last executing test programs:

5m56.560187745s ago: executing program 32 (id=54):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='btrfs_set_extent_bit\x00', r0}, 0x18)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x82, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15)
syz_emit_ethernet(0x72, &(0x7f0000000080)={@multicast, @local, @val={@void, {0x8100, 0x7, 0x1, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}, @srh={0x3c, 0x4, 0x4, 0x2, 0x2, 0x28, 0xb5, [@local, @private0]}], @echo_reply}}}}}, 0x0)

5m48.320278436s ago: executing program 33 (id=161):
r0 = syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000085}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TIOCL_BLANKSCREEN(r3, 0x4b67, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r6 = getuid()
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000f80)={{{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x1, 0x3, 0x4e24, 0x5, 0x2, 0x0, 0xa0, 0x36, 0x0, r6}, {0x1, 0xff, 0xfffffffffffff175, 0x5, 0x0, 0x4, 0x7, 0x6}, {0x480000000000, 0x2, 0x7f, 0xffffffffffffff7f}, 0x7, 0x6e6bbd, 0x2, 0x1, 0x2}, {{@in6=@mcast2, 0x4d6, 0x32}, 0xa, @in=@broadcast, 0x3506, 0x4, 0x1, 0x81, 0x10000000, 0xfffffff9, 0x8}}, 0xe8)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, 0x0, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0)

5m44.899836682s ago: executing program 5 (id=202):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18)
syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f0000000e40)='./file2\x00', 0xc50cc0, &(0x7f0000000080)={[{@resgid}], [{@uid_eq}, {@audit}]}, 0xff, 0x775, &(0x7f0000001180)="$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")
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f0000000200), 0x0, 0x4000000000000000}, 0x20)

5m44.673205277s ago: executing program 5 (id=207):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x7, 0x6, 0x4, 0x2, 0xea31, 0xfff, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000001}, 0x0)

5m44.656824007s ago: executing program 5 (id=210):
syz_read_part_table(0x5ea, &(0x7f0000000000)="$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")
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xfffff001, '\x00', 0x0, r0, 0x2, 0x3}, 0x50)

5m44.402833282s ago: executing program 5 (id=213):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
io_getevents(0x0, 0x4, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0), 0x1, 0x553, &(0x7f0000000800)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x4, <r4=>0x0}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x8000}, 0x18)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000dbd7000df9dbd9735f5edbb318a3bd500000000010000002c00f611cd8994034d77413dc957630e5400ed845255140002007767300000000000000000c1a73600000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r6, &(0x7f0000000000), 0xfffffd26)
ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401c5820, &(0x7f00000003c0)=0x8)

5m44.201711637s ago: executing program 5 (id=214):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg1\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfd}}, 0x14)

5m43.780912464s ago: executing program 5 (id=218):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x13, &(0x7f00000003c0)={@private1={0xfc, 0x1, '\x00', 0xfc}}, 0x14)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
accept$unix(r4, 0x0, &(0x7f0000000280))
r5 = dup(r3)
r6 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r5, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r6, 0x47f5, 0x70c7, 0x0, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r11}, 0x18)
syz_read_part_table(0x618, &(0x7f0000002200)="$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")
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

5m43.758605385s ago: executing program 34 (id=218):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x13, &(0x7f00000003c0)={@private1={0xfc, 0x1, '\x00', 0xfc}}, 0x14)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
accept$unix(r4, 0x0, &(0x7f0000000280))
r5 = dup(r3)
r6 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r5, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r6, 0x47f5, 0x70c7, 0x0, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r11}, 0x18)
syz_read_part_table(0x618, &(0x7f0000002200)="$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")
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

5m41.768804083s ago: executing program 0 (id=239):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000008201000009000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="02000031010025"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
ioctl$EVIOCSFF(r0, 0x40304580, 0x0)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

