last executing test programs:

9m10.519324094s ago: executing program 32 (id=936):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0xf00)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffe00000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xd, 0x1, 0xa, 0x8}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0)

9m4.208181998s ago: executing program 33 (id=1008):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket(0x28, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000000d0000000000000700000000040000000000000a02000000060000000000000a000000000000000000000006040000000d001000000000010000000027001101100000000000000905000000006100"], &(0x7f0000000580)=""/230, 0x67, 0xe6, 0x1, 0x200, 0x10000}, 0x28)
close(0x4)

9m0.575647363s ago: executing program 34 (id=1054):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8}, @TCA_PIE_BYTEMODE={0x8}]}}]}, 0x40}}, 0x4000010)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, <r2=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000100)}, 0x10)

8m53.575366846s ago: executing program 7 (id=1135):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
flock(0xffffffffffffffff, 0x8)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x6048800)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='mmap_lock_acquire_returned\x00', r6}, 0x18)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x28, 0x0, &(0x7f0000000100)="e02742e80f1c335a9782762f86dd", 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x200448c0)

8m52.728638371s ago: executing program 7 (id=1147):
syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF")
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r3}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18)
open_by_handle_at(r6, &(0x7f0000000140)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28, 0x4e, {0x2, 0x99, 0x1400, 0x5, 0xfffffffc, 0x1000}}, 0x300c0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0xb, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x4000090)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r4, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001180)=ANY=[@ANYBLOB="7ec7f344da24f8414e67ba698fecd9dd4ef43e68f7f940a5447079d23ab3caeab180d060687a91c7c34364ea7634bbaf"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x400c800)

8m51.730429962s ago: executing program 7 (id=1160):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000600080052d2aa8d000037"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x0)
r3 = syz_clone3(&(0x7f0000000200)={0x24204000, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0], 0x1}, 0x58)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRESDEC=r2, @ANYRESDEC=r3, @ANYRES64=r2, @ANYRESHEX, @ANYRES16=r2, @ANYRESHEX=r2, @ANYRES8=0x0, @ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000004300010129bd7000fddbdf25020000000c000100"], 0x20}}, 0x400c000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
r7 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace(0x10, r7)
socket$netlink(0x10, 0x3, 0x8000000004)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'wg2\x00'})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r10, @ANYRESOCT=r5], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r10}, 0x0, &(0x7f0000000040)}, 0x20)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='rxrpc_rx_data\x00', r11, 0x0, 0x3}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))

8m51.564933068s ago: executing program 7 (id=1164):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x204000, &(0x7f0000001600)={[{@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x4ab}}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@discard}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
fallocate(r3, 0x0, 0x3, 0x800000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080), &(0x7f0000000180)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x18)
r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r5, r5, 0x0, 0x800000009)
timer_delete(0x0)
syz_clone3(&(0x7f0000001880)={0x188000300, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000005c40), 0x403f, 0x0)

8m51.017646344s ago: executing program 7 (id=1174):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000600080052d2aa8d000037"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x0)
r3 = syz_clone3(&(0x7f0000000200)={0x24204000, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0], 0x1}, 0x58)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRESDEC=r2, @ANYRESDEC=r3, @ANYRES64=r2, @ANYRESHEX, @ANYRES16=r2, @ANYRESHEX=r2, @ANYRES8=0x0, @ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000004300010129bd7000fddbdf25020000000c000100"], 0x20}}, 0x400c000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
r7 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace(0x10, r7)
socket$netlink(0x10, 0x3, 0x8000000004)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'wg2\x00'})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r10, @ANYRESOCT=r5], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r10}, 0x0, &(0x7f0000000040)}, 0x20)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='rxrpc_rx_data\x00', r11, 0x0, 0x3}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))

8m47.480782519s ago: executing program 7 (id=1217):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

8m47.480385769s ago: executing program 35 (id=1217):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

8m3.654266871s ago: executing program 4 (id=1912):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x3f00, 0x0)

8m2.756554472s ago: executing program 4 (id=1924):
r0 = syz_io_uring_setup(0x10e, &(0x7f0000001cc0)={0x0, 0xf07d, 0x400, 0x40000, 0x101}, &(0x7f0000000400)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1000}, {&(0x7f0000000440)=""/107}, {&(0x7f0000000500)=""/193}, {&(0x7f00000003c0)=""/18}, {&(0x7f0000000700)=""/148}, {&(0x7f0000002840)=""/245}, {&(0x7f0000002940)=""/226}], 0x11b, 0x1d})
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000400000000c40ddb4b65d5072d110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0)
r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r10, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x302, 0xb92, 0x0, 0x2, 0x0})
unshare(0x66000080)
r11 = socket(0x1e, 0x2, 0x0)
dup3(r11, r5, 0x0)
setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f0000000000)={{0x7, 0x7}, 0x1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18)
io_uring_enter(r0, 0x8aa, 0xfffffffe, 0x42, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$tipc(r12, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0)

7m58.272453642s ago: executing program 4 (id=1978):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000c, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x41000, 0xa}, 0x94)

7m58.271050332s ago: executing program 4 (id=1980):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x100, 0x6, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2}, 0x94)
r3 = syz_open_procfs(r0, &(0x7f0000000480)='net/snmp\x00')
ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f00000006c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
mkdir(&(0x7f00000000c0)='./file0/../file0\x00', 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_pidfd_open(r0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x80000, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1210090, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESHEX], 0x1, 0x277, &(0x7f00000001c0)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
wait4(r0, 0x0, 0x40000000, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c)
r7 = dup(r6)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0xc000)
syz_emit_ethernet(0x66, &(0x7f0000000ac0)=ANY=[@ANYBLOB="cfb14e407d33aaaaaa1563d7635c6fc547c600303a01fe8000001e950501f8b1484323c98a0000000000000000000000aaff02000000000000000000000000000102009078000080016208ff00000000000000000000000000000000010000000000003ae31afb1ac55f4d245ca4411928d6031d7abb4463530b44619a34bc42b560b7439955c0d39bc3b8d1bd83d3ed823b10ed3ec38c83e7337e4c49496419012099c3948d3aeb9d4c090000005851d2df4c3cab0402f2c4e493f665b5036800e5234e9427f78e23d3b3b008959891d3f283"], 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

7m57.963507223s ago: executing program 4 (id=1983):
r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000000c0)=0xe, 0x4) (async, rerun: 32)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x4, 0x8}, 0xc) (async, rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20)
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0, 0xed, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x11, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0xb8, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x5, 0x5, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000900)=[{0x3, 0x1, 0xe, 0xb}, {0x2, 0x4, 0x4}, {0x5, 0x1, 0x3, 0x7}, {0x5, 0x4, 0x3, 0xc}], 0x10, 0xfffffffb}, 0x94) (async, rerun: 32)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xcf0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50) (async, rerun: 32)
r8 = fcntl$dupfd(r0, 0x406, r0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={0x1, <r9=>0xffffffffffffffff}, 0x4)
r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000ac0), 0x1, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{0x1, <r11=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)}, 0x20) (async, rerun: 64)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) (async, rerun: 64)
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c40)={0xffffffffffffffff, 0x3}, 0xc)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x17, 0xf, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @alu={0x4, 0x0, 0x9, 0x3, 0x5, 0x50, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff}]}, &(0x7f0000000280)='GPL\x00', 0xb3, 0xe3, &(0x7f00000002c0)=""/227, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, r3, 0x8, &(0x7f0000000400)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x6, 0x9, 0x30b70240}, 0x10, r5, r6, 0x4, &(0x7f0000000c80)=[r7, r8, 0x1, 0xffffffffffffffff, r9, r10, r11, r12, r13, 0x1], &(0x7f0000000cc0)=[{0x5, 0x2, 0xc, 0xb}, {0x2, 0x5, 0x3, 0x7}, {0x0, 0x4, 0x5, 0x5}, {0x1, 0x2, 0x4, 0xb}], 0x10, 0x8}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_ext={0x1c, 0x6, &(0x7f0000000dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x5}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x9, 0x1, 0x6, 0xfffffffffffffff8, 0xffffffffffffffed}]}, &(0x7f0000000e00)='GPL\x00', 0x81, 0x0, 0x0, 0x40f00, 0x30, '\x00', r4, 0x0, r8, 0x8, &(0x7f0000000e40)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000e80)={0x1, 0x2, 0x7855, 0x7}, 0x10, 0x746f, r14, 0x1, 0x0, &(0x7f0000000ec0)=[{0x2, 0x2, 0xc, 0x7}], 0x10, 0x2}, 0x94) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000fc0)={<r15=>0x0, <r16=>0x0})
timerfd_settime(r3, 0x2, &(0x7f0000001000)={{r15, r16+10000000}, {0x0, 0x989680}}, &(0x7f0000001040))
clock_settime(0x0, &(0x7f0000001080)={0x77359400}) (async)
r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r8)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, r17, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x18, 0x5b, "a31f42eef72d1d00a34ae38019e364fc4aec2dd1"}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001240)=@generic={&(0x7f0000001200)='./file0\x00', 0x0, 0x10}, 0x18) (async, rerun: 64)
sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000001440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001400)={&(0x7f00000012c0)={0x130, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x26}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}]}, @CTA_SEQ_ADJ_ORIG={0x4}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x22, 0x6}}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xe4b}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_NAT_DST={0x50, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xc75d}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x800}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x2c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x5, 0x51}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x7f}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x4}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0xe3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xe8}]}}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x24000c40}, 0x4004001) (async, rerun: 64)
r18 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000001500)={'syztnl0\x00', &(0x7f0000001480)={'syztnl2\x00', <r19=>r4, 0x10, 0x20, 0x7, 0x9, {{0xc, 0x4, 0x1, 0x4, 0x30, 0x65, 0x0, 0x45, 0x4, 0x0, @multicast1, @remote, {[@timestamp={0x44, 0x1c, 0x7d, 0x0, 0x7, [0x3ff, 0x5658, 0xb22e, 0x0, 0x40, 0xb15]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r18, 0x89f8, &(0x7f0000001600)={'tunl0\x00', &(0x7f0000001540)={'tunl0\x00', <r20=>r19, 0x8000, 0x10, 0x5, 0xd28, {{0x1a, 0x4, 0x3, 0x26, 0x68, 0x68, 0x0, 0x9, 0x4, 0x0, @multicast1, @empty, {[@end, @ssrr={0x89, 0x13, 0x34, [@local, @broadcast, @rand_addr=0x64010100, @private=0xa010101]}, @ssrr={0x89, 0xf, 0x78, [@dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x2e}, @remote]}, @lsrr={0x83, 0x7, 0xa0, [@loopback]}, @timestamp_prespec={0x44, 0x24, 0x59, 0x3, 0x7, [{@local, 0x10001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ffe}]}, @ra={0x94, 0x4}]}}}}})
r21 = getpid()
r22 = syz_open_procfs(r21, &(0x7f0000001640)='map_files\x00')
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a40)={0x6, 0x1e, &(0x7f0000001680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x0, 0x0, 0x2, 0x3, 0x4, 0x8}, @generic={0x2, 0x4, 0x3, 0x5, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001780)='syzkaller\x00', 0xfff, 0x61, &(0x7f00000017c0)=""/97, 0x41000, 0x38, '\x00', r20, 0x25, r22, 0x8, &(0x7f0000001840)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001880)={0x2, 0x2, 0x8, 0x26}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001980)=[r10, r1, r9, 0xffffffffffffffff, r10], &(0x7f00000019c0)=[{0x0, 0x3, 0xd, 0x9}, {0x4, 0x3, 0x2, 0x4}, {0x3, 0x3, 0x80000000, 0x2}, {0x2, 0x4, 0x5, 0xb}, {0x1, 0x3, 0x0, 0x9}, {0x5, 0x2, 0xb, 0xc}, {0x1, 0x4, 0x3, 0xa}, {0x5, 0x1, 0x0, 0x7}], 0x10, 0x7f}, 0x94)

7m57.78974059s ago: executing program 4 (id=1984):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b90402000000008000000000150010001400259070f409000d2000000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee05e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5e08001b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6cce50dd6e4edef3d939acd92954b43370e970100"/216, 0xd8}], 0x1}, 0x0)

7m57.785066161s ago: executing program 36 (id=1984):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b90402000000008000000000150010001400259070f409000d2000000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee05e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5e08001b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6cce50dd6e4edef3d939acd92954b43370e970100"/216, 0xd8}], 0x1}, 0x0)

5m43.407953738s ago: executing program 8 (id=3486):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xe654, 0x8, 0x1, 0x80000}, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)

5m43.200570439s ago: executing program 8 (id=3488):
r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x101000, 0x0) (async, rerun: 32)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) (async, rerun: 32)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf1f}, 0x50) (rerun: 32)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d00000069000000040000000500000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000003000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) (async, rerun: 64)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f0000000080), 0x0}, 0x20) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
syz_open_dev$vcsu(0x0, 0x7, 0x200201) (async, rerun: 32)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r3}, 0x10) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000007000020529bd7000fddbdf25070000004d730105908679385ad09c41acaeee28f7afec4df8c04e9fd6245b67", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4084)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, 0x0, 0x8) (async)
r6 = socket(0x10, 0x3, 0x0)
sendto$inet(r0, &(0x7f0000000200)="719ef5049b09fde0da717415b144763e78dfe6c42db1d886a66ea83b8ba6b29d1b5125fda7cab10af9980c9c5284b4b7e906c68a7af4632460582cb65117679946b379315463425891190bf2dcb0c151d0be65ab7583d004d60a8f986ebaaaa7", 0x60, 0x10000, &(0x7f0000000340)={0x2, 0x4e24, @multicast2}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) (async, rerun: 64)
sendto(r5, &(0x7f0000000040)="b64687e424b8dbdf5e66ff7d84dd887205811f082601cb77ad047c458cb758e23e939bd2417b7030f8244354dd5a635cf2cfb5eed19683ae72e4dec0f1bdbbb3e5b405248bca18da6ce521c0a2e2119c099c5d78bd5c79962af9c951", 0x5c, 0x44804, &(0x7f0000000180)=@can={0x1d, r7}, 0x80) (async, rerun: 64)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e65766500001000028006002f11cdfc000004000600"], 0x40}}, 0x0)

5m43.029199396s ago: executing program 8 (id=3493):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
timerfd_gettime(0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r5, &(0x7f0000000280), 0x9)
r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000180), 0x12)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)

5m42.176052051s ago: executing program 8 (id=3508):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000444, &(0x7f0000000180)={[{@lazytime}, {@nodelalloc}, {@resuid}, {}, {@usrjquota}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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")
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1, 0x1, r0}}, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000140)=0x6)

5m41.163422573s ago: executing program 8 (id=3522):
unshare(0x6a040000)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r3 = getpgrp(0x0)
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x40000000)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x30046, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$inet(0xa, 0x801, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r9=>0x0})
setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000580)={{{@in=@private=0xa010100, @in=@private=0xa010100, 0x4e22, 0xfff, 0x4e23, 0x6feb, 0x2, 0x0, 0x0, 0x0, r9, 0xffffffffffffffff}, {0x4, 0x401, 0x7f, 0x8, 0x8, 0x7b6, 0x8001, 0x4}, {0x80000000, 0x1000, 0x0, 0x7}, 0x101, 0x6e6bb0, 0x2, 0x0, 0x3, 0x2}, {{@in=@local, 0x4d4, 0x3c}, 0xa, @in6=@mcast1, 0x0, 0x3, 0x3, 0x3, 0xff, 0xffff, 0xb}}, 0xe8)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r10, 0x0, 0x1843}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010026bd7000ffcbdf250900020073797a1b0000000008004100736977001400330077673100"/56], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010)

5m38.934611727s ago: executing program 8 (id=3542):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000005c0)={[{@jqfmt_vfsold}, {@orlov}, {@user_xattr}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@nodiscard}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0e000000040005000000000000609c4c50ea92a4a2ba06bf00000000000000001a70a3263b02de2f1de6ec7d0e077d39cf19161df5e73b2b153fe12f654687ef23f9650bb9d9f31a8d69d07a106aa2525b037d5bd25c52000000000000000000000000ad6015a69c29456311acc80cc1f2ab3524ddaad39d262bd38d186090830f0000b940be90085e2a798be1bed57e5c75b3451ff9f68dda3c3eef802b748e802b1b1c2b487c300d82c38e810580d0caeb01000000158763", @ANYRES32=r3, @ANYBLOB="b5cb0226e1c6a0d95819e9fe46b086cce2c8cfc91f5b3876adee0b155f46c0170769a6b1a473ed6356e5cf80297c81a210f2e2d35128e4dacf3b65a59d0ddc5f75c9a2bc9b4a35b992eba4e14db9eb73772a17d9a5d9de4721ae6eeb7ed3b803487355073de4b9ed3a25eda6a393371cae147c1eecf577196dcbb9e8ce74a5fd97c4a16d2a2fc80251e5eb284cbe1b98db8ceda53b859edff9968e7caae191981a1b0cc1787ce6c632fc423d0a9ae91bda42b8abc566b5498b1c2d644ebb0234eee4bb367736e6f47a46a0e645d88a", @ANYRES64=r1], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000640)={0xfff, 0x2, 0x46fd, 0x9, 0x5})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x8aef}, 0x18)
open_by_handle_at(r2, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x36f0516f)
syz_io_uring_setup(0xbda, 0x0, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r7, &(0x7f0000000740)=[{&(0x7f00000002c0)="589224d2", 0x4}], 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000080), 0x2, 0x0)
sendfile(r9, r9, &(0x7f0000000040)=0xa, 0xc)
r10 = socket$netlink(0x10, 0x3, 0x0)
writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1)
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r12)
sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000d000000000001"], 0x38}}, 0x0)
close_range(r11, 0xffffffffffffffff, 0x0)

5m38.868665064s ago: executing program 37 (id=3542):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000005c0)={[{@jqfmt_vfsold}, {@orlov}, {@user_xattr}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@nodiscard}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0e000000040005000000000000609c4c50ea92a4a2ba06bf00000000000000001a70a3263b02de2f1de6ec7d0e077d39cf19161df5e73b2b153fe12f654687ef23f9650bb9d9f31a8d69d07a106aa2525b037d5bd25c52000000000000000000000000ad6015a69c29456311acc80cc1f2ab3524ddaad39d262bd38d186090830f0000b940be90085e2a798be1bed57e5c75b3451ff9f68dda3c3eef802b748e802b1b1c2b487c300d82c38e810580d0caeb01000000158763", @ANYRES32=r3, @ANYBLOB="b5cb0226e1c6a0d95819e9fe46b086cce2c8cfc91f5b3876adee0b155f46c0170769a6b1a473ed6356e5cf80297c81a210f2e2d35128e4dacf3b65a59d0ddc5f75c9a2bc9b4a35b992eba4e14db9eb73772a17d9a5d9de4721ae6eeb7ed3b803487355073de4b9ed3a25eda6a393371cae147c1eecf577196dcbb9e8ce74a5fd97c4a16d2a2fc80251e5eb284cbe1b98db8ceda53b859edff9968e7caae191981a1b0cc1787ce6c632fc423d0a9ae91bda42b8abc566b5498b1c2d644ebb0234eee4bb367736e6f47a46a0e645d88a", @ANYRES64=r1], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000640)={0xfff, 0x2, 0x46fd, 0x9, 0x5})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x8aef}, 0x18)
open_by_handle_at(r2, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x36f0516f)
syz_io_uring_setup(0xbda, 0x0, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r7, &(0x7f0000000740)=[{&(0x7f00000002c0)="589224d2", 0x4}], 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000080), 0x2, 0x0)
sendfile(r9, r9, &(0x7f0000000040)=0xa, 0xc)
r10 = socket$netlink(0x10, 0x3, 0x0)
writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1)
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r12)
sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000d000000000001"], 0x38}}, 0x0)
close_range(r11, 0xffffffffffffffff, 0x0)

2m44.412090972s ago: executing program 6 (id=5713):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x204000, &(0x7f0000001600)={[{@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x4ab}}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@discard}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18)
fallocate(r0, 0x0, 0x3, 0x800000)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18)

2m44.13684018s ago: executing program 6 (id=5717):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendto$inet6(0xffffffffffffffff, 0x0, 0x97, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffdffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

2m43.988955965s ago: executing program 6 (id=5720):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rt_sigpending(0x0, 0x0)

2m43.93737886s ago: executing program 6 (id=5723):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58)
r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@noload}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
fadvise64(r2, 0x807f, 0x1000000, 0x4)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00fd583bf43affffff0000"], 0x48)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32=<r5=>0xffffffffffffffff, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0014000004000000000000000000000000000000000000000000b13a7b511c"], 0x50)
ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000300))
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000001085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7, <r8=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r9}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYRESDEC], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x2d)
fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$evdev(&(0x7f0000001380), 0x1, 0x20442)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x4001084)

2m43.354181518s ago: executing program 6 (id=5731):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000004c0)={0xfffffffc, 0x0, 0x0, 'queue0\x00', 0x1})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}})

2m42.731773611s ago: executing program 6 (id=5736):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x51}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r3, 0x30b, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x20000004)

2m42.64557795s ago: executing program 38 (id=5736):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x51}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r3, 0x30b, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x20000004)

59.428889676s ago: executing program 9 (id=7010):
getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/43, 0x2b)
getdents(0xffffffffffffffff, 0x0, 0x3b)

59.428646416s ago: executing program 9 (id=7011):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)

59.39331957s ago: executing program 9 (id=7013):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0x2000000000000217, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r1, 0x0, 0x1034}, 0x18)
sendto$inet6(r0, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c)

