601/0xb80
[  284.848854][T16202]  ? __pfx_tty_ioctl+0x10/0x10
[  284.848879][T16202]  __se_sys_ioctl+0xcb/0x140
[  284.848942][T16202]  __x64_sys_ioctl+0x43/0x50
[  284.849025][T16202]  x64_sys_call+0x19a8/0x2fb0
[  284.849046][T16202]  do_syscall_64+0xd2/0x200
[  284.849064][T16202]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  284.849137][T16202]  ? clear_bhb_loop+0x40/0x90
[  284.849157][T16202]  ? clear_bhb_loop+0x40/0x90
[  284.849177][T16202]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.849196][T16202] RIP: 0033:0x7f93f39ae9a9
[  284.849212][T16202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  284.849301][T16202] RSP: 002b:00007f93f200f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  284.849320][T16202] RAX: ffffffffffffffda RBX: 00007f93f3bd5fa0 RCX: 00007f93f39ae9a9
[  284.849332][T16202] RDX: 0000000000000002 RSI: 0000000000005437 RDI: 0000000000000003
[  284.849344][T16202] RBP: 00007f93f200f090 R08: 0000000000000000 R09: 0000000000000000
[  284.849356][T16202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  284.849414][T16202] R13: 0000000000000000 R14: 00007f93f3bd5fa0 R15: 00007ffd882ab818
[  284.849431][T16202]  </TASK>
[  285.114719][T16200]  loop6: p1 p2 p3
[  285.146177][T16206] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4167'.
[  285.156010][T16207] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4167'.
[  285.212217][T16211] xt_TPROXY: Can be used only with -p tcp or -p udp
[  285.332888][T16212] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4169'.
[  285.354451][T16229] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.374882][T16228] loop6: detected capacity change from 0 to 2048
[  285.410333][T16228] EXT4-fs (loop6): failed to initialize system zone (-117)
[  285.417731][T16228] EXT4-fs (loop6): mount failed
[  285.423472][T16229] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.479377][T16229] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.529234][T16229] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.559832][T16238] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  285.572993][T16239] hub 6-0:1.0: USB hub found
[  285.579087][T16239] hub 6-0:1.0: 8 ports detected
[  285.593863][T16229] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  285.614625][T16229] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  285.638796][T16229] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  285.651654][T16229] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  285.695424][T16244] loop6: detected capacity change from 0 to 512
[  285.708247][T16244] EXT4-fs: Ignoring removed mblk_io_submit option
[  285.721005][T16244] EXT4-fs: Ignoring removed nomblk_io_submit option
[  285.747787][T16244] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  285.756372][T16244] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  285.789553][T16244] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.4180: Allocating blocks 41-42 which overlap fs metadata
[  285.807792][T16244] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.4180: Allocating blocks 41-42 which overlap fs metadata
[  285.822021][T16244] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4180: Failed to acquire dquot type 1
[  285.834156][T16244] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  285.849875][T16244] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #12: comm syz.6.4180: corrupted inode contents
[  285.862329][T16244] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #12: comm syz.6.4180: mark_inode_dirty error
[  285.875858][T16244] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #12: comm syz.6.4180: corrupted inode contents
[  285.888739][T16244] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.4180: mark_inode_dirty error
[  285.901131][T16244] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #12: comm syz.6.4180: corrupted inode contents
[  285.913932][T16244] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem
[  285.922795][T16244] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #12: comm syz.6.4180: corrupted inode contents
[  285.935541][T16244] EXT4-fs error (device loop6): ext4_truncate:4597: inode #12: comm syz.6.4180: mark_inode_dirty error
[  285.947205][T16244] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem
[  285.957066][T16244] EXT4-fs (loop6): 1 truncate cleaned up
[  285.963281][T16244] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.010856][   T29] kauditd_printk_skb: 242 callbacks suppressed
[  286.010871][   T29] audit: type=1326 audit(1753195604.629:28874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16256 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb54ca5967 code=0x7ffc0000
[  286.040644][   T29] audit: type=1326 audit(1753195604.629:28875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16256 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb54c4ab89 code=0x7ffc0000
[  286.064443][   T29] audit: type=1326 audit(1753195604.629:28876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16256 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb54ca5967 code=0x7ffc0000
[  286.088029][   T29] audit: type=1326 audit(1753195604.629:28877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16256 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb54c4ab89 code=0x7ffc0000
[  286.111787][   T29] audit: type=1326 audit(1753195604.629:28878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16256 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb54ca5967 code=0x7ffc0000
[  286.136761][   T29] audit: type=1326 audit(1753195604.629:28879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16256 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb54c4ab89 code=0x7ffc0000
[  286.160474][   T29] audit: type=1326 audit(1753195604.629:28880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16256 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb54ca5967 code=0x7ffc0000
[  286.184024][   T29] audit: type=1326 audit(1753195604.629:28881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16256 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb54c4ab89 code=0x7ffc0000
[  286.207673][   T29] audit: type=1326 audit(1753195604.629:28882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16256 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb54ca5967 code=0x7ffc0000
[  286.231253][   T29] audit: type=1326 audit(1753195604.629:28883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16256 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb54c4ab89 code=0x7ffc0000
[  286.258723][T15435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.399463][T16262] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4186'.
[  286.501264][T16280] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.517189][T16282] FAULT_INJECTION: forcing a failure.
[  286.517189][T16282] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  286.530502][T16282] CPU: 1 UID: 0 PID: 16282 Comm: syz.6.4192 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  286.530531][T16282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  286.530574][T16282] Call Trace:
[  286.530582][T16282]  <TASK>
[  286.530592][T16282]  __dump_stack+0x1d/0x30
[  286.530635][T16282]  dump_stack_lvl+0xe8/0x140
[  286.530652][T16282]  dump_stack+0x15/0x1b
[  286.530666][T16282]  should_fail_ex+0x265/0x280
[  286.530694][T16282]  should_fail_alloc_page+0xf2/0x100
[  286.530715][T16282]  __alloc_frozen_pages_noprof+0xff/0x360
[  286.530817][T16282]  alloc_pages_mpol+0xb3/0x250
[  286.530847][T16282]  vma_alloc_folio_noprof+0x1aa/0x300
[  286.530872][T16282]  handle_mm_fault+0xec2/0x2be0
[  286.530929][T16282]  ? mas_walk+0xf2/0x120
[  286.531054][T16282]  do_user_addr_fault+0x636/0x1090
[  286.531158][T16282]  ? fpregs_assert_state_consistent+0xb4/0xe0
[  286.531189][T16282]  exc_page_fault+0x62/0xa0
[  286.531219][T16282]  asm_exc_page_fault+0x26/0x30
[  286.531353][T16282] RIP: 0033:0x7fe933ca0ca3
[  286.531442][T16282] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  286.531459][T16282] RSP: 002b:00007fe9324464a0 EFLAGS: 00010202
[  286.531475][T16282] RAX: 0000000000002000 RBX: 00007fe932446540 RCX: 00007fe92a027000
[  286.531487][T16282] RDX: 00007fe9324466e0 RSI: 0000000000000007 RDI: 00007fe9324465e0
[  286.531498][T16282] RBP: 000000000000004e R08: 000000000000000a R09: 00000000000003ab
[  286.531509][T16282] R10: 00000000000003c8 R11: 00007fe932446540 R12: 0000000000000001
[  286.531520][T16282] R13: 00007fe933e7c860 R14: 000000000000000b R15: 00007fe9324465e0
[  286.531616][T16282]  </TASK>
[  286.531625][T16282] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  286.713813][T16282] loop6: detected capacity change from 0 to 512
[  286.720927][T16282] EXT4-fs (loop6): Invalid default hash set in the superblock
[  286.749646][T16280] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.777097][T11329] IPVS: starting estimator thread 0...
[  286.839380][T16280] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.855628][T16303] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  286.865753][T16303] FAULT_INJECTION: forcing a failure.
[  286.865753][T16303] name failslab, interval 1, probability 0, space 0, times 0
[  286.879525][T16303] CPU: 1 UID: 0 PID: 16303 Comm: syz.6.4196 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  286.879554][T16303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  286.879567][T16303] Call Trace:
[  286.879576][T16303]  <TASK>
[  286.879590][T16303]  __dump_stack+0x1d/0x30
[  286.879611][T16303]  dump_stack_lvl+0xe8/0x140
[  286.879627][T16303]  dump_stack+0x15/0x1b
[  286.879644][T16303]  should_fail_ex+0x265/0x280
[  286.879708][T16303]  should_failslab+0x8c/0xb0
[  286.879730][T16303]  __kvmalloc_node_noprof+0x123/0x4e0
[  286.879755][T16303]  ? __nf_hook_entries_try_shrink+0x260/0x450
[  286.879818][T16303]  ? __perf_event_task_sched_in+0xa5b/0xac0
[  286.879911][T16303]  __nf_hook_entries_try_shrink+0x260/0x450
[  286.879989][T16303]  __nf_unregister_net_hook+0x2d1/0x3b0
[  286.880021][T16303]  nf_unregister_net_hooks+0xab/0xe0
[  286.880092][T16303]  nf_ct_netns_do_put+0x1e9/0x260
[  286.880123][T16303]  nf_ct_netns_put+0xea/0x1f0
[  286.880147][T16303]  connmark_tg_destroy+0x2f/0x40
[  286.880211][T16303]  ? __pfx_connmark_tg_destroy+0x10/0x10
[  286.880229][T16303]  cleanup_entry+0x165/0x1c0
[  286.880255][T16303]  translate_table+0x100a/0x1070
[  286.880309][T16303]  do_ip6t_set_ctl+0x678/0x840
[  286.880331][T16303]  ? kstrtoull+0x111/0x140
[  286.880424][T16303]  ? __rcu_read_unlock+0x4f/0x70
[  286.880501][T16303]  nf_setsockopt+0x196/0x1b0
[  286.880537][T16303]  ipv6_setsockopt+0x11a/0x130
[  286.880607][T16303]  tcp_setsockopt+0x95/0xb0
[  286.880683][T16303]  sock_common_setsockopt+0x69/0x80
[  286.880717][T16303]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  286.880738][T16303]  __sys_setsockopt+0x184/0x200
[  286.880766][T16303]  __x64_sys_setsockopt+0x64/0x80
[  286.880804][T16303]  x64_sys_call+0x2bd5/0x2fb0
[  286.880822][T16303]  do_syscall_64+0xd2/0x200
[  286.880841][T16303]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  286.880872][T16303]  ? clear_bhb_loop+0x40/0x90
[  286.880934][T16303]  ? clear_bhb_loop+0x40/0x90
[  286.880952][T16303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.880973][T16303] RIP: 0033:0x7fe933dde9a9
[  286.880990][T16303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  286.881025][T16303] RSP: 002b:00007fe932426038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  286.881092][T16303] RAX: ffffffffffffffda RBX: 00007fe934006080 RCX: 00007fe933dde9a9
[  286.881103][T16303] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006
[  286.881115][T16303] RBP: 00007fe932426090 R08: 00000000000003c0 R09: 0000000000000000
[  286.881127][T16303] R10: 0000200000001040 R11: 0000000000000246 R12: 0000000000000002
[  286.881185][T16303] R13: 0000000000000000 R14: 00007fe934006080 R15: 00007ffed0da6af8
[  286.881229][T16303]  </TASK>
[  286.881719][T16293] IPVS: using max 2592 ests per chain, 129600 per kthread
[  286.923742][T16304] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4200'.