5m41.654139396s ago: executing program 0 (id=242):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
recvmsg(0xffffffffffffffff, 0x0, 0x40000100)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[], 0x2d0}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1709001000000000000001000000050007000000000008000900f100000008000a0000000000069c985a11c10521fb001fe2ffffff000000000000000000000000001400200000000000ffff00000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0)
lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a00)={{0x108, 0x2, 0x6, 0x106, 0x249, 0x7fffffff, 0x34e, 0x5}, "3b22d2261bad1a535b402eb85004e37e2cc2ccd8a73cf6293afcc743c844ae36719f54315a1b6042887a2d492f6c6027676091467af9acdbfaf4df90539d181bd03837b78da2cce1434b5a77eae8bb419a6d1b296a989d3e05221b1ee976da26386dec1b417ccc751d9ac0ba28bd0e8c00a261d77b65064c3e3c7a875d0a25545fe8c91f4d8791ae6c81257339a677a45c0fa217aa5be09caaa84f6fb38ee907ed"}, 0xc1)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r4, 0x0, 0x1000000000000}, 0x18)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000d80)=@newsa={0x2d8, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d5, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x7, 0x200}, {0x0, 0x0, 0x207}, 0x0, 0x1, 0xa, 0x0, 0x0, 0xcd}, [@migrate={0x180, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x31}, @in6=@loopback, 0x0, 0x2, 0x0, 0x3507, 0xa, 0x2}, {@in6=@private2, @in=@local, @in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2b, 0x0, 0x0, 0x3506, 0x2, 0xa}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010100, @in=@private=0xa010102, @in6=@mcast1, 0xaf, 0x4, 0x0, 0x0, 0xa, 0x5a6a3fbf194e4ec0}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private1, @in6=@mcast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x32, 0x4, 0x0, 0x3504, 0xa, 0x2}, {@in=@local, @in=@remote, @in6=@private1, @in=@private=0xa010101, 0xff, 0x0, 0x0, 0x3500, 0xa, 0xa}]}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x2d8}}, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x92)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4)
sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002280)={0x14, 0x803d, 0x107, 0x8000, 0x8, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4091}, 0xc000)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38)

5m41.565228067s ago: executing program 0 (id=245):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xcf, &(0x7f0000000740)=""/207, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0xfffffffffffffee6, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
io_setup(0x3ff, &(0x7f0000000500)=<r3=>0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
io_getevents(r3, 0x4, 0x4, &(0x7f0000000300)=[{}, {}, {}, {}], 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9001}, 0x94)
fcntl$setstatus(r2, 0x4, 0x400)
set_mempolicy(0x0, &(0x7f0000000400)=0x4000000ffb, 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x800000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x0)
pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r7 = socket$caif_stream(0x25, 0x1, 0x0)
sendmmsg$inet(r7, &(0x7f0000000040), 0x0, 0x200000c0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000400001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300009ea100008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x18)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r9 = io_uring_setup(0x2525, &(0x7f0000000080)={0x0, 0x4072, 0x80, 0x3, 0xfffffffe})
io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20)

5m41.135557187s ago: executing program 0 (id=248):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
io_getevents(0x0, 0x4, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0), 0x1, 0x553, &(0x7f0000000800)="$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")
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x4, <r5=>0x0}, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x8000}, 0x18)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000dbd7000df9dbd9735f5edbb318a3bd500000000010000002c00f611cd8994034d77413dc957630e5400ed845255140002007767300000000000000000c1a73600000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, &(0x7f00000003c0)=0x8)

5m40.759749423s ago: executing program 0 (id=251):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)

5m39.962303559s ago: executing program 0 (id=260):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$inet(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r4, 0x0, 0x401}, 0x11)
r5 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r5, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10910000000000000000000007000000"], 0x10}}], 0x1, 0x80)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080)={[{@barrier_val={'barrier', 0x3d, 0x7}}]}, 0xc1, 0x7b7, &(0x7f00000007c0)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x34)
lseek(r6, 0xfffffffffffffffc, 0x2)
getdents(r6, 0x0, 0x54)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0)

5m39.876729711s ago: executing program 35 (id=260):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$inet(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r4, 0x0, 0x401}, 0x11)
r5 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r5, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10910000000000000000000007000000"], 0x10}}], 0x1, 0x80)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080)={[{@barrier_val={'barrier', 0x3d, 0x7}}]}, 0xc1, 0x7b7, &(0x7f00000007c0)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x34)
lseek(r6, 0xfffffffffffffffc, 0x2)
getdents(r6, 0x0, 0x54)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0)

