last executing test programs:

1m0.02625297s ago: executing program 1 (id=37):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)

58.981750081s ago: executing program 1 (id=49):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94)
r1 = socket(0x1e, 0x80004, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x80000001, 0x0, 0x1000004}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xc1876031b0d35502, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x8000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r6 = dup3(r2, r1, 0x0)
recvmmsg(r6, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r6}, 0x8)
r7 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000040)=0x6, 0x4)
sendmsg$netlink(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000005f0001"], 0x20}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00'}, 0x18)
r8 = socket$kcm(0x2, 0x1, 0x106)
sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x20}, 0x40000)

58.48360425s ago: executing program 1 (id=54):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRES16=r3, @ANYRESHEX=r3, @ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRESHEX=r3, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="0b29e345402d79893cdf67b403bd395ed8e47224f5c7f45f3142b9bd4933eb26d2497fabb0ea83173ec3e68e5e5e0d6029ae2b1aed2eea143a3204357cdbcf714063acd351417e56c8270a7f3c87f92cd9679505e51b1e2e5e3f"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000001d71189b000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18)
socket(0x2, 0x80805, 0x0)
r5 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
r7 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
setsockopt$inet6_mreq(r7, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14)
bind$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
socket(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x72, &(0x7f0000000f00)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000210003c3a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x89f9, &(0x7f0000000040)={'veth1_to_batadv\x00', @random})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a0000000b0000000400000002"], 0x48)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYRES16=r5], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r10}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r11 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3, 0x800, 0xfffffffc, 0xad}, &(0x7f0000000440), &(0x7f0000000500))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r11, 0x2, &(0x7f0000000180), 0xfe)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r8}, &(0x7f0000000340), &(0x7f0000000480)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r8, &(0x7f0000000380)="5b52ea75e6f6df1cd30d9cdd4bcfa7c82e1418c3a524449e605067c4f5b5d29e478dc22af94556", &(0x7f0000000040), 0x2}, 0x20)

57.467741468s ago: executing program 1 (id=60):
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000001200)='./file0\x00', 0x2a00410, &(0x7f00000004c0)=ANY=[], 0x1, 0x11aa, &(0x7f0000001280)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10)
close(r2)
mount(&(0x7f0000005440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, 0x0, 0x0)
sendmsg$inet_sctp(r0, 0x0, 0x20040040)
shutdown(r6, 0x1)
write(r5, 0x0, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(r5, 0x541c, 0x0)
syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000f00)='.\x00', 0x80000, &(0x7f00000008c0)=ANY=[], 0x9, 0x0, &(0x7f0000000000))
r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000200), 0xfea7)
ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0xc, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c6780000335a63bdbcef549ba197fce47ddfdd00000000000000000000a3c5c00c000000a000", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x6]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
getpid()

56.93277074s ago: executing program 1 (id=66):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x111, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ee, @empty, 0x1}, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0x108}, r3, 0xb}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {0x0, r3}}, 0x18)

56.362330755s ago: executing program 1 (id=74):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x9e, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x68, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x9, "bd3e6d4706598080a8220037ffffff0100000024732472eefa45ad96000000008e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}]}}}}}}, 0x0)

56.317644158s ago: executing program 32 (id=74):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x9e, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x68, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x9, "bd3e6d4706598080a8220037ffffff0100000024732472eefa45ad96000000008e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}]}}}}}}, 0x0)

50.507062567s ago: executing program 2 (id=128):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0)

50.406691856s ago: executing program 2 (id=130):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x1}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x3, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7, 0x0, 0xe}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x1000000}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x401}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000008000000010000000b"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) (async)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) (async)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)

50.149564045s ago: executing program 2 (id=134):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d0000000c0000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

50.08775746s ago: executing program 2 (id=135):
setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) (async)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async)
setgid(0x0) (async, rerun: 32)
unshare(0x10000000) (rerun: 32)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x2, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local'])
open$dir(&(0x7f0000000640)='./file0/file0\x00', 0x101042, 0x1)
r2 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)
process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000000000)=""/171, 0xab}], 0x1, &(0x7f0000000000), 0x0, 0x0)

49.954727171s ago: executing program 2 (id=138):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x50)

49.651198914s ago: executing program 2 (id=144):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES16, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000009000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000b00))
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f0000000100)={0x1d, r3}, 0x10)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x47, 0x4616, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x7a3}, 0x0, 0x3, 0xb, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0), 0x0, 0x0, 0x2)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[], 0x50)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000280)={0x5, 0xfe, 0x8006})
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', r3, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10)
setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000d00)={@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @multicast1}, 0x3, 0x2, 0x2, 0x1}}, {&(0x7f0000000c80)=""/74, 0x4a}, &(0x7f0000000ac0), 0x1}, 0xa0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18)
add_key(&(0x7f00000001c0)='user\x00', 0x0, &(0x7f0000000880)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff)
write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2825705a0c45e2c9b724dbf8855d5704ff", @ANYRES32=0x0], 0x28}}, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x10, r5, 0x10000000)
recvmmsg$unix(r2, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/170, 0xaa}, {&(0x7f00000009c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/212, 0xd4}, {&(0x7f0000000480)=""/106, 0x6a}], 0x4, &(0x7f0000000540)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000b40), 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000800)=""/52, 0x34}, {&(0x7f0000000bc0)=""/163, 0xa3}, {&(0x7f0000000400)=""/102, 0x66}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/40, 0x28}, {0x0}], 0x6, &(0x7f0000000e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}], 0x2, 0x40010040, 0x0)
sendfile(r9, r4, &(0x7f0000000840)=0x1, 0x6)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4c7af0f724e6018ecd4ac110084040000000000000484da1444011a00", 0x5, 0x0, 0x80000000}, 0x3c)
setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c)

49.650561224s ago: executing program 33 (id=144):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES16, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000009000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000b00))
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f0000000100)={0x1d, r3}, 0x10)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x47, 0x4616, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x7a3}, 0x0, 0x3, 0xb, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0), 0x0, 0x0, 0x2)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[], 0x50)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000280)={0x5, 0xfe, 0x8006})
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', r3, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10)
setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000d00)={@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @multicast1}, 0x3, 0x2, 0x2, 0x1}}, {&(0x7f0000000c80)=""/74, 0x4a}, &(0x7f0000000ac0), 0x1}, 0xa0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18)
add_key(&(0x7f00000001c0)='user\x00', 0x0, &(0x7f0000000880)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff)
write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2825705a0c45e2c9b724dbf8855d5704ff", @ANYRES32=0x0], 0x28}}, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x10, r5, 0x10000000)
recvmmsg$unix(r2, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/170, 0xaa}, {&(0x7f00000009c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/212, 0xd4}, {&(0x7f0000000480)=""/106, 0x6a}], 0x4, &(0x7f0000000540)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000b40), 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000800)=""/52, 0x34}, {&(0x7f0000000bc0)=""/163, 0xa3}, {&(0x7f0000000400)=""/102, 0x66}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/40, 0x28}, {0x0}], 0x6, &(0x7f0000000e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}], 0x2, 0x40010040, 0x0)
sendfile(r9, r4, &(0x7f0000000840)=0x1, 0x6)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4c7af0f724e6018ecd4ac110084040000000000000484da1444011a00", 0x5, 0x0, 0x80000000}, 0x3c)
setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c)

47.143191768s ago: executing program 3 (id=164):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000009000000000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000088500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000400000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000082000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r3}, 0x10)
mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
socket$inet6(0xa, 0x802, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r7, 0x400455c8, 0x3f)
sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000a40)=@newtaction={0x168, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x3000000, {}, [{0x154, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3ba, 0x3e, 0x2, 0x8, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb63, 0x2, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x168}}, 0x0)

46.002597967s ago: executing program 3 (id=172):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
capset(&(0x7f0000000800)={0x20071026}, &(0x7f0000000900)={0x9, 0x9, 0x80000001, 0x10001, 0x4, 0x3}) (fail_nth: 2)

45.934521822s ago: executing program 3 (id=174):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002120207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0x2c69}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='svcrdma_rq_post_err\x00', r0, 0x0, 0x2}, 0x18)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = syz_open_dev$loop(&(0x7f0000000380), 0xffffffff, 0x80040)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000f80)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r4, @ANYRES8=r3, @ANYRESOCT=r6, @ANYRES8=0x0, @ANYRES16=r1, @ANYRESDEC, @ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="92ecdd75fd7edbf6447477ddcbd628d35d255124fb32137c483d63dd5781d18d35f6f60ef7906e297403efdf30"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0})
r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
write$selinux_load(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="38d5ed0e0200002300000018120008", @ANYRES32=r9, @ANYBLOB="0000000000000000b503000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r10, 0xffffffffffffffff, 0x24, 0x0, @val=@tracing={0x0, 0x2}}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r11=>r1}, './file0\x00'})
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r11)
sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES16], 0x38}}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2)
r12 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
fstatfs(r11, &(0x7f0000000580)=""/197)
r13 = add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="0100000200373a4541062000a59ea940d2cb0b36b8f5020000a00000050000000000eb000000a5e5be21c44e", 0x2c, r12)
add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r13)

45.7043576s ago: executing program 3 (id=177):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x21, 0x23d, &(0x7f0000000a40)="$eJzs3cFqE0EcBvB/27Td9mLP4mHBi6eivkGQCOKCENmDnlyoXloR0svqKY/hM/hIPkZPva3YXZq6UQ+yySbu7wdhP/IxMHPJ5DCTvHvw8fzs0+WH6vvXSJI0RhHzuI44id3Yi9pO89y9yQdx1zwAgG0znRbjvudAh3aW3jmKiGI/Ig6XqvzbmmYFAAAAAAAAAABAx5z/B4Dhcf7//zebjYvj5vvbr5z/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPpzXVX3qr+8+p4fANA9+z8ADI/9HwCGx/4PAMPz+s3bl+Msm0zTNIm4mpd5mdfPun/+Ips8Tm+cLEZdlWW+3+Rs8qTu03Z/3Ix/+tv+IB49rPuf3bNXWas/jLNVLx4AAAAAAAAAAAAAAAAAAAA2xGl6q3W/f6/uT//U1+nO7wO07u+P4v5obcsAAAAAAAAAAAAAAAAAAACArXb5+ct5cXHxfiYIt+Eo/mFUEpsxeaGT0PcnEwAAAAAAAAAAAAAAAAAADM/i0m/fMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/iz+/391oe81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMPwIwAA//++jJCI")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x640, 0x14e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000840)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r2=>0x0}, &(0x7f0000000140)=0xc)
stat(&(0x7f0000000180)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchownat(r0, &(0x7f0000000080)='./file1\x00', r2, r3, 0x100)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r1}, 0x10)
syz_clone(0x4b40100, 0x0, 0x0, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000001580)=ANY=[@ANYBLOB="74696d655f6f66667365743d3078303030303030303030303030303466362c646f74732c646f74732c666c7573682c616c6c6f775f7574696d653d30303030303030303030303030303030303037373737352c6e6f646f74732c6e6f636173652c636865636b3d7374726963742c71756965742c666d61736b3d30303030303030303030303030303030303030303737362c7379735f696d6d757461626c652c757365667265652c646f74732c7379735f696d6d757461626c652c6572726f72733d72656d6f756e742d726f2c73686f77657865632c005530906363a9696b9e7a5ed1e1fdd8e80b9c8871e81ff8251b37bdde89710c3d4b74ff313381025bab8f4a076362fe7bfe6f0fa96c0edee5487ca3e2b00eaa188c94fb91efbd9b9d1f05f57ce05f47f407049e530b09525852783dc271f4f0bfd1076cb05f75ca8a56cd182ebfe31538bb529a14b1151072beab8a6eeebb25948a5993cc5648bada83c7dac555ea2676f8983b67152a01d86bf596f38e9add5211b588e4154a0b959ce973a67f8a25e8f98a9c607f1864c7a4fb0211388f592661be3d94"], 0x21, 0x23d, &(0x7f0000000a40)="$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") (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x640, 0x14e) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000840)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) (async)
stat(&(0x7f0000000180)='./bus\x00', &(0x7f0000000200)) (async)
fchownat(r0, &(0x7f0000000080)='./file1\x00', r2, r3, 0x100) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r1}, 0x10) (async)
syz_clone(0x4b40100, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) (async)

45.547134522s ago: executing program 3 (id=179):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x6}, 0x18)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8b33000000000000000005000000080003"], 0x28}}, 0x4004816) (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x10e, &(0x7f0000005b00)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@init_itable}, {@orlov}, {@errors_remount}]}, 0x4, 0x46b, &(0x7f00000009c0)="$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") (async)
r4 = syz_usb_connect$printer(0x7, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x6dbb9e51051d1519, 0xc, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x4, 0x4, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x9, 0x4d}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x8, 0x9, 0x81, 0xff, 0x9}, 0x3a, &(0x7f0000000200)={0x5, 0xf, 0x3a, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "8b5e76b4f73b0619141475964d92eff4"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x8, 0x1}, @ssp_cap={0x10, 0x10, 0xa, 0xf0, 0x1, 0x3, 0xf00, 0x0, [0x7]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x63, 0x7}]}, 0x1, [{0x7d, &(0x7f0000000240)=@string={0x7d, 0x3, "eeafd8ca50120ee0f34384bf318ca92de631ed4dc611d5a92798c77795a389dfdb7af8c09b991d41e30a5c43055970b0998435452bfd1c0bde087d401d3c01b21a7af4dd30ca3092491bf5756bee57df4de72a62a7baaac9ae3031f314d0c389e91427ceaf58034a29329a539b0205cecadd5f9659cd610f81deee"}}]})
syz_usb_control_io$printer(r4, &(0x7f0000000400)={0x14, &(0x7f0000000540)={0x0, 0x2, 0x45, {0x45, 0x8, "8b5925c5fab307a68c615809dcf50710f3336c9054556f6e2e3a2743ff6b80d4b5e13ffc5d808060cf791fedb9bceaf8459f730796e215700899e42da5d1e06811007e"}}, &(0x7f00000005c0)={0x0, 0x3, 0x8f, @string={0x8f, 0x3, "bcbd79216137c552684e59e31f3f7bba27f33d889b3ace068c7d1f7ccb881cec5865fa3b98bcd13eea0648488cf8df6bce5653644a34f03601ef111d02a6113fd23c516dd043c0a9e6e54d49cfaa7c19c366436c24f70b1c0df22997bfff30faa5f4f448a74c9729a602dc366f4a3801c68ff1af344250275501ba3a212179b8ab9b89a58deafbc44190b54382"}}}, &(0x7f0000000940)={0x34, &(0x7f0000000740)={0x20, 0x0, 0x98, "6dd94d7934bfb9c6c6074aba00932448b1580f8c644abbacebf8d3c7c9e867019c87a20b8388c507972c95e40976e9973303b77c1787776fbd3ee0daa54d6fdd98389a52b10b7750d3f1cabbb111dbeb9f27b6701e708f0b4a919b3c2232a23ada7cb291a68459c04893b9044894604d0797580eb1f3c14fad6ed64a6080fccda76f4b08e388cc48f990440f2fbeb3e712a2511e6aa1b3ec"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x61}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000840)={0x20, 0x0, 0x72, {0x70, "889e3f1fc1bfe43c5b99dd62b10ee04da97e9017495ac0c229b26c0b6ad73ae4e16cc4b2d1ee086cdba7e5b1dc2b169acbb77140879ce51655629ff639e8da90e003be153593ac143346e34f08aaa5f9619a7b3712938cb92659cc61840148dd0c25a0fc4f3b581a80c749fd13b8f5ff"}}, &(0x7f00000008c0)={0x20, 0x1, 0x1}, &(0x7f0000000900)={0x20, 0x0, 0x1, 0x2}}) (async)
openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)={0x474203, 0x5d4}, 0x18)