[  287.088309][T16280] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.329563][T16280] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.352133][T16280] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.371862][T16280] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.440878][T16280] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.548249][T16324] loop3: detected capacity change from 0 to 512
[  287.561125][T16324] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  287.596043][T16324] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.4206: bad orphan inode 11
[  287.617949][T16324] ext4_test_bit(bit=10, block=4) = 1
[  287.623304][T16324] is_bad_inode(inode)=0
[  287.627812][T16324] NEXT_ORPHAN(inode)=2080374784
[  287.632819][T16324] max_ino=32
[  287.636105][T16324] i_nlink=0
[  287.639185][T16335] ªªªªªªª»: renamed from vlan0
[  287.645029][T16324] EXT4-fs (loop3): 1 truncate cleaned up
[  287.652913][T16324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.666852][T16324] xt_hashlimit: size too large, truncated to 1048576
[  287.696931][T16338] netlink: 'syz.0.4212': attribute type 1 has an invalid length.
[  287.719213][T16338] 8021q: adding VLAN 0 to HW filter on device bond1
[  287.735398][T16338] bond1: (slave gretap1): making interface the new active one
[  287.744447][T16338] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  287.765208][T16338] vlan2: entered allmulticast mode
[  287.771278][T16338] bond1: entered allmulticast mode
[  287.776490][T16338] gretap1: entered allmulticast mode
[  287.782668][T16338] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  287.915537][T12443] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.956171][T16354] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.018333][T16354] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.039294][T16350] lo speed is unknown, defaulting to 1000
[  288.045730][T16350] lo speed is unknown, defaulting to 1000
[  288.055439][T16350] lo speed is unknown, defaulting to 1000
[  288.078137][T16354] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.138483][T16350] infiniband syz0: set down
[  288.143106][T16350] infiniband syz0: added lo
[  288.148293][   T10] lo speed is unknown, defaulting to 1000
[  288.156293][T16354] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.171171][T16350] RDS/IB: syz0: added
[  288.175245][T16350] smc: adding ib device syz0 with port count 1
[  288.182603][T16350] smc:    ib device syz0 port 1 has pnetid 
[  288.189081][T16350] lo speed is unknown, defaulting to 1000
[  288.194938][   T10] lo speed is unknown, defaulting to 1000
[  288.230209][T16350] lo speed is unknown, defaulting to 1000
[  288.264801][T16350] lo speed is unknown, defaulting to 1000
[  288.299241][T16350] lo speed is unknown, defaulting to 1000
[  288.339681][T16350] lo speed is unknown, defaulting to 1000
[  288.453003][T16350] lo speed is unknown, defaulting to 1000
[  288.490927][T16372] netlink: 'syz.1.4221': attribute type 14 has an invalid length.
[  288.498996][T16372] netlink: 'syz.1.4221': attribute type 12 has an invalid length.
[  288.563396][T16380] loop6: detected capacity change from 0 to 512
[  288.595489][T16380] EXT4-fs: Ignoring removed mblk_io_submit option
[  288.603057][T16380] EXT4-fs: Ignoring removed oldalloc option
[  288.609051][T16380] ext4: Unknown parameter '.'
[  288.623720][T16380] loop6: detected capacity change from 0 to 1024
[  288.631405][T16380] EXT4-fs: Ignoring removed bh option
[  288.637109][T16380] EXT4-fs: inline encryption not supported
[  288.643090][T16380] ext4: Unknown parameter 'smackfsroot'
[  288.858750][T16416] __nla_validate_parse: 8 callbacks suppressed
[  288.858766][T16416] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4233'.
[  288.858969][T16392] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4229'.
[  288.920005][ T3394] IPVS: starting estimator thread 0...
[  289.006212][T16419] IPVS: using max 2784 ests per chain, 139200 per kthread
[  289.235468][T16434] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4242'.
[  289.355525][T16442] loop6: detected capacity change from 0 to 128
[  289.371100][T16442] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  289.469325][T16442] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  289.485371][T16448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.495582][T16447] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4246'.
[  289.504914][T16448] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.540921][T15307] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  289.649588][T16456] loop6: detected capacity change from 0 to 2048
[  289.830559][T16457] hub 6-0:1.0: USB hub found
[  289.840342][T16457] hub 6-0:1.0: 8 ports detected
[  290.034890][T16462] FAULT_INJECTION: forcing a failure.
[  290.034890][T16462] name failslab, interval 1, probability 0, space 0, times 0
[  290.047825][T16462] CPU: 1 UID: 0 PID: 16462 Comm: syz.0.4251 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  290.047851][T16462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  290.047863][T16462] Call Trace:
[  290.047872][T16462]  <TASK>
[  290.047880][T16462]  __dump_stack+0x1d/0x30
[  290.047901][T16462]  dump_stack_lvl+0xe8/0x140
[  290.047918][T16462]  dump_stack+0x15/0x1b
[  290.047931][T16462]  should_fail_ex+0x265/0x280
[  290.047986][T16462]  should_failslab+0x8c/0xb0
[  290.048005][T16462]  __kmalloc_noprof+0xa5/0x3e0
[  290.048027][T16462]  ? get_callchain_buffers+0xbe/0x2f0
[  290.048147][T16462]  get_callchain_buffers+0xbe/0x2f0
[  290.048173][T16462]  stack_map_alloc+0x247/0x2b0
[  290.048253][T16462]  map_create+0x843/0xb90
[  290.048326][T16462]  ? security_bpf+0x2b/0x90
[  290.048344][T16462]  __sys_bpf+0x5ab/0x790
[  290.048371][T16462]  __x64_sys_bpf+0x41/0x50
[  290.048432][T16462]  x64_sys_call+0x2478/0x2fb0
[  290.048449][T16462]  do_syscall_64+0xd2/0x200
[  290.048511][T16462]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  290.048577][T16462]  ? clear_bhb_loop+0x40/0x90
[  290.048625][T16462]  ? clear_bhb_loop+0x40/0x90
[  290.048642][T16462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.048712][T16462] RIP: 0033:0x7fbb54cae9a9
[  290.048726][T16462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  290.048740][T16462] RSP: 002b:00007fbb53317038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  290.048757][T16462] RAX: ffffffffffffffda RBX: 00007fbb54ed5fa0 RCX: 00007fbb54cae9a9
[  290.048767][T16462] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000
[  290.048789][T16462] RBP: 00007fbb53317090 R08: 0000000000000000 R09: 0000000000000000
[  290.048799][T16462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  290.048826][T16462] R13: 0000000000000000 R14: 00007fbb54ed5fa0 R15: 00007ffe0aa61718
[  290.048841][T16462]  </TASK>
[  290.292397][T16472] netlink: 'syz.1.4256': attribute type 39 has an invalid length.
[  290.514447][T16484] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4260'.
[  290.547485][T16472] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  290.674136][T16492] loop6: detected capacity change from 0 to 2048
[  290.682357][T16492] EXT4-fs: quotafile must be on filesystem root
[  290.696063][T16492] loop6: detected capacity change from 0 to 512
[  290.750230][T16500] loop6: detected capacity change from 0 to 2048
[  291.011654][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4267'.
[  291.128905][   T29] kauditd_printk_skb: 439 callbacks suppressed
[  291.128963][   T29] audit: type=1326 audit(1753195609.752:29321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.6.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe933dde9a9 code=0x7ffc0000
[  291.165864][   T29] audit: type=1326 audit(1753195609.762:29322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16481 comm="syz.4.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19430ae9a9 code=0x7ffc0000
[  291.190010][T16513] loop6: detected capacity change from 0 to 2048
[  291.196557][   T29] audit: type=1326 audit(1753195609.762:29323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16481 comm="syz.4.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19430ae9a9 code=0x7ffc0000
[  291.220683][   T29] audit: type=1326 audit(1753195609.772:29324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16481 comm="syz.4.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19430ae9a9 code=0x7ffc0000
[  291.244945][   T29] audit: type=1326 audit(1753195609.772:29325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.6.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe933dde9a9 code=0x7ffc0000
[  291.269269][   T29] audit: type=1326 audit(1753195609.782:29326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.6.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe933dde9a9 code=0x7ffc0000
[  291.292946][   T29] audit: type=1326 audit(1753195609.782:29327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.6.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe933dde9a9 code=0x7ffc0000
[  291.295495][T16516] syz0: rxe_newlink: already configured on lo
[  291.317340][   T29] audit: type=1326 audit(1753195609.782:29328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.6.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe933dde9a9 code=0x7ffc0000
[  291.347280][   T29] audit: type=1326 audit(1753195609.782:29329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.6.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe933dde9a9 code=0x7ffc0000
[  291.371223][   T29] audit: type=1326 audit(1753195609.782:29330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.6.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe933dde9a9 code=0x7ffc0000
[  291.396649][T16518] FAULT_INJECTION: forcing a failure.
[  291.396649][T16518] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  291.409837][T16518] CPU: 0 UID: 0 PID: 16518 Comm: syz.0.4274 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  291.409928][T16518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  291.409940][T16518] Call Trace:
[  291.409947][T16518]  <TASK>
[  291.409954][T16518]  __dump_stack+0x1d/0x30
[  291.409975][T16518]  dump_stack_lvl+0xe8/0x140
[  291.409993][T16518]  dump_stack+0x15/0x1b
[  291.410007][T16518]  should_fail_ex+0x265/0x280
[  291.410092][T16518]  should_fail+0xb/0x20
[  291.410115][T16518]  should_fail_usercopy+0x1a/0x20
[  291.410171][T16518]  _copy_to_user+0x20/0xa0
[  291.410192][T16518]  simple_read_from_buffer+0xb5/0x130
[  291.410218][T16518]  proc_fail_nth_read+0x100/0x140
[  291.410272][T16518]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  291.410357][T16518]  vfs_read+0x19d/0x6f0
[  291.410384][T16518]  ? __rcu_read_unlock+0x4f/0x70
[  291.410407][T16518]  ? __fget_files+0x184/0x1c0
[  291.410425][T16518]  ksys_read+0xda/0x1a0
[  291.410522][T16518]  __x64_sys_read+0x40/0x50
[  291.410547][T16518]  x64_sys_call+0x2d77/0x2fb0
[  291.410567][T16518]  do_syscall_64+0xd2/0x200
[  291.410630][T16518]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  291.410654][T16518]  ? clear_bhb_loop+0x40/0x90
[  291.410739][T16518]  ? clear_bhb_loop+0x40/0x90
[  291.410761][T16518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.410782][T16518] RIP: 0033:0x7fbb54cad3bc
[  291.410799][T16518] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  291.410881][T16518] RSP: 002b:00007fbb53317030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  291.410960][T16518] RAX: ffffffffffffffda RBX: 00007fbb54ed5fa0 RCX: 00007fbb54cad3bc
[  291.410972][T16518] RDX: 000000000000000f RSI: 00007fbb533170a0 RDI: 0000000000000007
[  291.410983][T16518] RBP: 00007fbb53317090 R08: 0000000000000000 R09: 0000000000000000
[  291.411013][T16518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  291.411025][T16518] R13: 0000000000000000 R14: 00007fbb54ed5fa0 R15: 00007ffe0aa61718
[  291.411044][T16518]  </TASK>
[  291.669415][ T3472] IPVS: starting estimator thread 0...
[  291.713224][T16519] hub 6-0:1.0: USB hub found
[  291.718933][T16519] hub 6-0:1.0: 8 ports detected
[  291.736516][T16535] xt_hashlimit: max too large, truncated to 1048576
[  291.743925][T16535] FAULT_INJECTION: forcing a failure.
