last executing test programs:

4m53.004903406s ago: executing program 32 (id=621):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x7, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x85}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x21680, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (fail_nth: 5)

2m10.521639713s ago: executing program 2 (id=2248):
creat(&(0x7f0000000080)='./file0\x00', 0xa)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r0, 0x0, 0x200000000000006}, 0x18)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r1, 0x400, 0x0)

2m9.865063515s ago: executing program 2 (id=2249):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
clock_settime(0x1, 0x0)

2m9.820913469s ago: executing program 2 (id=2252):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095", @ANYRESOCT=r0, @ANYRES8=r0, @ANYRESOCT=r0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg1\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x25, &(0x7f00000000c0)={0x2, 0x1, 0x1ab5, 0x2e})

2m9.68946062s ago: executing program 2 (id=2253):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
semget$private(0x0, 0x4, 0x1)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18060000000000000000000000000000183000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x90, &(0x7f0000000100)=""/144}, 0x94)
open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080), 0xc2, 0x7b7, &(0x7f00000007c0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00ba3f03014f67a00000100005ff00000000002376e21b000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4040, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r8, r7, 0x0, 0x3a)
sendmsg$AUDIT_LIST_RULES(r6, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3f5, 0x10, 0x70bd25, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4041}, 0x4048804)
r9 = getpid()
r10 = syz_pidfd_open(r9, 0x0)
r11 = pidfd_getfd(r10, r10, 0x0)
setns(r11, 0x66020000)
ioctl$VFAT_IOCTL_READDIR_BOTH(r11, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

2m8.520684794s ago: executing program 2 (id=2262):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
clock_settime(0x1, 0x0)

2m8.306046671s ago: executing program 2 (id=2268):
creat(&(0x7f0000000080)='./file0\x00', 0xe)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000003c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', 0x0, 0x24, 0x3)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000480)='./file0\x00', 0xc80, &(0x7f0000000380)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d634a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4100000149e6d3e6cae315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d62310356f0f8a01a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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")
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7, 0xa}, 0x10001, 0x9}}, &(0x7f0000000000), 0x0)

2m8.285062193s ago: executing program 33 (id=2268):
creat(&(0x7f0000000080)='./file0\x00', 0xe)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000003c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', 0x0, 0x24, 0x3)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000480)='./file0\x00', 0xc80, &(0x7f0000000380)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d634a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4100000149e6d3e6cae315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d62310356f0f8a01a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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")
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7, 0xa}, 0x10001, 0x9}}, &(0x7f0000000000), 0x0)

1m47.703655268s ago: executing program 1 (id=2601):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200000000}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_dev$usbmon(0x0, 0x2, 0x80000)
ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000001080))
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000cc0))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[], 0x50)
socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbb4, &(0x7f0000002380)="$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")
socket$kcm(0x10, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
lseek(r3, 0x5, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x9, 0x8001, 0x1, 0x8000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r2}, 0x50)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r6}, 0x4)
open(0x0, 0x145142, 0x0)

1m46.949404729s ago: executing program 1 (id=2613):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x38)
futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000810)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf250900000034c0171fb627996c6395df179911a1de9dd3053ede6944a8337392b0d8cc61ae081069bee216d554ef9a2e1de97acb509daa88d098090704572c3df0457627529e126dbdd453b1b678a7eca0"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
prlimit64(r4, 0xe, &(0x7f00000002c0)={0xc, 0x88}, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x6)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@deltaction={0x38, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}}, 0x0)
connect$rds(r6, &(0x7f0000000440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
pipe(&(0x7f00000001c0)={<r8=>0xffffffffffffffff})
read(r8, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x10)

1m46.878413204s ago: executing program 1 (id=2616):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'geneve1\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4)
sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

1m46.847710787s ago: executing program 1 (id=2617):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095fc77dda594beaf8ad56725b969dfe80b3f37afea901fe2b41effde5dc68b3465feef878398de5356499f3a4cedfbcce53af3cff6222decc13990e8ab52caaf43ad56155b32a6ea4d67d4154f46fb"], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='devlink_hwmsg\x00', r0}, 0x18)
syz_io_uring_setup(0x5c2, 0x0, 0x0, 0x0)
mmap(&(0x7f0000e8f000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]})
munlockall()
socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket(0x28, 0x807, 0x1)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4800)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b80)={0x6, 0x25, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf4a}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfffffffe}, @map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x80000000}, @generic={0x7d, 0xb, 0x6, 0x3, 0x7}, @exit]}, &(0x7f0000000380)='GPL\x00', 0x10001, 0x37, &(0x7f00000004c0)=""/55, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x2, 0x2, 0x255}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001ac0)=[r4, r4, 0xffffffffffffffff], &(0x7f0000001b00)=[{0x5, 0x2, 0x2, 0x3}, {0x4, 0x5, 0x2}, {0x1, 0x2, 0x10, 0x5}, {0x1, 0x2, 0x9, 0x2}, {0x0, 0x3, 0xd, 0xa}], 0x10, 0x2}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r7 = socket$inet_icmp(0x2, 0x2, 0x1)
r8 = dup(r7)
bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e24, 0x64, @loopback, 0x5}, 0x1c)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
pwritev2(r6, 0x0, 0x0, 0x2, 0x1, 0x10)
ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x40000004, 0x0, 0xffffffff, 0x18, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d7469166f4f07b84819e7df4af14e1df82d", [0x200000000000006, 0xb2b]})
ioctl$LOOP_SET_STATUS(r5, 0x4c02, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x1, 0x2, 0x1, 0x3}, 0x20)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x100000000001c, &(0x7f0000000000)=0x6, 0x4)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000ac0)=""/4096, &(0x7f0000000040)=0x1000)
io_setup(0x1, 0x0)
r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x48)
openat(r9, &(0x7f0000000000)='./file0/../file0\x00', 0x6640, 0x0)

1m46.771148413s ago: executing program 1 (id=2620):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
r3 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102)
write$bt_hci(r3, &(0x7f00000001c0)={0x1, @pin_code_neg_reply={{0x40e, 0x6}, {@none}}}, 0x600) (fail_nth: 4)

1m46.44190772s ago: executing program 1 (id=2625):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r4], 0x3c}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1m30.383518371s ago: executing program 34 (id=2625):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r4], 0x3c}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

57.803426971s ago: executing program 5 (id=3260):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10)
r5 = gettid()
tkill(r5, 0x12)
write$cgroup_int(r1, &(0x7f0000000240)=0x2, 0x12)

57.676782981s ago: executing program 7 (id=3262):
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10)
socket$kcm(0x2, 0xa, 0x2)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r4}, 0x18)
r5 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x6, 0x1}]}, 0x10)
close_range(r7, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

57.255040835s ago: executing program 7 (id=3268):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)

57.19322148s ago: executing program 5 (id=3270):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0, 0x0, 0x7}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f0000000580)={0x10000, 0x86, 0x20}, 0x18)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000005c0)={'bridge_slave_1\x00', 0x400})
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x60}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
read(r4, &(0x7f0000000200)=""/55, 0x37)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000})
bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x2ac, 0x6, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x94, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}, {0x50, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xda50}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_RULE_USERDATA={0x103, 0x7, 0x1, 0x0, "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"}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_USERDATA={0x73, 0x7, 0x1, 0x0, "b1ecbd6134ace34010f5c0f766a948710dea4c6714d1c2f11c537dbe4ee35755fe055e693f7752eee2b839066752cc516fec04b1d14d073dd6370ce73ed7e4d7f9396c1c3e325c04009a8760d406652d134fc0d81d62b522d746dc2b90ba2da93a91d39ccd33ecc07e598b4a9c903a"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}]}]}, @NFT_MSG_DELCHAIN={0x178, 0x5, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_HOOK={0x78, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x30d21767}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2d60e195}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0x8b, 0xc, "49b6edfaa692637c5c7c5fb78b99d52ab9d85d4006bdd793ec611e076fec411648d73d6229b5b52a8d584d34c65455a1349b256d581b6fd976e558b750fc52cbae05f27c0d213a16ae5015ad78811910ac3a35e306e4b4f15c925ad80e85918792e66c231377f6eaa0492807092863b2892442ec4b2353257197ef07022e22ca271dbd9871550a"}]}, @NFT_MSG_DELOBJ={0x108, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0xc7, 0x8, "b20af026dad2e8a6951111bb2fc9251acccabb5ce1067f0a18200c645916b67a0477a75064a2f7eabb8a8a7f55a0ee93f5dede1efede2467875d37fa8e6d9129ce8106c0865eccd66baf566360d16a5c86902ea493e55a656cf9f98e8d5697c7eab9c9b901eef7cafc7baa8bf460d4a6b33d349ac26cad711c06e469176daff76967892f52f4306a9aa19274cd9c63b7c329d12d5ce69cd9d26b09c9c6120db8c34840314b435dbda11218dcf7ece59351326df0a15ddeb8bc60c52b822744755804b3"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x124, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xf6, 0x6, "ee53ec167a61612aa7488533147c262ebe9e7395cfad9073b28c709f8a7ea5e6a4dbb3f0cec5318091c33fb1a98903d72301ec14d6e8021e29b99a6f724da9e8f0c539e16ce55160f9ee9c848d39b1d37125bc87660a817547860609a85ed9bc35e9302e2d566e520d0671886fdbb4c25d152702087a6b661dbd6a50cc0da18debc8b1fba44337d294ea76950d46a6a6ba96b0978dba36ef34966fae4aeb1b89ec21227b8993c35a653e17d32415a45107580013838a5061f0cd92257b3b32097295bd053140fed761b923baf202a97fe56cda44250b767a62dc9db455d0233c6ede5c0f388ff2c6aaafa0b0ab312d7cec9e"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}, @NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0xd4, 0x18, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x74, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x7e4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0)