44.613403374s ago: executing program 3 (id=185):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
setitimer(0x1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000400), &(0x7f0000000280)=""/113}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x0, '\x00', 0x0, r7, 0x3, 0x3, 0x5}, 0x50)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r10=>0x0})
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000002180)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r11, r10, 0x25, 0x0, @val=@netkit={@void, @value=r11}}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e08000001000000000000803509b8c9f30d5746a01924da8e9a00000001000000e6", @ANYRES32=r8, @ANYBLOB="0200"/20, @ANYRES32=r10, @ANYRES32, @ANYBLOB="0400000003000000030000000800"/28], 0x50)

44.587461926s ago: executing program 34 (id=185):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
setitimer(0x1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000400), &(0x7f0000000280)=""/113}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x0, '\x00', 0x0, r7, 0x3, 0x3, 0x5}, 0x50)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r10=>0x0})
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000002180)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r11, r10, 0x25, 0x0, @val=@netkit={@void, @value=r11}}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e08000001000000000000803509b8c9f30d5746a01924da8e9a00000001000000e6", @ANYRES32=r8, @ANYBLOB="0200"/20, @ANYRES32=r10, @ANYRES32, @ANYBLOB="0400000003000000030000000800"/28], 0x50)

5.1659413s ago: executing program 6 (id=743):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x0, &(0x7f0000000240)})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18)
syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0)

5.116060474s ago: executing program 6 (id=746):
openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/crypto\x00', 0x0, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x8)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00')
r2 = epoll_create1(0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x29404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x0, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
capset(&(0x7f00000000c0)={0x19971634}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x80000011})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000c40)={0x1})

5.007107132s ago: executing program 6 (id=750):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0)

4.976863444s ago: executing program 6 (id=753):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
close(r5)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x70}]}, 0x2c}, 0x1, 0x0, 0x0, 0x15}, 0x8040)
symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8514, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x2, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/mdstat\x00', 0x0, 0x0)

1.351291375s ago: executing program 0 (id=827):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f00000013c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000001340)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0x101, 0xfffffffb}, 0x10) (async, rerun: 32)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r3 = msgget$private(0x0, 0x40)
msgsnd(r3, &(0x7f0000000380)={0x2}, 0x8, 0x0) (async)
msgctl$IPC_RMID(r3, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000900)='kfree\x00', r2}, 0x18) (async)
pipe2(&(0x7f0000001cc0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}})

1.350945145s ago: executing program 5 (id=828):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94)
r1 = socket(0x1e, 0x80004, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x80000001, 0x0, 0x1000004}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xc1876031b0d35502, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x8000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r7 = dup3(r2, r1, 0x0)
recvmmsg(r7, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r7}, 0x8)
r8 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f0000000040)=0x6, 0x4)
sendmsg$netlink(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000005f0001"], 0x20}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00'}, 0x18)
r9 = socket$kcm(0x2, 0x1, 0x106)
sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x20}, 0x40000)

1.29188324s ago: executing program 0 (id=830):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='sys_enter\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001000390400000000fcff7bff00000000", @ANYRES32=r0, @ANYBLOB="2c000000a446a6b30af86440c802001400350077673000"/35], 0x34}, 0x1, 0x0, 0x0, 0x24008841}, 0x4)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000ffdbdf25260000000c00018008000100", @ANYRESDEC], 0x20}, 0x1, 0x0, 0x0, 0x24004016}, 0x4000080)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, &(0x7f0000000180), &(0x7f0000000580)=r0}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, r8)
socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0)

1.247321954s ago: executing program 0 (id=832):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x5c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040080)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'geneve1\x00', <r4=>0x0})
sendto$packet(r2, &(0x7f0000000300)="43be8effa4ddebd964768847724c", 0xe, 0x4010, &(0x7f00000004c0)={0x11, 0x88a8, r4, 0x1, 0x9, 0x6, @multicast}, 0x14)

1.239788494s ago: executing program 0 (id=833):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}, {0x0}, {0x0}, {0x0}], 0x4}, 0x7}], 0x1, 0x100, &(0x7f0000002040)={0x0, 0x989680})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x700, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102}}}})
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)

1.196913598s ago: executing program 5 (id=834):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
migrate_pages(0x0, 0xfc, 0x0, &(0x7f0000000240)=0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000200000004f1000000000000063000000000000009500059e00020000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x16, 0xb4, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x61, 0x0, 0x0, 0x64}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x5}, 0x80)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40ccc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b0c, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x300, 0x56, 0x0, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90040000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c96", 0x0, 0x2f00, 0x0, 0xe3, 0x0, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed", &(0x7f00000007c0), 0x2, 0x0, 0x10000}, 0x50)

1.114773073s ago: executing program 5 (id=839):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x6, @private=0xa010102}, 0x2, 0x0, 0x1}}, 0x26)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)

1.062127488s ago: executing program 5 (id=840):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10)
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0xa, 0x300)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94)
socket$packet(0x11, 0xa, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffff97}, 0x48)

889.962272ms ago: executing program 7 (id=846):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94)
r1 = socket(0x1e, 0x80004, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x80000001, 0x0, 0x1000004}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xc1876031b0d35502, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x8000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r7 = dup3(r2, r1, 0x0)
recvmmsg(r7, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r7}, 0x8)
r8 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f0000000040)=0x6, 0x4)
sendmsg$netlink(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000005f0001"], 0x20}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00'}, 0x18)
r9 = socket$kcm(0x2, 0x1, 0x106)
sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x20}, 0x40000)

851.334584ms ago: executing program 5 (id=847):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="bf16000000000000b70700000900f0ff4070000000000000500000000000000095000000000000002ba728041598d6fbd30cb599e8c73d24a3aa81d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652ebc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6fd70800c86ae3b3e05df3ceb9fc474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee6f867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b2c81f96a810b946855c9fc52ac17cbc97a616811a4c2dc3470009b966abaf41939aeca3e7b00c2e9d5db7a34fe2a29ac88c360a878a2b9ab9440c1961e80477166f3f847e855cdddc941d996d61ea0ce23b37e9d21c849d1e1e53087a3b109012e3a3ecbd219265048bf5c72b7ba2806b73323301b4bc94d0e4afde44867d71049a7c89bc615e215571ac910d80a58b5169576ff9906c34d2342806960b6bcb00000000000000000000000000113ee640b9ed1e04a0bfb125204d30990361bf45ef45277a167cd2c2e6ce9138143aa5ea7ee6f7c6d8b00437e070b004c5aa90766538b4fe45a16f14b270904d36eaa87508ac6d46639b3971ac6a88dc531fcc5ffc6b76b334795d88156336a9a452a9022485bb572dacb7aa25f748bc75918a16d9d5ae21004cd799ac4951beb2c6c9b5baf60081b86cc2e31c49f4ea055fb3639036c95c69b1ae60e685d486dbd1d5e7d0daacd73acfc80b9c9c92"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0)

850.629274ms ago: executing program 5 (id=848):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x28, 0xc0, 0xf7, 0xfffff01c}, {0x6, 0x6, 0x0, 0x57e}]}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000c090000000095000000b400000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006340)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0xe4ff, 0x1}, {}, {0x8, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000826bd7000ffdbdf2c03000000080008001a000000050003002b0000000500030006000000060001004e210000050002000200000008000800ac1414aa05000292cc76000a000000416e936e02f951e4b2a38fccb1324bd5ddd42aae0121618a3e61ad5cc084f568738c9d15d940c516f011a90d2c07df41faf226bec65135bad71663ee81a1a730"], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x8000)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x20000, 0xc0)
faccessat2(r2, &(0x7f0000000240)='./file0\x00', 0x0, 0x1200)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f00000005c0)=""/164, 0x0, 0xa4, 0x0, 0x10000000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18)
rmdir(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00)
sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

788.411059ms ago: executing program 6 (id=850):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x6, @private=0xa010102}, 0x2, 0x0, 0x1}}, 0x26)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)

739.622813ms ago: executing program 7 (id=852):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'})
syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0)

697.376396ms ago: executing program 4 (id=853):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
futex(&(0x7f0000000000)=0x1, 0x6, 0x0, &(0x7f0000000080)={r1, r2+10000000}, 0x0, 0x0)
eventfd2(0x1, 0x1)
setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)="030000001e", 0x5)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a000000000008000a000000000008000a000000000008000a000000000004000b801c000b80080009000000000008000a0000000000080009000000000024000b8008000900000000000800090000000000080009000000000008000900000000005c000b8008000a000000000008000a000000000008000a000000000008000a000000000008000a00e0be"], 0x184}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x4) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r6, 0x0, 0x200000000000006}, 0x18)
r7 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r7, r7, 0x21)

696.851196ms ago: executing program 7 (id=854):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20)
sendmmsg$inet6(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}, 0x800000}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0)

690.171196ms ago: executing program 6 (id=855):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1100, 0x0, 0x8, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000000)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4054}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x7ffffffe, 0x5}}]}}}]}, 0x40}}, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r7, {0xfff2, 0x9}, {0x10}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0aeb842f838652d219b5a902000001", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="020000000400"/28], 0x50)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
r9 = fcntl$dupfd(r4, 0x0, r4)
sendmsg$NFT_MSG_GETOBJ_RESET(r9, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x15, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x44800)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%+9llu \x00'}, 0x20)
r11 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_pdu(r11, &(0x7f00000004c0)=@data_h2c_no_hdigest={{0x6, 0xb, 0x18, 0x18, 0xb0}, 0x5, 0x7ff, 0x5, 0xc3, "91667b1a"}, 0x80, 0x0, 0x0, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x4, &(0x7f0000000100)=@raw=[@btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @map_val={0x18, 0x4, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x70, &(0x7f0000000180)=""/112, 0x40f00, 0x2, '\x00', r7, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x10, 0xffffff7f, 0x6}, 0x10, 0x21df4, r9, 0x3, &(0x7f0000000380)=[r10, r12], &(0x7f00000003c0)=[{0x4, 0x5, 0xa, 0xc}, {0x2, 0x5, 0xc, 0x9}, {0x4, 0x1, 0xb, 0x4}], 0x10, 0x8}, 0x94)

596.700934ms ago: executing program 7 (id=856):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0)
r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x10, 0x8000, 0x80400250}, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000400)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
memfd_create(0x0, 0x2)
r4 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x5}, 0x1c161, 0x10000, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x2000c004)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000000)={[{@dax_always}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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")
chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r0, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1})
io_uring_enter(r1, 0x4be7, 0x4c3, 0x43, 0x0, 0x0)

596.496914ms ago: executing program 4 (id=857):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x5c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040080)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'geneve1\x00', <r4=>0x0})
sendto$packet(r2, &(0x7f0000000300)="43be8effa4ddebd964768847724c", 0xe, 0x4010, &(0x7f00000004c0)={0x11, 0x88a8, r4, 0x1, 0x9, 0x6, @multicast}, 0x14)

426.993387ms ago: executing program 4 (id=858):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0)

395.302219ms ago: executing program 4 (id=859):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x214040, 0x0)
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xfffb, 0x49, 0x9, 0x1}]})
r1 = fcntl$dupfd(r0, 0x406, r0)
write$P9_RLINK(r1, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7)
fcntl$notify(r1, 0x402, 0x1d)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x4, 0x8, 0xffffffff, 0x1020, 0x1, 0xf, '\x00', r2, r1, 0x0, 0x4, 0x5, 0x6}, 0x50)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r5 = gettid()
r6 = geteuid()
getresgid(&(0x7f0000000200)=<r7=>0x0, &(0x7f0000000240), &(0x7f0000000280))
setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0)={r5, r6, r7}, 0xc)
stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x1000, '\x00', 0x0, r1, 0x0, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r9}, &(0x7f0000000440), &(0x7f0000000480)=r1}, 0x20)
ioctl$TUNSETGROUP(r1, 0x400454ce, r7)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, r2, 0x25, 0x6, @void}, 0x10)
ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000540)=0x7)
open_by_handle_at(r3, &(0x7f0000000580)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x71e3, 0x1000, 0x40, 0x7}}, 0x48180)
r10 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000005c0), 0x4900)
setxattr$incfs_metadata(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), &(0x7f0000000680)="6551fd2d22f9a19a48f677046982b1b6e3e3", 0x12, 0x2)
ioctl$TUNSETOWNER(r1, 0x400454cc, r8)
r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0)
getpeername$unix(r11, &(0x7f0000000700)=@abs, &(0x7f0000000780)=0x6e)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r11, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r12=>r10}, './file0\x00'})
setsockopt$inet_tcp_TLS_TX(r11, 0x11a, 0x1, &(0x7f0000000800)=@gcm_128={{0x304}, "42c68fb67676296c", "01f80d7cebfc057c9fb50dc2b16183db", "b7d2e5c1", "9147bd9535b1e28c"}, 0x28)
sendmsg$NL80211_CMD_TDLS_MGMT(r12, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x184, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x23}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x56}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_IE={0x13f, 0x2a, [@dsss={0x3, 0x1, 0xe}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x3, 0x5, @device_a, 0x0, 0x9c9b, 0x9346}}, @random={0x95, 0x76, "e7e34889e17b95d0af38b5ede519d889b059c29757cc32f9e3d9b9a02dc5b9803d075201db22d91c8f595bfa5b2ba44e7d0fbf475e8e41d475863479db5cb4b464174935b417fc4c51a9ac5db73efb8a1102895f71cafde7693a338668f54638041d926315a1e92dd6e0b417155dc4059d87096e91d2"}, @erp={0x2a, 0x1, {0x1, 0x1}}, @ibss={0x6, 0x2, 0x81}, @ht={0x2d, 0x1a, {0x8000, 0x0, 0x0, 0x0, {0xd, 0x8, 0x0, 0x3d6, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x88, 0xff}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_b, @device_b}}, @tim={0x5, 0x59, {0x8, 0xc2, 0x9, "6f0d757f01e907656534c854aa47fdaaa6b2b3c93581cad49c350fd20213b36a94fe6cc49e88ecfb0f13fdcec151036c0e7c453f275277e143b459a5f7150464060548965869c142293a3e78734613789cb405256b4c"}}, @challenge={0x10, 0x1, 0x5e}, @link_id={0x65, 0x12, {@random="0aa4aa65e85f", @broadcast, @broadcast}}]}, @NL80211_ATTR_IE={0xa, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x5d0, @void, @void, @void}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x80}, 0x80)
syz_open_procfs(r5, &(0x7f0000000ac0)='net/softnet_stat\x00')
fstat(r1, &(0x7f0000000b00))
sendmsg$nl_route_sched(r12, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200ac800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)=@newqdisc={0xd8, 0x24, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xb, 0xd}, {0x10, 0x9}, {0x7, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x64, 0xf3}}, @qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3d, 0x2, 0xf, 0x6, 0x1, 0x200, 0x0, 0x3}}, {0xa, 0x2, [0xd, 0xffff, 0x9]}}, {{0x1c, 0x1, {0x6, 0x7, 0x3, 0x95c9, 0x0, 0x10000, 0x402, 0x4}}, {0xc, 0x2, [0x9, 0x6, 0x0, 0x1]}}, {{0x1c, 0x1, {0x7, 0x9, 0x8, 0xfffffffa, 0x0, 0x81, 0x0, 0x4}}, {0xc, 0x2, [0xb3e, 0x6, 0x6, 0x1]}}, {{0x1c, 0x1, {0x4, 0x0, 0x8000, 0x7f, 0x2, 0xffffffff, 0x8, 0x4}}, {0xc, 0x2, [0x0, 0x2d0, 0xc5, 0x7]}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20040001}, 0x100080c0)

327.508575ms ago: executing program 0 (id=860):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7040000010000008500000078000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10)
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)

324.146425ms ago: executing program 7 (id=861):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]})
brk(0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000)

315.289266ms ago: executing program 0 (id=862):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x9}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x4}, 0x18)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r4, 0x321, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x117, 0x29}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x50)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x1a00404, &(0x7f0000000080)={[{@noblock_validity}, {@grpquota}]}, 0x1, 0xbb9, &(0x7f00000017c0)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x6c643, 0x10)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1)

314.898876ms ago: executing program 4 (id=863):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94)
r1 = socket(0x1e, 0x80004, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x80000001, 0x0, 0x1000004}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xc1876031b0d35502, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x8000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r7 = dup3(r2, r1, 0x0)
recvmmsg(r7, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r7}, 0x8)
r8 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f0000000040)=0x6, 0x4)
sendmsg$netlink(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000005f0001"], 0x20}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00'}, 0x18)
r9 = socket$kcm(0x2, 0x1, 0x106)
sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x20}, 0x40000)