3m20.186438367s ago: executing program 6 (id=3140):
r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x2000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d)
r3 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4)
io_uring_enter(r3, 0x66a8, 0x4000, 0xf, 0x0, 0x18)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
mount$9p_unix(&(0x7f0000000200)='./file2\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x1002110, &(0x7f00000003c0)={'trans=unix,', {[{@ignoreqv}, {@access_client}, {@fscache}, {@cachetag={'cachetag', 0x3d, 'sched_switch\x00'}}, {@version_u}, {@version_u}], [{@smackfsroot={'smackfsroot', 0x3d, '@'}}]}})
sendmsg$unix(r5, &(0x7f0000000580)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20008000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6)
timerfd_gettime(0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x2814c00, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x249, &(0x7f0000000a00)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x105)
pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

3m19.851939783s ago: executing program 6 (id=3144):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[], 0x44}}, 0x0)

3m19.797043475s ago: executing program 6 (id=3147):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x208, 0x4)
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
lsm_get_self_attr(0x0, &(0x7f00000004c0)={0x0, 0x0, 0x106, 0xe6, ""/230}, &(0x7f0000000280)=0x106, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r4 = getpid()
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x48, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a0000000600010016"], 0x1c}}, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)

3m19.647619088s ago: executing program 6 (id=3151):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40)
ioperm(0x0, 0x2, 0x7e)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
exit(0xffff)
tkill(r4, 0x12)
wait4(0x0, 0x0, 0x8, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00')
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x280001, 0x88)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5)
sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x255}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x81d)
faccessat(r6, &(0x7f00000001c0)='./file0\x00', 0x2)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8a}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$cgroup2(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x1840039, &(0x7f0000000d00)=ANY=[@ANYBLOB='nsdelegate,nsdelegate,net_prio,cpuset,uid>', @ANYRESDEC=0x0, @ANYBLOB='(measure,context=user_u,\x00'])
mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0)
acct(&(0x7f0000000140)='./file0\x00')
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in6=@empty, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x42000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0)

3m18.745431535s ago: executing program 6 (id=3186):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r4, 0x0, 0x4ab}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000380)=r1}, 0x20)
shutdown(r0, 0x0)

3m18.207269805s ago: executing program 6 (id=3195):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884)

3m18.179213677s ago: executing program 36 (id=3195):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884)

1m40.62929657s ago: executing program 4 (id=5594):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89\x89\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zpo\xd0\xc7\'CT')
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (fail_nth: 1)

1m40.367033775s ago: executing program 4 (id=5595):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r3}, 0x18)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0)
r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)=r6}, 0x20)
write$tcp_congestion(r4, 0x0, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x28080, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000)

1m40.366599945s ago: executing program 4 (id=5596):
r0 = syz_io_uring_setup(0x10d2, &(0x7f0000002100)={0x0, 0x7735, 0x80, 0x0, 0x351}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