[  291.743925][T16535] name failslab, interval 1, probability 0, space 0, times 0
[  291.756733][T16535] CPU: 1 UID: 0 PID: 16535 Comm: syz.1.4281 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  291.756781][T16535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  291.756794][T16535] Call Trace:
[  291.756800][T16535]  <TASK>
[  291.756808][T16535]  __dump_stack+0x1d/0x30
[  291.756830][T16535]  dump_stack_lvl+0xe8/0x140
[  291.756850][T16535]  dump_stack+0x15/0x1b
[  291.756867][T16535]  should_fail_ex+0x265/0x280
[  291.756952][T16535]  should_failslab+0x8c/0xb0
[  291.756972][T16535]  __kvmalloc_node_noprof+0x123/0x4e0
[  291.756999][T16535]  ? nf_hook_entries_grow+0x1bc/0x450
[  291.757032][T16535]  nf_hook_entries_grow+0x1bc/0x450
[  291.757127][T16535]  __nf_register_net_hook+0x18e/0x480
[  291.757154][T16535]  ? queue_delayed_work_on+0x106/0x170
[  291.757177][T16535]  nf_register_net_hook+0x88/0x130
[  291.757220][T16535]  nf_register_net_hooks+0x44/0x150
[  291.757245][T16535]  nf_defrag_ipv4_enable+0x6e/0xc0
[  291.757282][T16535]  nf_ct_netns_do_get+0x13c/0x380
[  291.757312][T16535]  nf_ct_netns_get+0x87/0xc0
[  291.757340][T16535]  conntrack_mt_check+0x35/0xa0
[  291.757364][T16535]  xt_check_match+0x2aa/0x4f0
[  291.757469][T16535]  ? xt_find_match+0x1d1/0x210
[  291.757495][T16535]  ? xt_find_match+0x1b5/0x210
[  291.757561][T16535]  translate_table+0xa9c/0xf90
[  291.757650][T16535]  ? _copy_from_user+0x89/0xb0
[  291.757671][T16535]  do_ipt_set_ctl+0x66f/0x820
[  291.757699][T16535]  nf_setsockopt+0x196/0x1b0
[  291.757742][T16535]  ip_setsockopt+0x102/0x110
[  291.757770][T16535]  udp_setsockopt+0x99/0xb0
[  291.757795][T16535]  sock_common_setsockopt+0x69/0x80
[  291.757856][T16535]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  291.757896][T16535]  __sys_setsockopt+0x184/0x200
[  291.757926][T16535]  __x64_sys_setsockopt+0x64/0x80
[  291.757963][T16535]  x64_sys_call+0x2bd5/0x2fb0
[  291.758062][T16535]  do_syscall_64+0xd2/0x200
[  291.758142][T16535]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  291.758164][T16535]  ? clear_bhb_loop+0x40/0x90
[  291.758184][T16535]  ? clear_bhb_loop+0x40/0x90
[  291.758205][T16535]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.758301][T16535] RIP: 0033:0x7f99d3bee9a9
[  291.758314][T16535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  291.758331][T16535] RSP: 002b:00007f99d224f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  291.758350][T16535] RAX: ffffffffffffffda RBX: 00007f99d3e15fa0 RCX: 00007f99d3bee9a9
[  291.758361][T16535] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006
[  291.758372][T16535] RBP: 00007f99d224f090 R08: 00000000000003c8 R09: 0000000000000000
[  291.758411][T16535] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001
[  291.758422][T16535] R13: 0000000000000000 R14: 00007f99d3e15fa0 R15: 00007fff6aeb9ef8
[  291.758438][T16535]  </TASK>
[  291.758447][T16535] xt_conntrack: cannot load conntrack support for proto=2
[  291.775232][T16530] IPVS: using max 2736 ests per chain, 136800 per kthread
[  292.064472][T16354] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  292.077402][T16354] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  292.087529][T16548] rdma_rxe: rxe_newlink: failed to add lo
[  292.100459][T16354] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  292.125164][T16354] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  292.163001][T16550] syzkaller0: entered promiscuous mode
[  292.168584][T16550] syzkaller0: entered allmulticast mode
[  292.238726][T16569] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  292.247188][T16569] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  292.255697][T16569] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  292.263969][T16569] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  292.277453][T16569] netlink: 'syz.4.4286': attribute type 1 has an invalid length.
[  292.321135][T16574] netlink: 312 bytes leftover after parsing attributes in process `syz.6.4294'.
[  292.349945][T16562] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4291'.
[  292.382654][T16579] loop3: detected capacity change from 0 to 2048
[  292.421719][T16585] rdma_rxe: rxe_newlink: failed to add lo
[  292.545243][T16594] hub 6-0:1.0: USB hub found
[  292.549956][T16594] hub 6-0:1.0: 8 ports detected
[  292.981088][T16615] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4309'.
[  293.100576][T16623] rdma_rxe: rxe_newlink: failed to add lo
[  293.168036][T16632] FAULT_INJECTION: forcing a failure.
[  293.168036][T16632] name failslab, interval 1, probability 0, space 0, times 0
[  293.180827][T16632] CPU: 0 UID: 0 PID: 16632 Comm: syz.4.4314 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  293.180932][T16632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  293.180944][T16632] Call Trace:
[  293.180950][T16632]  <TASK>
[  293.180956][T16632]  __dump_stack+0x1d/0x30
[  293.180980][T16632]  dump_stack_lvl+0xe8/0x140
[  293.181010][T16632]  dump_stack+0x15/0x1b
[  293.181031][T16632]  should_fail_ex+0x265/0x280
[  293.181049][T16632]  should_failslab+0x8c/0xb0
[  293.181063][T16632]  kmem_cache_alloc_node_noprof+0x57/0x320
[  293.181081][T16632]  ? __alloc_skb+0x101/0x320
[  293.181136][T16632]  __alloc_skb+0x101/0x320
[  293.181204][T16632]  netlink_alloc_large_skb+0xba/0xf0
[  293.181221][T16632]  netlink_sendmsg+0x3cf/0x6b0
[  293.181234][T16632]  ? __pfx_netlink_sendmsg+0x10/0x10
[  293.181245][T16632]  __sock_sendmsg+0x145/0x180
[  293.181262][T16632]  ____sys_sendmsg+0x31e/0x4e0
[  293.181281][T16632]  ___sys_sendmsg+0x17b/0x1d0
[  293.181306][T16632]  __x64_sys_sendmsg+0xd4/0x160
[  293.181401][T16632]  x64_sys_call+0x2999/0x2fb0
[  293.181482][T16632]  do_syscall_64+0xd2/0x200
[  293.181494][T16632]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  293.181510][T16632]  ? clear_bhb_loop+0x40/0x90
[  293.181566][T16632]  ? clear_bhb_loop+0x40/0x90
[  293.181577][T16632]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.181632][T16632] RIP: 0033:0x7f19430ae9a9
[  293.181642][T16632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  293.181709][T16632] RSP: 002b:00007f1941717038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  293.181721][T16632] RAX: ffffffffffffffda RBX: 00007f19432d5fa0 RCX: 00007f19430ae9a9
[  293.181735][T16632] RDX: 0000000000044010 RSI: 00002000000001c0 RDI: 0000000000000006
[  293.181743][T16632] RBP: 00007f1941717090 R08: 0000000000000000 R09: 0000000000000000
[  293.181750][T16632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.181757][T16632] R13: 0000000000000000 R14: 00007f19432d5fa0 R15: 00007ffc302e3f48
[  293.181776][T16632]  </TASK>
[  293.445143][T16636] FAULT_INJECTION: forcing a failure.
[  293.445143][T16636] name failslab, interval 1, probability 0, space 0, times 0
[  293.457917][T16636] CPU: 0 UID: 0 PID: 16636 Comm: syz.4.4317 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  293.458124][T16636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  293.458137][T16636] Call Trace:
[  293.458146][T16636]  <TASK>
[  293.458155][T16636]  __dump_stack+0x1d/0x30
[  293.458179][T16636]  dump_stack_lvl+0xe8/0x140
[  293.458199][T16636]  dump_stack+0x15/0x1b
[  293.458312][T16636]  should_fail_ex+0x265/0x280
[  293.458342][T16636]  ? io_ring_ctx_alloc+0x38/0x6a0
[  293.458369][T16636]  should_failslab+0x8c/0xb0
[  293.458389][T16636]  __kmalloc_cache_noprof+0x4c/0x320
[  293.458457][T16636]  ? avc_has_perm_noaudit+0x1b1/0x200
[  293.458485][T16636]  io_ring_ctx_alloc+0x38/0x6a0
[  293.458509][T16636]  ? avc_has_perm+0xd3/0x150
[  293.458577][T16636]  ? io_uring_fill_params+0x270/0x300
[  293.458606][T16636]  io_uring_create+0x10f/0x610
[  293.458683][T16636]  __se_sys_io_uring_setup+0x1f7/0x210
[  293.458713][T16636]  __x64_sys_io_uring_setup+0x31/0x40
[  293.458742][T16636]  x64_sys_call+0x184b/0x2fb0
[  293.458763][T16636]  do_syscall_64+0xd2/0x200
[  293.458854][T16636]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  293.458881][T16636]  ? clear_bhb_loop+0x40/0x90
[  293.458902][T16636]  ? clear_bhb_loop+0x40/0x90
[  293.458923][T16636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.458942][T16636] RIP: 0033:0x7f19430ae9a9
[  293.459008][T16636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  293.459023][T16636] RSP: 002b:00007f1941717038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  293.459041][T16636] RAX: ffffffffffffffda RBX: 00007f19432d5fa0 RCX: 00007f19430ae9a9
[  293.459123][T16636] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000001de0
[  293.459134][T16636] RBP: 00007f1941717090 R08: 0000000000000000 R09: 0000000000000000
[  293.459145][T16636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.459217][T16636] R13: 0000000000000000 R14: 00007f19432d5fa0 R15: 00007ffc302e3f48
[  293.459236][T16636]  </TASK>
[  293.749874][T16652] loop3: detected capacity change from 0 to 2048
[  293.787744][T16652] EXT4-fs (loop3): #clusters per group too big: 32768
[  293.791153][T16649] syz0: rxe_newlink: already configured on lo
[  293.888277][T16663] loop6: detected capacity change from 0 to 2048
[  293.927374][T16647] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4321'.
[  293.946682][T16663] Alternate GPT is invalid, using primary GPT.
[  293.953074][T16663]  loop6: p1 p2 p3
[  294.015987][T16674] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4329'.
[  294.090880][T16679] hub 6-0:1.0: USB hub found
[  294.096700][T16679] hub 6-0:1.0: 8 ports detected
[  294.129177][T16676] lo speed is unknown, defaulting to 1000
[  294.454299][T16686] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4332'.
[  294.695952][T16697] FAULT_INJECTION: forcing a failure.