17.539368ms ago: executing program 7 (id=864):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1, 0x3}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000003fffffff90800000800000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0xe, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

0s ago: executing program 4 (id=865):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x6, @private=0xa010102}, 0x2, 0x0, 0x1}}, 0x26)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)

kernel console output (not intermixed with test programs):

gle 10/25/2025
[   56.134314][ T4201] Call Trace:
[   56.134325][ T4201]  <TASK>
[   56.134334][ T4201]  __dump_stack+0x1d/0x30
[   56.134397][ T4201]  dump_stack_lvl+0xe8/0x140
[   56.134429][ T4201]  dump_stack+0x15/0x1b
[   56.134458][ T4201]  should_fail_ex+0x265/0x280
[   56.134492][ T4201]  should_failslab+0x8c/0xb0
[   56.134592][ T4201]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[   56.134617][ T4201]  ? __alloc_skb+0x324/0x4d0
[   56.134641][ T4201]  __alloc_skb+0x324/0x4d0
[   56.134671][ T4201]  ? __alloc_skb+0x24d/0x4d0
[   56.134764][ T4201]  audit_log_start+0x3a0/0x720
[   56.134858][ T4201]  ? kstrtouint+0x76/0xc0
[   56.134957][ T4201]  audit_seccomp+0x48/0x100
[   56.135001][ T4201]  ? __seccomp_filter+0x832/0x1260
[   56.135066][ T4201]  __seccomp_filter+0x843/0x1260
[   56.135123][ T4201]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   56.135162][ T4201]  ? vfs_write+0x7e8/0x960
[   56.135240][ T4201]  ? __cond_resched+0x4e/0x90
[   56.135275][ T4201]  __secure_computing+0x82/0x150
[   56.135312][ T4201]  syscall_trace_enter+0xcf/0x1e0
[   56.135345][ T4201]  do_syscall_64+0xb2/0x2c0
[   56.135448][ T4201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.135478][ T4201] RIP: 0033:0x7f9507c7f749
[   56.135508][ T4201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   56.135531][ T4201] RSP: 002b:00007f95066df038 EFLAGS: 00000246 ORIG_RAX: 000000000000007e
[   56.135558][ T4201] RAX: ffffffffffffffda RBX: 00007f9507ed5fa0 RCX: 00007f9507c7f749
[   56.135591][ T4201] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000200000000800
[   56.135608][ T4201] RBP: 00007f95066df090 R08: 0000000000000000 R09: 0000000000000000
[   56.135625][ T4201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.135642][ T4201] R13: 00007f9507ed6038 R14: 00007f9507ed5fa0 R15: 00007ffde58f4678
[   56.135669][ T4201]  </TASK>
[   56.135692][ T4201] capability: warning: `syz.3.172' uses deprecated v2 capabilities in a way that may be insecure
[   56.140327][ T4200] tipc: Enabled bearer <udp:£>, priority 10
[   56.361153][ T4211] SELinux: failed to load policy
[   56.469169][ T4216] loop5: detected capacity change from 0 to 512
[   56.469805][ T4218] loop3: detected capacity change from 0 to 512
[   56.484430][ T4099] chnl_net:caif_netlink_parms(): no params data found
[   56.493410][ T4218] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   56.517761][ T4216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.572577][ T4216] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.734255][ T3769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.845367][ T4099] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.852789][ T4099] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.888232][ T4099] bridge_slave_0: entered allmulticast mode
[   56.932453][ T4099] bridge_slave_0: entered promiscuous mode
[   56.972316][ T4099] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.979437][ T4099] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.014275][ T4099] bridge_slave_1: entered allmulticast mode
[   57.021883][ T4099] bridge_slave_1: entered promiscuous mode
[   57.108511][ T4099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.265601][ T4099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.287611][ T4099] team0: Port device team_slave_0 added
[   57.294618][ T4099] team0: Port device team_slave_1 added
[   57.320672][ T3569] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   57.335716][ T4099] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.342794][ T4099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.369178][ T4099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.427982][ T4099] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.435100][ T4099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.461152][ T4099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.529771][ T3422] tipc: Node number set to 2886997007
[   57.563144][   T37] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.592531][ T4250] tipc: Enabling of bearer <udp:£> rejected, already enabled
[   57.606938][ T4099] hsr_slave_0: entered promiscuous mode
[   57.622649][ T4099] hsr_slave_1: entered promiscuous mode
[   57.642616][ T4099] debugfs: 'hsr0' already exists in 'hsr'
[   57.648442][ T4099] Cannot create hsr debugfs directory
[   57.655248][   T37] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.671632][ T3312] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[   57.682561][ T3312] CPU: 1 UID: 0 PID: 3312 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[   57.682615][ T3312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   57.682631][ T3312] Call Trace:
[   57.682638][ T3312]  <TASK>
[   57.682646][ T3312]  __dump_stack+0x1d/0x30
[   57.682669][ T3312]  dump_stack_lvl+0xe8/0x140
[   57.682717][ T3312]  dump_stack+0x15/0x1b
[   57.682737][ T3312]  dump_header+0x81/0x240
[   57.682851][ T3312]  oom_kill_process+0x295/0x350
[   57.682881][ T3312]  out_of_memory+0x97b/0xb80
[   57.682905][ T3312]  try_charge_memcg+0x610/0xa10
[   57.682932][ T3312]  charge_memcg+0x51/0xc0
[   57.683011][ T3312]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   57.683046][ T3312]  __read_swap_cache_async+0x17b/0x2d0
[   57.683104][ T3312]  swap_cluster_readahead+0x262/0x3c0
[   57.683152][ T3312]  swapin_readahead+0xde/0x820
[   57.683182][ T3312]  ? __rcu_read_unlock+0x4f/0x70
[   57.683208][ T3312]  ? __perf_event_task_sched_in+0xa5b/0xac0
[   57.683312][ T3312]  ? __rcu_read_unlock+0x4f/0x70
[   57.683336][ T3312]  ? __rcu_read_unlock+0x4f/0x70
[   57.683358][ T3312]  ? swap_cache_get_folio+0x277/0x280
[   57.683393][ T3312]  do_swap_page+0x2b4/0x21e0
[   57.683498][ T3312]  ? _raw_spin_unlock+0x26/0x50
[   57.683528][ T3312]  ? __schedule+0x85f/0xcd0
[   57.683555][ T3312]  ? __pfx_default_wake_function+0x10/0x10
[   57.683592][ T3312]  handle_mm_fault+0x9d8/0x2c60
[   57.683649][ T3312]  do_user_addr_fault+0x630/0x1080
[   57.683688][ T3312]  exc_page_fault+0x62/0xa0
[   57.683714][ T3312]  asm_exc_page_fault+0x26/0x30
[   57.683770][ T3312] RIP: 0033:0x7f1aa4cf1fc5
[   57.683789][ T3312] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[   57.683810][ T3312] RSP: 002b:00007ffe7a569308 EFLAGS: 00010246
[   57.683859][ T3312] RAX: 0000000000000000 RBX: 0000000000000081 RCX: 00007f1aa4cf1fc3
[   57.683873][ T3312] RDX: 00007ffe7a569320 RSI: 0000000000000000 RDI: 0000000000000000
[   57.683889][ T3312] RBP: 00007ffe7a56938c R08: 000000001afca90d R09: 0000000000000000
[   57.683904][ T3312] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[   57.683920][ T3312] R13: 00000000000927c0 R14: 000000000000dfb1 R15: 00007ffe7a5693e0
[   57.683942][ T3312]  </TASK>
[   57.683951][ T3312] memory: usage 307200kB, limit 307200kB, failcnt 650
[   57.913858][ T3312] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0
[   57.921799][ T3312] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[   57.929144][ T3312] Memory cgroup stats for /syz0:
[   57.954748][ T4254] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4254 comm=syz.5.188
[   57.972138][ T4254] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4254 comm=syz.5.188
[   57.989328][ T4254] syz_tun: entered promiscuous mode
[   57.994916][ T4254] macvlan2: entered allmulticast mode
[   58.000381][ T4254] syz_tun: entered allmulticast mode
[   58.007623][ T4254] syz_tun: left allmulticast mode
[   58.012862][ T4254] syz_tun: left promiscuous mode
[   58.037309][ T4256] __nla_validate_parse: 2 callbacks suppressed
[   58.037325][ T4256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.188'.
[   58.071052][   T37] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.153611][   T37] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.245363][ T3312] cache 0
[   58.248357][ T3312] rss 0
[   58.251191][ T3312] shmem 0
[   58.254194][ T3312] mapped_file 0
[   58.257671][ T3312] dirty 0
[   58.260866][ T3312] writeback 0
[   58.264164][ T3312] workingset_refault_anon 22
[   58.268777][ T3312] workingset_refault_file 66
[   58.272516][ T4099] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   58.273685][ T3312] swap 204800
[   58.283497][ T3312] swapcached 0
[   58.286888][ T3312] pgpgin 33815
[   58.290265][ T3312] pgpgout 33815
[   58.293761][ T3312] pgfault 32123
[   58.297277][ T3312] pgmajfault 15
[   58.300757][ T3312] inactive_anon 0
[   58.304443][ T3312] active_anon 0
[   58.307925][ T3312] inactive_file 0
[   58.311622][ T3312] active_file 0
[   58.315149][ T3312] unevictable 0
[   58.318742][ T3312] hierarchical_memory_limit 314572800
[   58.324178][ T3312] hierarchical_memsw_limit 9223372036854771712
[   58.330341][ T3312] total_cache 0
[   58.333867][ T3312] total_rss 0
[   58.337159][ T3312] total_shmem 0
[   58.340732][ T3312] total_mapped_file 0
[   58.344779][ T3312] total_dirty 0
[   58.348252][ T3312] total_writeback 0
[   58.352235][ T3312] total_workingset_refault_anon 22
[   58.357353][ T3312] total_workingset_refault_file 66
[   58.362501][ T3312] total_swap 204800
[   58.366377][ T3312] total_swapcached 0
[   58.370269][ T3312] total_pgpgin 33815
[   58.374248][ T3312] total_pgpgout 33815
[   58.378243][ T3312] total_pgfault 32123
[   58.382244][ T3312] total_pgmajfault 15
[   58.386227][ T3312] total_inactive_anon 0
[   58.390385][ T3312] total_active_anon 0
[   58.394387][ T3312] total_inactive_file 0
[   58.398617][ T3312] total_active_file 0
[   58.402681][ T3312] total_unevictable 0
[   58.406683][ T3312] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.184,pid=4244,uid=0
[   58.421441][ T3312] Memory cgroup out of memory: Killed process 4244 (syz.0.184) total-vm:96016kB, anon-rss:1136kB, file-rss:22320kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[   58.447830][ T4099] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   58.463486][   T37] bridge_slave_1: left allmulticast mode
[   58.469305][   T37] bridge_slave_1: left promiscuous mode
[   58.475220][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.517620][   T37] bridge_slave_0: left allmulticast mode
[   58.523355][   T37] bridge_slave_0: left promiscuous mode
[   58.524666][ T4274] loop5: detected capacity change from 0 to 1024
[   58.529243][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.536599][ T4274] EXT4-fs: Ignoring removed orlov option
[   58.556364][    C0] hrtimer: interrupt took 38259 ns
[   58.594703][ T4274] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.674538][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   58.684578][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   58.694380][   T37] bond0 (unregistering): Released all slaves
[   58.703713][   T37] bond1 (unregistering): Released all slaves
[   58.712793][ T4099] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   58.722195][ T4278] tipc: Enabling of bearer <udp:£> rejected, already enabled
[   58.729667][ T4099] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   58.748570][ T3705] infiniband syb2: ib_query_port failed (-19)
[   58.811501][ T4276] macvtap1: entered promiscuous mode
[   58.817049][ T4276] macvtap1: entered allmulticast mode
[   58.856927][   T37] tipc: Disabling bearer <udp:£>
[   58.858287][ T4290] netlink: 'syz.0.198': attribute type 13 has an invalid length.
[   58.862005][   T37] tipc: Left network mode
[   58.932024][   T37] hsr_slave_0: left promiscuous mode
[   58.944362][   T37] hsr_slave_1: left promiscuous mode
[   58.959359][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.966889][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.974830][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.982456][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.003051][   T37] veth1_macvtap: left promiscuous mode
[   59.008604][   T37] veth0_macvtap: left promiscuous mode
[   59.014474][   T37] veth1_vlan: left promiscuous mode
[   59.019785][   T37] veth0_vlan: left promiscuous mode
[   59.186275][   T37] team0 (unregistering): Port device team_slave_1 removed
[   59.218136][   T37] team0 (unregistering): Port device team_slave_0 removed
[   59.340904][ T4303] Set syz1 is full, maxelem 65536 reached
[   59.421385][ T4099] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.460043][ T4099] 8021q: adding VLAN 0 to HW filter on device team0
[   59.476609][ T4314] netlink: 152 bytes leftover after parsing attributes in process `syz.4.201'.
[   59.491425][ T4314] netlink: 60 bytes leftover after parsing attributes in process `syz.4.201'.
[   59.492811][ T3769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.500355][ T4314] netlink: 60 bytes leftover after parsing attributes in process `syz.4.201'.
[   59.529921][ T4316] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.622631][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.629898][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.658081][ T4329] tipc: Enabling of bearer <udp:£> rejected, already enabled
[   59.675044][ T4316] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.698587][ T4263] chnl_net:caif_netlink_parms(): no params data found
[   59.709518][ T4333] netlink: 20 bytes leftover after parsing attributes in process `syz.5.208'.
[   59.715595][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.725511][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.769386][ T4337] syzkaller0: entered promiscuous mode
[   59.774922][ T4337] syzkaller0: entered allmulticast mode
[   59.816056][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.823198][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.834785][ T4263] bridge_slave_0: entered allmulticast mode
[   59.842101][ T4263] bridge_slave_0: entered promiscuous mode
[   59.853196][ T4316] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.894051][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.901194][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.914898][ T4263] bridge_slave_1: entered allmulticast mode
[   59.922716][ T4263] bridge_slave_1: entered promiscuous mode
[   59.943888][ T4316] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.987635][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.998453][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.027463][ T4263] team0: Port device team_slave_0 added
[   60.044783][ T4099] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.054235][ T4263] team0: Port device team_slave_1 added
[   60.100936][   T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.109413][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.116446][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.142620][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.165562][   T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.174390][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.181518][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.207722][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.225285][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.245633][   T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.288977][ T4263] hsr_slave_0: entered promiscuous mode
[   60.303491][ T4263] hsr_slave_1: entered promiscuous mode
[   60.311100][ T4263] debugfs: 'hsr0' already exists in 'hsr'
[   60.317521][ T4263] Cannot create hsr debugfs directory
[   60.326970][ T4345] loop5: detected capacity change from 0 to 764
[   60.335038][   T29] kauditd_printk_skb: 163 callbacks suppressed
[   60.335122][   T29] audit: type=1400 audit(1765766154.457:849): avc:  denied  { mount } for  pid=4344 comm=77DEA305FF07F406 name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   60.365808][   T29] audit: type=1400 audit(1765766154.487:850): avc:  denied  { setattr } for  pid=4344 comm=77DEA305FF07F406 path="socket:[9314]" dev="sockfs" ino=9314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   60.474867][ T4099] veth0_vlan: entered promiscuous mode
[   60.483061][ T4099] veth1_vlan: entered promiscuous mode
[   60.503518][ T4099] veth0_macvtap: entered promiscuous mode
[   60.510063][   T29] audit: type=1400 audit(1765766154.617:851): avc:  denied  { unmount } for  pid=3769 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   60.514155][ T4099] veth1_macvtap: entered promiscuous mode
[   60.554217][ T4375] netlink: 'syz.5.215': attribute type 1 has an invalid length.
[   60.567639][ T4263] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   60.616325][ T4099] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.634260][ T4263] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   60.645719][ T4099] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.656968][ T4263] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   60.672600][   T37] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.681624][ T4263] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   60.691240][ T4379] tipc: Enabling of bearer <udp:£> rejected, already enabled
[   60.698902][   T37] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.732044][ T4382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.217'.
[   60.741180][   T29] audit: type=1400 audit(1765766154.847:852): avc:  denied  { getopt } for  pid=4380 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   60.761356][   T37] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.771892][   T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.804504][ T4398] 9p: Bad value for 'rfdno'
[   60.820245][   T29] audit: type=1400 audit(1765766154.927:853): avc:  denied  { name_bind } for  pid=4387 comm="syz.4.220" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   60.851740][ T4390] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.875102][ T4404] netlink: 400 bytes leftover after parsing attributes in process `syz.4.220'.