59.330906446s ago: executing program 9 (id=7015):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b80)={@fallback, 0xffffffffffffffff, 0x32, 0x8}, 0x20)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x3004000, &(0x7f00000001c0)={[{@errors_remount}, {@resuid}, {@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@nobarrier}, {@noblock_validity}, {@dioread_nolock}]}, 0x1, 0x790, &(0x7f0000001740)="$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")
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000680), &(0x7f00000006c0)=r2}, 0x20)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0)
write$P9_RWALK(r3, 0x0, 0x30)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000840)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x9000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000740)="fd", 0x1, r0}, 0x68)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r6, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r9=>r6, {<r10=>0xffffffffffffffff}}, './file0\x00'})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r3, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0}}, 0x10)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000380)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @ldst={0x2, 0x1, 0x2, 0x4, 0xa, 0xfffffffffffffffc, 0x4}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000001200)=""/4096, 0x41000, 0xc, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000540)=[r1, r12, r1], &(0x7f0000000580)=[{0x2, 0x1, 0x0, 0x1}, {0x3, 0x2, 0x10, 0x7}, {0x5, 0x5, 0xc, 0x9}, {0x0, 0x4, 0x2, 0x9}], 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
r13 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r13, 0x11c, 0xb5c4f23a2d064472, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

59.200721629s ago: executing program 9 (id=7016):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendto$inet6(0xffffffffffffffff, 0x0, 0x97, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffdffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])

58.508568519s ago: executing program 9 (id=7024):
syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF")
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r3}, 0x38)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18)
open_by_handle_at(r7, &(0x7f0000000140)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28, 0x4e, {0x2, 0x99, 0x1400, 0x5, 0xfffffffc, 0x1000}}, 0x300c0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0xb, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x4000090)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r5, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001180)=ANY=[@ANYBLOB="7ec7f344da24f8414e67ba698fecd9dd4ef43e68f7f940a5447079d23ab3caeab180d060687a91c7c34364ea7634bbaf"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x400c800)

58.508139989s ago: executing program 39 (id=7024):
syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF")
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r3}, 0x38)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18)
open_by_handle_at(r7, &(0x7f0000000140)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28, 0x4e, {0x2, 0x99, 0x1400, 0x5, 0xfffffffc, 0x1000}}, 0x300c0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0xb, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x4000090)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r5, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001180)=ANY=[@ANYBLOB="7ec7f344da24f8414e67ba698fecd9dd4ef43e68f7f940a5447079d23ab3caeab180d060687a91c7c34364ea7634bbaf"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x400c800)

5.308363737s ago: executing program 3 (id=7818):
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
unshare(0x64000600)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f0000000100)=0xb)

4.457771572s ago: executing program 3 (id=7827):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdbe, 0xc800}, 0x2040001)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4)
ppoll(&(0x7f0000000280)=[{r2, 0x410}, {r1, 0x1000}, {r3, 0x4000}, {0xffffffffffffffff, 0x2010}, {r2, 0x2000}, {r0, 0x4}, {r1, 0x40b0}], 0x7, &(0x7f0000000400), &(0x7f00000004c0)={[0x685]}, 0x8)

4.3844935s ago: executing program 3 (id=7829):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2, 0x0, 0x1000000005}, 0x18)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000380)={@private2, <r3=>0x0}, &(0x7f00000003c0)=0x14)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc)
r6 = openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x80000, 0x9, 0x4}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f00000008c0)={'syztnl0\x00', <r7=>r3, 0x700, 0x80, 0xc0, 0x8b7e, {{0x11, 0x4, 0x0, 0x1e, 0x44, 0x68, 0x0, 0x80, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@noop, @cipso={0x86, 0x2d, 0x3, [{0x1, 0x3, ','}, {0x0, 0x11, "8edbb2b8dc596cb9a0df4aa904b0ff"}, {0x0, 0xe, "67ace0f9a9c0c8dee0ce85a3"}, {0x1, 0x5, "96ab40"}]}]}}}}})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x10, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000340)='GPL\x00', 0xce2b, 0x0, 0x0, 0x81e00, 0x8, '\x00', r7, 0x0, r5, 0x8, &(0x7f0000000840)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0x7, 0xd22}, 0x10, 0x1f678, r5, 0x7, &(0x7f0000000980)=[r6, r6, r6], &(0x7f00000009c0)=[{0x0, 0x5, 0x1, 0xb}, {0x4, 0x4, 0x2, 0x9}, {0x2, 0x2, 0x9, 0x6}, {0x4, 0x3, 0xf, 0xc}, {0x1, 0x5, 0x1, 0x2}, {0xdb5, 0x5, 0x1, 0x4}, {0x1, 0x5, 0x9, 0xa}], 0x10, 0x6}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
get_robust_list(0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, 0x0, 0x7, 0x300)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r8, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4fb}], 0x1, 0x12020, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r9=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r9, 0x1, 0x6, @local}, 0x10)
fallocate(0xffffffffffffffff, 0x0, 0x34, 0x5)
close(0x3)

3.540674334s ago: executing program 3 (id=7839):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002400), 0x80040, 0x0)
ioctl$TCXONC(r2, 0x5453, 0x2)

3.301225369s ago: executing program 3 (id=7845):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002580)="89000000120081ae08060cdc030000007f03e3f7000000026ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12741308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9234751", 0x81}, {&(0x7f0000002700)="d6f4de1bc9418695", 0x8}], 0x2, 0x0, 0x0, 0xff0f0000}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r4}, 0x18)
memfd_secret(0x80000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
waitid(0x0, 0x0, &(0x7f00000003c0), 0x1000002, &(0x7f0000000600))

3.180306041s ago: executing program 3 (id=7848):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @empty}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
r5 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1b, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1})
io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0)

2.015192978s ago: executing program 5 (id=7867):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r1}, 0x18)
mount$9p_tcp(0x0, &(0x7f0000001040)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000001000)=ANY=[@ANYBLOB='trans=tcp'])
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010300000100f1dbdf2526"], 0x14}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18)
statx(0xffffffffffffffff, 0x0, 0x400, 0x80, 0x0)
execve(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x400000d, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r9=>0x0})
openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x468601, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000f000000050030000000000005002f000300000008000300", @ANYRES32=r9], 0x2c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000340)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r8, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfe13}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xc}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}]}, 0x54}, 0x1, 0x0, 0x0, 0x180}, 0x4000)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}}, 0x20040840)

2.010258088s ago: executing program 1 (id=7868):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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")
unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00')
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') (fail_nth: 3)

1.997729329s ago: executing program 2 (id=7869):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4)
ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x410}, {0xffffffffffffffff, 0x1000}, {r1, 0x4000}, {0xffffffffffffffff, 0x2010}, {0xffffffffffffffff, 0x2000}, {r0, 0x4}, {0xffffffffffffffff, 0x40b0}], 0x7, &(0x7f0000000400), &(0x7f00000004c0)={[0x685]}, 0x8)

1.875831832s ago: executing program 2 (id=7870):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x9, {{0x2, 0x4e21, @broadcast}}}, 0x88) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0, {0xffffffffffffffff, <r2=>0xee00}}, './file0\x00'})
setfsgid(r2) (async)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001180)=@broute={'broute\x00', 0x20, 0x5, 0xff6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x0, &(0x7f0000000140), &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x9, 0x38, 0x8906, 'wlan1\x00', 'pimreg\x00', 'ipvlan1\x00', 'bridge_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0x0, 0x0, 0xff, 0xff], 0xae, 0xae, 0xf6, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x0, 0x30000000, 0x8, 0xff, 0x9}}}], [], @common=@ERROR={'ERROR\x00', 0x20, {"0dcfd85e05f30a9480e5a07aa2d275cdec3a8ae3d778764973c6eb237694"}}}, {0x9, 0x1, 0x18, 'dvmrp1\x00', 'pimreg1\x00', 'pimreg0\x00', 'syzkaller1\x00', @multicast, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @multicast, [0xff, 0xff, 0xff], 0x14e, 0x1ce, 0x1fe, [@stp={{'stp\x00', 0x0, 0x48}, {{0x0, {0x8, 0x1, 0xc, @random="f3d4cdc181c8", [0xff, 0x732a663d6b651437, 0x0, 0xff, 0xff], 0xd, 0x9, 0x4, 0x7, @multicast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x4e22, 0x4e21, 0x2, 0x0, 0x5, 0xa092, 0x9, 0x0, 0x3, 0x2}, 0xa0, 0xa0}}}, @rateest={{'rateest\x00', 0x0, 0x48}, {{'pim6reg0\x00', 'wg2\x00', 0x1, 0x0, 0x9, 0x0, 0x3, 0x5, {0x401}, {0x7}}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x7, 0x22, {0x80}}}}, @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xc}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x9, 0x8, 0x18, 'veth1_vlan\x00', 'ipvlan1\x00', 'team_slave_1\x00', 'nicvf0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x6, 0x7, 0x5, 0x0, 0x0, "7356735dcc3a5235e2e3587a41ef074f1f1eb043f12011af8117fc1ad0b8dd43c56d807cdc589435081f7f2cc401eb41a06bc49d214d0d6d4f1aabf9733cd62f"}}}}]}, {0x0, '\x00', 0x3, 0x7ffffffffffffffc, 0x2, [{0x11, 0x42, 0x8035, 'batadv_slave_0\x00', 'bridge_slave_0\x00', 'veth0_to_bond\x00', 'bridge_slave_0\x00', @multicast, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @local, [0xff, 0x0, 0xff], 0x9e, 0xee, 0x13e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x2, 0x5, 0x1, 0x2, 0x2}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x7ff, {0xe30d}}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x0, {0x9}}}}}, {0x3, 0x2, 0xc69a85544b4fee19, 'veth0_to_bridge\x00', '\x00', 'veth0_to_hsr\x00', 'bridge_slave_0\x00', @link_local, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @broadcast, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x856, 0x9ce, 0xa1e, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x2, 0x3}, {0x2}, {0x80000001}, {0x6, 0x2}, {0x8, 0x1}, {0x8, 0x3}, {0x4, 0x3}, {0x0, 0x3}, {0x2000}, {0x2e, 0x1}, {0x1}], [{0x3, 0x2}, {0x10, 0x7}, {}, {0x8, 0x3}, {0xe, 0xd3}, {0x7e77, 0x3}, {0x0, 0x3}, {0x0, 0x7}, {}, {0x6, 0x9}, {0x10000, 0x7}], 0x9, 0xb}, {[{0x2}, {0x1, 0x3}, {0x7f5, 0x3}, {0x5, 0x2}, {0x7, 0x3}, {0x7}, {0x7, 0x2}, {0x4, 0x2}, {0x8000}, {0x6, 0x1}, {0x9, 0x2}], [{0x9, 0x8000000}, {0x9c, 0x9}, {0x6, 0x4}, {0x512, 0x4}, {0x8, 0x40}, {0x3, 0x8001}, {0x8, 0x100}, {0xb4, 0x4}, {0x80000000, 0x8}, {0xc1f, 0x10001}, {0x10000, 0xd0f1}], 0xb, 0x4}, {[{0x9, 0x3}, {0x9, 0x1}, {0x5, 0x2}, {0x80}, {0x9, 0x2}, {0x0, 0x3}, {0x1e291562, 0x3}, {0x2, 0x1}, {0xfffffff4, 0x3}, {0x0, 0x3}, {0xe, 0x2}], [{0x9, 0x80}, {0x4, 0x4}, {0x5935, 0x1}, {0x2, 0x4}, {0xa, 0x3}, {0x5, 0x100}, {0x5, 0x9}, {0x8, 0x8}, {0x1, 0xb7c00000}, {0x5, 0x8}, {0x6}], 0x3, 0x4}, {[{0xf4a8, 0x1}, {0x7, 0x3}, {0xfffffffe}, {0x2}, {0x1, 0x3}, {0x800}, {0x5}, {0x5, 0x2}, {0x1, 0x3}, {0x2800000, 0x2}, {0xf, 0x2}], [{0x77c, 0x3ff}, {0x1, 0x78}, {0x44, 0x4}, {0x81, 0x101}, {0x1, 0x7}, {0x5, 0xa5a9}, {0x2, 0x2}, {0x0, 0x1000}, {0x8, 0xffff}, {0x4, 0x8001}, {0x1, 0x8000}], 0x5, 0x1}, {[{0x4}, {0x2}, {0x3, 0x2}, {0x5, 0x1}, {0x8001, 0x1}, {0x3, 0x3}, {0x400, 0x2}, {0x348}, {0x0, 0x1}, {0x3, 0x1}, {0x8, 0x2}], [{0x4, 0x6}, {0xffff, 0x5}, {0x8000, 0xbe6}, {0x100, 0x101}, {0xfffffff7, 0x9}, {0x2a, 0x3919}, {0x10000, 0x9}, {0x800, 0x7}, {0xeeb9, 0x6}, {0x6, 0x61}, {0x8001, 0x4}], 0x1, 0x5}, {[{0x9, 0x2}, {0xec5b, 0x3}, {0xffffffe1, 0x1}, {0x70a3}, {0x79e, 0x2}, {0x3, 0x3}, {0x4}, {0x2, 0x1}, {0x2, 0x2}, {0x7, 0x3}, {0x101, 0x1}], [{0x797b, 0x8}, {0x8, 0x2}, {0x401, 0x3ff}, {0x7, 0x10001}, {0xfffff356, 0x8000}, {0x1, 0x9}, {0x8, 0x3}, {0xffffffff}, {0x0, 0x479}, {0x4407}, {0x0, 0x8}], 0x6, 0x5}, {[{0x3, 0x2}, {0x8, 0x3}, {0x6, 0x3}, {0xd}, {0x7}, {0x0, 0x1}, {}, {0x894a, 0x3}, {}, {0x4a90, 0x3}, {0x5, 0x2}], [{0xd3363655, 0x10000}, {0x6, 0x7}, {0x5, 0x9}, {0x449b, 0x5}, {0x6, 0x50}, {0x6, 0xfffffff0}, {0xfffff6ca, 0x8}, {0x2, 0x96}, {0x0, 0x8}, {0x7, 0x81}, {0xff800000, 0x2}], 0x1, 0x9}, {[{0x3, 0x1}, {0x6, 0x1}, {0x10001, 0x3}, {0x4, 0x3}, {0x7, 0x1}, {0xfff, 0x3}, {0x3, 0x3}, {0xffff, 0x3}, {0x4}, {0x3, 0x1}, {0x7fffffff, 0x1}], [{0x4, 0x5}, {0xfffffffe, 0xffffffff}, {0x0, 0x1}, {0x9, 0x4f0}, {0x0, 0x8}, {0x1ff, 0xda95}, {0x9, 0x3}, {0x5, 0x5}, {0xfffffffb, 0x6}, {0x0, 0x7fffffff}, {0xab, 0x10000}], 0xb, 0xa}, {[{0x8001, 0x1}, {0x9dd, 0x1}, {0x7fff, 0x2}, {0x3, 0x3}, {0x6, 0x2}, {0x400, 0x1}, {0x4, 0x3}, {0xffff}, {0x7ff, 0x3}, {0x933, 0x2}, {0x7}], [{0x9, 0x40}, {0x1, 0x7}, {0xf, 0x3}, {0x38000000, 0x3}, {0x6, 0x9}, {0xa1d, 0x1}, {0x3, 0x7}, {0x1, 0x5}, {0x1, 0x8}, {0x5, 0x5}, {0x7fffffff, 0x10}], 0x2, 0x5}, {[{0x1000, 0x3}, {0x5, 0x3}, {0x9, 0x3}, {0xe}, {0x5, 0x2}, {0xfffffff3}, {0x3, 0x1}, {0x7}, {0x3, 0x2}, {0x7f, 0x3}, {0x29, 0x2}], [{0x7fff, 0x5}, {0x10c5b8bb}, {0x2, 0xd7}, {0xc34f, 0x2}, {0x9, 0x9}, {0x0, 0x4}, {0xda, 0x8}, {0x1000, 0xa000}, {}, {0x8, 0x200}, {0x1ffc0000, 0x3}], 0x0, 0x6}, {[{0x7e, 0x1}, {0xd9da, 0x1}, {0x3}, {0x7ff}, {0x0, 0x1}, {0x7, 0x2}, {0x10, 0x2}, {0xa0}, {0xfff, 0x1}, {0x1, 0x1}, {0x9, 0x1}], [{0x4, 0xb273}, {0x2}, {0x3, 0x8}, {0x9, 0x5d}, {0x8}, {0x237414fb, 0x3}, {0xfffffffc, 0xffff}, {0x6b, 0x80}, {0x10000}, {0x81, 0x3}, {0x1, 0x7}], 0xa, 0x8}], 0x3}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7, 'system_u:object_r:policy_src_t:s0\x00'}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0xdb, 0xf, {0x7}}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x1, {0x8001}}}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffc}]}, 0x106e)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r1)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x54, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x7]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4)
ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f0000001380)={0x3, 0x2})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000013c0), 0x280040, 0x0)
ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000001400)=0x181011) (async)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x4, 0x40010, r1, 0x8000000) (async, rerun: 64)
syz_io_uring_setup(0x1ba5, &(0x7f0000001440)={0x0, 0x3dd5, 0x0, 0x3, 0x2dc, 0x0, r3}, &(0x7f00000014c0), &(0x7f0000001500)=<r8=>0x0) (async, rerun: 64)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000001740)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r0, 0x0, &(0x7f0000001700)={&(0x7f0000001540)=@rc={0x1f, @none, 0x7f}, 0x80, &(0x7f00000015c0), 0x0, &(0x7f0000001600)=[{0x18, 0x101, 0x2b0, "b9d10112"}, {0xd0, 0x11, 0x10, "7e08c26c400298b6a855b707757814d3d54979b036b7a4a523044e37f7572ea347e869627ce0c7456e607728c88079de8124d18efa97d11bc77c4471389547a7d8458921e7e07845fb59f1749c1c78b68c3c7b1cf580377c68a81ef7749c17c983c7aef059b34b8f6f4ab6a231f5b03bb489ab6c48547ca5e484787946b6f9a1832d0e12a31e27c518a37756fd789e7087f5e707304c9c60f5ba614aaa0623d7bccc9322ca54f6b40ac08dc5491c62291abe02af4fb5cc3a9d24"}], 0xe8}, 0x0, 0x8000, 0x0, {0x0, r9}}) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000001780)={{0x1, 0x1, 0x18, <r10=>r0}, './file0\x00'}) (async, rerun: 64)
splice(r3, &(0x7f00000017c0)=0x6, r3, &(0x7f0000001800)=0x4, 0x7, 0x9) (async, rerun: 32)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001a00)={0x4, <r11=>0x0}, 0x8) (rerun: 32)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x10, 0x5, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffc}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @generic={0x2, 0x8, 0x0, 0x2, 0x3}]}, &(0x7f0000001880)='syzkaller\x00', 0x30000000, 0x87, &(0x7f00000018c0)=""/135, 0x41100, 0xd, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000001980)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000019c0)={0x1, 0xd, 0x7}, 0x10, r11, r3, 0x0, &(0x7f0000001a40)=[r10, r1, r1, r10], 0x0, 0x10, 0xfffffff9}, 0x94) (async)
ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000001b40))
r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001b80), 0x88000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r13, 0x40345410, &(0x7f0000001bc0)={{0x1, 0x1, 0x800, 0x0, 0x3}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001c00)={'team0\x00', <r14=>0x0})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001c40)='net/psched\x00') (async)
syz_io_uring_submit(r7, r8, &(0x7f0000001c80)=@IORING_OP_CLOSE={0x13, 0x71, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001d80)={'syztnl0\x00', &(0x7f0000001cc0)={'gre0\x00', r14, 0x7, 0x7800, 0x9, 0x2, {{0x1d, 0x4, 0x2, 0x7, 0x74, 0x66, 0x0, 0xb8, 0x29, 0x0, @multicast1, @local, {[@end, @noop, @timestamp_prespec={0x44, 0x14, 0x7a, 0x3, 0xf, [{@empty, 0x400}, {@loopback, 0x5}]}, @cipso={0x86, 0x26, 0x3, [{0x0, 0x8, "fbbdd292dc21"}, {0x0, 0xe, "0ae3d70a060a1c7c44530b37"}, {0x37a6d61dfd6aa270, 0x8, "638193b0c827"}, {0x7, 0x2}]}, @timestamp_addr={0x44, 0x24, 0xa5, 0x1, 0x6, [{@private=0xa010101, 0x8}, {@remote, 0x3}, {@local, 0x5}, {@multicast1, 0x9}]}]}}}}}) (async)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000001dc0)=0xffffffff, 0x4) (async, rerun: 64)
shutdown(r3, 0x1) (async, rerun: 64)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000001e00)=r12, 0x4)

1.737593556s ago: executing program 5 (id=7871):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x9})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000140)=""/67)

1.687526251s ago: executing program 2 (id=7872):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000)
dup3(0xffffffffffffffff, r2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0xd81, &(0x7f0000000600)={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "d6c438", 0xd4b, 0xe, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x2c, 0x1a3, '\x00', [@generic={0x3, 0xd17, "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"}]}], "14cb3cc2fb45052d9fe6fac8aa4a609dd6d1c5c751d2211f5ab5c585aece759fc83959"}}}}}, 0x0)

1.642586025s ago: executing program 1 (id=7873):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
ioperm(0x9, 0x6, 0x0)
mlockall(0x1)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x409, 0x4, 0x0, 0x40, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x2000000)

1.641977605s ago: executing program 2 (id=7874):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', <r1=>0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}})
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2, 0x0, 0x400007}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'syztnl2\x00', r1, 0x0, 0x8, 0x3, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x6}})

1.544656115s ago: executing program 2 (id=7875):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = semget(0x0, 0x1, 0x281)
semctl$GETVAL(r1, 0x0, 0xc, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000300)=0x8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
sendto$inet6(r4, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r4, r5, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40)
sendmmsg$inet6(r4, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)="95a11147", 0x4}], 0x1}}], 0x1, 0x40001)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r3, 0xb, 0x20}, 0xc)
r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000080)={{r0}, 0x8000, 0x0, 0x4d08})

