last executing test programs:

5m36.061873816s ago: executing program 3 (id=2278):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='sys_enter\x00', r1, 0x0, 0x5}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4000080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffb6)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, 0x0)
close(0xffffffffffffffff)
r4 = syz_open_dev$usbfs(0x0, 0x1ff, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0)
r5 = dup(r4)
ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000009300b7080000000000007b8af8ff00000000bfa20000c400000027020000f8ffffffb703000008000000b70400000000000f00000000000000009500000000000000"], 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r6, r6, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0x1d5}, 0x10, 0x0, 0xfffffffc, 0x2, 0x400001, 0x3, 0x5519}, 0x0, 0x3, 0xffffffffffffffff, 0x8)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00')
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket(0x2, 0x80805, 0x0)

5m35.975451723s ago: executing program 3 (id=2280):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = io_uring_setup(0x6ca9, &(0x7f00000001c0)={0x0, 0xa99f, 0x2, 0x0, 0x3d9})
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r3, 0x0, r2, 0x0, 0xf3a, 0xf5ff)
tee(r1, 0xffffffffffffffff, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)

5m35.935213946s ago: executing program 3 (id=2282):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x10, 0x1, 0x1)
ioperm(0x8000000000003, 0x400000000000012e, 0x7ffffff9)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f00000007c0)=ANY=[], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003180), r1)
ioperm(0xbb, 0x3d, 0x16d)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x976023, 0x0)
read(r2, &(0x7f0000000840)=""/40, 0x28)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000480)={0x21b, @time={0x100, 0x8000}, 0x5, {0xc0, 0xff}, 0x42, 0x1, 0x3})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x6, 0x724f, 0x134e, 0x55a})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sndseq(0xffffff9c, &(0x7f0000000100), 0x40800)
bpf$MAP_CREATE(0x0, 0x0, 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff3}, {0x4, 0xa}, {0x6, 0x7e746846e39660dc}}}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x4044040)

5m35.044003489s ago: executing program 3 (id=2296):
modify_ldt$read(0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10}, 0xc0011122)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', r3}, 0x18)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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")
r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@cswp={0x58, 0x114, 0x7, {{0x6, 0xff}, &(0x7f0000000000)=0x400, 0x0, 0xe, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xca2a}}], 0x58, 0x40014}, 0x0)
write$binfmt_register(r5, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

5m33.929374649s ago: executing program 3 (id=2307):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket(0x10, 0x1, 0x1)
ioperm(0x8000000000003, 0x400000000000012e, 0x7ffffff9)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r4, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000000403"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003180), r4)
ioperm(0xbb, 0x3d, 0x16d)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df})
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x976023, 0x0)
read(r6, &(0x7f0000000840)=""/40, 0x28)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000480)={0x21b, @time={0x100, 0x8000}, 0x5, {0xc0, 0xff}, 0x42, 0x1, 0x3})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x6, 0x724f, 0x134e, 0x55a})
close_range(r5, 0xffffffffffffffff, 0x0)
openat$sndseq(0xffffff9c, &(0x7f0000000100), 0x40800)
bpf$MAP_CREATE(0x0, 0x0, 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES8=r0, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@kern={0x10, 0x0, 0x0, 0x20000001}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff3}, {0x4, 0xa}, {0x6, 0x7e746846e39660dc}}}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x4044040)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10)

5m32.738335017s ago: executing program 3 (id=2322):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')

5m32.723278698s ago: executing program 32 (id=2322):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')

3m47.321865427s ago: executing program 4 (id=4156):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r3}, 0x18)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
close(r4)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x453, 0x8, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48841}, 0x40c0)
syz_clone3(&(0x7f0000001200)={0x280, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[0x0], 0x1}, 0x58)

3m46.979692194s ago: executing program 4 (id=4163):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)

3m46.66445507s ago: executing program 4 (id=4168):
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x160, 0x30, 0x1, 0x0, 0x0, {}, [{0x14c, 0x1, [@m_ctinfo={0x100, 0x19, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}]}, {0xc2, 0x6, "5f62628a08f5e0e11053a412361cabc3b34ab18db424634b7fa967830e41d6862d19887c71a4d8a5ee1587f2ec293984da3c31ba349539a066e1900120074637fecd7db5fc5c99e3b9bd37c997561017a0b3134b7a46c68438a87e3020734854a36ae00cd2fddd22812fa01c4bfe923e56e736e1b6474b3a735dbc62de1b87317f743270bd46e085835deffd5f48f42f5d8253a89cb61b99af9216d451881f5519cb1388d6da99f7beb6c949dd6e8e2f449b8a4ca4c45f80c5d2d9391f06"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x160}}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6793, 0x13}, 0x0, 0x5, 0x800, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100)

3m46.30385996s ago: executing program 4 (id=4174):
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000780)=[{&(0x7f0000001a40)=""/4090, 0xa74}], 0x1)
io_uring_enter(0xffffffffffffffff, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5)
fallocate(0xffffffffffffffff, 0x1a, 0xfffffffffffffffa, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x18)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0xffffffffffffffff, 0x400080)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000b00)='task_newtask\x00', r3}, 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$selinux_context(0xffffffffffffffff, 0x0, 0x0)
sendfile(r6, r6, 0x0, 0x100000800000009)

3m46.168579211s ago: executing program 4 (id=4176):
close(0xffffffffffffffff)
gettid()
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$sock(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000280)="8574ba4a89c5741d7406300034ded7", 0xf}, {&(0x7f0000000340)="416b9c2f0baeb237d16b9c9f2152f0d8abaf26eb31ba29843f", 0x19}, {&(0x7f0000001440)="a2e98ae2852ffe7513ef2db1dcfc0fa92dbca415b1a2cba27a1a0967e1af571e5ff764b464f48f7aedc9966f7de41de5d9bc44ab4e22b08146754c2cc4545f7f8275a9b7a77f7653d92fa868dfb50aa307743ddee379774d44fa64f8b3ae276d58cdf06ee6b88ce0dfb3606821fc00103d2f0fe7039bd3c19d096422e5df7351268b8b0a002f7ebbe3d926cc191b8381fcdd4d7fa266967248a2e434ed18b731b9ce0a29e4e68ab47a254138a945bcfd11c0baf89ae3f28256de1cdf24edd4f4d331ae9ed01f5ce3190ab858a8", 0xcd}, {&(0x7f0000001540)="6d5e13bb867d329fa1297078cb24f129625753b7a50c87cd75aa0f04e3971567c3f17e689122579ed04463f1c912d6496c80d62c0d670829ad1cd016fcea1e54bc66f2a763d042a5584cc392337ed502d5ae6a915f233a7d41b5416b250ddd98bf6415c1938e8ed14597a430c73b126f50ddfbe5a99fc66e7125c470b6c44f4fd9a0d8329265bc22b2ef386ab601cd2a839039cf07e87e55036f3d4776c43d71b70538c72d39bc76bab69ca885d91a46383b", 0xb2}, {&(0x7f0000001640)="56be112d6bed331fe15b249d98d68919e972a41c8964027245c11e40729c6458f7002fa203b0e5087a1988444e39cee9d1fd89b6ee1140c549ac0dd86604c9647b7066bccd475083f864f780f6c5de85aa67c0288bc6ad88cc7e6da2f6ca72c3ebcb7d57df7f4bebc870ab84969d063e125a23", 0x73}, {&(0x7f00000016c0)="e9af9bb6bc716c59ecb40d1c7e572c2fbd997ff7ce759b63db34c141b6a695cf8bf7299aa903da6091f23964835d6290dad011dfa11566c5aafbe627a6ea71d38af86f0dd61ff7cee29c681cb99cbcbdb3a94050261a8ca2bef4027ce73440a5cc9400f53221e4b04acaa2fbde47f2d4887d0741eb5e93368dc7629baac6e45b4c339a12ce462334d1374776c7a3e509e6b071f565c2d5381aafa266a515c93faed128467d097d0b27b0a4747da44c0720e64b6b8e385bf61e60364580d10899232eaa5e4d755c056b87b7dc266d9d79c5baea8be5b71e2301db253668019fc0caa76114431b6dcab9", 0xe9}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f0000000380)="88f7fa7b5f8a8cf0602f1efece36", 0xe}], 0x8, &(0x7f0000002900)=[@timestamping={{0x14, 0x1, 0x25, 0xea9}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x60}, 0x4000000)
listen(r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x20008810)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0)

3m46.003603364s ago: executing program 4 (id=4178):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)

3m45.663087862s ago: executing program 33 (id=4178):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)

3m27.585259565s ago: executing program 1 (id=4524):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_access(r1, 0x0, 0x46)

3m27.568561606s ago: executing program 1 (id=4525):
r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1b1, &(0x7f0000000280)="$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")
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x40d, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='\x00', 0x1, 0x3)
write$tun(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xfff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
writev(r2, &(0x7f0000000000)=[{&(0x7f00000004c0)='3', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000300), 0x4)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xc87)

3m27.423726768s ago: executing program 1 (id=4526):
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, 0x0, 0x0)
io_setup(0x30, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
r2 = eventfd(0x400)
io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, 0x0, 0x0, 0x6, 0x0, 0x3, r2}])
pselect6(0x40, &(0x7f0000000100)={0x2, 0x9, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x1, 0x2, 0x0, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0xffff}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0x17}], 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xc3, 0x0, 0x4, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x9}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t')
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000440)=0x26d, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0xfffffffd, @mcast1}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x200000000000014f, &(0x7f0000000540)=ANY=[@ANYBLOB="e2e06174922f402073f473830b8a9885f4277b8d32bb92f7d17217d6426b96ee0447096fe6b3771a5efd938a995dcace81902cfc3fe4e3a746262ef999cd927511b43025edbd05a37cb973cf3929dd085033864db300c00cb595b31eed75b61194f63580269d82304cdc8938844a3f5736705776ff2a726240aabc8f7daef5f92c0d05b158acfd0a7e347b48a66f543155015bbc75e60537d022303644bf5b3c4b6603d44d66f424322c1baa8472404e7f01093e6622da057738048b52fbfbe7a5d81b74c338c33d", @ANYRES32, @ANYRES32], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0xc, &(0x7f0000000600)=ANY=[@ANYRES8=r5, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8, 0x0, 0x6}, 0x18)

3m26.535123101s ago: executing program 1 (id=4543):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@block_validity}, {@grpjquota}]}, 0x3, 0x45b, &(0x7f00000010c0)="$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")
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000100)={'fscrypt:', @auto=[0x36, 0x35, 0x64, 0x65, 0x37, 0x31, 0x63, 0x34, 0x35, 0x62, 0x35, 0x33, 0x35, 0x65, 0x39, 0x3f]}, &(0x7f00000002c0)={0x0, "497424cba1ac7644e26dc6debce837b29f7a0b9b4b6c7cbff2f060331071eff59deb54507417d2b6316d78ca4d0986a611c199d562e28466d8919ae478165423", 0x27}, 0x48, 0xfffffffffffffffa)
r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0xffffff95, 0x0}})
io_uring_enter(r2, 0x5b43, 0x0, 0x0, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000140)={<r5=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r5, 0x8b)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
setregid(0xee00, 0xee00)
r7 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = syz_pidfd_open(r7, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r8, 0xff06, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32], 0x44}, 0x1, 0x2}, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='mm_page_alloc\x00', r12, 0x0, 0x1}, 0x18)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

3m26.426464839s ago: executing program 1 (id=4544):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\n\x00'/28], 0x48)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040), &(0x7f0000000140), 0x2, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x99)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000980)={0x0, 0x79a8, 0x8, 0x1, 0x29a}, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r5, r5, 0x21)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000540)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xa}, {0xfff1, 0xffff}, {0x0, 0x10}}}, 0x24}}, 0x4000800)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
syz_io_uring_setup(0x717b, &(0x7f0000000380)={0x0, 0x6211, 0x100, 0x2, 0x62, 0x0, r1}, &(0x7f0000000400), &(0x7f0000000440))
r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2042)
ioctl$SNDRV_TIMER_IOCTL_START(r9, 0x54a0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
dup(r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m26.331514557s ago: executing program 1 (id=4546):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

3m26.331381457s ago: executing program 34 (id=4546):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

2m31.43905768s ago: executing program 7 (id=5603):
open(&(0x7f0000000040)='./file0\x00', 0x80100, 0x58)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r0, @ANYBLOB="03dfffffff000000000000000000000000200000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000008000"/17], 0x50)

2m31.414381882s ago: executing program 7 (id=5605):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000540)=0xff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000b80)=ANY=[@ANYRESOCT], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=<r4=>r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001700)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
socket$kcm(0x21, 0x2, 0x2)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x20, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0xfff}, 0x18)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x101102, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070252ff7d2051932f234000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x53)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT=r4], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0xc, &(0x7f0000000b40)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x800000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setitimer(0x2, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

2m30.491560467s ago: executing program 7 (id=5616):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r2 = dup(r1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x200000c1)
ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000440)={0x80, 0x6, 0xf00, 0x1, 0x0, 0x5, 0x0})
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, r2, 0x3, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x29, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0x0, 0x3e3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xd858}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_val={0x18, 0xeeef04e1bf6a941a, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket(0x1e, 0x1, 0x0)
connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r7, &(0x7f0000000400), 0x2000011a)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8)

2m30.33259495s ago: executing program 7 (id=5617):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

2m30.305511503s ago: executing program 7 (id=5618):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
r7 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}}}, 0x24}}, 0x0)

2m29.866446978s ago: executing program 7 (id=5623):
r0 = syz_socket_connect_nvme_tcp()
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x200})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7c, 0x200, 0x0, 0x100, 0x1, 0x13, '\x00', 0x0, r2, 0x5, 0x9, 0x3, 0x5}, 0x50)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d800f1e8ff1aff00000000000900000000000000", @ANYRES32=r3, @ANYBLOB="000200"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="02000000020000000300"/28], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYRESHEX=0x0, @ANYBLOB="0aaf849b2e113fec661b3e97398a0867828eef9ac25882fb9a90365b55b288583f300059c943fe99df5f07b4dbbb1dcb358f63ccec99f82b51901c191c6f222eafe0d6c0af46bd5638a64f068b27f8c0172659562ad81c10149e0b9e1a29c9a204794970649fd2a63e8b7b3449a284e9d45e7a9dd09c2b8e8c48d27a8aa81c0d52b4926654f6d5be25eb8f8ca7078ef8eb0d202d413bfde9e4c17444e616edc7a5d94b6a0ccf836c2306c7c0", @ANYRES8=r6], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r8)
r9 = getpid()
syz_pidfd_open(r9, 0x0)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r2}})
setsockopt$sock_attach_bpf(r1, 0x10f, 0x85, 0x0, 0x83)
close(r0)

2m14.74435981s ago: executing program 35 (id=5623):
r0 = syz_socket_connect_nvme_tcp()
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x200})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7c, 0x200, 0x0, 0x100, 0x1, 0x13, '\x00', 0x0, r2, 0x5, 0x9, 0x3, 0x5}, 0x50)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d800f1e8ff1aff00000000000900000000000000", @ANYRES32=r3, @ANYBLOB="000200"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="02000000020000000300"/28], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYRESHEX=0x0, @ANYBLOB="0aaf849b2e113fec661b3e97398a0867828eef9ac25882fb9a90365b55b288583f300059c943fe99df5f07b4dbbb1dcb358f63ccec99f82b51901c191c6f222eafe0d6c0af46bd5638a64f068b27f8c0172659562ad81c10149e0b9e1a29c9a204794970649fd2a63e8b7b3449a284e9d45e7a9dd09c2b8e8c48d27a8aa81c0d52b4926654f6d5be25eb8f8ca7078ef8eb0d202d413bfde9e4c17444e616edc7a5d94b6a0ccf836c2306c7c0", @ANYRES8=r6], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r8)
r9 = getpid()
syz_pidfd_open(r9, 0x0)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r2}})
setsockopt$sock_attach_bpf(r1, 0x10f, 0x85, 0x0, 0x83)
close(r0)

1m4.290884891s ago: executing program 8 (id=7044):
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, 0x0, 0x0)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
r1 = eventfd(0x400)
io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, 0x0, 0x0, 0x6, 0x0, 0x3, r1}])

1m4.227341227s ago: executing program 8 (id=7045):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001080)=<r0=>0x0, &(0x7f00000010c0)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000001140)=ANY=[@ANYRESHEX, @ANYBLOB="9f3e7383254f921340aec3c069ec1f9153a840341b061d4b071113debcc7fd0e069375a8f14f22a22a1cc1a2eda58f0aa7aa1c18ac8f602d17260253259147c91b4b5c570e94dd460e12541eae91c9eb8a9279455c94d60da3dca67fc37ae5ee0acc1d86f42cbff160e913e9909c5de9d744b6a44fca6423e0bf15109d8c88fef397b6a06686662a9fd6f28dd26e928fc9b169463b80cbe89909f985a3ff8433ce51e9ae8425e01761596cda8b3829806238968ad715c2f77cb723ce3a7ffc674e8b1f5bfffd9f182bf8ed6e"], &(0x7f0000000880)='GPL\x00', 0x84, 0x0, 0x0, 0x40f00, 0x13, '\x00', r0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x9, 0x5, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df})
read(r2, &(0x7f0000000840)=""/40, 0x28)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6018232500082c"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffc7, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x80}, 0x48)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5, 0x400}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000001040)={0x40, 0x80, 0x10}, 0x18)
move_mount(0xffffffffffffffff, 0x0, r5, &(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x142)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00')
r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000001380)={0x80, 0x2a, 0x3, 0x4, 0x8, 0x7fffffed})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000040)={0x101, 0x0, 0xc, 0xfffffff7, 0x0, 0x80000000})

1m3.388446265s ago: executing program 8 (id=7059):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r0, @ANYBLOB="03dfffffff000000000000000000000000200000", @ANYRES32, @ANYBLOB="0300000080"], 0x50)

1m3.339621979s ago: executing program 8 (id=7060):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000)

1m3.298865962s ago: executing program 8 (id=7062):
unshare(0x28000600)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
syz_io_uring_setup(0xefe, &(0x7f0000000200)={0x0, 0xce19, 0x10826, 0x1, 0x40, 0x0, r1}, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0xe3b9}, 0x18)
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r3)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x4000, &(0x7f0000000280)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}], [{@seclabel}]}, 0x2, 0x4f0, &(0x7f0000000d40)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'vlan0\x00', 0x1000})
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000004c0)=ANY=[], 0x28}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times', 0x200, 0x4a)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000200)=""/124, &(0x7f0000000280)=0x7c)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
openat(r1, &(0x7f0000000380)='./file1\x00', 0x80000, 0x41)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r9}, 0x9)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r5}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xd, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, r7}, 0x94)