[   60.921434][ T4390] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.936825][ T4407] loop6: detected capacity change from 0 to 128
[   60.955468][ T4407] vfat: Unknown parameter '	'
[   60.962243][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.992087][ T4390] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.021498][ T4263] 8021q: adding VLAN 0 to HW filter on device team0
[   61.036337][ T4144] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.043539][ T4144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.065763][ T4390] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.095955][ T4144] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.103082][ T4144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.134036][   T52] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.157651][ T4144] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.176243][   T29] audit: type=1400 audit(1765766155.287:854): avc:  denied  { read write } for  pid=4402 comm="syz.0.224" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   61.202569][ T4144] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.231565][ T4144] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.258465][ T4263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   61.258973][   T29] audit: type=1400 audit(1765766155.287:855): avc:  denied  { open } for  pid=4402 comm="syz.0.224" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   61.363387][   T29] audit: type=1326 audit(1765766155.477:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4420 comm="syz.5.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60112f749 code=0x7ffc0000
[   61.394587][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.441030][   T29] audit: type=1326 audit(1765766155.477:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4420 comm="syz.5.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60112f749 code=0x7ffc0000
[   61.464470][   T29] audit: type=1326 audit(1765766155.477:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4420 comm="syz.5.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb60112f749 code=0x7ffc0000
[   61.546141][ T4438] cgroup2: Unknown parameter 'bav‡[”šxÜX@ê'
[   61.591619][ T4263] veth0_vlan: entered promiscuous mode
[   61.599979][ T4263] veth1_vlan: entered promiscuous mode
[   61.637504][ T4263] veth0_macvtap: entered promiscuous mode
[   61.654704][ T4263] veth1_macvtap: entered promiscuous mode
[   61.672772][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.704637][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.714315][ T4452] netlink: 36 bytes leftover after parsing attributes in process `syz.6.235'.
[   61.718409][ T3569] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.759119][ T3569] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.769808][ T3569] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.780474][ T3569] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.845311][ T4471] netlink: 48 bytes leftover after parsing attributes in process `syz.4.241'.
[   61.859702][ T4467] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4467 comm=syz.7.187
[   61.871278][  T429] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2
[   61.872260][ T4467] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4467 comm=syz.7.187
[   61.896880][ T4469] tipc: Started in network mode
[   61.901848][ T4469] tipc: Node identity ac14140f, cluster identity 4711
[   61.909438][ T4469] tipc: New replicast peer: 255.255.255.83
[   61.915632][ T4469] tipc: Enabled bearer <udp:£>, priority 10
[   61.932969][ T4475] syz_tun: entered promiscuous mode
[   61.938383][ T4475] macvlan2: entered allmulticast mode
[   61.943869][ T4475] syz_tun: entered allmulticast mode
[   61.951231][ T4475] syz_tun: left allmulticast mode
[   61.956400][ T4475] syz_tun: left promiscuous mode
[   61.996256][ T4467] netlink: 4 bytes leftover after parsing attributes in process `syz.7.187'.
[   62.040099][ T4483] netlink: 'syz.4.245': attribute type 1 has an invalid length.
[   62.092031][ T4483] SELinux:  Context system_u:object is not valid (left unmapped).
[   62.156447][ T4499] loop6: detected capacity change from 0 to 512
[   62.163862][ T4499] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   62.172420][ T4499] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities
[   62.191000][ T4499] loop6: detected capacity change from 0 to 512
[   62.202431][ T4499] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.251: Failed to acquire dquot type 1
[   62.211972][ T4489] FAULT_INJECTION: forcing a failure.
[   62.211972][ T4489] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   62.230648][ T4489] CPU: 0 UID: 0 PID: 4489 Comm: syz.7.249 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   62.230685][ T4489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   62.230700][ T4489] Call Trace:
[   62.230707][ T4489]  <TASK>
[   62.230716][ T4489]  __dump_stack+0x1d/0x30
[   62.230744][ T4489]  dump_stack_lvl+0xe8/0x140
[   62.230766][ T4489]  dump_stack+0x15/0x1b
[   62.230790][ T4489]  should_fail_ex+0x265/0x280
[   62.230876][ T4489]  should_fail_alloc_page+0xf2/0x100
[   62.230901][ T4489]  __alloc_frozen_pages_noprof+0x109/0x360
[   62.230931][ T4489]  alloc_pages_mpol+0xb3/0x260
[   62.230965][ T4489]  vma_alloc_folio_noprof+0x1aa/0x300
[   62.231049][ T4489]  handle_mm_fault+0xef5/0x2c60
[   62.231090][ T4489]  do_user_addr_fault+0x630/0x1080
[   62.231200][ T4489]  exc_page_fault+0x62/0xa0
[   62.231273][ T4489]  asm_exc_page_fault+0x26/0x30
[   62.231293][ T4489] RIP: 0033:0x7f9561f009f0
[   62.231311][ T4489] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41
[   62.231333][ T4489] RSP: 002b:00007f9560a9e4a0 EFLAGS: 00010286
[   62.231354][ T4489] RAX: 0000000000001000 RBX: 00007f9560a9e540 RCX: 0000000000000001
[   62.231369][ T4489] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f9560a9e5e0
[   62.231383][ T4489] RBP: 00000000000000db R08: 00007f955867f000 R09: 00000000000000ff
[   62.231450][ T4489] R10: 0000000000000000 R11: 00007f9560a9e550 R12: 0000000000000001
[   62.231465][ T4489] R13: 00007f95620dfc40 R14: 0000000000000000 R15: 00007f9560a9e5e0
[   62.231490][ T4489]  </TASK>
[   62.284192][ T4510] SELinux: security_context_str_to_sid (ÿÿ) failed with errno=-22
[   62.284602][ T4489] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   62.358317][ T4499] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.251: Failed to acquire dquot type 1
[   62.437824][ T4499] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.251: bg 0: block 248: padding at end of block bitmap is not set
[   62.452331][ T4499] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem
[   62.462812][ T4499] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.251: Failed to acquire dquot type 1
[   62.474284][ T4499] EXT4-fs (loop6): 1 orphan inode deleted
[   62.480500][ T4499] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.493389][ T4499] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.511874][ T4489] loop7: detected capacity change from 0 to 512
[   62.534910][ T4099] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.554039][ T4516] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[   62.560620][ T4516] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   62.568212][ T4516] vhci_hcd vhci_hcd.0: Device attached
[   62.574222][ T4489] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[   62.623692][ T4517] vhci_hcd: connection closed
[   62.625252][ T4030] vhci_hcd vhci_hcd.0: stop threads
[   62.634313][ T4489] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002]
[   62.635324][ T4030] vhci_hcd vhci_hcd.0: release socket
[   62.635345][ T4030] vhci_hcd vhci_hcd.0: disconnect device
[   62.687117][ T4525] loop6: detected capacity change from 0 to 128
[   62.688597][ T4489] System zones: 1-12
[   62.694554][ T4489] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.249: corrupted in-inode xattr: e_value size too large
[   62.695863][ T4489] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.249: couldn't read orphan inode 15 (err -117)
[   62.726082][ T4489] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.778247][ T4489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.025465][ T4534] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4534 comm=syz.7.260
[   63.037906][ T4534] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4534 comm=syz.7.260
[   63.092654][ T4534] syz_tun: entered promiscuous mode
[   63.108152][ T4534] macvlan2: entered allmulticast mode
[   63.113734][ T4534] syz_tun: entered allmulticast mode
[   63.131345][ T4534] syz_tun: left allmulticast mode
[   63.136435][ T4534] syz_tun: left promiscuous mode
[   63.210887][ T3486] tipc: Node number set to 2886997007
[   63.218275][ T4539] __nla_validate_parse: 3 callbacks suppressed
[   63.218295][ T4539] netlink: 4 bytes leftover after parsing attributes in process `syz.7.260'.
[   63.254538][ T4541] ip6gre0: Caught tx_queue_len zero misconfig
[   63.313035][ T4545] netlink: 'syz.4.265': attribute type 10 has an invalid length.
[   63.336903][ T4545] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.378180][ T4545] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.422562][ T4545] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   64.270574][ T4581] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4581 comm=syz.7.278
[   64.283236][ T4581] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4581 comm=syz.7.278
[   64.431096][ T4585] syz_tun: entered promiscuous mode
[   64.454124][ T4585] macvlan2: entered allmulticast mode
[   64.459755][ T4585] syz_tun: entered allmulticast mode
[   64.484078][ T4588] loop6: detected capacity change from 0 to 512
[   64.503323][ T4581] netlink: 4 bytes leftover after parsing attributes in process `syz.7.278'.
[   64.514857][ T4588] EXT4-fs: Mount option(s) incompatible with ext2
[   64.541661][ T4585] syz_tun: left allmulticast mode
[   64.546766][ T4585] syz_tun: left promiscuous mode
[   64.595005][ T4591] netlink: 12 bytes leftover after parsing attributes in process `syz.6.282'.
[   64.661228][ T4595] netlink: 132 bytes leftover after parsing attributes in process `syz.6.284'.
[   64.754784][ T4601] loop5: detected capacity change from 0 to 164
[   64.765403][ T4601] ISOFS: unable to read i-node block
[   64.780515][ T4601] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[   64.869937][ T4604] netlink: 24 bytes leftover after parsing attributes in process `syz.5.286'.
[   65.205374][ T4612] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   65.285097][ T4622] 9p: Bad value for 'rfdno'
[   65.306204][ T4624] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4624 comm=syz.0.294
[   65.318716][ T4624] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4624 comm=syz.0.294
[   65.335025][ T4624] syz_tun: entered promiscuous mode
[   65.340444][ T4624] macvlan2: entered allmulticast mode
[   65.346051][ T4624] syz_tun: entered allmulticast mode
[   65.354077][ T4624] syz_tun: left allmulticast mode
[   65.359161][ T4624] syz_tun: left promiscuous mode
[   65.370784][ T4627] netlink: 400 bytes leftover after parsing attributes in process `syz.5.292'.
[   65.383917][ T4628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'.
[   65.430149][   T29] kauditd_printk_skb: 239 callbacks suppressed
[   65.430167][   T29] audit: type=1326 audit(1765766159.537:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4625 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa794a6f749 code=0x7ffc0000
[   65.462726][   T29] audit: type=1326 audit(1765766159.537:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4625 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa794a6f749 code=0x7ffc0000
[   65.486134][   T29] audit: type=1326 audit(1765766159.567:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4625 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa794a6f749 code=0x7ffc0000
[   65.486695][ T4626] loop4: detected capacity change from 0 to 1024
[   65.509566][   T29] audit: type=1326 audit(1765766159.577:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4625 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa794a6f749 code=0x7ffc0000
[   65.540141][ T4626] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   65.540282][   T29] audit: type=1326 audit(1765766159.577:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4625 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa794a6f749 code=0x7ffc0000
[   65.551285][ T4626] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   65.574437][   T29] audit: type=1326 audit(1765766159.577:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4625 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa794a6f749 code=0x7ffc0000
[   65.574507][   T29] audit: type=1326 audit(1765766159.577:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4625 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa794a6f749 code=0x7ffc0000
[   65.585268][ T4626] JBD2: no valid journal superblock found
[   65.607471][   T29] audit: type=1326 audit(1765766159.577:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4625 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa794a6f749 code=0x7ffc0000
[   65.632209][ T4626] EXT4-fs (loop4): Could not load journal inode
[   65.638073][   T29] audit: type=1326 audit(1765766159.577:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4625 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa794a6f749 code=0x7ffc0000
[   65.691365][   T29] audit: type=1326 audit(1765766159.577:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4625 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa794a6f749 code=0x7ffc0000
[   65.741820][ T4631] netlink: 152 bytes leftover after parsing attributes in process `syz.7.297'.
[   65.751527][ T4631] netlink: 60 bytes leftover after parsing attributes in process `syz.7.297'.
[   65.760418][ T4631] netlink: 60 bytes leftover after parsing attributes in process `syz.7.297'.
[   66.077117][ T4657] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4657 comm=syz.6.306
[   66.089635][ T4657] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4657 comm=syz.6.306
[   66.154833][ T4659] block device autoloading is deprecated and will be removed.
[   66.199479][ T4657] syz_tun: entered promiscuous mode
[   66.218239][ T4663] loop5: detected capacity change from 0 to 512
[   66.224865][ T4657] macvlan2: entered allmulticast mode
[   66.230282][ T4657] syz_tun: entered allmulticast mode
[   66.286696][ T4657] syz_tun: left allmulticast mode
[   66.291947][ T4657] syz_tun: left promiscuous mode
[   66.301013][ T4665] loop0: detected capacity change from 0 to 128
[   66.307890][ T4665] vfat: Unknown parameter '	'
[   66.746103][ T4673] loop0: detected capacity change from 0 to 164
[   66.954955][ T4663] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   66.965026][ T4673] ISOFS: unable to read i-node block
[   66.970326][ T4673] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[   66.982307][ T4663] EXT4-fs (loop5): 1 truncate cleaned up
[   66.988420][ T4663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.135694][ T3769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.219309][ T4688] bond0: entered promiscuous mode
[   67.224639][ T4688] bond_slave_0: entered promiscuous mode
[   67.230642][ T4688] bond_slave_1: entered promiscuous mode
[   67.253339][ T4691] loop5: detected capacity change from 0 to 2048
[   67.282717][ T4687] loop6: detected capacity change from 0 to 2048
[   67.303113][ T4691] Alternate GPT is invalid, using primary GPT.
[   67.309563][ T4691]  loop5: p2 p3 p7
[   67.315299][ T4688] batadv0: entered promiscuous mode
[   67.323083][ T4688] 8021q: adding VLAN 0 to HW filter on device hsr1
[   67.355365][ T4687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.400975][ T4701] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[   67.418553][ T4688] bond0: left promiscuous mode
[   67.423470][ T4688] bond_slave_0: left promiscuous mode
[   67.429034][ T4688] bond_slave_1: left promiscuous mode
[   67.493860][ T4687] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.565875][ T4688] batadv0: left promiscuous mode
[   67.755284][ T4701] lo speed is unknown, defaulting to 1000
[   67.775422][ T4701] lo speed is unknown, defaulting to 1000
[   67.841113][ T4701] lo speed is unknown, defaulting to 1000
[   67.854250][ T4701] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   67.883475][ T4715] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub
[   67.923208][ T4701] lo speed is unknown, defaulting to 1000
[   67.923675][ T4099] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.123240][ T4701] lo speed is unknown, defaulting to 1000
[   68.129514][ T4701] lo speed is unknown, defaulting to 1000
[   68.156623][ T4701] lo speed is unknown, defaulting to 1000
[   68.184858][ T4701] lo speed is unknown, defaulting to 1000
[   68.199507][ T4697] Set syz1 is full, maxelem 65536 reached
[   68.207632][ T4723] xt_hashlimit: max too large, truncated to 1048576
[   68.238068][ T4723] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   68.268451][ T4729] __nla_validate_parse: 8 callbacks suppressed
[   68.268545][ T4729] netlink: 4 bytes leftover after parsing attributes in process `syz.6.332'.
[   68.296194][ T4724] bond1 (unregistering): Released all slaves
[   68.306882][ T4733] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   68.322274][ T4729] netlink: 8 bytes leftover after parsing attributes in process `syz.6.332'.
[   68.340795][ T4729] netlink: 12 bytes leftover after parsing attributes in process `syz.6.332'.
[   68.350065][ T4737] loop4: detected capacity change from 0 to 512
[   68.368456][ T4729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4729 comm=syz.6.332
[   68.387127][ T4733] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.334' sets config #0
[   68.396873][ T4737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.420523][ T4740] vhci_hcd vhci_hcd.3: invalid port number 9