1.516913918s ago: executing program 0 (id=7876):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18090900000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="f8c96babd15d52879a72f85be28386c92e9f9b06f972a9dbbae0d314fb98d3bf4e7fbac415035bdb979a7892465ef7f124107682c59bc4d0969dbb20ce7a3980d4f9059293590d8825468d1385bdf5af20441053c7b1fb5d399000956ae73abdfd8fd1670699e2dd0bb96df09b65680b33cd38ef84105afaf9859f00be92b4738e973b15d092ef", @ANYBLOB="875193d689a5f58b1ccaa8d24096fdbf1d6af4962ed0807ee0d8cc1a23a14cb424660bb824b1f406b16e0388a65654d2196ace5940d674dba691b17f754b7e6f6e0fdf7a5b7e692e8ebcc1bf65f2c0ff302c17dbd576ef35e79e8412d1fefbfb925a360d663c33d988a0d36e99608bdb06de6b88227001450e1ee487ecf50a32fe1aaf242e6474a2fee56342db7f1d9384cb66b8f88c12ec4e259e04f66af87141efd57f2907c65d52f1d407910b"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000010000400000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x49)

1.436222136s ago: executing program 0 (id=7877):
socket$inet6(0xa, 0x1, 0x0)
syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xf96d, 0x3010, 0x4, 0xe6}, &(0x7f0000000040), &(0x7f0000000080))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x6}, 0x18)
syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4080}, 0x20040014)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
r7 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000580)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x0, @fd, 0x64, 0x0, 0x0, 0x2, 0x1, {0x0, r10}})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000001c0)={{0xf, 0x5a}, 0x1, 0x8, 0x7000, {0x2, 0x1}, 0xf9})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x30, 0x0, 0x1ee, 0x2, 0x0, 0x7ff, 0x0, 0x1, {0x1}})
io_uring_enter(r7, 0x46bc, 0x3, 0x20, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)

883.175631ms ago: executing program 1 (id=7878):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x40289}, &(0x7f00000004c0)=<r1=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc01}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x1fffffc0, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES16, @ANYRESDEC, @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
getrandom(&(0x7f0000000000)=""/1, 0x1, 0x1)

882.625242ms ago: executing program 5 (id=7879):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002400), 0x80040, 0x0)
ioctl$TCXONC(r2, 0x5453, 0x2)

725.485147ms ago: executing program 2 (id=7880):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @empty}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
r5 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1b, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1})
io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0)

656.700474ms ago: executing program 5 (id=7881):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000004c0)={[{@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@data_err_ignore}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x401}}, {@nogrpid}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
fallocate(r5, 0x0, 0x3, 0x800000)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c)
fallocate(r7, 0x10, 0x6, 0x105ff)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r1], 0x78}, 0x1, 0x0, 0x0, 0x4008891}, 0x10)
syz_emit_ethernet(0x4f, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffe00000000086dd6c2d0100001984"], 0x0)

508.713309ms ago: executing program 0 (id=7882):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18090900000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="f8c96babd15d52879a72f85be28386c92e9f9b06f972a9dbbae0d314fb98d3bf4e7fbac415035bdb979a7892465ef7f124107682c59bc4d0969dbb20ce7a3980d4f9059293590d8825468d1385bdf5af20441053c7b1fb5d399000956ae73abdfd8fd1670699e2dd0bb96df09b65680b33cd38ef84105afaf9859f00be92b4738e973b15d092ef", @ANYBLOB="875193d689a5f58b1ccaa8d24096fdbf1d6af4962ed0807ee0d8cc1a23a14cb424660bb824b1f406b16e0388a65654d2196ace5940d674dba691b17f754b7e6f6e0fdf7a5b7e692e8ebcc1bf65f2c0ff302c17dbd576ef35e79e8412d1fefbfb925a360d663c33d988a0d36e99608bdb06de6b88227001450e1ee487ecf50a32fe1aaf242e6474a2fee56342db7f1d9384cb66b8f88c12ec4e259e04f66af87141efd57f2907c65d52f1d407910b"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000010000400000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x49)

472.623633ms ago: executing program 1 (id=7883):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x0) (fail_nth: 10)

429.166817ms ago: executing program 5 (id=7884):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="bc9ab46483121c973105fac66773fdaee1174b72c1", @ANYRES32=r1, @ANYRESOCT], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002"], 0x190}}, 0x0) (fail_nth: 2)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@jqfmt_vfsv0}, {@norecovery}, {@nogrpid}, {@dioread_lock}]}, 0x3, 0x545, &(0x7f0000000180)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80040880}, 0xc, &(0x7f0000000240)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x4004848}, 0x4000010)

418.502578ms ago: executing program 0 (id=7885):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2000}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c000380140001007767"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)

163.539484ms ago: executing program 1 (id=7886):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$sg(0x0, 0x0, 0x401)
ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0)
socket$inet6(0xa, 0x1, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfea8, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000010b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)

115.583949ms ago: executing program 0 (id=7887):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18090900000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="f8c96babd15d52879a72f85be28386c92e9f9b06f972a9dbbae0d314fb98d3bf4e7fbac415035bdb979a7892465ef7f124107682c59bc4d0969dbb20ce7a3980d4f9059293590d8825468d1385bdf5af20441053c7b1fb5d399000956ae73abdfd8fd1670699e2dd0bb96df09b65680b33cd38ef84105afaf9859f00be92b4738e973b15d092ef", @ANYBLOB="875193d689a5f58b1ccaa8d24096fdbf1d6af4962ed0807ee0d8cc1a23a14cb424660bb824b1f406b16e0388a65654d2196ace5940d674dba691b17f754b7e6f6e0fdf7a5b7e692e8ebcc1bf65f2c0ff302c17dbd576ef35e79e8412d1fefbfb925a360d663c33d988a0d36e99608bdb06de6b88227001450e1ee487ecf50a32fe1aaf242e6474a2fee56342db7f1d9384cb66b8f88c12ec4e259e04f66af87141efd57f2907c65d52f1d407910b"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000010000400000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="2d637075202d637075707561636374202b6e6574202d68756765746c62202b626c6b696f6e700ed432bdd1cedef3a398ad66f620cf726c696d6974202d64657669636573202d626c6b696f20cce6183334a3701b72d691902722f518dbb5b1e914f62733fb204c8e5048bd1697ead0096638c25c182d9ffec8664e711a644f7925ddcb8211d2f471a7be8c1b34c920090000009410d903e3be95e24b9cc8cf1e5bef4c46f8fe166436b9ed75bc2d5c87144457d9485066b399b41e634bb42c3a04bf097a01631ec11f047cd42190b3c7aa15f80c9121783e45be56afab5ca51414ad1d7e7537aaed7fc9a28c9041729944348c5b0291d5889b1609011e0ab1401665a032c3cb8b753263a7344cee0d49b1374b67a7b1d1627a36db3ba1843116759593b5e74d7ebc02258accadf7ce906abd3c506fb9d16b725ee0b554f1562a8ff328cb8acfa2fffe4c13461d2157f05b4f54db47b815f51646e386c5844727b60b442369a2ceacbc341a8b1cdc35bc9b9d06ceefcbf9a0cdad653b04d15d300b472145545d3cdafaba52a17d9bf6fd5db5e6ffbdc97a626d2bd1e9169df3d91a1aebc3ec076f225796d77363c347f1d7c25503f988"], 0x49)

62.165484ms ago: executing program 1 (id=7888):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000005c0)={[{@jqfmt_vfsold}, {@orlov}, {@user_xattr}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@nodiscard}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$eJzs3M1vFOUfAPDvTLulwI9fK+ILCFJFI/GlpeVFDl40mnDQxEQPGE+1LaRSqKE1EUK0esCjIfFu/C+MJ70Y9aKJV70bEmK4gHpZMzsztLS77ZZud4H9fJLZfZ6Z2X2e78w8O8/Ms7sBdK2h7CGJ+F9E/B4RA3n29hWG8qeb1y9N/H390kQS1epbfyW19W5cvzRRrlq+bnueqVaL/JY65V5+N2J8ZmbqfJEfmT/7wcjchYsvTJ8dPz11eurc2PHjRw7v6zs2drQlcWZx3djz8eze3SfeufLGxMkr7/2UpJHHHcviaJWhfOvW9XSrC+uwHUvSSW/22F/k9v+yuKTekUAn9UREtrsqtfY/ED2x9daygXjts45WDthU1Wq1usqn8kIVuI8l0ekaAJ1Rnuiz699yalPX465w7eX8AiiL+2Yx5Ut6I80T+yvLrm9baSgiTi7881U2xSbdhwAAWOq7rP/zfL3+XxoP54m+7OH/xRjKYEQ8EBE7I+LBiNgVEQ9F1NZ9JCIeXWf5y0dIVvZ/0qt3HFwTsv7fS8XY1u39v7RcZbCnyO2oxV9JTk3PTB0qtsnBqGw5NZ1Mja5Sxvev/vZFo2VL+3/ZlJVf9gWLelztXXaDbnJ8fnwjMS917dOIPb314k9q4wJRjOvtjog9d1jG9LO9DZetHf8qGr9t06pfRzyT7/+FWBZ/KWk4Pjn64rGxoyP9MTN1aKQ8Klb6+dfLbzYqf0Pxt0C2/7fVPf5vxT+Y9EfMXbh4pjZeO7f+Mi7/8XnDa5p1Hv8ndhTHf1/ydm1GX7Hgo/H5+fOjEX3J6yvnjy2+W5kv18/iP3igfvvfGYtb4rGI2BsR+yLi8eyisKj7ExHxZEQcWCX+H1956v31x9+esdIs/sm19n8s3f/rT/Sc+eHbtePvj4hG+/9ILXWwmNPM51+zFdzItgMAAIB7Rf4d+CQdXkwnw8P5d/h3xbZ0ZnZu/rlTsx+em8y/Kz8YlbS80zWw5H7oaHFvuMyPLcsfLu4bf9mztZYfnpidmex08NDltq9o/2matf/Mnz2drh2w6Vowjgbco7R/6F7aP3SnZM32X2lbXYD2c/6H7lWv/X/ScO3hbza1MkBbOf9D92qi/S/kT417BcC9yfkfupf2D12p4W/j0w395L/tiX+L/zO8W+pz/ycivSuqcf8nepv+M4tGicrKtlwdyNt/NmdL3Vd1+pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNf4LAAD///R05PQ=")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0e000000040005000000000000609c4c50ea92a4a2ba06bf00000000000000001a70a3263b02de2f1de6ec7d0e077d39cf19161df5e73b2b153fe12f654687ef23f9650bb9d9f31a8d69d07a106aa2525b037d5bd25c52000000000000000000000000ad6015a69c29456311acc80cc1f2ab3524ddaad39d262bd38d186090830f0000b940be90085e2a798be1bed57e5c75b3451ff9f68dda3c3eef802b748e802b1b1c2b487c300d82c38e810580d0caeb01000000158763", @ANYRES32=r3, @ANYBLOB="b5cb0226e1c6a0d95819e9fe46b086cce2c8cfc91f5b3876adee0b155f46c0170769a6b1a473ed6356e5cf80297c81a210f2e2d35128e4dacf3b65a59d0ddc5f75c9a2bc9b4a35b992eba4e14db9eb73772a17d9a5d9de4721ae6eeb7ed3b803487355073de4b9ed3a25eda6a393371cae147c1eecf577196dcbb9e8ce74a5fd97c4a16d2a2fc80251e5eb284cbe1b98db8ceda53b859edff9968e7caae191981a1b0cc1787ce6c632fc423d0a9ae91bda42b8abc566b5498b1c2d644ebb0234eee4bb367736e6f47a46a0e645d88a", @ANYRES64=r1], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000640)={0xfff, 0x2, 0x46fd, 0x9, 0x5})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x8aef}, 0x18)
open_by_handle_at(r2, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x36f0516f)
syz_io_uring_setup(0xbda, 0x0, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r7, &(0x7f0000000740)=[{&(0x7f00000002c0)="589224d2c3", 0x5}], 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000080), 0x2, 0x0)
sendfile(r9, r9, &(0x7f0000000040)=0xa, 0xc)
r10 = socket$netlink(0x10, 0x3, 0x0)
writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1)
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r12)
sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d000000000001"], 0x38}}, 0x0)
close_range(r11, 0xffffffffffffffff, 0x0)

61.711204ms ago: executing program 0 (id=7889):
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet(0x2, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000480)={0x0, 0x51, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000008ab4abdf451e40804db38e39c71e6f1c786d15aada2b691b63ba83fe0151cda29d75391f07", @ANYRES16=r1, @ANYBLOB="770026bd7000fcdbdf020000000008000323030000000e0001006e65746465767369e2505794b47529446e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004014}, 0xc804)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0)
ftruncate(r2, 0x3)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e1e, 0xfffffffe, @empty, 0x9}, 0x1c)
sendfile(r3, r2, 0x0, 0xfeff)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f4a91a01000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r7}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r8=>0xffffffffffffffff}, './file0\x00'})
sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x20, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c041}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
pivot_root(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r9}, 0x18)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345})
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$rfkill(r10, &(0x7f0000000040), 0x8)
io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 5 (id=7890):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', <r1=>0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3, 0x0, 0x400007}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'syztnl2\x00', r1, 0x0, 0x8, 0x3, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x6}})

kernel console output (not intermixed with test programs):