1m3.233390417s ago: executing program 8 (id=7064):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
splice(r2, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x5)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)

48.211321061s ago: executing program 36 (id=7064):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
splice(r2, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x5)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)

4.584783097s ago: executing program 9 (id=8233):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

4.512044823s ago: executing program 9 (id=8235):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)

4.383461503s ago: executing program 9 (id=8237):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES8=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_clone3(&(0x7f00000003c0)={0x44084000, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58)
fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800)
syz_usb_disconnect(0xffffffffffffffff)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000480)={r5, r6, 0xc, 0x0, 0x0, 0xc, 0x96, 0x458, 0x6, 0x1, 0x1, 0x7, 'syz1\x00'})
syz_usb_connect$cdc_ncm(0x3, 0xf3, &(0x7f0000000180)=ANY=[], 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550e, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={0x0, r9, 0x0, 0x97a3}, 0x18)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000", @ANYRES16=r11, @ANYBLOB="a18300000000fddbdf"], 0x184}}, 0x4040890)

1.712787481s ago: executing program 5 (id=8258):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r3, &(0x7f0000000480)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd", 0x12}, {&(0x7f00000004c0)="b70000000180", 0x6}, {&(0x7f00000003c0)="06000000750d08c4daf10a7742e39e31ceefb1fcd2e5bc3fc84150da0d1787cc10d211447da94cb715e462e27318612235a604082c420feb31d4", 0x3a}], 0x3)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000040), 0x1, 0x294, &(0x7f0000000800)="$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")

1.419590824s ago: executing program 0 (id=8271):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)

1.365041039s ago: executing program 0 (id=8273):
r0 = socket$caif_stream(0x25, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_FD={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0x3, 0x4}, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='btrfs_writepage_end_io_hook\x00', r1}, 0x18)
sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000680)=ANY=[@ANYRESOCT=r0, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe30, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)

1.316657233s ago: executing program 0 (id=8275):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES8=r0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x410040, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=default,uni_xlate=1,shortname=lower,nonumtail=0,shor|name=win95,shortname=win95,shortname=lower,\x00'], 0x11, 0x24b, &(0x7f0000000500)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/17], 0x50)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20)
open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')

990.39755ms ago: executing program 5 (id=8278):
unshare(0x6a040000)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

989.73217ms ago: executing program 9 (id=8279):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a485000000040000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
process_mrelease(0xffffffffffffffff, 0x0)

916.215566ms ago: executing program 5 (id=8280):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x8808)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x14886, 0x0)
fcntl$notify(r2, 0x402, 0x29)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
shutdown(r3, 0x1)
recvfrom(r3, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x8)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="1bf320008000"/20, @ANYRESHEX=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r3, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1803000000000020000000000001000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000086000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x19d402, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000100)=0x10000)
mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1)
mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000ce0f000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$selinux_access(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56)

911.224886ms ago: executing program 0 (id=8282):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x301, 0x80000, 0x0, 0x0)

775.328507ms ago: executing program 5 (id=8287):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000000))

715.569432ms ago: executing program 0 (id=8288):
r0 = epoll_create1(0x0)
r1 = socket(0x10, 0x803, 0x100)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x4000000a})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000000c0f00000c00000004000000080050950123e6e22800000000001204000000002e6100bb72f20c34a48a455cea4eb827e47e2d060000000000000043e41f8c9cb4f6298c70aad14bd8ad5208940c747715c15c6da32f1a907a453c"], &(0x7f0000000a00)=""/85, 0x28, 0x55, 0x0, 0x1c0000}, 0x28)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000080000000000000004000000de910001fcffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000850000000c000000b70000000000e2ff17470000040000000000000000000000181100000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000600)='syzkaller\x00', 0x8001, 0x20, &(0x7f0000000640)=""/32, 0x40f00, 0x9904ba2e695722ba, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000580)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000700)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000740)=[{0x1, 0x8004, 0x11, 0x5}, {0x1, 0x1, 0x6, 0xa}, {0x0, 0x1, 0x3, 0x6}, {0x5, 0x6, 0x5, 0x9}, {0x2, 0x3, 0xc, 0x4}, {0x3, 0x6, 0x7, 0xc}], 0x10, 0x7fff}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4000000000]}, 0x8, 0x0)
faccessat2(r5, &(0x7f0000000040)='\x00', 0x2, 0x1200)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000940)=0x1, 0x4)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'team0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0xfffffffffffffe65, &(0x7f0000000200)={&(0x7f00000002c0)=@getchain={0x24, 0x65, 0xfcd66a900070b049, 0x0, 0x3, {0x0, 0x0, 0x0, r7, {}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000a80)=ANY=[@ANYBLOB="200400aa", @ANYRES16=0x0, @ANYBLOB="10002bbd7000fbdbdf2509000000080004000400000004000180"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x2400e051)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
getpeername(r8, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000080)=0x80)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
clock_nanosleep(0x1, 0x1, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000900))
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0xec}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r9)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=<r13=>r12, @ANYBLOB="01072bbd70000000001a05"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r11)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r14, @ANYBLOB="010000000000000000000f0000008bfda228", @ANYRESOCT=r13], 0x1c}}, 0x20044881)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r4}, 0x10)
socket$netlink(0x10, 0x3, 0x0)

709.821473ms ago: executing program 5 (id=8289):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
set_robust_list(0x0, 0x1800)

689.225384ms ago: executing program 0 (id=8290):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001080)=<r0=>0x0, &(0x7f00000010c0)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000001140)=ANY=[@ANYRESHEX, @ANYBLOB="9f3e7383254f921340aec3c069ec1f9153a840341b061d4b071113debcc7fd0e069375a8f14f22a22a1cc1a2eda58f0aa7aa1c18ac8f602d17260253259147c91b4b5c570e94dd460e12541eae91c9eb8a9279455c94d60da3dca67fc37ae5ee0acc1d86f42cbff160e913e9909c5de9d744b6a44fca6423e0bf15109d8c88fef397b6a06686662a9fd6f28dd26e928fc9b169463b80cbe89909f985a3ff8433ce51e9ae8425e01761596cda8b3829806238968ad715c2f77cb723ce3a7ffc674e8b1f5bfffd9f182bf8ed6ee62969b9eeea"], &(0x7f0000000880)='GPL\x00', 0x84, 0x0, 0x0, 0x40f00, 0x13, '\x00', r0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x9, 0x5, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df})
read(r2, &(0x7f0000000840)=""/40, 0x28)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6018232500082c"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffc7, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x80}, 0x48)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5, 0x400}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000001040)={0x40, 0x80, 0x10}, 0x18)
move_mount(0xffffffffffffffff, 0x0, r5, &(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x142)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00')
r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000001380)={0x80, 0x2a, 0x3, 0x4, 0x8, 0x7fffffed})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000040)={0x101, 0x0, 0xc, 0xfffffff7, 0x0, 0x80000000})

667.902126ms ago: executing program 5 (id=8291):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x200100, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r2}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r3, &(0x7f0000001300)="92", 0x1, 0x40d0, &(0x7f0000001200)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r4 = semget$private(0x0, 0x6, 0x0)
semop(r4, &(0x7f00000000c0)=[{0x0, 0xc63e}, {0x4, 0x4, 0x1800}], 0x2)
semctl$GETZCNT(r4, 0x0, 0xf, 0x0)
semop(r4, &(0x7f0000000140)=[{0x2, 0x5, 0x1800}, {0x4, 0xa4d, 0x800}, {0x0, 0x4, 0x3800}, {0x4, 0xb, 0x1c00}, {0x0, 0x5}, {0x3, 0x800, 0x1800}, {0x3, 0x1ff}, {0x2, 0x8376, 0x800}, {0x4, 0x86, 0x1800}], 0x9)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x44)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x6}, 0x18)
sendfile(r5, r6, 0x0, 0x104)
ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000000c0)={0xfffffffffffffffa})

495.61431ms ago: executing program 2 (id=8295):
getrandom(0xfffffffffffffffe, 0x0, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207a2500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x18)
r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, 0x29, 0x10, &(0x7f0000002e00), &(0x7f00000001c0), 0x8, 0x7c, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
write$selinux_validatetrans(r1, 0x0, 0x79)
r5 = socket$inet(0x2, 0x2, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = semget(0x1, 0x4, 0x39c)
semop(r8, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x0, 0x5b7a, 0x800}], 0x2)
semctl$SETALL(r8, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff])
semop(r8, &(0x7f0000000300)=[{0x1, 0x48f7, 0x1800}], 0x1)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10)
syz_emit_ethernet(0x4e, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x18)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f00000002c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x10, 0x1, 0xf}]}}}], 0x18}, 0x4840)

473.300122ms ago: executing program 9 (id=8296):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r2 = fspick(r1, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)

429.943655ms ago: executing program 2 (id=8297):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)

426.643556ms ago: executing program 9 (id=8298):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x70, 0x2, 0x6, 0x103, 0x0, 0x0, {0x0, 0x0, 0x200}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xa22}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40007}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
r3 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r4}, 0x18)
r5 = socket(0x28, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x6)
connect$vsock_stream(r5, &(0x7f0000000080), 0x10)
close(r5)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
kexec_load(0x0, 0x0, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18)
r10 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r10, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r10, 0xfff7fffd)
r11 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r11, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80d1}, 0x0)
accept4(r10, 0x0, 0x0, 0x400000000000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000)=0x80000000, 0x4)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000)
syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0)

262.978659ms ago: executing program 2 (id=8301):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x3}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

209.536523ms ago: executing program 6 (id=8303):
r0 = socket(0x2a, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd')
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000001c80)={[{@barrier_val}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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")
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000b00)={0x4, 0x4, 0x5, 0x5})
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

167.147187ms ago: executing program 6 (id=8304):
syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f00000002c0)='./file0\x00', 0x21, &(0x7f0000001300)=ANY=[@ANYBLOB="e11454014c6b33c1c06ee4ef5ea7ed519f79d53ebbd1dd9ded1ed2f29d16abf17940cddcb31609993ebc", @ANYRES32, @ANYBLOB="d56c4bfe9ce0a5a8f0e97da437ba7dcf0e04136ff560cb4449487cc60cec6c91d883111456f040e53cdbe7b6d8860ffa709973575759f21100a2b0a863f3fb2cc0d1d0440fbd2552afab9da8723de0b5d2ab03254e99f814872d37f7481250d27c0b62ad197d1f0a0a65199c0bf1", @ANYBLOB="6cb881184fcaf515e78e47fe487c1b8c675fb2da9cceac7865817858e5dbce43eb13683a3f302e117d1a3ab1965a6ed6c90ee15f0c2e2fd735d29007f07ab4150a339ea880c23da5f506e3abc2f7df0b1774dd4bad03a4281472dca4faf412e48b84a53c0bd1837c101049433d435e56adcf81419dae39a1bbf097082d16884d1ae2cf5d924ea167fbc0117bb31cb78c455e71ae0fd85be6ae0bd7bcd7cbfe5924dcd49a2f0589e62d69955122b1f746cc4466afda5e305a706ef3b729b4e3272a9e4776364e700c5f99751431a165", @ANYRESHEX], 0x1, 0x673, &(0x7f0000001f80)="$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")
socket(0x2, 0x80805, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x3}, 0x18)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108)

143.987158ms ago: executing program 6 (id=8305):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async, rerun: 32)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) (async)
mq_open(0x0, 0x42, 0x0, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a}, 0xd8) (async)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
close(r0)

88.265563ms ago: executing program 6 (id=8306):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES8=r0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x410040, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=default,uni_xlate=1,shortname=lower,nonumtail=0,shor|name=win95,shortname=win95,shortname=lower,\x00'], 0x11, 0x24b, &(0x7f0000000500)="$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")
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYRES32=0x1, @ANYBLOB="00000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/17], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

87.612323ms ago: executing program 2 (id=8307):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a48500000004000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
process_mrelease(0xffffffffffffffff, 0x0)

79.760794ms ago: executing program 6 (id=8308):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
r3 = memfd_create(&(0x7f0000001880)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
write$binfmt_misc(r3, &(0x7f0000000180)="e502", 0x2)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0xffff, 0x101, 0x9, 0x4, 0x0, 0x5, 0xd4c}, 0xc)
listen(r0, 0xffffffff)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x6, 0x2, 0x2, 0x400, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0x5}, 0x50)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, <r6=>0x0}, &(0x7f0000000580)=0x14)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x4, '\x00', r6, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"})

67.512395ms ago: executing program 2 (id=8309):
r0 = socket$caif_stream(0x25, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r2=>r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_FD={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bind$bt_hci(r4, &(0x7f0000000180)={0x1f, 0x3, 0x4}, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='btrfs_writepage_end_io_hook\x00', r3}, 0x18)
sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000680)=ANY=[@ANYRESOCT=r0, @ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe30, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)

704.91µs ago: executing program 6 (id=8310):
getuid()
io_setup(0x8, &(0x7f0000000600)=<r0=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
sync_file_range(r1, 0xb, 0x3c55, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', <r2=>0x0})
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000d00), 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r6}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r6, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0], <r7=>0x0, 0x8f, &(0x7f0000000940)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x8, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400}, [@generic={0xb6, 0x4, 0x7, 0x5, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000140)='GPL\x00', 0xd807, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, r7, r6, 0x6, &(0x7f0000000b80)=[r4, r4, r4, r4, 0x1], &(0x7f0000000bc0)=[{0x0, 0x4, 0x10, 0x6}, {0x1, 0x2, 0x6, 0x5}, {0x3, 0x3, 0xc, 0x3}, {0x1, 0x4, 0xf, 0x5}, {0x4, 0x2, 0x3, 0xa}, {0x3, 0x2, 0xe}], 0x10, 0x4}, 0x94)
r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000540), 0x400000, 0x0)
r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8)
r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0), 0x40, 0x0)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xc7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r12, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x1})
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r13}, &(0x7f00000006c0), &(0x7f0000000700)='%pS    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x17, 0x36, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}, @generic={0x9, 0xa, 0x2, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x96, &(0x7f00000003c0)=""/150, 0x41100, 0x20, '\x00', r2, @fallback=0x14, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x3, 0x8, 0x3, 0x1ff}, 0x10, r7, r8, 0x1, &(0x7f00000006c0)=[r9, r10, r11, 0xffffffffffffffff, r12, r13], &(0x7f0000000700)=[{0x4, 0x1, 0xf, 0x4}]}, 0x94)
r14 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x121002)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r14, &(0x7f00000000c0)="01", 0x400000}])

0s ago: executing program 2 (id=8311):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64)
io_uring_enter(0xffffffffffffffff, 0x54, 0x0, 0x0, 0x0, 0x0) (rerun: 64)
alarm(0xfb)
setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x3) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES16, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r2, 0x0, 0x40)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde9089060000004e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8641200a8", 0x0, 0xf6d}, 0x28) (async)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f00000002c0)=0xe, 0x4) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r5=>r4}, './file0\x00'})
inotify_add_watch(r5, &(0x7f0000000140)='./file0\x00', 0xd0000586)

kernel console output (not intermixed with test programs):