57.111747597s ago: executing program 7 (id=3271):
syz_emit_ethernet(0x8e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaa25aaaaaaaaaaaa4305400f008000650000082e90780a01010164010102864e000000030008094ac467ec3f00124c985e594ee96c2b09f6e55ec84c916e05052450b2070ce17393606d00a7ab3c13010dcee8f17fabc8f286afabb207106549c337b0e2fdba29f02c960c99891be6ac141425ac1414aa64010100ffffffffe0000000ac0e0001000000"], 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x3, 0x0, 0x7ffc1ffb}]})
syz_mount_image$iso9660(&(0x7f0000001440), &(0x7f0000001480)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="636865636b3d2600000000000000c3e8bc9495fe"], 0x1, 0x1430, &(0x7f0000002940)="$eJzs3XlwnOV9wPHfu5ZsIRMwYIwhBDY2pI7jGEkGExfaRugwSmyLsewOTP4IDhaMBmFncNomtJ2hM5meoTmbNElP2qRumgRSmjZ3yH3fBwk5yEnuRLnJ6c6z+8gSYB0GyXL8fD4eWavVs/s+r1fWd9/Vap/gN9mBAwcabw/w450vO5KT5ehzSe9dN996U3r7sxtjcSyKC6rXRLRFRD2iJSJWRrT29G4f3DrDFV0bcWVE3B5RRcSSaL6flSujemYcP/Hx7VG9OG2X+XeAoi301x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAByNqp7ejo7OKrYMbNt5eX1qjSXAp/n8+PVdVkt/1y6bcbsRVXqLtrbxpb5XHn9wxfDqhPT3qljeOKda3liQPNrihqUrll10Sktt/PLTTOiI2Pe0G67dNTo6fP1CT2SBbO7bNjA0OLC1e3NffWBosL5p48aO8y7tH6r3D2zpG7piaEff1nrP9r7uHYPb62t6Hlnv3LRpQ71v/RWDO7dt7u3e0jd+5oWP7uro2Fh/3PrL+rq3Dw1uO+9x64d6Lh3YsmVg2+bGmPTpNObC9IX4+IEd9R193Vvr9atHRoc3zDTJNKhzNoO6ZhrU1dHV1dnZ1dW58YJNF1zY0dFyvzM67iPuN2Lhv2hZWPPyfRweiFruf2yJgdgWO+PyqB/yT0/0xvYYjK1TfD4b7/+55/VNu93J/T+zedaZyyb6f3I0+r+i2f8VU/V/irkcuT/74mlxQ1wbu2I0RmM4rl/wGR3ZP5ujL7bFQAzFYAzE1uhunFPP59RjU2yMjdERT4xLoz+Goh79MRBboi+G4ooYih3R1/iK6ont0RfdsSMGY3vUY030xCOjHp2xKTbFhqhHX6yPK2Iwdsa22By90d24lqtjpPHvvmGaOR4c1DmbQV3TDNJ/Hrz5+lYOh+3AeP8BgHJc0tet/wBQmG1D2zu69B8AirLD8T8AAAAAAAAAAAAAAAAAAAAAAAAAAADMtSpq8e2IeF7vWDV5Zcq2xoL/U15scdW4ZC2q5lq+0bZxw4U9/Z39vR0dHR2dF5w//eq/c+6kGBza0V3v2Xvdk68f3rdveHd9556Rq/buHp71NTzYyx+mi5fdvWTpimUXbUofrL1meM/Ivr0j1+26Zt42CACTtEQt7o6Is28Zqx6eWx5rd/b217f8fn1gz9V7J42tjS8T8CBbOcN9i/m2+IhuTdsBOAq1Ri2ui4jLFo1Vq1Lj832A2qMaCwMu9PSm1HjcoYp4bWgsAByuxVGLwYjYfdIrq9URsSiOgeP7tnSfoLETO3v7GzsyOrJrz1Oi8RjGouaoZfe90PhjH0f5fYllEY9Nc11szUYAHrglUYtXRcR1J7bFOY2fBwAAx7q2qEXzeX9j1bkLPRkAAAAAAAAAAAAAAAAAAAAAAAAAAAA4RlRRixdExLO/NFZ1TDr/Qa7//5j+IzL7g6z/DwCHoSVq8ZO8/n+n9f/nnrYDcBRqjVr8aV7/v8v6/wBQhMVRiyfm9f83WP//6L8vYf1/AObAkqjFW/L6/+db/x8AitAWtWg+72+sumChJwMAAAAAAAAAAAAAAAAAAAAAAAAAAADHiOOiFu+IiJdf/oeNdWUmr0s/eYWZ42dYbiZ9en0+PZs1+VrzWoO1Kv2Zwx0CAGbUFrW4uHFqrOpe6MkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR7Va1OKDEVHdMVZFFRE3RtSj+b5joScHAMyPqhZfjYiHfXws1T8uXnb3kqUrll20KSIWxaLGXYJq8vjBoR3d9Z691z35+uF9+4Z313fuGblq7+7h2W6urad3++DW+diRWVk8z/Nf/KBn2Jbuk02ytjHhnb39jUmPjuza85R0dq1a9KA3BUC52qIWv2ycGquqhZ4MAHBEtFa1eEhEPOln+w8ed7Y0j/lbmh911A5kL1k+cWzalu8sjN9nGH/c4JRpTh/y/sXaa4b3jOzbO3LdrmtmOghvy9t15AsAD05V1eLdEbH5SSsbXa2i/f6PQedx34uIC59dz+OiPY0bf8B7SSPubVePjA6vv2rv6O40/jkR8Z6XnpnH1xan8flORbROjO9IY2+JiDtePT42GmOX5LFtE2M709gLI2LXbfce25bHHjcxtiuNXRURo8+999jj8tj2ibEb5vdfGQCOLun4/48i4gXr9h9s83TH/+PH8Dvy+/k+/m+ddKG2vN3Wudp5AChUOkZ+bz7+b53h+P+jEXHLr8/M45rH0u3580snHc8f+b0AAA5HOv6/LPX8hfsPPpafj//zYfbE8f/Tl00cw+/O7+f7+H/JfY7/03ZPm6udB4BCpf5fEhFdV+w/+PP22fR//Lh/vvvfdp/+p+2unKudB4BCpf4/ISKGLtt/8Dl0s+n/mtX58vnj+er/cffpf9ru6XO29wBQptT/Z0TEH1++/+Dz4o+m/rcfov9nzdneA0CZUv+7I+LOV+w/+Jj+bPp/Rv7tgPl+/H/pffqftrt6zvYeAMpUxfKqWebWOLVxqn9gS5+n8AMAAMCxpLG+z/Lxh/urU6Ny/A8AAADHmipW5J//t8dpzVNXx0iMxrDl/wEAAOBY0fj5/4rmcn4R1WlROf4HAACAY82qxu//N34HoPHyv21xQ+PlelpqjccGqmrmEdW6WNkcsTKvCrQ7j2g+vlC19w9s6VvfM7jlos54RONVBhq/aXDIa2tt/PrB2ji9Oer0/JpE7fe+xrY0qnP9RZ2xNs5ojjyj+YqEq9ccYmRXc+TZzZFnTzNyQxoJAMe6VTP0eDb9XxvnNEec03xVwJYzDlHWDmUFgKPFqsbz/xvPAZiy/zOMqM6f4fj/5INPKVgfV8XeGI3dsa7x2waNZxwc8lrbJz0NYd0MjwZMjO2MdTM8HjAxtivWzfCIwMTYDUf8dgGA+bRqhg7Ppv/rZjj+b/eUQgA4qux72g3X7hodHb5+Hk8s9D4CAPem0gAAAAAAAAAAAAAAAAAAAAAAAAAAADD3jsTr/zvhhBO/aScW+jsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAsaGKWHSo82sRSyKiIyLOO/Kzmj83LvQEFlh1T9wTT40TFnoeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADHmvz6/7Vovl/aPCtaahHnRsSVEfGEhZ7jXLpnoSewwCa9/n+6zeNAFS3Nmz2q1p7e7YNb083fWPuhdtfNt96U3h7IdtIVpC3ca3GJvIWpL3VS41LtvcP7rn3K3ifXey9pTPKSHf1berdu3v7YiYErqtsi6tF8Gzc+3z85903POsSe35b2dHbb7W9st/f+2z3tUJeefrvTGRkd7kpb2tF3+Y4/2DPy1EmfOrk6PWL1mog1997SNeltij08PVqn21o1Vv15dUI8P65s3P7pX6M6UKWb6MTG/h939cjo8Pqr9o7unmJOy6q0/7sj2mY/p9Ma308OqfFVV2tNW+1oDEp/LZ/++qY36Ro7p9iHk6qVEdF+WPuwcup9iFn8u+cZbZhiRqdUZx32LX3WDFs89DzHqjurS+OT8fRJ63/U0u1/bszmf2ca0xg56StlypG15sjGnndNe51T/q9kHjwjnhSPOXj71yZ9/8+31ZH5fjRpi0fo/0WjSMvvU6T83Weqy+R5Lm+OmmKep1arI1rOOKzvKKun/44yb///X1StiR/Ejdb/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjn5VxKJDnV+LODcilkXEienjesSBudherb2ai6t5wG5c0K0vvOqeuCeeGics9DwAAAAAAAAAmBuX9N518603pbfGz+MXxTnVayLamj/pb4mIZdXzWnt6tw9uneGKWiOujIjbH8Ac0uXi+ImPb08frXwAVwQAzEotavEXEVHdMVa9tmo+Ma4ezfcdCz05AGBepP7/Ze7/6/QfAIqQ+v9Xuf+v138AKELq/1/n/r9B/wGgCKn/f5P7/0b9B4AipP4/I/f/TfoPAEVI/b8p9//N+g8ARUj9/9vc/9v1HwCKkPr/zNz/t+g/ABQh9f9Zuf9v1X8AKELq/7Nz/9+m/wBQhNT/5+T+v13/AaAIqf/Pzf1/h/4DQBFS/5+X+/9O/QeAIqT+/13u/7v0HwCKkPr//Nz/d+s/ABQh9f8Fuf/v0X8AKELq/9/n/r9X/wGgCKn/L8z9f5/+A0ARUv9flPv/fv0HgCKk/r849/8D+g8ARUj9/4fc/w/qPwAUIfX/H3P/P6T/AFCE1P9/yv3/sP4DQBFS//859/8j+g8ARUj9/5fc/4/qPwAUIfX/X3P/P6b/AFCE1P+bc/8/rv8AUITU/3/L/f+E/gNAEVL//z33/5P6DwBFSP1/Se7/HfoPAEVI/X9p7v+n9B8AipD6/x+5/5/WfwAoQur//tz/O/UfAIqQ+v+fuf+f0X8AKELq/8ty/z+r/wBQhNT//8r9/5z+A0ARUv9fnvv/ef0HgCKk/r8i9/8u/QeAIqT+vzL3/wv6DwBFSP2/Jff/i/oPAEVI/b819/9L+g8ARUj9f1Xu/5f1HwCKkPr/37n/X9F/AChC6v9tuf9f1X8AKELq///k/t+t/wBQhNT/V+f+f03/AaAIqf//m/v/df0HgCKk/v9f7v839B8AipD6/5rc/2/qPwAUIfX/tbn/39J/AChC6v/rcv+/rf8AUITU/9fn/n9H/wGgCKn/b8j9/67+A0ARUv/fmPv/Pf0HgCKk/r8p939M/wGgCKn/b879/77+A0ARUv9vz/3/gf4DQBFS/9+S+/9D/QeAIqT+vzX3/0f6DwBFSP1/W+7/j/UfAIqQ+v/23P+f6D8AFCH1/x25/z/VfwAoQur/O3P/79F/AChC6v+7cv9/pv8AUITU/3fn/v9c/wGgCKn/78n9/4X+A0ARUv/fm/v/S/0HgCKk/r8v9/9X+g8ARUj9f3/u/6/1HwCKkPr/gdz/A/oPAEVI/f9Q7n/U9B8ASpD6/+Hc/0r/AaAIqf8fyf2v6T8AFCH1/6O5/4v0HwCKkPr/sdz/Fv0HgCKk/n88979V/wGgCKn/n8j9X6z/AFCE1P9P5v4v0X8AKELq/x25/236DwBFSP3/VO7/cfoPAEVI/f907n+7/gNAEVL/78z9X6r/AFCE1P/P5P4fr/8AUITU/8/m/j9E/wGgCKn/n8v9P0H/AaAIqf+fz/0/Uf8BoAip/3fl/i/TfwAoQur/F3L/T9J/AChC6v8Xc/9P1n8AKELq/5dy/0/RfwAoQur/l3P/l+s/ABQh9f8ruf+n6j8AFCH1/6u5/yv0HwCKkPp/d+7/afoPAEVI/f9a7v9K/QeAIqT+fz33/3T9B4AipP5/I/f/DP0HgCKk/n8z9/+h+g8ARUj9/1bu/5n6DwBFSP3/du7/w/QfAIqQ+v+d3P+z9B8AipD6/93c/7P1HwCKkPr/vdz/uv4DQBFS/8dy/x+u/wBQhNT/7+f+r9J/AChC6v8Pcv9X6z8AFCH1/4e5/+foPwAUIfX/R7n/5+o/ABQh9f/Huf+P0H8AKELq/09y/39L/wGgCKn/P839X6P/AFCE1P97cv8fqf8AUITU/5/l/q/VfwAoQur/z3P/H6X/AFCE1P9f5P6v038AKELq/y9z/x+t/wBQhNT/X+X+r9d/AChC6v+vc//P038AKELq/4Hc/w79B4AipP5H7n+n/gNAEVL/q9z/Lv0HgCLU8iMAqf8b9B8AipDqvyj3/3z9B4AipP635P5foP8AUITU/9bc/436DwBFSP1fnPt/of4DQBFS/5fk/j9G/wGgCKn/bbn/m/QfAIqQ+n9c7v9v6z8AFCH1vz33/yL9B4AipP4vzf2/WP8BoAip/8fn/v+O/gNAEVL/H5L7/7v6DwBFSP0/Iff/9/QfAIqQ+n9i7v9j9R8AipD6vyz3v1v/AaAIqf8n5f5fov8AUITU/5Nz/3v0HwCKkPp/Su5/r/4DQBFS/5fn/vfpPwAUIfX/1Nz/fv0HgCKk/q/I/d+s/wBQhNT/03L/L9V/AChC6v/K3P8B/QeAIqT+n577/zj9B4AipP6fkfv/eP0HgCKk/j8093+L/gNAEVL/z8z936r/AFCE1P+H5f5v038AKELq/1m5/4P6DwBF+P8AAAD///2ccz4=") (async)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) (async)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r6}, 0x10) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f00000001c0)=0x800001, 0x4) (async)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0xff, 0x0, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @remote, 0x4000000}}]}, 0x50}}, 0x0) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7, 0x0, 0x3, 0x200, r3, 0xc, '\x00', 0x0, r3, 0x1, 0x1, 0x0, 0xb}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={&(0x7f0000002800)="f2b6372ec33cc6c17b1193cf96c7f294f534a85c08f845e661d72dd8f12660e65e3e6f8b41c1b9a81def207c93afa45af6e4fd86cc633de7c91300cb18bcf5ee57b5e84d7ac1b54205390819af1a120657febedb6ca5dc6ca1f6ffc14db0a2595847f893db025841b84020991a04c9e10ecca365a69cd68494994abcdeecd71b896c1aee1bb4af006f14c35bd997e8c58905e4c16e38ce01b6b18b42b1c0dabfb8a129b55496ea4bae9bb71f48642639c3d4e3dc98ee0d7d6c49638f43976458ccabd8e9dc83a491567bc602a2db4ccb1fdd112507672cde514304ce19eeaa129338fb699d6c9957834fab452bc1054a5586296a6dce3d8cb6b6bcd46ba69c68e8f9158d76900be529e150e8bcfaca38f76e742862ce3bc4c2968e6e4d30a1803d77aa16de4c7cdefef9b17f7acf715d9c595cb36d07cb119dbb89a35e519d881d367826798235e454b6eeb1c8dc7cb73d031477a60319c624517e4130f6d63d7dfe3a9155da4a406d014812957cbb1ba2d3e704903d7e26b1cd1952b90797577a6495c48c06f44541ecc86517a01fbc6df5edbdc63161c5e090fd62cf8484648ddf4324bea9d4d35132bede7006e49a8c09c5781d2e52143098e63aee134f66af48c3328d1fd8ecc15b91e9bd8efd9319b3b8df55dd5388d1ff4c34167f3b9b668ca7cfae6a97b778b0bc3ae10f31f4033f312d19b279574db935e6c0a62382003bde22bb0956e6996c92baca80d926d829e925898c9c45a359cd310068ea8e70f017e5292485ef08bf338eb961e3bd011304d454c7e9e459b69c375bceeaaa705faa9aa783b0f8e6affa302f58214f94812564eb57fd29ffa8ef2eb4f3826e6d7431d8b46dc595d8b8201508238acc72255b42899ac1ab189ad93a39f5621a59115e28c549e59c16d14aac015d618e3c77ea6228c9edbd5841b7e0210d8e77715543677e7c7367fee9aaad7ce28bdb634cbaafca9b1576ca50f40c8f125f3ce1859ca07a75700b545032013eb8f45d3353ad6acf64a36c860b176fd595a9870033a2d49305dec39d945b25ccfe45c5a04a4e16077c6b4d6904f26dfbbbceea962cf586c304fe28f304d87e4ae6e0e757e4177610c987c22ffdfcd6522fd9a6d1b012c5a92d1ef2c16a5b6f0d4c34096c82161e4d5502d7320c8e4c7c637476f6fd7da141ee1f6c3404fbc7f860183f3099ca1869e51067aea28465d6cbc00a49aa0e9bf5f73c270b5090ac297f2b7adde19d94a6f032872b67266e45aaa3c7441c3c398f0679bfa4ca1a5409aa53ff74b6c5cb2f915a82579f74a8fe9fe57fc4b49d64e45eae417347f280bc9ec4cb7a86cdea6b984298b87d2adba3532008da9ede108a14db8277136289894b2d0210c8892cddf99c22d86da2eb08d6106ec1c9173a71c3a9e5594e712f0ff551167dedf16805f5cabe549bf62ba95063d2a5e46e0dbfdc50bc8028e26274e0555af35ba512b516182ec1da3fc791994d8f2f1b16a495e8b6481ec0e6ba6450c2f2598a9068a2fcb6eff20d9e72ef49e79a961351c489e40d7a87ef476f5cae5777b6282b9754ba466c2569eabc6d1be3197a0fbb8621bfcbaad3415d4fe6b0f1993332cf9728913de080d8829114140d9c6bf5c7c6b82cdf3b475ff5dfcf2868a4da48f1910178ebd27641017522f355c35e1e516d4fdf89413252d0a4001fee7a00ea1989bbe187aeea6376a7733f0d3240ab5e8158302d1b50d99333fe2d1f922e36e068ab4bc0f41d514e9b7feb6587146ef14e75c295b3f3221aa4496a644ce5ac2b40045e810226112f923d9e6dc36cc05470e5795cc9a8ff48730d342cc71f609438a8d4521b0d74347274d31d37e090fb208726216d7ef3dc7d8085f781e2dd86e50839553c533630bc4f0dd8c326fb5e246d81c053834d336a71340e88e4e5295841f431767e795c432b2b99eea4abaeee9b52e33971fee735a24e023bfd9186cc4fa882faa7cf17af7ec056c34a46f878c54683ff4bdc488fde481d7a1f8114141cba031148d5ac7242439f5ea157ea327f21e51fd67108f9d63b33865d2836ba525f4637e3b6b7a76fc02a37240e860e80f80892fe7a0f9f279fb9ea14de4005718ab859827648d8dea1f463af6a6f706e240b65be37a65746d3ead93ed93a20dfd045ed5368ca18432ee9290183100f9eb2a0f5491992eb31026ae74939aabf0827121547d3daebc62d3c0765fd711e4d8457ca2e6ffebebda2d62d0069bcd81a2448fadb20dfe55491f3b84afa17f7a9b21eaf8bc46540b2a12455b018646419383f15ee7a78dcbbd506b46c52f2e83492b1b19e61dbd02380868c4949be6405b481a414b0c678cff0dd325614361cb505f0a0bb8e897b0041b3b04edaae9b757b35750ce94f37d8c6e2b48d70459df929358a008f4508219abb5687ccee3eedc68e0b89c12d7615ba54ad9518af58791d091a7941059e58615a5d6af4a6aea0bdd9896b810c24b4353c24e0dca5f83250c6ffb8785617014646cfaca1fc71e95af781a6bfadc84b9c9649f88f4789006811773f230cca3832a8ea131a0cccf126608a58bfc1052b3e34ab93a8bb02f0354362efda06d819e6c06b3d46651c6a0d78751c7d0b7ea92229eb9bf1b7329bafd73c1cf6c4284fb8ddd864753b1b562ab445c0ba57a3df20649116058849de7601e81437ed8611e89c2614008b9abd87adbe26d3d350a440b8661c456a458a2722ff98f02e47fec671c00fdcfa3f550a4244d6ec4bd989d804d9abacfe1c1c36ceb9c34054c06be74ec79ab7c986912b9fb4035dd27034ba885f0236bb8a91d000ff0a71f7d0c518f5523f1be5fe01fc18b1e990f1845eaf24a4a4626c6cf424bc2466b310ea6dd1af5ba5f4f0c1b335620ed565ea985ba1a4e82696d37c92cf79cef3afb884047e22f3722e4999e846a0f52df7cb7c8b626acdf999298dc5fab95f05685fe8a5e5294989d3ae2c8da88fc5d937b3e5790e4970d5adb6d441757236adc2d4525194fc68c4d5119702e19d2aa4e70e085639e2de5b7585d9cef61ffd5e52a688a54907adcbc0c59071f08b48bbee23b4b34eef0223851fd81e1552dc2e249190f27b6db9cfd91d8469d221fe2077d683d8f17fbcbb26d4a3f174bacd093c2cfe7aae2db5f2101118545b4bbd333c1d0f96729bbb198c9ffd1842dc3e15df2ef5f1ba47d2a9c09ac13f127514b0d1eac6c1a24a4c6775379a04f29cd440730cf1c5115f727f53fde2e72a9ac90eb5eae8b050863ccceb91eaeae8c0639e1a6e0c3317f82cb515d4c04220da038f2026cd3e592cb70c2187c3b7f2611a36339524dde6c0d4c19f48c94b9f8424e0118d131de10909252ecce07d53a8483d304fb52bc0ddf511d21e9f2e38f719f65a8b20eee8def4f70c5f11001358dc4eb1b2473aff23f6f9684177002f8177bd2058d1c7d9f49b5686c3b5c6b4527b22c2c63c9a74b92c4989a289e6978a6e5939a33bb31c6609ab870bb934410f3ef4e59f253bb6cae331f6422acda6ba7b8861df0b1ede3f43ba7a59ef8e56445ff521c22ef83398afbca5275d85c6000311e930d336a9206417130625e862110d05df18e88c3263592961b48da5473673c08b4d95c9caeb0b1f7d6f1919b6e35d09637555cfff1720f4957222158a9dc4c1708ba2c6bc76fa6271a066914220e57487f1ebe633ac6bd3f12088bfcfa34baa27b7f4d3028b64372e0b3ded08c4ead8f1fbfae5cc3daffd16ef8015e0617dad28c9aa57d0a8048ce44eb06ea806eac8aede8f9f11dc502341a54858a10886d31a2e3eaaa5cc1c9022f50771ba8f86e01d08feb6f0237e6f04b3515d55792cb2d6a7404ae4e48fd9ff5ee3ff59cd37302e8cf4d0b0842bdfbc1f0e9ad16bb42503edf65f1e942659b7cf1021eca419cd2ee98455268c0a047f0acbdf1a9eff4e18d6767de735bc35db7e4672d7a22f28a37a224ea363f03d359770f80a603284db62f1da0bef1e80fd05a6025f1440b0ed8ac743f680dd1b3196c4756474179926730cc86bba31ad93938b65f1c8b3a3ef667c5c0e8e1fbbfc32e0780657d0b75f4db28e308013e00b8c247a5ca4e3beb6187d0532750ab73411f36787d1d29fc3d9ac4b6c090a9b8e00da69d543ff981b34fcc24ffc5d1a60a591d149ac960bef7c1de9cbc9e871aa045c3ababb3fba693e0c246a798ebcd8ec40a6f5df70986d3026dfc0fa48ad3be431a4069eb75c018bd20028daf662f89f8d1cf673c492bb4e7bdcaea57c373ece1f22f3aeb965d84a28f583148e8e9b2ed040a26461392600b15e4ac2e290c834d1803295c1c1145570ea37147e45d76565ddfd45fc68cbde2e3fb5ac0e7749eecbb10748551724019ea7a4ef2014c227d24cbdda9ca18ff9a9a6833a3a577520251ab9c469385b556b3f601a77d6d4f1195166f5da9cd3c39c267d72a533c1221b438a145cb0d047dae5f18aa9759599316bb1cf656f0c4ce248f13e9588274e2aa94be5db351519a9ab628cfd9f0db115650699047023bdfbb8384a5ecfbbc637d3f12f211efcda625195369cda9133c42cde056566725d110fafcfb0bcc816d9486ae0b761946816f31d70f75e9dbbfa1106834bdf25ace2a2a92c66dbb0a90e3523e13b72714bee8cb9fec9bddd8627c02a7a81d39416f5cdc2a0a4b083a2a08acf29457e4224b6a281c931e744199227fa5f48976855a055cfc6ed7ea3ba64beab34762af5bfafdfc3e18bcb9658899d1dbb6e58051a61bc3cca49d8e4d348bff0d6a8cb8b144fcf338d3fba6240003fb8b812820ed1d352751c5052551a64f0f4951d7e17f61240896db0daca321a25a4bc993812c122e6d40f0aa67a3c9c9080f17f52fad38fd9c8ce59c61eebc38e1e627e02a921e11466943991339917072db93df4d79f1a094658055b019b3f3e2bc2e6806bae6893d1a817a866b6ad20d0c2c41c7fef634484b987e5cdbb7d611a3d7f7a3b40b382fc270b865e7724d054061c6614226e329e0746c780417a58e2baec2bef8e34b955a17074c13ac0e17c6a34eb12a03b6047515d7d9cc44996693fc1b3af6804779cca766dcc75be98c5b1bb49233b56c830c528e61e30d65b316fc63179709c5d843f18c99ab67a7d4bd72147a32e10e5d0ca59e406b413eb24520fcfcb3c739991151e07ef34c033d57a7a27d77fbc0a66f46227b8baf86136f0fee85d4636c7ed97e5fac996e4216df9d4bd39b068c6d6f424cdce4c88596b1d920f4ca37a12130326cfe743057d53879bda581461412fdd6b0e834ceb7efc085611b774c5977cec8bc77d1cdfc9528872b6c846935a1d7a1dac4198225ef03531d068613854821a42af34f865c946f6739493e5ec160ffac7193873dc2b6a59763f2410daa67cfdd6018eb8156c8703d8e80552dfc9eff27c02a785669ee7e1d0a64823afeb2ff80e2593760cb47621a0561bc65b22e793281328c786c41c1091e1f605de00f496a0d98f2d66fa3c6de2377d67fd555b4dfdf550c177a5f7cdabb55d98fcd385757bdd87a63fe31469d152f382def562c3fd6221815bba921d12e37d78d58bd1547206e21c79a495ac1af4a80c25f9a878627c52533301dcdc52d9d89b6ca4911fcd08a1160c792f13e81d249b73ada053bd8910e783be366609aaab2b66d65e7f30c028e73ddf1319866e08c9b44e052cc756fa97428386ecc08578ea2d676a282197e9dd29a3506f882ca3f83b0122dce0609af887832cc4f91cb674f953aa498cfab34f7a0ae4a84d4edf3e1921ff8258d89dcdf6412f6e8444966ee5b171079a", &(0x7f0000000340)=""/84, &(0x7f00000003c0)="abfe5096ac6834a5b7dedbe111d827f1f59bdb97cf495849f31a878a4d97dbca3877a50364377c073b5e211b098549b42898d1c5b12052f7cbc1bf2f10a3f30f2bb8bd5699f84324e2f218a1d03ca822d61c81baf8f97abfd930c9d7df1a216c", &(0x7f0000000040)="1ed3400550f93b9136b877ab135cde94644469a939c142fc33cdd07fd8fe23f607e9803d6fea04d3bdb50130cc3fe2b35a973505c3", 0x9, r9, 0x4}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6e, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x6}])

56.578727849s ago: executing program 7 (id=3275):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x1d6}, 0x18)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x50}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
lsm_get_self_attr(0x65, &(0x7f0000000400)={0x0, 0x0, 0xee, 0xce, ""/206}, &(0x7f0000000100)=0xee, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18)
pipe2$9p(0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r8 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r8, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020259040e9e0000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfeb9}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4)

56.261721635s ago: executing program 5 (id=3280):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmsg$tipc(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000240)="390000001300034700ab65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000ea", 0x3a}], 0x1)
writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000080)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1)
setsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r8 = dup3(r3, r4, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r9}, 0x10)
pipe2$9p(&(0x7f0000001900)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x0)
r12 = dup(r11)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[], [], 0x6b}})

55.934041861s ago: executing program 5 (id=3286):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$eJzs3U9oFFccB/DfzO42TbKUtL0USv9AKaUNhPRW6CW9tBAoIZRSaAsppfSiJEJM8JZ48uJBj6KSk5cg3oweJZfgRRE8Rc0hXgQNHgweVFjZnQTyTxOzmx1xPh+YzEzy5v3eMPN9ExaGDaCweiJiICJKEdEbEZWISDY2+DJbetZ2ZzoXRiJqtd8eJ4122X5m/bjuiJiOiB8iYj5N4lA5YnLur+Wni798c3Ki8vWFuT8723qSa1aWl35dPT904vLg95M3bz8cSmIgqpvOq/WSHX5XTiI+Oohib4mknPcI2IvhY5fu1HP/cUR81ch/JdLILt6p8ffmK/HduVcde/rRrU/bOVag9Wq1Sv0ZOF0DCieNiGokaV9EZNtp2teX/Q9/t9SVHh4bP9r7/9jE6H95z1RAq1Qjln6+2nGle0v+H5Sy/APvqOxDqaXfh2fv1TdWS3kPCGiLz7JV/fnf+8/UtyH/UDjyD8Ul/1Bc8g/FJf9QXPIPxSX/UFzyD8Ul/1Bc+87/mRcHNyigLTbmHwAollrHvt4abv2LyEDb5T3/AAAAAAAAAAAAAAAAAAAA2810LoysL63psbxri+tnI1Z+yppur19qfB9xxPuNn11Pkk09Jnuq8Hp/f9FkB026mPPb1x/cz7f+jc/zrT81GjF9PCL6y+Xt91+ydv/t34e7/L3yb5MF3lCyZf/HP9pbf6vns/nWH1yMuFaff/p3mn/S+KSx3nn+qdavX5P1jzxrsgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa5mUAAAD//7FLbdg=")
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000f10000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
wait4(r4, 0x0, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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") (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000f10000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ptrace(0x10, r4) (async)
wait4(r4, 0x0, 0x0, 0x0) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)

55.595932298s ago: executing program 7 (id=3291):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
inotify_init()
r2 = socket(0x2, 0x2, 0x1)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', 0x0, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r4=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0xb}}}, 0x24}}, 0x800)

55.397541484s ago: executing program 5 (id=3293):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
lsm_get_self_attr(0x65, &(0x7f0000000400)={0x0, 0x0, 0xee, 0xce, ""/206}, &(0x7f0000000100)=0xee, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020259040e9e0000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb000000000000", 0x85}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4)

55.173722952s ago: executing program 7 (id=3296):
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000140), 0x181084a, 0x0)