[   68.422122][ T4737] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.439873][ T4737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.518759][ T4750] loop0: detected capacity change from 0 to 4096
[   68.542557][ T4750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.576978][ T4750] lo speed is unknown, defaulting to 1000
[   68.614559][ T4763] netlink: 68 bytes leftover after parsing attributes in process `syz.4.346'.
[   68.688989][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.806549][ T4776] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[   68.814954][ T3409] IPVS: starting estimator thread 0...
[   68.911562][ T4784] IPVS: using max 1920 ests per chain, 96000 per kthread
[   69.016817][ T4800] EXT4-fs: Ignoring removed bh option
[   69.042181][ T4800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.250853][ T3769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.407118][ T4813] EXT4-fs: dax option not supported
[   69.430265][ T4813] netlink: 4 bytes leftover after parsing attributes in process `syz.7.362'.
[   69.579522][ T4829] xt_CT: You must specify a L4 protocol and not use inversions on it
[   69.617090][ T4833] set_capacity_and_notify: 2 callbacks suppressed
[   69.617105][ T4833] loop4: detected capacity change from 0 to 1024
[   69.631633][ T4831] netlink: 12 bytes leftover after parsing attributes in process `syz.7.371'.
[   69.662774][ T4835] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   69.720908][ T4835] loop6: detected capacity change from 0 to 1024
[   69.795280][ T4850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.804012][ T4850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.817007][ T4835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   69.830230][ T4835] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.844225][ T4833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   69.856561][ T4833] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.882489][ T4833] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.372: lblock 0 mapped to illegal pblock 0 (length 1)
[   69.943446][ T4853] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.972066][ T4855] lo speed is unknown, defaulting to 1000
[   70.023634][ T4853] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.053014][ T4099] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   70.113450][ T4853] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.130929][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   70.195348][ T4853] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.251285][ T4030] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.270288][  T279] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.283453][  T279] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.304693][  T279] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.319963][ T4895] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4895 comm=syz.6.389
[   70.326045][ T4897] loop7: detected capacity change from 0 to 1024
[   70.332548][ T4895] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4895 comm=syz.6.389
[   70.339541][ T4897] EXT4-fs: Ignoring removed nomblk_io_submit option
[   70.356500][ T4895] syz_tun: entered promiscuous mode
[   70.363184][ T4895] macvlan2: entered allmulticast mode
[   70.368585][ T4895] syz_tun: entered allmulticast mode
[   70.373693][ T4897] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.375997][ T4895] syz_tun: left allmulticast mode
[   70.391012][ T4895] syz_tun: left promiscuous mode
[   70.404091][ T4900] netlink: 4 bytes leftover after parsing attributes in process `syz.6.389'.
[   70.448944][   T29] kauditd_printk_skb: 163 callbacks suppressed
[   70.449037][   T29] audit: type=1400 audit(1765766164.557:1265): avc:  denied  { watch } for  pid=4896 comm="syz.7.390" path="/34/file1" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   70.479276][   T29] audit: type=1400 audit(1765766164.597:1266): avc:  denied  { shutdown } for  pid=4901 comm="syz.6.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   70.500056][   T29] audit: type=1400 audit(1765766164.597:1267): avc:  denied  { connect } for  pid=4901 comm="syz.6.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   70.537211][   T29] audit: type=1400 audit(1765766164.647:1268): avc:  denied  { bind } for  pid=4896 comm="syz.7.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   70.639422][   T29] audit: type=1400 audit(1765766164.747:1269): avc:  denied  { setopt } for  pid=4920 comm="syz.6.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   70.641007][ T4922] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   70.661053][ T4921] IPVS: stopping master sync thread 4922 ...
[   70.695710][ T4924] loop6: detected capacity change from 0 to 1024
[   70.702943][ T4924] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   70.714055][ T4924] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[   70.724436][ T4924] EXT4-fs (loop6): invalid journal inode
[   70.730275][ T4924] EXT4-fs (loop6): can't get journal size
[   70.738346][ T4924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   70.763149][ T4099] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.832214][ T4931] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4931 comm=syz.6.401
[   70.844725][ T4931] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4931 comm=syz.6.401
[   70.861133][ T4931] syz_tun: entered promiscuous mode
[   70.866437][ T4931] macvlan2: entered allmulticast mode
[   70.871959][ T4931] syz_tun: entered allmulticast mode
[   70.879408][ T4931] syz_tun: left allmulticast mode
[   70.884531][ T4931] syz_tun: left promiscuous mode
[   70.937960][ T4940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.401'.
[   71.044753][   T29] audit: type=1400 audit(1765766165.147:1270): avc:  denied  { map_create } for  pid=4943 comm="syz.4.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   71.071306][   T29] audit: type=1400 audit(1765766165.187:1271): avc:  denied  { read write } for  pid=4099 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   71.095673][   T29] audit: type=1400 audit(1765766165.187:1272): avc:  denied  { open } for  pid=4099 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   71.119981][   T29] audit: type=1400 audit(1765766165.187:1273): avc:  denied  { open } for  pid=4943 comm="syz.4.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   71.139290][   T29] audit: type=1400 audit(1765766165.187:1274): avc:  denied  { perfmon } for  pid=4943 comm="syz.4.407" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   71.389551][ T4952] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   71.401277][ T4952] netlink: 'syz.4.409': attribute type 4 has an invalid length.
[   71.408988][ T4952] netlink: 152 bytes leftover after parsing attributes in process `syz.4.409'.
[   71.420830][ T4954] pim6reg1: entered promiscuous mode
[   71.426178][ T4954] pim6reg1: entered allmulticast mode
[   71.492771][ T4952] .`: renamed from bond0 (while UP)
[   71.632798][ T4263] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.225884][ T4973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.415'.
[   72.287468][ T4973] netlink: 'syz.4.415': attribute type 21 has an invalid length.
[   72.960462][ T4975] loop6: detected capacity change from 0 to 256
[   73.071850][ T4975] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[   73.171047][ T4982] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4982 comm=syz.7.418
[   73.183466][ T4982] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4982 comm=syz.7.418
[   73.225437][ T4986] loop6: detected capacity change from 0 to 1024
[   73.235411][ T4987] syz_tun: entered promiscuous mode
[   73.242328][ T4987] macvlan2: entered allmulticast mode
[   73.247750][ T4987] syz_tun: entered allmulticast mode
[   73.255177][ T4987] syz_tun: left allmulticast mode
[   73.260251][ T4987] syz_tun: left promiscuous mode
[   73.270385][ T4986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   73.284086][ T4982] __nla_validate_parse: 3 callbacks suppressed
[   73.284103][ T4982] netlink: 4 bytes leftover after parsing attributes in process `syz.7.418'.
[   73.300201][ T4986] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.319742][ T4986] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.420: lblock 0 mapped to illegal pblock 0 (length 1)
[   73.426699][ T4993] lo speed is unknown, defaulting to 1000
[   73.624027][ T4099] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   73.729648][ T5007] loop7: detected capacity change from 0 to 128
[   73.737447][ T5007] msdos: Bad value for 'gid'
[   73.742096][ T5007] msdos: Bad value for 'gid'
[   74.097592][ T5012] infiniband !yz!: set active
[   74.102533][ T5012] infiniband !yz!: added team_slave_0
[   74.116732][ T5018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.429'.
[   74.138054][ T5012] RDS/IB: !yz!: added
[   74.150681][ T5012] smc: adding ib device !yz! with port count 1
[   74.157698][ T5012] smc:    ib device !yz! port 1 has no pnetid
[   74.163906][ T5021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   74.384087][ T5038] netlink: 152 bytes leftover after parsing attributes in process `syz.0.438'.
[   74.411654][ T5038] netlink: 60 bytes leftover after parsing attributes in process `syz.0.438'.
[   74.420825][ T5038] netlink: 60 bytes leftover after parsing attributes in process `syz.0.438'.
[   74.435195][ T5042] netlink: 388 bytes leftover after parsing attributes in process `syz.7.439'.
[   74.592624][ T5053] netlink: 12 bytes leftover after parsing attributes in process `syz.7.443'.
[   74.617779][ T5057] loop6: detected capacity change from 0 to 128
[   74.624854][ T5057] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[   74.635078][ T5057] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   74.647469][ T5057] ext2 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.840184][ T4099] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   74.892568][ T5067] FAULT_INJECTION: forcing a failure.
[   74.892568][ T5067] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   74.905759][ T5067] CPU: 0 UID: 0 PID: 5067 Comm: syz.4.449 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   74.905829][ T5067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   74.905845][ T5067] Call Trace:
[   74.905854][ T5067]  <TASK>
[   74.905863][ T5067]  __dump_stack+0x1d/0x30
[   74.905928][ T5067]  dump_stack_lvl+0xe8/0x140
[   74.905950][ T5067]  dump_stack+0x15/0x1b
[   74.906006][ T5067]  should_fail_ex+0x265/0x280
[   74.906036][ T5067]  should_fail+0xb/0x20
[   74.906061][ T5067]  should_fail_usercopy+0x1a/0x20
[   74.906089][ T5067]  _copy_from_user+0x1c/0xb0
[   74.906190][ T5067]  do_ipv6_setsockopt+0x124/0x2160
[   74.906302][ T5067]  ? trace_reschedule_exit+0xd/0xc0
[   74.906329][ T5067]  ? __rcu_read_unlock+0x4f/0x70
[   74.906411][ T5067]  ? avc_has_perm_noaudit+0xab/0x130
[   74.906439][ T5067]  ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0
[   74.906480][ T5067]  ipv6_setsockopt+0x59/0x130
[   74.906522][ T5067]  tcp_setsockopt+0x98/0xb0
[   74.906639][ T5067]  sock_common_setsockopt+0x69/0x80
[   74.906665][ T5067]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   74.906687][ T5067]  __sys_setsockopt+0x184/0x200
[   74.906722][ T5067]  __x64_sys_setsockopt+0x64/0x80
[   74.906777][ T5067]  x64_sys_call+0x21d5/0x3000
[   74.906800][ T5067]  do_syscall_64+0xd8/0x2c0
[   74.906899][ T5067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.906926][ T5067] RIP: 0033:0x7fa794a6f749
[   74.906966][ T5067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.906986][ T5067] RSP: 002b:00007fa7934cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   74.907075][ T5067] RAX: ffffffffffffffda RBX: 00007fa794cc5fa0 RCX: 00007fa794a6f749
[   74.907091][ T5067] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000004
[   74.907105][ T5067] RBP: 00007fa7934cf090 R08: 0000000000000068 R09: 0000000000000000
[   74.907116][ T5067] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001
[   74.907127][ T5067] R13: 00007fa794cc6038 R14: 00007fa794cc5fa0 R15: 00007fff612e9be8
[   74.907145][ T5067]  </TASK>
[   75.299833][ T5078] netlink: 152 bytes leftover after parsing attributes in process `syz.7.453'.
[   75.318344][ T5078] netlink: 60 bytes leftover after parsing attributes in process `syz.7.453'.
[   75.327440][ T5078] netlink: 60 bytes leftover after parsing attributes in process `syz.7.453'.
[   75.392713][ T5080] netlink: 'syz.4.454': attribute type 17 has an invalid length.
[   75.408740][ T5080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   75.490730][   T29] kauditd_printk_skb: 241 callbacks suppressed
[   75.490745][   T29] audit: type=1400 audit(1765766169.607:1516): avc:  denied  { create } for  pid=5084 comm="syz.4.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   75.519667][ T5086] openvswitch: netlink: Missing key (keys=40, expected=100)
[   75.548673][   T29] audit: type=1400 audit(1765766169.627:1517): avc:  denied  { write } for  pid=5084 comm="" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   75.570959][   T29] audit: type=1400 audit(1765766169.627:1518): avc:  denied  { open } for  pid=5084 comm="" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   75.960935][   T29] audit: type=1400 audit(1765766170.057:1519): avc:  denied  { ioctl } for  pid=5094 comm="syz.6.458" path="socket:[11142]" dev="sockfs" ino=11142 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   76.094538][   T29] audit: type=1400 audit(1765766170.197:1520): avc:  denied  { create } for  pid=5101 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   76.114399][ T5102] loop4: detected capacity change from 0 to 512
[   76.127999][ T5102] EXT4-fs: quotafile must be on filesystem root
[   76.155394][   T29] audit: type=1400 audit(1765766170.257:1521): avc:  denied  { bind } for  pid=5101 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   76.192492][ T5102] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[   76.212325][   T29] audit: type=1400 audit(1765766170.307:1522): avc:  denied  { write } for  pid=5101 comm="syz.4.460" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   76.611617][   T29] audit: type=1400 audit(1765766170.727:1523): avc:  denied  { mount } for  pid=5110 comm="syz.6.464" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   76.678617][ T5111] loop6: detected capacity change from 0 to 512
[   76.711928][   T29] audit: type=1400 audit(1765766170.787:1524): avc:  denied  { create } for  pid=5110 comm="syz.6.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   76.731474][   T29] audit: type=1400 audit(1765766170.827:1525): avc:  denied  { connect } for  pid=5110 comm="syz.6.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   77.093916][ T5125] loop4: detected capacity change from 0 to 1024
[   77.120239][ T5127] loop6: detected capacity change from 0 to 1024
[   77.130141][ T5125] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   77.141347][ T5125] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[   77.153897][ T5127] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[   77.164353][ T5127] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   77.175704][ T5125] EXT4-fs (loop4): invalid journal inode
[   77.181646][ T5125] EXT4-fs (loop4): can't get journal size
[   77.188135][ T5127] EXT4-fs (loop6): revision level too high, forcing read-only mode
[   77.196784][ T5127] EXT4-fs (loop6): orphan cleanup on readonly fs
[   77.203524][ T5127] EXT4-fs error (device loop6): ext4_read_inode_bitmap:167: comm syz.6.471: Inode bitmap for bg 0 marked uninitialized
[   77.216729][ T5127] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   77.230201][ T5127] EXT4-fs (loop6): ext4_remount: Checksum for group 0 failed (32298!=35945)
[   77.321183][ T5139] FAULT_INJECTION: forcing a failure.
[   77.321183][ T5139] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   77.334508][ T5139] CPU: 0 UID: 0 PID: 5139 Comm: syz.7.475 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   77.334575][ T5139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   77.334591][ T5139] Call Trace:
[   77.334600][ T5139]  <TASK>
[   77.334610][ T5139]  __dump_stack+0x1d/0x30
[   77.334663][ T5139]  dump_stack_lvl+0xe8/0x140
[   77.334692][ T5139]  dump_stack+0x15/0x1b
[   77.334778][ T5139]  should_fail_ex+0x265/0x280
[   77.334805][ T5139]  should_fail_alloc_page+0xf2/0x100
[   77.334836][ T5139]  __alloc_frozen_pages_noprof+0x109/0x360
[   77.334875][ T5139]  alloc_pages_mpol+0xb3/0x260
[   77.334912][ T5139]  folio_alloc_mpol_noprof+0x39/0x80
[   77.334945][ T5139]  shmem_get_folio_gfp+0x3cf/0xd50
[   77.335050][ T5139]  shmem_write_begin+0xfc/0x1f0
[   77.335087][ T5139]  generic_perform_write+0x184/0x490
[   77.335129][ T5139]  shmem_file_write_iter+0xc5/0xf0
[   77.335166][ T5139]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   77.335269][ T5139]  vfs_write+0x52a/0x960
[   77.335296][ T5139]  ksys_write+0xda/0x1a0
[   77.335322][ T5139]  __x64_sys_write+0x40/0x50
[   77.335379][ T5139]  x64_sys_call+0x2847/0x3000
[   77.335410][ T5139]  do_syscall_64+0xd8/0x2c0
[   77.335454][ T5139]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.335476][ T5139] RIP: 0033:0x7f956203e1ff
[   77.335513][ T5139] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[   77.335559][ T5139] RSP: 002b:00007f9560a9ed40 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   77.335582][ T5139] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f956203e1ff
[   77.335598][ T5139] RDX: 0000000000100000 RSI: 00007f955867f000 RDI: 0000000000000007
[   77.335614][ T5139] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000005d0
[   77.335629][ T5139] R10: 0000200000000602 R11: 0000000000000293 R12: 0000000000000007
[   77.335663][ T5139] R13: 00007f9560a9edec R14: 00007f9560a9edf0 R15: 00007f955867f000
[   77.335684][ T5139]  </TASK>
[   77.337390][ T5125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   77.591285][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.601329][ T4099] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.697493][ T5157] loop4: detected capacity change from 0 to 512
[   77.939711][ T5157] EXT4-fs: Ignoring removed bh option