the MTU to 1560 would solve the problem.
[  471.767205][  T380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  471.778932][  T380] batman_adv: batadv0: Adding interface: batadv_slave_1
[  471.785949][  T380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  471.811997][  T380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  471.822931][  T673] tmpfs: Bad value for 'mpol'
[  471.845162][ T3426] bridge_slave_1: left allmulticast mode
[  471.850883][ T3426] bridge_slave_1: left promiscuous mode
[  471.856784][ T3426] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.866485][ T3426] bridge_slave_0: left allmulticast mode
[  471.872242][ T3426] bridge_slave_0: left promiscuous mode
[  471.878010][ T3426] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.996829][ T3426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  472.007580][ T3426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  472.019282][ T3426] bond0 (unregistering): Released all slaves
[  472.054642][  T380] hsr_slave_0: entered promiscuous mode
[  472.067546][  T380] hsr_slave_1: entered promiscuous mode
[  472.076831][  T380] debugfs: 'hsr0' already exists in 'hsr'
[  472.082697][  T380] Cannot create hsr debugfs directory
[  472.091946][ T3426] hsr_slave_0: left promiscuous mode
[  472.097773][ T3426] batman_adv: batadv0: Removing interface: batadv_slave_0
[  472.132977][ T3426] team0 (unregistering): Port device team_slave_1 removed
[  472.142821][ T3426] team0 (unregistering): Port device team_slave_0 removed
[  472.300464][  T774] xt_CT: No such helper "pptp"
[  472.346889][  T774] program syz.2.7336 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  472.378220][  T380] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  472.393190][  T380] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  472.422198][  T380] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  472.443001][  T380] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  472.559284][  T380] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.577468][  T380] 8021q: adding VLAN 0 to HW filter on device team0
[  472.592672][  T273] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.599913][  T273] bridge0: port 1(bridge_slave_0) entered forwarding state
[  472.611932][ T1620] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.619101][ T1620] bridge0: port 2(bridge_slave_1) entered forwarding state
[  472.716882][  T380] 8021q: adding VLAN 0 to HW filter on device batadv0
[  472.892119][  T858] veth5: entered promiscuous mode
[  472.908257][  T869] netlink: 'syz.2.7347': attribute type 1 has an invalid length.
[  473.059138][  T380] veth0_vlan: entered promiscuous mode
[  473.077078][  T380] veth1_vlan: entered promiscuous mode
[  473.107163][  T380] veth0_macvtap: entered promiscuous mode
[  473.124273][  T380] veth1_macvtap: entered promiscuous mode
[  473.155484][  T380] batman_adv: batadv0: Interface activated: batadv_slave_0
[  473.168944][  T380] batman_adv: batadv0: Interface activated: batadv_slave_1
[  473.181272][  T380] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  473.190130][  T380] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  473.199240][  T380] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  473.208130][  T380] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  473.327493][  T908] sd 0:0:1:0: device reset
[  473.449805][  T932] FAULT_INJECTION: forcing a failure.
[  473.449805][  T932] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  473.460834][  T934] siw: device registration error -23
[  473.462985][  T932] CPU: 0 UID: 0 PID: 932 Comm: syz.0.7365 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  473.463027][  T932] Tainted: [W]=WARN
[  473.463045][  T932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  473.463064][  T932] Call Trace:
[  473.463073][  T932]  <TASK>
[  473.463085][  T932]  __dump_stack+0x1d/0x30
[  473.463114][  T932]  dump_stack_lvl+0xe8/0x140
[  473.463144][  T932]  dump_stack+0x15/0x1b
[  473.463167][  T932]  should_fail_ex+0x265/0x280
[  473.463267][  T932]  should_fail+0xb/0x20
[  473.463333][  T932]  should_fail_usercopy+0x1a/0x20
[  473.463444][  T932]  _copy_from_user+0x1c/0xb0
[  473.463491][  T932]  ___sys_sendmsg+0xc1/0x1d0
[  473.463550][  T932]  __x64_sys_sendmsg+0xd4/0x160
[  473.463610][  T932]  x64_sys_call+0x191e/0x2ff0
[  473.463642][  T932]  do_syscall_64+0xd2/0x200
[  473.463678][  T932]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  473.463736][  T932]  ? clear_bhb_loop+0x40/0x90
[  473.463768][  T932]  ? clear_bhb_loop+0x40/0x90
[  473.463799][  T932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.463873][  T932] RIP: 0033:0x7f6be566e9a9
[  473.463959][  T932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  473.463994][  T932] RSP: 002b:00007f6be3ccf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  473.464033][  T932] RAX: ffffffffffffffda RBX: 00007f6be5895fa0 RCX: 00007f6be566e9a9
[  473.464053][  T932] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006
[  473.464070][  T932] RBP: 00007f6be3ccf090 R08: 0000000000000000 R09: 0000000000000000
[  473.464088][  T932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  473.464106][  T932] R13: 0000000000000000 R14: 00007f6be5895fa0 R15: 00007ffd47ae2cf8
[  473.464139][  T932]  </TASK>
[  473.796742][  T962] __nla_validate_parse: 18 callbacks suppressed
[  473.796756][  T962] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7374'.
[  473.814041][  T962] bridge0: port 3(team0) entered disabled state
[  473.820413][  T962] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.827702][  T962] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.838855][  T962] bridge0: entered allmulticast mode
[  473.897545][  T968] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7379'.
[  473.994217][  T975] netlink: 'syz.6.7382': attribute type 1 has an invalid length.
[  474.002142][  T975] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7382'.
[  474.366581][  T991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  474.375268][  T991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  475.102719][ T1002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  475.111262][ T1002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  475.181989][ T1005] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7392'.
[  475.218957][   T29] kauditd_printk_skb: 754 callbacks suppressed
[  475.218976][   T29] audit: type=1326 audit(1753850975.175:17694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.9.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  475.248772][   T29] audit: type=1326 audit(1753850975.175:17695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.9.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  475.272427][   T29] audit: type=1326 audit(1753850975.185:17696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.9.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  475.295931][   T29] audit: type=1326 audit(1753850975.185:17697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.9.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  475.319665][   T29] audit: type=1326 audit(1753850975.185:17698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.9.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  475.343463][   T29] audit: type=1326 audit(1753850975.185:17699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.9.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  475.367099][   T29] audit: type=1326 audit(1753850975.185:17700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.9.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  475.390614][   T29] audit: type=1326 audit(1753850975.185:17701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.9.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  475.414199][   T29] audit: type=1326 audit(1753850975.185:17702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.9.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  475.437864][   T29] audit: type=1326 audit(1753850975.185:17703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.9.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  475.494261][ T1012] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7393'.
[  475.513836][ T1020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7395'.
[  475.536900][ T1020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7395'.
[  475.572571][ T1023] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7396'.
[  475.578742][ T1018] ALSA: seq fatal error: cannot create timer (-22)
[  475.854510][ T1027] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  475.959893][ T1052] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7406'.
[  475.978120][ T1052] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7406'.
[  476.109746][ T1064] FAULT_INJECTION: forcing a failure.
[  476.109746][ T1064] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  476.122933][ T1064] CPU: 1 UID: 0 PID: 1064 Comm: syz.5.7410 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  476.123058][ T1064] Tainted: [W]=WARN
[  476.123068][ T1064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  476.123085][ T1064] Call Trace:
[  476.123094][ T1064]  <TASK>
[  476.123105][ T1064]  __dump_stack+0x1d/0x30
[  476.123144][ T1064]  dump_stack_lvl+0xe8/0x140
[  476.123301][ T1064]  dump_stack+0x15/0x1b
[  476.123316][ T1064]  should_fail_ex+0x265/0x280
[  476.123382][ T1064]  should_fail+0xb/0x20
[  476.123401][ T1064]  should_fail_usercopy+0x1a/0x20
[  476.123425][ T1064]  _copy_from_user+0x1c/0xb0
[  476.123455][ T1064]  bpf_test_init+0xdf/0x160
[  476.123535][ T1064]  bpf_prog_test_run_xdp+0x274/0x910
[  476.123558][ T1064]  ? kstrtouint+0x76/0xc0
[  476.123649][ T1064]  ? __rcu_read_unlock+0x4f/0x70
[  476.123726][ T1064]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  476.123748][ T1064]  bpf_prog_test_run+0x22a/0x390
[  476.123779][ T1064]  __sys_bpf+0x3dc/0x790
[  476.123815][ T1064]  __x64_sys_bpf+0x41/0x50
[  476.123838][ T1064]  x64_sys_call+0x2aea/0x2ff0
[  476.123857][ T1064]  do_syscall_64+0xd2/0x200
[  476.124012][ T1064]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  476.124037][ T1064]  ? clear_bhb_loop+0x40/0x90
[  476.124056][ T1064]  ? clear_bhb_loop+0x40/0x90
[  476.124087][ T1064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.124192][ T1064] RIP: 0033:0x7fb0484ee9a9
[  476.124212][ T1064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  476.124228][ T1064] RSP: 002b:00007fb046b57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  476.124246][ T1064] RAX: ffffffffffffffda RBX: 00007fb048715fa0 RCX: 00007fb0484ee9a9
[  476.124259][ T1064] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[  476.124271][ T1064] RBP: 00007fb046b57090 R08: 0000000000000000 R09: 0000000000000000
[  476.124294][ T1064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  476.124305][ T1064] R13: 0000000000000000 R14: 00007fb048715fa0 R15: 00007ffe5e524558
[  476.124324][ T1064]  </TASK>
[  476.358486][ T1066] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  476.494282][ T1075] 9pnet_fd: Insufficient options for proto=fd
[  476.768638][ T1095] netlink: 'syz.5.7424': attribute type 6 has an invalid length.
[  476.776753][ T1095] FAULT_INJECTION: forcing a failure.
[  476.776753][ T1095] name failslab, interval 1, probability 0, space 0, times 0
[  476.789466][ T1095] CPU: 0 UID: 0 PID: 1095 Comm: syz.5.7424 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  476.789533][ T1095] Tainted: [W]=WARN
[  476.789541][ T1095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  476.789557][ T1095] Call Trace:
[  476.789619][ T1095]  <TASK>
[  476.789627][ T1095]  __dump_stack+0x1d/0x30
[  476.789652][ T1095]  dump_stack_lvl+0xe8/0x140
[  476.789676][ T1095]  dump_stack+0x15/0x1b
[  476.789697][ T1095]  should_fail_ex+0x265/0x280
[  476.789730][ T1095]  should_failslab+0x8c/0xb0
[  476.789752][ T1095]  __kmalloc_noprof+0xa5/0x3e0
[  476.789859][ T1095]  ? fib_create_info+0xbb1/0x1980
[  476.789944][ T1095]  fib_create_info+0xbb1/0x1980
[  476.790002][ T1095]  fib_table_insert+0x60/0xeb0
[  476.790088][ T1095]  ? fib_trie_table+0xd0/0xf0
[  476.790122][ T1095]  ? fib_new_table+0x1ac/0x1c0
[  476.790150][ T1095]  inet_rtm_newroute+0xab/0x140
[  476.790278][ T1095]  ? __pfx_inet_rtm_newroute+0x10/0x10
[  476.790312][ T1095]  rtnetlink_rcv_msg+0x5fe/0x6d0
[  476.790382][ T1095]  netlink_rcv_skb+0x120/0x220
[  476.790437][ T1095]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  476.790553][ T1095]  rtnetlink_rcv+0x1c/0x30
[  476.790589][ T1095]  netlink_unicast+0x5a8/0x680
[  476.790655][ T1095]  netlink_sendmsg+0x58b/0x6b0
[  476.790689][ T1095]  ? __pfx_netlink_sendmsg+0x10/0x10
[  476.790717][ T1095]  __sock_sendmsg+0x142/0x180
[  476.790759][ T1095]  ____sys_sendmsg+0x31e/0x4e0
[  476.790795][ T1095]  ___sys_sendmsg+0x17b/0x1d0
[  476.790861][ T1095]  __x64_sys_sendmsg+0xd4/0x160
[  476.790896][ T1095]  x64_sys_call+0x191e/0x2ff0
[  476.790922][ T1095]  do_syscall_64+0xd2/0x200
[  476.791005][ T1095]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  476.791032][ T1095]  ? clear_bhb_loop+0x40/0x90
[  476.791059][ T1095]  ? clear_bhb_loop+0x40/0x90
[  476.791128][ T1095]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.791149][ T1095] RIP: 0033:0x7fb0484ee9a9
[  476.791168][ T1095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  476.791191][ T1095] RSP: 002b:00007fb046b57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  476.791209][ T1095] RAX: ffffffffffffffda RBX: 00007fb048715fa0 RCX: 00007fb0484ee9a9
[  476.791222][ T1095] RDX: 0000000000000894 RSI: 0000200000000000 RDI: 0000000000000006
[  476.791234][ T1095] RBP: 00007fb046b57090 R08: 0000000000000000 R09: 0000000000000000
[  476.791247][ T1095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  476.791338][ T1095] R13: 0000000000000000 R14: 00007fb048715fa0 R15: 00007ffe5e524558
[  476.791412][ T1095]  </TASK>
[  477.296733][ T1129] lo speed is unknown, defaulting to 1000
[  477.417598][ T1161] lo speed is unknown, defaulting to 1000
[  477.730778][ T1205] ALSA: seq fatal error: cannot create timer (-22)
[  477.742544][ T1205] 9pnet_fd: Insufficient options for proto=fd
[  477.756399][ T1212] FAULT_INJECTION: forcing a failure.
[  477.756399][ T1212] name failslab, interval 1, probability 0, space 0, times 0
[  477.769230][ T1212] CPU: 0 UID: 0 PID: 1212 Comm: syz.9.7447 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  477.769276][ T1212] Tainted: [W]=WARN
[  477.769284][ T1212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  477.769300][ T1212] Call Trace:
[  477.769310][ T1212]  <TASK>
[  477.769320][ T1212]  __dump_stack+0x1d/0x30
[  477.769342][ T1212]  dump_stack_lvl+0xe8/0x140
[  477.769404][ T1212]  dump_stack+0x15/0x1b
[  477.769425][ T1212]  should_fail_ex+0x265/0x280
[  477.769454][ T1212]  should_failslab+0x8c/0xb0
[  477.769476][ T1212]  __kmalloc_noprof+0xa5/0x3e0
[  477.769502][ T1212]  ? io_cache_alloc_new+0x2a/0xb0
[  477.769576][ T1212]  io_cache_alloc_new+0x2a/0xb0
[  477.769670][ T1212]  io_arm_apoll+0x368/0x4f0
[  477.769711][ T1212]  io_arm_poll_handler+0x131/0x160
[  477.769826][ T1212]  io_queue_async+0x25b/0x450
[  477.769865][ T1212]  io_submit_sqes+0xa3c/0x1050
[  477.769903][ T1212]  __se_sys_io_uring_enter+0x1c1/0x1b70
[  477.769931][ T1212]  ? 0xffffffff81000000
[  477.769946][ T1212]  ? __rcu_read_unlock+0x4f/0x70
[  477.769975][ T1212]  ? get_pid_task+0x96/0xd0
[  477.770050][ T1212]  ? proc_fail_nth_write+0x12d/0x160
[  477.770071][ T1212]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  477.770093][ T1212]  ? vfs_write+0x75e/0x8e0
[  477.770222][ T1212]  ? __rcu_read_unlock+0x4f/0x70
[  477.770250][ T1212]  ? __fget_files+0x184/0x1c0
[  477.770347][ T1212]  ? fput+0x8f/0xc0
[  477.770377][ T1212]  __x64_sys_io_uring_enter+0x78/0x90
[  477.770409][ T1212]  x64_sys_call+0x2de1/0x2ff0
[  477.770437][ T1212]  do_syscall_64+0xd2/0x200
[  477.770463][ T1212]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  477.770555][ T1212]  ? clear_bhb_loop+0x40/0x90
[  477.770577][ T1212]  ? clear_bhb_loop+0x40/0x90
[  477.770627][ T1212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.770655][ T1212] RIP: 0033:0x7faba591e9a9
[  477.770781][ T1212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  477.770804][ T1212] RSP: 002b:00007faba3f87038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  477.770822][ T1212] RAX: ffffffffffffffda RBX: 00007faba5b45fa0 RCX: 00007faba591e9a9
[  477.770835][ T1212] RDX: 0000000000000620 RSI: 00000000000006e2 RDI: 0000000000000005
[  477.770847][ T1212] RBP: 00007faba3f87090 R08: 0000000000000000 R09: 0000000000000000
[  477.770862][ T1212] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  477.770931][ T1212] R13: 0000000000000000 R14: 00007faba5b45fa0 R15: 00007ffcf49c4d98
[  477.770968][ T1212]  </TASK>
[  478.071079][ T1220] tipc: Can't bind to reserved service type 2
[  478.207042][ T1223] lo speed is unknown, defaulting to 1000
[  478.467288][ T1295] vhci_hcd: invalid port number 96
[  478.472638][ T1295] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  478.637095][ T1315] lo speed is unknown, defaulting to 1000
[  478.921963][ T1360] FAULT_INJECTION: forcing a failure.
[  478.921963][ T1360] name failslab, interval 1, probability 0, space 0, times 0
[  478.934845][ T1360] CPU: 0 UID: 0 PID: 1360 Comm: syz.5.7478 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  478.934953][ T1360] Tainted: [W]=WARN
[  478.934960][ T1360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  478.935007][ T1360] Call Trace:
[  478.935012][ T1360]  <TASK>
[  478.935020][ T1360]  __dump_stack+0x1d/0x30
[  478.935038][ T1360]  dump_stack_lvl+0xe8/0x140
[  478.935056][ T1360]  dump_stack+0x15/0x1b
[  478.935077][ T1360]  should_fail_ex+0x265/0x280
[  478.935172][ T1360]  should_failslab+0x8c/0xb0
[  478.935193][ T1360]  kmem_cache_alloc_node_noprof+0x57/0x320
[  478.935218][ T1360]  ? __alloc_skb+0x101/0x320
[  478.935240][ T1360]  __alloc_skb+0x101/0x320
[  478.935276][ T1360]  netlink_alloc_large_skb+0xba/0xf0
[  478.935320][ T1360]  netlink_sendmsg+0x3cf/0x6b0
[  478.935347][ T1360]  ? __pfx_netlink_sendmsg+0x10/0x10
[  478.935383][ T1360]  __sock_sendmsg+0x142/0x180
[  478.935414][ T1360]  ____sys_sendmsg+0x31e/0x4e0
[  478.935441][ T1360]  ___sys_sendmsg+0x17b/0x1d0
[  478.935520][ T1360]  __x64_sys_sendmsg+0xd4/0x160
[  478.935610][ T1360]  x64_sys_call+0x191e/0x2ff0
[  478.935639][ T1360]  do_syscall_64+0xd2/0x200
[  478.935674][ T1360]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  478.935731][ T1360]  ? clear_bhb_loop+0x40/0x90
[  478.935819][ T1360]  ? clear_bhb_loop+0x40/0x90
[  478.935840][ T1360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.935859][ T1360] RIP: 0033:0x7fb0484ee9a9
[  478.935873][ T1360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  478.935890][ T1360] RSP: 002b:00007fb046b57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  478.935948][ T1360] RAX: ffffffffffffffda RBX: 00007fb048715fa0 RCX: 00007fb0484ee9a9
[  478.935960][ T1360] RDX: 0000000020050890 RSI: 00002000000000c0 RDI: 0000000000000005
[  478.935971][ T1360] RBP: 00007fb046b57090 R08: 0000000000000000 R09: 0000000000000000