7/0x7f
[  604.175368][T25987] RIP: 0033:0x7fcc9f3df6c9
[  604.175377][T25987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  604.175387][T25987] RSP: 002b:00007fcc9de3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  604.175399][T25987] RAX: ffffffffffffffda RBX: 00007fcc9f635fa0 RCX: 00007fcc9f3df6c9
[  604.175406][T25987] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  604.175446][T25987] RBP: 00007fcc9de3f090 R08: 0000000000000000 R09: 0000000000000000
[  604.175453][T25987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  604.175460][T25987] R13: 00007fcc9f636038 R14: 00007fcc9f635fa0 R15: 00007fffa3e4ebb8
[  604.175470][T25987]  </TASK>
[  604.419332][T25988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  604.434760][T25991] netlink: 'syz.5.7390': attribute type 4 has an invalid length.
[  604.442674][T25991] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7390'.
[  604.452790][T25988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  604.475465][T25991] .`: renamed from bond0 (while UP)
[  604.479038][T25995] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  604.544621][T26003] FAULT_INJECTION: forcing a failure.
[  604.544621][T26003] name failslab, interval 1, probability 0, space 0, times 0
[  604.557407][T26003] CPU: 1 UID: 0 PID: 26003 Comm: syz.5.7396 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  604.557441][T26003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  604.557455][T26003] Call Trace:
[  604.557462][T26003]  <TASK>
[  604.557470][T26003]  __dump_stack+0x1d/0x30
[  604.557494][T26003]  dump_stack_lvl+0xe8/0x140
[  604.557577][T26003]  dump_stack+0x15/0x1b
[  604.557595][T26003]  should_fail_ex+0x265/0x280
[  604.557693][T26003]  ? v9fs_mount+0x51/0x5c0
[  604.557716][T26003]  should_failslab+0x8c/0xb0
[  604.557752][T26003]  __kmalloc_cache_noprof+0x4c/0x4a0
[  604.557784][T26003]  v9fs_mount+0x51/0x5c0
[  604.557863][T26003]  ? selinux_capable+0x31/0x40
[  604.557887][T26003]  ? __pfx_v9fs_mount+0x10/0x10
[  604.557918][T26003]  legacy_get_tree+0x78/0xd0
[  604.558001][T26003]  vfs_get_tree+0x57/0x1d0
[  604.558023][T26003]  do_new_mount+0x24d/0x660
[  604.558119][T26003]  ? security_capable+0x83/0x90
[  604.558156][T26003]  path_mount+0x4a5/0xb70
[  604.558323][T26003]  ? user_path_at+0x109/0x130
[  604.558344][T26003]  __se_sys_mount+0x28c/0x2e0
[  604.558369][T26003]  ? fput+0x8f/0xc0
[  604.558419][T26003]  __x64_sys_mount+0x67/0x80
[  604.558446][T26003]  x64_sys_call+0x2b51/0x3000
[  604.558529][T26003]  do_syscall_64+0xd2/0x200
[  604.558550][T26003]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  604.558594][T26003]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  604.558629][T26003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  604.558652][T26003] RIP: 0033:0x7f7af5f1f6c9
[  604.558672][T26003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  604.558692][T26003] RSP: 002b:00007f7af4987038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  604.558713][T26003] RAX: ffffffffffffffda RBX: 00007f7af6175fa0 RCX: 00007f7af5f1f6c9
[  604.558732][T26003] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000
[  604.558743][T26003] RBP: 00007f7af4987090 R08: 0000200000000380 R09: 0000000000000000
[  604.558754][T26003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  604.558785][T26003] R13: 00007f7af6176038 R14: 00007f7af6175fa0 R15: 00007fff46c66588
[  604.558869][T26003]  </TASK>
[  604.850660][T26010] Cannot find map_set index 0 as target
[  604.889819][T26023] netlink: 'syz.2.7403': attribute type 10 has an invalid length.
[  604.899211][T26019] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.912852][T26023] team0: Port device dummy0 added
[  604.919261][T26023] netlink: 'syz.2.7403': attribute type 10 has an invalid length.
[  604.929279][T26023] team0: Port device dummy0 removed
[  604.936142][T26023] dummy0: entered promiscuous mode
[  604.942816][T26023] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link
[  604.953679][T26019] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.956244][T26023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7403'.
[  605.011940][T26019] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.032446][T26031] FAULT_INJECTION: forcing a failure.
[  605.032446][T26031] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  605.045629][T26031] CPU: 0 UID: 0 PID: 26031 Comm: syz.3.7408 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  605.045661][T26031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  605.045674][T26031] Call Trace:
[  605.045681][T26031]  <TASK>
[  605.045689][T26031]  __dump_stack+0x1d/0x30
[  605.045745][T26031]  dump_stack_lvl+0xe8/0x140
[  605.045830][T26031]  dump_stack+0x15/0x1b
[  605.045849][T26031]  should_fail_ex+0x265/0x280
[  605.045870][T26031]  should_fail+0xb/0x20
[  605.045916][T26031]  should_fail_usercopy+0x1a/0x20
[  605.046013][T26031]  _copy_from_user+0x1c/0xb0
[  605.046040][T26031]  memdup_user_nul+0x5f/0xe0
[  605.046074][T26031]  sel_write_enforce+0x9c/0x2d0
[  605.046096][T26031]  ? __pfx_sel_write_enforce+0x10/0x10
[  605.046158][T26031]  vfs_write+0x269/0x960
[  605.046184][T26031]  ? __rcu_read_unlock+0x4f/0x70
[  605.046212][T26031]  ? __fget_files+0x184/0x1c0
[  605.046243][T26031]  ksys_write+0xda/0x1a0
[  605.046325][T26031]  __x64_sys_write+0x40/0x50
[  605.046354][T26031]  x64_sys_call+0x2802/0x3000
[  605.046460][T26031]  do_syscall_64+0xd2/0x200
[  605.046483][T26031]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  605.046561][T26031]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  605.046643][T26031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  605.046667][T26031] RIP: 0033:0x7fcc9f3df6c9
[  605.046684][T26031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  605.046717][T26031] RSP: 002b:00007fcc9de3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  605.046743][T26031] RAX: ffffffffffffffda RBX: 00007fcc9f635fa0 RCX: 00007fcc9f3df6c9
[  605.046757][T26031] RDX: 0000000000000069 RSI: 0000000000000000 RDI: 0000000000000005
[  605.046814][T26031] RBP: 00007fcc9de3f090 R08: 0000000000000000 R09: 0000000000000000
[  605.046827][T26031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  605.046841][T26031] R13: 00007fcc9f636038 R14: 00007fcc9f635fa0 R15: 00007fffa3e4ebb8
[  605.046934][T26031]  </TASK>
[  605.055704][T26033] netlink: 116 bytes leftover after parsing attributes in process `syz.2.7409'.
[  605.221097][T26034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7406'.
[  605.296208][T26019] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.329241][T26046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7406'.
[  605.361982][T26045] pim6reg: left allmulticast mode
[  605.392976][T25070] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  605.411477][T25070] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  605.423632][T25070] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  605.432875][T26045] netlink: 120 bytes leftover after parsing attributes in process `syz.1.7412'.
[  605.451346][T25070] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  605.477638][T26051] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.507319][T26057] FAULT_INJECTION: forcing a failure.
[  605.507319][T26057] name failslab, interval 1, probability 0, space 0, times 0
[  605.521748][T26057] CPU: 1 UID: 0 PID: 26057 Comm: syz.2.7416 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  605.521813][T26057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  605.521824][T26057] Call Trace:
[  605.521831][T26057]  <TASK>
[  605.521839][T26057]  __dump_stack+0x1d/0x30
[  605.521886][T26057]  dump_stack_lvl+0xe8/0x140
[  605.521908][T26057]  dump_stack+0x15/0x1b
[  605.521923][T26057]  should_fail_ex+0x265/0x280
[  605.521940][T26057]  should_failslab+0x8c/0xb0
[  605.522002][T26057]  kmem_cache_alloc_noprof+0x50/0x480
[  605.522027][T26057]  ? dst_alloc+0xbd/0x100
[  605.522092][T26057]  ? __pfx_ip6_dst_gc+0x10/0x10
[  605.522118][T26057]  dst_alloc+0xbd/0x100
[  605.522151][T26057]  ip6_rt_cache_alloc+0x1ed/0x570
[  605.522247][T26057]  ip6_pol_route+0xa7f/0xb40
[  605.522272][T26057]  ip6_pol_route_output+0x40/0x50
[  605.522298][T26057]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  605.522343][T26057]  fib6_rule_lookup+0x112/0x470
[  605.522374][T26057]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  605.522405][T26057]  ip6_route_output_flags+0x1e0/0x2c0
[  605.522430][T26057]  ip6_dst_lookup_tail+0x4a2/0xab0
[  605.522497][T26057]  ip6_dst_lookup_flow+0x47/0xc0
[  605.522514][T26057]  rawv6_sendmsg+0xa29/0xf70
[  605.522558][T26057]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  605.522587][T26057]  inet_sendmsg+0xc5/0xd0
[  605.522614][T26057]  __sock_sendmsg+0x102/0x180
[  605.522657][T26057]  sock_sendmsg+0xc1/0x130
[  605.522679][T26057]  splice_to_socket+0x5f3/0x990
[  605.522749][T26057]  ? __pfx_splice_to_socket+0x10/0x10
[  605.522769][T26057]  direct_splice_actor+0x156/0x2a0
[  605.522792][T26057]  ? shmem_file_open+0x1/0x40
[  605.522815][T26057]  splice_direct_to_actor+0x312/0x680
[  605.522887][T26057]  ? __pfx_direct_splice_actor+0x10/0x10
[  605.522911][T26057]  do_splice_direct+0xda/0x150
[  605.522982][T26057]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  605.523053][T26057]  do_sendfile+0x380/0x650
[  605.523131][T26057]  __x64_sys_sendfile64+0x105/0x150
[  605.523218][T26057]  x64_sys_call+0x2bb4/0x3000
[  605.523238][T26057]  do_syscall_64+0xd2/0x200
[  605.523299][T26057]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  605.523323][T26057]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  605.523353][T26057]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  605.523459][T26057] RIP: 0033:0x7fe2c82cf6c9
[  605.523473][T26057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  605.523488][T26057] RSP: 002b:00007fe2c6d37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  605.523506][T26057] RAX: ffffffffffffffda RBX: 00007fe2c8525fa0 RCX: 00007fe2c82cf6c9
[  605.523520][T26057] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[  605.523565][T26057] RBP: 00007fe2c6d37090 R08: 0000000000000000 R09: 0000000000000000
[  605.523578][T26057] R10: 000080001d00c0d1 R11: 0000000000000246 R12: 0000000000000001
[  605.523591][T26057] R13: 00007fe2c8526038 R14: 00007fe2c8525fa0 R15: 00007ffed2635958
[  605.523616][T26057]  </TASK>
[  605.842610][T26036] loop3: detected capacity change from 0 to 4096
[  605.854907][T26036] EXT4-fs: Ignoring removed nomblk_io_submit option
[  605.875700][T26051] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.935978][T26036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  605.954545][T26051] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.991233][T21041] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  606.000860][T26071] FAULT_INJECTION: forcing a failure.
[  606.000860][T26071] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  606.013954][T26071] CPU: 1 UID: 0 PID: 26071 Comm: syz.0.7421 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  606.014049][T26071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  606.014061][T26071] Call Trace:
[  606.014069][T26071]  <TASK>
[  606.014077][T26071]  __dump_stack+0x1d/0x30
[  606.014101][T26071]  dump_stack_lvl+0xe8/0x140
[  606.014119][T26071]  dump_stack+0x15/0x1b
[  606.014134][T26071]  should_fail_ex+0x265/0x280
[  606.014161][T26071]  should_fail+0xb/0x20
[  606.014175][T26071]  should_fail_usercopy+0x1a/0x20
[  606.014194][T26071]  _copy_from_user+0x1c/0xb0
[  606.014217][T26071]  io_submit_one+0x52/0x11d0
[  606.014340][T26071]  __se_sys_io_submit+0xfb/0x280
[  606.014368][T26071]  __x64_sys_io_submit+0x43/0x50
[  606.014393][T26071]  x64_sys_call+0x2d6c/0x3000
[  606.014490][T26071]  do_syscall_64+0xd2/0x200
[  606.014510][T26071]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  606.014601][T26071]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  606.014630][T26071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  606.014657][T26071] RIP: 0033:0x7ff4d2ebf6c9
[  606.014673][T26071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  606.014690][T26071] RSP: 002b:00007ff4d1927038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  606.014786][T26071] RAX: ffffffffffffffda RBX: 00007ff4d3115fa0 RCX: 00007ff4d2ebf6c9
[  606.014798][T26071] RDX: 0000200000000180 RSI: 0000000000000001 RDI: 00007ff4d3c50000
[  606.014810][T26071] RBP: 00007ff4d1927090 R08: 0000000000000000 R09: 0000000000000000
[  606.014821][T26071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  606.014831][T26071] R13: 00007ff4d3116038 R14: 00007ff4d3115fa0 R15: 00007ffe2c167598
[  606.014852][T26071]  </TASK>
[  606.015773][T26051] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.500830][T26089] lo speed is unknown, defaulting to 1000
[  606.533052][T26089] lo speed is unknown, defaulting to 1000
[  606.686725][T26088] loop3: detected capacity change from 0 to 512
[  606.703397][T26088] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  606.716112][T26090] loop0: detected capacity change from 0 to 8192
[  606.724938][T26088] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.7427: invalid block
[  606.740163][T26088] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.7427: invalid indirect mapped block 4294967295 (level 1)
[  606.767262][T26088] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.7427: invalid indirect mapped block 4294967295 (level 1)
[  606.782894][T26088] EXT4-fs (loop3): 2 truncates cleaned up
[  606.789889][T26088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  606.846436][T24868] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[  606.854812][T24868] FAT-fs (loop0): Filesystem has been set read-only
[  606.856142][T26096] FAULT_INJECTION: forcing a failure.
[  606.856142][T26096] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  606.874650][T26096] CPU: 1 UID: 0 PID: 26096 Comm: syz.2.7430 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  606.874734][T26096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  606.874748][T26096] Call Trace:
[  606.874756][T26096]  <TASK>
[  606.874765][T26096]  __dump_stack+0x1d/0x30
[  606.874806][T26096]  dump_stack_lvl+0xe8/0x140
[  606.874825][T26096]  dump_stack+0x15/0x1b
[  606.874844][T26096]  should_fail_ex+0x265/0x280
[  606.874945][T26096]  should_fail+0xb/0x20
[  606.874963][T26096]  should_fail_usercopy+0x1a/0x20
[  606.874987][T26096]  _copy_to_user+0x20/0xa0
[  606.875014][T26096]  simple_read_from_buffer+0xb5/0x130
[  606.875071][T26096]  proc_fail_nth_read+0x10e/0x150
[  606.875164][T26096]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  606.875196][T26096]  vfs_read+0x1a8/0x770
[  606.875220][T26096]  ? __rcu_read_unlock+0x4f/0x70
[  606.875305][T26096]  ? __fget_files+0x184/0x1c0
[  606.875335][T26096]  ksys_read+0xda/0x1a0
[  606.875361][T26096]  __x64_sys_read+0x40/0x50
[  606.875408][T26096]  x64_sys_call+0x27c0/0x3000
[  606.875436][T26096]  do_syscall_64+0xd2/0x200
[  606.875458][T26096]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  606.875487][T26096]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  606.875540][T26096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  606.875564][T26096] RIP: 0033:0x7fe2c82ce0dc
[  606.875580][T26096] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  606.875631][T26096] RSP: 002b:00007fe2c6d16030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  606.875652][T26096] RAX: ffffffffffffffda RBX: 00007fe2c8526090 RCX: 00007fe2c82ce0dc
[  606.875744][T26096] RDX: 000000000000000f RSI: 00007fe2c6d160a0 RDI: 0000000000000004
[  606.875757][T26096] RBP: 00007fe2c6d16090 R08: 0000000000000000 R09: 0000000000000000
[  606.875770][T26096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  606.875784][T26096] R13: 00007fe2c8526128 R14: 00007fe2c8526090 R15: 00007ffed2635958
[  606.875803][T26096]  </TASK>
[  606.896926][T26084] sg_write: data in/out 475/14 bytes for SCSI command 0x0-- guessing data in;
[  606.896926][T26084]    program syz.3.7427 not setting count and/or reply_len properly
[  606.930870][T26098] bond0: entered promiscuous mode
[  607.100606][T26098] bond0: entered allmulticast mode
[  607.107010][T21041] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  607.121749][T26098] 8021q: adding VLAN 0 to HW filter on device bond0
[  607.160942][T26098] bond0 (unregistering): Released all slaves
[  607.231075][T26116] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  607.386577][T26132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7440'.
[  607.420104][T26132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7440'.
[  607.549860][   T29] kauditd_printk_skb: 733 callbacks suppressed
[  607.549907][   T29] audit: type=1326 audit(607.584:23667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26111 comm="syz.2.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2c8301f85 code=0x7ffc0000
[  607.584234][   T29] audit: type=1326 audit(607.624:23668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26111 comm="syz.2.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe2c82c6567 code=0x7ffc0000
[  607.607272][   T29] audit: type=1326 audit(607.624:23669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26111 comm="syz.2.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2c826b789 code=0x7ffc0000
[  607.630282][   T29] audit: type=1326 audit(607.624:23670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26111 comm="syz.2.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe2c82cf6c9 code=0x7ffc0000
[  607.653681][   T29] audit: type=1326 audit(607.624:23671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26111 comm="syz.2.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2c8301f85 code=0x7ffc0000
[  607.677009][   T29] audit: type=1326 audit(607.624:23672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26111 comm="syz.2.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2c8301f85 code=0x7ffc0000
[  607.700529][   T29] audit: type=1326 audit(607.624:23673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26111 comm="syz.2.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2c8301f85 code=0x7ffc0000
[  607.723486][   T29] audit: type=1326 audit(607.624:23674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26111 comm="syz.2.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2c8301f85 code=0x7ffc0000
[  607.749764][   T29] audit: type=1326 audit(607.624:23675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26111 comm="syz.2.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2c8301f85 code=0x7ffc0000
[  607.772789][   T29] audit: type=1326 audit(607.624:23676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26111 comm="syz.2.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe2c82c6567 code=0x7ffc0000
[  608.170720][T26149] usb usb7: usbfs: process 26149 (syz.3.7450) did not claim interface 0 before use
[  608.302248][T26155] FAULT_INJECTION: forcing a failure.
[  608.302248][T26155] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  608.315469][T26155] CPU: 0 UID: 0 PID: 26155 Comm: syz.2.7453 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  608.315603][T26155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  608.315619][T26155] Call Trace:
[  608.315627][T26155]  <TASK>
[  608.315634][T26155]  __dump_stack+0x1d/0x30
[  608.315655][T26155]  dump_stack_lvl+0xe8/0x140
[  608.315673][T26155]  dump_stack+0x15/0x1b
[  608.315702][T26155]  should_fail_ex+0x265/0x280
[  608.315721][T26155]  should_fail+0xb/0x20
[  608.315737][T26155]  should_fail_usercopy+0x1a/0x20
[  608.315762][T26155]  _copy_from_user+0x1c/0xb0
[  608.315793][T26155]  proc_submiturb+0x43/0xa0
[  608.315822][T26155]  usbdev_ioctl+0xcb6/0x1700
[  608.315922][T26155]  ? __pfx_usbdev_ioctl+0x10/0x10
[  608.315949][T26155]  __se_sys_ioctl+0xce/0x140
[  608.316022][T26155]  __x64_sys_ioctl+0x43/0x50
[  608.316044][T26155]  x64_sys_call+0x1816/0x3000
[  608.316069][T26155]  do_syscall_64+0xd2/0x200
[  608.316087][T26155]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  608.316160][T26155]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  608.316226][T26155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.316289][T26155] RIP: 0033:0x7fe2c82cf6c9
[  608.316303][T26155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  608.316318][T26155] RSP: 002b:00007fe2c6d37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  608.316336][T26155] RAX: ffffffffffffffda RBX: 00007fe2c8525fa0 RCX: 00007fe2c82cf6c9
[  608.316350][T26155] RDX: 00002000000001c0 RSI: 000000008038550a RDI: 0000000000000003
[  608.316407][T26155] RBP: 00007fe2c6d37090 R08: 0000000000000000 R09: 0000000000000000
[  608.316419][T26155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  608.316432][T26155] R13: 00007fe2c8526038 R14: 00007fe2c8525fa0 R15: 00007ffed2635958
[  608.316452][T26155]  </TASK>
[  608.317124][T26153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7452'.
[  608.526397][T26164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7452'.
[  608.543065][T26160] usb usb7: usbfs: process 26160 (syz.2.7454) did not claim interface 0 before use
[  608.576272][T26165] loop0: detected capacity change from 0 to 128
[  608.585501][T26165] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  608.611552][T26165] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  608.928428][T26181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7462'.
[  609.068385][T26193] FAULT_INJECTION: forcing a failure.
[  609.068385][T26193] name failslab, interval 1, probability 0, space 0, times 0
[  609.081115][T26193] CPU: 0 UID: 0 PID: 26193 Comm: syz.3.7467 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  609.081191][T26193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  609.081200][T26193] Call Trace:
[  609.081205][T26193]  <TASK>
[  609.081210][T26193]  __dump_stack+0x1d/0x30
[  609.081225][T26193]  dump_stack_lvl+0xe8/0x140
[  609.081236][T26193]  dump_stack+0x15/0x1b
[  609.081246][T26193]  should_fail_ex+0x265/0x280
[  609.081267][T26193]  ? audit_log_d_path+0x8d/0x150
[  609.081313][T26193]  should_failslab+0x8c/0xb0
[  609.081361][T26193]  __kmalloc_cache_noprof+0x4c/0x4a0
[  609.081380][T26193]  audit_log_d_path+0x8d/0x150
[  609.081392][T26193]  audit_log_d_path_exe+0x42/0x70
[  609.081405][T26193]  audit_log_task+0x1e9/0x250
[  609.081444][T26193]  ? kstrtouint+0x76/0xc0
[  609.081602][T26193]  audit_seccomp+0x61/0x100
[  609.081618][T26193]  ? __seccomp_filter+0x82d/0x1250
[  609.081633][T26193]  __seccomp_filter+0x83e/0x1250
[  609.081649][T26193]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  609.081751][T26193]  ? vfs_write+0x7e8/0x960
[  609.081768][T26193]  __secure_computing+0x82/0x150
[  609.081783][T26193]  syscall_trace_enter+0xcf/0x1e0
[  609.081799][T26193]  do_syscall_64+0xac/0x200
[  609.081846][T26193]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  609.081919][T26193]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  609.081936][T26193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.082039][T26193] RIP: 0033:0x7fcc9f3df6c9
[  609.082049][T26193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  609.082060][T26193] RSP: 002b:00007fcc9de3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000076
[  609.082073][T26193] RAX: ffffffffffffffda RBX: 00007fcc9f635fa0 RCX: 00007fcc9f3df6c9
[  609.082080][T26193] RDX: 0000200000003340 RSI: 0000200000003300 RDI: 00002000000032c0
[  609.082087][T26193] RBP: 00007fcc9de3f090 R08: 0000000000000000 R09: 0000000000000000
[  609.082095][T26193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  609.082125][T26193] R13: 00007fcc9f636038 R14: 00007fcc9f635fa0 R15: 00007fffa3e4ebb8