[   77.962903][ T5157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.976016][ T5157] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   77.984074][ T5158] lo speed is unknown, defaulting to 1000
[   78.062776][ T5157] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.483: iget: bad i_size value: 2533274857506816
[   78.211022][ T5180] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5180 comm=syz.7.487
[   78.223576][ T5180] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5180 comm=syz.7.487
[   78.364486][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.458913][ T5180] syz_tun: entered promiscuous mode
[   78.497014][ T5183] __nla_validate_parse: 11 callbacks suppressed
[   78.497034][ T5183] netlink: 4 bytes leftover after parsing attributes in process `syz.7.487'.
[   78.621723][ T5180] macvlan2: entered allmulticast mode
[   78.627166][ T5180] syz_tun: entered allmulticast mode
[   78.642544][ T5189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'.
[   78.717220][ T5180] syz_tun: left allmulticast mode
[   78.722493][ T5180] syz_tun: left promiscuous mode
[   78.773941][ T5193] netlink: 4 bytes leftover after parsing attributes in process `ÿ'.
[   78.791198][ T5193] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.798687][ T5193] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.822343][ T5193] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.829857][ T5193] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.024868][ T5201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.488'.
[   79.077334][ T5201] bridge0: entered promiscuous mode
[   79.100441][ T5201] bridge0: port 3(macsec1) entered blocking state
[   79.107041][ T5201] bridge0: port 3(macsec1) entered disabled state
[   79.125090][ T5201] macsec1: entered allmulticast mode
[   79.130482][ T5201] bridge0: entered allmulticast mode
[   79.146896][ T5201] macsec1: left allmulticast mode
[   79.152037][ T5201] bridge0: left allmulticast mode
[   79.157704][ T5201] bridge0: left promiscuous mode
[   79.341777][ T5220] netlink: 400 bytes leftover after parsing attributes in process `syz.4.500'.
[   79.365764][ T5223] loop6: detected capacity change from 0 to 1024
[   79.384454][ T5220] loop4: detected capacity change from 0 to 512
[   79.392092][ T5223] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   79.403154][ T5223] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[   79.416963][ T5220] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   79.445668][ T5223] EXT4-fs (loop6): invalid journal inode
[   79.455825][ T5223] EXT4-fs (loop6): can't get journal size
[   79.558228][ T5223] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   79.571642][ T5220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.591269][ T5223] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.600564][ T5220] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   79.684718][ T5223] loop6: detected capacity change from 0 to 512
[   79.712509][ T5223] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   79.740892][ T5223] EXT4-fs (loop6): mount failed
[   79.746254][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.505'.
[   79.807728][ T5244] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.507'.
[   80.016312][ T5264] mmap: syz.5.507 (5264) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   80.133551][ T5267] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.145059][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.181144][ T5270] netlink: 152 bytes leftover after parsing attributes in process `syz.6.517'.
[   80.199242][ T5270] netlink: 60 bytes leftover after parsing attributes in process `syz.6.517'.
[   80.208227][ T5270] netlink: 60 bytes leftover after parsing attributes in process `syz.6.517'.
[   80.219391][ T5267] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.303473][ T5267] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.363504][ T5267] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.414508][ T5280] lo speed is unknown, defaulting to 1000
[   80.418339][ T2234] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.447211][ T2234] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.475206][ T2234] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.498838][ T2234] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.500726][   T29] kauditd_printk_skb: 108 callbacks suppressed
[   80.500745][   T29] audit: type=1326 audit(1765766174.607:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1aa4cbf749 code=0x7ffc0000
[   80.536761][   T29] audit: type=1326 audit(1765766174.607:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa4cbf749 code=0x7ffc0000
[   80.539315][ T5279] loop6: detected capacity change from 0 to 8192
[   80.644155][   T29] audit: type=1326 audit(1765766174.677:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa4cbf749 code=0x7ffc0000
[   80.667612][   T29] audit: type=1326 audit(1765766174.677:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f1aa4cbf749 code=0x7ffc0000
[   80.690988][   T29] audit: type=1326 audit(1765766174.677:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa4cbf749 code=0x7ffc0000
[   80.714399][   T29] audit: type=1326 audit(1765766174.677:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa4cbf749 code=0x7ffc0000
[   80.737864][   T29] audit: type=1326 audit(1765766174.677:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f1aa4cbf749 code=0x7ffc0000
[   80.761284][   T29] audit: type=1326 audit(1765766174.677:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa4cbf749 code=0x7ffc0000
[   80.784840][   T29] audit: type=1326 audit(1765766174.677:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1aa4cc15dc code=0x7ffc0000
[   80.808148][   T29] audit: type=1326 audit(1765766174.677:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa4cbf749 code=0x7ffc0000
[   81.010789][ T5293] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.044213][ T5292] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.080175][ T5293] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.099097][ T5292] netlink: 'syz.7.523': attribute type 10 has an invalid length.
[   81.136095][ T5292] ipvlan2: entered promiscuous mode
[   81.149992][ T5299] loop4: detected capacity change from 0 to 2048
[   81.152916][ T5292] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   81.201889][ T5293] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.222023][ T5299]  loop4: p1 < > p4
[   81.232223][ T5299] loop4: p4 size 8388608 extends beyond EOD, truncated
[   81.282843][ T5293] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.266035][ T5315] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.356943][ T5315] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.472815][ T5315] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.564143][ T5315] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.657940][ T4144] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.678435][ T4144] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.703169][ T4144] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.718946][ T4144] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.886194][ T5354] tipc: Started in network mode
[   82.891223][ T5354] tipc: Node identity 7, cluster identity 4711
[   82.897447][ T5354] tipc: Node number set to 7
[   82.936585][ T5355] lo speed is unknown, defaulting to 1000
[   83.014645][ T5364] openvswitch: netlink: Missing key (keys=40, expected=100)
[   83.079696][ T5370] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5370 comm=syz.6.550
[   83.092193][ T5370] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5370 comm=syz.6.550
[   83.126812][ T5370] syz_tun: entered promiscuous mode
[   83.132345][ T5370] macvlan2: entered allmulticast mode
[   83.137859][ T5370] syz_tun: entered allmulticast mode
[   83.148895][ T5370] syz_tun: left allmulticast mode
[   83.154065][ T5370] syz_tun: left promiscuous mode
[   83.174290][ T5375] loop7: detected capacity change from 0 to 164
[   83.308527][ T5385] loop6: detected capacity change from 0 to 1024
[   83.315377][ T5385] EXT4-fs: inline encryption not supported
[   83.321326][ T5385] EXT4-fs: Ignoring removed orlov option
[   83.339235][ T5385] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   83.362027][ T5385] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002]
[   83.370225][ T5385] System zones: 0-1, 3-12
[   83.376243][ T5385] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.411383][ T4099] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.507572][ T5401] __nla_validate_parse: 10 callbacks suppressed
[   83.507586][ T5401] netlink: 4 bytes leftover after parsing attributes in process `syz.6.561'.
[   83.523294][ T5401] netlink: 28 bytes leftover after parsing attributes in process `syz.6.561'.
[   83.682578][ T5405] FAULT_INJECTION: forcing a failure.
[   83.682578][ T5405] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   83.695909][ T5405] CPU: 1 UID: 0 PID: 5405 Comm: syz.6.562 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   83.695936][ T5405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   83.695948][ T5405] Call Trace:
[   83.696015][ T5405]  <TASK>
[   83.696023][ T5405]  __dump_stack+0x1d/0x30
[   83.696047][ T5405]  dump_stack_lvl+0xe8/0x140
[   83.696068][ T5405]  dump_stack+0x15/0x1b
[   83.696091][ T5405]  should_fail_ex+0x265/0x280
[   83.696118][ T5405]  should_fail_alloc_page+0xf2/0x100
[   83.696206][ T5405]  __alloc_frozen_pages_noprof+0x109/0x360
[   83.696244][ T5405]  alloc_pages_mpol+0xb3/0x260
[   83.696282][ T5405]  folio_alloc_noprof+0x97/0x150
[   83.696321][ T5405]  filemap_alloc_folio_noprof+0x93/0x230
[   83.696401][ T5405]  __filemap_get_folio_mpol+0x295/0x650
[   83.696425][ T5405]  ? __kmalloc_noprof+0x393/0x5a0
[   83.696489][ T5405]  aio_setup_ring+0x26f/0x760
[   83.696524][ T5405]  ioctx_alloc+0x2aa/0x4c0
[   83.696556][ T5405]  ? fput+0x8f/0xc0
[   83.696589][ T5405]  __se_sys_io_setup+0x6b/0x1b0
[   83.696638][ T5405]  __x64_sys_io_setup+0x31/0x40
[   83.696747][ T5405]  x64_sys_call+0x2a8e/0x3000
[   83.696793][ T5405]  do_syscall_64+0xd8/0x2c0
[   83.696956][ T5405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.697005][ T5405] RIP: 0033:0x7fbe7197f749
[   83.697023][ T5405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.697042][ T5405] RSP: 002b:00007fbe703be038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[   83.697066][ T5405] RAX: ffffffffffffffda RBX: 00007fbe71bd6090 RCX: 00007fbe7197f749
[   83.697082][ T5405] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000010000
[   83.697097][ T5405] RBP: 00007fbe703be090 R08: 0000000000000000 R09: 0000000000000000
[   83.697149][ T5405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   83.697161][ T5405] R13: 00007fbe71bd6128 R14: 00007fbe71bd6090 R15: 00007fff6ccbd608
[   83.697183][ T5405]  </TASK>
[   83.919626][ T5408] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5408 comm=syz.4.563
[   83.932116][ T5408] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5408 comm=syz.4.563
[   83.950565][ T5408] syz_tun: entered promiscuous mode
[   83.956171][ T5408] macvlan2: entered allmulticast mode
[   83.961626][ T5408] syz_tun: entered allmulticast mode
[   83.969400][ T5408] syz_tun: left allmulticast mode
[   83.974537][ T5408] syz_tun: left promiscuous mode
[   83.999212][ T5409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.563'.
[   84.177788][ T5418] netlink: 108 bytes leftover after parsing attributes in process `syz.7.567'.
[   84.544937][ T5433] netlink: 400 bytes leftover after parsing attributes in process `syz.6.570'.
[   84.557750][ T5433] loop6: detected capacity change from 0 to 512
[   84.565957][ T5431] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   84.573634][ T5431] vhci_hcd vhci_hcd.2: invalid port number 96
[   84.579864][ T5431] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   84.588894][ T5433] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   84.603276][ T5433] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.621408][ T5433] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   84.749330][ T5445] syzkaller0: entered promiscuous mode
[   84.755282][ T5445] syzkaller0: entered allmulticast mode
[   85.008245][ T4099] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.141053][ T5454] loop6: detected capacity change from 0 to 1024
[   85.150636][ T5454] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   85.161639][ T5454] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   85.181857][ T5454] JBD2: no valid journal superblock found
[   85.187616][ T5454] EXT4-fs (loop6): Could not load journal inode
[   85.239203][ T5470] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.255589][ T5465] tipc: New replicast peer: 255.255.255.255
[   85.262247][ T5465] tipc: Enabled bearer <udp:syz2>, priority 10
[   85.275036][ T5454] lo speed is unknown, defaulting to 1000
[   85.302304][ T5470] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.352839][ T5470] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.387966][ T5481] netlink: 108 bytes leftover after parsing attributes in process `syz.4.590'.
[   85.431649][ T5470] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.543826][ T4144] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.552503][ T4144] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.566459][ T4144] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.580777][ T4144] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.764387][ T5501] netlink: 152 bytes leftover after parsing attributes in process `syz.6.597'.
[   85.810071][ T5503] netlink: 152 bytes leftover after parsing attributes in process `syz.0.598'.
[   85.819863][ T5503] netlink: 60 bytes leftover after parsing attributes in process `syz.0.598'.
[   85.828859][ T5503] netlink: 60 bytes leftover after parsing attributes in process `syz.0.598'.
[   86.170556][   T29] kauditd_printk_skb: 102 callbacks suppressed
[   86.170575][   T29] audit: type=1326 audit(1765766180.277:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa4cbf749 code=0x7ffc0000
[   86.220765][   T29] audit: type=1326 audit(1765766180.277:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa4cbf749 code=0x7ffc0000
[   86.244296][   T29] audit: type=1326 audit(1765766180.317:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1aa4cbf749 code=0x7ffc0000
[   86.268110][   T29] audit: type=1326 audit(1765766180.317:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa4cbf749 code=0x7ffc0000
[   86.291530][   T29] audit: type=1326 audit(1765766180.317:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa4cbf749 code=0x7ffc0000
[   86.315043][   T29] audit: type=1326 audit(1765766180.317:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aa4cbf749 code=0x7ffc0000
[   86.338563][   T29] audit: type=1326 audit(1765766180.317:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa4cbf749 code=0x7ffc0000
[   86.361942][   T29] audit: type=1326 audit(1765766180.317:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa4cbf749 code=0x7ffc0000
[   86.385322][   T29] audit: type=1326 audit(1765766180.317:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aa4cbf749 code=0x7ffc0000
[   86.408676][   T29] audit: type=1326 audit(1765766180.317:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa4cbf749 code=0x7ffc0000
[   86.472646][ T5519] loop0: detected capacity change from 0 to 128
[   86.494764][ T5519] FAT-fs (loop0): Directory bread(block 32) failed
[   86.504307][ T5519] FAT-fs (loop0): Directory bread(block 33) failed
[   86.533912][ T5519] FAT-fs (loop0): Directory bread(block 34) failed
[   86.588116][ T5519] FAT-fs (loop0): Directory bread(block 35) failed
[   86.614898][ T5524] loop6: detected capacity change from 0 to 512
[   86.635046][ T5527] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.650771][ T5519] FAT-fs (loop0): Directory bread(block 36) failed
[   86.657439][ T5519] FAT-fs (loop0): Directory bread(block 37) failed
[   86.730495][ T5519] FAT-fs (loop0): Directory bread(block 38) failed
[   86.732120][ T5527] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.737238][ T5519] FAT-fs (loop0): Directory bread(block 39) failed
[   86.753655][ T5519] FAT-fs (loop0): Directory bread(block 40) failed
[   86.756900][ T5524] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.605: corrupted inode contents
[   86.760209][ T5519] FAT-fs (loop0): Directory bread(block 41) failed
[   86.793656][ T5524] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[   86.852336][ T5524] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.605: corrupted inode contents
[   86.866827][ T5524] EXT4-fs error (device loop6): ext4_evict_inode:301: inode #15: comm syz.6.605: mark_inode_dirty error
[   86.884825][ T5527] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.898678][ T5524] EXT4-fs (loop6): 1 orphan inode deleted
[   86.932831][ T5524] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.965591][ T5527] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.077877][ T4144] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.086169][ T4144] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.097723][ T4144] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.117825][ T4144] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.149090][ T5543] FAULT_INJECTION: forcing a failure.
[   87.149090][ T5543] name failslab, interval 1, probability 0, space 0, times 0
[   87.161803][ T5543] CPU: 0 UID: 0 PID: 5543 Comm: syz.0.611 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   87.161906][ T5543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   87.161922][ T5543] Call Trace:
[   87.161930][ T5543]  <TASK>
[   87.161938][ T5543]  __dump_stack+0x1d/0x30
[   87.161970][ T5543]  dump_stack_lvl+0xe8/0x140
[   87.161999][ T5543]  dump_stack+0x15/0x1b
[   87.162023][ T5543]  should_fail_ex+0x265/0x280
[   87.162105][ T5543]  should_failslab+0x8c/0xb0
[   87.162129][ T5543]  kmem_cache_alloc_lru_noprof+0x6d/0x4c0
[   87.162151][ T5543]  ? alloc_inode+0x9a/0x170
[   87.162173][ T5543]  alloc_inode+0x9a/0x170