[  478.935983][ T1360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  478.936057][ T1360] R13: 0000000000000000 R14: 00007fb048715fa0 R15: 00007ffe5e524558
[  478.936080][ T1360]  </TASK>
[  479.233499][ T1367] __nla_validate_parse: 16 callbacks suppressed
[  479.233514][ T1367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7481'.
[  479.236851][ T1369] FAULT_INJECTION: forcing a failure.
[  479.236851][ T1369] name failslab, interval 1, probability 0, space 0, times 0
[  479.240743][ T1367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7481'.
[  479.248837][ T1369] CPU: 1 UID: 0 PID: 1369 Comm: syz.6.7482 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  479.248882][ T1369] Tainted: [W]=WARN
[  479.248891][ T1369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  479.248906][ T1369] Call Trace:
[  479.248913][ T1369]  <TASK>
[  479.248923][ T1369]  __dump_stack+0x1d/0x30
[  479.248954][ T1369]  dump_stack_lvl+0xe8/0x140
[  479.248990][ T1369]  dump_stack+0x15/0x1b
[  479.249028][ T1369]  should_fail_ex+0x265/0x280
[  479.249064][ T1369]  should_failslab+0x8c/0xb0
[  479.249205][ T1369]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  479.249247][ T1369]  ? make_vfsuid+0x49/0xa0
[  479.249273][ T1369]  ? v9fs_session_init+0x4b/0xde0
[  479.249314][ T1369]  kstrdup+0x3e/0xd0
[  479.249360][ T1369]  v9fs_session_init+0x4b/0xde0
[  479.249436][ T1369]  ? __rcu_read_unlock+0x4f/0x70
[  479.249467][ T1369]  ? avc_has_perm_noaudit+0x1b1/0x200
[  479.249511][ T1369]  ? should_fail_ex+0xdb/0x280
[  479.249544][ T1369]  ? v9fs_mount+0x51/0x5c0
[  479.249598][ T1369]  ? should_failslab+0x8c/0xb0
[  479.249628][ T1369]  ? __kmalloc_cache_noprof+0x189/0x320
[  479.249670][ T1369]  v9fs_mount+0x67/0x5c0
[  479.249715][ T1369]  ? selinux_capable+0x31/0x40
[  479.249778][ T1369]  ? __pfx_v9fs_mount+0x10/0x10
[  479.249825][ T1369]  legacy_get_tree+0x78/0xd0
[  479.249866][ T1369]  vfs_get_tree+0x54/0x1d0
[  479.249969][ T1369]  do_new_mount+0x207/0x5e0
[  479.250011][ T1369]  ? security_capable+0x83/0x90
[  479.250055][ T1369]  path_mount+0x4a4/0xb20
[  479.250144][ T1369]  ? user_path_at+0x109/0x130
[  479.250182][ T1369]  __se_sys_mount+0x28f/0x2e0
[  479.250224][ T1369]  ? fput+0x8f/0xc0
[  479.250296][ T1369]  __x64_sys_mount+0x67/0x80
[  479.250341][ T1369]  x64_sys_call+0x2b4d/0x2ff0
[  479.250492][ T1369]  do_syscall_64+0xd2/0x200
[  479.250528][ T1369]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  479.250630][ T1369]  ? clear_bhb_loop+0x40/0x90
[  479.250650][ T1369]  ? clear_bhb_loop+0x40/0x90
[  479.250673][ T1369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.250703][ T1369] RIP: 0033:0x7f3ff18de9a9
[  479.250725][ T1369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  479.250810][ T1369] RSP: 002b:00007f3feff3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  479.250838][ T1369] RAX: ffffffffffffffda RBX: 00007f3ff1b05fa0 RCX: 00007f3ff18de9a9
[  479.250857][ T1369] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000
[  479.250876][ T1369] RBP: 00007f3feff3f090 R08: 0000200000000240 R09: 0000000000000000
[  479.250893][ T1369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  479.250910][ T1369] R13: 0000000000000000 R14: 00007f3ff1b05fa0 R15: 00007ffda26f2c18
[  479.250939][ T1369]  </TASK>
[  479.321164][ T1374] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7483'.
[  479.589960][ T1390] FAULT_INJECTION: forcing a failure.
[  479.589960][ T1390] name failslab, interval 1, probability 0, space 0, times 0
[  479.602968][ T1390] CPU: 0 UID: 0 PID: 1390 Comm: syz.2.7487 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  479.603045][ T1390] Tainted: [W]=WARN
[  479.603054][ T1390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  479.603078][ T1390] Call Trace:
[  479.603084][ T1390]  <TASK>
[  479.603093][ T1390]  __dump_stack+0x1d/0x30
[  479.603119][ T1390]  dump_stack_lvl+0xe8/0x140
[  479.603144][ T1390]  dump_stack+0x15/0x1b
[  479.603354][ T1390]  should_fail_ex+0x265/0x280
[  479.603463][ T1390]  should_failslab+0x8c/0xb0
[  479.603550][ T1390]  __kvmalloc_node_noprof+0x123/0x4e0
[  479.603586][ T1390]  ? __se_sys_setgroups+0xd0/0x300
[  479.603612][ T1390]  __se_sys_setgroups+0xd0/0x300
[  479.603634][ T1390]  __x64_sys_setgroups+0x31/0x40
[  479.603653][ T1390]  x64_sys_call+0x2e5a/0x2ff0
[  479.603750][ T1390]  do_syscall_64+0xd2/0x200
[  479.603777][ T1390]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  479.603914][ T1390]  ? clear_bhb_loop+0x40/0x90
[  479.603938][ T1390]  ? clear_bhb_loop+0x40/0x90
[  479.603965][ T1390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.603994][ T1390] RIP: 0033:0x7f108902e9a9
[  479.604013][ T1390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  479.604078][ T1390] RSP: 002b:00007f1087697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000074
[  479.604104][ T1390] RAX: ffffffffffffffda RBX: 00007f1089255fa0 RCX: 00007f108902e9a9
[  479.604121][ T1390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  479.604136][ T1390] RBP: 00007f1087697090 R08: 0000000000000000 R09: 0000000000000000
[  479.604152][ T1390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  479.604167][ T1390] R13: 0000000000000000 R14: 00007f1089255fa0 R15: 00007fff4ee89c58
[  479.604240][ T1390]  </TASK>
[  479.850932][ T1405] xt_hashlimit: max too large, truncated to 1048576
[  479.860089][ T1405] xt_bpf: check failed: parse error
[  479.922881][ T1411] netlink: 156 bytes leftover after parsing attributes in process `syz.5.7488'.
[  480.127871][ T1422] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7497'.
[  480.193996][ T1422] veth3: entered promiscuous mode
[  480.265153][ T1445] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7498'.
[  480.275579][ T1445] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7498'.
[  480.300946][   T29] kauditd_printk_skb: 552 callbacks suppressed
[  480.300966][   T29] audit: type=1326 audit(1753850980.265:18256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1446 comm="syz.9.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  480.330890][   T29] audit: type=1326 audit(1753850980.265:18257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1446 comm="syz.9.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  480.354593][   T29] audit: type=1326 audit(1753850980.265:18258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1446 comm="syz.9.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  480.378197][   T29] audit: type=1326 audit(1753850980.265:18259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1446 comm="syz.9.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  480.401758][   T29] audit: type=1326 audit(1753850980.275:18260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1446 comm="syz.9.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  480.425498][   T29] audit: type=1326 audit(1753850980.275:18261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1446 comm="syz.9.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  480.495214][   T29] audit: type=1326 audit(1753850980.375:18262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1446 comm="syz.9.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  480.518853][   T29] audit: type=1326 audit(1753850980.375:18263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1446 comm="syz.9.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  480.542705][   T29] audit: type=1326 audit(1753850980.375:18264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1446 comm="syz.9.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  480.615643][   T29] audit: type=1326 audit(1753850980.585:18265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1446 comm="syz.9.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  480.672844][ T1456] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7501'.
[  480.687607][ T1447] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7499'.
[  480.699315][ T1456] netlink: 'syz.5.7501': attribute type 1 has an invalid length.
[  480.759798][ T1460] vlan2: entered allmulticast mode
[  480.867408][ T1468] ALSA: seq fatal error: cannot create timer (-22)
[  480.922949][ T1447] netlink: 'syz.9.7499': attribute type 13 has an invalid length.
[  480.930867][ T1447] netlink: 152 bytes leftover after parsing attributes in process `syz.9.7499'.
[  481.019669][ T1447] erspan0: refused to change device tx_queue_len
[  481.037152][ T1447] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  481.068140][ T1494] pimreg: entered allmulticast mode
[  481.082617][ T1494] pimreg: left allmulticast mode
[  481.145010][ T1489] lo speed is unknown, defaulting to 1000
[  481.164583][ T1503] lo speed is unknown, defaulting to 1000
[  481.217646][ T1494] wireguard0: entered promiscuous mode
[  481.223298][ T1494] wireguard0: entered allmulticast mode
[  481.402774][ T1502] lo speed is unknown, defaulting to 1000
[  481.490956][ T1491] lo speed is unknown, defaulting to 1000
[  481.547006][ T1535] lo speed is unknown, defaulting to 1000
[  481.692463][ T1632] ALSA: seq fatal error: cannot create timer (-22)
[  481.709190][ T1645] 9p: Unknown access argument @: -22
[  481.834193][ T1651] veth3: entered promiscuous mode
[  481.885865][ T1681] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  482.109679][ T1699] 
: renamed from bond0 (while UP)
[  482.138892][ T1709] lo speed is unknown, defaulting to 1000
[  482.400954][ T1745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1745 comm=syz.0.7537
[  482.490067][ T1759] veth3: entered promiscuous mode
[  482.665229][ T1800] FAULT_INJECTION: forcing a failure.
[  482.665229][ T1800] name failslab, interval 1, probability 0, space 0, times 0
[  482.678053][ T1800] CPU: 1 UID: 0 PID: 1800 Comm: syz.6.7545 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  482.678218][ T1800] Tainted: [W]=WARN
[  482.678227][ T1800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  482.678244][ T1800] Call Trace:
[  482.678253][ T1800]  <TASK>
[  482.678262][ T1800]  __dump_stack+0x1d/0x30
[  482.678318][ T1800]  dump_stack_lvl+0xe8/0x140
[  482.678343][ T1800]  dump_stack+0x15/0x1b
[  482.678364][ T1800]  should_fail_ex+0x265/0x280
[  482.678397][ T1800]  should_failslab+0x8c/0xb0
[  482.678425][ T1800]  kmem_cache_alloc_noprof+0x50/0x310
[  482.678493][ T1800]  ? getname_flags+0x80/0x3b0
[  482.678521][ T1800]  getname_flags+0x80/0x3b0
[  482.678549][ T1800]  path_setxattrat+0x223/0x310
[  482.678717][ T1800]  __x64_sys_setxattr+0x6e/0x90
[  482.678782][ T1800]  x64_sys_call+0xad2/0x2ff0
[  482.678860][ T1800]  do_syscall_64+0xd2/0x200
[  482.678896][ T1800]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  482.678931][ T1800]  ? clear_bhb_loop+0x40/0x90
[  482.678957][ T1800]  ? clear_bhb_loop+0x40/0x90
[  482.679010][ T1800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.679037][ T1800] RIP: 0033:0x7f3ff18de9a9
[  482.679057][ T1800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  482.679095][ T1800] RSP: 002b:00007f3feff3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  482.679121][ T1800] RAX: ffffffffffffffda RBX: 00007f3ff1b05fa0 RCX: 00007f3ff18de9a9
[  482.679138][ T1800] RDX: 0000200000000200 RSI: 0000200000000180 RDI: 00002000000005c0
[  482.679203][ T1800] RBP: 00007f3feff3f090 R08: 0000000000000001 R09: 0000000000000000
[  482.679217][ T1800] R10: 000000000000006d R11: 0000000000000246 R12: 0000000000000001
[  482.679233][ T1800] R13: 0000000000000000 R14: 00007f3ff1b05fa0 R15: 00007ffda26f2c18
[  482.679257][ T1800]  </TASK>
[  483.102722][ T1818] FAULT_INJECTION: forcing a failure.
[  483.102722][ T1818] name failslab, interval 1, probability 0, space 0, times 0
[  483.115485][ T1818] CPU: 1 UID: 0 PID: 1818 Comm: syz.0.7547 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  483.115519][ T1818] Tainted: [W]=WARN
[  483.115525][ T1818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  483.115578][ T1818] Call Trace:
[  483.115584][ T1818]  <TASK>
[  483.115592][ T1818]  __dump_stack+0x1d/0x30
[  483.115618][ T1818]  dump_stack_lvl+0xe8/0x140
[  483.115644][ T1818]  dump_stack+0x15/0x1b
[  483.115666][ T1818]  should_fail_ex+0x265/0x280
[  483.115800][ T1818]  should_failslab+0x8c/0xb0
[  483.115829][ T1818]  kmem_cache_alloc_lru_noprof+0x55/0x310
[  483.115883][ T1818]  ? shmem_alloc_inode+0x34/0x50
[  483.115929][ T1818]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  483.115964][ T1818]  shmem_alloc_inode+0x34/0x50
[  483.115996][ T1818]  alloc_inode+0x3d/0x170
[  483.116070][ T1818]  new_inode+0x1d/0xe0
[  483.116087][ T1818]  shmem_get_inode+0x244/0x750
[  483.116132][ T1818]  __shmem_file_setup+0x113/0x210
[  483.116201][ T1818]  shmem_file_setup+0x3b/0x50
[  483.116231][ T1818]  __se_sys_memfd_create+0x2c3/0x590
[  483.116273][ T1818]  __x64_sys_memfd_create+0x31/0x40
[  483.116314][ T1818]  x64_sys_call+0x2abe/0x2ff0
[  483.116391][ T1818]  do_syscall_64+0xd2/0x200
[  483.116422][ T1818]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  483.116457][ T1818]  ? clear_bhb_loop+0x40/0x90
[  483.116529][ T1818]  ? clear_bhb_loop+0x40/0x90
[  483.116556][ T1818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.116591][ T1818] RIP: 0033:0x7f6be566e9a9
[  483.116610][ T1818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  483.116669][ T1818] RSP: 002b:00007f6be3c8ce18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  483.116694][ T1818] RAX: ffffffffffffffda RBX: 000000000000042f RCX: 00007f6be566e9a9
[  483.116712][ T1818] RDX: 00007f6be3c8cef0 RSI: 0000000000000000 RDI: 00007f6be56f16fc
[  483.116729][ T1818] RBP: 0000200000000940 R08: 00007f6be3c8cbb7 R09: 00007f6be3c8ce40
[  483.116768][ T1818] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0
[  483.116781][ T1818] R13: 00007f6be3c8cef0 R14: 00007f6be3c8ceb0 R15: 0000200000000300
[  483.116801][ T1818]  </TASK>
[  483.608364][ T1830] veth3: entered promiscuous mode
[  483.792947][ T1858] FAULT_INJECTION: forcing a failure.
[  483.792947][ T1858] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  483.807714][ T1858] CPU: 1 UID: 0 PID: 1858 Comm: syz.0.7560 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  483.807758][ T1858] Tainted: [W]=WARN
[  483.807766][ T1858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  483.807782][ T1858] Call Trace:
[  483.807792][ T1858]  <TASK>
[  483.807802][ T1858]  __dump_stack+0x1d/0x30
[  483.807868][ T1858]  dump_stack_lvl+0xe8/0x140
[  483.807894][ T1858]  dump_stack+0x15/0x1b
[  483.807914][ T1858]  should_fail_ex+0x265/0x280
[  483.808007][ T1858]  should_fail+0xb/0x20
[  483.808035][ T1858]  should_fail_usercopy+0x1a/0x20
[  483.808070][ T1858]  _copy_from_user+0x1c/0xb0
[  483.808111][ T1858]  ___sys_sendmsg+0xc1/0x1d0
[  483.808177][ T1858]  __x64_sys_sendmsg+0xd4/0x160
[  483.808207][ T1858]  x64_sys_call+0x191e/0x2ff0
[  483.808233][ T1858]  do_syscall_64+0xd2/0x200
[  483.808305][ T1858]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  483.808337][ T1858]  ? clear_bhb_loop+0x40/0x90
[  483.808417][ T1858]  ? clear_bhb_loop+0x40/0x90
[  483.808450][ T1858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.808505][ T1858] RIP: 0033:0x7f6be566e9a9
[  483.808523][ T1858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  483.808635][ T1858] RSP: 002b:00007f6be3ccf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  483.808655][ T1858] RAX: ffffffffffffffda RBX: 00007f6be5895fa0 RCX: 00007f6be566e9a9
[  483.808682][ T1858] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  483.808696][ T1858] RBP: 00007f6be3ccf090 R08: 0000000000000000 R09: 0000000000000000
[  483.808711][ T1858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  483.808728][ T1858] R13: 0000000000000000 R14: 00007f6be5895fa0 R15: 00007ffd47ae2cf8
[  483.808753][ T1858]  </TASK>
[  484.034520][ T1863] netlink: 'syz.5.7563': attribute type 10 has an invalid length.
[  484.195292][ T1891] veth3: entered promiscuous mode
[  484.660968][ T1921] ALSA: seq fatal error: cannot create timer (-22)
[  484.924339][ T1945] FAULT_INJECTION: forcing a failure.
[  484.924339][ T1945] name failslab, interval 1, probability 0, space 0, times 0
[  484.937125][ T1945] CPU: 1 UID: 0 PID: 1945 Comm: syz.5.7581 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  484.937169][ T1945] Tainted: [W]=WARN
[  484.937188][ T1945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  484.937205][ T1945] Call Trace:
[  484.937214][ T1945]  <TASK>
[  484.937224][ T1945]  __dump_stack+0x1d/0x30
[  484.937249][ T1945]  dump_stack_lvl+0xe8/0x140
[  484.937349][ T1945]  dump_stack+0x15/0x1b
[  484.937366][ T1945]  should_fail_ex+0x265/0x280
[  484.937466][ T1945]  ? tipc_conn_alloc+0x37/0x240
[  484.937511][ T1945]  should_failslab+0x8c/0xb0
[  484.937615][ T1945]  __kmalloc_cache_noprof+0x4c/0x320
[  484.937661][ T1945]  tipc_conn_alloc+0x37/0x240
[  484.937707][ T1945]  tipc_topsrv_kern_subscr+0xbd/0x1b0
[  484.937756][ T1945]  tipc_group_create+0x24d/0x290
[  484.937804][ T1945]  tipc_sk_join+0x130/0x2e0
[  484.937839][ T1945]  tipc_setsockopt+0x598/0x620
[  484.937870][ T1945]  ? __pfx_tipc_setsockopt+0x10/0x10
[  484.937980][ T1945]  __sys_setsockopt+0x181/0x200
[  484.938069][ T1945]  __x64_sys_setsockopt+0x64/0x80
[  484.938097][ T1945]  x64_sys_call+0x20ec/0x2ff0
[  484.938177][ T1945]  do_syscall_64+0xd2/0x200
[  484.938210][ T1945]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  484.938245][ T1945]  ? clear_bhb_loop+0x40/0x90
[  484.938298][ T1945]  ? clear_bhb_loop+0x40/0x90
[  484.938321][ T1945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.938343][ T1945] RIP: 0033:0x7fb0484ee9a9
[  484.938362][ T1945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  484.938483][ T1945] RSP: 002b:00007fb046b57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  484.938579][ T1945] RAX: ffffffffffffffda RBX: 00007fb048715fa0 RCX: 00007fb0484ee9a9
[  484.938592][ T1945] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003
[  484.938605][ T1945] RBP: 00007fb046b57090 R08: 0000000000000010 R09: 0000000000000000
[  484.938618][ T1945] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  484.938636][ T1945] R13: 0000000000000000 R14: 00007fb048715fa0 R15: 00007ffe5e524558
[  484.938662][ T1945]  </TASK>
[  485.114011][ T1952] __nla_validate_parse: 19 callbacks suppressed
[  485.114033][ T1952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7584'.
[  485.234623][ T1952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7584'.
[  485.250996][ T1962] sock: sock_timestamping_bind_phc: sock not bind to device
[  485.279679][ T1968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7588'.
[  485.315661][ T1975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7591'.
[  485.377346][   T29] kauditd_printk_skb: 382 callbacks suppressed
[  485.377361][   T29] audit: type=1326 audit(1753850985.345:18648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.5.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0484ee9a9 code=0x7ffc0000
[  485.410254][ T1989] veth3: entered promiscuous mode
[  485.444547][   T29] audit: type=1326 audit(1753850985.345:18649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.5.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0484ee9a9 code=0x7ffc0000