[  294.695952][T16697] name failslab, interval 1, probability 0, space 0, times 0
[  294.708789][T16697] CPU: 0 UID: 0 PID: 16697 Comm: syz.0.4337 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  294.708823][T16697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  294.708836][T16697] Call Trace:
[  294.708842][T16697]  <TASK>
[  294.708850][T16697]  __dump_stack+0x1d/0x30
[  294.708875][T16697]  dump_stack_lvl+0xe8/0x140
[  294.708894][T16697]  dump_stack+0x15/0x1b
[  294.708917][T16697]  should_fail_ex+0x265/0x280
[  294.708951][T16697]  ? io_getxattr_prep+0x129/0x200
[  294.708974][T16697]  should_failslab+0x8c/0xb0
[  294.708994][T16697]  __kmalloc_cache_noprof+0x4c/0x320
[  294.709022][T16697]  ? __io_alloc_req_refill+0x12e/0x1d0
[  294.709044][T16697]  io_getxattr_prep+0x129/0x200
[  294.709116][T16697]  io_submit_sqes+0x5e2/0xfd0
[  294.709213][T16697]  __se_sys_io_uring_enter+0x1c1/0x1b70
[  294.709237][T16697]  ? 0xffffffff81000000
[  294.709248][T16697]  ? __rcu_read_unlock+0x4f/0x70
[  294.709267][T16697]  ? get_pid_task+0x96/0xd0
[  294.709298][T16697]  ? proc_fail_nth_write+0x12d/0x160
[  294.709329][T16697]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  294.709356][T16697]  ? vfs_write+0x75e/0x8e0
[  294.709439][T16697]  ? __rcu_read_unlock+0x4f/0x70
[  294.709457][T16697]  ? __fget_files+0x184/0x1c0
[  294.709484][T16697]  ? fput+0x8f/0xc0
[  294.709506][T16697]  __x64_sys_io_uring_enter+0x78/0x90
[  294.709534][T16697]  x64_sys_call+0x28c8/0x2fb0
[  294.709607][T16697]  do_syscall_64+0xd2/0x200
[  294.709625][T16697]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  294.709647][T16697]  ? clear_bhb_loop+0x40/0x90
[  294.709667][T16697]  ? clear_bhb_loop+0x40/0x90
[  294.709733][T16697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.709751][T16697] RIP: 0033:0x7fbb54cae9a9
[  294.709767][T16697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.709784][T16697] RSP: 002b:00007fbb53317038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  294.709813][T16697] RAX: ffffffffffffffda RBX: 00007fbb54ed5fa0 RCX: 00007fbb54cae9a9
[  294.709826][T16697] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000006
[  294.709906][T16697] RBP: 00007fbb53317090 R08: 0000000000000000 R09: 0000000000000000
[  294.709917][T16697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  294.709928][T16697] R13: 0000000000000000 R14: 00007fbb54ed5fa0 R15: 00007ffe0aa61718
[  294.709948][T16697]  </TASK>
[  294.737358][T16695] rdma_rxe: rxe_newlink: failed to add lo
[  295.016525][T16713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.032364][T16706] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4339'.
[  295.042585][T16713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.063453][T16718] SELinux: syz.1.4345 (16718) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  295.136694][T16718] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  295.145145][T16718] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  295.153552][T16718] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  295.162041][T16718] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  295.292958][   T23] syz1: Port: 1 Link DOWN
[  295.305036][T16731] $Hÿ: renamed from bond0 (while UP)
[  295.344329][T16731] $Hÿ: entered promiscuous mode
[  295.349390][T16731] bond_slave_0: entered promiscuous mode
[  295.355111][T16731] bond_slave_1: entered promiscuous mode
[  295.370819][T16731] dummy0: entered promiscuous mode
[  295.399889][T16736] bridge0: port 3(batadv1) entered blocking state
[  295.407054][T16736] bridge0: port 3(batadv1) entered disabled state
[  295.423172][T16736] batadv1: entered allmulticast mode
[  295.428957][T16736] batadv1: entered promiscuous mode
[  295.491514][T16750] loop6: detected capacity change from 0 to 2048
[  295.653164][T16753] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4357'.
[  295.671911][T16770] hub 6-0:1.0: USB hub found
[  295.678962][T16770] hub 6-0:1.0: 8 ports detected
[  295.734264][T16772] netlink: 'syz.4.4362': attribute type 2 has an invalid length.
[  295.742714][T16772] netlink: 'syz.4.4362': attribute type 1 has an invalid length.
[  295.750665][T16772] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.4362'.
[  295.883744][T16795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4373'.
[  295.913537][T15307] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  295.922931][T15307] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  296.071458][T16807] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4376'.
[  296.098941][T16799] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4375'.
[  296.333506][T16821] FAULT_INJECTION: forcing a failure.
[  296.333506][T16821] name failslab, interval 1, probability 0, space 0, times 0
[  296.346836][T16821] CPU: 0 UID: 0 PID: 16821 Comm: syz.1.4382 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  296.346884][T16821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  296.346895][T16821] Call Trace:
[  296.346902][T16821]  <TASK>
[  296.346937][T16821]  __dump_stack+0x1d/0x30
[  296.346960][T16821]  dump_stack_lvl+0xe8/0x140
[  296.346976][T16821]  dump_stack+0x15/0x1b
[  296.346991][T16821]  should_fail_ex+0x265/0x280
[  296.347021][T16821]  should_failslab+0x8c/0xb0
[  296.347058][T16821]  __kmalloc_noprof+0xa5/0x3e0
[  296.347121][T16821]  ? sctp_make_abort_user+0x17b/0x3a0
[  296.347147][T16821]  sctp_make_abort_user+0x17b/0x3a0
[  296.347166][T16821]  ? sctp_epaddr_lookup_transport+0x9e/0x130
[  296.347201][T16821]  sctp_sendmsg_check_sflags+0x17e/0x1e0
[  296.347258][T16821]  sctp_sendmsg+0x75f/0x18d0
[  296.347289][T16821]  ? __pfx_sctp_sendmsg+0x10/0x10
[  296.347311][T16821]  inet_sendmsg+0xc2/0xd0
[  296.347327][T16821]  __sock_sendmsg+0x102/0x180
[  296.347387][T16821]  ____sys_sendmsg+0x345/0x4e0
[  296.347421][T16821]  ___sys_sendmsg+0x17b/0x1d0
[  296.347481][T16821]  __sys_sendmmsg+0x178/0x300
[  296.347566][T16821]  __x64_sys_sendmmsg+0x57/0x70
[  296.347646][T16821]  x64_sys_call+0x2f2f/0x2fb0
[  296.347665][T16821]  do_syscall_64+0xd2/0x200
[  296.347682][T16821]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  296.347702][T16821]  ? clear_bhb_loop+0x40/0x90
[  296.347792][T16821]  ? clear_bhb_loop+0x40/0x90
[  296.347839][T16821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.347908][T16821] RIP: 0033:0x7f99d3bee9a9
[  296.347924][T16821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  296.347943][T16821] RSP: 002b:00007f99d224f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  296.347960][T16821] RAX: ffffffffffffffda RBX: 00007f99d3e15fa0 RCX: 00007f99d3bee9a9
[  296.348028][T16821] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000004
[  296.348118][T16821] RBP: 00007f99d224f090 R08: 0000000000000000 R09: 0000000000000000
[  296.348129][T16821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  296.348142][T16821] R13: 0000000000000000 R14: 00007f99d3e15fa0 R15: 00007fff6aeb9ef8
[  296.348161][T16821]  </TASK>
[  296.402522][T16824] tipc: Started in network mode
[  296.579563][T16824] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[  296.588838][T16824] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  296.704008][T16825] rdma_rxe: rxe_newlink: failed to add lo
[  296.724961][   T29] kauditd_printk_skb: 296 callbacks suppressed
[  296.724977][   T29] audit: type=1400 audit(1753195615.354:29627): avc:  denied  { getopt } for  pid=16827 comm="syz.0.4386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  296.843554][T16841] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4388'.
[  296.894863][   T29] audit: type=1326 audit(1753195615.505:29628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16827 comm="syz.0.4386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb54cae9a9 code=0x0
[  297.070705][   T29] audit: type=1326 audit(1753195615.695:29629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16849 comm="syz.1.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  297.121161][   T29] audit: type=1326 audit(1753195615.695:29630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16849 comm="syz.1.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  297.145045][   T29] audit: type=1326 audit(1753195615.695:29631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16849 comm="syz.1.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  297.168795][   T29] audit: type=1326 audit(1753195615.695:29632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16849 comm="syz.1.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  297.192382][   T29] audit: type=1326 audit(1753195615.695:29633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16849 comm="syz.1.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  297.216024][   T29] audit: type=1326 audit(1753195615.695:29634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16849 comm="syz.1.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  297.239801][   T29] audit: type=1326 audit(1753195615.695:29635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16849 comm="syz.1.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  297.263599][   T29] audit: type=1326 audit(1753195615.695:29636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16849 comm="syz.1.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  297.426478][T16855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  297.434683][T16855] batman_adv: batadv0: Removing interface: batadv_slave_0
[  297.444878][T16855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  297.452528][T16855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  297.492503][T16857] lo speed is unknown, defaulting to 1000
[  297.593347][T16865] loop6: detected capacity change from 0 to 1024
[  297.614317][T16865] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.641205][T16865] FAULT_INJECTION: forcing a failure.
[  297.641205][T16865] name failslab, interval 1, probability 0, space 0, times 0
[  297.653890][T16865] CPU: 1 UID: 0 PID: 16865 Comm: +}[@ Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  297.653917][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  297.653931][T16865] Call Trace:
[  297.653937][T16865]  <TASK>
[  297.654017][T16865]  __dump_stack+0x1d/0x30
[  297.654040][T16865]  dump_stack_lvl+0xe8/0x140
[  297.654059][T16865]  dump_stack+0x15/0x1b
[  297.654072][T16865]  should_fail_ex+0x265/0x280
[  297.654102][T16865]  should_failslab+0x8c/0xb0
[  297.654132][T16865]  kmem_cache_alloc_noprof+0x50/0x310
[  297.654158][T16865]  ? __es_insert_extent+0x508/0xee0
[  297.654176][T16865]  __es_insert_extent+0x508/0xee0
[  297.654196][T16865]  ext4_es_insert_extent+0x435/0x1c10
[  297.654213][T16865]  ? format_decode+0xaf/0x580
[  297.654338][T16865]  ext4_map_query_blocks+0x2fd/0x480
[  297.654360][T16865]  ext4_map_blocks+0x3a1/0xd70
[  297.654387][T16865]  ? _prb_read_valid+0x8c1/0x920
[  297.654485][T16865]  ? xas_load+0x413/0x430
[  297.654512][T16865]  ? xa_load+0xb1/0xe0
[  297.654529][T16865]  ext4_getblk+0x114/0x510
[  297.654610][T16865]  ext4_bread_batch+0x5c/0x320
[  297.654631][T16865]  __ext4_find_entry+0x840/0xf40
[  297.654664][T16865]  ? __d_lookup_rcu+0x251/0x2a0
[  297.654691][T16865]  ? d_alloc_parallel+0xb9a/0xc40
[  297.654791][T16865]  ext4_lookup+0xbb/0x390
[  297.654817][T16865]  __lookup_slow+0x193/0x250
[  297.654843][T16865]  lookup_slow+0x3c/0x60
[  297.654865][T16865]  walk_component+0x1ec/0x220
[  297.654887][T16865]  path_lookupat+0xfe/0x2a0
[  297.654935][T16865]  filename_lookup+0x147/0x340
[  297.654964][T16865]  filename_setxattr+0x56/0x400
[  297.654996][T16865]  path_setxattrat+0x2c9/0x310
[  297.655154][T16865]  __x64_sys_setxattr+0x6e/0x90
[  297.655183][T16865]  x64_sys_call+0x28a7/0x2fb0
[  297.655201][T16865]  do_syscall_64+0xd2/0x200
[  297.655285][T16865]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  297.655307][T16865]  ? clear_bhb_loop+0x40/0x90
[  297.655378][T16865]  ? clear_bhb_loop+0x40/0x90
[  297.655460][T16865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.655484][T16865] RIP: 0033:0x7fe933dde9a9
[  297.655497][T16865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  297.655542][T16865] RSP: 002b:00007fe932447038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  297.655605][T16865] RAX: ffffffffffffffda RBX: 00007fe934005fa0 RCX: 00007fe933dde9a9
[  297.655676][T16865] RDX: 0000200000000300 RSI: 00002000000001c0 RDI: 0000200000000000
[  297.655689][T16865] RBP: 00007fe932447090 R08: 0000000000000001 R09: 0000000000000000
[  297.655703][T16865] R10: 0000000000000841 R11: 0000000000000246 R12: 0000000000000001
[  297.655716][T16865] R13: 0000000000000000 R14: 00007fe934005fa0 R15: 00007ffed0da6af8
[  297.655774][T16865]  </TASK>
[  297.942658][T15435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.802195][T16896] rdma_rxe: rxe_newlink: failed to add lo
[  298.895179][T16906] netlink: 'syz.6.4410': attribute type 3 has an invalid length.