52.897401856s ago: executing program 5 (id=3312):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x38)
futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000306050000000000000000100000"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000810)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf250900000034c0171fb627996c6395df179911a1de9dd3053ede6944a8337392b0d8cc61ae081069bee216d554ef9a2e1de97acb509daa88d098090704572c3df0457627529e126dbdd453b1b678a7eca0"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
prlimit64(r4, 0xe, &(0x7f00000002c0)={0xc, 0x88}, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x6)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@deltaction={0x38, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}}, 0x0)
connect$rds(r6, &(0x7f0000000440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
pipe(&(0x7f00000001c0)={<r8=>0xffffffffffffffff})
read(r8, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x10)

52.869810788s ago: executing program 35 (id=3312):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x38)
futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000306050000000000000000100000"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000810)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf250900000034c0171fb627996c6395df179911a1de9dd3053ede6944a8337392b0d8cc61ae081069bee216d554ef9a2e1de97acb509daa88d098090704572c3df0457627529e126dbdd453b1b678a7eca0"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
prlimit64(r4, 0xe, &(0x7f00000002c0)={0xc, 0x88}, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x6)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@deltaction={0x38, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}}, 0x0)
connect$rds(r6, &(0x7f0000000440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
pipe(&(0x7f00000001c0)={<r8=>0xffffffffffffffff})
read(r8, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x10)

39.047524789s ago: executing program 36 (id=3296):
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000140), 0x181084a, 0x0)

36.812447469s ago: executing program 9 (id=3471):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000040)=']-[}\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x81)
r2 = socket(0x10, 0x3, 0x9)
connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
setuid(0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1400000010000100000000000000ffff0a00000a14000000110b010000000000000000000200000a"], 0x28}}, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x553, &(0x7f0000001080)="$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")
open(0x0, 0x141242, 0x40)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x210e, 0xc0002, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0xe}, 0x10001, 0x32, 0xfffffbff, 0x9, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb)
sync()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x2)

19.824340915s ago: executing program 37 (id=3471):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000040)=']-[}\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x81)
r2 = socket(0x10, 0x3, 0x9)
connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
setuid(0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1400000010000100000000000000ffff0a00000a14000000110b010000000000000000000200000a"], 0x28}}, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x553, &(0x7f0000001080)="$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")
open(0x0, 0x141242, 0x40)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x210e, 0xc0002, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0xe}, 0x10001, 0x32, 0xfffffbff, 0x9, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb)
sync()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x2)

7.69373288s ago: executing program 4 (id=3804):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba93", 0x1e)

7.589550889s ago: executing program 4 (id=3805):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003e0007012dbd7000fcdbdf25047c000004006e001c00018006"], 0x34}}, 0x0)

7.537153453s ago: executing program 4 (id=3806):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
execve(0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000004ff000c0802f05850f9f1773ef7ec891319ca4321cd0080d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000004cf88844e197ae16760d1b000000b70000000000000095000000810000008b0e426945e573c8eed811b39e4801000000010000000a11bc95dd54a1be1a6d9e0a2848b70e65322c8b604cdd9dc9b54d9e8eb338b865c6bd5d188088d5e867fadf807636559bb94c7f77f2cb5fca92e142de9e5872d26a0f18b793a881cf8f8795bfcd84ba5e1d3e953a413c472802de60a7977db9605b9d89a43234c11a3b5eac499273ab398d6203a7d76350fe84fa0ba693aa"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18)
r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="440000001800010000000000fddbdf251d01020008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32, @ANYBLOB="1500040003000000000300004505a8b9e859abc00100000008000e00", @ANYRES32], 0x44}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10)
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x109041, 0x0)
r9 = dup(r8)
ioctl$PTP_EXTTS_REQUEST2(r9, 0x43403d05, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0xd8, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvtap0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000880}, 0x0)
keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffb, r4, 0x1)
keyctl$instantiate_iov(0x14, r4, &(0x7f0000003580), 0x0, 0x0)

7.4543768s ago: executing program 4 (id=3807):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r0}, 0x10)
pipe2$9p(&(0x7f0000001900)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})

7.391355655s ago: executing program 4 (id=3808):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000740)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$team(&(0x7f0000000180), r2)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd700000000000010000002400018006000500224e0000060001000200000008000300000000000800060001000001"], 0x38}}, 0x0)

6.199680151s ago: executing program 4 (id=3811):
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = fsopen(&(0x7f0000000080)='cgroup\x00', 0x0)
r1 = dup2(r0, r0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='source', 0x0, r0) (async)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='source', 0x0, r0)
socket$inet6(0xa, 0x802, 0x0)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0) (async)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x404, &(0x7f00000001c0)={[{@acl}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@nouser_xattr}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x404, &(0x7f00000001c0)={[{@acl}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@nouser_xattr}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
openat(0xffffffffffffff9c, 0x0, 0x101442, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x10)
r5 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r5, 0x0, 0x0, 0x3, 0x9)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001240)={0x0, 0xb0}, 0x8)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffd}, 0x1c)

4.976384419s ago: executing program 3 (id=3826):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba93", 0x1e)

4.926533583s ago: executing program 3 (id=3827):
socket$nl_route(0x10, 0x3, 0x0)
fstat(0xffffffffffffffff, 0x0)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x4000, 0x4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))

4.925795483s ago: executing program 3 (id=3828):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000440), 0x243c2917, 0x14a042)
write$hidraw(r1, &(0x7f0000000040)='F', 0xfffffe41)
read$hidraw(r1, 0x0, 0x0)
write$hidraw(r1, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0xc, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
syz_read_part_table(0x1051, &(0x7f0000000000)="$eJzsz8EJwkAQBdCfmJgIgncr8uDVTmzFkx3YoCiElciaEtTDe7ed2f9hwm+1eZZSSvt5rx9Jsx8zD66bJKu6KKWkG5bYVKfDlP7S1+zS2s/JbZLmOIzJ+TD3de/V7j7WT01Oty9cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/7xUAAP//itUQuw==")
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da318010000007f0f000063cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff43519c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfffa8837c7430725020ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000001080)={0x80000001, {{0x2, 0x4e23, @local}}, 0x0, 0x2, [{{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x190)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac1414210000000000000000000000002001000000000000000000000000000000000000000000000000020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}})
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x803fd, 0x1, 0x800})

4.526038845s ago: executing program 0 (id=3832):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchownat(r3, &(0x7f0000000080)='.\x00', 0xffffffffffffffff, 0x0, 0x0)

4.398121865s ago: executing program 0 (id=3833):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x61, 0x0, 0x61, 0x2e, 0x71]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, &(0x7f0000000240)={@local, @remote, 0xfffb, "66c5aff8a7fb3af1f6cec2e742000200", 0xffffffff, 0x1000003, 0x7f, 0x6a}, 0x3c)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)

3.412397405s ago: executing program 0 (id=3837):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440", 0x21)

3.394182957s ago: executing program 0 (id=3839):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = syz_usbip_server_init(0x4)
write$usbip_server(r1, &(0x7f00000001c0)=@ret_unlink={{0x4, 0x2, 0x0, 0x0, 0x5}, {0x69cf}}, 0x30)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$UHID_DESTROY(r2, &(0x7f0000000180), 0x4)

2.628019298s ago: executing program 0 (id=3848):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x61, 0x0, 0x61, 0x2e, 0x71]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, &(0x7f0000000240)={@local, @remote, 0xfffb, "66c5aff8a7fb3af1f6cec2e742000200", 0xffffffff, 0x1000003, 0x7f, 0x6a}, 0x3c)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)

2.128524718s ago: executing program 6 (id=3851):
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0})
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
write$selinux_load(r0, &(0x7f0000000280)=ANY=[], 0x65)

2.033808186s ago: executing program 6 (id=3852):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = syz_usbip_server_init(0x4)
write$usbip_server(r1, &(0x7f00000001c0)=@ret_unlink={{0x4, 0x2, 0x0, 0x0, 0x5}, {0x69cf}}, 0x30)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000180), 0x4)

1.656784186s ago: executing program 0 (id=3855):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = memfd_secret(0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0xf, &(0x7f00000000c0)=ANY=[@ANYRES8=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300002d48d1d5e500f7ffff8400000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r5 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0)
read(r5, &(0x7f00000000c0)=""/53, 0x35)
unshare(0x22020600)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0)
ppoll(&(0x7f0000000240)=[{r6, 0x80d4}], 0x1, &(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r8}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x5, 0xffffffff, 0x20002004, 0x1000e, 0x19f, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r9 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
read$char_usb(r9, 0x0, 0x0)

1.570694743s ago: executing program 8 (id=3856):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffff54}, 0x18)
r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r2 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r1})
keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0)

1.547483215s ago: executing program 8 (id=3857):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00'], 0x48}}, 0x0)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4)

1.524441037s ago: executing program 3 (id=3858):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a", 0xd2}], 0x1}, 0x0)

1.415313635s ago: executing program 3 (id=3859):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x8, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xffffffff, 0x80000}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000000000000000cd000000000400000000008142e4052af749a8fdfda9800ac24ccb3970c7ec64b550061ebcc079d21c5760c2e65e12bb625f05cd82ed7ddb9c19e9a101059d2e064c12aa140795862e4db1f93d1c", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r3 = socket$inet(0xa, 0x801, 0x4000084)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0), 0x0)
listen(r3, 0x8)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r6, @ANYBLOB="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"], 0x2ac}}, 0x0)
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$pppoe(r7, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e)
ioctl$sock_netdev_private(r3, 0x89fb, &(0x7f0000000380)="b21eb63de37140003e9e0072c41838cf4f954cb927ca998d07fc3ca3bcfa6fd5a04c2313b7baee30902fad2fbcd673ed7f7046de2fb44750c0fa68f2184e71e0fe5559d059cc79f4640dfda728036940ec5bee76fdd6033ed670655786dc3370f45819a1c9ad342f7938430246ae83760a23db0391ac63506c4a7934192171d3db41394eebe332d126931dbf5499342508b980b8ecc76ad90f99543c66c1677b98f7e8a4154512e1a6f6b1edf77464")
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002100)=@newtaction={0x850, 0x30, 0x12f, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x1, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0xcc1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x5, 0x0, 0x8a9, 0xfffffffe, 0x3, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x3ff, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x800000, 0x5, 0x3, 0x8, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x0, 0x3, 0x5, 0x8, 0x2000009, 0x9, 0x7, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0xc, 0x1, 0x8f, 0x1fe, 0x8, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0xa, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x400005, 0x6, 0x3, 0xd7c3, 0x6, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x223, 0x1, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x40, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x7fe, 0xb848, 0x6, 0x6, 0x800, 0x2000007, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], []]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x850}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRES16=r8], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r9 = getpid()
sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

1.256955449s ago: executing program 6 (id=3860):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d4", 0x20)

1.146403457s ago: executing program 6 (id=3861):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]})
r2 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil)
shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x4000)

988.48085ms ago: executing program 6 (id=3862):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x61, 0x0, 0x61, 0x2e, 0x71]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4)

564.982154ms ago: executing program 8 (id=3863):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
inotify_init()
r2 = socket(0x2, 0x2, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
mount$9p_rdma(0x0, 0x0, 0x0, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r3=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x800)

433.490204ms ago: executing program 3 (id=3864):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', <r1=>0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @local, @rand_addr=0x3}}}})
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000340)={@local, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000, 0x1, 0xad4, 0x500, 0x2, 0x2000040})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r6, 0x0, 0x200000000000006}, 0x18)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000580)="17", 0xfffffffffffffe08, 0x10008095, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'erspan0\x00', r1, 0x7800, 0x8, 0x8, 0x5, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @private=0xa010100, @multicast2}}}})

390.616588ms ago: executing program 8 (id=3865):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
clock_adjtime(0x1, &(0x7f0000000880)={0x3, 0x3, 0x1000, 0x7, 0x93, 0xe5e, 0x47fb87e3, 0xfffffffffffffff7, 0x9, 0xfff, 0xb, 0x3, 0x3, 0x800, 0x5, 0x4, 0x6, 0x6, 0x73, 0x4, 0x0, 0x6, 0x7, 0x1, 0x3, 0x7fffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000010bc0)='kfree\x00', r1}, 0x18)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x88a, &(0x7f0000000080)=ANY=[@ANYBLOB='dots,nodots,nocase,dots,nodots,debug\x00\b\x00\x00s,nodots,quiet,\x00'], 0x1, 0x162, &(0x7f0000000500)="$eJzs3DGr01AUB/DTvuh76tJZHAKCOBV1clSkglhQlA46KVSXVgp2iU79KH5BQTpIB+GKprS0tEihaerr77fkkD9Jzh2Syw0k7259GvRH44+jl9O4aDQiexR5zBrRimacRWkSa87XdwAA/5NZSvEjpZTOJ3HtW6SU6u4IAKia+R8ATs8/5/+HNTUGAFTG+h8ATs/rN2+fP+52O6/y/CLi+6ToFb1yW+ZPn3U79/K/WsujpkXRO1vk98s8X82vxPV5/mBjfjXu3i7zP9mTF1ms5jeiX/noAQAA4DS084WN6/t2e0venJfL9wNr6/ssbmaHGgUAsIvxl6+D98Phh8/7KZp7Os9Bi5+pdCz97FbcOY42FJesqPvJBFRtedPX3QkAAAAAAAAAAAAAALDNIT4n2nzlX/41DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG1+BwAA///7v1kj") (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYRES16=r0], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000280)='%pK    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='9p_client_res\x00', r6}, 0x18) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r7}, 0x10) (async)
pipe2$9p(&(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) (async)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) (async)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010)

244.21916ms ago: executing program 8 (id=3866):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)

168.499656ms ago: executing program 8 (id=3867):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0xda08, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioperm(0x3c, 0x1, 0x8)
r2 = syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ftruncate(r3, 0x2000009)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRESDEC=r2], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0xfffffe42)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10)
r6 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x4000, 0x4, 0x374}, &(0x7f00000002c0)=<r7=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
io_uring_enter(r6, 0x66a8, 0x4000, 0xf, 0x0, 0x18)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0)
ftruncate(r9, 0xc17a)

0s ago: executing program 6 (id=3868):
ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0xffffffffffffffff, 0x2, 0x5004)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='mem_connect\x00', r1, 0x0, 0x1000000002}, 0x18)
r2 = socket(0x2c, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r5, 0x0, 0x2}, 0x18)
rt_sigpending(0x0, 0x0)
connect$inet6(r3, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r6, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20)
write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
close_range(r2, r3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})

kernel console output (not intermixed with test programs):