[  485.468341][   T29] audit: type=1326 audit(1753850985.345:18650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.5.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0484ee9a9 code=0x7ffc0000
[  485.491924][   T29] audit: type=1326 audit(1753850985.345:18651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.5.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0484ee9a9 code=0x7ffc0000
[  485.515627][   T29] audit: type=1326 audit(1753850985.345:18652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.5.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0484ee9a9 code=0x7ffc0000
[  485.539230][   T29] audit: type=1326 audit(1753850985.345:18653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.5.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0484ee9a9 code=0x7ffc0000
[  485.563038][   T29] audit: type=1326 audit(1753850985.345:18654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.5.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0484ee9a9 code=0x7ffc0000
[  485.587472][   T29] audit: type=1326 audit(1753850985.345:18655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.5.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0484ee9a9 code=0x7ffc0000
[  485.611137][   T29] audit: type=1326 audit(1753850985.345:18656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.5.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0484ee9a9 code=0x7ffc0000
[  485.634901][   T29] audit: type=1326 audit(1753850985.345:18657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.5.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0484ee9a9 code=0x7ffc0000
[  485.714269][ T2015] lo speed is unknown, defaulting to 1000
[  485.887880][ T2045] lo speed is unknown, defaulting to 1000
[  486.032478][ T2069] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7602'.
[  486.068605][ T2071] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7603'.
[  486.562874][ T2102] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7612'.
[  486.573278][ T2102] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7612'.
[  486.607927][ T2110] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7614'.
[  486.686717][ T2119] veth3: entered promiscuous mode
[  486.701499][ T2118] netlink: 80 bytes leftover after parsing attributes in process `syz.6.7615'.
[  486.794893][ T2152] lo speed is unknown, defaulting to 1000
[  486.801044][ T2145] lo speed is unknown, defaulting to 1000
[  487.258847][ T2220] all: renamed from lo (while UP)
[  487.276455][ T2220] SELinux: security_context_str_to_sid (¢) failed with errno=-22
[  487.375168][ T2229] lo speed is unknown, defaulting to 1000
[  487.678630][ T2265] ALSA: seq fatal error: cannot create timer (-22)
[  488.040862][ T2323] FAULT_INJECTION: forcing a failure.
[  488.040862][ T2323] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  488.054096][ T2323] CPU: 0 UID: 0 PID: 2323 Comm: syz.2.7653 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  488.054154][ T2323] Tainted: [W]=WARN
[  488.054163][ T2323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  488.054176][ T2323] Call Trace:
[  488.054182][ T2323]  <TASK>
[  488.054190][ T2323]  __dump_stack+0x1d/0x30
[  488.054211][ T2323]  dump_stack_lvl+0xe8/0x140
[  488.054242][ T2323]  dump_stack+0x15/0x1b
[  488.054264][ T2323]  should_fail_ex+0x265/0x280
[  488.054353][ T2323]  should_fail+0xb/0x20
[  488.054378][ T2323]  should_fail_usercopy+0x1a/0x20
[  488.054485][ T2323]  _copy_from_user+0x1c/0xb0
[  488.054528][ T2323]  __copy_msghdr+0x244/0x300
[  488.054563][ T2323]  ___sys_sendmsg+0x109/0x1d0
[  488.054690][ T2323]  __x64_sys_sendmsg+0xd4/0x160
[  488.054731][ T2323]  x64_sys_call+0x191e/0x2ff0
[  488.054753][ T2323]  do_syscall_64+0xd2/0x200
[  488.054849][ T2323]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  488.054881][ T2323]  ? clear_bhb_loop+0x40/0x90
[  488.054909][ T2323]  ? clear_bhb_loop+0x40/0x90
[  488.054937][ T2323]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.055031][ T2323] RIP: 0033:0x7f108902e9a9
[  488.055047][ T2323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  488.055065][ T2323] RSP: 002b:00007f1087697038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  488.055138][ T2323] RAX: ffffffffffffffda RBX: 00007f1089255fa0 RCX: 00007f108902e9a9
[  488.055187][ T2323] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000006
[  488.055203][ T2323] RBP: 00007f1087697090 R08: 0000000000000000 R09: 0000000000000000
[  488.055218][ T2323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  488.055236][ T2323] R13: 0000000000000000 R14: 00007f1089255fa0 R15: 00007fff4ee89c58
[  488.055257][ T2323]  </TASK>
[  488.468151][ T2335] lo speed is unknown, defaulting to 1000
[  488.820176][ T2365] lo speed is unknown, defaulting to 1000
[  488.841791][ T2373] lo speed is unknown, defaulting to 1000
[  489.085753][ T2381] lo speed is unknown, defaulting to 1000
[  489.138904][ T2427] lo speed is unknown, defaulting to 1000
[  489.504207][ T2512] veth3: entered promiscuous mode
[  489.603649][ T2530] lo speed is unknown, defaulting to 1000
[  490.024294][ T2610] lo speed is unknown, defaulting to 1000
[  490.055450][ T2631] netlink: 'syz.6.7692': attribute type 10 has an invalid length.
[  490.126314][ T2631] team0: Port device dummy0 added
[  490.133111][ T2639] __nla_validate_parse: 8 callbacks suppressed
[  490.133126][ T2639] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7697'.
[  490.216662][ T2639] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7697'.
[  490.251207][ T2616] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length.
[  490.357790][ T2616] team0: Port device dummy0 removed
[  490.370046][ T2616] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  490.424044][ T2610] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7690'.
[  490.433879][ T2670] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7702'.
[  490.452045][   T29] kauditd_printk_skb: 495 callbacks suppressed
[  490.452070][   T29] audit: type=1326 audit(1753850990.425:19153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2668 comm="syz.9.7700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  490.482226][   T29] audit: type=1326 audit(1753850990.425:19154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2668 comm="syz.9.7700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  490.545450][   T29] audit: type=1326 audit(1753850990.425:19155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2668 comm="syz.9.7700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  490.569207][   T29] audit: type=1326 audit(1753850990.425:19156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2668 comm="syz.9.7700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  490.570307][ T2678] FAULT_INJECTION: forcing a failure.
[  490.570307][ T2678] name failslab, interval 1, probability 0, space 0, times 0
[  490.592759][   T29] audit: type=1326 audit(1753850990.425:19157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2668 comm="syz.9.7700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  490.605422][ T2678] CPU: 1 UID: 0 PID: 2678 Comm: syz.9.7704 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  490.605459][ T2678] Tainted: [W]=WARN
[  490.605465][ T2678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  490.605479][ T2678] Call Trace:
[  490.605487][ T2678]  <TASK>
[  490.605498][ T2678]  __dump_stack+0x1d/0x30
[  490.605598][ T2678]  dump_stack_lvl+0xe8/0x140
[  490.605653][ T2678]  dump_stack+0x15/0x1b
[  490.605678][ T2678]  should_fail_ex+0x265/0x280
[  490.605715][ T2678]  should_failslab+0x8c/0xb0
[  490.605746][ T2678]  kmem_cache_alloc_noprof+0x50/0x310
[  490.605816][ T2678]  ? audit_log_start+0x365/0x6c0
[  490.605870][ T2678]  audit_log_start+0x365/0x6c0
[  490.605919][ T2678]  audit_seccomp+0x48/0x100
[  490.606046][ T2678]  ? __seccomp_filter+0x68c/0x10d0
[  490.606079][ T2678]  __seccomp_filter+0x69d/0x10d0
[  490.606147][ T2678]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  490.606219][ T2678]  ? vfs_write+0x75e/0x8e0
[  490.606262][ T2678]  ? __rcu_read_unlock+0x4f/0x70
[  490.606372][ T2678]  ? __fget_files+0x184/0x1c0
[  490.606403][ T2678]  __secure_computing+0x82/0x150
[  490.606435][ T2678]  syscall_trace_enter+0xcf/0x1e0
[  490.606470][ T2678]  do_syscall_64+0xac/0x200
[  490.606505][ T2678]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  490.606547][ T2678]  ? clear_bhb_loop+0x40/0x90
[  490.606577][ T2678]  ? clear_bhb_loop+0x40/0x90
[  490.606652][ T2678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.606683][ T2678] RIP: 0033:0x7faba591e9a9
[  490.606705][ T2678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  490.606732][ T2678] RSP: 002b:00007faba3f87038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c
[  490.606759][ T2678] RAX: ffffffffffffffda RBX: 00007faba5b45fa0 RCX: 00007faba591e9a9
[  490.606778][ T2678] RDX: 0000000000000080 RSI: 0000000000000000 RDI: ffffffffffffffff
[  490.606835][ T2678] RBP: 00007faba3f87090 R08: 0000000000000000 R09: 0000000000000000
[  490.606853][ T2678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  490.606871][ T2678] R13: 0000000000000000 R14: 00007faba5b45fa0 R15: 00007ffcf49c4d98
[  490.606899][ T2678]  </TASK>
[  490.606910][ T2678] audit: audit_lost=16 audit_rate_limit=0 audit_backlog_limit=64
[  490.629061][   T29] audit: type=1326 audit(1753850990.425:19158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2668 comm="syz.9.7700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  490.642693][ T2678] audit: out of memory in audit_log_start
[  490.884913][   T29] audit: type=1326 audit(1753850990.425:19159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2668 comm="syz.9.7700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  490.884949][   T29] audit: type=1326 audit(1753850990.425:19160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2668 comm="syz.9.7700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba591e9a9 code=0x7ffc0000
[  490.938794][ T2685] lo speed is unknown, defaulting to 1000
[  491.003990][ T2676] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7701'.
[  491.027013][ T2707] veth0_vlan: entered allmulticast mode
[  491.138956][ T2676] lo speed is unknown, defaulting to 1000
[  491.304091][ T2771] netlink: 256 bytes leftover after parsing attributes in process `syz.6.7719'.
[  491.496319][ T2797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7725'.
[  491.513476][ T2797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7725'.
[  491.785239][ T2830] ALSA: seq fatal error: cannot create timer (-22)
[  491.807623][ T2828] FAULT_INJECTION: forcing a failure.
[  491.807623][ T2828] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  491.820758][ T2828] CPU: 0 UID: 0 PID: 2828 Comm: syz.6.7737 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  491.820789][ T2828] Tainted: [W]=WARN
[  491.820796][ T2828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  491.820807][ T2828] Call Trace:
[  491.820814][ T2828]  <TASK>
[  491.820821][ T2828]  __dump_stack+0x1d/0x30
[  491.820883][ T2828]  dump_stack_lvl+0xe8/0x140
[  491.820901][ T2828]  dump_stack+0x15/0x1b
[  491.820981][ T2828]  should_fail_ex+0x265/0x280
[  491.821029][ T2828]  should_fail+0xb/0x20
[  491.821048][ T2828]  should_fail_usercopy+0x1a/0x20
[  491.821072][ T2828]  _copy_from_user+0x1c/0xb0
[  491.821101][ T2828]  __ia32_sys_rt_sigreturn+0x128/0x350
[  491.821148][ T2828]  ? bpf_probe_write_user+0x83/0xc0
[  491.821191][ T2828]  x64_sys_call+0x2d3c/0x2ff0
[  491.821212][ T2828]  do_syscall_64+0xd2/0x200
[  491.821303][ T2828]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  491.821327][ T2828]  ? clear_bhb_loop+0x40/0x90
[  491.821346][ T2828]  ? clear_bhb_loop+0x40/0x90
[  491.821367][ T2828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.821386][ T2828] RIP: 0033:0x7f3ff187ab89
[  491.821458][ T2828] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[  491.821480][ T2828] RSP: 002b:00007f3feff3ea80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f
[  491.821504][ T2828] RAX: ffffffffffffffda RBX: 00007f3ff1b05fa0 RCX: 00007f3ff187ab89
[  491.821521][ T2828] RDX: 00007f3feff3ea80 RSI: 00007f3feff3ebb0 RDI: 0000000000000021
[  491.821537][ T2828] RBP: 00007f3feff3f090 R08: 0000000000000007 R09: 0000000000000000
[  491.821553][ T2828] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[  491.821617][ T2828] R13: 0000000000000000 R14: 00007f3ff1b05fa0 R15: 00007ffda26f2c18
[  491.821649][ T2828]  </TASK>
[  492.091523][ T2856] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7745'.
[  492.101941][ T2852] netlink: 112 bytes leftover after parsing attributes in process `syz.0.7744'.
[  492.245100][ T2881] lo speed is unknown, defaulting to 1000
[  492.416607][ T2917] lo speed is unknown, defaulting to 1000
[  492.780923][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.788503][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.796001][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.803453][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.810944][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.818390][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.825903][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.833337][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.840798][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.848305][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.855813][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.863294][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.870801][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.878303][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.885926][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.893379][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.900928][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.908536][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.915996][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.923458][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.930883][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.938458][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.940742][ T2980] veth0_vlan: left promiscuous mode
[  492.945907][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.951205][ T2980] veth0_vlan: entered promiscuous mode
[  492.958598][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.971550][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.979078][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.986624][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  492.994154][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  493.001581][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  493.009042][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  493.016561][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  493.023996][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  493.031428][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  493.039338][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  493.047096][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  493.054567][T19140] hid-generic FFF9:0000:0002.000B: unknown main item tag 0x0
[  493.068850][T19140] hid-generic FFF9:0000:0002.000B: hidraw0: <UNKNOWN> HID v0.07 Device [syz1] on syz1
[  493.081360][ T2979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  493.097286][ T2979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  493.187162][ T3019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  493.195876][ T3019] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  493.593482][ T3048] lo speed is unknown, defaulting to 1000
[  493.776529][ T3077] lo speed is unknown, defaulting to 1000
[  493.878401][ T3069] lo speed is unknown, defaulting to 1000
[  493.939997][ T3141] IPv6: NLM_F_CREATE should be specified when creating new route
[  494.111073][ T3147] veth3: entered promiscuous mode
[  494.757741][ T3223] ALSA: seq fatal error: cannot create timer (-22)
[  495.181524][ T3260] __nla_validate_parse: 13 callbacks suppressed
[  495.181554][ T3260] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7819'.
[  495.307194][ T3268] lo speed is unknown, defaulting to 1000
[  495.372180][ T3298] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7827'.
[  495.395748][ T3268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7823'.
[  495.526894][ T3312] lo speed is unknown, defaulting to 1000
[  495.783805][   T29] kauditd_printk_skb: 475 callbacks suppressed
[  495.783825][   T29] audit: type=1326 audit(1753850995.745:19634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.0.7834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be566e9a9 code=0x7ffc0000
[  495.888497][   T29] audit: type=1326 audit(1753850995.755:19635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.0.7834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6be566e9a9 code=0x7ffc0000
[  495.912237][   T29] audit: type=1326 audit(1753850995.755:19636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.0.7834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be566e9a9 code=0x7ffc0000
[  495.936030][   T29] audit: type=1326 audit(1753850995.755:19637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.0.7834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be566e9a9 code=0x7ffc0000
[  495.959790][   T29] audit: type=1326 audit(1753850995.755:19638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.0.7834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6be566e9a9 code=0x7ffc0000
[  495.983401][   T29] audit: type=1326 audit(1753850995.755:19639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.0.7834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be566e9a9 code=0x7ffc0000
[  496.007042][   T29] audit: type=1326 audit(1753850995.755:19640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.0.7834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6be566e9a9 code=0x7ffc0000
[  496.030940][   T29] audit: type=1326 audit(1753850995.755:19641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.0.7834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be566e9a9 code=0x7ffc0000
[  496.054664][   T29] audit: type=1326 audit(1753850995.755:19642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.0.7834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6be566e9a9 code=0x7ffc0000
[  496.078349][   T29] audit: type=1326 audit(1753850995.765:19643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.0.7834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be566e9a9 code=0x7ffc0000
[  496.159565][ T3359] lo speed is unknown, defaulting to 1000
[  496.358912][ T3401] bond1: entered promiscuous mode
[  496.364079][ T3401] bond1: entered allmulticast mode
[  496.382134][ T3401] 8021q: adding VLAN 0 to HW filter on device bond1
[  496.434724][ T3401] bond1 (unregistering): Released all slaves
[  496.532215][ T3492] ALSA: seq fatal error: cannot create timer (-22)
[  496.596570][ T3500] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7851'.
[  497.127679][ T3540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7863'.
[  497.156110][ T3541] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7861'.