[   87.162196][ T5543]  alloc_anon_inode+0x1e/0x170
[   87.162229][ T5543]  anon_inode_make_secure_inode+0x33/0xf0
[   87.162277][ T5543]  __anon_inode_getfile+0xa5/0x180
[   87.162317][ T5543]  anon_inode_create_getfile+0x38/0x50
[   87.162446][ T5543]  io_uring_create+0x3b1/0x4e0
[   87.162492][ T5543]  __se_sys_io_uring_setup+0x1be/0x1d0
[   87.162520][ T5543]  __x64_sys_io_uring_setup+0x31/0x40
[   87.162551][ T5543]  x64_sys_call+0x244c/0x3000
[   87.162580][ T5543]  do_syscall_64+0xd8/0x2c0
[   87.162625][ T5543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.162645][ T5543] RIP: 0033:0x7f1aa4cbf749
[   87.162659][ T5543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   87.162689][ T5543] RSP: 002b:00007f1aa3726fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[   87.162712][ T5543] RAX: ffffffffffffffda RBX: 00007f1aa4f15fa0 RCX: 00007f1aa4cbf749
[   87.162728][ T5543] RDX: 0000200000000000 RSI: 0000200000000240 RDI: 0000000000000354
[   87.162743][ T5543] RBP: 0000200000000240 R08: 0000000000000000 R09: 0000200000000000
[   87.162758][ T5543] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
[   87.162773][ T5543] R13: 00002000000002c0 R14: 0000000000000354 R15: 0000200000000000
[   87.162797][ T5543]  </TASK>
[   87.409833][   T37] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.449128][   T37] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.487685][   T37] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.512612][   T37] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.553740][ T4099] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.570372][ T5548] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   87.676199][ T5553] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.835171][ T5558] loop5: detected capacity change from 0 to 1024
[   87.856486][ T5558] EXT4-fs: Ignoring removed bh option
[   87.856478][ T5553] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.898977][ T5558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.955137][ T3769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.958574][ T5553] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.028364][ T5578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.046436][ T5578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.072145][ T5578] loop5: detected capacity change from 0 to 1024
[   88.079375][ T5578] EXT4-fs: Ignoring removed bh option
[   88.080411][ T5553] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.085712][ T5574] loop4: detected capacity change from 0 to 512
[   88.104086][ T5578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.122237][ T5574] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   88.152553][ T5583] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[   88.152553][ T5583]    program syz.0.623 not setting count and/or reply_len properly
[   88.171784][ T5574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.188852][ T5574] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   88.220047][   T37] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.237912][   T37] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.255228][   T37] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.280509][   T37] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.314846][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.456037][ T5598] loop6: detected capacity change from 0 to 512
[   88.462802][ T5598] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   88.676235][ T3769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.887240][ T5617] netlink: 'syz.4.638': attribute type 4 has an invalid length.
[   88.921320][ T5617] netlink: 'syz.4.638': attribute type 4 has an invalid length.
[   88.982074][ T5617] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[   88.988624][ T5617] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   88.996242][ T5617] vhci_hcd vhci_hcd.0: Device attached
[   89.092269][ T5619] vhci_hcd: connection closed
[   89.093326][ T3569] vhci_hcd vhci_hcd.4: stop threads
[   89.103312][ T3569] vhci_hcd vhci_hcd.4: release socket
[   89.108704][ T3569] vhci_hcd vhci_hcd.4: disconnect device
[   89.286355][ T5605] Set syz1 is full, maxelem 65536 reached
[   89.485955][ T5636] cgroup2: Unknown parameter 'bav‡[”šxÜX@ê'
[   89.653731][ T5647] __nla_validate_parse: 12 callbacks suppressed
[   89.653752][ T5647] netlink: 108 bytes leftover after parsing attributes in process `syz.5.646'.
[   89.877446][ T5662] xt_policy: too many policy elements
[   89.891207][ T5662] rdma_op ffff8881336ed180 conn xmit_rdma 0000000000000000
[   90.083213][ T5666] loop0: detected capacity change from 0 to 1024
[   90.090524][ T5666] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   90.101504][ T5666] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   90.112142][ T5666] JBD2: no valid journal superblock found
[   90.117890][ T5666] EXT4-fs (loop0): Could not load journal inode
[   90.140933][ T5666] lo speed is unknown, defaulting to 1000
[   90.148240][ T5661] loop7: detected capacity change from 0 to 512
[   90.157802][ T5661] ------------[ cut here ]------------
[   90.163394][ T5661] EA inode 11 i_nlink=2
[   90.163421][ T5661] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.7.652/5661
[   90.178333][ T5661] Modules linked in:
[   90.182785][ T5661] CPU: 0 UID: 0 PID: 5661 Comm: syz.7.652 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   90.192593][ T5661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   90.202936][ T5661] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320
[   90.209654][ T5661] Code: d1 cf 9c ff 4c 8d 2d 1a bd 20 05 49 8d 7e 40 e8 51 62 b8 ff 49 8b 6e 40 4c 89 e7 e8 65 5d b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 ac fc ba 03 66 66 66 2e 0f 1f 84
[   90.229321][ T5661] RSP: 0018:ffffc900012cb5a0 EFLAGS: 00010246
[   90.235459][ T5661] RAX: ffff8881036fbc10 RBX: ffff8881004981a8 RCX: ffffffff81bb4eeb
[   90.243519][ T5661] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0bf0
[   90.251573][ T5661] RBP: 000000000000000b R08: 000188810049815b R09: 0000000000000000
[   90.259704][ T5661] R10: ffffc900012cb4d0 R11: 0001c900012cb4d0 R12: ffff888100498158
[   90.267767][ T5661] R13: ffffffff86dc0bf0 R14: ffff888100498110 R15: 0000000000000001
[   90.275885][ T5661] FS:  00007f9560a9f6c0(0000) GS:ffff8882aedc2000(0000) knlGS:0000000000000000
[   90.284875][ T5661] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   90.291557][ T5661] CR2: 0000000000000000 CR3: 00000001413c0000 CR4: 00000000003506f0
[   90.299684][ T5661] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   90.307780][ T5661] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[   90.315803][ T5661] Call Trace:
[   90.319106][ T5661]  <TASK>
[   90.322101][ T5661]  ext4_xattr_set_entry+0x77f/0x1020
[   90.327446][ T5661]  ext4_xattr_ibody_set+0x184/0x3c0
[   90.332808][ T5661]  ext4_expand_extra_isize_ea+0xcbb/0x11f0
[   90.338672][ T5661]  __ext4_expand_extra_isize+0x246/0x280
[   90.344732][ T5661]  __ext4_mark_inode_dirty+0x29d/0x3f0
[   90.350572][ T5661]  ext4_evict_inode+0x7c4/0xd40
[   90.356214][ T5661]  ? __pfx_ext4_evict_inode+0x10/0x10
[   90.361711][ T5661]  evict+0x2af/0x510
[   90.365669][ T5661]  ? __dquot_initialize+0x146/0x7c0
[   90.371127][ T5661]  iput+0x4bd/0x650
[   90.375078][ T5661]  ext4_process_orphan+0x1a9/0x1c0
[   90.380233][ T5661]  ext4_orphan_cleanup+0x6a8/0xa00
[   90.385445][ T5661]  ext4_fill_super+0x3411/0x37a0
[   90.390481][ T5661]  ? set_blocksize+0x1a8/0x310
[   90.395281][ T5661]  ? sb_set_blocksize+0xfc/0x170
[   90.400260][ T5661]  ? setup_bdev_super+0x30e/0x370
[   90.405363][ T5661]  ? __pfx_ext4_fill_super+0x10/0x10
[   90.410691][ T5661]  get_tree_bdev_flags+0x291/0x300
[   90.415811][ T5661]  ? __pfx_ext4_fill_super+0x10/0x10
[   90.421245][ T5661]  get_tree_bdev+0x1f/0x30
[   90.425785][ T5661]  ext4_get_tree+0x1c/0x30
[   90.430303][ T5661]  vfs_get_tree+0x57/0x1d0
[   90.434750][ T5661]  do_new_mount+0x24d/0x6a0
[   90.439264][ T5661]  path_mount+0x4ab/0xb80
[   90.443700][ T5661]  ? user_path_at+0xbf/0x130
[   90.448422][ T5661]  __se_sys_mount+0x28c/0x2e0
[   90.453138][ T5661]  __x64_sys_mount+0x67/0x80
[   90.457813][ T5661]  x64_sys_call+0x2cca/0x3000
[   90.462621][ T5661]  do_syscall_64+0xd8/0x2c0
[   90.467142][ T5661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.473241][ T5661] RIP: 0033:0x7f9562040eea
[   90.477695][ T5661] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.497408][ T5661] RSP: 002b:00007f9560a9ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   90.505890][ T5661] RAX: ffffffffffffffda RBX: 00007f9560a9eef0 RCX: 00007f9562040eea
[   90.513886][ T5661] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f9560a9eeb0
[   90.521873][ T5661] RBP: 0000200000000180 R08: 00007f9560a9eef0 R09: 0000000000800700
[   90.529858][ T5661] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[   90.537926][ T5661] R13: 00007f9560a9eeb0 R14: 000000000000046f R15: 000000000000002c
[   90.546034][ T5661]  </TASK>
[   90.549066][ T5661] ---[ end trace 0000000000000000 ]---
[   90.571790][ T5661] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.652: iget: bad extra_isize 90 (inode size 256)
[   90.631354][ T5661] EXT4-fs (loop7): Remounting filesystem read-only
[   90.646478][ T5661] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30)
[   90.658776][ T5661] EXT4-fs (loop7): 1 orphan inode deleted
[   90.666749][ T5661] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.683973][ T5661] netlink: 96 bytes leftover after parsing attributes in process `syz.7.652'.
[   90.751328][ T4263] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.766605][ T3657] Bluetooth: hci0: Frame reassembly failed (-84)
[   90.826743][ T5697] loop4: detected capacity change from 0 to 512
[   90.854149][ T5697] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   90.893941][ T5697] EXT4-fs (loop4): 1 truncate cleaned up
[   90.902810][ T5697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.947863][ T5708] netlink: 28 bytes leftover after parsing attributes in process `syz.6.667'.
[   90.958594][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.047038][ T5714] netlink: 108 bytes leftover after parsing attributes in process `syz.4.668'.
[   91.697288][   T29] kauditd_printk_skb: 243 callbacks suppressed
[   91.697306][   T29] audit: type=1400 audit(1765766185.807:1998): avc:  denied  { validate_trans } for  pid=5726 comm="syz.0.676" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   92.002843][ T5736] lo speed is unknown, defaulting to 1000
[   92.511570][   T29] audit: type=1400 audit(1765766186.627:1999): avc:  denied  { egress } for  pid=22 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[   92.535238][   T29] audit: type=1400 audit(1765766186.627:2000): avc:  denied  { sendto } for  pid=22 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[   92.712318][ T5746] loop4: detected capacity change from 0 to 1024
[   92.739413][ T5746] EXT4-fs: Ignoring removed orlov option
[   92.762988][ T5746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.807276][   T29] audit: type=1400 audit(1765766186.917:2001): avc:  denied  { read } for  pid=5745 comm="syz.4.678" path="/121/bus/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   92.831338][ T3610] Bluetooth: hci0: command 0x1003 tx timeout
[   92.841291][ T5746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.678'.
[   92.874138][ T5746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.900442][ T5746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.918844][   T29] audit: type=1400 audit(1765766186.947:2002): avc:  denied  { ioctl } for  pid=5745 comm="syz.4.678" path="/121/bus/bus" dev="loop4" ino=18 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   92.925187][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   92.942793][   T29] audit: type=1400 audit(1765766186.977:2003): avc:  denied  { mounton } for  pid=5745 comm="syz.4.678" path="/121/bus/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   93.014680][ T5746] netlink: 36 bytes leftover after parsing attributes in process `syz.4.678'.
[   93.081234][   T29] audit: type=1326 audit(1765766187.197:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.7.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956203f749 code=0x7ffc0000
[   93.120693][   T29] audit: type=1326 audit(1765766187.197:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.7.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956203f749 code=0x7ffc0000
[   93.144488][   T29] audit: type=1326 audit(1765766187.197:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.7.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f956203f749 code=0x7ffc0000
[   93.168162][   T29] audit: type=1326 audit(1765766187.197:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.7.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956203f749 code=0x7ffc0000
[   93.252463][ T5774] loop0: detected capacity change from 0 to 1024
[   93.259253][ T5774] EXT4-fs: Ignoring removed nomblk_io_submit option
[   93.306523][ T5774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.388346][ T5783] loop5: detected capacity change from 0 to 164
[   93.395789][ T5783] ISOFS: unable to read i-node block
[   93.401309][ T5783] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[   93.451824][ T5784] loop6: detected capacity change from 0 to 512
[   93.588653][ T5784] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   93.685766][ T5784] EXT4-fs (loop6): 1 truncate cleaned up
[   93.723150][ T5784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.890359][ T4099] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.184266][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.268811][ T5795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.693'.
[   94.277891][ T5795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.693'.
[   94.416238][ T5800] loop6: detected capacity change from 0 to 1024
[   94.441834][ T5795] gretap0: entered promiscuous mode
[   94.447415][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.521354][ T5800] EXT4-fs: Ignoring removed bh option
[   94.534901][ T5803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.693'.
[   94.543909][ T5803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.693'.
[   94.603473][ T5800] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.752943][ T5795] gretap0: left promiscuous mode
[   94.767528][ T5800] netlink: 12 bytes leftover after parsing attributes in process `syz.6.695'.
[   94.825717][ T5803] gretap0: entered promiscuous mode
[   94.850735][ T5803] gretap0: left promiscuous mode
[   94.967786][ T5815] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.695: Allocating blocks 385-513 which overlap fs metadata
[   95.017903][ T5820] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5820 comm=syz.4.701
[   95.030433][ T5820] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5820 comm=syz.4.701
[   95.056606][ T5822] netlink: 48 bytes leftover after parsing attributes in process `syz.5.702'.
[   95.072537][ T5822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.702'.
[   95.089419][ T5800] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #12: comm syz.6.695: corrupted in-inode xattr: e_name out of bounds
[   95.125815][ T5800] EXT4-fs (loop6): pa ffff888107a4b620: logic 16, phys. 129, len 24
[   95.134010][ T5800] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8
[   95.152337][ T5822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.702'.
[   95.245877][ T5820] syz_tun: entered promiscuous mode
[   95.251681][ T5825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.701'.
[   95.268207][ T5820] macvlan2: entered allmulticast mode
[   95.273788][ T5820] syz_tun: entered allmulticast mode
[   95.295328][ T4099] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.322558][ T5820] syz_tun: left allmulticast mode
[   95.327663][ T5820] syz_tun: left promiscuous mode
[   95.486179][ T5838] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.532060][ T5840] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.603366][ T5838] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.619573][ T5848] loop4: detected capacity change from 0 to 512
[   95.655111][ T5840] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.672306][ T5848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   95.693054][ T5838] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.718751][ T5853] loop6: detected capacity change from 0 to 1024
[   95.733188][ T5840] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.755563][ T5848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   95.772616][ T5838] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.832024][ T5848] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.844930][ T5840] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.935721][ T5848] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.713: Failed to acquire dquot type 0
[   95.938927][ T5738] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.988697][ T5738] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.032851][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   96.054149][ T5738] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.072414][ T5873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=5873 comm=syz.6.723
[   96.084508][ T5738] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.125102][ T5873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.140785][ T5738] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.160075][ T5738] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.178667][ T5878] loop4: detected capacity change from 0 to 8192
[   96.179174][ T5738] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.179234][ T5738] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.231260][ T5878] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   96.242266][ T1918] Bluetooth: hci0: Frame reassembly failed (-84)
[   96.245381][ T5886] tipc: Enabling of bearer <udp:£> rejected, already enabled
[   96.256824][ T5891] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5891 comm=syz.7.730