at=0 ip=0x7fb560d2ebe9 code=0x7ffc0000
[  342.862556][   T29] audit: type=1326 audit(1755605259.492:15742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16321 comm="syz.8.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb560d2ebe9 code=0x7ffc0000
[  342.886147][   T29] audit: type=1326 audit(1755605259.492:15743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16321 comm="syz.8.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb560d2ebe9 code=0x7ffc0000
[  342.975467][T14591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.132438][T16354] loop3: detected capacity change from 0 to 512
[  343.139819][T16354] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  343.168993][T16356] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3416'.
[  343.179809][T16354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.192549][T16354] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  343.211192][T16355] loop6: detected capacity change from 0 to 512
[  343.237882][T16355] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  343.302779][T16355] EXT4-fs (loop6): 1 truncate cleaned up
[  343.312546][T15355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.344979][T16355] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  343.448948][T12574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.500376][T16365] SELinux:  Context system_u:object_r:sendmail_exec_t:s0 is not valid (left unmapped).
[  343.607993][T16373] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16373 comm=syz.3.3422
[  343.620783][T16373] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16373 comm=syz.3.3422
[  343.641125][T16373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  343.651557][T16373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  343.668828][T16375] loop6: detected capacity change from 0 to 512
[  343.684246][T16375] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.3423: Failed to acquire dquot type 1
[  343.696439][T16375] EXT4-fs (loop6): 1 truncate cleaned up
[  343.702647][T16375] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.715175][T16375] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  344.415138][T16383] netlink: 'syz.3.3425': attribute type 4 has an invalid length.
[  344.424079][T16383] netlink: 'syz.3.3425': attribute type 4 has an invalid length.
[  344.607594][T12574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.637161][T16386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16386 comm=syz.6.3426
[  344.817932][T16396] loop6: detected capacity change from 0 to 2048
[  344.868823][T11587]  loop6: p2 p3 p7
[  344.881239][T16396]  loop6: p2 p3 p7
[  344.934098][T16398] loop6: detected capacity change from 0 to 2048
[  344.975953][T16398]  loop6: p2 p3 p7
[  344.993309][ T3397] usb usb8-port1: attempt power cycle
[  345.009417][T16400] SELinux: failed to load policy
[  345.051808][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory
[  345.066237][T11587] udevd[11587]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  345.077765][T11588] udevd[11588]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  345.100917][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory
[  345.104860][T11587] udevd[11587]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  345.118399][T11588] udevd[11588]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  345.143421][T11588] udevd[11588]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  345.153672][T11587] udevd[11587]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  345.191233][T16413] netlink: 'syz.6.3437': attribute type 1 has an invalid length.
[  345.279757][T16417] loop3: detected capacity change from 0 to 512
[  345.287181][T16417] EXT4-fs: Ignoring removed oldalloc option
[  345.306484][T16417] ext4: Unknown parameter 'euid<00000000000000000000'
[  345.680253][T16438] netlink: 'syz.6.3448': attribute type 1 has an invalid length.
[  345.692921][T16440] loop3: detected capacity change from 0 to 512
[  345.721606][T16440] EXT4-fs (loop3): orphan cleanup on readonly fs
[  345.729612][T16440] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.3449: Failed to acquire dquot type 1
[  345.746421][T16440] EXT4-fs (loop3): 1 truncate cleaned up
[  345.753286][T16440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  345.838294][T16440] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.864083][T16451] FAULT_INJECTION: forcing a failure.
[  345.864083][T16451] name failslab, interval 1, probability 0, space 0, times 0
[  345.876787][T16451] CPU: 0 UID: 0 PID: 16451 Comm: syz.3.3454 Tainted: G        W           6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) 
[  345.876825][T16451] Tainted: [W]=WARN
[  345.876833][T16451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  345.876901][T16451] Call Trace:
[  345.876910][T16451]  <TASK>
[  345.876930][T16451]  __dump_stack+0x1d/0x30
[  345.876952][T16451]  dump_stack_lvl+0xe8/0x140
[  345.876991][T16451]  dump_stack+0x15/0x1b
[  345.877011][T16451]  should_fail_ex+0x265/0x280
[  345.877036][T16451]  should_failslab+0x8c/0xb0
[  345.877066][T16451]  __kmalloc_cache_node_noprof+0x54/0x320
[  345.877134][T16451]  ? __get_vm_area_node+0x106/0x1d0
[  345.877177][T16451]  __get_vm_area_node+0x106/0x1d0
[  345.877213][T16451]  __vmalloc_node_range_noprof+0x273/0xe00
[  345.877298][T16451]  ? n_tty_open+0x1b/0xf0
[  345.877325][T16451]  ? htab_map_hash+0x1cc/0x1d0
[  345.877359][T16451]  ? htab_lru_percpu_map_lookup_percpu_elem+0x7e/0xf0
[  345.877396][T16451]  ? bpf_trace_run2+0x124/0x1c0
[  345.877460][T16451]  ? should_failslab+0x19/0xb0
[  345.877487][T16451]  ? n_tty_open+0x1b/0xf0
[  345.877513][T16451]  vzalloc_noprof+0x82/0xc0
[  345.877549][T16451]  ? n_tty_open+0x1b/0xf0
[  345.877717][T16451]  n_tty_open+0x1b/0xf0
[  345.877780][T16451]  tty_ldisc_failto+0xe5/0x1a0
[  345.877817][T16451]  tty_ldisc_restore+0x2f/0xc0
[  345.877893][T16451]  tty_set_ldisc+0x209/0x380
[  345.877929][T16451]  tiocsetd+0x51/0x60
[  345.878032][T16451]  tty_ioctl+0xa7f/0xb80
[  345.878064][T16451]  ? __pfx_tty_ioctl+0x10/0x10
[  345.878100][T16451]  __se_sys_ioctl+0xcb/0x140
[  345.878217][T16451]  __x64_sys_ioctl+0x43/0x50
[  345.878248][T16451]  x64_sys_call+0x1816/0x2ff0
[  345.878273][T16451]  do_syscall_64+0xd2/0x200
[  345.878354][T16451]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  345.878386][T16451]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  345.878436][T16451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.878456][T16451] RIP: 0033:0x7f3f7636ebe9
[  345.878483][T16451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  345.878504][T16451] RSP: 002b:00007f3f74dd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  345.878524][T16451] RAX: ffffffffffffffda RBX: 00007f3f76595fa0 RCX: 00007f3f7636ebe9
[  345.878539][T16451] RDX: 0000200000000100 RSI: 0000000000005423 RDI: 0000000000000006
[  345.878561][T16451] RBP: 00007f3f74dd7090 R08: 0000000000000000 R09: 0000000000000000
[  345.878601][T16451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  345.878611][T16451] R13: 00007f3f76596038 R14: 00007f3f76595fa0 R15: 00007ffd9f918e88
[  345.878631][T16451]  </TASK>
[  345.878640][T16451] syz.3.3454: vmalloc error: size 8904, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  346.154319][T16451] CPU: 0 UID: 0 PID: 16451 Comm: syz.3.3454 Tainted: G        W           6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) 
[  346.154358][T16451] Tainted: [W]=WARN
[  346.154364][T16451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  346.154376][T16451] Call Trace:
[  346.154382][T16451]  <TASK>
[  346.154391][T16451]  __dump_stack+0x1d/0x30
[  346.154411][T16451]  dump_stack_lvl+0xe8/0x140
[  346.154485][T16451]  dump_stack+0x15/0x1b
[  346.154500][T16451]  warn_alloc+0x12b/0x1a0
[  346.154612][T16451]  __vmalloc_node_range_noprof+0x297/0xe00
[  346.154686][T16451]  ? htab_map_hash+0x1cc/0x1d0
[  346.154720][T16451]  ? htab_lru_percpu_map_lookup_percpu_elem+0x7e/0xf0
[  346.154828][T16451]  ? bpf_trace_run2+0x124/0x1c0
[  346.154850][T16451]  ? should_failslab+0x19/0xb0
[  346.154910][T16451]  ? n_tty_open+0x1b/0xf0
[  346.154937][T16451]  vzalloc_noprof+0x82/0xc0
[  346.154972][T16451]  ? n_tty_open+0x1b/0xf0
[  346.155017][T16451]  n_tty_open+0x1b/0xf0
[  346.155042][T16451]  tty_ldisc_failto+0xe5/0x1a0
[  346.155160][T16451]  tty_ldisc_restore+0x2f/0xc0
[  346.155197][T16451]  tty_set_ldisc+0x209/0x380
[  346.155234][T16451]  tiocsetd+0x51/0x60
[  346.155262][T16451]  tty_ioctl+0xa7f/0xb80
[  346.155289][T16451]  ? __pfx_tty_ioctl+0x10/0x10
[  346.155358][T16451]  __se_sys_ioctl+0xcb/0x140
[  346.155401][T16451]  __x64_sys_ioctl+0x43/0x50
[  346.155436][T16451]  x64_sys_call+0x1816/0x2ff0
[  346.155456][T16451]  do_syscall_64+0xd2/0x200
[  346.155566][T16451]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  346.155660][T16451]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  346.155687][T16451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.155711][T16451] RIP: 0033:0x7f3f7636ebe9
[  346.155729][T16451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  346.155793][T16451] RSP: 002b:00007f3f74dd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  346.155812][T16451] RAX: ffffffffffffffda RBX: 00007f3f76595fa0 RCX: 00007f3f7636ebe9
[  346.155826][T16451] RDX: 0000200000000100 RSI: 0000000000005423 RDI: 0000000000000006
[  346.155840][T16451] RBP: 00007f3f74dd7090 R08: 0000000000000000 R09: 0000000000000000
[  346.155851][T16451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  346.155880][T16451] R13: 00007f3f76596038 R14: 00007f3f76595fa0 R15: 00007ffd9f918e88
[  346.155905][T16451]  </TASK>
[  346.155913][T16451] Mem-Info:
[  346.394106][T16451] active_anon:12970 inactive_anon:92 isolated_anon:0
[  346.394106][T16451]  active_file:23075 inactive_file:3359 isolated_file:0
[  346.394106][T16451]  unevictable:0 dirty:508 writeback:0
[  346.394106][T16451]  slab_reclaimable:3958 slab_unreclaimable:39232
[  346.394106][T16451]  mapped:35271 shmem:524 pagetables:1689
[  346.394106][T16451]  sec_pagetables:0 bounce:0
[  346.394106][T16451]  kernel_misc_reclaimable:0
[  346.394106][T16451]  free:1822738 free_pcp:5417 free_cma:0
[  346.439217][T16451] Node 0 active_anon:51880kB inactive_anon:368kB active_file:92300kB inactive_file:13436kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141084kB dirty:2032kB writeback:0kB shmem:2096kB kernel_stack:5120kB pagetables:6756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  346.466853][T16451] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  346.495501][T16451] lowmem_reserve[]: 0 2883 7862 7862
[  346.500850][T16451] Node 0 DMA32 free:2949312kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952844kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB
[  346.531301][T16451] lowmem_reserve[]: 0 0 4978 4978
[  346.536431][T16451] Node 0 Normal free:4326280kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:51880kB inactive_anon:368kB active_file:92300kB inactive_file:13436kB unevictable:0kB writepending:2032kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:18260kB local_pcp:16160kB free_cma:0kB
[  346.568679][T16451] lowmem_reserve[]: 0 0 0 0
[  346.573230][T16451] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  346.586060][T16451] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 3*16kB (M) 3*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949312kB
[  346.602238][T16451] Node 0 Normal: 1641*4kB (UME) 1363*8kB (UME) 717*16kB (UME) 497*32kB (UME) 254*64kB (UME) 251*128kB (UME) 205*256kB (UME) 155*512kB (UME) 125*1024kB (UM) 22*2048kB (UME) 959*4096kB (UM) = 4326188kB
[  346.622139][T16451] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  346.631553][T16451] 27006 total pagecache pages
[  346.636276][T16451] 44 pages in swap cache
[  346.640589][T16451] Free swap  = 124504kB
[  346.644771][T16451] Total swap = 124996kB
[  346.648946][T16451] 2097051 pages RAM
[  346.652779][T16451] 0 pages HighMem/MovableOnly
[  346.657585][T16451] 80440 pages reserved
[  346.661694][T16451] Falling back ldisc for ttyS3.
[  346.731816][T16455] loop3: detected capacity change from 0 to 8192
[  346.858538][T16458] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1044)
[  346.867410][T16458] FAT-fs (loop3): Filesystem has been set read-only
[  346.882560][T16458] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  346.927255][T16460] __nla_validate_parse: 7 callbacks suppressed
[  346.927268][T16460] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3456'.
[  346.942880][T16460] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3456'.
[  346.949639][ T3397] usb usb8-port1: unable to enumerate USB device
[  347.258743][T16472] loop6: detected capacity change from 0 to 512
[  347.271797][T16472] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  347.287531][T16472] EXT4-fs (loop6): 1 truncate cleaned up
[  347.299637][T16472] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  347.325758][T16481] rdma_rxe: rxe_newlink: failed to add lo
[  347.361947][T12574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.395344][T16483] loop6: detected capacity change from 0 to 2048
[  347.435148][T11587]  loop6: p2 p3 p7
[  347.449894][T16483]  loop6: p2 p3 p7
[  347.466108][ T2992]  loop6: p2 p3 p7
[  347.482324][T11588] udevd[11588]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  347.482726][T11587] udevd[11587]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  347.513076][   T29] kauditd_printk_skb: 104 callbacks suppressed
[  347.513095][   T29] audit: type=1326 audit(1755605264.113:15844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.6.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880437ebe9 code=0x7ffc0000
[  347.543157][   T29] audit: type=1326 audit(1755605264.113:15845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.6.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f880437ebe9 code=0x7ffc0000
[  347.566689][   T29] audit: type=1326 audit(1755605264.113:15846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.6.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880437ebe9 code=0x7ffc0000
[  347.590350][   T29] audit: type=1326 audit(1755605264.113:15847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.6.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f880437ebe9 code=0x7ffc0000
[  347.613770][   T29] audit: type=1326 audit(1755605264.113:15848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.6.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880437ebe9 code=0x7ffc0000
[  347.637462][   T29] audit: type=1326 audit(1755605264.113:15849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.6.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f880437ebe9 code=0x7ffc0000
[  347.661001][   T29] audit: type=1326 audit(1755605264.113:15850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.6.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880437ebe9 code=0x7ffc0000
[  347.684687][   T29] audit: type=1326 audit(1755605264.113:15851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.6.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f880437ebe9 code=0x7ffc0000
[  347.708296][   T29] audit: type=1326 audit(1755605264.113:15852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.6.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880437ebe9 code=0x7ffc0000
[  347.731963][   T29] audit: type=1326 audit(1755605264.113:15853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.6.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f880437ebe9 code=0x7ffc0000
[  348.004787][T16493] loop4: detected capacity change from 0 to 512
[  348.021097][T16493] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  348.033769][T16493] EXT4-fs (loop4): 1 truncate cleaned up
[  348.040083][T16493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  348.077274][T14591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.258896][T16506] tipc: Started in network mode
[  348.263874][T16506] tipc: Node identity ac14140f, cluster identity 4711
[  348.281137][T16506] tipc: New replicast peer: 255.255.255.83
[  348.287257][T16506] tipc: Enabled bearer <udp:£>, priority 10
[  348.408582][T16501] lo speed is unknown, defaulting to 1000
[  348.415380][T16501] lo speed is unknown, defaulting to 1000
[  348.662284][T16501] chnl_net:caif_netlink_parms(): no params data found
[  348.747310][T16501] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.754402][T16501] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.754649][T16530] loop6: detected capacity change from 0 to 8192
[  348.770104][T16501] bridge_slave_0: entered allmulticast mode
[  348.782372][T16501] bridge_slave_0: entered promiscuous mode
[  348.789698][T16501] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.796817][T16501] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.804234][T16501] bridge_slave_1: entered allmulticast mode
[  348.811013][T16501] bridge_slave_1: entered promiscuous mode
[  348.841752][T16501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  348.852980][T16501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  348.879307][T16501] team0: Port device team_slave_0 added
[  348.891155][T16501] team0: Port device team_slave_1 added
[  348.913916][T16501] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.921020][T16501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.947088][T16501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  348.990619][ T3397] usb usb8-port1: attempt power cycle
[  349.013015][T16501] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.020043][T16501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.046145][T16501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.109881][T16501] hsr_slave_0: entered promiscuous mode
[  349.116118][T16501] hsr_slave_1: entered promiscuous mode
[  349.135286][T16501] debugfs: 'hsr0' already exists in 'hsr'
[  349.141052][T16501] Cannot create hsr debugfs directory
[  349.269395][T16501] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  349.287920][T16501] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  349.311263][T16501] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  349.321619][T16501] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  349.354225][T16501] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.361345][T16501] bridge0: port 2(bridge_slave_1) entered forwarding state
[  349.368789][T16501] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.375955][T16501] bridge0: port 1(bridge_slave_0) entered forwarding state
[  349.426242][T16501] 8021q: adding VLAN 0 to HW filter on device bond0
[  349.439149][  T264] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.467790][  T264] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.482627][T16501] 8021q: adding VLAN 0 to HW filter on device team0
[  349.489348][    T9] tipc: Node number set to 2886997007
[  349.500508][T11384] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.507612][T11384] bridge0: port 1(bridge_slave_0) entered forwarding state
[  349.546880][T16546] loop3: detected capacity change from 0 to 512
[  349.556552][ T4227] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.562647][T16546] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  349.563710][ T4227] bridge0: port 2(bridge_slave_1) entered forwarding state
[  349.585297][T16546] EXT4-fs (loop3): 1 truncate cleaned up
[  349.602007][T16546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  349.629065][T16501] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  349.639547][T16501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  349.720923][T16501] 8021q: adding VLAN 0 to HW filter on device batadv0
[  349.745589][T15355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.860953][T16567] netlink: 'syz.6.3484': attribute type 10 has an invalid length.
[  349.882880][T16567] 8021q: adding VLAN 0 to HW filter on device batadv0
[  349.907084][T16567] FAULT_INJECTION: forcing a failure.
[  349.907084][T16567] name failslab, interval 1, probability 0, space 0, times 0
[  349.919801][T16567] CPU: 0 UID: 0 PID: 16567 Comm: syz.6.3484 Tainted: G        W           6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) 
[  349.919838][T16567] Tainted: [W]=WARN
[  349.919844][T16567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  349.919905][T16567] Call Trace:
[  349.919912][T16567]  <TASK>
[  349.919921][T16567]  __dump_stack+0x1d/0x30
[  349.919958][T16567]  dump_stack_lvl+0xe8/0x140
[  349.919977][T16567]  dump_stack+0x15/0x1b
[  349.920039][T16567]  should_fail_ex+0x265/0x280
[  349.920060][T16567]  should_failslab+0x8c/0xb0
[  349.920128][T16567]  kmem_cache_alloc_noprof+0x50/0x310
[  349.920155][T16567]  ? skb_clone+0x151/0x1f0
[  349.920252][T16567]  skb_clone+0x151/0x1f0
[  349.920272][T16567]  __netlink_deliver_tap+0x2c9/0x500
[  349.920297][T16567]  netlink_unicast+0x66b/0x690
[  349.920404][T16567]  netlink_sendmsg+0x58b/0x6b0
[  349.920435][T16567]  ? __pfx_netlink_sendmsg+0x10/0x10
[  349.920457][T16567]  __sock_sendmsg+0x142/0x180
[  349.920485][T16567]  ____sys_sendmsg+0x31e/0x4e0
[  349.920561][T16567]  ___sys_sendmsg+0x17b/0x1d0
[  349.920636][T16567]  __x64_sys_sendmsg+0xd4/0x160
[  349.920662][T16567]  x64_sys_call+0x191e/0x2ff0
[  349.920821][T16567]  do_syscall_64+0xd2/0x200
[  349.920847][T16567]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  349.921002][T16567]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  349.921026][T16567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.921057][T16567] RIP: 0033:0x7f880437ebe9
[  349.921072][T16567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  349.921092][T16567] RSP: 002b:00007f8802de7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  349.921110][T16567] RAX: ffffffffffffffda RBX: 00007f88045a5fa0 RCX: 00007f880437ebe9
[  349.921125][T16567] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  349.921139][T16567] RBP: 00007f8802de7090 R08: 0000000000000000 R09: 0000000000000000
[  349.921207][T16567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  349.921222][T16567] R13: 00007f88045a6038 R14: 00007f88045a5fa0 R15: 00007fff7177f698
[  349.921245][T16567]  </TASK>
[  350.144322][ T3382] usb usb6-port1: attempt power cycle
[  350.155843][T16567] bond0: entered promiscuous mode
[  350.161166][T16567] bond_slave_0: entered promiscuous mode
[  350.167255][T16567] bond_slave_1: entered promiscuous mode
[  350.188752][T16501] veth0_vlan: entered promiscuous mode
[  350.206850][T16501] veth1_vlan: entered promiscuous mode
[  350.225132][T16583] loop3: detected capacity change from 0 to 2048
[  350.235617][T16585] SELinux: failed to load policy
[  350.241621][T16501] veth0_macvtap: entered promiscuous mode
[  350.249438][T16501] veth1_macvtap: entered promiscuous mode
[  350.268130][T16501] batman_adv: batadv0: Interface activated: batadv_slave_0
[  350.278003][T16587] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3490'.
[  350.281068][T16583]  loop3: p2 p3 p7
[  350.292499][T16501] batman_adv: batadv0: Interface activated: batadv_slave_1
[  350.305701][T16587] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3490'.