[  497.218010][ T3548] lo speed is unknown, defaulting to 1000
[  497.278817][ T3560] lo speed is unknown, defaulting to 1000
[  497.690963][ T3606] FAULT_INJECTION: forcing a failure.
[  497.690963][ T3606] name failslab, interval 1, probability 0, space 0, times 0
[  497.703847][ T3606] CPU: 0 UID: 0 PID: 3606 Comm: syz.0.7872 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  497.703910][ T3606] Tainted: [W]=WARN
[  497.703917][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  497.703931][ T3606] Call Trace:
[  497.703939][ T3606]  <TASK>
[  497.703949][ T3606]  __dump_stack+0x1d/0x30
[  497.703976][ T3606]  dump_stack_lvl+0xe8/0x140
[  497.704000][ T3606]  dump_stack+0x15/0x1b
[  497.704052][ T3606]  should_fail_ex+0x265/0x280
[  497.704084][ T3606]  should_failslab+0x8c/0xb0
[  497.704114][ T3606]  __kmalloc_noprof+0xa5/0x3e0
[  497.704141][ T3606]  ? ethnl_default_start+0xe6/0x330
[  497.704174][ T3606]  ethnl_default_start+0xe6/0x330
[  497.704252][ T3606]  ? __pfx_ethnl_default_start+0x10/0x10
[  497.704346][ T3606]  genl_start+0x2e0/0x390
[  497.704450][ T3606]  __netlink_dump_start+0x331/0x520
[  497.704542][ T3606]  genl_family_rcv_msg_dumpit+0x115/0x180
[  497.704661][ T3606]  ? __pfx_genl_start+0x10/0x10
[  497.704809][ T3606]  ? __pfx_genl_dumpit+0x10/0x10
[  497.704850][ T3606]  ? __pfx_genl_done+0x10/0x10
[  497.704957][ T3606]  genl_rcv_msg+0x3f0/0x460
[  497.704990][ T3606]  ? __pfx_ethnl_default_start+0x10/0x10
[  497.705044][ T3606]  ? __pfx_ethnl_default_dumpit+0x10/0x10
[  497.705078][ T3606]  ? __pfx_ethnl_default_done+0x10/0x10
[  497.705118][ T3606]  netlink_rcv_skb+0x120/0x220
[  497.705193][ T3606]  ? __pfx_genl_rcv_msg+0x10/0x10
[  497.705233][ T3606]  genl_rcv+0x28/0x40
[  497.705267][ T3606]  netlink_unicast+0x5a8/0x680
[  497.705301][ T3606]  netlink_sendmsg+0x58b/0x6b0
[  497.705339][ T3606]  ? __pfx_netlink_sendmsg+0x10/0x10
[  497.705380][ T3606]  __sock_sendmsg+0x142/0x180
[  497.705441][ T3606]  ____sys_sendmsg+0x31e/0x4e0
[  497.705472][ T3606]  ___sys_sendmsg+0x17b/0x1d0
[  497.705590][ T3606]  __x64_sys_sendmsg+0xd4/0x160
[  497.705621][ T3606]  x64_sys_call+0x191e/0x2ff0
[  497.705651][ T3606]  do_syscall_64+0xd2/0x200
[  497.705682][ T3606]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  497.705740][ T3606]  ? clear_bhb_loop+0x40/0x90
[  497.705765][ T3606]  ? clear_bhb_loop+0x40/0x90
[  497.705851][ T3606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.705880][ T3606] RIP: 0033:0x7f6be566e9a9
[  497.705895][ T3606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  497.705969][ T3606] RSP: 002b:00007f6be3ccf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  497.705994][ T3606] RAX: ffffffffffffffda RBX: 00007f6be5895fa0 RCX: 00007f6be566e9a9
[  497.706012][ T3606] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000006
[  497.706026][ T3606] RBP: 00007f6be3ccf090 R08: 0000000000000000 R09: 0000000000000000
[  497.706038][ T3606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  497.706050][ T3606] R13: 0000000000000000 R14: 00007f6be5895fa0 R15: 00007ffd47ae2cf8
[  497.706069][ T3606]  </TASK>
[  498.117656][ T3608] 9pnet: Could not find request transport: 0xffffffffffffffff
[  498.247784][ T3633] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7877'.
[  498.376910][ T3634] lo speed is unknown, defaulting to 1000
[  498.814068][  T273] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.940018][  T273] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.031224][ T3634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7878'.
[  499.326174][ T3678] lo speed is unknown, defaulting to 1000
[  499.350979][  T273] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.467056][  T273] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.527104][ T3745] lo speed is unknown, defaulting to 1000
[  499.590901][ T3678] chnl_net:caif_netlink_parms(): no params data found
[  499.709601][ T3898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7901'.
[  499.792068][ T3905] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7903'.
[  499.894235][  T273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  499.904407][  T273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  499.913999][  T273] bond0 (unregistering): Released all slaves
[  499.923768][  T273] bond1 (unregistering): (slave veth3): Releasing active interface
[  499.932066][  T273] dummy0: entered promiscuous mode
[  499.938465][  T273] bond1 (unregistering): (slave dummy0): Releasing active interface
[  499.948309][  T273] bond1 (unregistering): Released all slaves
[  499.986882][ T3678] bridge0: port 1(bridge_slave_0) entered blocking state
[  499.994442][ T3678] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.001897][ T3678] bridge_slave_0: entered allmulticast mode
[  500.008989][ T3678] bridge_slave_0: entered promiscuous mode
[  500.016448][ T3678] bridge0: port 2(bridge_slave_1) entered blocking state
[  500.023720][ T3678] bridge0: port 2(bridge_slave_1) entered disabled state
[  500.031080][ T3678] bridge_slave_1: entered allmulticast mode
[  500.037850][ T3678] bridge_slave_1: entered promiscuous mode
[  500.094098][  T273] hsr_slave_0: left promiscuous mode
[  500.100197][  T273] hsr_slave_1: left promiscuous mode
[  500.165606][  T273] team0 (unregistering): Port device team_slave_1 removed
[  500.177984][  T273] team0 (unregistering): Port device team_slave_0 removed
[  500.221601][T14273] lo speed is unknown, defaulting to 1000
[  500.226867][ T3678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  500.227511][T14273] infiniband syz0: ib_query_port failed (-19)
[  500.240961][ T3678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  500.275925][ T3678] team0: Port device team_slave_0 added
[  500.285274][ T3678] team0: Port device team_slave_1 added
[  500.308863][ T3678] batman_adv: batadv0: Adding interface: batadv_slave_0
[  500.315935][ T3678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  500.342064][ T3678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  500.360699][ T3678] batman_adv: batadv0: Adding interface: batadv_slave_1
[  500.367868][ T3678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  500.393977][ T3678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  500.429431][ T3678] hsr_slave_0: entered promiscuous mode
[  500.435996][ T3678] hsr_slave_1: entered promiscuous mode
[  500.775564][ T4172] __nla_validate_parse: 2 callbacks suppressed
[  500.775585][ T4172] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7919'.
[  500.871286][ T4174] ALSA: seq fatal error: cannot create timer (-22)
[  500.878875][ T4174] 9pnet_fd: Insufficient options for proto=fd
[  500.909612][ T3678] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  500.925475][ T3678] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  500.944609][ T3678] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  500.954288][ T3678] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  500.994073][ T3678] 8021q: adding VLAN 0 to HW filter on device bond0
[  501.006649][ T3678] 8021q: adding VLAN 0 to HW filter on device team0
[  501.033824][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  501.040965][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  501.058497][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  501.065768][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  501.193985][ T3678] 8021q: adding VLAN 0 to HW filter on device batadv0
[  501.205211][   T29] kauditd_printk_skb: 276 callbacks suppressed
[  501.205229][   T29] audit: type=1326 audit(1753851001.175:19920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.6.7928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff18de9a9 code=0x7ffc0000
[  501.265475][   T29] audit: type=1326 audit(1753851001.215:19921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.6.7928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f3ff18de9a9 code=0x7ffc0000
[  501.289138][   T29] audit: type=1326 audit(1753851001.215:19922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.6.7928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff18de9a9 code=0x7ffc0000
[  501.302936][ T4225] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7929'.
[  501.312763][   T29] audit: type=1326 audit(1753851001.215:19923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.6.7928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff18de9a9 code=0x7ffc0000
[  501.312802][   T29] audit: type=1326 audit(1753851001.215:19924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.6.7928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f3ff18de9a9 code=0x7ffc0000
[  501.369789][   T29] audit: type=1326 audit(1753851001.215:19925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.6.7928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff18de9a9 code=0x7ffc0000
[  501.393917][   T29] audit: type=1326 audit(1753851001.215:19926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.6.7928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff18de9a9 code=0x7ffc0000
[  501.406685][ T4230] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7930'.
[  501.417557][   T29] audit: type=1326 audit(1753851001.215:19927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.6.7928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3ff18de9a9 code=0x7ffc0000
[  501.450196][   T29] audit: type=1326 audit(1753851001.215:19928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.6.7928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff18de9a9 code=0x7ffc0000
[  501.473792][   T29] audit: type=1326 audit(1753851001.215:19929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.6.7928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff18de9a9 code=0x7ffc0000
[  501.546178][ T4240] veth3: entered promiscuous mode
[  501.602291][ T4238] ALSA: seq fatal error: cannot create timer (-22)
[  501.612401][ T4238] 9pnet_fd: Insufficient options for proto=fd
[  501.633833][ T4258] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7932'.
[  501.694248][ T3678] veth0_vlan: entered promiscuous mode
[  501.714022][ T3678] veth1_vlan: entered promiscuous mode
[  501.729816][ T4258] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7932'.
[  501.763072][ T3678] veth0_macvtap: entered promiscuous mode
[  502.081201][ T3678] veth1_macvtap: entered promiscuous mode
[  502.125676][ T3678] batman_adv: batadv0: Interface activated: batadv_slave_0
[  502.599991][ T3678] batman_adv: batadv0: Interface activated: batadv_slave_1
[  502.611416][ T3678] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  502.620286][ T3678] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  502.629118][ T3678] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  502.638228][ T3678] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  502.651125][ T4339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7942'.
[  502.766030][ T4346] veth3: entered promiscuous mode
[  503.048040][ T4366] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7945'.
[  503.129671][ T4396] SELinux: failed to load policy
[  503.176321][ T4402] ALSA: seq fatal error: cannot create timer (-19)
[  503.204783][ T4407] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7949'.
[  503.215159][ T4407] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7949'.
[  503.276016][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.283528][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.295301][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.302933][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.310428][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.317940][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.325526][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.333008][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.340420][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.348061][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.355538][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.362972][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.392034][ T4422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7955'.
[  503.412074][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.419700][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.427194][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.434782][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.442295][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.449728][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.457172][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.464686][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.472150][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.479590][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.487064][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.494612][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.502197][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.509748][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.517211][ T4829] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  503.545776][ T4829] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  503.604387][ T4438] veth5: entered promiscuous mode
[  503.728364][ T4484] bridge: RTM_NEWNEIGH with invalid ether address
[  503.817138][ T4503] pim6reg1: entered promiscuous mode
[  503.822634][ T4503] pim6reg1: entered allmulticast mode
[  503.892038][ T4510] veth7: entered promiscuous mode
[  504.008635][ T4531] ALSA: seq fatal error: cannot create timer (-22)
[  504.039552][ T4546] FAULT_INJECTION: forcing a failure.
[  504.039552][ T4546] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  504.052893][ T4546] CPU: 0 UID: 0 PID: 4546 Comm: syz.5.7980 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  504.052991][ T4546] Tainted: [W]=WARN
[  504.053000][ T4546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  504.053024][ T4546] Call Trace:
[  504.053032][ T4546]  <TASK>
[  504.053043][ T4546]  __dump_stack+0x1d/0x30
[  504.053130][ T4546]  dump_stack_lvl+0xe8/0x140
[  504.053155][ T4546]  dump_stack+0x15/0x1b
[  504.053177][ T4546]  should_fail_ex+0x265/0x280
[  504.053211][ T4546]  should_fail+0xb/0x20
[  504.053240][ T4546]  should_fail_usercopy+0x1a/0x20
[  504.053277][ T4546]  _copy_from_iter+0xcf/0xe40
[  504.053315][ T4546]  ? __build_skb_around+0x1a0/0x200
[  504.053350][ T4546]  ? __alloc_skb+0x223/0x320
[  504.053376][ T4546]  netlink_sendmsg+0x471/0x6b0
[  504.053409][ T4546]  ? __pfx_netlink_sendmsg+0x10/0x10
[  504.053439][ T4546]  __sock_sendmsg+0x142/0x180
[  504.053527][ T4546]  ____sys_sendmsg+0x31e/0x4e0
[  504.053559][ T4546]  ___sys_sendmsg+0x17b/0x1d0
[  504.053671][ T4546]  __x64_sys_sendmsg+0xd4/0x160
[  504.053705][ T4546]  x64_sys_call+0x191e/0x2ff0
[  504.053727][ T4546]  do_syscall_64+0xd2/0x200
[  504.053754][ T4546]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  504.053855][ T4546]  ? clear_bhb_loop+0x40/0x90
[  504.053877][ T4546]  ? clear_bhb_loop+0x40/0x90
[  504.053900][ T4546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.053922][ T4546] RIP: 0033:0x7fe1e6f3e9a9
[  504.053938][ T4546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  504.054037][ T4546] RSP: 002b:00007fe1e55a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  504.054057][ T4546] RAX: ffffffffffffffda RBX: 00007fe1e7165fa0 RCX: 00007fe1e6f3e9a9
[  504.054071][ T4546] RDX: 0000000020000010 RSI: 0000200000000080 RDI: 0000000000000003
[  504.054084][ T4546] RBP: 00007fe1e55a7090 R08: 0000000000000000 R09: 0000000000000000
[  504.054097][ T4546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  504.054115][ T4546] R13: 0000000000000000 R14: 00007fe1e7165fa0 R15: 00007ffe7a3bf448
[  504.054136][ T4546]  </TASK>
[  504.441067][ T4560] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.7987' sets config #1
[  504.939176][ T4589] FAULT_INJECTION: forcing a failure.
[  504.939176][ T4589] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  504.952312][ T4589] CPU: 0 UID: 0 PID: 4589 Comm: syz.2.7994 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  504.952357][ T4589] Tainted: [W]=WARN
[  504.952364][ T4589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  504.952376][ T4589] Call Trace:
[  504.952385][ T4589]  <TASK>
[  504.952395][ T4589]  __dump_stack+0x1d/0x30
[  504.952423][ T4589]  dump_stack_lvl+0xe8/0x140
[  504.952483][ T4589]  dump_stack+0x15/0x1b
[  504.952505][ T4589]  should_fail_ex+0x265/0x280
[  504.952607][ T4589]  should_fail+0xb/0x20
[  504.952631][ T4589]  should_fail_usercopy+0x1a/0x20
[  504.952728][ T4589]  strncpy_from_user+0x25/0x230
[  504.952757][ T4589]  strncpy_from_user_nofault+0x68/0xf0
[  504.952820][ T4589]  bpf_probe_read_compat_str+0xb4/0x130
[  504.952865][ T4589]  bpf_prog_c1796171ffc7efef+0x3e/0x44
[  504.952887][ T4589]  bpf_trace_run4+0x117/0x1d0
[  504.952922][ T4589]  __traceiter_sched_switch+0x3c/0x60
[  504.952995][ T4589]  __schedule+0xa1f/0xb30
[  504.953034][ T4589]  ? schedule+0x5f/0xd0
[  504.953076][ T4589]  schedule+0x5f/0xd0
[  504.953178][ T4589]  cgroup_lock_and_drain_offline+0x362/0x4a0
[  504.953212][ T4589]  ? __pfx_autoremove_wake_function+0x10/0x10
[  504.953254][ T4589]  cgroup_kn_lock_live+0xea/0x1e0
[  504.953288][ T4589]  cgroup_subtree_control_write+0x289/0xb80
[  504.953450][ T4589]  ? _copy_from_iter+0x16d/0xe40
[  504.953491][ T4589]  ? __pfx_cgroup_subtree_control_write+0x10/0x10
[  504.953524][ T4589]  cgroup_file_write+0x194/0x350
[  504.953614][ T4589]  ? __pfx_cgroup_file_write+0x10/0x10
[  504.953660][ T4589]  kernfs_fop_write_iter+0x1c1/0x2d0
[  504.953689][ T4589]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  504.953740][ T4589]  vfs_write+0x49d/0x8e0
[  504.953778][ T4589]  ksys_write+0xda/0x1a0
[  504.953812][ T4589]  __x64_sys_write+0x40/0x50
[  504.953908][ T4589]  x64_sys_call+0x27fe/0x2ff0
[  504.953932][ T4589]  do_syscall_64+0xd2/0x200
[  504.953960][ T4589]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  504.953993][ T4589]  ? clear_bhb_loop+0x40/0x90
[  504.954028][ T4589]  ? clear_bhb_loop+0x40/0x90
[  504.954051][ T4589]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.954075][ T4589] RIP: 0033:0x7f108902e9a9
[  504.954091][ T4589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  504.954111][ T4589] RSP: 002b:00007f1087697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  504.954132][ T4589] RAX: ffffffffffffffda RBX: 00007f1089255fa0 RCX: 00007f108902e9a9
[  504.954146][ T4589] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000005
[  504.954181][ T4589] RBP: 00007f1087697090 R08: 0000000000000000 R09: 0000000000000000
[  504.954194][ T4589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  504.954207][ T4589] R13: 0000000000000000 R14: 00007f1089255fa0 R15: 00007fff4ee89c58
[  504.954228][ T4589]  </TASK>
[  505.333100][ T4623] tipc: Started in network mode
[  505.338101][ T4623] tipc: Node identity ac14140f, cluster identity 4711
[  505.351346][ T4623] tipc: New replicast peer: 255.255.255.255
[  505.357754][ T4623] tipc: Enabled bearer <udp:syz2>, priority 10
[  505.470549][ T4634] netem: change failed
[  505.643650][ T4654] FAULT_INJECTION: forcing a failure.