1m40.347171125s ago: executing program 4 (id=5597):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000d8231200000000001ea00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
setxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0), &(0x7f0000001240)=@md5={0x1, "5ea089cd111d03109d8e2a4d401d5486"}, 0xfe7a, 0x0) (async)
unlink(&(0x7f0000000000)='./file0/file0\x00') (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0, 0x0, 0x7}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94) (async, rerun: 64)
r1 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xece7, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x1007, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x0, 0x0, 0xffffffffffffffff, 0xa) (rerun: 64)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000380), &(0x7f0000000ac0)}, 0x20) (async)
r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000002600), 0x2, 0x0) (async)
r4 = eventfd2(0x9, 0x800)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) (async)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000900)={{{@in=@multicast2, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000740)=0xe8) (async)
lstat(&(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002940)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000140)="8847a46c2363005f1f7835f16a945d137cffd500f65439d3f9510a28fb4d82643623cd56a234225c8c", 0x29}, {&(0x7f0000000180)="aa0ba5448f57b2d5d442d5e2ca3e28013e6f60d0932b7ba0b021aa12f59d866a5dab63bc4655ad5abf18b253da04d8a7ef047ef8f17dc27ca51ea035f5a8e0421277f0f21d37ba62c17baa15c3a52c63e1", 0x51}, {&(0x7f0000000200)="469a5764bca193d9bbf0a1adf19fc9fb563348ff0c2056dc9065140650e1c3914330d0fb2e030cf206d2d9f1fd74d6d91ad099df7394c726a50c012793d46101f220094d25a51045a904ddcbe7808120878f1a46e8e6fa47d72c46403a148f2a81f36971c8c19f6688080a38da3057f82e07a15d665430003cb6873d9fe11b3a1b3788d5ae5d5ad999d19345c276aedcb14656043f8f00a63ad5c1bd327b219abd752e87cb4fd47e66bde37eb008ca7b4fd6078f2b1e7c0772bed3727319e0701e1876c46fdf1d1503eb8e7b936981357a90a0449e10297bc7b75479c958b20bd4904da0a66cdf09e87a19b90da025", 0xef}, {&(0x7f0000000300)="87e5d8d913167f7f8e6fbe7f39a21882ce13fc7bb5b50ec376ec3d019f32170aa3697d397d0224df6b51116411eda1c793509ad30ccad145714efb10c4c5dc263a91ab165a2dcb95c7ccda3adb4eab58dfd035f3a808238ca7e0f823db972225a7cfec69556cf979a4f3ae30f55bd36703722e5d3dea1e5fdf60cbfaf5de38b469f20afa65967778cd8d4cb3306f09f70017dea2347b44a34086ef30a9b9d8c9e06ff2872675be1317530c37ea30654ce50a4b49227ef4", 0xb7}, {&(0x7f00000003c0)="a1cfdb98825197cfee47be4c7b4dbdc4a2d207362229671dce5e03e8ca81d2d94f47fe97831fa9cded6f822c3ed572c6e661930a7d1efdc4a79e7048f4fca8be0e276b2f0aaa9143f5e040d85bf2a214078f055c89f50e2a19fb359fd31ed1387b63c3c8faca57a256d15d80f337c4b55b9dd1325e93ab548b284b729fab4ac9fc742058434e2252694c27e7cfe9ed60527909b6439fa2dfb04c4c4fd5abd8d944ca2cf88565baa14bdf086cae4ff0890e0a1322327a89647080", 0xba}, {&(0x7f0000000480)="9a269693772c4b8e1c670f928539ce50336630418e8b380f08af97f617ed6c69506acb02228d4b40a2d773aca6c9da8945cbd35b50319cdae217051490cccf799cdeffd38d5771bf8092cef04691faab3b815fce30f95d8cebc26091", 0x5c}, {&(0x7f0000000500)="54868697f4facb353dc487cd72ff5f3f9e51bf71ba6a8219cf0bf5572b48491bfed11b353d943d4550d3223c53a744ab1db5bada392fc129a538325c92ca5ea6963f70521dd10a", 0x47}, {&(0x7f0000000580)="8539489603a75ea69144515bd4e2e1718fc78274e7616c81b2581fddd34cc3ffd74964b4a41329f3251421af7ff5e990efc8bf48560f61e863fa0177e0316dca847bb9c462cbcf631b96587d6d447a5479b71c0195172f253b2d8bad3d2a2dd5e4079ded8267efc8ec38faa564cd13216c02e39f500a13c18161400654675f499a5bae5044b801301c4405dd7138a32072", 