[  299.066831][T16921] loop3: detected capacity change from 0 to 2048
[  299.069472][T16906] lo speed is unknown, defaulting to 1000
[  299.101912][T16921]  loop3: p1 < > p4
[  299.106392][T16921] loop3: p4 size 8388608 extends beyond EOD, truncated
[  299.240623][T16925] __nla_validate_parse: 4 callbacks suppressed
[  299.240658][T16925] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4418'.
[  299.406704][T16935] netlink: 'syz.6.4421': attribute type 2 has an invalid length.
[  299.415109][T16935] netlink: 'syz.6.4421': attribute type 1 has an invalid length.
[  299.422867][T16935] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.4421'.
[  299.459952][T16937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4422'.
[  299.468951][T16937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4422'.
[  299.597132][T16941] rdma_rxe: rxe_newlink: failed to add lo
[  299.722529][T16946] lo speed is unknown, defaulting to 1000
[  299.801157][T16951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4426'.
[  299.820452][T16957] hub 6-0:1.0: USB hub found
[  299.828647][T16957] hub 6-0:1.0: 8 ports detected
[  299.883685][T16955] rdma_rxe: rxe_newlink: failed to add lo
[  299.936654][T16965] FAULT_INJECTION: forcing a failure.
[  299.936654][T16965] name failslab, interval 1, probability 0, space 0, times 0
[  299.949594][T16965] CPU: 1 UID: 0 PID: 16965 Comm: syz.3.4432 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  299.949670][T16965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  299.949752][T16965] Call Trace:
[  299.949757][T16965]  <TASK>
[  299.949765][T16965]  __dump_stack+0x1d/0x30
[  299.949784][T16965]  dump_stack_lvl+0xe8/0x140
[  299.949868][T16965]  dump_stack+0x15/0x1b
[  299.949882][T16965]  should_fail_ex+0x265/0x280
[  299.949958][T16965]  should_failslab+0x8c/0xb0
[  299.949984][T16965]  kmem_cache_alloc_node_noprof+0x57/0x320
[  299.950081][T16965]  ? __alloc_skb+0x101/0x320
[  299.950110][T16965]  __alloc_skb+0x101/0x320
[  299.950137][T16965]  netlink_alloc_large_skb+0xba/0xf0
[  299.950184][T16965]  netlink_sendmsg+0x3cf/0x6b0
[  299.950206][T16965]  ? __pfx_netlink_sendmsg+0x10/0x10
[  299.950222][T16965]  __sock_sendmsg+0x145/0x180
[  299.950243][T16965]  ____sys_sendmsg+0x31e/0x4e0
[  299.950311][T16965]  ___sys_sendmsg+0x17b/0x1d0
[  299.950348][T16965]  __x64_sys_sendmsg+0xd4/0x160
[  299.950367][T16965]  x64_sys_call+0x2999/0x2fb0
[  299.950454][T16965]  do_syscall_64+0xd2/0x200
[  299.950465][T16965]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  299.950497][T16965]  ? clear_bhb_loop+0x40/0x90
[  299.950508][T16965]  ? clear_bhb_loop+0x40/0x90
[  299.950524][T16965]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.950546][T16965] RIP: 0033:0x7f93f39ae9a9
[  299.950561][T16965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  299.950618][T16965] RSP: 002b:00007f93f200f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  299.950639][T16965] RAX: ffffffffffffffda RBX: 00007f93f3bd5fa0 RCX: 00007f93f39ae9a9
[  299.950652][T16965] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000005
[  299.950677][T16965] RBP: 00007f93f200f090 R08: 0000000000000000 R09: 0000000000000000
[  299.950687][T16965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  299.950698][T16965] R13: 0000000000000000 R14: 00007f93f3bd5fa0 R15: 00007ffd882ab818
[  299.950714][T16965]  </TASK>
[  300.173608][T16967] netlink: 'syz.3.4434': attribute type 2 has an invalid length.
[  300.181524][T16967] netlink: 'syz.3.4434': attribute type 1 has an invalid length.
[  300.189341][T16967] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.4434'.
[  300.234621][T16975] loop3: detected capacity change from 0 to 512
[  300.246905][T16975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.411563][T16987] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4438'.
[  300.555296][T16991] loop6: detected capacity change from 0 to 1024
[  300.568954][T16991] EXT4-fs: Ignoring removed nobh option
[  300.574609][T16991] EXT4-fs: Ignoring removed bh option
[  300.601982][T16991] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.981110][T12443] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.986069][T17000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4445'.
[  301.021193][T17001] hub 6-0:1.0: USB hub found
[  301.026660][T17001] hub 6-0:1.0: 8 ports detected
[  301.162623][T17008] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4457'.
[  301.223909][T17014] netlink: 'syz.3.4450': attribute type 2 has an invalid length.
[  301.232487][T17014] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4450'.
[  301.287755][T15435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.297658][T17021] FAULT_INJECTION: forcing a failure.
[  301.297658][T17021] name failslab, interval 1, probability 0, space 0, times 0
[  301.310446][T17021] CPU: 1 UID: 0 PID: 17021 Comm: syz.3.4453 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  301.310481][T17021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  301.310493][T17021] Call Trace:
[  301.310500][T17021]  <TASK>
[  301.310507][T17021]  __dump_stack+0x1d/0x30
[  301.310528][T17021]  dump_stack_lvl+0xe8/0x140
[  301.310560][T17021]  dump_stack+0x15/0x1b
[  301.310574][T17021]  should_fail_ex+0x265/0x280
[  301.310593][T17021]  ? audit_log_d_path+0x8d/0x150
[  301.310654][T17021]  should_failslab+0x8c/0xb0
[  301.310667][T17021]  __kmalloc_cache_noprof+0x4c/0x320
[  301.310683][T17021]  audit_log_d_path+0x8d/0x150
[  301.310710][T17021]  audit_log_d_path_exe+0x42/0x70
[  301.310725][T17021]  audit_log_task+0x1e9/0x250
[  301.310742][T17021]  audit_seccomp+0x61/0x100
[  301.310755][T17021]  ? __seccomp_filter+0x68c/0x10d0
[  301.310832][T17021]  __seccomp_filter+0x69d/0x10d0
[  301.310844][T17021]  ? fdget_raw+0xbb/0xc0
[  301.310854][T17021]  ? __x64_sys_fstatfs+0xb7/0x140
[  301.310871][T17021]  __secure_computing+0x82/0x150
[  301.310967][T17021]  syscall_trace_enter+0xcf/0x1e0
[  301.310981][T17021]  do_syscall_64+0xac/0x200
[  301.310992][T17021]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  301.311005][T17021]  ? clear_bhb_loop+0x40/0x90
[  301.311052][T17021]  ? clear_bhb_loop+0x40/0x90
[  301.311064][T17021]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.311075][T17021] RIP: 0033:0x7f93f39ad3bc
[  301.311085][T17021] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  301.311095][T17021] RSP: 002b:00007f93f200f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  301.311106][T17021] RAX: ffffffffffffffda RBX: 00007f93f3bd5fa0 RCX: 00007f93f39ad3bc
[  301.311122][T17021] RDX: 000000000000000f RSI: 00007f93f200f0a0 RDI: 0000000000000006
[  301.311130][T17021] RBP: 00007f93f200f090 R08: 0000000000000000 R09: 0000000000000000
[  301.311138][T17021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  301.311146][T17021] R13: 0000000000000000 R14: 00007f93f3bd5fa0 R15: 00007ffd882ab818
[  301.311157][T17021]  </TASK>
[  301.337518][T17023] loop6: detected capacity change from 0 to 2048
[  301.357593][T17025] FAULT_INJECTION: forcing a failure.
[  301.357593][T17025] name failslab, interval 1, probability 0, space 0, times 0
[  301.508885][T17039] loop3: detected capacity change from 0 to 256
[  301.510545][T17025] CPU: 0 UID: 0 PID: 17025 Comm: syz.1.4455 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  301.510612][T17025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  301.510625][T17025] Call Trace:
[  301.510632][T17025]  <TASK>
[  301.510641][T17025]  __dump_stack+0x1d/0x30
[  301.510663][T17025]  dump_stack_lvl+0xe8/0x140
[  301.510683][T17025]  dump_stack+0x15/0x1b
[  301.510698][T17025]  should_fail_ex+0x265/0x280
[  301.510733][T17025]  should_failslab+0x8c/0xb0
[  301.510754][T17025]  kmem_cache_alloc_node_noprof+0x57/0x320
[  301.510781][T17025]  ? __alloc_skb+0x101/0x320
[  301.510809][T17025]  __alloc_skb+0x101/0x320
[  301.510835][T17025]  netlink_alloc_large_skb+0xba/0xf0
[  301.510865][T17025]  netlink_sendmsg+0x3cf/0x6b0
[  301.510908][T17025]  ? __pfx_netlink_sendmsg+0x10/0x10
[  301.510928][T17025]  __sock_sendmsg+0x145/0x180
[  301.510951][T17025]  ____sys_sendmsg+0x31e/0x4e0
[  301.511077][T17025]  ___sys_sendmsg+0x17b/0x1d0
[  301.511178][T17025]  __x64_sys_sendmsg+0xd4/0x160
[  301.511210][T17025]  x64_sys_call+0x2999/0x2fb0
[  301.511230][T17025]  do_syscall_64+0xd2/0x200
[  301.511292][T17025]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  301.511317][T17025]  ? clear_bhb_loop+0x40/0x90
[  301.511338][T17025]  ? clear_bhb_loop+0x40/0x90
[  301.511431][T17025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.511452][T17025] RIP: 0033:0x7f99d3bee9a9
[  301.511475][T17025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  301.511514][T17025] RSP: 002b:00007f99d224f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  301.511534][T17025] RAX: ffffffffffffffda RBX: 00007f99d3e15fa0 RCX: 00007f99d3bee9a9
[  301.511599][T17025] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000007
[  301.511612][T17025] RBP: 00007f99d224f090 R08: 0000000000000000 R09: 0000000000000000
[  301.511625][T17025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  301.511637][T17025] R13: 0000000000000000 R14: 00007f99d3e15fa0 R15: 00007fff6aeb9ef8
[  301.511656][T17025]  </TASK>
[  301.711511][T17044] hub 6-0:1.0: USB hub found
[  301.781849][   T29] kauditd_printk_skb: 730 callbacks suppressed
[  301.781864][   T29] audit: type=1326 audit(1753195620.407:30367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17041 comm="syz.1.4461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  301.812418][   T29] audit: type=1326 audit(1753195620.407:30368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17041 comm="syz.1.4461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  301.836754][   T29] audit: type=1326 audit(1753195620.407:30369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17041 comm="syz.1.4461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  301.861054][   T29] audit: type=1326 audit(1753195620.407:30370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17041 comm="syz.1.4461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  301.884975][   T29] audit: type=1326 audit(1753195620.407:30371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17041 comm="syz.1.4461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  301.905612][T17039] FAT-fs (loop3): Directory bread(block 64) failed
[  301.909087][   T29] audit: type=1326 audit(1753195620.407:30372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17041 comm="syz.1.4461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  301.915674][T17039] FAT-fs (loop3): Directory bread(block 65) failed
[  301.939040][   T29] audit: type=1326 audit(1753195620.407:30373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17041 comm="syz.1.4461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  301.966879][T17039] FAT-fs (loop3): Directory bread(block 66) failed
[  301.969472][   T29] audit: type=1326 audit(1753195620.407:30374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17041 comm="syz.1.4461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  301.985279][T17039] FAT-fs (loop3): Directory bread(block 67) failed
[  301.999496][   T29] audit: type=1326 audit(1753195620.407:30375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17041 comm="syz.1.4461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  302.026670][T17039] FAT-fs (loop3): Directory bread(block 68) failed
[  302.029697][   T29] audit: type=1326 audit(1753195620.407:30376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17041 comm="syz.1.4461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d3bee9a9 code=0x7ffc0000
[  302.045338][T17039] FAT-fs (loop3): Directory bread(block 69) failed
[  302.060363][T17044] hub 6-0:1.0: 8 ports detected
[  302.073582][T17039] FAT-fs (loop3): Directory bread(block 70) failed
[  302.073604][T17039] FAT-fs (loop3): Directory bread(block 71) failed
[  302.073626][T17039] FAT-fs (loop3): Directory bread(block 72) failed
[  302.073645][T17039] FAT-fs (loop3): Directory bread(block 73) failed
[  302.122384][T17039] bio_check_eod: 18431 callbacks suppressed
[  302.122400][T17039] syz.3.4460: attempt to access beyond end of device
[  302.122400][T17039] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256
[  302.147127][T17039] syz.3.4460: attempt to access beyond end of device
[  302.147127][T17039] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256
[  302.206565][T17055] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.242312][T17055] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.292578][T17055] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.385117][T17067] FAULT_INJECTION: forcing a failure.