[  609.082142][T26193]  </TASK>
[  609.502669][T26205] loop3: detected capacity change from 0 to 512
[  609.529971][T26205] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.7468: bad orphan inode 13
[  609.540566][T26205] ext4_test_bit(bit=12, block=4) = 1
[  609.546383][T26205] is_bad_inode(inode)=0
[  609.550705][T26205] NEXT_ORPHAN(inode)=0
[  609.554764][T26205] max_ino=32
[  609.558044][T26205] i_nlink=1
[  609.561662][T26205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  609.659097][T26204] loop0: detected capacity change from 0 to 4096
[  609.672114][T26204] EXT4-fs: Ignoring removed nomblk_io_submit option
[  609.718197][T26204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  609.778322][T24868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  610.065818][T25087] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  610.097573][T25087] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  610.124350][T25087] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  610.170359][T25087] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  610.173054][T26227] __nla_validate_parse: 1 callbacks suppressed
[  610.173068][T26227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7478'.
[  610.200596][T26233] netlink: 8 bytes leftover after parsing attributes in process `ÏDh‡³‹Óí'.
[  610.225151][T26231] netlink: 'syz.2.7480': attribute type 13 has an invalid length.
[  610.264987][T26235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7478'.
[  610.265376][T26231] gretap0: refused to change device tx_queue_len
[  610.300709][T26231] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  610.372296][T26242] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.7484'.
[  610.423156][T21041] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  610.689816][T26268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7497'.
[  610.711111][T26271] netlink: 7 bytes leftover after parsing attributes in process `syz.3.7496'.
[  610.728386][T26271] netlink: 7 bytes leftover after parsing attributes in process `syz.3.7496'.
[  610.852455][T26287] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7505'.
[  610.891567][T26292] FAULT_INJECTION: forcing a failure.
[  610.891567][T26292] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  610.904843][T26292] CPU: 0 UID: 0 PID: 26292 Comm: syz.0.7506 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  610.904882][T26292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  610.904919][T26292] Call Trace:
[  610.904926][T26292]  <TASK>
[  610.904934][T26292]  __dump_stack+0x1d/0x30
[  610.904954][T26292]  dump_stack_lvl+0xe8/0x140
[  610.904997][T26292]  dump_stack+0x15/0x1b
[  610.905037][T26292]  should_fail_ex+0x265/0x280
[  610.905057][T26292]  should_fail+0xb/0x20
[  610.905124][T26292]  should_fail_usercopy+0x1a/0x20
[  610.905142][T26292]  _copy_from_user+0x1c/0xb0
[  610.905163][T26292]  ___sys_sendmsg+0xc1/0x1d0
[  610.905193][T26292]  __x64_sys_sendmsg+0xd4/0x160
[  610.905232][T26292]  x64_sys_call+0x191e/0x3000
[  610.905300][T26292]  do_syscall_64+0xd2/0x200
[  610.905318][T26292]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  610.905393][T26292]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  610.905439][T26292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.905517][T26292] RIP: 0033:0x7ff4d2ebf6c9
[  610.905530][T26292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  610.905547][T26292] RSP: 002b:00007ff4d1927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  610.905567][T26292] RAX: ffffffffffffffda RBX: 00007ff4d3115fa0 RCX: 00007ff4d2ebf6c9
[  610.905578][T26292] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000005
[  610.905662][T26292] RBP: 00007ff4d1927090 R08: 0000000000000000 R09: 0000000000000000
[  610.905730][T26292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  610.905741][T26292] R13: 00007ff4d3116038 R14: 00007ff4d3115fa0 R15: 00007ffe2c167598
[  610.905759][T26292]  </TASK>
[  611.086643][T26298] syzkaller0: entered allmulticast mode
[  611.093994][T26298] syzkaller0 (unregistering): left allmulticast mode
[  611.148512][T26312] ------------[ cut here ]------------
[  611.154118][T26312] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x17, 0x10] s64=[0x17, 0x10] u32=[0x17, 0x10] s32=[0x17, 0x10] var_off=(0x10, 0x0)
[  611.171060][T26312] WARNING: CPU: 1 PID: 26312 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680
[  611.181654][T26312] Modules linked in:
[  611.185729][T26312] CPU: 1 UID: 0 PID: 26312 Comm: syz.3.7507 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  611.195614][T26312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  611.206009][T26312] RIP: 0010:reg_bounds_sanity_check+0x673/0x680
[  611.212421][T26312] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 d2 f6 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90
[  611.232551][T26312] RSP: 0018:ffffc90003abb408 EFLAGS: 00010282
[  611.238904][T26312] RAX: b08a2c50449cd900 RBX: ffff88811a8cd8b0 RCX: 0000000000080000
[  611.247014][T26312] RDX: ffffc90008702000 RSI: 000000000000a327 RDI: 000000000000a328
[  611.255074][T26312] RBP: 0000000000000010 R08: 0001c90003abb257 R09: 0000000000000000
[  611.263060][T26312] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a8cd870
[  611.270223][T26324] xt_TPROXY: Can be used only with -p tcp or -p udp
[  611.271080][T26312] R13: ffff88810ef48000 R14: ffff88810ef48000 R15: ffff88811a8cd8a8
[  611.285707][T26312] FS:  00007fcc9de1e6c0(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000
[  611.294670][T26312] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  611.301304][T26312] CR2: 0000000000000000 CR3: 000000010d9d2000 CR4: 00000000003506f0
[  611.309284][T26312] DR0: 0900000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  611.317369][T26312] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  611.325419][T26312] Call Trace:
[  611.328684][T26312]  <TASK>
[  611.331640][T26312]  reg_set_min_max+0x1eb/0x260
[  611.336393][T26312]  check_cond_jmp_op+0x1370/0x19e0
[  611.341527][T26312]  do_check+0x3363/0x8460
[  611.345903][T26312]  do_check_common+0xc5e/0x12b0
[  611.350773][T26312]  bpf_check+0xaaae/0xd9d0
[  611.355269][T26312]  ? __alloc_frozen_pages_noprof+0x188/0x360
[  611.361300][T26312]  ? __vmap_pages_range_noflush+0xbc4/0xcf0
[  611.367470][T26312]  ? css_rstat_updated+0xb7/0x240
[  611.372761][T26312]  ? try_charge_memcg+0x215/0xa10
[  611.377800][T26312]  ? pcpu_block_update+0x24e/0x3b0
[  611.382953][T26312]  ? pcpu_block_refresh_hint+0x157/0x170
[  611.388722][T26312]  ? pcpu_block_update_hint_alloc+0x63d/0x660
[  611.394919][T26312]  ? css_rstat_updated+0xb7/0x240
[  611.399977][T26312]  ? __rcu_read_unlock+0x4f/0x70
[  611.404946][T26312]  ? pcpu_memcg_post_alloc_hook+0xf1/0x150
[  611.410798][T26312]  ? bpf_prog_alloc+0x5b/0x150
[  611.415741][T26312]  ? pcpu_alloc_noprof+0xd29/0x1250
[  611.420959][T26312]  ? should_fail_ex+0x30/0x280
[  611.425744][T26312]  ? should_failslab+0x8c/0xb0
[  611.430527][T26312]  ? __kmalloc_noprof+0x2a2/0x570
[  611.435585][T26312]  ? security_bpf_prog_load+0x60/0x140
[  611.441125][T26312]  ? selinux_bpf_prog_load+0xad/0xd0
[  611.446460][T26312]  ? security_bpf_prog_load+0x9e/0x140
[  611.451963][T26312]  bpf_prog_load+0xf6e/0x1100
[  611.456630][T26312]  ? security_bpf+0x2b/0x90
[  611.461149][T26312]  __sys_bpf+0x469/0x7c0
[  611.465381][T26312]  __x64_sys_bpf+0x41/0x50
[  611.469814][T26312]  x64_sys_call+0x2aee/0x3000
[  611.474478][T26312]  do_syscall_64+0xd2/0x200
[  611.479070][T26312]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  611.485178][T26312]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  611.491171][T26312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  611.497072][T26312] RIP: 0033:0x7fcc9f3df6c9
[  611.501548][T26312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  611.521260][T26312] RSP: 002b:00007fcc9de1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  611.529781][T26312] RAX: ffffffffffffffda RBX: 00007fcc9f636090 RCX: 00007fcc9f3df6c9
[  611.537879][T26312] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  611.545940][T26312] RBP: 00007fcc9f461f91 R08: 0000000000000000 R09: 0000000000000000
[  611.554072][T26312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  611.562071][T26312] R13: 00007fcc9f636128 R14: 00007fcc9f636090 R15: 00007fffa3e4ebb8
[  611.570304][T26312]  </TASK>
[  611.573316][T26312] ---[ end trace 0000000000000000 ]---
[  611.799420][T26352] FAULT_INJECTION: forcing a failure.
[  611.799420][T26352] name failslab, interval 1, probability 0, space 0, times 0
[  611.812190][T26352] CPU: 0 UID: 0 PID: 26352 Comm: syz.5.7526 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  611.812353][T26352] Tainted: [W]=WARN
[  611.812360][T26352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  611.812374][T26352] Call Trace:
[  611.812381][T26352]  <TASK>
[  611.812387][T26352]  __dump_stack+0x1d/0x30
[  611.812408][T26352]  dump_stack_lvl+0xe8/0x140
[  611.812426][T26352]  dump_stack+0x15/0x1b
[  611.812512][T26352]  should_fail_ex+0x265/0x280
[  611.812529][T26352]  should_failslab+0x8c/0xb0
[  611.812556][T26352]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  611.812583][T26352]  ? __alloc_skb+0x101/0x320
[  611.812648][T26352]  __alloc_skb+0x101/0x320
[  611.812725][T26352]  __ip6_append_data+0x190f/0x2390
[  611.812747][T26352]  ? __pfx_raw6_getfrag+0x10/0x10
[  611.812783][T26352]  ? __rcu_read_unlock+0x4f/0x70
[  611.812869][T26352]  ? __pfx_ip6_mtu+0x10/0x10
[  611.812891][T26352]  ? ip6_mtu+0xf5/0x120
[  611.812919][T26352]  ip6_append_data+0x138/0x240
[  611.812952][T26352]  ? __pfx_raw6_getfrag+0x10/0x10
[  611.812973][T26352]  rawv6_sendmsg+0xdc1/0xf70
[  611.813009][T26352]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  611.813039][T26352]  inet_sendmsg+0xc5/0xd0
[  611.813135][T26352]  __sock_sendmsg+0x102/0x180
[  611.813156][T26352]  sock_write_iter+0x1a7/0x1f0
[  611.813179][T26352]  do_iter_readv_writev+0x4a1/0x540
[  611.813268][T26352]  vfs_writev+0x2df/0x8b0
[  611.813305][T26352]  do_writev+0xe7/0x210
[  611.813330][T26352]  __x64_sys_writev+0x45/0x50
[  611.813354][T26352]  x64_sys_call+0x1e9a/0x3000
[  611.813449][T26352]  do_syscall_64+0xd2/0x200
[  611.813466][T26352]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  611.813543][T26352]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  611.813571][T26352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  611.813593][T26352] RIP: 0033:0x7f7af5f1f6c9
[  611.813609][T26352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  611.813643][T26352] RSP: 002b:00007f7af4987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  611.813663][T26352] RAX: ffffffffffffffda RBX: 00007f7af6175fa0 RCX: 00007f7af5f1f6c9
[  611.813677][T26352] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003
[  611.813689][T26352] RBP: 00007f7af4987090 R08: 0000000000000000 R09: 0000000000000000
[  611.813700][T26352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  611.813792][T26352] R13: 00007f7af6176038 R14: 00007f7af6175fa0 R15: 00007fff46c66588
[  611.813871][T26352]  </TASK>
[  611.968177][T26355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7520'.
[  611.986554][T26356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7527'.
[  612.443561][T26382] FAULT_INJECTION: forcing a failure.
[  612.443561][T26382] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  612.457295][T26382] CPU: 0 UID: 0 PID: 26382 Comm: syz.1.7535 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  612.457377][T26382] Tainted: [W]=WARN
[  612.457383][T26382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  612.457394][T26382] Call Trace:
[  612.457400][T26382]  <TASK>
[  612.457407][T26382]  __dump_stack+0x1d/0x30
[  612.457428][T26382]  dump_stack_lvl+0xe8/0x140
[  612.457445][T26382]  dump_stack+0x15/0x1b
[  612.457524][T26382]  should_fail_ex+0x265/0x280
[  612.457541][T26382]  should_fail+0xb/0x20
[  612.457556][T26382]  should_fail_usercopy+0x1a/0x20
[  612.457578][T26382]  _copy_from_iter+0xd2/0xe80
[  612.457701][T26382]  ? __build_skb_around+0x1ab/0x200
[  612.457727][T26382]  ? __alloc_skb+0x223/0x320
[  612.457753][T26382]  netlink_sendmsg+0x471/0x6b0
[  612.457815][T26382]  ? __pfx_netlink_sendmsg+0x10/0x10
[  612.457837][T26382]  __sock_sendmsg+0x145/0x180
[  612.457863][T26382]  ____sys_sendmsg+0x31e/0x4e0
[  612.457893][T26382]  ___sys_sendmsg+0x17b/0x1d0
[  612.457977][T26382]  __x64_sys_sendmsg+0xd4/0x160
[  612.458008][T26382]  x64_sys_call+0x191e/0x3000
[  612.458032][T26382]  do_syscall_64+0xd2/0x200
[  612.458055][T26382]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  612.458102][T26382]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  612.458137][T26382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.458160][T26382] RIP: 0033:0x7f6284fff6c9
[  612.458241][T26382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  612.458271][T26382] RSP: 002b:00007f6283a5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  612.458287][T26382] RAX: ffffffffffffffda RBX: 00007f6285255fa0 RCX: 00007f6284fff6c9
[  612.458298][T26382] RDX: 0000000020048812 RSI: 00002000000004c0 RDI: 0000000000000006
[  612.458311][T26382] RBP: 00007f6283a5f090 R08: 0000000000000000 R09: 0000000000000000
[  612.458352][T26382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  612.458373][T26382] R13: 00007f6285256038 R14: 00007f6285255fa0 R15: 00007fff8faa8368
[  612.458391][T26382]  </TASK>
[  612.954095][T26392] FAULT_INJECTION: forcing a failure.
[  612.954095][T26392] name failslab, interval 1, probability 0, space 0, times 0
[  612.966811][T26392] CPU: 0 UID: 0 PID: 26392 Comm: syz.2.7538 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  612.966847][T26392] Tainted: [W]=WARN
[  612.966854][T26392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  612.966868][T26392] Call Trace:
[  612.966874][T26392]  <TASK>
[  612.966882][T26392]  __dump_stack+0x1d/0x30
[  612.966911][T26392]  dump_stack_lvl+0xe8/0x140
[  612.966930][T26392]  dump_stack+0x15/0x1b
[  612.966948][T26392]  should_fail_ex+0x265/0x280
[  612.966969][T26392]  should_failslab+0x8c/0xb0
[  612.967075][T26392]  __kmalloc_noprof+0xa5/0x570
[  612.967108][T26392]  ? parse_usbdevfs_streams+0x11c/0x610
[  612.967131][T26392]  parse_usbdevfs_streams+0x11c/0x610
[  612.967154][T26392]  ? ioctl_has_perm+0x257/0x2a0
[  612.967188][T26392]  proc_alloc_streams+0x6b/0x110
[  612.967276][T26392]  usbdev_ioctl+0xc68/0x1700
[  612.967334][T26392]  ? __pfx_usbdev_ioctl+0x10/0x10
[  612.967359][T26392]  __se_sys_ioctl+0xce/0x140
[  612.967418][T26392]  __x64_sys_ioctl+0x43/0x50
[  612.967435][T26392]  x64_sys_call+0x1816/0x3000
[  612.967459][T26392]  do_syscall_64+0xd2/0x200
[  612.967539][T26392]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  612.967569][T26392]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  612.967601][T26392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.967623][T26392] RIP: 0033:0x7fe2c82cf6c9
[  612.967732][T26392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  612.967750][T26392] RSP: 002b:00007fe2c6d37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  612.967771][T26392] RAX: ffffffffffffffda RBX: 00007fe2c8525fa0 RCX: 00007fe2c82cf6c9
[  612.967785][T26392] RDX: 0000200000000180 RSI: 000000008008551c RDI: 0000000000000006
[  612.967799][T26392] RBP: 00007fe2c6d37090 R08: 0000000000000000 R09: 0000000000000000
[  612.967854][T26392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  612.967867][T26392] R13: 00007fe2c8526038 R14: 00007fe2c8525fa0 R15: 00007ffed2635958
[  612.967885][T26392]  </TASK>
[  613.439515][T26364] Set syz1 is full, maxelem 65536 reached
[  613.631309][   T29] kauditd_printk_skb: 624 callbacks suppressed
[  613.631323][   T29] audit: type=1400 audit(613.674:24297): avc:  denied  { create } for  pid=26407 comm="syz.1.7546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  613.717133][   T29] audit: type=1400 audit(613.674:24298): avc:  denied  { map } for  pid=26407 comm="syz.1.7546" path="socket:[103431]" dev="sockfs" ino=103431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  613.740858][   T29] audit: type=1400 audit(613.674:24299): avc:  denied  { read accept } for  pid=26407 comm="syz.1.7546" path="socket:[103431]" dev="sockfs" ino=103431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  613.765231][   T29] audit: type=1400 audit(613.674:24300): avc:  denied  { create } for  pid=26407 comm="syz.1.7546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  613.784306][   T29] audit: type=1400 audit(613.674:24301): avc:  denied  { ioctl } for  pid=26407 comm="syz.1.7546" path="socket:[103431]" dev="sockfs" ino=103431 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  613.809534][   T29] audit: type=1326 audit(613.734:24302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26369 comm="syz.5.7531" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7af5f1f6c9 code=0x0
[  613.841638][T26416] netlink: 'syz.1.7547': attribute type 1 has an invalid length.
[  613.852480][T26416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=26416 comm=syz.1.7547
[  613.866438][T26418] loop0: detected capacity change from 0 to 1024
[  613.882560][T26416] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=26416 comm=syz.1.7547
[  613.900568][T26418] EXT4-fs: inline encryption not supported
[  613.906437][T26418] EXT4-fs: Ignoring removed i_version option
[  613.963347][T26418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  614.039810][   T29] audit: type=1400 audit(614.064:24303): avc:  denied  { validate_trans } for  pid=26421 comm="syz.1.7550" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  614.166341][   T29] audit: type=1400 audit(614.144:24304): avc:  denied  { watch watch_reads } for  pid=26417 comm="syz.0.7548" path="/85/file1" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  614.189600][   T29] audit: type=1400 audit(614.154:24305): avc:  denied  { create } for  pid=26421 comm="syz.1.7550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  614.209634][   T29] audit: type=1400 audit(614.154:24306): avc:  denied  { write } for  pid=26421 comm="syz.1.7550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  614.288126][T26443] FAULT_INJECTION: forcing a failure.
[  614.288126][T26443] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  614.301362][T26443] CPU: 1 UID: 0 PID: 26443 Comm: syz.1.7554 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  614.301448][T26443] Tainted: [W]=WARN
[  614.301460][T26443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  614.301482][T26443] Call Trace:
[  614.301566][T26443]  <TASK>
[  614.301574][T26443]  __dump_stack+0x1d/0x30
[  614.301599][T26443]  dump_stack_lvl+0xe8/0x140
[  614.301621][T26443]  dump_stack+0x15/0x1b
[  614.301640][T26443]  should_fail_ex+0x265/0x280
[  614.301738][T26443]  should_fail+0xb/0x20
[  614.301756][T26443]  should_fail_usercopy+0x1a/0x20
[  614.301827][T26443]  _copy_from_user+0x1c/0xb0
[  614.301875][T26443]  ___sys_sendmsg+0xc1/0x1d0
[  614.301909][T26443]  __x64_sys_sendmsg+0xd4/0x160
[  614.301933][T26443]  x64_sys_call+0x191e/0x3000
[  614.301985][T26443]  do_syscall_64+0xd2/0x200
[  614.302073][T26443]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  614.302102][T26443]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  614.302141][T26443]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.302164][T26443] RIP: 0033:0x7f6284fff6c9
[  614.302181][T26443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  614.302198][T26443] RSP: 002b:00007f6283a5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  614.302291][T26443] RAX: ffffffffffffffda RBX: 00007f6285255fa0 RCX: 00007f6284fff6c9
[  614.302357][T26443] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003
[  614.302371][T26443] RBP: 00007f6283a5f090 R08: 0000000000000000 R09: 0000000000000000
[  614.302410][T26443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  614.302439][T26443] R13: 00007f6285256038 R14: 00007f6285255fa0 R15: 00007fff8faa8368
[  614.302459][T26443]  </TASK>
[  614.650889][T26459] loop3: detected capacity change from 0 to 512
[  614.670364][T26459] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  614.701934][T26459] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee01c, mo2=0002]
[  614.715889][T26459] System zones: 1-12
[  614.731602][T26459] EXT4-fs (loop3): orphan cleanup on readonly fs
[  614.740647][T26459] EXT4-fs error (device loop3): __ext4_iget:5443: inode #11: block 1296: comm syz.3.7561: invalid block
[  614.770815][T26459] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7561: couldn't read orphan inode 11 (err -117)
[  614.771115][T24868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  614.794215][T26459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  614.927045][T21041] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  615.440382][T26490] sg_write: data in/out 475/14 bytes for SCSI command 0x0-- guessing data in;
[  615.440382][T26490]    program syz.2.7569 not setting count and/or reply_len properly
[  615.541678][T26497] __nla_validate_parse: 19 callbacks suppressed
[  615.541693][T26497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7574'.
[  615.657526][T26505] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7578'.
[  615.700408][T26506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7576'.
[  615.755583][T26506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7576'.
[  616.265205][T26529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7587'.
[  616.350769][T26537] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7591'.
[  616.455690][T26539] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7592'.
[  616.455753][T26539] 0ªX¹¦À: renamed from 
61ªX¹¦À
[  616.457895][T26539] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  616.516546][T26545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7590'.
[  616.539209][T26545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7590'.
[  616.670597][T26552] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7597'.
[  616.699948][T26552] 1ªX¹¦À: renamed from 
60ªX¹¦À
[  616.715530][T26552] A link change request failed with some changes committed already. Interface 
61ªX¹¦À may have been left with an inconsistent configuration, please check.
[  616.796212][T26547] loop3: detected capacity change from 0 to 4096
[  616.818422][T26547] EXT4-fs: Ignoring removed nomblk_io_submit option
[  616.833025][T26550] sg_write: data in/out 475/14 bytes for SCSI command 0x0-- guessing data in;
[  616.833025][T26550]    program syz.2.7589 not setting count and/or reply_len properly
[  616.899648][T26547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  616.957169][T21041] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.140426][T26569] loop3: detected capacity change from 0 to 512
[  617.154238][T26569] EXT4-fs: Ignoring removed orlov option
[  617.188914][T26569] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  617.227748][T26569] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.7604: corrupted in-inode xattr: e_value size too large
[  617.264857][T26577] netlink: 'syz.5.7605': attribute type 22 has an invalid length.
[  617.267355][T26569] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7604: couldn't read orphan inode 15 (err -117)
[  617.286523][T26569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  617.304511][T26569] 0ªX¹¦À: renamed from 
61ªX¹¦À
[  617.317020][T26569] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  617.340837][T21041] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.447735][T26589] loop3: detected capacity change from 0 to 512