[  350.318426][  T264] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  350.335843][T11384] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  350.365311][T11384] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  350.388833][T13627] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  350.411883][T11588] udevd[11588]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  350.423515][T11587] udevd[11587]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  350.435394][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory
[  350.461708][T16594] loop9: detected capacity change from 0 to 1024
[  350.491914][T16594] EXT4-fs: Ignoring removed orlov option
[  350.497676][T16594] EXT4-fs: Ignoring removed mblk_io_submit option
[  350.511500][T16594] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  350.535446][T16594] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  350.541727][T16596] loop3: detected capacity change from 0 to 512
[  350.569517][T16594] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16594 comm=]-[}
[  350.639765][T16602] loop3: detected capacity change from 0 to 512
[  350.681900][ T2992] udevd[2992]: worker [11587] terminated by signal 33 (Unknown signal 33)
[  350.722809][T16610] netlink: 'syz.3.3496': attribute type 1 has an invalid length.
[  350.735548][T11588] printk: udevd: 47 output lines suppressed due to ratelimiting
[  350.846662][T16620] netlink: 'syz.6.3501': attribute type 1 has an invalid length.
[  350.976652][T16632] loop6: detected capacity change from 0 to 512
[  350.976886][T16629] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  351.006152][T16632] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  351.021331][T16632] EXT4-fs (loop6): mount failed
[  351.052353][T16638] netlink: 'syz.3.3509': attribute type 21 has an invalid length.
[  351.068919][T16638] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3509'.
[  351.119095][ T3397] usb usb8-port1: unable to enumerate USB device
[  351.132358][T16642] netlink: 'syz.6.3511': attribute type 1 has an invalid length.
[  351.148239][T16644] SELinux: failed to load policy
[  351.151757][T16645] rdma_rxe: rxe_newlink: failed to add lo
[  351.286427][T16655] netlink: 'syz.8.3517': attribute type 4 has an invalid length.
[  351.294269][T16655] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3517'.
[  351.314871][T16655] : renamed from bond0 (while UP)
[  351.403927][T16664] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3521'.
[  351.413065][T16664] netlink: 84 bytes leftover after parsing attributes in process `syz.8.3521'.
[  351.565433][T16668] netlink: 'syz.8.3522': attribute type 21 has an invalid length.
[  351.573409][T16668] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3522'.
[  351.659624][T16672] netlink: 'syz.6.3524': attribute type 1 has an invalid length.
[  352.133209][ T3382] usb usb6-port1: unable to enumerate USB device
[  352.735429][T16689] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3529'.
[  352.799665][T16690] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3529'.
[  353.062472][   T29] kauditd_printk_skb: 515 callbacks suppressed
[  353.062543][   T29] audit: type=1326 audit(1755605269.304:16368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16693 comm="syz.4.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4c37ebe9 code=0x7ffc0000
[  353.104508][   T29] audit: type=1326 audit(1755605269.332:16369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16693 comm="syz.4.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2f4c37ebe9 code=0x7ffc0000
[  353.128212][   T29] audit: type=1326 audit(1755605269.332:16370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16693 comm="syz.4.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4c37ebe9 code=0x7ffc0000
[  353.148234][T16702] netlink: 'syz.3.3533': attribute type 21 has an invalid length.
[  353.151875][   T29] audit: type=1326 audit(1755605269.332:16371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16693 comm="syz.4.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f4c37ebe9 code=0x7ffc0000
[  353.159861][T16702] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3533'.
[  353.183201][   T29] audit: type=1326 audit(1755605269.332:16372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16693 comm="syz.4.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4c37ebe9 code=0x7ffc0000
[  353.215863][   T29] audit: type=1326 audit(1755605269.332:16373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16693 comm="syz.4.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f4c37ebe9 code=0x7ffc0000
[  353.239512][   T29] audit: type=1326 audit(1755605269.332:16374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16693 comm="syz.4.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4c37ebe9 code=0x7ffc0000
[  353.263095][   T29] audit: type=1326 audit(1755605269.332:16375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16693 comm="syz.4.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f2f4c37ebe9 code=0x7ffc0000
[  353.286564][   T29] audit: type=1326 audit(1755605269.332:16376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16693 comm="syz.4.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4c37ebe9 code=0x7ffc0000
[  353.310305][   T29] audit: type=1326 audit(1755605269.332:16377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16693 comm="syz.4.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f2f4c37ebe9 code=0x7ffc0000
[  353.334916][T16696] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3532'.
[  353.347494][T16696] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3532'.
[  353.356810][T16700] netlink: 'syz.4.3535': attribute type 1 has an invalid length.
[  353.496089][T16710] lo speed is unknown, defaulting to 1000
[  353.516780][T16710] lo speed is unknown, defaulting to 1000
[  353.527683][T16713] loop4: detected capacity change from 0 to 512
[  353.557842][T16713] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  353.590819][T16714] loop3: detected capacity change from 0 to 256
[  353.620894][T16714] FAT-fs (loop3): Directory bread(block 1285) failed
[  353.636178][T16714] FAT-fs (loop3): Directory bread(block 1285) failed
[  353.671346][T16713] EXT4-fs (loop4): 1 truncate cleaned up
[  353.680075][T16714] FAT-fs (loop3): Directory bread(block 1285) failed
[  353.690315][T16714] FAT-fs (loop3): Directory bread(block 1285) failed
[  353.695986][T16719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16719 comm=syz.3.3539
[  353.702044][T16713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  353.752564][T16714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16714 comm=syz.3.3539
[  353.859445][T14591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.011148][T16735] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  354.036288][T16738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3547'.
[  354.221974][T16742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63261 sclass=netlink_route_socket pid=16742 comm=syz.4.3550
[  354.255836][T16751] loop3: detected capacity change from 0 to 512
[  354.296584][T16753] loop3: detected capacity change from 0 to 2048
[  354.345392][T16753]  loop3: p2 p3 p7
[  354.394736][T16759] loop4: detected capacity change from 0 to 512
[  354.476217][T16761] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3558'.
[  354.539659][T16780] loop8: detected capacity change from 0 to 512
[  354.596140][T16785] SELinux: failed to load policy
[  354.705476][T16797] loop3: detected capacity change from 0 to 2048
[  354.747081][T16797] Alternate GPT is invalid, using primary GPT.
[  354.753539][T16797]  loop3: p2 p3 p7
[  355.331462][T16803] FAULT_INJECTION: forcing a failure.
[  355.331462][T16803] name failslab, interval 1, probability 0, space 0, times 0
[  355.344158][T16803] CPU: 1 UID: 0 PID: 16803 Comm: syz.4.3575 Tainted: G        W           6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) 
[  355.344257][T16803] Tainted: [W]=WARN
[  355.344329][T16803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  355.344342][T16803] Call Trace:
[  355.344348][T16803]  <TASK>
[  355.344355][T16803]  __dump_stack+0x1d/0x30
[  355.344378][T16803]  dump_stack_lvl+0xe8/0x140
[  355.344401][T16803]  dump_stack+0x15/0x1b
[  355.344417][T16803]  should_fail_ex+0x265/0x280
[  355.344436][T16803]  ? __xdp_reg_mem_model+0x173/0x3e0
[  355.344541][T16803]  should_failslab+0x8c/0xb0
[  355.344565][T16803]  __kmalloc_cache_noprof+0x4c/0x320
[  355.344601][T16803]  __xdp_reg_mem_model+0x173/0x3e0
[  355.344676][T16803]  ? page_pool_create_percpu+0x515/0x630
[  355.344717][T16803]  xdp_reg_mem_model+0x22/0x40
[  355.344805][T16803]  bpf_test_run_xdp_live+0x172/0xfe0
[  355.344830][T16803]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  355.344863][T16803]  ? __pfx_autoremove_wake_function+0x10/0x10
[  355.344941][T16803]  ? bpf_dispatcher_xdp+0x800/0x1000
[  355.344963][T16803]  ? synchronize_rcu+0x45/0x320
[  355.345049][T16803]  ? bpf_dispatcher_xdp+0x800/0x1000
[  355.345063][T16803]  ? bpf_dispatcher_xdp+0x800/0x1000
[  355.345078][T16803]  ? bpf_dispatcher_change_prog+0x6ec/0x7f0
[  355.345108][T16803]  ? 0xffffffffa0202ecc
[  355.345123][T16803]  ? 0xffffffffa020c6d8
[  355.345224][T16803]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  355.345306][T16803]  bpf_prog_test_run_xdp+0x4f5/0x910
[  355.345332][T16803]  ? __rcu_read_unlock+0x4f/0x70
[  355.345362][T16803]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  355.345443][T16803]  bpf_prog_test_run+0x22a/0x390
[  355.345512][T16803]  __sys_bpf+0x4b9/0x7b0
[  355.345609][T16803]  __x64_sys_bpf+0x41/0x50
[  355.345637][T16803]  x64_sys_call+0x2aea/0x2ff0
[  355.345663][T16803]  do_syscall_64+0xd2/0x200
[  355.345746][T16803]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  355.345772][T16803]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  355.345801][T16803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.345864][T16803] RIP: 0033:0x7f2f4c37ebe9
[  355.345878][T16803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.345896][T16803] RSP: 002b:00007f2f4ade7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  355.345913][T16803] RAX: ffffffffffffffda RBX: 00007f2f4c5a5fa0 RCX: 00007f2f4c37ebe9
[  355.345926][T16803] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  355.345942][T16803] RBP: 00007f2f4ade7090 R08: 0000000000000000 R09: 0000000000000000
[  355.345978][T16803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.345993][T16803] R13: 00007f2f4c5a6038 R14: 00007f2f4c5a5fa0 R15: 00007ffd7816e608
[  355.346018][T16803]  </TASK>
[  355.749163][T16808] FAULT_INJECTION: forcing a failure.
[  355.749163][T16808] name failslab, interval 1, probability 0, space 0, times 0
[  355.761906][T16808] CPU: 0 UID: 0 PID: 16808 Comm: syz.8.3577 Tainted: G        W           6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) 
[  355.761946][T16808] Tainted: [W]=WARN
[  355.761956][T16808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  355.761968][T16808] Call Trace:
[  355.761974][T16808]  <TASK>
[  355.762021][T16808]  __dump_stack+0x1d/0x30
[  355.762039][T16808]  dump_stack_lvl+0xe8/0x140
[  355.762056][T16808]  dump_stack+0x15/0x1b
[  355.762070][T16808]  should_fail_ex+0x265/0x280
[  355.762088][T16808]  should_failslab+0x8c/0xb0
[  355.762109][T16808]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  355.762198][T16808]  ? sidtab_sid2str_get+0xa0/0x130
[  355.762218][T16808]  kmemdup_noprof+0x2b/0x70
[  355.762308][T16808]  sidtab_sid2str_get+0xa0/0x130
[  355.762327][T16808]  security_sid_to_context_core+0x1eb/0x2e0
[  355.762346][T16808]  security_sid_to_context+0x27/0x40
[  355.762363][T16808]  selinux_lsmprop_to_secctx+0x67/0xf0
[  355.762382][T16808]  security_lsmprop_to_secctx+0x43/0x80
[  355.762497][T16808]  audit_log_task_context+0x77/0x190
[  355.762526][T16808]  audit_log_task+0xf4/0x250
[  355.762552][T16808]  audit_seccomp+0x61/0x100
[  355.762573][T16808]  ? __seccomp_filter+0x68c/0x10d0
[  355.762629][T16808]  __seccomp_filter+0x69d/0x10d0
[  355.762648][T16808]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  355.762671][T16808]  ? vfs_write+0x7e8/0x960
[  355.762689][T16808]  ? __rcu_read_unlock+0x4f/0x70
[  355.762718][T16808]  ? __fget_files+0x184/0x1c0
[  355.762742][T16808]  __secure_computing+0x82/0x150
[  355.762760][T16808]  syscall_trace_enter+0xcf/0x1e0
[  355.762780][T16808]  do_syscall_64+0xac/0x200
[  355.762862][T16808]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  355.762961][T16808]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  355.762992][T16808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.763010][T16808] RIP: 0033:0x7fb560d2ebe9
[  355.763084][T16808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.763100][T16808] RSP: 002b:00007fb55f797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000063
[  355.763116][T16808] RAX: ffffffffffffffda RBX: 00007fb560f55fa0 RCX: 00007fb560d2ebe9
[  355.763130][T16808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  355.763141][T16808] RBP: 00007fb55f797090 R08: 0000000000000000 R09: 0000000000000000
[  355.763151][T16808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.763164][T16808] R13: 00007fb560f56038 R14: 00007fb560f55fa0 R15: 00007ffcd896d438
[  355.763181][T16808]  </TASK>
[  356.055432][T16810] loop8: detected capacity change from 0 to 512
[  356.111707][ T3382] usb usb6-port1: attempt power cycle
[  356.263632][T16814] loop8: detected capacity change from 0 to 512
[  356.298386][T16814] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  356.358471][T16814] EXT4-fs (loop8): 1 truncate cleaned up
[  356.365079][T16814] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  356.493299][T16026] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.691183][T16826] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3582'.
[  356.700346][T16826] netlink: 84 bytes leftover after parsing attributes in process `syz.8.3582'.
[  356.970738][T16832] loop8: detected capacity change from 0 to 1024
[  357.123915][T16842] rdma_rxe: rxe_newlink: failed to add lo
[  357.307290][T16848] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3591'.
[  357.988516][T16863] SELinux: failed to load policy
[  358.104630][ T3382] usb usb6-port1: unable to enumerate USB device
[  358.177978][T16865] loop8: detected capacity change from 0 to 512
[  358.243820][T16865] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.338697][T16865] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  358.478755][T16890] loop6: detected capacity change from 0 to 512
[  358.502041][T16890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.514910][T16890] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  358.530131][T16894] netlink: 'syz.4.3607': attribute type 2 has an invalid length.
[  358.538015][T16894] netlink: 'syz.4.3607': attribute type 8 has an invalid length.
[  358.545755][T16894] __nla_validate_parse: 3 callbacks suppressed
[  358.545773][T16894] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3607'.
[  358.561700][T12574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.606316][T16897] loop6: detected capacity change from 0 to 512
[  358.618960][T16897] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.3608: corrupted in-inode xattr: invalid ea_ino
[  358.637428][   T29] kauditd_printk_skb: 321 callbacks suppressed
[  358.637446][   T29] audit: type=1400 audit(1755605274.524:16696): avc:  denied  { write } for  pid=16900 comm="syz.3.3610" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  358.637783][T16901] FAULT_INJECTION: forcing a failure.
[  358.637783][T16901] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  358.643729][   T29] audit: type=1400 audit(1755605274.524:16697): avc:  denied  { ioctl } for  pid=16900 comm="syz.3.3610" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  358.667542][T16901] CPU: 0 UID: 0 PID: 16901 Comm: syz.3.3610 Tainted: G        W           6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) 
[  358.667586][T16901] Tainted: [W]=WARN
[  358.667596][T16901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  358.667614][T16901] Call Trace:
[  358.667627][T16901]  <TASK>
[  358.667638][T16901]  __dump_stack+0x1d/0x30
[  358.667680][T16901]  dump_stack_lvl+0xe8/0x140
[  358.667709][T16901]  dump_stack+0x15/0x1b
[  358.667733][T16901]  should_fail_ex+0x265/0x280
[  358.667762][T16901]  should_fail+0xb/0x20
[  358.667786][T16901]  should_fail_usercopy+0x1a/0x20
[  358.667817][T16901]  _copy_from_user+0x1c/0xb0
[  358.667917][T16901]  sg_write+0x1ed/0x750
[  358.667985][T16901]  vfs_writev+0x403/0x8b0
[  358.668098][T16901]  ? __pfx_sg_write+0x10/0x10
[  358.668151][T16901]  do_writev+0xe7/0x210
[  358.668200][T16901]  __x64_sys_writev+0x45/0x50
[  358.668271][T16901]  x64_sys_call+0x1e9a/0x2ff0
[  358.668306][T16901]  do_syscall_64+0xd2/0x200
[  358.668344][T16901]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  358.668378][T16901]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  358.668423][T16901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.668508][T16901] RIP: 0033:0x7f3f7636ebe9
[  358.668543][T16901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  358.668568][T16901] RSP: 002b:00007f3f74dd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  358.668593][T16901] RAX: ffffffffffffffda RBX: 00007f3f76595fa0 RCX: 00007f3f7636ebe9
[  358.668624][T16901] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003
[  358.668641][T16901] RBP: 00007f3f74dd7090 R08: 0000000000000000 R09: 0000000000000000
[  358.668657][T16901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  358.668673][T16901] R13: 00007f3f76596038 R14: 00007f3f76595fa0 R15: 00007ffd9f918e88
[  358.668700][T16901]  </TASK>
[  358.670600][T16897] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.3608: couldn't read orphan inode 15 (err -117)
[  358.729597][T16903] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  358.729597][T16903]    program syz.3.3611 not setting count and/or reply_len properly
[  358.745474][T16897] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  358.793068][   T29] audit: type=1400 audit(1755605274.664:16698): avc:  denied  { setopt } for  pid=16906 comm="syz.4.3613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  358.814295][T16897] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.851946][   T29] audit: type=1400 audit(1755605274.692:16699): avc:  denied  { bind } for  pid=16906 comm="syz.4.3613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  358.987497][   T29] audit: type=1400 audit(1755605274.692:16700): avc:  denied  { getopt } for  pid=16906 comm="syz.4.3613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  359.007207][   T29] audit: type=1400 audit(1755605274.692:16701): avc:  denied  { create } for  pid=16906 comm="syz.4.3613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  359.027039][   T29] audit: type=1400 audit(1755605274.692:16702): avc:  denied  { write } for  pid=16906 comm="syz.4.3613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  359.048790][T16026] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.049237][   T29] audit: type=1326 audit(1755605274.729:16703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16909 comm="syz.3.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7636ebe9 code=0x7ffc0000
[  359.081500][   T29] audit: type=1326 audit(1755605274.729:16704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16909 comm="syz.3.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f3f7636ebe9 code=0x7ffc0000
[  359.105141][   T29] audit: type=1326 audit(1755605274.729:16705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16909 comm="syz.3.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7636ebe9 code=0x7ffc0000
[  359.345017][T16939] loop6: detected capacity change from 0 to 512
[  359.351755][T16939] EXT4-fs: Ignoring removed orlov option
[  359.360490][T16939] EXT4-fs (loop6): blocks per group (95) and clusters per group (32768) inconsistent
[  359.708363][T16944] loop3: detected capacity change from 0 to 8192
[  360.107737][T16953] netlink: 'syz.4.3626': attribute type 10 has an invalid length.
[  360.158099][T16953] 8021q: adding VLAN 0 to HW filter on device batadv0
[  360.243173][T16953] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  360.281472][T16939] loop6: detected capacity change from 0 to 128
[  361.798122][T16958] netlink: 'syz.4.3627': attribute type 1 has an invalid length.
[  361.888002][T16965] loop3: detected capacity change from 0 to 8192
[  361.946045][T16969] loop8: detected capacity change from 0 to 512
[  361.956304][T16970] loop6: detected capacity change from 0 to 512
[  361.965039][T16969] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  361.975967][T16970] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  362.001098][T16969] EXT4-fs (loop8): 1 truncate cleaned up
[  362.023529][T16969] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  362.042158][T16970] EXT4-fs (loop6): 1 truncate cleaned up
[  362.054727][T16970] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  362.121031][T12574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.149855][T16026] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.255865][T16993] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[  362.262429][T16993] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  362.269962][T16993] vhci_hcd vhci_hcd.0: Device attached
[  362.281142][T16994] vhci_hcd: cannot find the pending unlink 2
[  362.315943][T16996] loop6: detected capacity change from 0 to 512
[  362.336090][T16996] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  362.351187][T16996] EXT4-fs (loop6): orphan cleanup on readonly fs
[  362.368743][T16996] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.3640: corrupted inode contents
[  362.386907][T16994] vhci_hcd: connection closed
[  362.389817][T11384] vhci_hcd: stop threads
[  362.391424][T16996] EXT4-fs (loop6): Remounting filesystem read-only
[  362.394547][T11384] vhci_hcd: release socket
[  362.409922][T11384] vhci_hcd: disconnect device
[  362.425842][T16996] EXT4-fs (loop6): 1 truncate cleaned up
[  362.431742][  T264] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  362.442420][  T264] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  362.454423][  T264] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[  362.469758][T16996] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  362.473385][    T9] vhci_hcd: vhci_device speed not set
[  362.842980][T17007] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.850359][T17007] syzkaller0: entered promiscuous mode
[  362.855844][T17007] syzkaller0: entered allmulticast mode
[  362.867407][T17007] tipc: Resetting bearer <eth:syzkaller0>
[  362.881842][T17006] tipc: Resetting bearer <eth:syzkaller0>
[  362.891320][T17006] tipc: Disabling bearer <eth:syzkaller0>
[  362.949631][T17009] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3644'.
[  362.958804][T17009] netlink: 84 bytes leftover after parsing attributes in process `syz.8.3644'.
[  363.063691][T17011] SELinux: failed to load policy
[  363.145124][T12574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.218055][T17022] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3650'.
[  363.237712][T17022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16408 sclass=netlink_route_socket pid=17022 comm=syz.8.3650