[  302.385117][T17067] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  302.398970][T17067] CPU: 0 UID: 0 PID: 17067 Comm: syz.3.4470 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  302.399046][T17067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  302.399079][T17067] Call Trace:
[  302.399087][T17067]  <TASK>
[  302.399096][T17067]  __dump_stack+0x1d/0x30
[  302.399193][T17067]  dump_stack_lvl+0xe8/0x140
[  302.399210][T17067]  dump_stack+0x15/0x1b
[  302.399227][T17067]  should_fail_ex+0x265/0x280
[  302.399252][T17067]  should_fail+0xb/0x20
[  302.399340][T17067]  should_fail_usercopy+0x1a/0x20
[  302.399366][T17067]  strncpy_from_user+0x25/0x230
[  302.399509][T17067]  ? kmem_cache_alloc_noprof+0x186/0x310
[  302.399535][T17067]  ? getname_flags+0x80/0x3b0
[  302.399558][T17067]  getname_flags+0xae/0x3b0
[  302.399579][T17067]  __x64_sys_linkat+0x66/0xa0
[  302.399667][T17067]  x64_sys_call+0x2cfe/0x2fb0
[  302.399684][T17067]  do_syscall_64+0xd2/0x200
[  302.399701][T17067]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  302.399772][T17067]  ? clear_bhb_loop+0x40/0x90
[  302.399789][T17067]  ? clear_bhb_loop+0x40/0x90
[  302.399806][T17067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.399827][T17067] RIP: 0033:0x7f93f39ae9a9
[  302.399912][T17067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  302.399928][T17067] RSP: 002b:00007f93f200f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109
[  302.399945][T17067] RAX: ffffffffffffffda RBX: 00007f93f3bd5fa0 RCX: 00007f93f39ae9a9
[  302.399956][T17067] RDX: ffffffffffffffff RSI: 0000200000000500 RDI: ffffffffffffffff
[  302.400043][T17067] RBP: 00007f93f200f090 R08: 0000000000001000 R09: 0000000000000000
[  302.400055][T17067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  302.400066][T17067] R13: 0000000000000000 R14: 00007f93f3bd5fa0 R15: 00007ffd882ab818
[  302.400083][T17067]  </TASK>
[  302.602329][T17069] FAULT_INJECTION: forcing a failure.
[  302.602329][T17069] name failslab, interval 1, probability 0, space 0, times 0
[  302.615258][T17069] CPU: 1 UID: 0 PID: 17069 Comm: syz.3.4471 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  302.615285][T17069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  302.615297][T17069] Call Trace:
[  302.615302][T17069]  <TASK>
[  302.615310][T17069]  __dump_stack+0x1d/0x30
[  302.615330][T17069]  dump_stack_lvl+0xe8/0x140
[  302.615348][T17069]  dump_stack+0x15/0x1b
[  302.615440][T17069]  should_fail_ex+0x265/0x280
[  302.615466][T17069]  should_failslab+0x8c/0xb0
[  302.615487][T17069]  kmem_cache_alloc_node_noprof+0x57/0x320
[  302.615509][T17069]  ? __alloc_skb+0x101/0x320
[  302.615616][T17069]  __alloc_skb+0x101/0x320
[  302.615642][T17069]  netlink_alloc_large_skb+0xba/0xf0
[  302.615669][T17069]  netlink_sendmsg+0x3cf/0x6b0
[  302.615687][T17069]  ? __pfx_netlink_sendmsg+0x10/0x10
[  302.615725][T17069]  __sock_sendmsg+0x145/0x180
[  302.615747][T17069]  ____sys_sendmsg+0x31e/0x4e0
[  302.615856][T17069]  ___sys_sendmsg+0x17b/0x1d0
[  302.615991][T17069]  __x64_sys_sendmsg+0xd4/0x160
[  302.616023][T17069]  x64_sys_call+0x2999/0x2fb0
[  302.616041][T17069]  do_syscall_64+0xd2/0x200
[  302.616104][T17069]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  302.616136][T17069]  ? clear_bhb_loop+0x40/0x90
[  302.616156][T17069]  ? clear_bhb_loop+0x40/0x90
[  302.616243][T17069]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.616261][T17069] RIP: 0033:0x7f93f39ae9a9
[  302.616302][T17069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  302.616321][T17069] RSP: 002b:00007f93f200f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  302.616341][T17069] RAX: ffffffffffffffda RBX: 00007f93f3bd5fa0 RCX: 00007f93f39ae9a9
[  302.616354][T17069] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000008
[  302.616404][T17069] RBP: 00007f93f200f090 R08: 0000000000000000 R09: 0000000000000000
[  302.616417][T17069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  302.616505][T17069] R13: 0000000000000000 R14: 00007f93f3bd5fa0 R15: 00007ffd882ab818
[  302.616542][T17069]  </TASK>
[  302.620326][T17055] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.853358][T17079] FAULT_INJECTION: forcing a failure.
[  302.853358][T17079] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  302.866688][T17079] CPU: 1 UID: 0 PID: 17079 Comm: syz.4.4475 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  302.866714][T17079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  302.866733][T17079] Call Trace:
[  302.866739][T17079]  <TASK>
[  302.866746][T17079]  __dump_stack+0x1d/0x30
[  302.866844][T17079]  dump_stack_lvl+0xe8/0x140
[  302.866863][T17079]  dump_stack+0x15/0x1b
[  302.866890][T17079]  should_fail_ex+0x265/0x280
[  302.866917][T17079]  should_fail+0xb/0x20
[  302.866947][T17079]  should_fail_usercopy+0x1a/0x20
[  302.866975][T17079]  _copy_from_user+0x1c/0xb0
[  302.867006][T17079]  memdup_user+0x5e/0xd0
[  302.867080][T17079]  proc_pid_attr_write+0x15e/0x220
[  302.867098][T17079]  vfs_writev+0x406/0x8b0
[  302.867110][T17079]  ? __pfx_proc_pid_attr_write+0x10/0x10
[  302.867204][T17079]  ? mutex_lock+0xd/0x30
[  302.867231][T17079]  do_writev+0xe7/0x210
[  302.867294][T17079]  __x64_sys_writev+0x45/0x50
[  302.867304][T17079]  x64_sys_call+0x2006/0x2fb0
[  302.867317][T17079]  do_syscall_64+0xd2/0x200
[  302.867380][T17079]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  302.867451][T17079]  ? clear_bhb_loop+0x40/0x90
[  302.867463][T17079]  ? clear_bhb_loop+0x40/0x90
[  302.867474][T17079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.867485][T17079] RIP: 0033:0x7f19430ae9a9
[  302.867495][T17079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  302.867504][T17079] RSP: 002b:00007f1941717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  302.867563][T17079] RAX: ffffffffffffffda RBX: 00007f19432d5fa0 RCX: 00007f19430ae9a9
[  302.867571][T17079] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004
[  302.867578][T17079] RBP: 00007f1941717090 R08: 0000000000000000 R09: 0000000000000000
[  302.867585][T17079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  302.867591][T17079] R13: 0000000000000000 R14: 00007f19432d5fa0 R15: 00007ffc302e3f48
[  302.867639][T17079]  </TASK>
[  302.898163][T17055] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  303.079873][T17055] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  303.091454][T17055] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  303.136283][T17055] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  303.180902][T17091] $Hÿ: renamed from bond0 (while UP)
[  303.188706][T17091] $Hÿ: entered promiscuous mode
[  303.193827][T17091] bond_slave_0: entered promiscuous mode
[  303.199989][T17091] bond_slave_1: entered promiscuous mode
[  303.259936][T17105] random: crng reseeded on system resumption
[  303.287472][T17111] FAULT_INJECTION: forcing a failure.
[  303.287472][T17111] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  303.301100][T17111] CPU: 0 UID: 0 PID: 17111 Comm: syz.3.4489 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  303.301125][T17111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  303.301159][T17111] Call Trace:
[  303.301165][T17111]  <TASK>
[  303.301173][T17111]  __dump_stack+0x1d/0x30
[  303.301199][T17111]  dump_stack_lvl+0xe8/0x140
[  303.301219][T17111]  dump_stack+0x15/0x1b
[  303.301303][T17111]  should_fail_ex+0x265/0x280
[  303.301397][T17111]  should_fail+0xb/0x20
[  303.301422][T17111]  should_fail_usercopy+0x1a/0x20
[  303.301530][T17111]  _copy_to_user+0x20/0xa0
[  303.301551][T17111]  simple_read_from_buffer+0xb5/0x130
[  303.301610][T17111]  proc_fail_nth_read+0x100/0x140
[  303.301685][T17111]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  303.301771][T17111]  vfs_read+0x19d/0x6f0
[  303.301837][T17111]  ? __rcu_read_unlock+0x4f/0x70
[  303.301860][T17111]  ? __fget_files+0x184/0x1c0
[  303.301883][T17111]  ksys_read+0xda/0x1a0
[  303.301964][T17111]  __x64_sys_read+0x40/0x50
[  303.302043][T17111]  x64_sys_call+0x2d77/0x2fb0
[  303.302064][T17111]  do_syscall_64+0xd2/0x200
[  303.302084][T17111]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  303.302142][T17111]  ? clear_bhb_loop+0x40/0x90
[  303.302163][T17111]  ? clear_bhb_loop+0x40/0x90
[  303.302185][T17111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.302206][T17111] RIP: 0033:0x7f93f39ad3bc
[  303.302223][T17111] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  303.302321][T17111] RSP: 002b:00007f93f200f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  303.302342][T17111] RAX: ffffffffffffffda RBX: 00007f93f3bd5fa0 RCX: 00007f93f39ad3bc
[  303.302356][T17111] RDX: 000000000000000f RSI: 00007f93f200f0a0 RDI: 0000000000000008
[  303.302369][T17111] RBP: 00007f93f200f090 R08: 0000000000000000 R09: 0000000000000000
[  303.302426][T17111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  303.302439][T17111] R13: 0000000000000000 R14: 00007f93f3bd5fa0 R15: 00007ffd882ab818
[  303.302460][T17111]  </TASK>
[  303.775219][T17145] loop6: detected capacity change from 0 to 2048
[  303.801101][T17151] FAULT_INJECTION: forcing a failure.