[   96.269531][ T5891] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5891 comm=syz.7.730
[   96.282460][ T5878] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1046)
[   96.291162][ T5878] FAT-fs (loop4): Filesystem has been set read-only
[   96.297978][ T5878] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1046)
[   96.306901][ T5878] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1046)
[   96.315657][ T5878] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1046)
[   96.324379][ T5878] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1046)
[   96.336956][ T5895] syz_tun: entered promiscuous mode
[   96.339753][ T5878] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1046)
[   96.351553][ T5878] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1046)
[   96.351977][ T5895] macvlan2: entered allmulticast mode
[   96.360389][ T5878] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1046)
[   96.365654][ T5895] syz_tun: entered allmulticast mode
[   96.374650][ T5878] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1046)
[   96.388221][ T5895] syz_tun: left allmulticast mode
[   96.388294][ T5895] syz_tun: left promiscuous mode
[   96.395861][ T5891] netlink: 4 bytes leftover after parsing attributes in process `syz.7.730'.
[   96.408734][ T5900] netlink: 152 bytes leftover after parsing attributes in process `syz.5.733'.
[   96.418118][ T5878] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1046)
[   96.427389][ T5900] netlink: 60 bytes leftover after parsing attributes in process `syz.5.733'.
[   96.429725][ T5878] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1046)
[   96.436633][ T5900] netlink: 60 bytes leftover after parsing attributes in process `syz.5.733'.
[   96.455825][ T5878] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1046)
[   96.467399][ T5878] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1046)
[   96.476273][ T5878] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1046)
[   96.486009][ T5878] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1046)
[   96.487262][ T5897] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.496997][ T5878] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1046)
[   96.513598][ T5878] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1046)
[   96.528741][ T5878] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1046)
[   96.537873][ T5878] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1046)
[   96.546761][ T5878] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1046)
[   96.562135][ T5905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.735'.
[   96.572229][ T5897] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.646015][ T5897] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.710270][   T29] kauditd_printk_skb: 256 callbacks suppressed
[   96.710288][   T29] audit: type=1400 audit(1765766190.817:2262): avc:  denied  { write } for  pid=5917 comm="syz.5.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   96.741757][ T5915] lo speed is unknown, defaulting to 1000
[   96.749434][ T5897] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.754592][   T29] audit: type=1400 audit(1765766190.867:2263): avc:  denied  { name_bind } for  pid=5914 comm="syz.4.739" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   96.782686][ T5921] program syz.4.739 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   96.792115][   T29] audit: type=1400 audit(1765766190.897:2264): avc:  denied  { append } for  pid=5914 comm="syz.4.739" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   96.889958][ T2234] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.904524][ T2234] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.931582][ T2234] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.947680][ T2234] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.021079][ T5931] tipc: Enabling of bearer <udp:£> rejected, already enabled
[   97.068648][ T5919] loop5: detected capacity change from 0 to 2048
[   97.090002][   T29] audit: type=1400 audit(1765766191.197:2265): avc:  denied  { connect } for  pid=5938 comm="syz.7.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   97.198479][ T5919] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.232390][ T5919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.243747][ T5952] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.335925][ T5952] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.361472][ T5962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.379457][ T5964] tipc: Enabling of bearer <udp:£> rejected, already enabled
[   97.380283][ T5962] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.430641][ T5952] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.484974][ T5973] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125
[   97.523710][ T5952] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.872139][ T5986] FAULT_INJECTION: forcing a failure.
[   97.872139][ T5986] name failslab, interval 1, probability 0, space 0, times 0
[   97.885013][ T5986] CPU: 1 UID: 0 PID: 5986 Comm: syz.5.766 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   97.885098][ T5986] Tainted: [W]=WARN
[   97.885107][ T5986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   97.885120][ T5986] Call Trace:
[   97.885127][ T5986]  <TASK>
[   97.885134][ T5986]  __dump_stack+0x1d/0x30
[   97.885235][ T5986]  dump_stack_lvl+0xe8/0x140
[   97.885283][ T5986]  dump_stack+0x15/0x1b
[   97.885307][ T5986]  should_fail_ex+0x265/0x280
[   97.885375][ T5986]  should_failslab+0x8c/0xb0
[   97.885434][ T5986]  kmem_cache_alloc_lru_noprof+0x6d/0x4c0
[   97.885534][ T5986]  ? __d_alloc+0x37/0x340
[   97.885561][ T5986]  ? sized_strscpy+0x121/0x1a0
[   97.885647][ T5986]  __d_alloc+0x37/0x340
[   97.885677][ T5986]  d_alloc_parallel+0x54/0xcd0
[   97.885705][ T5986]  ? __d_lookup+0x316/0x340
[   97.885738][ T5986]  ? d_lookup+0xb2/0xd0
[   97.885773][ T5986]  proc_fill_cache+0x158/0x240
[   97.885798][ T5986]  ? __pfx_proc_map_files_instantiate+0x10/0x10
[   97.885854][ T5986]  proc_map_files_readdir+0x4fd/0x690
[   97.885898][ T5986]  ? do_mknodat+0x310/0x500
[   97.885925][ T5986]  iterate_dir+0x114/0x330
[   97.885980][ T5986]  __se_sys_getdents64+0x88/0x1b0
[   97.886006][ T5986]  ? __pfx_filldir64+0x10/0x10
[   97.886049][ T5986]  __x64_sys_getdents64+0x43/0x50
[   97.886089][ T5986]  x64_sys_call+0x2f27/0x3000
[   97.886124][ T5986]  do_syscall_64+0xd8/0x2c0
[   97.886166][ T5986]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.886190][ T5986] RIP: 0033:0x7fb60112f749
[   97.886205][ T5986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.886224][ T5986] RSP: 002b:00007fb5ffb8f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[   97.886243][ T5986] RAX: ffffffffffffffda RBX: 00007fb601385fa0 RCX: 00007fb60112f749
[   97.886329][ T5986] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 0000000000000004
[   97.886341][ T5986] RBP: 00007fb5ffb8f090 R08: 0000000000000000 R09: 0000000000000000
[   97.886352][ T5986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   97.886365][ T5986] R13: 00007fb601386038 R14: 00007fb601385fa0 R15: 00007ffc8698c408
[   97.886431][ T5986]  </TASK>
[   98.184531][ T5995] loop5: detected capacity change from 0 to 1024
[   98.202258][ T5995] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.216087][   T29] audit: type=1400 audit(1765766192.327:2266): avc:  denied  { setattr } for  pid=5994 comm="syz.5.770" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   98.248579][ T3769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.260640][ T3610] Bluetooth: hci0: command 0x1003 tx timeout
[   98.261110][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   98.302019][ T6002] tipc: Enabling of bearer <udp:£> rejected, already enabled
[   98.360986][ T6010] program syz.5.773 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   98.387202][   T29] audit: type=1400 audit(1765766192.497:2267): avc:  denied  { getopt } for  pid=6008 comm="syz.0.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   98.486825][ T6022] loop7: detected capacity change from 0 to 512
[   98.493887][ T6022] EXT4-fs: inline encryption not supported
[   98.501796][ T6022] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   98.514206][ T6022] EXT4-fs (loop7): 1 truncate cleaned up
[   98.520530][ T6022] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.534301][ T6022] SELinux: failed to load policy
[   98.534280][   T29] audit: type=1400 audit(1765766192.647:2268): avc:  denied  { load_policy } for  pid=6018 comm="syz.7.780" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   98.560021][   T29] audit: type=1400 audit(1765766192.677:2269): avc:  denied  { bind } for  pid=6018 comm="syz.7.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   98.580541][   T29] audit: type=1400 audit(1765766192.677:2270): avc:  denied  { setopt } for  pid=6018 comm="syz.7.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   98.613935][ T4263] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.685241][   T52] Bluetooth: hci0: Frame reassembly failed (-84)
[   98.713280][   T29] audit: type=1400 audit(1765766192.827:2271): avc:  denied  { append } for  pid=6036 comm="syz.5.786" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   99.052591][ T6051] netlink: 'syz.0.790': attribute type 2 has an invalid length.
[   99.373035][ T6068] unsupported nlmsg_type 40
[   99.580051][ T6081] vlan2: entered allmulticast mode
[   99.585555][ T6081] bridge_slave_0: entered allmulticast mode
[   99.709268][ T6090] loop5: detected capacity change from 0 to 512
[   99.716193][ T6090] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[   99.725346][ T6090] EXT4-fs (loop5): invalid journal inode
[   99.731164][ T6090] EXT4-fs (loop5): can't get journal size
[   99.739666][ T6090] EXT4-fs (loop5): 1 truncate cleaned up
[   99.745832][ T6090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.772798][ T3769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.855271][ T6100] loop5: detected capacity change from 0 to 1024
[   99.862425][ T6100] EXT4-fs: Ignoring removed oldalloc option
[   99.872189][ T6100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.884837][ T6100] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.900324][ T6101] __nla_validate_parse: 17 callbacks suppressed
[   99.900341][ T6101] netlink: 72 bytes leftover after parsing attributes in process `syz.5.809'.
[   99.926730][ T3769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   99.946148][ T6106] xt_connbytes: Forcing CT accounting to be enabled
[   99.953040][ T6106] Cannot find set identified by id 0 to match
[  100.070406][ T6109] loop5: detected capacity change from 0 to 128
[  100.078847][ T6109] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  100.091241][ T6109] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  100.104660][ T6109] netlink: 16 bytes leftover after parsing attributes in process `syz.5.811'.
[  100.193176][ T3769] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  100.412197][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.5.815'.
[  100.540168][ T6128] loop4: detected capacity change from 0 to 1024
[  100.553301][ T6128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.567377][ T6128] netlink: 14 bytes leftover after parsing attributes in process `+}[@'.
[  100.626535][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.821'.
[  100.636209][ T6136] netlink: 'syz.0.821': attribute type 1 has an invalid length.
[  100.649457][ T6141] netlink: 60 bytes leftover after parsing attributes in process `syz.5.822'.
[  100.652942][ T6136] 8021q: adding VLAN 0 to HW filter on device bond1
[  100.658374][ T6141] netlink: 24 bytes leftover after parsing attributes in process `syz.5.822'.
[  100.674250][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.821'.
[  100.674250][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.821'.
[  100.700786][ T6138] bond1 (unregistering): Released all slaves
[  100.725239][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.738665][ T6143] netlink: 108 bytes leftover after parsing attributes in process `syz.5.823'.
[  100.740865][ T3610] Bluetooth: hci0: command 0x1003 tx timeout
[  100.749180][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  100.844225][ T6161] loop4: detected capacity change from 0 to 2048
[  100.873115][ T6161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  100.895662][ T6161] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  100.921431][ T6161] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[  100.934155][ T6161] EXT4-fs (loop4): This should not happen!! Data will be lost
[  100.934155][ T6161] 
[  100.944015][ T6161] EXT4-fs (loop4): Total free blocks count 0
[  100.950155][ T6161] EXT4-fs (loop4): Free/Dirty block details
[  100.956115][ T6161] EXT4-fs (loop4): free_blocks=2415919104
[  100.961869][ T6161] EXT4-fs (loop4): dirty_blocks=32
[  100.967282][ T6161] EXT4-fs (loop4): Block reservation details
[  100.973315][ T6161] EXT4-fs (loop4): i_reserved_data_blocks=2
[  100.979872][ T6175] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000900.
[  101.035557][ T6184] bridge_slave_1: left allmulticast mode
[  101.041367][ T6184] bridge_slave_1: left promiscuous mode
[  101.047125][ T6184] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.078969][ T6184] bridge_slave_0: left allmulticast mode
[  101.085007][ T6184] bridge_slave_0: left promiscuous mode
[  101.090861][ T6184] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.320731][ T5738] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.337266][ T5738] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.359023][ T5738] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.372361][ T5738] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.551310][ T6229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=6229 comm=syz.6.855
[  101.575883][ T6230] IPv6: Can't replace route, no match found
[  101.740373][ T6234] loop7: detected capacity change from 0 to 512
[  101.750933][ T6234] EXT4-fs: dax option not supported
[  101.864973][   T29] kauditd_printk_skb: 247 callbacks suppressed
[  101.864990][   T29] audit: type=1326 audit(1765766195.977:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.7.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956203f749 code=0x7ffc0000
[  101.895065][ T6243] loop0: detected capacity change from 0 to 4096
[  101.904602][   T29] audit: type=1326 audit(1765766196.017:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.7.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956203f749 code=0x7ffc0000
[  101.928096][   T29] audit: type=1326 audit(1765766196.017:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.7.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f956203f749 code=0x7ffc0000
[  101.951488][   T29] audit: type=1326 audit(1765766196.017:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.7.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956203f749 code=0x7ffc0000
[  101.974820][   T29] audit: type=1326 audit(1765766196.017:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.7.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f956203f749 code=0x7ffc0000
[  101.998245][   T29] audit: type=1326 audit(1765766196.017:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.7.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956203f749 code=0x7ffc0000
[  102.021766][   T29] audit: type=1326 audit(1765766196.017:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.7.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f956203f749 code=0x7ffc0000
[  102.045055][   T29] audit: type=1326 audit(1765766196.017:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.7.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956203f749 code=0x7ffc0000
[  102.068401][   T29] audit: type=1326 audit(1765766196.017:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.7.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f956203f749 code=0x7ffc0000
[  102.091712][   T29] audit: type=1326 audit(1765766196.017:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.7.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956203f749 code=0x7ffc0000
[  102.118059][ T6243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.189183][ T5738] ==================================================================
[  102.197323][ T5738] BUG: KCSAN: data-race in l2tp_tunnel_del_work / sk_common_release
[  102.205333][ T5738] 
[  102.207661][ T5738] write to 0xffff888104959260 of 8 bytes by task 6249 on cpu 0:
[  102.215299][ T5738]  sk_common_release+0xae/0x230
[  102.220177][ T5738]  udp_lib_close+0x15/0x20
[  102.224630][ T5738]  inet_release+0xce/0xf0
[  102.228973][ T5738]  inet6_release+0x3e/0x60
[  102.233488][ T5738]  sock_close+0x6b/0x150
[  102.237924][ T5738]  __fput+0x29b/0x650
[  102.241925][ T5738]  ____fput+0x1c/0x30
[  102.245925][ T5738]  task_work_run+0x131/0x1a0
[  102.250531][ T5738]  exit_to_user_mode_loop+0x1fe/0x740
[  102.255919][ T5738]  do_syscall_64+0x1ef/0x2c0
[  102.260536][ T5738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.266440][ T5738] 
[  102.268770][ T5738] read to 0xffff888104959260 of 8 bytes by task 5738 on cpu 1:
[  102.276315][ T5738]  l2tp_tunnel_del_work+0x2f/0x1a0
[  102.281444][ T5738]  process_scheduled_works+0x4ce/0x9d0
[  102.286919][ T5738]  worker_thread+0x582/0x770
[  102.291529][ T5738]  kthread+0x489/0x510
[  102.295616][ T5738]  ret_from_fork+0x149/0x290
[  102.300225][ T5738]  ret_from_fork_asm+0x1a/0x30
[  102.305006][ T5738] 
[  102.307334][ T5738] value changed: 0xffff88810616f0c0 -> 0x0000000000000000
[  102.314463][ T5738] 
[  102.316805][ T5738] Reported by Kernel Concurrency Sanitizer on:
[  102.322992][ T5738] CPU: 1 UID: 0 PID: 5738 Comm: kworker/u8:14 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  102.334549][ T5738] Tainted: [W]=WARN
[  102.338377][ T5738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  102.348461][ T5738] Workqueue: l2tp l2tp_tunnel_del_work
[  102.353948][ T5738] ==================================================================
[  102.406044][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.