[  505.643650][ T4654] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  505.657007][ T4654] CPU: 0 UID: 0 PID: 4654 Comm: syz.6.8012 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  505.657046][ T4654] Tainted: [W]=WARN
[  505.657055][ T4654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  505.657071][ T4654] Call Trace:
[  505.657111][ T4654]  <TASK>
[  505.657117][ T4654]  __dump_stack+0x1d/0x30
[  505.657149][ T4654]  dump_stack_lvl+0xe8/0x140
[  505.657194][ T4654]  dump_stack+0x15/0x1b
[  505.657215][ T4654]  should_fail_ex+0x265/0x280
[  505.657260][ T4654]  should_fail+0xb/0x20
[  505.657287][ T4654]  should_fail_usercopy+0x1a/0x20
[  505.657321][ T4654]  _copy_to_user+0x20/0xa0
[  505.657357][ T4654]  simple_read_from_buffer+0xb5/0x130
[  505.657426][ T4654]  proc_fail_nth_read+0x100/0x140
[  505.657454][ T4654]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  505.657554][ T4654]  vfs_read+0x19d/0x6f0
[  505.657591][ T4654]  ? __rcu_read_unlock+0x4f/0x70
[  505.657620][ T4654]  ? __fget_files+0x184/0x1c0
[  505.657647][ T4654]  ksys_read+0xda/0x1a0
[  505.657734][ T4654]  __x64_sys_read+0x40/0x50
[  505.657774][ T4654]  x64_sys_call+0x27bc/0x2ff0
[  505.657801][ T4654]  do_syscall_64+0xd2/0x200
[  505.657837][ T4654]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  505.657944][ T4654]  ? clear_bhb_loop+0x40/0x90
[  505.657965][ T4654]  ? clear_bhb_loop+0x40/0x90
[  505.657987][ T4654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.658065][ T4654] RIP: 0033:0x7f3ff18dd3bc
[  505.658085][ T4654] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  505.658108][ T4654] RSP: 002b:00007f3feff3f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  505.658136][ T4654] RAX: ffffffffffffffda RBX: 00007f3ff1b05fa0 RCX: 00007f3ff18dd3bc
[  505.658213][ T4654] RDX: 000000000000000f RSI: 00007f3feff3f0a0 RDI: 0000000000000007
[  505.658226][ T4654] RBP: 00007f3feff3f090 R08: 0000000000000000 R09: 0000000000000000
[  505.658238][ T4654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  505.658282][ T4654] R13: 0000000000000000 R14: 00007f3ff1b05fa0 R15: 00007ffda26f2c18
[  505.658308][ T4654]  </TASK>
[  506.201053][ T4690] ALSA: seq fatal error: cannot create timer (-22)
[  506.216459][ T4704] __nla_validate_parse: 4 callbacks suppressed
[  506.216478][ T4704] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8030'.
[  506.257679][ T4704] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8030'.
[  506.289884][ T4713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8032'.
[  506.308398][   T29] kauditd_printk_skb: 200 callbacks suppressed
[  506.308417][   T29] audit: type=1326 audit(1753851006.275:20130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="syz.6.8035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff18de9a9 code=0x7ffc0000
[  506.366925][   T29] audit: type=1326 audit(1753851006.315:20131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="syz.6.8035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ff18de9a9 code=0x7ffc0000
[  506.390638][   T29] audit: type=1326 audit(1753851006.315:20132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="syz.6.8035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff18de9a9 code=0x7ffc0000
[  506.414860][   T29] audit: type=1326 audit(1753851006.315:20133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="syz.6.8035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff18de9a9 code=0x7ffc0000
[  506.438439][   T29] audit: type=1326 audit(1753851006.315:20134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="syz.6.8035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ff18de9a9 code=0x7ffc0000
[  506.461992][   T29] audit: type=1326 audit(1753851006.315:20135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="syz.6.8035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff18de9a9 code=0x7ffc0000
[  506.485768][   T29] audit: type=1326 audit(1753851006.315:20136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="syz.6.8035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff18de9a9 code=0x7ffc0000
[  506.509666][   T29] audit: type=1326 audit(1753851006.315:20137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="syz.6.8035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f3ff18de9a9 code=0x7ffc0000
[  506.533303][   T29] audit: type=1326 audit(1753851006.315:20138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="syz.6.8035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff18de9a9 code=0x7ffc0000
[  506.557151][   T29] audit: type=1326 audit(1753851006.315:20139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="syz.6.8035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3ff18de9a9 code=0x7ffc0000
[  506.557210][ T4729] futex_wake_op: syz.6.8038 tries to shift op by -1; fix this program
[  506.589268][T19140] tipc: Node number set to 2886997007
[  506.912540][ T4769] ALSA: seq fatal error: cannot create timer (-22)
[  506.919594][ T4775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=4775 comm=syz.9.8044
[  506.939774][ T4777] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8048'.
[  507.125331][ T4798] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8056'.
[  507.264970][ T4811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8061'.
[  507.303325][ T4811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8061'.
[  507.349205][ T4820] FAULT_INJECTION: forcing a failure.
[  507.349205][ T4820] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  507.362560][ T4820] CPU: 0 UID: 0 PID: 4820 Comm: syz.2.8063 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  507.362600][ T4820] Tainted: [W]=WARN
[  507.362609][ T4820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  507.362626][ T4820] Call Trace:
[  507.362634][ T4820]  <TASK>
[  507.362643][ T4820]  __dump_stack+0x1d/0x30
[  507.362671][ T4820]  dump_stack_lvl+0xe8/0x140
[  507.362776][ T4820]  dump_stack+0x15/0x1b
[  507.362797][ T4820]  should_fail_ex+0x265/0x280
[  507.362828][ T4820]  should_fail+0xb/0x20
[  507.362855][ T4820]  should_fail_usercopy+0x1a/0x20
[  507.362962][ T4820]  _copy_from_user+0x1c/0xb0
[  507.363003][ T4820]  __sys_bpf+0x178/0x790
[  507.363051][ T4820]  __x64_sys_bpf+0x41/0x50
[  507.363139][ T4820]  x64_sys_call+0x2aea/0x2ff0
[  507.363161][ T4820]  do_syscall_64+0xd2/0x200
[  507.363191][ T4820]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  507.363226][ T4820]  ? clear_bhb_loop+0x40/0x90
[  507.363290][ T4820]  ? clear_bhb_loop+0x40/0x90
[  507.363319][ T4820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.363347][ T4820] RIP: 0033:0x7f108902e9a9
[  507.363366][ T4820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  507.363448][ T4820] RSP: 002b:00007f1087697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  507.363522][ T4820] RAX: ffffffffffffffda RBX: 00007f1089255fa0 RCX: 00007f108902e9a9
[  507.363539][ T4820] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 0000000000000018
[  507.363556][ T4820] RBP: 00007f1087697090 R08: 0000000000000000 R09: 0000000000000000
[  507.363573][ T4820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  507.363590][ T4820] R13: 0000000000000000 R14: 00007f1089255fa0 R15: 00007fff4ee89c58
[  507.363613][ T4820]  </TASK>
[  507.553559][ T4805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8058'.
[  507.607971][ T4828] FAULT_INJECTION: forcing a failure.
[  507.607971][ T4828] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  507.621246][ T4828] CPU: 1 UID: 0 PID: 4828 Comm: syz.6.8066 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  507.621285][ T4828] Tainted: [W]=WARN
[  507.621292][ T4828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  507.621318][ T4828] Call Trace:
[  507.621326][ T4828]  <TASK>
[  507.621334][ T4828]  __dump_stack+0x1d/0x30
[  507.621356][ T4828]  dump_stack_lvl+0xe8/0x140
[  507.621438][ T4828]  dump_stack+0x15/0x1b
[  507.621574][ T4828]  should_fail_ex+0x265/0x280
[  507.621599][ T4828]  should_fail+0xb/0x20
[  507.621624][ T4828]  should_fail_usercopy+0x1a/0x20
[  507.621700][ T4828]  strncpy_from_user+0x25/0x230
[  507.621777][ T4828]  ? kmem_cache_alloc_noprof+0x186/0x310
[  507.621806][ T4828]  ? getname_flags+0x80/0x3b0
[  507.621863][ T4828]  getname_flags+0xae/0x3b0
[  507.621891][ T4828]  user_path_at+0x28/0x130
[  507.621924][ T4828]  __se_sys_mount+0x25b/0x2e0
[  507.621998][ T4828]  ? fput+0x8f/0xc0
[  507.622036][ T4828]  __x64_sys_mount+0x67/0x80
[  507.622069][ T4828]  x64_sys_call+0x2b4d/0x2ff0
[  507.622094][ T4828]  do_syscall_64+0xd2/0x200
[  507.622203][ T4828]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  507.622230][ T4828]  ? clear_bhb_loop+0x40/0x90
[  507.622258][ T4828]  ? clear_bhb_loop+0x40/0x90
[  507.622285][ T4828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.622363][ T4828] RIP: 0033:0x7f3ff18de9a9
[  507.622382][ T4828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  507.622408][ T4828] RSP: 002b:00007f3feff3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  507.622432][ T4828] RAX: ffffffffffffffda RBX: 00007f3ff1b05fa0 RCX: 00007f3ff18de9a9
[  507.622448][ T4828] RDX: 00002000000002c0 RSI: 0000200000000180 RDI: 0000000000000000
[  507.622463][ T4828] RBP: 00007f3feff3f090 R08: 00002000000000c0 R09: 0000000000000000
[  507.622487][ T4828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  507.622499][ T4828] R13: 0000000000000000 R14: 00007f3ff1b05fa0 R15: 00007ffda26f2c18
[  507.622518][ T4828]  </TASK>
[  507.834168][ T4833] bridge0: entered promiscuous mode
[  507.843972][ T4833] bridge0: port 3(macsec1) entered blocking state
[  507.850660][ T4833] bridge0: port 3(macsec1) entered disabled state
[  507.857869][ T4833] macsec1: entered allmulticast mode
[  507.863360][ T4833] bridge0: entered allmulticast mode
[  507.871165][ T4833] macsec1: left allmulticast mode
[  507.876355][ T4833] bridge0: left allmulticast mode
[  507.884430][ T4833] bridge0: left promiscuous mode
[  507.934947][ T4851] netlink: 'syz.5.8072': attribute type 1 has an invalid length.
[  507.960022][ T4851] 8021q: adding VLAN 0 to HW filter on device bond1
[  507.970295][ T4851] FAULT_INJECTION: forcing a failure.
[  507.970295][ T4851] name failslab, interval 1, probability 0, space 0, times 0
[  507.983089][ T4851] CPU: 1 UID: 0 PID: 4851 Comm: syz.5.8072 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  507.983237][ T4851] Tainted: [W]=WARN
[  507.983246][ T4851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  507.983259][ T4851] Call Trace:
[  507.983303][ T4851]  <TASK>
[  507.983312][ T4851]  __dump_stack+0x1d/0x30
[  507.983352][ T4851]  dump_stack_lvl+0xe8/0x140
[  507.983377][ T4851]  dump_stack+0x15/0x1b
[  507.983423][ T4851]  should_fail_ex+0x265/0x280
[  507.983456][ T4851]  should_failslab+0x8c/0xb0
[  507.983484][ T4851]  kmem_cache_alloc_noprof+0x50/0x310
[  507.983575][ T4851]  ? skb_clone+0x151/0x1f0
[  507.983626][ T4851]  skb_clone+0x151/0x1f0
[  507.983658][ T4851]  __netlink_deliver_tap+0x2c9/0x500
[  507.983773][ T4851]  netlink_unicast+0x653/0x680
[  507.983806][ T4851]  netlink_sendmsg+0x58b/0x6b0
[  507.983842][ T4851]  ? __pfx_netlink_sendmsg+0x10/0x10
[  507.983870][ T4851]  __sock_sendmsg+0x142/0x180
[  507.983961][ T4851]  ____sys_sendmsg+0x31e/0x4e0
[  507.983990][ T4851]  ___sys_sendmsg+0x17b/0x1d0
[  507.984035][ T4851]  __x64_sys_sendmsg+0xd4/0x160
[  507.984064][ T4851]  x64_sys_call+0x191e/0x2ff0
[  507.984113][ T4851]  do_syscall_64+0xd2/0x200
[  507.984146][ T4851]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  507.984179][ T4851]  ? clear_bhb_loop+0x40/0x90
[  507.984249][ T4851]  ? clear_bhb_loop+0x40/0x90
[  507.984280][ T4851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.984428][ T4851] RIP: 0033:0x7fe1e6f3e9a9
[  507.984448][ T4851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  507.984471][ T4851] RSP: 002b:00007fe1e55a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  507.984495][ T4851] RAX: ffffffffffffffda RBX: 00007fe1e7165fa0 RCX: 00007fe1e6f3e9a9
[  507.984512][ T4851] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  507.984527][ T4851] RBP: 00007fe1e55a7090 R08: 0000000000000000 R09: 0000000000000000
[  507.984543][ T4851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  507.984609][ T4851] R13: 0000000000000000 R14: 00007fe1e7165fa0 R15: 00007ffe7a3bf448
[  507.984632][ T4851]  </TASK>
[  507.984671][ T4851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8072'.
[  508.040092][ T4888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8074'.
[  508.226849][ T4851] bond1 (unregistering): Released all slaves
[  508.525500][ T4952] FAULT_INJECTION: forcing a failure.
[  508.525500][ T4952] name failslab, interval 1, probability 0, space 0, times 0
[  508.538321][ T4952] CPU: 0 UID: 0 PID: 4952 Comm: syz.5.8085 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  508.538363][ T4952] Tainted: [W]=WARN
[  508.538372][ T4952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  508.538389][ T4952] Call Trace:
[  508.538459][ T4952]  <TASK>
[  508.538468][ T4952]  __dump_stack+0x1d/0x30
[  508.538494][ T4952]  dump_stack_lvl+0xe8/0x140
[  508.538518][ T4952]  dump_stack+0x15/0x1b
[  508.538592][ T4952]  should_fail_ex+0x265/0x280
[  508.538623][ T4952]  ? __pfx_cond_bools_destroy+0x10/0x10
[  508.538684][ T4952]  should_failslab+0x8c/0xb0
[  508.538709][ T4952]  kmem_cache_alloc_noprof+0x50/0x310
[  508.538736][ T4952]  ? hashtab_duplicate+0xfe/0x360
[  508.538760][ T4952]  ? __pfx_cond_bools_destroy+0x10/0x10
[  508.538801][ T4952]  hashtab_duplicate+0xfe/0x360
[  508.538832][ T4952]  ? __pfx_cond_bools_copy+0x10/0x10
[  508.538867][ T4952]  cond_policydb_dup+0xd2/0x4e0
[  508.538937][ T4952]  security_set_bools+0xa0/0x340
[  508.539088][ T4952]  sel_commit_bools_write+0x1ea/0x270
[  508.539124][ T4952]  vfs_writev+0x406/0x8b0
[  508.539151][ T4952]  ? __pfx_sel_commit_bools_write+0x10/0x10
[  508.539310][ T4952]  ? mutex_lock+0xd/0x30
[  508.539336][ T4952]  do_writev+0xe7/0x210
[  508.539367][ T4952]  __x64_sys_writev+0x45/0x50
[  508.539391][ T4952]  x64_sys_call+0x1e9a/0x2ff0
[  508.539417][ T4952]  do_syscall_64+0xd2/0x200
[  508.539460][ T4952]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  508.539488][ T4952]  ? clear_bhb_loop+0x40/0x90
[  508.539536][ T4952]  ? clear_bhb_loop+0x40/0x90
[  508.539564][ T4952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.539587][ T4952] RIP: 0033:0x7fe1e6f3e9a9
[  508.539602][ T4952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  508.539620][ T4952] RSP: 002b:00007fe1e55a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  508.539704][ T4952] RAX: ffffffffffffffda RBX: 00007fe1e7165fa0 RCX: 00007fe1e6f3e9a9
[  508.539716][ T4952] RDX: 0000000000000002 RSI: 00002000000025c0 RDI: 0000000000000003
[  508.539728][ T4952] RBP: 00007fe1e55a7090 R08: 0000000000000000 R09: 0000000000000000
[  508.539741][ T4952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  508.539753][ T4952] R13: 0000000000000000 R14: 00007fe1e7165fa0 R15: 00007ffe7a3bf448
[  508.539772][ T4952]  </TASK>
[  509.108021][ T4893] syz.9.8076 (4893) used greatest stack depth: 6952 bytes left
[  509.405941][ T5019] netlink: 'syz.2.8102': attribute type 1 has an invalid length.
[  509.435302][ T5029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  509.443919][ T5029] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  509.533901][ T5019] 8021q: adding VLAN 0 to HW filter on device bond1
[  510.051091][ T5117] program syz.2.8112 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  510.060703][ T5117] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  510.230618][ T5153] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5153 comm=syz.5.8118
[  510.243506][ T5153] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=5153 comm=syz.5.8118
[  510.256423][ T5153] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2572 sclass=netlink_tcpdiag_socket pid=5153 comm=syz.5.8118
[  510.269285][ T5153] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2578 sclass=netlink_tcpdiag_socket pid=5153 comm=syz.5.8118
[  510.282177][ T5153] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2582 sclass=netlink_tcpdiag_socket pid=5153 comm=syz.5.8118
[  510.295057][ T5153] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=5153 comm=syz.5.8118
[  510.314061][ T5153] tipc: Started in network mode
[  510.318998][ T5153] tipc: Node identity ac14140f, cluster identity 4711
[  510.326398][ T5153] tipc: New replicast peer: 255.255.255.255
[  510.332584][ T5153] tipc: Enabled bearer <udp:syz2>, priority 10
[  510.345359][ T5163] FAULT_INJECTION: forcing a failure.
[  510.345359][ T5163] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  510.358660][ T5163] CPU: 0 UID: 0 PID: 5163 Comm: syz.9.8122 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  510.358799][ T5163] Tainted: [W]=WARN
[  510.358808][ T5163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  510.358826][ T5163] Call Trace:
[  510.358834][ T5163]  <TASK>
[  510.358845][ T5163]  __dump_stack+0x1d/0x30
[  510.358871][ T5163]  dump_stack_lvl+0xe8/0x140
[  510.358928][ T5163]  dump_stack+0x15/0x1b
[  510.358945][ T5163]  should_fail_ex+0x265/0x280
[  510.358976][ T5163]  should_fail_alloc_page+0xf2/0x100
[  510.359007][ T5163]  __alloc_frozen_pages_noprof+0xff/0x360
[  510.359143][ T5163]  alloc_pages_mpol+0xb3/0x250
[  510.359183][ T5163]  vma_alloc_folio_noprof+0x1aa/0x300
[  510.359230][ T5163]  handle_mm_fault+0xec2/0x2be0
[  510.359250][ T5163]  ? __rcu_read_lock+0x37/0x50
[  510.359283][ T5163]  __get_user_pages+0x1036/0x1fb0
[  510.359344][ T5163]  __gup_longterm_locked+0x9c9/0x1010
[  510.359442][ T5163]  ? selinux_ptrace_access_check+0x102/0x110
[  510.359481][ T5163]  ? security_ptrace_access_check+0x69/0x80
[  510.359519][ T5163]  ? __ptrace_may_access+0x2c3/0x340
[  510.359585][ T5163]  pin_user_pages_remote+0x7e/0xb0
[  510.359616][ T5163]  process_vm_rw+0x484/0x950
[  510.359770][ T5163]  __x64_sys_process_vm_writev+0x78/0x90
[  510.359859][ T5163]  x64_sys_call+0x2a7c/0x2ff0
[  510.359886][ T5163]  do_syscall_64+0xd2/0x200
[  510.359917][ T5163]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  510.359943][ T5163]  ? clear_bhb_loop+0x40/0x90
[  510.360009][ T5163]  ? clear_bhb_loop+0x40/0x90
[  510.360031][ T5163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.360057][ T5163] RIP: 0033:0x7faba591e9a9
[  510.360076][ T5163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  510.360231][ T5163] RSP: 002b:00007faba3f87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[  510.360252][ T5163] RAX: ffffffffffffffda RBX: 00007faba5b45fa0 RCX: 00007faba591e9a9
[  510.360265][ T5163] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 000000000000018d
[  510.360278][ T5163] RBP: 00007faba3f87090 R08: 0000000000000001 R09: 0000000000000000
[  510.360290][ T5163] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001
[  510.360306][ T5163] R13: 0000000000000000 R14: 00007faba5b45fa0 R15: 00007ffcf49c4d98
[  510.360331][ T5163]  </TASK>
[  510.581265][ T5186] FAULT_INJECTION: forcing a failure.
[  510.581265][ T5186] name failslab, interval 1, probability 0, space 0, times 0