[  303.801101][T17151] name failslab, interval 1, probability 0, space 0, times 0
[  303.813871][T17151] CPU: 1 UID: 0 PID: 17151 Comm: syz.4.4505 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  303.813901][T17151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  303.813913][T17151] Call Trace:
[  303.813995][T17151]  <TASK>
[  303.814001][T17151]  __dump_stack+0x1d/0x30
[  303.814020][T17151]  dump_stack_lvl+0xe8/0x140
[  303.814036][T17151]  dump_stack+0x15/0x1b
[  303.814053][T17151]  should_fail_ex+0x265/0x280
[  303.814082][T17151]  ? alloc_pipe_info+0xae/0x350
[  303.814186][T17151]  should_failslab+0x8c/0xb0
[  303.814215][T17151]  __kmalloc_cache_noprof+0x4c/0x320
[  303.814239][T17151]  ? path_openat+0x1bf8/0x2170
[  303.814327][T17151]  alloc_pipe_info+0xae/0x350
[  303.814355][T17151]  splice_direct_to_actor+0x592/0x680
[  303.814381][T17151]  ? _parse_integer+0x27/0x40
[  303.814406][T17151]  ? __pfx_direct_splice_actor+0x10/0x10
[  303.814561][T17151]  ? kstrtouint+0x76/0xc0
[  303.814631][T17151]  do_splice_direct+0xda/0x150
[  303.814656][T17151]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  303.814689][T17151]  vfs_copy_file_range+0x978/0xf30
[  303.814717][T17151]  __se_sys_copy_file_range+0x269/0x3b0
[  303.814764][T17151]  __x64_sys_copy_file_range+0x78/0x90
[  303.814786][T17151]  x64_sys_call+0x8c6/0x2fb0
[  303.814808][T17151]  do_syscall_64+0xd2/0x200
[  303.814824][T17151]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  303.814859][T17151]  ? clear_bhb_loop+0x40/0x90
[  303.814880][T17151]  ? clear_bhb_loop+0x40/0x90
[  303.815023][T17151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.815044][T17151] RIP: 0033:0x7f19430ae9a9
[  303.815058][T17151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.815075][T17151] RSP: 002b:00007f1941717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000146
[  303.815095][T17151] RAX: ffffffffffffffda RBX: 00007f19432d5fa0 RCX: 00007f19430ae9a9
[  303.815138][T17151] RDX: 0000000000000006 RSI: 0000200000000000 RDI: 0000000000000006
[  303.815152][T17151] RBP: 00007f1941717090 R08: 0000000000000004 R09: 0000000000000000
[  303.815168][T17151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  303.815181][T17151] R13: 0000000000000000 R14: 00007f19432d5fa0 R15: 00007ffc302e3f48
[  303.815198][T17151]  </TASK>
[  304.050483][T17145] Alternate GPT is invalid, using primary GPT.
[  304.056819][T17145]  loop6: p1 p2 p3
[  304.115999][T17159] SELinux: security_context_str_to_sid () failed with errno=-22
[  304.173678][T17174] loop6: detected capacity change from 0 to 512
[  304.196683][T17174] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  304.211678][T17174] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  304.223336][T17174] EXT4-fs (loop6): 1 truncate cleaned up
[  304.231225][T17174] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  304.245715][T17174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.261657][T17186] vhci_hcd: invalid port number 96
[  304.266852][T17186] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  304.383832][T17206] loop6: detected capacity change from 0 to 2048
[  304.430958][T17206] Alternate GPT is invalid, using primary GPT.
[  304.437432][T17206]  loop6: p1 p2 p3
[  304.889903][T17235] tipc: Enabling of bearer <‰ý‘eth:gr> rejected, media not registered
[  305.104582][T17242] loop3: detected capacity change from 0 to 2048
[  305.224700][T17243] hub 6-0:1.0: USB hub found
[  305.242608][T17243] hub 6-0:1.0: 8 ports detected
[  305.269806][T17248] hub 6-0:1.0: USB hub found
[  305.288656][T17248] hub 6-0:1.0: 8 ports detected
[  305.619180][T17262] loop6: detected capacity change from 0 to 2048
[  305.913253][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  305.921130][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  305.929013][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  305.936889][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  305.944695][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  305.952496][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  305.960209][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  305.967966][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  305.975626][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  305.983657][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  305.991472][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  305.999371][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  306.007061][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  306.014739][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  306.022574][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  306.030279][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  306.037966][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  306.045721][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  306.053547][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  306.061287][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  306.069052][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  306.076710][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  306.084480][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  306.092337][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  306.100023][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  306.107750][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  306.115409][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  306.123198][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  306.130965][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  306.138746][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  306.146463][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  306.154230][ T3394] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  306.162590][ T3394] hid-generic 0000:3000000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  306.209515][T17280] __nla_validate_parse: 6 callbacks suppressed
[  306.209530][T17280] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4545'.
[  306.325440][T17295] loop3: detected capacity change from 0 to 2048
[  306.358620][T17295] Alternate GPT is invalid, using primary GPT.
[  306.364934][T17295]  loop3: p1 p2 p3
[  307.265463][T17342] loop6: detected capacity change from 0 to 2048
[  307.283008][   T29] kauditd_printk_skb: 536 callbacks suppressed
[  307.283023][   T29] audit: type=1326 audit(1753195625.910:30913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17340 comm="syz.3.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f39ae9a9 code=0x7ffc0000
[  307.307678][T17338] FAULT_INJECTION: forcing a failure.
[  307.307678][T17338] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  307.327074][T17338] CPU: 1 UID: 0 PID: 17338 Comm: syz.1.4565 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  307.327151][T17338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  307.327164][T17338] Call Trace:
[  307.327171][T17338]  <TASK>
[  307.327179][T17338]  __dump_stack+0x1d/0x30
[  307.327210][T17338]  dump_stack_lvl+0xe8/0x140
[  307.327231][T17338]  dump_stack+0x15/0x1b
[  307.327245][T17338]  should_fail_ex+0x265/0x280
[  307.327284][T17338]  should_fail_alloc_page+0xf2/0x100
[  307.327305][T17338]  __alloc_frozen_pages_noprof+0xff/0x360
[  307.327336][T17338]  alloc_pages_mpol+0xb3/0x250
[  307.327365][T17338]  folio_alloc_mpol_noprof+0x39/0x80
[  307.327442][T17338]  shmem_get_folio_gfp+0x3cf/0xd60
[  307.327515][T17338]  shmem_write_begin+0xa8/0x190
[  307.327540][T17338]  generic_perform_write+0x181/0x490
[  307.327562][T17338]  shmem_file_write_iter+0xc5/0xf0
[  307.327597][T17338]  do_iter_readv_writev+0x41e/0x4c0
[  307.327628][T17338]  vfs_writev+0x2df/0x8b0
[  307.327736][T17338]  __se_sys_pwritev2+0xfc/0x1c0
[  307.327893][T17338]  __x64_sys_pwritev2+0x67/0x80
[  307.327914][T17338]  x64_sys_call+0x1cea/0x2fb0
[  307.327983][T17338]  do_syscall_64+0xd2/0x200
[  307.328001][T17338]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  307.328025][T17338]  ? clear_bhb_loop+0x40/0x90
[  307.328045][T17338]  ? clear_bhb_loop+0x40/0x90
[  307.328137][T17338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.328158][T17338] RIP: 0033:0x7f99d3bee9a9
[  307.328238][T17338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  307.328255][T17338] RSP: 002b:00007f99d224f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[  307.328343][T17338] RAX: ffffffffffffffda RBX: 00007f99d3e15fa0 RCX: 00007f99d3bee9a9
[  307.328357][T17338] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005
[  307.328371][T17338] RBP: 00007f99d224f090 R08: 0000000000000000 R09: 0000000000000003
[  307.328384][T17338] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000001
[  307.328398][T17338] R13: 0000000000000000 R14: 00007f99d3e15fa0 R15: 00007fff6aeb9ef8
[  307.328492][T17338]  </TASK>
[  307.332332][T17345] tipc: Enabling of bearer <‰ý‘eth:gr> rejected, media not registered
[  307.347502][   T29] audit: type=1326 audit(1753195625.940:30914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17340 comm="syz.3.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f93f39ae9a9 code=0x7ffc0000
[  307.584577][   T29] audit: type=1326 audit(1753195625.940:30915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17340 comm="syz.3.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f39ae9a9 code=0x7ffc0000
[  307.608621][   T29] audit: type=1326 audit(1753195625.940:30916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17340 comm="syz.3.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93f39ae9a9 code=0x7ffc0000
[  307.632400][   T29] audit: type=1326 audit(1753195625.940:30917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17340 comm="syz.3.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f39ae9a9 code=0x7ffc0000
[  307.656482][   T29] audit: type=1326 audit(1753195625.940:30918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17340 comm="syz.3.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f93f39ae9a9 code=0x7ffc0000
[  307.680498][   T29] audit: type=1326 audit(1753195625.940:30919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17340 comm="syz.3.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f93f39ae9e3 code=0x7ffc0000
[  307.703962][   T29] audit: type=1326 audit(1753195625.940:30920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17340 comm="syz.3.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f39ae9a9 code=0x7ffc0000
[  307.727924][   T29] audit: type=1326 audit(1753195625.940:30921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17340 comm="syz.3.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f93f39ae9a9 code=0x7ffc0000
[  307.751716][   T29] audit: type=1326 audit(1753195625.940:30922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17340 comm="syz.3.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f39ae9a9 code=0x7ffc0000
[  307.785580][T17360] netlink: 'syz.0.4570': attribute type 2 has an invalid length.
[  307.793628][T17360] netlink: 'syz.0.4570': attribute type 1 has an invalid length.
[  307.796022][T17342] Alternate GPT is invalid, using primary GPT.
[  307.801471][T17360] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.4570'.
[  307.817840][T17342]  loop6: p1 p2 p3
[  307.874378][T17369] loop3: detected capacity change from 0 to 512
[  307.887966][T17369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  307.953888][T12443] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.080049][T17384] vhci_hcd: invalid port number 236
[  308.089044][T17388] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4581'.
[  308.240424][T17396] loop6: detected capacity change from 0 to 2048
[  308.266906][T17400] netlink: 'syz.3.4585': attribute type 2 has an invalid length.
[  308.274689][T17400] netlink: 'syz.3.4585': attribute type 1 has an invalid length.
[  308.282465][T17400] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.4585'.
[  308.308441][T17396] Alternate GPT is invalid, using primary GPT.
[  308.314730][T17396]  loop6: p1 p2 p3
[  308.488067][T17414] loop6: detected capacity change from 0 to 8192
[  308.498735][T17414] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  308.510210][T17414] FAT-fs (loop6): error, corrupted file size (i_pos 1046, 9216)
[  308.518373][T17414] FAT-fs (loop6): Filesystem has been set read-only
[  308.519257][T17414] FAT-fs (loop6): error, corrupted file size (i_pos 1046, 9000)
[  308.541187][T17416] xt_CT: You must specify a L4 protocol and not use inversions on it
[  308.582616][T17420] netlink: 'syz.3.4596': attribute type 1 has an invalid length.
[  308.606852][T17420] loop3: detected capacity change from 0 to 1024
[  308.617790][T17420] EXT4-fs error (device loop3): __ext4_fill_super:5500: comm syz.3.4596: inode #2: comm syz.3.4596: iget: illegal inode #
[  308.632343][T17420] EXT4-fs (loop3): get root inode failed
[  308.638511][T17420] EXT4-fs (loop3): mount failed
[  308.653098][T17420] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17420 comm=syz.3.4596
[  308.802396][T17434] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  308.998814][T17447] hub 6-0:1.0: USB hub found
[  309.003606][T17447] hub 6-0:1.0: 8 ports detected
[  309.710309][T17472] loop3: detected capacity change from 0 to 2048
[  309.757433][T17472] Alternate GPT is invalid, using primary GPT.