0x91}], 0x8, &(0x7f0000000a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80, 0x4008000}}, {{&(0x7f0000000ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000b40)="eef570a2367b99ee0c555857211af9b21af09e449a250b981e3de7538b4930c2088fb0b534e241785d33721ad285fb48c81bb31bb7da487920dd3a91a977aec0b4e56597021fedb6afc3b7a324d6117fda66d9e132a612c6668979bb09818eaa633c3f79", 0x64}, {&(0x7f0000000bc0)="ccab284c42f023575021483ff3ec776ad4e323b4", 0x14}, {&(0x7f0000000c00)="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", 0xfc}, {&(0x7f0000000d00)="bb42bb619d1eb55d3bab92dce084e3d1ed1bc8968a6bbb2066d77fe3fb78a702a8f53e10225622a7c123a4dbdbaf73087e10155522dc00577ab816632722395829526a14fe4605f4d50781bf27b70bb7601fe69dd83dce3994d60c620aa2e69e41d4b78129c935ba60144bae2ed6377adad8d0a921b0d77d3e18ec3900d0594a88ceed2ee3c67f794a17b9d1aea60f262a4ecaf26d212658b0b8b8ef7a0baed6ffa07bc98fc58d6d8cb98f70f3da91762e17d94011b560671b38ad570fb05d53a1177e4f871678aae84460e9740c6e11066941379eb1926e", 0xd8}, {&(0x7f0000000e00)="0e6a6ee08b3ee628abdc18f8463f95837232511895916ccd5df291478b447e09425c3a8899bcfc5c86fe56461e12d307b17579e745d3030bd714b9d690a5b5cc6f17712d5b80aed0aefb216ddb0d1c86439b9e9c7d1427d0a5e90489c8b9878a2d5597b8f596297451959b8bfa6c47633eaf69125cb07a74b354f1327d5ea9eaa5749407078292bb94f375ec24ec5d06c9ee71f7bccdb5", 0x97}, {&(0x7f0000000ec0)="30c2397e5a768665f3221f7b9f095ecefc508438042fcc93ae299c7526191af3699813f5cbbf01ec9fd9c42cfc6aa13bcc383d2b631e255aba24ec8a9309c00e5fe47a30f118e6974b9d8fd4eb290385c4cb174a1815f4a3179f46da9faf451d21902e10f772edf0e11c6a281e11168648c09afc0ec2f837a000d98d74561eb1c8f27287f37add4c0eab0b73db9e41ebf69ad3", 0x93}, {&(0x7f0000000f80)="1ebba4699e22a9b7a1cfa15e9560ae8d1160645f4a641374b08376cde1c356f2af95361a4671c7c7145229f6813916365631817b1c53503c6fb3bdfc712aa522f3498e761462e76de5a4e949c3547041ce9f6cdb11d10a4f6d29f186cb295865f4234bfae67cc39553fc6b40014195749fb20cc5f80d09712006370b9ee9f262f5977a4945fb7cf78416e55f77a7", 0x8e}, {&(0x7f0000001040)="1ffec327e27b1aee217529bfcb00832020d23db102fb36fe77482f42e011025ffa113c4db5c04d69d5590e1350676bf2bf67f4bf3fab68681b71fdcce8a3629dc39146820c5919f95cd7f33fd51f1e9d3bbad48a8c4f77c1", 0x58}], 0x8, 0x0, 0x0, 0x4040004}}, {{&(0x7f0000001140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000012c0)=[{&(0x7f00000011c0)="812f3539f4f1b49b539fe52f8bd2a2cfc0947ba19cfefbf782fd171e853750a4e23196bde2f75e6a0d07a9d69b28d352abc8c3fede6eae9adc81eebc0058abb33edef0a614746aa8f07fb9ac9abe3c3cb615d2ab43f0cba89af523f561", 0x5d}, {&(0x7f0000001240)="b3e6a3f3f924676d8ba26f82afdca0de1388c782b1affc96d22ba890656136a1e7f91f0ccbdfe1867663cb7a230fe0b9ce0dd293b1171815f979980b1a9d53d20805b3db673126ee20225c7d111db4d7cecf14d0c82318", 0x57}], 0x2, &(0x7f0000001640)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78, 0x20004840}}, {{&(0x7f00000016c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001740)}, {&(0x7f0000001780)="b0fcd4765941c99c9beebe00278fcb2e4aab1e7f0f07754191fb4fae1fce04f5f02baf402bb613d6ceef081378ed674d925cf5181a7ac54864458a4fda44ddf3642f1a9e1c187ea3fad4a64157428226608d5842baad6abd741ef7cb9adc9d104154e2abde1fdda07e8ee445c4459d9f54f11688113068a7f2d0f5d38e3353", 0x7f}, {&(0x7f0000001800)="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", 