[  617.469164][T26589] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.7612: corrupted in-inode xattr: invalid ea_ino
[  617.483528][T26589] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7612: couldn't read orphan inode 15 (err -117)
[  617.496171][T26589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  617.531816][T21041] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.625486][T26602] FAULT_INJECTION: forcing a failure.
[  617.625486][T26602] name failslab, interval 1, probability 0, space 0, times 0
[  617.638279][T26602] CPU: 0 UID: 0 PID: 26602 Comm: syz.3.7618 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  617.638314][T26602] Tainted: [W]=WARN
[  617.638320][T26602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  617.638331][T26602] Call Trace:
[  617.638337][T26602]  <TASK>
[  617.638390][T26602]  __dump_stack+0x1d/0x30
[  617.638414][T26602]  dump_stack_lvl+0xe8/0x140
[  617.638437][T26602]  dump_stack+0x15/0x1b
[  617.638472][T26602]  should_fail_ex+0x265/0x280
[  617.638489][T26602]  should_failslab+0x8c/0xb0
[  617.638518][T26602]  __kvmalloc_node_noprof+0x12e/0x670
[  617.638552][T26602]  ? page_pool_create_percpu+0x22d/0x630
[  617.638590][T26602]  page_pool_create_percpu+0x22d/0x630
[  617.638617][T26602]  page_pool_create+0x1a/0x30
[  617.638716][T26602]  bpf_test_run_xdp_live+0x133/0x11c0
[  617.638768][T26602]  ? cpus_read_unlock+0x6e/0xc0
[  617.638790][T26602]  ? __static_call_update+0x37c/0x3b0
[  617.638814][T26602]  ? 0xffffffffa0205240
[  617.638845][T26602]  ? synchronize_rcu+0x45/0x320
[  617.638862][T26602]  ? 0xffffffffa0205240
[  617.638873][T26602]  ? 0xffffffffa0205240
[  617.638918][T26602]  ? bpf_dispatcher_change_prog+0x6ec/0x7f0
[  617.638948][T26602]  ? 0xffffffffa0205240
[  617.639015][T26602]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  617.639038][T26602]  bpf_prog_test_run_xdp+0x525/0x970
[  617.639146][T26602]  ? _kstrtol+0x51/0x90
[  617.639173][T26602]  ? __rcu_read_unlock+0x4f/0x70
[  617.639258][T26602]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  617.639315][T26602]  bpf_prog_test_run+0x22a/0x390
[  617.639385][T26602]  __sys_bpf+0x4c0/0x7c0
[  617.639410][T26602]  __x64_sys_bpf+0x41/0x50
[  617.639441][T26602]  x64_sys_call+0x2aee/0x3000
[  617.639500][T26602]  do_syscall_64+0xd2/0x200
[  617.639521][T26602]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  617.639639][T26602]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  617.639671][T26602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.639693][T26602] RIP: 0033:0x7fcc9f3df6c9
[  617.639709][T26602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  617.639809][T26602] RSP: 002b:00007fcc9de3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  617.639841][T26602] RAX: ffffffffffffffda RBX: 00007fcc9f635fa0 RCX: 00007fcc9f3df6c9
[  617.639854][T26602] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  617.639867][T26602] RBP: 00007fcc9de3f090 R08: 0000000000000000 R09: 0000000000000000
[  617.639881][T26602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  617.639894][T26602] R13: 00007fcc9f636038 R14: 00007fcc9f635fa0 R15: 00007fffa3e4ebb8
[  617.639911][T26602]  </TASK>
[  617.900782][T26602] page_pool_create_percpu() gave up with errno -12
[  617.938606][T26607] 9pnet_fd: p9_fd_create_unix (26607): problem connecting socket: ./file0: -2
[  618.000602][T26607] bridge0: port 3(gretap0) entered disabled state
[  618.030593][T26607] bridge0: port 2(bridge_slave_1) entered disabled state
[  618.037820][T26607] bridge0: port 1(bridge_slave_0) entered disabled state
[  618.058267][T26607] $Hÿ: left promiscuous mode
[  618.063123][T26607] bond_slave_0: left promiscuous mode
[  618.068683][T26607] bond_slave_1: left promiscuous mode
[  618.081515][T26607] 0ªX¹¦À: left allmulticast mode
[  618.115686][T26607] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  618.128566][T26607] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  618.160570][T25087] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  618.213024][T26614] team0: Failed to send options change via netlink (err -105)
[  618.244119][T26614] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  618.269916][T26622] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  618.290101][T26614] team0: Port device team_slave_1 removed
[  618.341341][T25087] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  618.375042][T25087] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  618.391587][T26635] loop3: detected capacity change from 0 to 512
[  618.401355][T25087] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  618.412309][T26635] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.7628: error while reading EA inode 32 err=-116
[  618.442677][T26635] EXT4-fs (loop3): Remounting filesystem read-only
[  618.465234][T26635] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  618.468187][T26648] pim6reg: entered allmulticast mode
[  618.476030][T26635] EXT4-fs (loop3): 1 orphan inode deleted
[  618.486910][T26635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  618.523268][T21041] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  618.538436][T26648] pim6reg: left allmulticast mode
[  618.604460][T26660] lo speed is unknown, defaulting to 1000
[  618.637471][T26664] 9pnet: Could not find request transport: f
[  618.655964][T26660] lo speed is unknown, defaulting to 1000
[  618.661915][   T29] kauditd_printk_skb: 72 callbacks suppressed
[  618.661927][   T29] audit: type=1326 audit(618.694:24377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26663 comm="syz.0.7639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2ebf6c9 code=0x7ffc0000
[  618.670669][T26664] netlink: 'syz.0.7639': attribute type 1 has an invalid length.
[  618.691033][   T29] audit: type=1326 audit(618.694:24378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26663 comm="syz.0.7639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff4d2ebf6c9 code=0x7ffc0000
[  618.721876][   T29] audit: type=1326 audit(618.694:24379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26663 comm="syz.0.7639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2ebf6c9 code=0x7ffc0000
[  618.745458][   T29] audit: type=1326 audit(618.694:24380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26663 comm="syz.0.7639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ff4d2ebf6c9 code=0x7ffc0000
[  618.768506][   T29] audit: type=1326 audit(618.694:24381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26663 comm="syz.0.7639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2ebf6c9 code=0x7ffc0000
[  618.791526][   T29] audit: type=1326 audit(618.694:24382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26663 comm="syz.0.7639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2ebf6c9 code=0x7ffc0000
[  618.814625][   T29] audit: type=1326 audit(618.694:24383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26663 comm="syz.0.7639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7ff4d2ebf6c9 code=0x7ffc0000
[  618.837673][   T29] audit: type=1326 audit(618.694:24384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26663 comm="syz.0.7639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2ebf6c9 code=0x7ffc0000
[  618.860725][   T29] audit: type=1326 audit(618.694:24385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26663 comm="syz.0.7639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2ebf6c9 code=0x7ffc0000
[  618.883871][   T29] audit: type=1326 audit(618.694:24386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26663 comm="syz.0.7639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff4d2ebf6c9 code=0x7ffc0000
[  618.993987][T26684] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  619.016420][T26693] 0ªX¹¦À: renamed from caif0
[  619.023489][T26693] 0ªX¹¦À: entered allmulticast mode
[  619.028714][T26693] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  619.158459][T26701] FAULT_INJECTION: forcing a failure.
[  619.158459][T26701] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  619.171618][T26701] CPU: 1 UID: 0 PID: 26701 Comm: syz.2.7648 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  619.171703][T26701] Tainted: [W]=WARN
[  619.171710][T26701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  619.171785][T26701] Call Trace:
[  619.171792][T26701]  <TASK>
[  619.171800][T26701]  __dump_stack+0x1d/0x30
[  619.171820][T26701]  dump_stack_lvl+0xe8/0x140
[  619.171842][T26701]  dump_stack+0x15/0x1b
[  619.171859][T26701]  should_fail_ex+0x265/0x280
[  619.171877][T26701]  should_fail+0xb/0x20
[  619.171909][T26701]  should_fail_usercopy+0x1a/0x20
[  619.171931][T26701]  _copy_from_iter+0xd2/0xe80
[  619.171968][T26701]  ? __build_skb_around+0x1ab/0x200
[  619.172074][T26701]  ? __alloc_skb+0x223/0x320
[  619.172108][T26701]  netlink_sendmsg+0x471/0x6b0
[  619.172130][T26701]  ? __pfx_netlink_sendmsg+0x10/0x10
[  619.172150][T26701]  __sock_sendmsg+0x145/0x180
[  619.172201][T26701]  ____sys_sendmsg+0x31e/0x4e0
[  619.172304][T26701]  ___sys_sendmsg+0x17b/0x1d0
[  619.172335][T26701]  __x64_sys_sendmsg+0xd4/0x160
[  619.172358][T26701]  x64_sys_call+0x191e/0x3000
[  619.172386][T26701]  do_syscall_64+0xd2/0x200
[  619.172405][T26701]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  619.172447][T26701]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  619.172480][T26701]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.172552][T26701] RIP: 0033:0x7fe2c82cf6c9
[  619.172568][T26701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  619.172650][T26701] RSP: 002b:00007fe2c6d16038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  619.172672][T26701] RAX: ffffffffffffffda RBX: 00007fe2c8526090 RCX: 00007fe2c82cf6c9
[  619.172685][T26701] RDX: 0000000020000040 RSI: 0000200000000300 RDI: 0000000000000005
[  619.172699][T26701] RBP: 00007fe2c6d16090 R08: 0000000000000000 R09: 0000000000000000
[  619.172713][T26701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  619.172726][T26701] R13: 00007fe2c8526128 R14: 00007fe2c8526090 R15: 00007ffed2635958
[  619.172744][T26701]  </TASK>
[  619.581105][T26702] loop3: detected capacity change from 0 to 512
[  619.587995][T26702] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  619.615472][T26702] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.7646: invalid block
[  619.651340][T26702] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.7646: invalid indirect mapped block 4294967295 (level 1)
[  619.665874][T26702] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.7646: invalid indirect mapped block 4294967295 (level 1)
[  619.680226][T26702] EXT4-fs (loop3): 2 truncates cleaned up
[  619.686269][T26702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  619.709432][T26695] sg_write: data in/out 475/14 bytes for SCSI command 0x0-- guessing data in;
[  619.709432][T26695]    program syz.3.7646 not setting count and/or reply_len properly
[  619.729949][T26704] FAULT_INJECTION: forcing a failure.
[  619.729949][T26704] name failslab, interval 1, probability 0, space 0, times 0
[  619.742648][T26704] CPU: 0 UID: 0 PID: 26704 Comm: syz.0.7649 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  619.742683][T26704] Tainted: [W]=WARN
[  619.742689][T26704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  619.742766][T26704] Call Trace:
[  619.742772][T26704]  <TASK>
[  619.742784][T26704]  __dump_stack+0x1d/0x30
[  619.742804][T26704]  dump_stack_lvl+0xe8/0x140
[  619.742822][T26704]  dump_stack+0x15/0x1b
[  619.742836][T26704]  should_fail_ex+0x265/0x280
[  619.742854][T26704]  should_failslab+0x8c/0xb0
[  619.742979][T26704]  kmem_cache_alloc_noprof+0x50/0x480
[  619.743015][T26704]  ? getname_flags+0x80/0x3b0
[  619.743045][T26704]  getname_flags+0x80/0x3b0
[  619.743079][T26704]  do_readlinkat+0x64/0x320
[  619.743097][T26704]  __x64_sys_readlinkat+0x51/0x60
[  619.743114][T26704]  x64_sys_call+0x16b4/0x3000
[  619.743151][T26704]  do_syscall_64+0xd2/0x200
[  619.743175][T26704]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  619.743260][T26704]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  619.743404][T26704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.743425][T26704] RIP: 0033:0x7ff4d2ebf6c9
[  619.743441][T26704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  619.743459][T26704] RSP: 002b:00007ff4d1927038 EFLAGS: 00000246 ORIG_RAX: 000000000000010b
[  619.743477][T26704] RAX: ffffffffffffffda RBX: 00007ff4d3115fa0 RCX: 00007ff4d2ebf6c9
[  619.743487][T26704] RDX: 0000200000000780 RSI: 00002000000001c0 RDI: 0000000000000008
[  619.743527][T26704] RBP: 00007ff4d1927090 R08: 0000000000000000 R09: 0000000000000000
[  619.743539][T26704] R10: 00000000000000c6 R11: 0000000000000246 R12: 0000000000000001
[  619.743551][T26704] R13: 00007ff4d3116038 R14: 00007ff4d3115fa0 R15: 00007ffe2c167598
[  619.743569][T26704]  </TASK>
[  619.976291][T21041] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.061131][T26727] loop0: detected capacity change from 0 to 1024
[  620.076347][T26727] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  620.109407][T26727] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  620.374234][T26751] FAULT_INJECTION: forcing a failure.
[  620.374234][T26751] name failslab, interval 1, probability 0, space 0, times 0
[  620.386956][T26751] CPU: 0 UID: 0 PID: 26751 Comm: syz.0.7667 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  620.386990][T26751] Tainted: [W]=WARN
[  620.386997][T26751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  620.387011][T26751] Call Trace:
[  620.387018][T26751]  <TASK>
[  620.387026][T26751]  __dump_stack+0x1d/0x30
[  620.387090][T26751]  dump_stack_lvl+0xe8/0x140
[  620.387110][T26751]  dump_stack+0x15/0x1b
[  620.387125][T26751]  should_fail_ex+0x265/0x280
[  620.387142][T26751]  should_failslab+0x8c/0xb0
[  620.387239][T26751]  __kmalloc_node_track_caller_noprof+0xa5/0x580
[  620.387279][T26751]  ? sidtab_sid2str_get+0xa0/0x130
[  620.387347][T26751]  kmemdup_noprof+0x2b/0x70
[  620.387376][T26751]  sidtab_sid2str_get+0xa0/0x130
[  620.387408][T26751]  security_sid_to_context_core+0x1eb/0x2e0
[  620.387439][T26751]  security_sid_to_context+0x27/0x40
[  620.387517][T26751]  selinux_lsmprop_to_secctx+0x67/0xf0
[  620.387549][T26751]  security_lsmprop_to_secctx+0x1a3/0x1c0
[  620.387591][T26751]  audit_log_subj_ctx+0xa4/0x3e0
[  620.387609][T26751]  ? skb_put+0xa9/0xf0
[  620.387700][T26751]  audit_log_task_context+0x48/0x70
[  620.387725][T26751]  audit_log_task+0xf4/0x250
[  620.387756][T26751]  audit_seccomp+0x61/0x100
[  620.387781][T26751]  ? __seccomp_filter+0x82d/0x1250
[  620.387854][T26751]  __seccomp_filter+0x83e/0x1250
[  620.387882][T26751]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  620.387919][T26751]  ? vfs_write+0x7e8/0x960
[  620.387939][T26751]  ? __rcu_read_unlock+0x4f/0x70
[  620.387963][T26751]  ? __fget_files+0x184/0x1c0
[  620.388015][T26751]  __secure_computing+0x82/0x150
[  620.388063][T26751]  syscall_trace_enter+0xcf/0x1e0
[  620.388141][T26751]  do_syscall_64+0xac/0x200
[  620.388158][T26751]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  620.388186][T26751]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  620.388255][T26751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.388284][T26751] RIP: 0033:0x7ff4d2ebe0dc
[  620.388300][T26751] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  620.388319][T26751] RSP: 002b:00007ff4d1927030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  620.388340][T26751] RAX: ffffffffffffffda RBX: 00007ff4d3115fa0 RCX: 00007ff4d2ebe0dc
[  620.388353][T26751] RDX: 000000000000000f RSI: 00007ff4d19270a0 RDI: 0000000000000006
[  620.388383][T26751] RBP: 00007ff4d1927090 R08: 0000000000000000 R09: 0000000000000000
[  620.388396][T26751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  620.388423][T26751] R13: 00007ff4d3116038 R14: 00007ff4d3115fa0 R15: 00007ffe2c167598
[  620.388486][T26751]  </TASK>
[  620.764338][T26756] SELinux:  Context system_u:object_r:udev_tbl_t:s0 is not valid (left unmapped).
[  620.846570][T26758] __nla_validate_parse: 21 callbacks suppressed
[  620.846585][T26758] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7671'.
[  620.892815][T26763] pim6reg: entered allmulticast mode
[  620.948242][T26763] netlink: 120 bytes leftover after parsing attributes in process `syz.3.7672'.
[  620.959862][T26765] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  620.975522][T26754] sg_write: data in/out 475/14 bytes for SCSI command 0x0-- guessing data in;
[  620.975522][T26754]    program syz.1.7666 not setting count and/or reply_len properly
[  621.249750][T26778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7677'.
[  621.294903][T26778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7677'.
[  621.406803][T26782] FAULT_INJECTION: forcing a failure.
[  621.406803][T26782] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  621.420383][T26782] CPU: 1 UID: 0 PID: 26782 Comm: syz.3.7680 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  621.420438][T26782] Tainted: [W]=WARN
[  621.420445][T26782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  621.420458][T26782] Call Trace:
[  621.420464][T26782]  <TASK>
[  621.420471][T26782]  __dump_stack+0x1d/0x30
[  621.420574][T26782]  dump_stack_lvl+0xe8/0x140
[  621.420594][T26782]  dump_stack+0x15/0x1b
[  621.420610][T26782]  should_fail_ex+0x265/0x280
[  621.420627][T26782]  should_fail+0xb/0x20
[  621.420687][T26782]  should_fail_usercopy+0x1a/0x20
[  621.420706][T26782]  _copy_from_iter+0xd2/0xe80
[  621.420786][T26782]  ? mntput_no_expire+0x6f/0x440
[  621.420882][T26782]  ? mntput+0x4b/0x80
[  621.420897][T26782]  tun_get_user+0x3d0/0x26e0
[  621.420923][T26782]  ? _parse_integer_limit+0x170/0x190
[  621.420982][T26782]  ? ref_tracker_alloc+0x1f2/0x2f0
[  621.421018][T26782]  ? selinux_file_permission+0x1e4/0x320
[  621.421082][T26782]  tun_chr_write_iter+0x15e/0x210
[  621.421117][T26782]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  621.421142][T26782]  vfs_write+0x52a/0x960
[  621.421167][T26782]  ksys_write+0xda/0x1a0
[  621.421213][T26782]  __x64_sys_write+0x40/0x50
[  621.421241][T26782]  x64_sys_call+0x2802/0x3000
[  621.421261][T26782]  do_syscall_64+0xd2/0x200
[  621.421283][T26782]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  621.421358][T26782]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  621.421389][T26782]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.421412][T26782] RIP: 0033:0x7fcc9f3df6c9
[  621.421428][T26782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  621.421459][T26782] RSP: 002b:00007fcc9de3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  621.421476][T26782] RAX: ffffffffffffffda RBX: 00007fcc9f635fa0 RCX: 00007fcc9f3df6c9
[  621.421487][T26782] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000005
[  621.421527][T26782] RBP: 00007fcc9de3f090 R08: 0000000000000000 R09: 0000000000000000
[  621.421567][T26782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  621.421578][T26782] R13: 00007fcc9f636038 R14: 00007fcc9f635fa0 R15: 00007fffa3e4ebb8
[  621.421594][T26782]  </TASK>
[  621.763550][T26793] pim6reg: entered allmulticast mode
[  621.820450][T26793] netlink: 120 bytes leftover after parsing attributes in process `syz.0.7685'.
[  621.893305][T26803] loop0: detected capacity change from 0 to 1024
[  621.910234][T26803] EXT4-fs: inline encryption not supported
[  621.937817][T26803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  622.030573][T26812] FAULT_INJECTION: forcing a failure.
[  622.030573][T26812] name failslab, interval 1, probability 0, space 0, times 0
[  622.043272][T26812] CPU: 1 UID: 0 PID: 26812 Comm: syz.3.7693 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  622.043305][T26812] Tainted: [W]=WARN
[  622.043312][T26812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  622.043326][T26812] Call Trace:
[  622.043333][T26812]  <TASK>
[  622.043342][T26812]  __dump_stack+0x1d/0x30
[  622.043365][T26812]  dump_stack_lvl+0xe8/0x140
[  622.043406][T26812]  dump_stack+0x15/0x1b
[  622.043425][T26812]  should_fail_ex+0x265/0x280
[  622.043444][T26812]  should_failslab+0x8c/0xb0
[  622.043468][T26812]  __kmalloc_noprof+0xa5/0x570
[  622.043554][T26812]  ? sock_kmalloc+0x85/0xc0
[  622.043571][T26812]  ? iovec_from_user+0x5e/0x210
[  622.043594][T26812]  sock_kmalloc+0x85/0xc0
[  622.043628][T26812]  ____sys_sendmsg+0xf8/0x4e0
[  622.043662][T26812]  ___sys_sendmsg+0x17b/0x1d0
[  622.043693][T26812]  __sys_sendmmsg+0x178/0x300
[  622.043724][T26812]  __x64_sys_sendmmsg+0x57/0x70
[  622.043766][T26812]  x64_sys_call+0x1c4a/0x3000
[  622.043789][T26812]  do_syscall_64+0xd2/0x200
[  622.043811][T26812]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  622.043835][T26812]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  622.043943][T26812]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.043963][T26812] RIP: 0033:0x7fcc9f3df6c9
[  622.043977][T26812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  622.043994][T26812] RSP: 002b:00007fcc9de3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  622.044011][T26812] RAX: ffffffffffffffda RBX: 00007fcc9f635fa0 RCX: 00007fcc9f3df6c9
[  622.044026][T26812] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000003
[  622.044040][T26812] RBP: 00007fcc9de3f090 R08: 0000000000000000 R09: 0000000000000000
[  622.044108][T26812] R10: 0000000004000804 R11: 0000000000000246 R12: 0000000000000001
[  622.044122][T26812] R13: 00007fcc9f636038 R14: 00007fcc9f635fa0 R15: 00007fffa3e4ebb8
[  622.044139][T26812]  </TASK>
[  622.251781][T26803] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  622.282203][T24868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  622.297331][T26818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7695'.
[  622.427837][T26825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7696'.
[  622.469924][T26825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7696'.
[  622.561407][T26813] sg_write: data in/out 475/14 bytes for SCSI command 0x0-- guessing data in;
[  622.561407][T26813]    program syz.5.7689 not setting count and/or reply_len properly
[  622.724061][T26828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7698'.
[  622.756173][T26828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7698'.
[  622.763720][T26830] 1ªX¹¦À: renamed from 
60ªX¹¦À
[  622.781585][T26830] A link change request failed with some changes committed already. Interface 
61ªX¹¦À may have been left with an inconsistent configuration, please check.
[  622.830769][T26832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  622.850038][T26832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  622.860172][T26832] futex_wake_op: syz.5.7700 tries to shift op by -1; fix this program
[  622.952918][T26836] pim6reg: entered allmulticast mode
[  623.206795][T26854] 8021q: adding VLAN 0 to HW filter on device bond0
[  623.222087][T26854] FAULT_INJECTION: forcing a failure.
[  623.222087][T26854] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  623.235260][T26854] CPU: 1 UID: 0 PID: 26854 Comm: syz.3.7709 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  623.235291][T26854] Tainted: [W]=WARN
[  623.235297][T26854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  623.235310][T26854] Call Trace:
[  623.235363][T26854]  <TASK>
[  623.235370][T26854]  __dump_stack+0x1d/0x30
[  623.235392][T26854]  dump_stack_lvl+0xe8/0x140
[  623.235414][T26854]  dump_stack+0x15/0x1b
[  623.235482][T26854]  should_fail_ex+0x265/0x280
[  623.235501][T26854]  should_fail+0xb/0x20