[  309.764047][T17472]  loop3: p1 p2 p3
[  309.790429][T17474] hub 6-0:1.0: USB hub found
[  309.795407][T17474] hub 6-0:1.0: 8 ports detected
[  309.839877][T17480] loop3: detected capacity change from 0 to 128
[  309.985970][T17488] hub 6-0:1.0: USB hub found
[  309.990780][T17488] hub 6-0:1.0: 8 ports detected
[  310.016127][T17499] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4622'.
[  310.121380][T17504] loop3: detected capacity change from 0 to 2048
[  310.166212][T17504] Alternate GPT is invalid, using primary GPT.
[  310.172525][T17504]  loop3: p1 p2 p3
[  310.264556][T17508] FAULT_INJECTION: forcing a failure.
[  310.264556][T17508] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  310.278365][T17508] CPU: 0 UID: 0 PID: 17508 Comm: syz.3.4625 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  310.278474][T17508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  310.278486][T17508] Call Trace:
[  310.278494][T17508]  <TASK>
[  310.278502][T17508]  __dump_stack+0x1d/0x30
[  310.278524][T17508]  dump_stack_lvl+0xe8/0x140
[  310.278577][T17508]  dump_stack+0x15/0x1b
[  310.278593][T17508]  should_fail_ex+0x265/0x280
[  310.278623][T17508]  should_fail+0xb/0x20
[  310.278670][T17508]  should_fail_usercopy+0x1a/0x20
[  310.278698][T17508]  _copy_from_user+0x1c/0xb0
[  310.278720][T17508]  memdup_user+0x5e/0xd0
[  310.278822][T17508]  strndup_user+0x68/0xb0
[  310.278842][T17508]  __se_sys_mount+0x4d/0x2e0
[  310.278867][T17508]  ? fput+0x8f/0xc0
[  310.278940][T17508]  ? ksys_write+0x192/0x1a0
[  310.278970][T17508]  __x64_sys_mount+0x67/0x80
[  310.279000][T17508]  x64_sys_call+0xd36/0x2fb0
[  310.279019][T17508]  do_syscall_64+0xd2/0x200
[  310.279097][T17508]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  310.279171][T17508]  ? clear_bhb_loop+0x40/0x90
[  310.279191][T17508]  ? clear_bhb_loop+0x40/0x90
[  310.279245][T17508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.279273][T17508] RIP: 0033:0x7f93f39ae9a9
[  310.279289][T17508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  310.279305][T17508] RSP: 002b:00007f93f200f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  310.279334][T17508] RAX: ffffffffffffffda RBX: 00007f93f3bd5fa0 RCX: 00007f93f39ae9a9
[  310.279347][T17508] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000
[  310.279361][T17508] RBP: 00007f93f200f090 R08: 0000200000000600 R09: 0000000000000000
[  310.279372][T17508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  310.279383][T17508] R13: 0000000000000000 R14: 00007f93f3bd5fa0 R15: 00007ffd882ab818
[  310.279401][T17508]  </TASK>
[  310.502410][T17512] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4627'.
[  310.521049][T17512] loop3: detected capacity change from 0 to 2048
[  310.566315][T17512]  loop3: p1 < > p4
[  310.571463][T17512] loop3: p4 size 8388608 extends beyond EOD, truncated
[  310.600890][T17520] random: crng reseeded on system resumption
[  310.605917][T17512] loop3: detected capacity change from 0 to 512
[  310.613202][T17520] FAULT_INJECTION: forcing a failure.
[  310.613202][T17520] name failslab, interval 1, probability 0, space 0, times 0
[  310.613235][T17520] CPU: 1 UID: 0 PID: 17520 Comm: syz.1.4631 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  310.613262][T17520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  310.613275][T17520] Call Trace:
[  310.613283][T17520]  <TASK>
[  310.613331][T17520]  __dump_stack+0x1d/0x30
[  310.613355][T17520]  dump_stack_lvl+0xe8/0x140
[  310.613428][T17520]  dump_stack+0x15/0x1b
[  310.613446][T17520]  should_fail_ex+0x265/0x280
[  310.613544][T17520]  should_failslab+0x8c/0xb0
[  310.613567][T17520]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  310.613603][T17520]  ? __kmalloc_cache_noprof+0x189/0x320
[  310.613626][T17520]  ? nfs_fs_context_parse_monolithic+0xb31/0x1280
[  310.613720][T17520]  kstrdup+0x3e/0xd0
[  310.613743][T17520]  nfs_fs_context_parse_monolithic+0xb31/0x1280
[  310.613817][T17520]  parse_monolithic_mount_data+0x43/0x60
[  310.613863][T17520]  do_new_mount+0x1da/0x680
[  310.613893][T17520]  path_mount+0x4a4/0xb20
[  310.613949][T17520]  ? user_path_at+0x109/0x130
[  310.613977][T17520]  __se_sys_mount+0x28f/0x2e0
[  310.614006][T17520]  ? fput+0x8f/0xc0
[  310.614088][T17520]  __x64_sys_mount+0x67/0x80
[  310.614116][T17520]  x64_sys_call+0xd36/0x2fb0
[  310.614178][T17520]  do_syscall_64+0xd2/0x200
[  310.614198][T17520]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  310.614223][T17520]  ? clear_bhb_loop+0x40/0x90
[  310.614282][T17520]  ? clear_bhb_loop+0x40/0x90
[  310.614303][T17520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.614324][T17520] RIP: 0033:0x7f99d3bee9a9
[  310.614340][T17520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  310.614358][T17520] RSP: 002b:00007f99d224f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  310.614415][T17520] RAX: ffffffffffffffda RBX: 00007f99d3e15fa0 RCX: 00007f99d3bee9a9
[  310.614428][T17520] RDX: 00002000000000c0 RSI: 0000200000000240 RDI: 0000000000000000
[  310.614442][T17520] RBP: 00007f99d224f090 R08: 0000200000000000 R09: 0000000000000000
[  310.614455][T17520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  310.614470][T17520] R13: 0000000000000000 R14: 00007f99d3e15fa0 R15: 00007fff6aeb9ef8
[  310.614489][T17520]  </TASK>
[  310.893949][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4635'.
[  311.172688][T17558] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4644'.
[  311.203591][T17559] hub 6-0:1.0: USB hub found
[  311.208816][T17559] hub 6-0:1.0: 8 ports detected
[  311.214535][T17561] netlink: 'syz.1.4646': attribute type 2 has an invalid length.
[  311.222909][T17561] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4646'.
[  311.310935][T17565] netlink: 'syz.1.4648': attribute type 10 has an invalid length.
[  311.706500][T17573] loop6: detected capacity change from 0 to 512
[  311.847160][T17585] loop3: detected capacity change from 0 to 256
[  311.885158][T17589] netlink: 'syz.3.4657': attribute type 2 has an invalid length.
[  311.892931][T17589] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4657'.
[  311.919266][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4659'.
[  311.928355][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4659'.
[  311.940828][T17593] netlink: 'syz.3.4659': attribute type 21 has an invalid length.
[  311.949234][T17593] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4659'.
[  311.965286][T17593] loop3: detected capacity change from 0 to 512
[  311.974475][T17593] EXT4-fs: Ignoring removed mblk_io_submit option
[  311.983608][T17593] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  311.996265][T17593] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  312.011593][T17593] EXT4-fs (loop3): orphan cleanup on readonly fs
[  312.018923][T17593] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4659: Invalid block bitmap block 0 in block_group 0
[  312.033813][T17593] EXT4-fs (loop3): Remounting filesystem read-only
[  312.041183][T17593] EXT4-fs (loop3): 1 orphan inode deleted
[  312.055602][T17593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  312.196985][T17613] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4664'.
[  312.244607][T12443] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.332159][T17619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4667'.
[  312.341215][T17619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4667'.
[  312.443763][   T29] kauditd_printk_skb: 579 callbacks suppressed
[  312.443778][   T29] audit: type=1326 audit(1753195631.072:31499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17623 comm="syz.3.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f39ae9a9 code=0x7ffc0000
[  312.480085][T17625] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17625 comm=syz.0.4670
[  312.511309][   T29] audit: type=1326 audit(1753195631.112:31500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17623 comm="syz.3.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93f39ad310 code=0x7ffc0000
[  312.535610][   T29] audit: type=1326 audit(1753195631.112:31501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17623 comm="syz.3.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93f39ad310 code=0x7ffc0000
[  312.559390][   T29] audit: type=1326 audit(1753195631.112:31502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17623 comm="syz.3.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f39ae9a9 code=0x7ffc0000
[  312.583595][   T29] audit: type=1326 audit(1753195631.112:31503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17623 comm="syz.3.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f93f39ae9a9 code=0x7ffc0000
[  312.607927][   T29] audit: type=1326 audit(1753195631.112:31504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17623 comm="syz.3.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f39ae9a9 code=0x7ffc0000
[  312.631555][   T29] audit: type=1326 audit(1753195631.112:31505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17623 comm="syz.3.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f93f39ae9a9 code=0x7ffc0000
[  312.655727][   T29] audit: type=1326 audit(1753195631.112:31506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17623 comm="syz.3.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f39ae9a9 code=0x7ffc0000
[  312.679330][   T29] audit: type=1326 audit(1753195631.112:31507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17623 comm="syz.3.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f93f39ae9a9 code=0x7ffc0000
[  312.703517][   T29] audit: type=1326 audit(1753195631.112:31508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17623 comm="syz.3.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f39ae9a9 code=0x7ffc0000
[  312.863575][T17637] ==================================================================
[  312.871834][T17637] BUG: KCSAN: data-race in io_flush_timeouts / io_issue_sqe
[  312.879115][T17637] 
[  312.881421][T17637] read-write to 0xffff8881338baa10 of 4 bytes by task 17636 on cpu 0:
[  312.889548][T17637]  io_issue_sqe+0x19c/0x970
[  312.894034][T17637]  io_wq_submit_work+0x3f7/0x5f0
[  312.899077][T17637]  io_worker_handle_work+0x44e/0x9b0
[  312.904484][T17637]  io_wq_worker+0x22e/0x870
[  312.908991][T17637]  ret_from_fork+0xda/0x150
[  312.913492][T17637]  ret_from_fork_asm+0x1a/0x30
[  312.918273][T17637] 
[  312.920574][T17637] read to 0xffff8881338baa10 of 4 bytes by task 17637 on cpu 1:
[  312.928185][T17637]  io_flush_timeouts+0x56/0x1d0
[  312.933115][T17637]  __io_commit_cqring_flush+0xeb/0x100
[  312.938741][T17637]  io_issue_sqe+0x7cb/0x970
[  312.943265][T17637]  io_wq_submit_work+0x3f7/0x5f0
[  312.948181][T17637]  io_worker_handle_work+0x44e/0x9b0
[  312.953449][T17637]  io_wq_worker+0x22e/0x870
[  312.957947][T17637]  ret_from_fork+0xda/0x150
[  312.962448][T17637]  ret_from_fork_asm+0x1a/0x30
[  312.967193][T17637] 
[  312.969495][T17637] value changed: 0x000001d9 -> 0x000001da
[  312.975191][T17637] 
[  312.977510][T17637] Reported by Kernel Concurrency Sanitizer on:
[  312.983641][T17637] CPU: 1 UID: 0 PID: 17637 Comm: iou-wrk-17634 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  312.994656][T17637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  313.004708][T17637] ==================================================================