[  510.581378][ T5186] CPU: 0 UID: 0 PID: 5186 Comm: syz.2.8126 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  510.581501][ T5186] Tainted: [W]=WARN
[  510.581510][ T5186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  510.581527][ T5186] Call Trace:
[  510.581533][ T5186]  <TASK>
[  510.581540][ T5186]  __dump_stack+0x1d/0x30
[  510.581560][ T5186]  dump_stack_lvl+0xe8/0x140
[  510.581621][ T5186]  dump_stack+0x15/0x1b
[  510.581644][ T5186]  should_fail_ex+0x265/0x280
[  510.581676][ T5186]  should_failslab+0x8c/0xb0
[  510.581704][ T5186]  __kmalloc_noprof+0xa5/0x3e0
[  510.581739][ T5186]  ? vmalloc_info_show+0x3f/0x850
[  510.581897][ T5186]  vmalloc_info_show+0x3f/0x850
[  510.581925][ T5186]  ? seq_read_iter+0x404/0x940
[  510.581960][ T5186]  seq_read_iter+0x319/0x940
[  510.581998][ T5186]  proc_reg_read_iter+0x110/0x180
[  510.582072][ T5186]  ? __pfx_proc_reg_read_iter+0x10/0x10
[  510.582104][ T5186]  vfs_read+0x5cd/0x6f0
[  510.582155][ T5186]  ? __pfx_proc_reg_read_iter+0x10/0x10
[  510.582195][ T5186]  ksys_read+0xda/0x1a0
[  510.582235][ T5186]  __x64_sys_read+0x40/0x50
[  510.582273][ T5186]  x64_sys_call+0x27bc/0x2ff0
[  510.582300][ T5186]  do_syscall_64+0xd2/0x200
[  510.582342][ T5186]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  510.582374][ T5186]  ? clear_bhb_loop+0x40/0x90
[  510.582401][ T5186]  ? clear_bhb_loop+0x40/0x90
[  510.582444][ T5186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.582470][ T5186] RIP: 0033:0x7f108902e9a9
[  510.582489][ T5186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  510.582514][ T5186] RSP: 002b:00007f1087697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  510.582539][ T5186] RAX: ffffffffffffffda RBX: 00007f1089255fa0 RCX: 00007f108902e9a9
[  510.582556][ T5186] RDX: 0000000000000ffc RSI: 00002000000000c0 RDI: 0000000000000003
[  510.582653][ T5186] RBP: 00007f1087697090 R08: 0000000000000000 R09: 0000000000000000
[  510.582719][ T5186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  510.582736][ T5186] R13: 0000000000000000 R14: 00007f1089255fa0 R15: 00007fff4ee89c58
[  510.582761][ T5186]  </TASK>
[  510.670555][ T5203] netlink: 'syz.9.8129': attribute type 21 has an invalid length.
[  511.319843][   T29] kauditd_printk_skb: 288 callbacks suppressed
[  511.319873][   T29] audit: type=1400 audit(1753851011.285:20428): avc:  denied  { create } for  pid=5238 comm="syz.0.8142" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  511.349958][ T5241] ALSA: seq fatal error: cannot create timer (-22)
[  511.360672][   T29] audit: type=1400 audit(1753851011.315:20429): avc:  denied  { create } for  pid=5238 comm="syz.0.8142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  511.380480][   T29] audit: type=1326 audit(1753851011.315:20430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.5.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e6f3e9a9 code=0x7ffc0000
[  511.404003][   T29] audit: type=1326 audit(1753851011.315:20431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.5.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe1e6f3e9a9 code=0x7ffc0000
[  511.427652][   T29] audit: type=1326 audit(1753851011.315:20432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.5.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e6f3e9a9 code=0x7ffc0000
[  511.451292][   T29] audit: type=1326 audit(1753851011.315:20433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.5.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1e6f3e9a9 code=0x7ffc0000
[  511.452019][ T3386] tipc: Node number set to 2886997007
[  511.474912][   T29] audit: type=1326 audit(1753851011.315:20434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.5.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e6f3e9a9 code=0x7ffc0000
[  511.504281][   T29] audit: type=1326 audit(1753851011.315:20435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.5.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1e6f3e9a9 code=0x7ffc0000
[  511.527869][   T29] audit: type=1326 audit(1753851011.315:20436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.5.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e6f3e9a9 code=0x7ffc0000
[  511.551461][   T29] audit: type=1326 audit(1753851011.315:20437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.5.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fe1e6f3e9a9 code=0x7ffc0000
[  511.985259][ T5297] pim6reg1: entered promiscuous mode
[  511.990642][ T5297] pim6reg1: entered allmulticast mode
[  512.009240][ T5276] __nla_validate_parse: 4 callbacks suppressed
[  512.009265][ T5276] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8157'.
[  512.219395][ T5313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8162'.
[  512.343714][ T5332] vhci_hcd: invalid port number 96
[  512.348886][ T5332] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  512.400896][ T5339] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8174'.
[  512.587500][ T5369] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8188'.
[  513.156701][ T5431] FAULT_INJECTION: forcing a failure.
[  513.156701][ T5431] name failslab, interval 1, probability 0, space 0, times 0
[  513.169469][ T5431] CPU: 1 UID: 0 PID: 5431 Comm: +}[@ Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  513.169529][ T5431] Tainted: [W]=WARN
[  513.169538][ T5431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  513.169554][ T5431] Call Trace:
[  513.169563][ T5431]  <TASK>
[  513.169580][ T5431]  __dump_stack+0x1d/0x30
[  513.169607][ T5431]  dump_stack_lvl+0xe8/0x140
[  513.169647][ T5431]  dump_stack+0x15/0x1b
[  513.169669][ T5431]  should_fail_ex+0x265/0x280
[  513.169703][ T5431]  should_failslab+0x8c/0xb0
[  513.169733][ T5431]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  513.169771][ T5431]  ? kstrdup_const+0x3e/0x50
[  513.169853][ T5431]  kstrdup+0x3e/0xd0
[  513.169874][ T5431]  kstrdup_const+0x3e/0x50
[  513.169895][ T5431]  alloc_vfsmnt+0xe7/0x300
[  513.169949][ T5431]  clone_mnt+0x46/0x630
[  513.169976][ T5431]  copy_tree+0x2cd/0x8c0
[  513.170024][ T5431]  copy_mnt_ns+0x120/0x5c0
[  513.170065][ T5431]  ? kmem_cache_alloc_noprof+0x220/0x310
[  513.170150][ T5431]  ? create_new_namespaces+0x3c/0x3d0
[  513.170192][ T5431]  create_new_namespaces+0x83/0x3d0
[  513.170272][ T5431]  unshare_nsproxy_namespaces+0xe8/0x120
[  513.170315][ T5431]  ksys_unshare+0x3d0/0x6d0
[  513.170349][ T5431]  ? ksys_write+0x192/0x1a0
[  513.170389][ T5431]  __x64_sys_unshare+0x1f/0x30
[  513.170417][ T5431]  x64_sys_call+0x2911/0x2ff0
[  513.170681][ T5431]  do_syscall_64+0xd2/0x200
[  513.170715][ T5431]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  513.170743][ T5431]  ? clear_bhb_loop+0x40/0x90
[  513.170766][ T5431]  ? clear_bhb_loop+0x40/0x90
[  513.170848][ T5431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.170876][ T5431] RIP: 0033:0x7faba591e9a9
[  513.170896][ T5431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  513.170921][ T5431] RSP: 002b:00007faba3f87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  513.170958][ T5431] RAX: ffffffffffffffda RBX: 00007faba5b45fa0 RCX: 00007faba591e9a9
[  513.170992][ T5431] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020060400
[  513.171008][ T5431] RBP: 00007faba3f87090 R08: 0000000000000000 R09: 0000000000000000
[  513.171024][ T5431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  513.171039][ T5431] R13: 0000000000000000 R14: 00007faba5b45fa0 R15: 00007ffcf49c4d98
[  513.171064][ T5431]  </TASK>
[  513.443619][ T5439] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8216'.
[  513.588731][ T5453] 9pnet_fd: Insufficient options for proto=fd
[  513.684464][ T5453] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8222'.
[  513.731277][ T5458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  513.750158][ T5458] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  513.772933][ T5457] ref_ctr going negative. vaddr: 0x200000002082, curr val: 0, delta: -1
[  513.781370][ T5457] ref_ctr decrement failed for inode: 0x917 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810005d800
[  513.809995][ T5457] ref_ctr going negative. vaddr: 0x200000002082, curr val: 0, delta: -1
[  513.818477][ T5457] ref_ctr decrement failed for inode: 0x917 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810005d800
[  513.825196][ T5466] tmpfs: Bad value for 'mpol'
[  513.829974][ T5457] uprobe: syz.2.8223:5457 failed to unregister, leaking uprobe
[  513.875147][ T5473] FAULT_INJECTION: forcing a failure.
[  513.875147][ T5473] name failslab, interval 1, probability 0, space 0, times 0
[  513.887918][ T5473] CPU: 0 UID: 0 PID: 5473 Comm: syz.5.8228 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  513.887952][ T5473] Tainted: [W]=WARN
[  513.887958][ T5473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  513.887971][ T5473] Call Trace:
[  513.887976][ T5473]  <TASK>
[  513.887983][ T5473]  __dump_stack+0x1d/0x30
[  513.888009][ T5473]  dump_stack_lvl+0xe8/0x140
[  513.888034][ T5473]  dump_stack+0x15/0x1b
[  513.888051][ T5473]  should_fail_ex+0x265/0x280
[  513.888076][ T5473]  should_failslab+0x8c/0xb0
[  513.888098][ T5473]  kmem_cache_alloc_noprof+0x50/0x310
[  513.888126][ T5473]  ? vm_area_dup+0x33/0x2c0
[  513.888160][ T5473]  ? __rcu_read_unlock+0x4f/0x70
[  513.888191][ T5473]  vm_area_dup+0x33/0x2c0
[  513.888227][ T5473]  __split_vma+0xe9/0x650
[  513.888263][ T5473]  ? selinux_file_open+0x2df/0x330
[  513.888295][ T5473]  vms_gather_munmap_vmas+0x172/0x7a0
[  513.888318][ T5473]  ? mntput_no_expire+0x6f/0x460
[  513.888346][ T5473]  ? mntput+0x4b/0x80
[  513.888372][ T5473]  do_vmi_align_munmap+0x1a4/0x3d0
[  513.888412][ T5473]  do_vmi_munmap+0x1db/0x220
[  513.888441][ T5473]  mremap_at+0x100/0x690
[  513.888478][ T5473]  __se_sys_mremap+0x452/0x6f0
[  513.888518][ T5473]  ? ksys_write+0x192/0x1a0
[  513.888559][ T5473]  __x64_sys_mremap+0x67/0x80
[  513.888591][ T5473]  x64_sys_call+0x2a24/0x2ff0
[  513.888618][ T5473]  do_syscall_64+0xd2/0x200
[  513.888651][ T5473]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  513.888685][ T5473]  ? clear_bhb_loop+0x40/0x90
[  513.888712][ T5473]  ? clear_bhb_loop+0x40/0x90
[  513.888739][ T5473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.888765][ T5473] RIP: 0033:0x7fe1e6f3e9a9
[  513.888785][ T5473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  513.888808][ T5473] RSP: 002b:00007fe1e55a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  513.888833][ T5473] RAX: ffffffffffffffda RBX: 00007fe1e7165fa0 RCX: 00007fe1e6f3e9a9
[  513.888849][ T5473] RDX: 0000000000001000 RSI: 0000000000c00000 RDI: 0000200000400000
[  513.888865][ T5473] RBP: 00007fe1e55a7090 R08: 00002000008b5000 R09: 0000000000000000
[  513.888881][ T5473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  513.888896][ T5473] R13: 0000000000000000 R14: 00007fe1e7165fa0 R15: 00007ffe7a3bf448
[  513.888921][ T5473]  </TASK>
[  514.126239][ T5470] 9pnet_fd: Insufficient options for proto=fd
[  514.382352][ T5487] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8234'.
[  515.498445][ T5551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8240'.
[  516.406542][ T5524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  516.415066][ T5524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  516.435546][   T29] kauditd_printk_skb: 214 callbacks suppressed
[  516.435566][   T29] audit: type=1400 audit(1753851015.905:20652): avc:  denied  { create } for  pid=5517 comm="syz.9.8237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  516.461857][   T29] audit: type=1400 audit(1753851016.335:20653): avc:  denied  { ioctl } for  pid=5517 comm="syz.9.8237" path="socket:[94366]" dev="sockfs" ino=94366 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  516.720448][   T29] audit: type=1400 audit(1753851016.685:20654): avc:  denied  { write } for  pid=5582 comm="syz.0.8251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  516.751723][   T29] audit: type=1326 audit(1753851016.715:20655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.2.8249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108902e9a9 code=0x7ffc0000
[  516.775429][   T29] audit: type=1326 audit(1753851016.715:20656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.2.8249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f108902e9a9 code=0x7ffc0000
[  516.799018][   T29] audit: type=1326 audit(1753851016.715:20657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.2.8249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108902e9a9 code=0x7ffc0000
[  516.822564][   T29] audit: type=1326 audit(1753851016.715:20658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.2.8249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f108902e9a9 code=0x7ffc0000
[  516.846211][   T29] audit: type=1326 audit(1753851016.715:20659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.2.8249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108902e9a9 code=0x7ffc0000
[  516.847918][ T5596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8251'.
[  516.869762][   T29] audit: type=1326 audit(1753851016.715:20660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.2.8249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f108902e9a9 code=0x7ffc0000
[  516.869801][   T29] audit: type=1326 audit(1753851016.715:20661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.2.8249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108902e9a9 code=0x7ffc0000
[  516.981729][ T5615] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8254'.
[  517.021275][ T5619] netlink: 'syz.6.8256': attribute type 46 has an invalid length.
[  517.030779][ T5583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8251'.
[  517.065010][ T5623] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.077835][ T5619] x_tables: ip6_tables: mh match: only valid for protocol 135
[  517.099194][ T5596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8251'.
[  517.140299][ T5623] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.186329][ T5623] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.218503][ T5656] usb usb8: usbfs: process 5656 (syz.0.8261) did not claim interface 7 before use
[  517.297690][ T5623] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.364494][ T5623] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  517.370179][ T5668] ALSA: seq fatal error: cannot create timer (-22)
[  517.377229][ T5623] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  517.392922][ T5623] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  517.408504][ T5623] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  517.480256][ T5700] FAULT_INJECTION: forcing a failure.
[  517.480256][ T5700] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  517.493777][ T5700] CPU: 0 UID: 0 PID: 5700 Comm: syz.6.8274 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  517.493826][ T5700] Tainted: [W]=WARN
[  517.493833][ T5700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  517.493849][ T5700] Call Trace:
[  517.493857][ T5700]  <TASK>
[  517.493865][ T5700]  __dump_stack+0x1d/0x30
[  517.493952][ T5700]  dump_stack_lvl+0xe8/0x140
[  517.493978][ T5700]  dump_stack+0x15/0x1b
[  517.493997][ T5700]  should_fail_ex+0x265/0x280
[  517.494023][ T5700]  should_fail+0xb/0x20
[  517.494052][ T5700]  should_fail_usercopy+0x1a/0x20
[  517.494080][ T5700]  _copy_to_user+0x20/0xa0
[  517.494159][ T5700]  simple_read_from_buffer+0xb5/0x130
[  517.494195][ T5700]  proc_fail_nth_read+0x100/0x140
[  517.494296][ T5700]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  517.494323][ T5700]  vfs_read+0x19d/0x6f0
[  517.494361][ T5700]  ? __rcu_read_unlock+0x4f/0x70
[  517.494438][ T5700]  ? __fget_files+0x184/0x1c0
[  517.494460][ T5700]  ksys_read+0xda/0x1a0
[  517.494554][ T5700]  __x64_sys_read+0x40/0x50
[  517.494596][ T5700]  x64_sys_call+0x27bc/0x2ff0
[  517.494624][ T5700]  do_syscall_64+0xd2/0x200
[  517.494653][ T5700]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  517.494748][ T5700]  ? clear_bhb_loop+0x40/0x90
[  517.494830][ T5700]  ? clear_bhb_loop+0x40/0x90
[  517.494871][ T5700]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.494899][ T5700] RIP: 0033:0x7f3ff18dd3bc
[  517.494918][ T5700] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  517.494936][ T5700] RSP: 002b:00007f3feff1e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  517.494955][ T5700] RAX: ffffffffffffffda RBX: 00007f3ff1b06080 RCX: 00007f3ff18dd3bc
[  517.494968][ T5700] RDX: 000000000000000f RSI: 00007f3feff1e0a0 RDI: 0000000000000004
[  517.495029][ T5700] RBP: 00007f3feff1e090 R08: 0000000000000000 R09: 0000000000000000
[  517.495057][ T5700] R10: 0000000002004000 R11: 0000000000000246 R12: 0000000000000001
[  517.495073][ T5700] R13: 0000000000000001 R14: 00007f3ff1b06080 R15: 00007ffda26f2c18
[  517.495098][ T5700]  </TASK>
[  518.057178][ T5768] ALSA: seq fatal error: cannot create timer (-22)
[  518.129048][ T5782] netlink: 392 bytes leftover after parsing attributes in process `syz.2.8292'.
[  518.187107][ T5787] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  518.187107][ T5787] The task syz.5.8291 (5787) triggered the difference, watch for misbehavior.
[  518.260080][ T5789] pim6reg1: entered promiscuous mode
[  518.265583][ T5789] pim6reg1: entered allmulticast mode
[  518.463777][ T5835] SELinux: ebitmap: truncated map
[  518.480990][ T5835] SELinux: failed to load policy
[  518.761567][ T5886] ==================================================================
[  518.769716][ T5886] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry
[  518.777300][ T5886] 
[  518.779634][ T5886] write to 0xffff888103ccb610 of 8 bytes by task 5884 on cpu 1:
[  518.787281][ T5886]  mas_wr_store_entry+0x1581/0x2b50
[  518.792501][ T5886]  mas_store_prealloc+0x74d/0x9e0
[  518.797545][ T5886]  commit_merge+0x6a5/0x730
[  518.802237][ T5886]  vma_expand+0x1d0/0x370
[  518.806581][ T5886]  vma_merge_new_range+0x296/0x310
[  518.811708][ T5886]  mmap_region+0x9fa/0x1580
[  518.816237][ T5886]  do_mmap+0x9b3/0xbe0
[  518.820331][ T5886]  vm_mmap_pgoff+0x17a/0x2e0
[  518.824942][ T5886]  ksys_mmap_pgoff+0xc2/0x310
[  518.829670][ T5886]  x64_sys_call+0x14a3/0x2ff0
[  518.834371][ T5886]  do_syscall_64+0xd2/0x200
[  518.838905][ T5886]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.844816][ T5886] 
[  518.847150][ T5886] read to 0xffff888103ccb610 of 8 bytes by task 5886 on cpu 0:
[  518.854705][ T5886]  mas_state_walk+0x2f5/0x650
[  518.859400][ T5886]  mas_walk+0x30/0x120
[  518.863490][ T5886]  lock_vma_under_rcu+0xa2/0x2f0
[  518.868458][ T5886]  do_user_addr_fault+0x233/0x1090
[  518.873597][ T5886]  exc_page_fault+0x62/0xa0
[  518.878118][ T5886]  asm_exc_page_fault+0x26/0x30
[  518.883075][ T5886] 
[  518.885414][ T5886] value changed: 0x00007f1087655fff -> 0xffffffff85607850
[  518.892532][ T5886] 
[  518.894870][ T5886] Reported by Kernel Concurrency Sanitizer on:
[  518.901055][ T5886] CPU: 0 UID: 0 PID: 5886 Comm: syz.2.8311 Tainted: G        W           6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) 
[  518.914728][ T5886] Tainted: [W]=WARN
[  518.918546][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  518.928623][ T5886] ==================================================================