[  363.262418][T17022] netlink: 'syz.8.3650': attribute type 5 has an invalid length.
[  363.290382][T17028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3649'.
[  363.303876][T17018] lo speed is unknown, defaulting to 1000
[  363.310246][T17018] lo speed is unknown, defaulting to 1000
[  363.428111][T17034] loop3: detected capacity change from 0 to 2048
[  363.485759][T17037] loop8: detected capacity change from 0 to 512
[  363.516233][T17034]  loop3: p2 p3 p7
[  363.541571][T17043] bond0: (slave batadv0): Releasing backup interface
[  363.577713][T17043] FAULT_INJECTION: forcing a failure.
[  363.577713][T17043] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  363.591051][T17043] CPU: 0 UID: 0 PID: 17043 Comm: syz.4.3655 Tainted: G        W           6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) 
[  363.591093][T17043] Tainted: [W]=WARN
[  363.591099][T17043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  363.591113][T17043] Call Trace:
[  363.591118][T17043]  <TASK>
[  363.591129][T17043]  __dump_stack+0x1d/0x30
[  363.591222][T17043]  dump_stack_lvl+0xe8/0x140
[  363.591246][T17043]  dump_stack+0x15/0x1b
[  363.591267][T17043]  should_fail_ex+0x265/0x280
[  363.591290][T17043]  should_fail+0xb/0x20
[  363.591362][T17043]  should_fail_usercopy+0x1a/0x20
[  363.591383][T17043]  _copy_from_user+0x1c/0xb0
[  363.591415][T17043]  ___sys_recvmsg+0xaa/0x370
[  363.591442][T17043]  ? _parse_integer+0x27/0x40
[  363.591537][T17043]  do_recvmmsg+0x1ef/0x540
[  363.591587][T17043]  ? fput+0x8f/0xc0
[  363.591645][T17043]  __x64_sys_recvmmsg+0xe5/0x170
[  363.591676][T17043]  x64_sys_call+0x27a6/0x2ff0
[  363.591697][T17043]  do_syscall_64+0xd2/0x200
[  363.591727][T17043]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  363.591823][T17043]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  363.591847][T17043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.591885][T17043] RIP: 0033:0x7f2f4c37ebe9
[  363.591900][T17043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  363.591998][T17043] RSP: 002b:00007f2f4ade7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  363.592016][T17043] RAX: ffffffffffffffda RBX: 00007f2f4c5a5fa0 RCX: 00007f2f4c37ebe9
[  363.592032][T17043] RDX: 0000000000000001 RSI: 0000200000002380 RDI: 0000000000000003
[  363.592047][T17043] RBP: 00007f2f4ade7090 R08: 0000000000000000 R09: 0000000000000000
[  363.592083][T17043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  363.592099][T17043] R13: 00007f2f4c5a6038 R14: 00007f2f4c5a5fa0 R15: 00007ffd7816e608
[  363.592122][T17043]  </TASK>
[  363.803126][T17048] loop4: detected capacity change from 0 to 128
[  363.818825][T17045] loop8: detected capacity change from 0 to 512
[  363.827252][T17045] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  363.828081][T17048] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  363.848443][T17048] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  363.860126][T17048] FAULT_INJECTION: forcing a failure.
[  363.860126][T17048] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  363.865895][T17045] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  363.873303][T17048] CPU: 0 UID: 0 PID: 17048 Comm: syz.4.3658 Tainted: G        W           6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) 
[  363.873424][T17048] Tainted: [W]=WARN
[  363.873430][T17048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  363.873443][T17048] Call Trace:
[  363.873450][T17048]  <TASK>
[  363.873461][T17048]  __dump_stack+0x1d/0x30
[  363.873492][T17048]  dump_stack_lvl+0xe8/0x140
[  363.873556][T17048]  dump_stack+0x15/0x1b
[  363.873578][T17048]  should_fail_ex+0x265/0x280
[  363.873617][T17048]  should_fail+0xb/0x20
[  363.873640][T17048]  should_fail_usercopy+0x1a/0x20
[  363.873740][T17048]  _copy_from_user+0x1c/0xb0
[  363.873779][T17048]  ___sys_sendmsg+0xc1/0x1d0
[  363.873831][T17048]  __x64_sys_sendmsg+0xd4/0x160
[  363.873870][T17048]  x64_sys_call+0x191e/0x2ff0
[  363.873899][T17048]  do_syscall_64+0xd2/0x200
[  363.873936][T17048]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  363.874019][T17048]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  363.874126][T17048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.874154][T17048] RIP: 0033:0x7f2f4c37ebe9
[  363.874176][T17048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  363.874201][T17048] RSP: 002b:00007f2f4ade7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  363.874226][T17048] RAX: ffffffffffffffda RBX: 00007f2f4c5a5fa0 RCX: 00007f2f4c37ebe9
[  363.874241][T17048] RDX: 0000000000000880 RSI: 0000200000001ac0 RDI: 0000000000000004
[  363.874314][T17048] RBP: 00007f2f4ade7090 R08: 0000000000000000 R09: 0000000000000000
[  363.874403][T17048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  363.874420][T17048] R13: 00007f2f4c5a6038 R14: 00007f2f4c5a5fa0 R15: 00007ffd7816e608
[  363.874446][T17048]  </TASK>
[  364.067001][T17045] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  364.070158][T14591] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  364.095730][T17045] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  364.118581][   T29] kauditd_printk_skb: 231 callbacks suppressed
[  364.118600][   T29] audit: type=1326 audit(1755605279.659:16931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.4.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4c37ebe9 code=0x7ffc0000
[  364.148595][   T29] audit: type=1326 audit(1755605279.659:16932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.4.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4c37ebe9 code=0x7ffc0000
[  364.172448][   T29] audit: type=1326 audit(1755605279.659:16933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.4.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2f4c37ebe9 code=0x7ffc0000
[  364.196083][   T29] audit: type=1326 audit(1755605279.659:16934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.4.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4c37ebe9 code=0x7ffc0000
[  364.219722][   T29] audit: type=1326 audit(1755605279.659:16935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.4.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4c37ebe9 code=0x7ffc0000
[  364.243395][   T29] audit: type=1326 audit(1755605279.659:16936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.4.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f4c37ebe9 code=0x7ffc0000
[  364.267328][   T29] audit: type=1326 audit(1755605279.659:16937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.4.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4c37ebe9 code=0x7ffc0000
[  364.291257][   T29] audit: type=1326 audit(1755605279.659:16938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.4.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f4c37ebe9 code=0x7ffc0000
[  364.315068][   T29] audit: type=1326 audit(1755605279.659:16939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.4.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4c37ebe9 code=0x7ffc0000
[  364.338734][   T29] audit: type=1326 audit(1755605279.659:16940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.4.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2f4c380a7c code=0x7ffc0000
[  364.371663][T17064] tipc: New replicast peer: 255.255.255.83
[  364.377729][T17064] tipc: Enabled bearer <udp:£>, priority 10
[  364.461958][T17068] netlink: 'syz.8.3663': attribute type 1 has an invalid length.
[  365.029803][T17076] FAULT_INJECTION: forcing a failure.
[  365.029803][T17076] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  365.042966][T17076] CPU: 1 UID: 0 PID: 17076 Comm: syz.4.3666 Tainted: G        W           6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) 
[  365.043049][T17076] Tainted: [W]=WARN
[  365.043057][T17076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  365.043182][T17076] Call Trace:
[  365.043189][T17076]  <TASK>
[  365.043197][T17076]  __dump_stack+0x1d/0x30
[  365.043240][T17076]  dump_stack_lvl+0xe8/0x140
[  365.043264][T17076]  dump_stack+0x15/0x1b
[  365.043283][T17076]  should_fail_ex+0x265/0x280
[  365.043310][T17076]  should_fail+0xb/0x20
[  365.043439][T17076]  should_fail_usercopy+0x1a/0x20
[  365.043514][T17076]  _copy_from_user+0x1c/0xb0
[  365.043549][T17076]  ___sys_sendmsg+0xc1/0x1d0
[  365.043597][T17076]  __x64_sys_sendmsg+0xd4/0x160
[  365.043635][T17076]  x64_sys_call+0x191e/0x2ff0
[  365.043733][T17076]  do_syscall_64+0xd2/0x200
[  365.043770][T17076]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  365.043800][T17076]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  365.043824][T17076]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.043868][T17076] RIP: 0033:0x7f2f4c37ebe9
[  365.043884][T17076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  365.043928][T17076] RSP: 002b:00007f2f4ade7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  365.043951][T17076] RAX: ffffffffffffffda RBX: 00007f2f4c5a5fa0 RCX: 00007f2f4c37ebe9
[  365.044003][T17076] RDX: 0000000000000880 RSI: 0000200000001ac0 RDI: 0000000000000005
[  365.044019][T17076] RBP: 00007f2f4ade7090 R08: 0000000000000000 R09: 0000000000000000
[  365.044034][T17076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  365.044049][T17076] R13: 00007f2f4c5a6038 R14: 00007f2f4c5a5fa0 R15: 00007ffd7816e608
[  365.044073][T17076]  </TASK>
[  365.317445][T17081] rdma_rxe: rxe_newlink: failed to add lo
[  365.407719][T17083] loop8: detected capacity change from 0 to 512
[  365.415993][T17083] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.3669: corrupted in-inode xattr: invalid ea_ino
[  365.429673][T17083] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.3669: couldn't read orphan inode 15 (err -117)
[  365.442180][T17083] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  365.455137][T17083] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.518829][   T36] tipc: Node number set to 2200756040
[  365.700280][T17086] loop8: detected capacity change from 0 to 512
[  365.707296][T17086] EXT4-fs: Ignoring removed orlov option
[  365.717699][T17086] EXT4-fs (loop8): blocks per group (95) and clusters per group (32768) inconsistent
[  366.093258][T17088] loop3: detected capacity change from 0 to 8192
[  366.225252][    T9] usb usb6-port1: attempt power cycle
[  366.359349][T17086] loop8: detected capacity change from 0 to 128
[  367.536708][T17102] loop3: detected capacity change from 0 to 512
[  367.560916][T17102] journal_path: Non-blockdev passed as './bus'
[  367.567121][T17102] EXT4-fs: error: could not find journal device path
[  367.621376][T17097] loop4: detected capacity change from 0 to 8192
[  367.821226][T17103] lo speed is unknown, defaulting to 1000
[  367.852384][T17103] lo speed is unknown, defaulting to 1000
[  368.140254][T17121] loop3: detected capacity change from 0 to 128
[  368.334473][T17103] chnl_net:caif_netlink_parms(): no params data found
[  368.448371][T17127] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  368.456873][T17127] FAT-fs (loop3): Filesystem has been set read-only
[  368.476244][T17132] SELinux: failed to load policy
[  368.501284][T17103] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.508635][T17103] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.525607][T17103] bridge_slave_0: entered allmulticast mode
[  368.532139][T17103] bridge_slave_0: entered promiscuous mode
[  368.539522][T17103] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.546689][T17103] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.554127][T17103] bridge_slave_1: entered allmulticast mode
[  368.560900][T17103] bridge_slave_1: entered promiscuous mode
[  368.602635][T17103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  368.617757][T17141] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3685'.
[  368.634198][T17103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  368.685098][T17103] team0: Port device team_slave_0 added
[  368.690952][T17144] loop4: detected capacity change from 0 to 1024
[  368.692120][T17103] team0: Port device team_slave_1 added
[  368.710358][T17144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  368.722650][T17144] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  368.781080][T17103] batman_adv: batadv0: Adding interface: batadv_slave_0
[  368.788095][T17103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.814074][T17103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.883341][T17103] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.890498][T17103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.916546][T17103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.989158][T17149] usb usb1: check_ctrlrecip: process 17149 (syz.4.3686) requesting ep 01 but needs 81
[  369.127716][T17149] vhci_hcd: default hub control req: 020f v0004 i0001 l0
[  369.162246][T17103] hsr_slave_0: entered promiscuous mode
[  369.192355][T17103] hsr_slave_1: entered promiscuous mode
[  369.231071][T17103] debugfs: 'hsr0' already exists in 'hsr'
[  369.236923][T17103] Cannot create hsr debugfs directory
[  369.488598][T17160] loop3: detected capacity change from 0 to 8192
[  369.526796][   T29] kauditd_printk_skb: 154 callbacks suppressed
[  369.526815][   T29] audit: type=1400 audit(1755605284.710:17095): avc:  denied  { read } for  pid=17166 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  369.555502][   T29] audit: type=1400 audit(1755605284.710:17096): avc:  denied  { open } for  pid=17166 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  369.634175][   T29] audit: type=1400 audit(1755605284.804:17097): avc:  denied  { add_name } for  pid=17162 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  369.657051][   T29] audit: type=1400 audit(1755605284.804:17098): avc:  denied  { create } for  pid=17162 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  369.679690][   T29] audit: type=1400 audit(1755605284.804:17099): avc:  denied  { write } for  pid=17162 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth4.link" dev="tmpfs" ino=23074 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  369.706227][   T29] audit: type=1400 audit(1755605284.804:17100): avc:  denied  { append } for  pid=17162 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" dev="tmpfs" ino=23074 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  369.799701][T17184] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17184 comm=syz.8.3694
[  369.858096][T17103] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  369.869123][   T29] audit: type=1326 audit(1755605284.925:17101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.8.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb560d2ebe9 code=0x7ffc0000
[  369.875853][T17187] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3694'.
[  369.892909][   T29] audit: type=1326 audit(1755605284.925:17102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.8.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fb560d2ebe9 code=0x7ffc0000
[  369.901774][T17187] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3694'.
[  369.925268][   T29] audit: type=1326 audit(1755605284.925:17103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.8.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb560d2ebe9 code=0x7ffc0000
[  369.958040][   T29] audit: type=1326 audit(1755605284.925:17104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.8.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fb560d2ebe9 code=0x7ffc0000
[  369.986584][T17103] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  369.996500][T17189] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3694'.
[  370.005600][T17189] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3694'.
[  370.014699][T17103] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  370.032814][T17103] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  370.055535][T17191] loop8: detected capacity change from 0 to 512
[  370.062193][T17191] EXT4-fs: Ignoring removed nobh option
[  370.084533][T17191] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13
[  370.124550][T17191] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.3694: attempt to clear invalid blocks 1 len 1
[  370.137687][T17191] EXT4-fs (loop8): Remounting filesystem read-only
[  370.148123][T17191] EXT4-fs (loop8): 1 truncate cleaned up
[  370.158902][T17191] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  370.262230][T17103] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.308634][T17187] veth0_to_team: entered promiscuous mode
[  370.336445][T17103] 8021q: adding VLAN 0 to HW filter on device team0
[  370.365092][T14591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.365692][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.381236][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  370.397489][T11384] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.404609][T11384] bridge0: port 2(bridge_slave_1) entered forwarding state
[  370.415723][    T9] usb usb6-port1: unable to enumerate USB device
[  370.449659][T17218] can0: slcan on ttyS3.
[  370.501547][T17218] can0 (unregistered): slcan off ttyS3.
[  370.508943][T17222] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3697'.
[  370.599420][T17222] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3697'.
[  370.649955][T17103] 8021q: adding VLAN 0 to HW filter on device batadv0
[  370.717947][T16026] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.926182][T17103] veth0_vlan: entered promiscuous mode
[  370.962509][T17103] veth1_vlan: entered promiscuous mode
[  371.005820][T17103] veth0_macvtap: entered promiscuous mode
[  371.033895][T17103] veth1_macvtap: entered promiscuous mode
[  371.050273][T17261] loop8: detected capacity change from 0 to 512
[  371.070535][T17103] batman_adv: batadv0: Interface activated: batadv_slave_0
[  371.088400][T17261] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[  371.102610][T17103] batman_adv: batadv0: Interface activated: batadv_slave_1
[  371.113085][T17261] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.3702: invalid indirect mapped block 2683928664 (level 1)
[  371.127577][T17261] EXT4-fs (loop8): 1 truncate cleaned up
[  371.133621][T17261] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  371.169403][T11384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  371.188948][T17261] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  371.235978][T17276] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  371.237922][T11384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  371.242597][T17276] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  371.258838][T17276] vhci_hcd vhci_hcd.0: Device attached
[  371.292605][T11384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  371.305159][T17277] vhci_hcd: cannot find the pending unlink 2
[  371.322868][T11384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  371.326181][T17277] vhci_hcd: connection closed
[  371.332304][  T264] vhci_hcd: stop threads
[  371.341385][  T264] vhci_hcd: release socket
[  371.345864][  T264] vhci_hcd: disconnect device
[  371.373637][T17285] loop8: detected capacity change from 0 to 512
[  371.373792][T17270] loop6: detected capacity change from 0 to 8192
[  371.387408][T17287] 9pnet_fd: Insufficient options for proto=fd
[  371.439842][T17287] loop0: detected capacity change from 0 to 1024
[  371.464704][T17287] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  371.475835][T17287] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  371.503025][T17299] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3710'.
[  371.506428][T17300] loop8: detected capacity change from 0 to 512
[  371.523463][T17287] JBD2: no valid journal superblock found
[  371.529368][T17287] EXT4-fs (loop0): Could not load journal inode
[  371.531447][T17299] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3710'.
[  371.678160][T17311] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  371.825795][T17325] netlink: 'syz.8.3712': attribute type 10 has an invalid length.
[  371.838184][T17320] loop0: detected capacity change from 0 to 2048
[  371.904212][T17318] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3712'.
[  371.906923][T17325] 8021q: adding VLAN 0 to HW filter on device team0
[  371.953825][T17320]  loop0: p2 p3 p7
[  371.990756][T17325] : (slave team0): Enslaving as an active interface with an up link
[  372.047982][T17336] 8021q: adding VLAN 0 to HW filter on device bond1
[  372.078176][T17336] bond1 (unregistering): Released all slaves
[  372.176075][T17344] loop4: detected capacity change from 0 to 512
[  372.191017][T17348] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2
[  372.293451][T17360] rdma_rxe: rxe_newlink: failed to add lo
[  373.004239][T17377] loop6: detected capacity change from 0 to 512
[  373.053258][T17377] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  373.076665][T17377] EXT4-fs (loop6): 1 truncate cleaned up
[  373.089558][T17377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  373.155674][T12574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  373.293220][T17402] loop8: detected capacity change from 0 to 512
[  373.467783][T17399] loop4: detected capacity change from 0 to 512
[  373.793446][T17417] loop0: detected capacity change from 0 to 128
[  374.227993][T17399] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  374.713189][T17399] EXT4-fs (loop4): 1 truncate cleaned up
[  374.826068][T17399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  374.892783][T17438] SELinux: failed to load policy
[  374.898670][T17432] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  374.907293][T17432] FAT-fs (loop0): Filesystem has been set read-only
[  374.921454][   T29] kauditd_printk_skb: 200 callbacks suppressed
[  374.921468][   T29] audit: type=1326 audit(1755605289.752:17305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17440 comm="syz.3.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7636ebe9 code=0x7ffc0000
[  374.951557][   T29] audit: type=1326 audit(1755605289.752:17306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17440 comm="syz.3.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f3f7636ebe9 code=0x7ffc0000
[  374.975116][   T29] audit: type=1326 audit(1755605289.752:17307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17440 comm="syz.3.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7636ebe9 code=0x7ffc0000
[  374.998725][   T29] audit: type=1326 audit(1755605289.752:17308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17440 comm="syz.3.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7636ebe9 code=0x7ffc0000
[  375.022446][   T29] audit: type=1326 audit(1755605289.752:17309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17440 comm="syz.3.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f3f7636ebe9 code=0x7ffc0000
[  375.045994][   T29] audit: type=1326 audit(1755605289.752:17310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17440 comm="syz.3.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7636ebe9 code=0x7ffc0000
[  375.096363][   T29] audit: type=1326 audit(1755605289.874:17311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17449 comm="syz.6.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880437ebe9 code=0x7ffc0000