[  623.235515][T26854]  should_fail_usercopy+0x1a/0x20
[  623.235533][T26854]  _copy_from_user+0x1c/0xb0
[  623.235554][T26854]  ___sys_sendmsg+0xc1/0x1d0
[  623.235595][T26854]  __x64_sys_sendmsg+0xd4/0x160
[  623.235615][T26854]  x64_sys_call+0x191e/0x3000
[  623.235640][T26854]  do_syscall_64+0xd2/0x200
[  623.235663][T26854]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  623.235727][T26854]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  623.235757][T26854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.235775][T26854] RIP: 0033:0x7fcc9f3df6c9
[  623.235865][T26854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  623.235881][T26854] RSP: 002b:00007fcc9de3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  623.235901][T26854] RAX: ffffffffffffffda RBX: 00007fcc9f635fa0 RCX: 00007fcc9f3df6c9
[  623.235970][T26854] RDX: 0000000004004000 RSI: 00002000000002c0 RDI: 0000000000000005
[  623.235984][T26854] RBP: 00007fcc9de3f090 R08: 0000000000000000 R09: 0000000000000000
[  623.236004][T26854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  623.236017][T26854] R13: 00007fcc9f636038 R14: 00007fcc9f635fa0 R15: 00007fffa3e4ebb8
[  623.236035][T26854]  </TASK>
[  623.651128][T26867] FAULT_INJECTION: forcing a failure.
[  623.651128][T26867] name failslab, interval 1, probability 0, space 0, times 0
[  623.663874][T26867] CPU: 1 UID: 0 PID: 26867 Comm: syz.5.7714 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  623.663913][T26867] Tainted: [W]=WARN
[  623.663995][T26867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  623.664006][T26867] Call Trace:
[  623.664012][T26867]  <TASK>
[  623.664019][T26867]  __dump_stack+0x1d/0x30
[  623.664040][T26867]  dump_stack_lvl+0xe8/0x140
[  623.664057][T26867]  dump_stack+0x15/0x1b
[  623.664073][T26867]  should_fail_ex+0x265/0x280
[  623.664110][T26867]  should_failslab+0x8c/0xb0
[  623.664138][T26867]  __kmalloc_noprof+0xa5/0x570
[  623.664178][T26867]  ? sock_kmalloc+0x85/0xc0
[  623.664196][T26867]  ? iovec_from_user+0x5e/0x210
[  623.664228][T26867]  sock_kmalloc+0x85/0xc0
[  623.664306][T26867]  ____sys_sendmsg+0xf8/0x4e0
[  623.664335][T26867]  ___sys_sendmsg+0x17b/0x1d0
[  623.664363][T26867]  __sys_sendmmsg+0x178/0x300
[  623.664413][T26867]  __x64_sys_sendmmsg+0x57/0x70
[  623.664432][T26867]  x64_sys_call+0x1c4a/0x3000
[  623.664452][T26867]  do_syscall_64+0xd2/0x200
[  623.664513][T26867]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  623.664543][T26867]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  623.664621][T26867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.664711][T26867] RIP: 0033:0x7f7af5f1f6c9
[  623.664727][T26867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  623.664743][T26867] RSP: 002b:00007f7af4987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  623.664760][T26867] RAX: ffffffffffffffda RBX: 00007f7af6175fa0 RCX: 00007f7af5f1f6c9
[  623.664771][T26867] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000006
[  623.664782][T26867] RBP: 00007f7af4987090 R08: 0000000000000000 R09: 0000000000000000
[  623.664792][T26867] R10: 0000000004000804 R11: 0000000000000246 R12: 0000000000000001
[  623.664879][T26867] R13: 00007f7af6176038 R14: 00007f7af6175fa0 R15: 00007fff46c66588
[  623.664930][T26867]  </TASK>
[  623.873951][   T29] kauditd_printk_skb: 205 callbacks suppressed
[  623.873976][   T29] audit: type=1326 audit(623.914:24589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26868 comm="syz.3.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9f3df6c9 code=0x7ffc0000
[  623.939819][T26857] sg_write: data in/out 475/14 bytes for SCSI command 0x0-- guessing data in;
[  623.939819][T26857]    program syz.1.7708 not setting count and/or reply_len properly
[  623.956630][   T29] audit: type=1326 audit(623.914:24590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26868 comm="syz.3.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9f3df6c9 code=0x7ffc0000
[  623.979848][   T29] audit: type=1326 audit(623.914:24591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26868 comm="syz.3.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fcc9f3df6c9 code=0x7ffc0000
[  624.003054][   T29] audit: type=1326 audit(623.914:24592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26868 comm="syz.3.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9f3df6c9 code=0x7ffc0000
[  624.026131][   T29] audit: type=1326 audit(623.914:24593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26868 comm="syz.3.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9f3df6c9 code=0x7ffc0000
[  624.049583][   T29] audit: type=1326 audit(623.914:24594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26868 comm="syz.3.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc9f3df6c9 code=0x7ffc0000
[  624.072661][   T29] audit: type=1326 audit(623.914:24595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26868 comm="syz.3.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9f3df6c9 code=0x7ffc0000
[  624.095655][   T29] audit: type=1326 audit(623.914:24596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26868 comm="syz.3.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9f3df6c9 code=0x7ffc0000
[  624.118646][   T29] audit: type=1326 audit(623.914:24597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26868 comm="syz.3.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc9f3df6c9 code=0x7ffc0000
[  624.141645][   T29] audit: type=1326 audit(623.914:24598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26868 comm="syz.3.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9f3df6c9 code=0x7ffc0000
[  624.383761][T26912] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.407349][T26916] FAULT_INJECTION: forcing a failure.
[  624.407349][T26916] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  624.420849][T26916] CPU: 1 UID: 0 PID: 26916 Comm: syz.5.7732 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  624.420880][T26916] Tainted: [W]=WARN
[  624.420886][T26916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  624.420897][T26916] Call Trace:
[  624.420903][T26916]  <TASK>
[  624.420910][T26916]  __dump_stack+0x1d/0x30
[  624.420976][T26916]  dump_stack_lvl+0xe8/0x140
[  624.421061][T26916]  dump_stack+0x15/0x1b
[  624.421135][T26916]  should_fail_ex+0x265/0x280
[  624.421157][T26916]  should_fail_alloc_page+0xf2/0x100
[  624.421192][T26916]  __alloc_frozen_pages_noprof+0xff/0x360
[  624.421217][T26916]  alloc_pages_mpol+0xb3/0x260
[  624.421283][T26916]  ? bpf_send_signal_common+0x2b6/0x300
[  624.421320][T26916]  alloc_pages_noprof+0x90/0x130
[  624.421407][T26916]  pte_alloc_one+0x1e/0xd0
[  624.421433][T26916]  __pte_alloc+0x32/0x290
[  624.421464][T26916]  ? handle_mm_fault+0x518/0x2be0
[  624.421491][T26916]  handle_mm_fault+0x1c18/0x2be0
[  624.421554][T26916]  ? __rcu_read_lock+0x37/0x50
[  624.421580][T26916]  ? __pte_offset_map_lock+0x1d4/0x230
[  624.421711][T26916]  __get_user_pages+0x102a/0x1ed0
[  624.421772][T26916]  __gup_longterm_locked+0x8ef/0xe60
[  624.421798][T26916]  ? exc_page_fault+0x62/0xa0
[  624.421838][T26916]  ? should_fail_ex+0xdb/0x280
[  624.421858][T26916]  pin_user_pages_remote+0x7e/0xb0
[  624.421895][T26916]  process_vm_rw+0x484/0x960
[  624.421937][T26916]  __x64_sys_process_vm_readv+0x78/0x90
[  624.421964][T26916]  x64_sys_call+0x1874/0x3000
[  624.422050][T26916]  do_syscall_64+0xd2/0x200
[  624.422071][T26916]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  624.422132][T26916]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  624.422160][T26916]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.422180][T26916] RIP: 0033:0x7f7af5f1f6c9
[  624.422206][T26916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  624.422225][T26916] RSP: 002b:00007f7af4987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136
[  624.422275][T26916] RAX: ffffffffffffffda RBX: 00007f7af6175fa0 RCX: 00007f7af5f1f6c9
[  624.422285][T26916] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000248
[  624.422296][T26916] RBP: 00007f7af4987090 R08: 0000000000000286 R09: 0000000000000000
[  624.422360][T26916] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001
[  624.422400][T26916] R13: 00007f7af6176038 R14: 00007f7af6175fa0 R15: 00007fff46c66588
[  624.422419][T26916]  </TASK>
[  624.691000][T26912] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.737736][ T7863] IPVS: starting estimator thread 0...
[  624.752068][T26912] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.815600][T26912] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.829793][T26930] IPVS: using max 2880 ests per chain, 144000 per kthread
[  624.854029][T26922] sg_write: data in/out 475/14 bytes for SCSI command 0x0-- guessing data in;
[  624.854029][T26922]    program syz.1.7731 not setting count and/or reply_len properly
[  624.937411][T26941] 0ªX¹¦À: renamed from 
61ªX¹¦À
[  624.944259][T26941] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  624.969466][T25090] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  625.002946][T25049] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  625.017722][T25049] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  625.026287][T25049] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  625.094457][T26938] loop0: detected capacity change from 0 to 4096
[  625.103618][T26938] EXT4-fs: Ignoring removed nomblk_io_submit option
[  625.145943][T26938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  625.175746][T24868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.230746][T26960] bridge0: port 3(gretap0) entered disabled state
[  625.291419][T26960] bridge0: port 2(bridge_slave_1) entered disabled state
[  625.298966][T26960] bridge0: port 1(bridge_slave_0) entered disabled state
[  625.414242][T26960] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  625.436686][T26960] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  625.487615][ T7863] lo speed is unknown, defaulting to 1000
[  625.493558][ T7863] syz0: Port: 1 Link DOWN
[  625.510369][T25079] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  625.518933][T25079] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  625.539405][T25079] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  625.563303][T25079] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  625.572132][T26975] FAULT_INJECTION: forcing a failure.
[  625.572132][T26975] name failslab, interval 1, probability 0, space 0, times 0
[  625.573328][T26973] loop0: detected capacity change from 0 to 512
[  625.584834][T26975] CPU: 0 UID: 0 PID: 26975 Comm: syz.2.7749 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  625.584954][T26975] Tainted: [W]=WARN
[  625.584961][T26975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  625.584973][T26975] Call Trace:
[  625.584981][T26975]  <TASK>
[  625.584989][T26975]  __dump_stack+0x1d/0x30
[  625.585012][T26975]  dump_stack_lvl+0xe8/0x140
[  625.585047][T26975]  dump_stack+0x15/0x1b
[  625.585064][T26975]  should_fail_ex+0x265/0x280
[  625.585084][T26975]  should_failslab+0x8c/0xb0
[  625.585172][T26975]  __kmalloc_noprof+0xa5/0x570
[  625.585227][T26975]  ? security_sk_alloc+0x52/0x120
[  625.585250][T26975]  ? should_failslab+0x8c/0xb0
[  625.585277][T26975]  security_sk_alloc+0x52/0x120
[  625.585309][T26975]  sk_prot_alloc+0xc2/0x190
[  625.585385][T26975]  sk_alloc+0x34/0x360
[  625.585481][T26975]  bpf_prog_test_run_skb+0x251/0xbf0
[  625.585511][T26975]  ? __rcu_read_unlock+0x4f/0x70
[  625.585616][T26975]  ? __fget_files+0x184/0x1c0
[  625.585645][T26975]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  625.585676][T26975]  bpf_prog_test_run+0x22a/0x390
[  625.585750][T26975]  __sys_bpf+0x4c0/0x7c0
[  625.585788][T26975]  __x64_sys_bpf+0x41/0x50
[  625.585819][T26975]  x64_sys_call+0x2aee/0x3000
[  625.585841][T26975]  do_syscall_64+0xd2/0x200
[  625.585887][T26975]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  625.585971][T26975]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  625.586004][T26975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  625.586025][T26975] RIP: 0033:0x7fe2c82cf6c9
[  625.586040][T26975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  625.586080][T26975] RSP: 002b:00007fe2c6d37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  625.586100][T26975] RAX: ffffffffffffffda RBX: 00007fe2c8525fa0 RCX: 00007fe2c82cf6c9
[  625.586181][T26975] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[  625.586193][T26975] RBP: 00007fe2c6d37090 R08: 0000000000000000 R09: 0000000000000000
[  625.586205][T26975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  625.586218][T26975] R13: 00007fe2c8526038 R14: 00007fe2c8525fa0 R15: 00007ffed2635958
[  625.586237][T26975]  </TASK>
[  625.812622][T26973] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  625.834295][T26973] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.7747: invalid block
[  625.848406][T26973] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.7747: invalid indirect mapped block 4294967295 (level 1)
[  625.862715][T26973] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.7747: invalid indirect mapped block 4294967295 (level 1)
[  625.877158][T26973] EXT4-fs (loop0): 2 truncates cleaned up
[  625.883450][T26973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  625.916721][T26968] sg_write: data in/out 475/14 bytes for SCSI command 0x0-- guessing data in;
[  625.916721][T26968]    program syz.0.7747 not setting count and/or reply_len properly
[  625.937452][T26985] __nla_validate_parse: 13 callbacks suppressed
[  625.937469][T26985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7753'.
[  625.962921][T26612] IPVS: starting estimator thread 0...
[  625.983920][T26985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7753'.
[  626.034556][T24868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  626.059854][T26990] IPVS: using max 2976 ests per chain, 148800 per kthread
[  626.194225][T27007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7761'.
[  626.368704][T27007] loop3: detected capacity change from 0 to 8192
[  626.376060][T27014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7763'.
[  626.466893][T27014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7763'.
[  626.518570][T27009] loop0: detected capacity change from 0 to 128
[  626.525322][T27009] EXT4-fs: Ignoring removed nobh option
[  626.543929][T27009] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  626.638923][T27025] FAULT_INJECTION: forcing a failure.
[  626.638923][T27025] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  626.652105][T27025] CPU: 0 UID: 0 PID: 27025 Comm: syz.3.7766 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  626.652218][T27025] Tainted: [W]=WARN
[  626.652225][T27025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  626.652239][T27025] Call Trace:
[  626.652245][T27025]  <TASK>
[  626.652252][T27025]  __dump_stack+0x1d/0x30
[  626.652324][T27025]  dump_stack_lvl+0xe8/0x140
[  626.652346][T27025]  dump_stack+0x15/0x1b
[  626.652371][T27025]  should_fail_ex+0x265/0x280
[  626.652392][T27025]  should_fail+0xb/0x20
[  626.652406][T27025]  should_fail_usercopy+0x1a/0x20
[  626.652503][T27025]  _copy_from_user+0x1c/0xb0
[  626.652525][T27025]  do_ipv6_setsockopt+0x124/0x2160
[  626.652558][T27025]  ? kstrtoull+0x111/0x140
[  626.652644][T27025]  ? __rcu_read_unlock+0x4f/0x70
[  626.652711][T27025]  ? avc_has_perm_noaudit+0x1b1/0x200
[  626.652735][T27025]  ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0
[  626.652768][T27025]  ipv6_setsockopt+0x59/0x130
[  626.652797][T27025]  tcp_setsockopt+0x98/0xb0
[  626.652841][T27025]  sock_common_setsockopt+0x69/0x80
[  626.652868][T27025]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  626.652895][T27025]  __sys_setsockopt+0x184/0x200
[  626.652948][T27025]  __x64_sys_setsockopt+0x64/0x80
[  626.652975][T27025]  x64_sys_call+0x20ec/0x3000
[  626.653031][T27025]  do_syscall_64+0xd2/0x200
[  626.653049][T27025]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  626.653080][T27025]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  626.653199][T27025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.653222][T27025] RIP: 0033:0x7fcc9f3df6c9
[  626.653235][T27025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  626.653250][T27025] RSP: 002b:00007fcc9de3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  626.653267][T27025] RAX: ffffffffffffffda RBX: 00007fcc9f635fa0 RCX: 00007fcc9f3df6c9
[  626.653308][T27025] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  626.653319][T27025] RBP: 00007fcc9de3f090 R08: 0000000000000430 R09: 0000000000000000
[  626.653409][T27025] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000001
[  626.653423][T27025] R13: 00007fcc9f636038 R14: 00007fcc9f635fa0 R15: 00007fffa3e4ebb8
[  626.653439][T27025]  </TASK>
[  626.935250][T24868] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  626.961372][T27027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7768'.
[  627.034569][T27034] loop0: detected capacity change from 0 to 512
[  627.050238][T27034] EXT4-fs: inline encryption not supported
[  627.056441][T27034] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  627.067485][T27034] EXT4-fs (loop0): 1 truncate cleaned up
[  627.073495][T27034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  627.086418][T27034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7770'.
[  627.108139][T27037] pim6reg: entered allmulticast mode
[  627.125605][T27037] netlink: 120 bytes leftover after parsing attributes in process `syz.5.7771'.
[  627.136291][T24868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  627.208020][T27047] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7774'.
[  627.217427][T27047] 0ªX¹¦À: renamed from 
61ªX¹¦À
[  627.223846][T27047] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  627.265411][T27051] loop3: detected capacity change from 0 to 512
[  627.266670][T27052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7776'.
[  627.293164][T27051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  627.318323][T27051] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  627.350655][T27060] FAULT_INJECTION: forcing a failure.
[  627.350655][T27060] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  627.364152][T27060] CPU: 1 UID: 0 PID: 27060 Comm: syz.5.7780 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  627.364182][T27060] Tainted: [W]=WARN
[  627.364188][T27060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  627.364200][T27060] Call Trace:
[  627.364206][T27060]  <TASK>
[  627.364214][T27060]  __dump_stack+0x1d/0x30
[  627.364235][T27060]  dump_stack_lvl+0xe8/0x140
[  627.364319][T27060]  dump_stack+0x15/0x1b
[  627.364337][T27060]  should_fail_ex+0x265/0x280
[  627.364357][T27060]  should_fail+0xb/0x20
[  627.364373][T27060]  should_fail_usercopy+0x1a/0x20
[  627.364395][T27060]  _copy_from_iter+0xd2/0xe80
[  627.364449][T27060]  ? __build_skb_around+0x1ab/0x200
[  627.364545][T27060]  ? __alloc_skb+0x223/0x320
[  627.364574][T27060]  pfkey_sendmsg+0x126/0x900
[  627.364602][T27060]  ? avc_has_perm+0xf7/0x180
[  627.364624][T27060]  ? selinux_socket_sendmsg+0x175/0x1b0
[  627.364725][T27060]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  627.364752][T27060]  __sock_sendmsg+0x145/0x180
[  627.364777][T27060]  ____sys_sendmsg+0x31e/0x4e0
[  627.364836][T27060]  ___sys_sendmsg+0x17b/0x1d0
[  627.364867][T27060]  __x64_sys_sendmsg+0xd4/0x160
[  627.364891][T27060]  x64_sys_call+0x191e/0x3000
[  627.364914][T27060]  do_syscall_64+0xd2/0x200
[  627.364936][T27060]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  627.365033][T27060]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  627.365067][T27060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.365139][T27060] RIP: 0033:0x7f7af5f1f6c9
[  627.365155][T27060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  627.365173][T27060] RSP: 002b:00007f7af4987038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  627.365210][T27060] RAX: ffffffffffffffda RBX: 00007f7af6175fa0 RCX: 00007f7af5f1f6c9
[  627.365224][T27060] RDX: 0000000000000000 RSI: 00002000005f5000 RDI: 0000000000000005
[  627.365237][T27060] RBP: 00007f7af4987090 R08: 0000000000000000 R09: 0000000000000000
[  627.365249][T27060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  627.365262][T27060] R13: 00007f7af6176038 R14: 00007f7af6175fa0 R15: 00007fff46c66588
[  627.365282][T27060]  </TASK>
[  627.378109][T27051] SELinux:  Context system_u:object_r:systemd_systemctl_exec_t:s0 is not valid (left unmapped).
[  627.782539][T27082] loop3: detected capacity change from 0 to 512
[  627.789253][T27082] EXT4-fs: Ignoring removed orlov option
[  627.804960][T27082] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  627.851674][T27082] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.7788: corrupted in-inode xattr: e_value size too large
[  627.880565][T27082] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7788: couldn't read orphan inode 15 (err -117)
[  627.895520][T27082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  627.941439][T27082] 1ªX¹¦À: renamed from 
60ªX¹¦À
[  627.959928][T27082] 1ªX¹¦À: entered allmulticast mode
[  627.965194][T27082] A link change request failed with some changes committed already. Interface 
61ªX¹¦À may have been left with an inconsistent configuration, please check.
[  628.031688][T21041] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  628.084021][T27089] loop3: detected capacity change from 0 to 512
[  628.092296][T27089] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.7790: corrupted in-inode xattr: invalid ea_ino
[  628.106375][T27089] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7790: couldn't read orphan inode 15 (err -117)
[  628.150145][T27089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  628.197198][T21041] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  628.300041][T27098] lo speed is unknown, defaulting to 1000
[  628.338786][T27100] ip6gretap0: entered promiscuous mode
[  628.350983][T27100] ip6gretap0 (unregistering): left promiscuous mode
[  628.411426][T27103] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5)
[  628.432059][T27103] bond1 (unregistering): Released all slaves
[  628.454254][T27098] lo speed is unknown, defaulting to 1000
[  628.654038][T27117] 1ªX¹¦À: renamed from 
60ªX¹¦À
[  628.682506][T27117] A link change request failed with some changes committed already. Interface 
61ªX¹¦À may have been left with an inconsistent configuration, please check.
[  628.729686][T27120] loop3: detected capacity change from 0 to 512
[  628.940950][T27120] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.7801: corrupted in-inode xattr: invalid ea_ino
[  629.028544][T27120] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7801: couldn't read orphan inode 15 (err -117)
[  629.056703][T27120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  629.088022][   T29] kauditd_printk_skb: 286 callbacks suppressed
[  629.088035][   T29] audit: type=1326 audit(629.124:24885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27131 comm="syz.5.7805" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7af5f1f6c9 code=0x0
[  629.151044][T21041] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.168840][T27136] FAULT_INJECTION: forcing a failure.
[  629.168840][T27136] name failslab, interval 1, probability 0, space 0, times 0
[  629.182480][T27136] CPU: 0 UID: 0 PID: 27136 Comm: syz.3.7806 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  629.182517][T27136] Tainted: [W]=WARN
[  629.182523][T27136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  629.182533][T27136] Call Trace:
[  629.182596][T27136]  <TASK>
[  629.182603][T27136]  __dump_stack+0x1d/0x30
[  629.182628][T27136]  dump_stack_lvl+0xe8/0x140
[  629.182650][T27136]  dump_stack+0x15/0x1b
[  629.182669][T27136]  should_fail_ex+0x265/0x280
[  629.182687][T27136]  should_failslab+0x8c/0xb0
[  629.182760][T27136]  __kvmalloc_node_noprof+0x12e/0x670
[  629.182810][T27136]  ? alloc_fdtable+0xc2/0x1d0
[  629.182839][T27136]  alloc_fdtable+0xc2/0x1d0
[  629.182908][T27136]  dup_fd+0x4c7/0x540
[  629.182935][T27136]  copy_files+0x98/0xf0
[  629.182966][T27136]  copy_process+0xc5b/0x2000
[  629.182997][T27136]  kernel_clone+0x16c/0x5c0
[  629.183086][T27136]  ? vfs_write+0x7e8/0x960
[  629.183110][T27136]  __x64_sys_clone+0xe6/0x120
[  629.183163][T27136]  x64_sys_call+0x119c/0x3000
[  629.183182][T27136]  do_syscall_64+0xd2/0x200
[  629.183245][T27136]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  629.183272][T27136]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  629.183303][T27136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.183385][T27136] RIP: 0033:0x7fcc9f3df6c9
[  629.183399][T27136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  629.183495][T27136] RSP: 002b:00007fcc9de3efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  629.183516][T27136] RAX: ffffffffffffffda RBX: 00007fcc9f635fa0 RCX: 00007fcc9f3df6c9
[  629.183528][T27136] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041aa1000
[  629.183563][T27136] RBP: 00007fcc9de3f090 R08: 0000000000000000 R09: 0000000000000000
[  629.183573][T27136] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  629.183586][T27136] R13: 00007fcc9f636038 R14: 00007fcc9f635fa0 R15: 00007fffa3e4ebb8
[  629.183604][T27136]  </TASK>
[  629.411561][   T29] audit: type=1400 audit(629.454:24886): avc:  denied  { listen } for  pid=27137 comm="syz.3.7807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  629.493050][T27145] loop3: detected capacity change from 0 to 1024
[  629.499808][T27145] EXT4-fs: inline encryption not supported
[  629.520104][T27145] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal
[  629.869498][T27152] netlink: 'syz.3.7812': attribute type 30 has an invalid length.
[  629.972860][   T29] audit: type=1400 audit(630.014:24887): avc:  denied  { create } for  pid=27153 comm="syz.5.7813" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1
[  630.027856][   T29] audit: type=1400 audit(630.044:24888): avc:  denied  { create } for  pid=27153 comm="syz.5.7813" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=kcm_socket permissive=1
[  630.047830][   T29] audit: type=1400 audit(630.044:24889): avc:  denied  { mount } for  pid=27153 comm="syz.5.7813" name="/" dev="mqueue" ino=104888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  630.070151][   T29] audit: type=1400 audit(630.044:24890): avc:  denied  { create } for  pid=27153 comm="syz.5.7813" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1
[  630.089878][   T29] audit: type=1400 audit(630.044:24891): avc:  denied  { listen } for  pid=27153 comm="syz.5.7813" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1
[  630.109516][   T29] audit: type=1400 audit(630.044:24892): avc:  denied  { ioctl } for  pid=27153 comm="syz.5.7813" path="socket:[105862]" dev="sockfs" ino=105862 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1
[  630.135242][   T29] audit: type=1326 audit(630.064:24893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27157 comm="syz.5.7815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af5f1f6c9 code=0x7ffc0000
[  630.158365][   T29] audit: type=1326 audit(630.064:24894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27157 comm="syz.5.7815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af5f1f6c9 code=0x7ffc0000
[  630.443753][T27164] lo speed is unknown, defaulting to 1000
[  630.504515][T27164] lo speed is unknown, defaulting to 1000
[  630.730721][T27164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  630.751174][T27164] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  630.904878][T27185] FAULT_INJECTION: forcing a failure.
[  630.904878][T27185] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  630.918023][T27185] CPU: 0 UID: 0 PID: 27185 Comm: syz.1.7824 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  630.918110][T27185] Tainted: [W]=WARN
[  630.918118][T27185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  630.918205][T27185] Call Trace:
[  630.918243][T27185]  <TASK>
[  630.918251][T27185]  __dump_stack+0x1d/0x30
[  630.918273][T27185]  dump_stack_lvl+0xe8/0x140
[  630.918291][T27185]  dump_stack+0x15/0x1b
[  630.918305][T27185]  should_fail_ex+0x265/0x280
[  630.918395][T27185]  should_fail+0xb/0x20
[  630.918412][T27185]  should_fail_usercopy+0x1a/0x20
[  630.918431][T27185]  strncpy_from_user+0x25/0x230
[  630.918502][T27185]  ? kmem_cache_alloc_noprof+0x242/0x480
[  630.918530][T27185]  ? getname_flags+0x80/0x3b0
[  630.918564][T27185]  getname_flags+0xae/0x3b0
[  630.918595][T27185]  user_path_at+0x28/0x130
[  630.918662][T27185]  __se_sys_mount_setattr+0x136/0x240
[  630.918692][T27185]  __x64_sys_mount_setattr+0x67/0x80
[  630.918718][T27185]  x64_sys_call+0x19ab/0x3000
[  630.918793][T27185]  do_syscall_64+0xd2/0x200
[  630.918841][T27185]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  630.918932][T27185]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  630.919034][T27185]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  630.919053][T27185] RIP: 0033:0x7f6284fff6c9
[  630.919068][T27185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  630.919088][T27185] RSP: 002b:00007f6283a5f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba
[  630.919131][T27185] RAX: ffffffffffffffda RBX: 00007f6285255fa0 RCX: 00007f6284fff6c9
[  630.919145][T27185] RDX: 0000000000009000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  630.919159][T27185] RBP: 00007f6283a5f090 R08: 0000000000000020 R09: 0000000000000000
[  630.919173][T27185] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[  630.919185][T27185] R13: 00007f6285256038 R14: 00007f6285255fa0 R15: 00007fff8faa8368
[  630.919221][T27185]  </TASK>
[  631.136817][T27189] __nla_validate_parse: 10 callbacks suppressed
[  631.136831][T27189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7825'.
[  631.156788][T27189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7825'.
[  631.440946][T27203] batadv_slave_1: entered promiscuous mode
[  631.450687][T27203] batadv_slave_1: left promiscuous mode
[  631.594008][T27204] sg_write: data in/out 475/14 bytes for SCSI command 0x0-- guessing data in;
[  631.594008][T27204]    program syz.1.7828 not setting count and/or reply_len properly
[  631.807154][T27217] FAULT_INJECTION: forcing a failure.
[  631.807154][T27217] name failslab, interval 1, probability 0, space 0, times 0
[  631.820012][T27217] CPU: 1 UID: 0 PID: 27217 Comm: syz.1.7834 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  631.820048][T27217] Tainted: [W]=WARN
[  631.820055][T27217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  631.820069][T27217] Call Trace:
[  631.820077][T27217]  <TASK>
[  631.820117][T27217]  __dump_stack+0x1d/0x30
[  631.820143][T27217]  dump_stack_lvl+0xe8/0x140
[  631.820160][T27217]  dump_stack+0x15/0x1b
[  631.820175][T27217]  should_fail_ex+0x265/0x280
[  631.820194][T27217]  should_failslab+0x8c/0xb0
[  631.820290][T27217]  kmem_cache_alloc_noprof+0x50/0x480
[  631.820316][T27217]  ? alloc_empty_file+0x76/0x200
[  631.820361][T27217]  alloc_empty_file+0x76/0x200
[  631.820381][T27217]  path_openat+0x68/0x2170
[  631.820437][T27217]  ? _parse_integer_limit+0x170/0x190
[  631.820518][T27217]  ? _parse_integer+0x27/0x40
[  631.820544][T27217]  ? kstrtoull+0x111/0x140
[  631.820570][T27217]  ? kstrtouint+0x76/0xc0
[  631.820658][T27217]  do_filp_open+0x109/0x230
[  631.820689][T27217]  do_sys_openat2+0xa6/0x110
[  631.820761][T27217]  __x64_sys_creat+0x65/0x90
[  631.820781][T27217]  x64_sys_call+0x2da3/0x3000
[  631.820868][T27217]  do_syscall_64+0xd2/0x200
[  631.820960][T27217]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  631.821041][T27217]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  631.821073][T27217]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  631.821094][T27217] RIP: 0033:0x7f6284fff6c9
[  631.821168][T27217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  631.821187][T27217] RSP: 002b:00007f6283a5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  631.821208][T27217] RAX: ffffffffffffffda RBX: 00007f6285255fa0 RCX: 00007f6284fff6c9
[  631.821221][T27217] RDX: 0000000000000000 RSI: ecf86c37d53048fc RDI: 0000200000000280
[  631.821235][T27217] RBP: 00007f6283a5f090 R08: 0000000000000000 R09: 0000000000000000
[  631.821297][T27217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  631.821310][T27217] R13: 00007f6285256038 R14: 00007f6285255fa0 R15: 00007fff8faa8368
[  631.821328][T27217]  </TASK>
[  632.244488][T27229] loop0: detected capacity change from 0 to 512
[  632.254819][T27225] netlink: 'syz.1.7837': attribute type 12 has an invalid length.
[  632.273571][T27229] EXT4-fs: Ignoring removed orlov option
[  632.297548][T27236] netlink: 'syz.2.7841': attribute type 3 has an invalid length.
[  632.311486][T27229] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  632.396612][T27229] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.7840: corrupted in-inode xattr: e_value size too large
[  632.432541][T27229] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.7840: couldn't read orphan inode 15 (err -117)
[  632.458299][T27245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7844'.
[  632.478498][T27229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  632.546519][T27229] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7840'.
[  632.556344][T27229] 1ªX¹¦À: renamed from 
60ªX¹¦À
[  632.563901][T27229] A link change request failed with some changes committed already. Interface 
61ªX¹¦À may have been left with an inconsistent configuration, please check.
[  632.672106][T24868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  632.737843][T27274] FAULT_INJECTION: forcing a failure.
[  632.737843][T27274] name failslab, interval 1, probability 0, space 0, times 0
[  632.750511][T27274] CPU: 1 UID: 0 PID: 27274 Comm: syz.5.7855 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  632.750547][T27274] Tainted: [W]=WARN
[  632.750556][T27274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  632.750570][T27274] Call Trace:
[  632.750575][T27274]  <TASK>
[  632.750581][T27274]  __dump_stack+0x1d/0x30
[  632.750602][T27274]  dump_stack_lvl+0xe8/0x140
[  632.750649][T27274]  dump_stack+0x15/0x1b
[  632.750667][T27274]  should_fail_ex+0x265/0x280
[  632.750688][T27274]  should_failslab+0x8c/0xb0
[  632.750718][T27274]  __kmalloc_node_track_caller_noprof+0xa5/0x580
[  632.750798][T27274]  ? simple_xattr_set+0xa8/0x2b0
[  632.750832][T27274]  kstrdup+0x3e/0xd0
[  632.750878][T27274]  simple_xattr_set+0xa8/0x2b0
[  632.750949][T27274]  ? strlen+0x19/0x40
[  632.751001][T27274]  shmem_xattr_handler_set+0x12b/0x220
[  632.751027][T27274]  ? __pfx_shmem_xattr_handler_set+0x10/0x10
[  632.751060][T27274]  __vfs_setxattr+0x2e6/0x310
[  632.751088][T27274]  __vfs_setxattr_noperm+0xe8/0x410
[  632.751134][T27274]  __vfs_setxattr_locked+0x1af/0x1d0
[  632.751163][T27274]  vfs_setxattr+0x132/0x270
[  632.751192][T27274]  file_setxattr+0x139/0x1b0
[  632.751311][T27274]  path_setxattrat+0x290/0x310
[  632.751356][T27274]  __x64_sys_fsetxattr+0x6b/0x80
[  632.751386][T27274]  x64_sys_call+0x1ced/0x3000
[  632.751410][T27274]  do_syscall_64+0xd2/0x200
[  632.751470][T27274]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  632.751501][T27274]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  632.751549][T27274]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.751571][T27274] RIP: 0033:0x7f7af5f1f6c9
[  632.751655][T27274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  632.751672][T27274] RSP: 002b:00007f7af4987038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[  632.751692][T27274] RAX: ffffffffffffffda RBX: 00007f7af6175fa0 RCX: 00007f7af5f1f6c9
[  632.751715][T27274] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  632.751744][T27274] RBP: 00007f7af4987090 R08: 0000000000000000 R09: 0000000000000000
[  632.751757][T27274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  632.751770][T27274] R13: 00007f7af6176038 R14: 00007f7af6175fa0 R15: 00007fff46c66588
[  632.751790][T27274]  </TASK>
[  632.979292][T27270] loop0: detected capacity change from 0 to 512
[  632.990133][T27270] EXT4-fs: Ignoring removed nomblk_io_submit option
[  633.004625][T27270] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  633.061320][T27270] EXT4-fs (loop0): 1 truncate cleaned up
[  633.067739][T27270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  633.461509][T24868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  633.491348][T27301] FAULT_INJECTION: forcing a failure.
[  633.491348][T27301] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  633.504700][T27301] CPU: 1 UID: 0 PID: 27301 Comm: syz.2.7864 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  633.504738][T27301] Tainted: [W]=WARN
[  633.504745][T27301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  633.504776][T27301] Call Trace:
[  633.504782][T27301]  <TASK>
[  633.504790][T27301]  __dump_stack+0x1d/0x30
[  633.504814][T27301]  dump_stack_lvl+0xe8/0x140
[  633.504901][T27301]  dump_stack+0x15/0x1b
[  633.504950][T27301]  should_fail_ex+0x265/0x280
[  633.504971][T27301]  should_fail+0xb/0x20
[  633.505065][T27301]  should_fail_usercopy+0x1a/0x20
[  633.505087][T27301]  strncpy_from_user+0x25/0x230
[  633.505169][T27301]  ? kmem_cache_alloc_noprof+0x242/0x480
[  633.505194][T27301]  ? getname_flags+0x80/0x3b0
[  633.505228][T27301]  getname_flags+0xae/0x3b0
[  633.505259][T27301]  do_readlinkat+0x64/0x320
[  633.505352][T27301]  __x64_sys_readlinkat+0x51/0x60
[  633.505371][T27301]  x64_sys_call+0x16b4/0x3000
[  633.505395][T27301]  do_syscall_64+0xd2/0x200
[  633.505470][T27301]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  633.505500][T27301]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  633.505553][T27301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  633.505640][T27301] RIP: 0033:0x7fe2c82cf6c9
[  633.505654][T27301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  633.505670][T27301] RSP: 002b:00007fe2c6d37038 EFLAGS: 00000246 ORIG_RAX: 000000000000010b
[  633.505687][T27301] RAX: ffffffffffffffda RBX: 00007fe2c8525fa0 RCX: 00007fe2c82cf6c9
[  633.505777][T27301] RDX: ffffffffffffffff RSI: 0000200000000100 RDI: ffffffffffffff9c
[  633.505790][T27301] RBP: 00007fe2c6d37090 R08: 0000000000000000 R09: 0000000000000000
[  633.505804][T27301] R10: 00000000000000b4 R11: 0000000000000246 R12: 0000000000000001
[  633.505815][T27301] R13: 00007fe2c8526038 R14: 00007fe2c8525fa0 R15: 00007ffed2635958
[  633.505846][T27301]  </TASK>
[  633.512318][T27303] loop0: detected capacity change from 0 to 512
[  633.756358][T27303] EXT4-fs: Ignoring removed orlov option
[  633.776705][T27303] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  633.785698][T27310] FAULT_INJECTION: forcing a failure.
[  633.785698][T27310] name failslab, interval 1, probability 0, space 0, times 0
[  633.798574][T27310] CPU: 0 UID: 0 PID: 27310 Comm: syz.1.7868 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  633.798684][T27310] Tainted: [W]=WARN
[  633.798691][T27310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  633.798705][T27310] Call Trace:
[  633.798713][T27310]  <TASK>
[  633.798721][T27310]  __dump_stack+0x1d/0x30
[  633.798742][T27310]  dump_stack_lvl+0xe8/0x140
[  633.798812][T27310]  dump_stack+0x15/0x1b
[  633.798832][T27310]  should_fail_ex+0x265/0x280
[  633.798921][T27310]  ? ftrace_profile_set_filter+0x96/0x1b0
[  633.798944][T27310]  should_failslab+0x8c/0xb0
[  633.798972][T27310]  __kmalloc_cache_noprof+0x4c/0x4a0
[  633.799002][T27310]  ftrace_profile_set_filter+0x96/0x1b0
[  633.799029][T27310]  perf_ioctl+0x7b3/0x12e0
[  633.799056][T27310]  ? ioctl_has_perm+0x289/0x2a0
[  633.799157][T27310]  ? do_vfs_ioctl+0x866/0xe10
[  633.799176][T27310]  ? selinux_file_ioctl+0x308/0x3a0
[  633.799208][T27310]  ? __fget_files+0x184/0x1c0
[  633.799316][T27310]  ? __pfx_perf_ioctl+0x10/0x10
[  633.799395][T27310]  __se_sys_ioctl+0xce/0x140
[  633.799413][T27310]  __x64_sys_ioctl+0x43/0x50
[  633.799459][T27310]  x64_sys_call+0x1816/0x3000
[  633.799479][T27310]  do_syscall_64+0xd2/0x200
[  633.799497][T27310]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  633.799598][T27310]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  633.799697][T27310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  633.799721][T27310] RIP: 0033:0x7f6284fff6c9
[  633.799735][T27310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  633.799822][T27310] RSP: 002b:00007f6283a5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  633.799843][T27310] RAX: ffffffffffffffda RBX: 00007f6285255fa0 RCX: 00007f6284fff6c9
[  633.799857][T27310] RDX: 0000200000000340 RSI: 0000000040082406 RDI: 0000000000000003
[  633.799870][T27310] RBP: 00007f6283a5f090 R08: 0000000000000000 R09: 0000000000000000
[  633.799882][T27310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  633.799893][T27310] R13: 00007f6285256038 R14: 00007f6285255fa0 R15: 00007fff8faa8368
[  633.799969][T27310]  </TASK>
[  634.039312][T27303] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.7863: corrupted in-inode xattr: e_value size too large
[  634.068719][T27303] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.7863: couldn't read orphan inode 15 (err -117)
[  634.087299][T27303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  634.138784][T27303] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7863'.
[  634.172223][T27303] 0ªX¹¦À: renamed from 
61ªX¹¦À
[  634.190833][T27303] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  634.253594][T24868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  634.270329][   T29] kauditd_printk_skb: 403 callbacks suppressed
[  634.270342][   T29] audit: type=1400 audit(634.314:25298): avc:  denied  { map } for  pid=27330 comm="syz.2.7875" path="socket:[106129]" dev="sockfs" ino=106129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  634.556413][T27340] lo speed is unknown, defaulting to 1000
[  634.606107][T27340] lo speed is unknown, defaulting to 1000
[  634.724187][   T29] audit: type=1400 audit(634.724:25299): avc:  denied  { override_creds } for  pid=27336 comm="syz.0.7877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  635.370306][T27358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7885'.
[  635.376937][T27360] FAULT_INJECTION: forcing a failure.
[  635.376937][T27360] name failslab, interval 1, probability 0, space 0, times 0
[  635.391929][T27360] CPU: 1 UID: 0 PID: 27360 Comm: syz.5.7884 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  635.391963][T27360] Tainted: [W]=WARN
[  635.391969][T27360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  635.392018][T27360] Call Trace:
[  635.392025][T27360]  <TASK>
[  635.392033][T27360]  __dump_stack+0x1d/0x30
[  635.392056][T27360]  dump_stack_lvl+0xe8/0x140
[  635.392103][T27360]  dump_stack+0x15/0x1b
[  635.392206][T27360]  should_fail_ex+0x265/0x280
[  635.392226][T27360]  should_failslab+0x8c/0xb0
[  635.392254][T27360]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  635.392329][T27360]  ? __alloc_skb+0x101/0x320
[  635.392362][T27360]  __alloc_skb+0x101/0x320
[  635.392392][T27360]  netlink_alloc_large_skb+0xbf/0xf0
[  635.392492][T27360]  netlink_sendmsg+0x3cf/0x6b0
[  635.392514][T27360]  ? __pfx_netlink_sendmsg+0x10/0x10
[  635.392530][T27360]  __sock_sendmsg+0x145/0x180
[  635.392555][T27360]  ____sys_sendmsg+0x31e/0x4e0
[  635.392720][T27360]  ___sys_sendmsg+0x17b/0x1d0
[  635.392816][T27360]  __x64_sys_sendmsg+0xd4/0x160
[  635.392840][T27360]  x64_sys_call+0x191e/0x3000
[  635.392864][T27360]  do_syscall_64+0xd2/0x200
[  635.392886][T27360]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  635.392931][T27360]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  635.392966][T27360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.392989][T27360] RIP: 0033:0x7f7af5f1f6c9
[  635.393056][T27360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  635.393075][T27360] RSP: 002b:00007f7af4987038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  635.393096][T27360] RAX: ffffffffffffffda RBX: 00007f7af6175fa0 RCX: 00007f7af5f1f6c9
[  635.393109][T27360] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  635.393198][T27360] RBP: 00007f7af4987090 R08: 0000000000000000 R09: 0000000000000000
[  635.393211][T27360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  635.393222][T27360] R13: 00007f7af6176038 R14: 00007f7af6175fa0 R15: 00007fff46c66588
[  635.393298][T27360]  </TASK>
[  635.787379][T27371] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7888'.
[  635.798235][T27369] ==================================================================
[  635.806339][T27369] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission
[  635.815571][T27369] 
[  635.817895][T27369] read to 0xffff888119eda620 of 4 bytes by task 27373 on cpu 1:
[  635.818863][T27371] 0ªX¹¦À: renamed from 
61ªX¹¦À
[  635.825517][T27369]  selinux_inode_permission+0x334/0x740
[  635.825551][T27369]  security_inode_permission+0x6d/0xb0
[  635.825575][T27369]  inode_permission+0x106/0x310
[  635.846633][T27369]  link_path_walk+0x162/0x900
[  635.851326][T27369]  path_openat+0x1de/0x2170
[  635.855837][T27369]  do_filp_open+0x109/0x230
[  635.860343][T27369]  io_openat2+0x272/0x390
[  635.864671][T27369]  io_openat+0x1b/0x30
[  635.868741][T27369]  __io_issue_sqe+0xfe/0x2e0
[  635.873333][T27369]  io_issue_sqe+0x56/0xa80
[  635.877764][T27369]  io_wq_submit_work+0x3f7/0x5f0
[  635.882742][T27369]  io_worker_handle_work+0x44e/0x9b0
[  635.888131][T27369]  io_wq_worker+0x22e/0x860
[  635.892644][T27369]  ret_from_fork+0x122/0x1b0
[  635.897224][T27369]  ret_from_fork_asm+0x1a/0x30
[  635.901986][T27369] 
[  635.904293][T27369] write to 0xffff888119eda620 of 4 bytes by task 27369 on cpu 0:
[  635.911989][T27369]  selinux_inode_permission+0x3ac/0x740
[  635.917528][T27369]  security_inode_permission+0x6d/0xb0
[  635.922976][T27369]  inode_permission+0x106/0x310
[  635.927828][T27369]  link_path_walk+0x162/0x900
[  635.932516][T27369]  path_openat+0x1de/0x2170
[  635.937019][T27369]  do_filp_open+0x109/0x230
[  635.941515][T27369]  io_openat2+0x272/0x390
[  635.945837][T27369]  io_openat+0x1b/0x30
[  635.949908][T27369]  __io_issue_sqe+0xfe/0x2e0
[  635.954493][T27369]  io_issue_sqe+0x56/0xa80
[  635.958911][T27369]  io_submit_sqes+0x675/0x1060
[  635.963674][T27369]  __se_sys_io_uring_enter+0x1c1/0x1b70
[  635.969217][T27369]  __x64_sys_io_uring_enter+0x78/0x90
[  635.974586][T27369]  x64_sys_call+0x2df0/0x3000
[  635.979254][T27369]  do_syscall_64+0xd2/0x200
[  635.983745][T27369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.989623][T27369] 
[  635.991930][T27369] value changed: 0x00000000 -> 0x00000001
[  635.997628][T27369] 
[  635.999935][T27369] Reported by Kernel Concurrency Sanitizer on:
[  636.006080][T27369] CPU: 0 UID: 0 PID: 27369 Comm: syz.0.7889 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  636.017437][T27369] Tainted: [W]=WARN
[  636.021223][T27369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  636.031261][T27369] ==================================================================
[  636.063367][T27371] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.