[  375.099619][T14591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.120083][   T29] audit: type=1326 audit(1755605289.874:17312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17449 comm="syz.6.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880437ebe9 code=0x7ffc0000
[  375.152640][   T29] audit: type=1326 audit(1755605289.874:17313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17449 comm="syz.6.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f880437ebe9 code=0x7ffc0000
[  375.176266][   T29] audit: type=1326 audit(1755605289.874:17314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17449 comm="syz.6.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880437ebe9 code=0x7ffc0000
[  375.211441][T17451] netlink: 'syz.8.3743': attribute type 1 has an invalid length.
[  375.254064][T17465] loop4: detected capacity change from 0 to 512
[  375.273985][T17467] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  375.280577][T17467] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  375.288207][T17467] vhci_hcd vhci_hcd.0: Device attached
[  375.307767][T17469] vhci_hcd: cannot find the pending unlink 2
[  375.359291][T17482] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[  375.365881][T17482] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  375.371672][T17475] loop4: detected capacity change from 0 to 128
[  375.373651][T17482] vhci_hcd vhci_hcd.0: Device attached
[  375.399373][T17469] vhci_hcd: connection closed
[  375.403722][ T4227] vhci_hcd: stop threads
[  375.412810][ T4227] vhci_hcd: release socket
[  375.417268][ T4227] vhci_hcd: disconnect device
[  375.538628][T17505] loop4: detected capacity change from 0 to 1024
[  375.557752][T17484] vhci_hcd: connection closed
[  375.564291][T11384] vhci_hcd: stop threads
[  375.573496][T11384] vhci_hcd: release socket
[  375.577977][T11384] vhci_hcd: disconnect device
[  375.578613][ T3413] vhci_hcd: vhci_device speed not set
[  375.593819][T17505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  375.628473][T17505] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  375.678455][T17505] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.3756: lblock 1 mapped to illegal pblock 1 (length 15)
[  375.711806][T17533] loop3: detected capacity change from 0 to 512
[  375.728388][T17528] loop8: detected capacity change from 0 to 2048
[  375.734442][T17505] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  375.747271][T17505] EXT4-fs (loop4): This should not happen!! Data will be lost
[  375.747271][T17505] 
[  375.765186][T17505] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  375.772127][T17528] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  375.792107][T17505] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3756: lblock 1 mapped to illegal pblock 1 (length 3)
[  375.808016][T17505] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3756: lblock 1 mapped to illegal pblock 1 (length 3)
[  375.823195][T17505] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3756: lblock 1 mapped to illegal pblock 1 (length 3)
[  375.837524][T17528] EXT4-fs (loop8): shut down requested (0)
[  375.837731][T17505] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3756: lblock 1 mapped to illegal pblock 1 (length 3)
[  375.852486][T17540] lo speed is unknown, defaulting to 1000
[  375.857907][T17505] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3756: lblock 1 mapped to illegal pblock 1 (length 3)
[  375.863770][T17540] lo speed is unknown, defaulting to 1000
[  375.884090][T17505] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3756: lblock 1 mapped to illegal pblock 1 (length 3)
[  375.898246][T17528] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=12
[  375.907151][T17528] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=12
[  375.922453][T17541] bridge_slave_0: left allmulticast mode
[  375.928321][T17541] bridge_slave_0: left promiscuous mode
[  375.934111][T17541] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.938194][T17505] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3756: lblock 1 mapped to illegal pblock 1 (length 3)
[  375.955904][T17505] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3756: lblock 1 mapped to illegal pblock 1 (length 3)
[  375.968321][T16026] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.979689][T17541] bridge_slave_1: left allmulticast mode
[  375.985400][T17541] bridge_slave_1: left promiscuous mode
[  375.991127][T17541] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.005347][T17541] bond0: (slave bond_slave_0): Releasing backup interface
[  376.034140][T17541] bond0: (slave bond_slave_1): Releasing backup interface
[  376.056122][T17541] team0: Port device team_slave_0 removed
[  376.064131][T17549] SELinux: failed to load policy
[  376.070666][T17541] team0: Port device team_slave_1 removed
[  376.076707][T17541] batman_adv: batadv0: Removing interface: batadv_slave_0
[  376.197813][T17561] FAULT_INJECTION: forcing a failure.
[  376.197813][T17561] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  376.211185][T17561] CPU: 0 UID: 0 PID: 17561 Comm: syz.8.3770 Tainted: G        W           6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) 
[  376.211226][T17561] Tainted: [W]=WARN
[  376.211235][T17561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  376.211249][T17561] Call Trace:
[  376.211286][T17561]  <TASK>
[  376.211293][T17561]  __dump_stack+0x1d/0x30
[  376.211316][T17561]  dump_stack_lvl+0xe8/0x140
[  376.211339][T17561]  dump_stack+0x15/0x1b
[  376.211360][T17561]  should_fail_ex+0x265/0x280
[  376.211385][T17561]  should_fail_alloc_page+0xf2/0x100
[  376.211410][T17561]  __alloc_frozen_pages_noprof+0xff/0x360
[  376.211565][T17561]  alloc_pages_mpol+0xb3/0x250
[  376.211722][T17561]  vma_alloc_folio_noprof+0x1aa/0x300
[  376.211767][T17561]  handle_mm_fault+0xec2/0x2c20
[  376.211809][T17561]  do_user_addr_fault+0x636/0x1090
[  376.211889][T17561]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  376.211923][T17561]  exc_page_fault+0x62/0xa0
[  376.211945][T17561]  asm_exc_page_fault+0x26/0x30
[  376.211964][T17561] RIP: 0033:0x7fb560cdc20b
[  376.212055][T17561] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01
[  376.212076][T17561] RSP: 002b:00007fb55f794e10 EFLAGS: 00010246
[  376.212091][T17561] RAX: 00007fb55f796f30 RBX: 00007fb560f27640 RCX: 0000000000000000
[  376.212103][T17561] RDX: 00007fb55f796f78 RSI: 00007fb560d8eca8 RDI: 00007fb55f794e30
[  376.212116][T17561] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000
[  376.212132][T17561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  376.212192][T17561] R13: 00007fb560f56038 R14: 00007fb560f55fa0 R15: 00007ffcd896d438
[  376.212211][T17561]  </TASK>
[  376.212227][T17561] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  376.446713][T17572] loop0: detected capacity change from 0 to 512
[  376.447953][T17568] tipc: Enabling of bearer <udp:£> rejected, already enabled
[  376.453499][T17572] EXT4-fs: Ignoring removed oldalloc option
[  376.466838][T17572] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  376.514071][T14591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.527505][T17572] EXT4-fs (loop0): 1 truncate cleaned up
[  376.550129][T17572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  376.590452][T17577] loop3: detected capacity change from 0 to 1024
[  376.607916][T17577] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  376.647557][T17579] tipc: Started in network mode
[  376.652563][T17579] tipc: Node identity ac14140f, cluster identity 4711
[  376.677092][T17577] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3778: bg 0: block 10: padding at end of block bitmap is not set
[  376.698886][ T3413] hid_parser_main: 104 callbacks suppressed
[  376.698942][ T3413] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  376.705202][T17579] tipc: New replicast peer: 255.255.255.83
[  376.712501][ T3413] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  376.718328][T17579] tipc: Enabled bearer <udp:£>, priority 10
[  376.725694][ T3413] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  376.738660][T17577] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.3778: Failed to acquire dquot type 0
[  376.739077][ T3413] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  376.756310][T17577] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.3778: Failed to acquire dquot type 0
[  376.757755][ T3413] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  376.776264][ T3413] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  376.783718][ T3413] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  376.791146][ T3413] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  376.798569][ T3413] hid-generic 0000:0000:0000.0007: item fetching failed at offset 8/43
[  376.807526][T17577] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.3778: Freeing blocks not in datazone - block = 0, count = 4096
[  376.834925][T17572] netlink: 'wÞ£ÿ': attribute type 29 has an invalid length.
[  376.843953][ T3413] hid-generic 0000:0000:0000.0007: probe with driver hid-generic failed with error -22
[  376.851573][T17572] netlink: 'wÞ£ÿ': attribute type 29 has an invalid length.
[  376.857771][T17577] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.3778: Failed to acquire dquot type 0
[  376.872722][T17577] EXT4-fs (loop3): 1 orphan inode deleted
[  376.878542][T17586] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  376.885093][T17586] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  376.892650][T17586] vhci_hcd vhci_hcd.0: Device attached
[  376.899021][T17572] __nla_validate_parse: 5 callbacks suppressed
[  376.899035][T17572] netlink: 500 bytes leftover after parsing attributes in process `wÞ£ÿ'.
[  376.901230][T17577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.938362][T17103] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.948965][T15355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.960642][T17590] FAULT_INJECTION: forcing a failure.
[  376.960642][T17590] name failslab, interval 1, probability 0, space 0, times 0
[  376.973406][T17590] CPU: 0 UID: 0 PID: 17590 Comm: syz.0.3780 Tainted: G        W           6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) 
[  376.973485][T17590] Tainted: [W]=WARN
[  376.973493][T17590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  376.973504][T17590] Call Trace:
[  376.973510][T17590]  <TASK>
[  376.973517][T17590]  __dump_stack+0x1d/0x30
[  376.973540][T17590]  dump_stack_lvl+0xe8/0x140
[  376.973570][T17590]  dump_stack+0x15/0x1b
[  376.973590][T17590]  should_fail_ex+0x265/0x280
[  376.973683][T17590]  ? bpf_xdp_link_attach+0x1a7/0x5d0
[  376.973703][T17590]  should_failslab+0x8c/0xb0
[  376.973784][T17590]  __kmalloc_cache_noprof+0x4c/0x320
[  376.973848][T17590]  bpf_xdp_link_attach+0x1a7/0x5d0
[  376.973875][T17590]  link_create+0x502/0x6e0
[  376.973923][T17590]  __sys_bpf+0x61d/0x7b0
[  376.973966][T17590]  __x64_sys_bpf+0x41/0x50
[  376.973995][T17590]  x64_sys_call+0x2aea/0x2ff0
[  376.974020][T17590]  do_syscall_64+0xd2/0x200
[  376.974045][T17590]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  376.974133][T17590]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  376.974162][T17590]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.974187][T17590] RIP: 0033:0x7f5435eaebe9
[  376.974232][T17590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  376.974290][T17590] RSP: 002b:00007f5434917038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  376.974311][T17590] RAX: ffffffffffffffda RBX: 00007f54360d5fa0 RCX: 00007f5435eaebe9
[  376.974327][T17590] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 000000000000001c
[  376.974342][T17590] RBP: 00007f5434917090 R08: 0000000000000000 R09: 0000000000000000
[  376.974354][T17590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  376.974421][T17590] R13: 00007f54360d6038 R14: 00007f54360d5fa0 R15: 00007ffc9a821b28
[  376.974446][T17590]  </TASK>
[  377.179427][T17592] SELinux: failed to load policy
[  377.210480][T17587] vhci_hcd: connection closed
[  377.211506][T11384] vhci_hcd: stop threads
[  377.220674][T11384] vhci_hcd: release socket
[  377.225233][T11384] vhci_hcd: disconnect device
[  377.226587][T17594] SELinux: failed to load policy
[  377.247097][ T3413] vhci_hcd: vhci_device speed not set
[  377.347287][T17609] loop3: detected capacity change from 0 to 512
[  377.372856][T17611] loop3: detected capacity change from 0 to 256
[  377.381916][T17611] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  377.390729][T17611] FAT-fs (loop3): Filesystem has been set read-only
[  377.415632][T17613] loop3: detected capacity change from 0 to 256
[  377.430110][T17613] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  377.438921][T17613] FAT-fs (loop3): Filesystem has been set read-only
[  377.476677][T17616] loop3: detected capacity change from 0 to 512
[  377.486638][T17616] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.3792: corrupted in-inode xattr: invalid ea_ino
[  377.500249][T17616] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3792: couldn't read orphan inode 15 (err -117)
[  377.513082][T17616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  377.527334][T17616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.595397][T17619] netlink: 'syz.0.3793': attribute type 1 has an invalid length.
[  377.619835][T17621] SELinux: failed to load policy
[  377.785020][T17630] loop3: detected capacity change from 0 to 512
[  377.791976][T17630] EXT4-fs: Ignoring removed orlov option
[  377.802159][T17630] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent
[  378.528407][T17630] loop3: detected capacity change from 0 to 128
[  378.535427][   T36] tipc: Node number set to 2886997007
[  378.723685][T17636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3799'.
[  378.734481][T17637] loop0: detected capacity change from 0 to 764
[  378.792206][T17641] FAULT_INJECTION: forcing a failure.
[  378.792206][T17641] name failslab, interval 1, probability 0, space 0, times 0
[  378.804892][T17641] CPU: 1 UID: 0 PID: 17641 Comm: syz.0.3800 Tainted: G        W           6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) 
[  378.805045][T17641] Tainted: [W]=WARN
[  378.805052][T17641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  378.805063][T17641] Call Trace:
[  378.805070][T17641]  <TASK>
[  378.805078][T17641]  __dump_stack+0x1d/0x30
[  378.805101][T17641]  dump_stack_lvl+0xe8/0x140
[  378.805125][T17641]  dump_stack+0x15/0x1b
[  378.805156][T17641]  should_fail_ex+0x265/0x280
[  378.805181][T17641]  should_failslab+0x8c/0xb0
[  378.805204][T17641]  kmem_cache_alloc_noprof+0x50/0x310
[  378.805288][T17641]  ? alloc_empty_file+0x76/0x200
[  378.805413][T17641]  alloc_empty_file+0x76/0x200
[  378.805449][T17641]  path_openat+0x68/0x2170
[  378.805470][T17641]  ? _parse_integer_limit+0x170/0x190
[  378.805535][T17641]  ? _parse_integer+0x27/0x40
[  378.805558][T17641]  ? kstrtoull+0x111/0x140
[  378.805594][T17641]  ? kstrtouint+0x76/0xc0
[  378.805619][T17641]  do_filp_open+0x109/0x230
[  378.805647][T17641]  do_sys_openat2+0xa6/0x110
[  378.805762][T17641]  __x64_sys_creat+0x65/0x90
[  378.805871][T17641]  x64_sys_call+0x2d94/0x2ff0
[  378.805891][T17641]  do_syscall_64+0xd2/0x200
[  378.805918][T17641]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  378.805973][T17641]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  378.806004][T17641]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.806028][T17641] RIP: 0033:0x7f5435eaebe9
[  378.806106][T17641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  378.806175][T17641] RSP: 002b:00007f5434917038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  378.806193][T17641] RAX: ffffffffffffffda RBX: 00007f54360d5fa0 RCX: 00007f5435eaebe9
[  378.806278][T17641] RDX: 0000000000000000 RSI: 0000000000000036 RDI: 00002000000003c0
[  378.806294][T17641] RBP: 00007f5434917090 R08: 0000000000000000 R09: 0000000000000000
[  378.806386][T17641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  378.806397][T17641] R13: 00007f54360d6038 R14: 00007f54360d5fa0 R15: 00007ffc9a821b28
[  378.806416][T17641]  </TASK>
[  379.252102][T17648] loop0: detected capacity change from 0 to 8192
[  379.608098][T17655] netlink: 'syz.4.3805': attribute type 1 has an invalid length.
[  380.036834][ T3382] usb usb6-port1: attempt power cycle
[  380.970087][   T29] kauditd_printk_skb: 315 callbacks suppressed
[  380.970147][   T29] audit: type=1326 audit(1755605295.420:17621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17667 comm="syz.3.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7636ebe9 code=0x7ffc0000
[  381.006425][   T29] audit: type=1326 audit(1755605295.449:17622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17667 comm="syz.3.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7636ebe9 code=0x7ffc0000
[  381.030181][   T29] audit: type=1326 audit(1755605295.449:17623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17667 comm="syz.3.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f3f7636ebe9 code=0x7ffc0000
[  381.053737][   T29] audit: type=1326 audit(1755605295.449:17624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17667 comm="syz.3.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7636ebe9 code=0x7ffc0000
[  381.077401][   T29] audit: type=1326 audit(1755605295.449:17625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17667 comm="syz.3.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7636ebe9 code=0x7ffc0000
[  381.101072][   T29] audit: type=1326 audit(1755605295.449:17626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17667 comm="syz.3.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f3f7636ebe9 code=0x7ffc0000
[  381.124574][   T29] audit: type=1326 audit(1755605295.449:17627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17667 comm="syz.3.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7636ebe9 code=0x7ffc0000
[  381.148147][   T29] audit: type=1326 audit(1755605295.449:17628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17667 comm="syz.3.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7636ebe9 code=0x7ffc0000
[  381.227780][T17679] loop3: detected capacity change from 0 to 2048
[  381.249739][T17679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  381.270933][   T29] audit: type=1326 audit(1755605295.692:17629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17685 comm="syz.0.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5435eaebe9 code=0x7ffc0000
[  381.294853][T17679] syzkaller0: entered allmulticast mode
[  381.300088][   T29] audit: type=1326 audit(1755605295.692:17630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17685 comm="syz.0.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5435eaebe9 code=0x7ffc0000
[  381.300856][T17679] syzkaller0: entered promiscuous mode
[  381.345559][T17688] loop0: detected capacity change from 0 to 512
[  381.352993][T17679] syzkaller0 (unregistering): left allmulticast mode
[  381.359245][T17688] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  381.359828][T17679] syzkaller0 (unregistering): left promiscuous mode
[  381.377637][T17688] EXT4-fs (loop0): 1 truncate cleaned up
[  381.383724][T17688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  381.452625][T17103] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.784819][T17696] SELinux: failed to load policy
[  381.837514][T17700] SELinux: failed to load policy
[  382.192798][T17708] loop0: detected capacity change from 0 to 8192
[  382.241983][T15355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.410813][T17725] FAULT_INJECTION: forcing a failure.
[  382.410813][T17725] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  382.424073][T17725] CPU: 1 UID: 0 PID: 17725 Comm: syz.0.3831 Tainted: G        W           6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) 
[  382.424107][T17725] Tainted: [W]=WARN
[  382.424195][T17725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  382.424209][T17725] Call Trace:
[  382.424217][T17725]  <TASK>
[  382.424226][T17725]  __dump_stack+0x1d/0x30
[  382.424252][T17725]  dump_stack_lvl+0xe8/0x140
[  382.424276][T17725]  dump_stack+0x15/0x1b
[  382.424375][T17725]  should_fail_ex+0x265/0x280
[  382.424401][T17725]  should_fail+0xb/0x20
[  382.424423][T17725]  should_fail_usercopy+0x1a/0x20
[  382.424449][T17725]  _copy_to_user+0x20/0xa0
[  382.424561][T17725]  simple_read_from_buffer+0xb5/0x130
[  382.424590][T17725]  proc_fail_nth_read+0x10e/0x150
[  382.424667][T17725]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  382.424696][T17725]  vfs_read+0x1a8/0x770
[  382.424719][T17725]  ? __rcu_read_unlock+0x4f/0x70
[  382.424746][T17725]  ? __fget_files+0x184/0x1c0
[  382.424836][T17725]  ksys_read+0xda/0x1a0
[  382.424865][T17725]  __x64_sys_read+0x40/0x50
[  382.424886][T17725]  x64_sys_call+0x27bc/0x2ff0
[  382.424947][T17725]  do_syscall_64+0xd2/0x200
[  382.425046][T17725]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  382.425136][T17725]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  382.425164][T17725]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.425190][T17725] RIP: 0033:0x7f5435ead5fc
[  382.425210][T17725] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  382.425232][T17725] RSP: 002b:00007f5434917030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  382.425256][T17725] RAX: ffffffffffffffda RBX: 00007f54360d5fa0 RCX: 00007f5435ead5fc
[  382.425350][T17725] RDX: 000000000000000f RSI: 00007f54349170a0 RDI: 000000000000000b
[  382.425362][T17725] RBP: 00007f5434917090 R08: 0000000000000000 R09: 0000000000000000
[  382.425373][T17725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  382.425384][T17725] R13: 00007f54360d6038 R14: 00007f54360d5fa0 R15: 00007ffc9a821b28
[  382.425407][T17725]  </TASK>
[  382.646922][T17717] loop3: detected capacity change from 0 to 8192
[  382.695342][T17717]  loop3: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224
[  382.695648][T17717] loop3: p1 size 100663296 extends beyond EOD, truncated
[  382.796908][T17717] loop3: p2 start 591104 is beyond EOD, truncated
[  382.803388][T17717] loop3: p3 start 33572980 is beyond EOD, truncated
[  382.810884][T17717] loop3: p5 size 100663296 extends beyond EOD, truncated
[  382.821510][T17717] loop3: p6 start 591104 is beyond EOD, truncated
[  382.828046][T17717] loop3: p7 size 100663296 extends beyond EOD, truncated
[  382.835906][T17717] loop3: p8 start 591104 is beyond EOD, truncated
[  382.842489][T17717] loop3: p9 size 100663296 extends beyond EOD, truncated
[  382.854998][T17717] loop3: p10 start 591104 is beyond EOD, truncated
[  382.861566][T17717] loop3: p11 size 100663296 extends beyond EOD, truncated
[  382.869368][T17717] loop3: p12 start 591104 is beyond EOD, truncated
[  382.875968][T17717] loop3: p13 size 100663296 extends beyond EOD, truncated
[  382.888943][T17717] loop3: p14 start 591104 is beyond EOD, truncated
[  382.895544][T17717] loop3: p15 size 100663296 extends beyond EOD, truncated
[  382.910567][T17717] loop3: p16 start 591104 is beyond EOD, truncated
[  382.917201][T17717] loop3: p17 size 100663296 extends beyond EOD, truncated
[  382.930275][T17719] netdevsim netdevsim3: Direct firmware load for ì failed with error -2
[  382.937944][T17717] loop3: p18 start 591104 is beyond EOD, truncated
[  382.945221][T17717] loop3: p19 size 100663296 extends beyond EOD, truncated
[  382.953020][T17717] loop3: p20 start 591104 is beyond EOD, truncated
[  382.959628][T17717] loop3: p21 size 100663296 extends beyond EOD, truncated
[  382.967381][T17717] loop3: p22 start 591104 is beyond EOD, truncated
[  382.973955][T17717] loop3: p23 size 100663296 extends beyond EOD, truncated
[  382.982338][T17717] loop3: p24 start 591104 is beyond EOD, truncated
[  382.988970][T17717] loop3: p25 size 100663296 extends beyond EOD, truncated
[  382.996633][T17717] loop3: p26 start 591104 is beyond EOD, truncated
[  383.003307][T17717] loop3: p27 size 100663296 extends beyond EOD, truncated
[  383.010986][T17717] loop3: p28 start 591104 is beyond EOD, truncated
[  383.017542][T17717] loop3: p29 size 100663296 extends beyond EOD, truncated
[  383.029365][T17717] loop3: p30 start 591104 is beyond EOD, truncated
[  383.035989][T17717] loop3: p31 size 100663296 extends beyond EOD, truncated
[  383.049436][T17717] loop3: p32 start 591104 is beyond EOD, truncated
[  383.056025][T17717] loop3: p33 size 100663296 extends beyond EOD, truncated
[  383.069634][T17717] loop3: p34 start 591104 is beyond EOD, truncated
[  383.076211][T17717] loop3: p35 size 100663296 extends beyond EOD, truncated
[  383.094437][T17717] loop3: p36 start 591104 is beyond EOD, truncated
[  383.100998][T17717] loop3: p37 size 100663296 extends beyond EOD, truncated
[  383.114552][T17717] loop3: p38 start 591104 is beyond EOD, truncated
[  383.121165][T17717] loop3: p39 size 100663296 extends beyond EOD, truncated
[  383.135506][T17717] loop3: p40 start 591104 is beyond EOD, truncated
[  383.142290][T17717] loop3: p41 size 100663296 extends beyond EOD, truncated
[  383.160339][T17717] loop3: p42 start 591104 is beyond EOD, truncated
[  383.166893][T17717] loop3: p43 size 100663296 extends beyond EOD, truncated
[  383.180744][T17717] loop3: p44 start 591104 is beyond EOD, truncated
[  383.187384][T17717] loop3: p45 size 100663296 extends beyond EOD, truncated
[  383.264607][T17717] loop3: p46 start 591104 is beyond EOD, truncated
[  383.271369][T17717] loop3: p47 size 100663296 extends beyond EOD, truncated
[  383.288246][T17717] loop3: p48 start 591104 is beyond EOD, truncated
[  383.294869][T17717] loop3: p49 size 100663296 extends beyond EOD, truncated
[  383.308967][T17717] loop3: p50 start 591104 is beyond EOD, truncated
[  383.315525][T17717] loop3: p51 size 100663296 extends beyond EOD, truncated
[  383.328902][T17717] loop3: p52 start 591104 is beyond EOD, truncated
[  383.335535][T17717] loop3: p53 size 100663296 extends beyond EOD, truncated
[  383.349666][T17717] loop3: p54 start 591104 is beyond EOD, truncated
[  383.356441][T17717] loop3: p55 size 100663296 extends beyond EOD, truncated
[  383.369821][T17717] loop3: p56 start 591104 is beyond EOD, truncated
[  383.376748][T17717] loop3: p57 size 100663296 extends beyond EOD, truncated
[  383.390453][T17717] loop3: p58 start 591104 is beyond EOD, truncated
[  383.397153][T17717] loop3: p59 size 100663296 extends beyond EOD, truncated
[  383.410115][T17717] loop3: p60 start 591104 is beyond EOD, truncated
[  383.416757][T17717] loop3: p61 size 100663296 extends beyond EOD, truncated
[  383.425728][T17717] loop3: p62 start 591104 is beyond EOD, truncated
[  383.432266][T17717] loop3: p63 size 100663296 extends beyond EOD, truncated
[  383.447478][T17717] loop3: p64 start 591104 is beyond EOD, truncated
[  383.454043][T17717] loop3: p65 size 100663296 extends beyond EOD, truncated
[  383.467242][T17717] loop3: p66 start 591104 is beyond EOD, truncated
[  383.473830][T17717] loop3: p67 size 100663296 extends beyond EOD, truncated
[  383.487894][T17717] loop3: p68 start 591104 is beyond EOD, truncated
[  383.494491][T17717] loop3: p69 size 100663296 extends beyond EOD, truncated
[  383.508345][T17717] loop3: p70 start 591104 is beyond EOD, truncated
[  383.515004][T17717] loop3: p71 size 100663296 extends beyond EOD, truncated
[  383.531697][T17717] loop3: p72 start 591104 is beyond EOD, truncated
[  383.538301][T17717] loop3: p73 size 100663296 extends beyond EOD, truncated
[  383.551753][T17717] loop3: p74 start 591104 is beyond EOD, truncated
[  383.558409][T17717] loop3: p75 size 100663296 extends beyond EOD, truncated
[  383.571632][ T3382] usb usb6-port1: unable to enumerate USB device
[  383.578347][T17717] loop3: p76 start 591104 is beyond EOD, truncated
[  383.584900][T17717] loop3: p77 size 100663296 extends beyond EOD, truncated
[  383.604421][T17734] netlink: 'syz.6.3834': attribute type 1 has an invalid length.
[  383.621333][T17734] netlink: 180 bytes leftover after parsing attributes in process `syz.6.3834'.
[  383.630766][T17717] loop3: p78 start 591104 is beyond EOD, truncated
[  383.632148][T17734] netlink: 180 bytes leftover after parsing attributes in process `syz.6.3834'.
[  383.637296][T17717] loop3: p79 size 100663296 extends beyond EOD, truncated
[  383.644769][T17717] loop3: p80 start 591104 is beyond EOD, 
[  383.653164][T17736] tipc: Enabled bearer <udp:syz0>, priority 10
[  383.653682][T17717] truncated
[  383.668700][T17717] loop3: p81 size 100663296 extends beyond EOD, truncated
[  383.681715][T17736] loop8: detected capacity change from 0 to 512
[  383.685220][T17717] loop3: p82 start 591104 is beyond EOD, truncated
[  383.694689][T17717] loop3: p83 size 100663296 extends beyond EOD, truncated
[  383.703161][T17717] loop3: p84 start 591104 is beyond EOD, truncated
[  383.709795][T17717] loop3: p85 size 100663296 extends beyond EOD, truncated
[  383.717624][T17717] loop3: p86 start 591104 is beyond EOD, truncated
[  383.724162][T17717] loop3: p87 size 100663296 extends beyond EOD, truncated
[  383.732303][T17717] loop3: p88 start 591104 is beyond EOD, truncated
[  383.738857][T17717] loop3: p89 size 100663296 extends beyond EOD, truncated
[  383.746655][T17717] loop3: p90 start 591104 is beyond EOD, truncated
[  383.753172][T17717] loop3: p91 size 100663296 extends beyond EOD, truncated
[  383.777994][T17717] loop3: p92 start 591104 is beyond EOD, truncated
[  383.784684][T17717] loop3: p93 size 100663296 extends beyond EOD, truncated
[  383.819384][T17717] loop3: p94 start 591104 is beyond EOD, truncated
[  383.826108][T17717] loop3: p95 size 100663296 extends beyond EOD, truncated
[  383.839565][T17717] loop3: p96 start 591104 is beyond EOD, truncated
[  383.846256][T17717] loop3: p97 size 100663296 extends beyond EOD, truncated
[  383.858676][T17717] loop3: p98 start 591104 is beyond EOD, truncated
[  383.865251][T17717] loop3: p99 size 100663296 extends beyond EOD, truncated
[  383.878334][T17717] loop3: p100 start 591104 is beyond EOD, truncated
[  383.884991][T17717] loop3: p101 size 100663296 extends beyond EOD, truncated
[  383.894286][T17747] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  383.900831][T17747] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  383.908372][T17747] vhci_hcd vhci_hcd.0: Device attached
[  383.914583][T17717] loop3: p102 start 591104 is beyond EOD, truncated
[  383.921327][T17717] loop3: p103 size 100663296 extends beyond EOD, truncated
[  383.926806][T17748] vhci_hcd: cannot find the pending unlink 2
[  383.940432][T17717] loop3: p104 start 591104 is beyond EOD, truncated
[  383.947173][T17717] loop3: p105 size 100663296 extends beyond EOD, truncated
[  383.972392][T17717] loop3: p106 start 591104 is beyond EOD, truncated
[  383.979480][T17717] loop3: p107 size 100663296 extends beyond EOD, truncated
[  383.997971][T17717] loop3: p108 start 591104 is beyond EOD, truncated
[  384.004879][T17717] loop3: p109 size 100663296 extends beyond EOD, truncated
[  384.021920][T17717] loop3: p110 start 591104 is beyond EOD, truncated
[  384.028599][T17717] loop3: p111 size 100663296 extends beyond EOD, truncated
[  384.036313][T17748] vhci_hcd: connection closed
[  384.038913][T13624] vhci_hcd: stop threads
[  384.047891][T13624] vhci_hcd: release socket
[  384.052312][T13624] vhci_hcd: disconnect device
[  384.059276][T17717] loop3: p112 start 591104 is beyond EOD, truncated
[  384.066006][T17717] loop3: p113 size 100663296 extends beyond EOD, truncated
[  384.076434][T17717] loop3: p114 start 591104 is beyond EOD, truncated
[  384.077212][T17753] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3842'.
[  384.083097][T17717] loop3: p115 size 100663296 extends beyond EOD, truncated
[  384.083611][T17717] loop3: p116 start 591104 is beyond EOD, 
[  384.097104][T17753] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3842'.
[  384.099620][T17717] truncated
[  384.099627][T17717] loop3: p117 size 100663296 extends beyond EOD, truncated
[  384.106244][T17717] loop3: p118 start 591104 is beyond EOD, truncated
[  384.131802][T17717] loop3: p119 size 100663296 extends beyond EOD, truncated
[  384.141415][T17717] loop3: p120 start 591104 is beyond EOD, truncated
[  384.148164][T17717] loop3: p121 size 100663296 extends beyond EOD, truncated
[  384.156045][T17756] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3842'.
[  384.165800][T17717] loop3: p122 start 591104 is beyond EOD, truncated
[  384.172427][T17717] loop3: p123 size 100663296 extends beyond EOD, truncated
[  384.180335][T17717] loop3: p124 start 591104 is beyond EOD, truncated
[  384.186966][T17717] loop3: p125 size 100663296 extends beyond EOD, truncated
[  384.194533][T17717] loop3: p126 start 591104 is beyond EOD, truncated
[  384.201185][T17717] loop3: p127 size 100663296 extends beyond EOD, truncated
[  384.208936][T17717] loop3: p128 start 591104 is beyond EOD, truncated
[  384.215647][T17717] loop3: p129 size 100663296 extends beyond EOD, truncated
[  384.223690][T17717] loop3: p130 start 591104 is beyond EOD, truncated
[  384.228373][T17753] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3842'.
[  384.230391][T17717] loop3: p131 size 100663296 extends beyond EOD, truncated
[  384.241278][T17753] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3842'.
[  384.252434][T17717] loop3: p132 start 591104 is beyond EOD, truncated
[  384.262181][T17717] loop3: p133 size 100663296 extends beyond EOD, truncated
[  384.269976][T17717] loop3: p134 start 591104 is beyond EOD, truncated
[  384.276658][T17717] loop3: p135 size 100663296 extends beyond EOD, truncated
[  384.284536][T17717] loop3: p136 start 591104 is beyond EOD, truncated
[  384.291146][T17717] loop3: p137 size 100663296 extends beyond EOD, truncated
[  384.299030][T17717] loop3: p138 start 591104 is beyond EOD, truncated
[  384.305668][T17717] loop3: p139 size 100663296 extends beyond EOD, truncated
[  384.313477][T17717] loop3: p140 start 591104 is beyond EOD, truncated
[  384.320094][T17717] loop3: p141 size 100663296 extends beyond EOD, truncated
[  384.327873][T17717] loop3: p142 start 591104 is beyond EOD, truncated
[  384.334517][T17717] loop3: p143 size 100663296 extends beyond EOD, truncated
[  384.342271][T17717] loop3: p144 start 591104 is beyond EOD, truncated
[  384.348944][T17717] loop3: p145 size 100663296 extends beyond EOD, truncated
[  384.356794][T17717] loop3: p146 start 591104 is beyond EOD, truncated
[  384.363405][T17717] loop3: p147 size 100663296 extends beyond EOD, truncated
[  384.371557][T17717] loop3: p148 start 591104 is beyond EOD, truncated
[  384.378480][T17717] loop3: p149 size 100663296 extends beyond EOD, truncated
[  384.392744][T17717] loop3: p150 start 591104 is beyond EOD, truncated
[  384.399428][T17717] loop3: p151 size 100663296 extends beyond EOD, truncated
[  384.407490][T17717] loop3: p152 start 591104 is beyond EOD, truncated
[  384.408798][T17765] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3847'.
[  384.414137][T17717] loop3: p153 size 100663296 extends beyond EOD, truncated
[  384.415085][T17717] loop3: p154 start 591104 is beyond EOD, 
[  384.428761][T17765] netlink: 84 bytes leftover after parsing attributes in process `syz.8.3847'.
[  384.430583][T17717] truncated
[  384.430591][T17717] loop3: p155 size 100663296 extends beyond EOD, truncated
[  384.456417][T17717] loop3: p156 start 591104 is beyond EOD, truncated
[  384.463142][T17717] loop3: p157 size 100663296 extends beyond EOD, truncated
[  384.470831][T17717] loop3: p158 start 591104 is beyond EOD, truncated
[  384.477491][T17717] loop3: p159 size 100663296 extends beyond EOD, truncated
[  384.485130][T17717] loop3: p160 start 591104 is beyond EOD, truncated
[  384.491765][T17717] loop3: p161 size 100663296 extends beyond EOD, truncated
[  384.499516][T17717] loop3: p162 start 591104 is beyond EOD, truncated
[  384.506160][T17717] loop3: p163 size 100663296 extends beyond EOD, truncated
[  384.513984][T17717] loop3: p164 start 591104 is beyond EOD, truncated
[  384.520615][T17717] loop3: p165 size 100663296 extends beyond EOD, truncated
[  384.528581][T17717] loop3: p166 start 591104 is beyond EOD, truncated
[  384.535197][T17717] loop3: p167 size 100663296 extends beyond EOD, truncated
[  384.542973][T17717] loop3: p168 start 591104 is beyond EOD, truncated
[  384.549619][T17717] loop3: p169 size 100663296 extends beyond EOD, truncated
[  384.557366][T17717] loop3: p170 start 591104 is beyond EOD, truncated
[  384.564001][T17717] loop3: p171 size 100663296 extends beyond EOD, truncated
[  384.571749][T17717] loop3: p172 start 591104 is beyond EOD, truncated
[  384.578357][T17717] loop3: p173 size 100663296 extends beyond EOD, truncated
[  384.586130][T17717] loop3: p174 start 591104 is beyond EOD, truncated
[  384.592766][T17717] loop3: p175 size 100663296 extends beyond EOD, truncated
[  384.600654][T17717] loop3: p176 start 591104 is beyond EOD, truncated
[  384.607816][T17717] loop3: p177 size 100663296 extends beyond EOD, truncated
[  384.617017][T17717] loop3: p178 start 591104 is beyond EOD, truncated
[  384.623690][T17717] loop3: p179 size 100663296 extends beyond EOD, truncated
[  384.639234][T17717] loop3: p180 start 591104 is beyond EOD, truncated
[  384.645899][T17717] loop3: p181 size 100663296 extends beyond EOD, truncated
[  384.653770][T17717] loop3: p182 start 591104 is beyond EOD, truncated
[  384.660456][T17717] loop3: p183 size 100663296 extends beyond EOD, truncated
[  384.668676][T17717] loop3: p184 start 591104 is beyond EOD, truncated
[  384.675306][T17717] loop3: p185 size 100663296 extends beyond EOD, truncated
[  384.683184][T17717] loop3: p186 start 591104 is beyond EOD, truncated
[  384.689914][T17717] loop3: p187 size 100663296 extends beyond EOD, truncated
[  384.700409][T17717] loop3: p188 start 591104 is beyond EOD, truncated
[  384.707128][T17717] loop3: p189 size 100663296 extends beyond EOD, truncated
[  384.715112][T17717] loop3: p190 start 591104 is beyond EOD, truncated
[  384.721826][T17717] loop3: p191 size 100663296 extends beyond EOD, truncated
[  384.740304][T17717] loop3: p192 start 591104 is beyond EOD, truncated
[  384.746963][T17717] loop3: p193 size 100663296 extends beyond EOD, truncated
[  384.754791][T17717] loop3: p194 start 591104 is beyond EOD, truncated
[  384.761466][T17717] loop3: p195 size 100663296 extends beyond EOD, truncated
[  384.769289][T17717] loop3: p196 start 591104 is beyond EOD, truncated
[  384.776182][T17717] loop3: p197 size 100663296 extends beyond EOD, truncated
[  384.784558][T17717] loop3: p198 start 591104 is beyond EOD, truncated
[  384.791216][T17717] loop3: p199 size 100663296 extends beyond EOD, truncated
[  384.872244][T17717] loop3: p200 start 591104 is beyond EOD, truncated
[  384.878899][T17717] loop3: p201 size 100663296 extends beyond EOD, truncated
[  384.896282][T17717] loop3: p202 start 591104 is beyond EOD, truncated
[  384.903104][T17717] loop3: p203 size 100663296 extends beyond EOD, truncated
[  384.917308][T17717] loop3: p204 start 591104 is beyond EOD, truncated
[  384.924028][T17717] loop3: p205 size 100663296 extends beyond EOD, truncated
[  384.932829][T17717] loop3: p206 start 591104 is beyond EOD, truncated
[  384.939607][T17717] loop3: p207 size 100663296 extends beyond EOD, truncated
[  384.954051][T17717] loop3: p208 start 591104 is beyond EOD, truncated
[  384.960760][T17717] loop3: p209 size 100663296 extends beyond EOD, truncated
[  384.974532][T17717] loop3: p210 start 591104 is beyond EOD, truncated
[  384.981243][T17717] loop3: p211 size 100663296 extends beyond EOD, truncated
[  384.995566][T17717] loop3: p212 start 591104 is beyond EOD, truncated
[  385.002352][T17717] loop3: p213 size 100663296 extends beyond EOD, truncated
[  385.020322][T17717] loop3: p214 start 591104 is beyond EOD, truncated
[  385.027068][T17717] loop3: p215 size 100663296 extends beyond EOD, truncated
[  385.042963][T17717] loop3: p216 start 591104 is beyond EOD, truncated
[  385.049590][T17717] loop3: p217 size 100663296 extends beyond EOD, truncated
[  385.110774][T17776] SELinux:  policydb magic number 0x2 does not match expected magic number 0xf97cff8c
[  385.124949][T17776] SELinux: failed to load policy
[  385.135455][T17717] loop3: p218 start 591104 is beyond EOD, truncated
[  385.142202][T17717] loop3: p219 size 100663296 extends beyond EOD, truncated
[  385.200900][T17717] loop3: p220 start 591104 is beyond EOD, truncated
[  385.207563][T17717] loop3: p221 size 100663296 extends beyond EOD, truncated
[  385.227473][T17717] loop3: p222 start 591104 is beyond EOD, truncated
[  385.234266][T17717] loop3: p223 size 100663296 extends beyond EOD, truncated
[  385.251530][T17717] loop3: p224 start 591104 is beyond EOD, truncated
[  385.258300][T17717] loop3: p225 size 100663296 extends beyond EOD, truncated
[  385.272655][T17717] loop3: p226 start 591104 is beyond EOD, truncated
[  385.279331][T17717] loop3: p227 size 100663296 extends beyond EOD, truncated
[  385.294437][T17717] loop3: p228 start 591104 is beyond EOD, truncated
[  385.301216][T17717] loop3: p229 size 100663296 extends beyond EOD, truncated
[  385.314857][T17778] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  385.321491][T17778] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  385.329006][T17778] vhci_hcd vhci_hcd.0: Device attached
[  385.342751][T17780] vhci_hcd: connection closed
[  385.343045][ T4227] vhci_hcd: stop threads
[  385.350275][T17717] loop3: p230 start 591104 is beyond EOD, truncated
[  385.352093][ T4227] vhci_hcd: release socket
[  385.358619][T17717] loop3: p231 size 100663296 extends beyond EOD, truncated
[  385.363114][ T4227] vhci_hcd: disconnect device
[  385.371516][T17774] IPv6: NLM_F_CREATE should be specified when creating new route
[  385.384508][T17717] loop3: p232 start 591104 is beyond EOD, truncated
[  385.391159][T17717] loop3: p233 size 100663296 extends beyond EOD, truncated
[  385.399707][T17717] loop3: p234 start 591104 is beyond EOD, truncated
[  385.406422][T17717] loop3: p235 size 100663296 extends beyond EOD, truncated
[  385.417073][T17717] loop3: p236 start 591104 is beyond EOD, truncated
[  385.423765][T17717] loop3: p237 size 100663296 extends beyond EOD, truncated
[  385.433012][T17717] loop3: p238 start 591104 is beyond EOD, truncated
[  385.439722][T17717] loop3: p239 size 100663296 extends beyond EOD, truncated
[  385.452993][T17717] loop3: p240 start 591104 is beyond EOD, truncated
[  385.459861][T17717] loop3: p241 size 100663296 extends beyond EOD, truncated
[  385.472836][T17783] loop8: detected capacity change from 0 to 8192
[  385.476777][T17717] loop3: p242 start 591104 is beyond EOD, truncated
[  385.485865][T17717] loop3: p243 size 100663296 extends beyond EOD, truncated
[  385.495665][T17717] loop3: p244 start 591104 is beyond EOD, truncated
[  385.502502][T17717] loop3: p245 size 100663296 extends beyond EOD, truncated
[  385.539039][T17717] loop3: p246 start 591104 is beyond EOD, truncated
[  385.545748][T17717] loop3: p247 size 100663296 extends beyond EOD, truncated
[  385.559049][T17717] loop3: p248 start 591104 is beyond EOD, truncated
[  385.565881][T17717] loop3: p249 size 100663296 extends beyond EOD, truncated
[  385.600834][T17717] loop3: p250 start 591104 is beyond EOD, truncated
[  385.607577][T17717] loop3: p251 size 100663296 extends beyond EOD, truncated
[  385.619331][T17717] loop3: p252 start 591104 is beyond EOD, truncated
[  385.625993][T17717] loop3: p253 size 100663296 extends beyond EOD, truncated
[  385.652255][T17717] loop3: p254 start 591104 is beyond EOD, truncated
[  385.658931][T17717] loop3: p255 size 100663296 extends beyond EOD, truncated
[  385.814518][T17797] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3859'.
[  387.148073][T17822] loop8: detected capacity change from 0 to 8192
[  387.361271][T17827] ==================================================================
[  387.369431][T17827] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs
[  387.376599][T17827] 
[  387.378940][T17827] write to 0xffff888122327514 of 2 bytes by task 17822 on cpu 1:
[  387.386673][T17827]  fat16_ent_put+0x28/0x60
[  387.391136][T17827]  fat_ent_write+0x69/0xe0
[  387.395599][T17827]  fat_chain_add+0x15d/0x440
[  387.400228][T17827]  fat_get_block+0x46c/0x5e0
[  387.404858][T17827]  __block_write_begin_int+0x400/0xf90
[  387.410338][T17827]  cont_write_begin+0x5fc/0x970
[  387.415222][T17827]  fat_write_begin+0x4f/0xe0
[  387.419829][T17827]  cont_write_begin+0x1b0/0x970
[  387.424715][T17827]  fat_write_begin+0x4f/0xe0
[  387.429334][T17827]  generic_cont_expand_simple+0xad/0x150
[  387.434998][T17827]  fat_cont_expand+0x3e/0x170
[  387.439692][T17827]  fat_setattr+0x2a5/0x8a0
[  387.444127][T17827]  notify_change+0x806/0x890
[  387.448774][T17827]  do_ftruncate+0x34b/0x450
[  387.453305][T17827]  __x64_sys_ftruncate+0x68/0xc0
[  387.458263][T17827]  x64_sys_call+0x2d52/0x2ff0
[  387.462979][T17827]  do_syscall_64+0xd2/0x200
[  387.467516][T17827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.473425][T17827] 
[  387.475766][T17827] read to 0xffff888122327400 of 512 bytes by task 17827 on cpu 0:
[  387.483589][T17827]  fat_mirror_bhs+0x1df/0x320
[  387.488314][T17827]  fat_alloc_clusters+0x98b/0xa80
[  387.493373][T17827]  fat_get_block+0x258/0x5e0
[  387.497987][T17827]  __block_write_begin_int+0x400/0xf90
[  387.503480][T17827]  cont_write_begin+0x5fc/0x970
[  387.508353][T17827]  fat_write_begin+0x4f/0xe0
[  387.513064][T17827]  cont_write_begin+0x1b0/0x970
[  387.517943][T17827]  fat_write_begin+0x4f/0xe0
[  387.522553][T17827]  generic_cont_expand_simple+0xad/0x150
[  387.528238][T17827]  fat_cont_expand+0x3e/0x170
[  387.532940][T17827]  fat_setattr+0x2a5/0x8a0
[  387.537382][T17827]  notify_change+0x806/0x890
[  387.542009][T17827]  do_ftruncate+0x34b/0x450
[  387.546531][T17827]  __x64_sys_ftruncate+0x68/0xc0
[  387.551493][T17827]  x64_sys_call+0x2d52/0x2ff0
[  387.556202][T17827]  do_syscall_64+0xd2/0x200
[  387.560731][T17827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.566642][T17827] 
[  387.568983][T17827] Reported by Kernel Concurrency Sanitizer on:
[  387.575165][T17827] CPU: 0 UID: 0 PID: 17827 Comm: syz.8.3867 Tainted: G        W           6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) 
[  387.589265][T17827] Tainted: [W]=WARN
[  387.593092][T17827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  387.603173][T17827] ==================================================================