0xfc}, {&(0x7f0000001900)="beddac613e6274f3efe809d119266e85a3c9a96bb86c9ee7fe794415a8417b004c6c7947ec979f2a0f53f25eed3acbd0487f8b879c6df448b575c6541b725dae23baff6407dce04aa6a5cea01d990d27706f6c1c395c0d07388abba495a6a4d10820315ff03bc595e93412eecc1929c5b7a8ba6ee8d5f3a89a642be9865b83474f25b95e40aa6d366a1ad8baf71201a16ea8635a73d6c60db8ee71afd152bbc1e65b96f2d814a0d1efac1f78075211ae029f2ef004b9861862ad4f4aa5a42eaec636f216e0f4cc48ce073d01da0282dbc323b27b6051010b94cfe2439f4bb4a3", 0xe0}, {&(0x7f0000001a00)="3b1adc669b2a10f98d32e11c0f45383b1fc7a51e8e8fa581c6540e30046e6567200f4cfc4cb7001bae3ced65f9d6d6f8262786c6b97d3fc24dae0c8a9d9f42e5c2ea5b66738d40d08697cea208588f2626b2a90bbe21daedcefcfe7b20b2f35d", 0x60}, {&(0x7f0000001a80)="eb822dfa390cf1bbc74ec4abcc30ccafcfb1407a3401f4691509da8c23dc1b12f85ff7339710dcb30535d66a7b5d52e5dd35de4275c8942b675e917072", 0x3d}, {&(0x7f0000001ac0)="9c75584debb0f1b8cd1e07a2eccdfe1cf7142da61fe802c532048af52efb9d54677e0d51d81f6a0b9f8f8fd2eaa573eb368b8d00a43e545a13e873f5b44ff98918794298c01a1de70aa1b3414585453ef4a41e245936df43fe3885530ff16efc89791c94efbfe1b508b5fd85f5f604d33c2ed707b897c1a1ed0c9d67b130767e6ce7efd8f8cecd95d5366f4126092434271d0dc18790467fb8e98d8f75f933f4394abaf7758e5055ebc5a49992258c97c877458ba68358fbf55b3470e18ab445e90321192a060fd4bda05b1cefd3d8c2ecd825eecfd9de8e9b85", 0xda}], 0x7, 0x0, 0x0, 0x800}}, {{&(0x7f0000001c40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001d00)="52a150b167f4f20fec88d1a0630260fbafdd1cf80ff73e2252ea1fa207234f66f0d80706f4aadf679eb9fb473c8210eda273f7116857aa5ba008c9f56dc60edca8afc132dbe0388120bf9fee71587e1fca912e639c25ec32b3dd6d814776a02e5ac76da08630b3745ebff6de5149e0e56de1e8ae83c7350941678d44c1119d77ee119378ce0aa5a42bdbf780c0e9d34fefabcb57b6eafc96cf953f229d73fc439c6d625707fef17df5254bc36192c95b7b0c3f", 0xb3}, {&(0x7f0000001dc0)="35ffce1a9d3b15da05f89d7604d5ac01f333f2873e18d864750a3b936f8fa830d3d378a8a3df7e1440d82c05c33dfe20d40fa4d8409d0cc74387715b2498349059fb21fd5b96fa59b2ff", 0x4a}], 0x2, &(0x7f0000001e80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40, 0x1}}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001ec0)="81d4770068b59e68618b3d67d63d6655180207279ac06fa42577e7fd2bed5513a6125c23f2959b0406b4e950f2aa42d3cfcf5bbaf8808b2eb2b758f128297dd54a10e7011e6dc5e7462515b151d49991e54f0df53eb8a537d6a43b3f6a0c3688707e5b5f8efeb37af593d0df3b21d88e2d4af826202435523c479078c05453d4039ea28e8a438ccc7b8c11f29870b960f5779e297b530167edc774b461e64d3e32a10ff32bbac9ba6417e475fc80160d8d3a4c27c60d6d90ccb34232b7e665f2a8", 0xc1}, {&(0x7f0000001fc0)="9ca094af3ae9", 0x6}, {&(0x7f0000002000)="f44421e42c25b985db949dc14d6aa9e1df3db92b4ea37594825c10b6f2ae0fd968682dcbd1f741191ae2a0ca45c490eacfed5520219c3d4e19af44ecf978a3e2cb1ba94e4f231998c1ec2e38d3f699fda1a175c1b4bc0f874f1b9e33eab7a3984af7e68ba3d1bfa37159d1cee6ca5528439be14c937540c6db1a7d77f11091bce1b861ff31e4f465fc02ba5146710614a30ef5b5f65a89dc794d4d4dd901cab84b8416859228faec70ffdaf6", 0xac}, {&(0x7f0000003c00)="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", 0x1000}, {&(0x7f00000020c0)="449bdce4232ab10bd286e5c04c296c0811412f9ab478103260b3173a13fd1314549d4a82e072b89abb976d0450c73c80e04d414336efe294de012ad2b998f377ce56c7b41b3a54090f2beb42852a86e020f6fc412d066218241b18939143ad20c1268b31c56a383ca9ab0441ac90e0681bccccdd01c407b4535eb8d6e045e91ca07c575da19f8fbc09a01dcb50f7e4f2b67e3af9a5bd9be93220f45dd83adf3c034b73cdbf0fcbb83b17f4ab44cf9acb34b3f135be3ab5818b8ba730621fa755490d0e9fc6b13fab01e4613d9a70c0fdc7eaac805d9da29136a6b3074218c525e28a5692e0682610cfa055a2963c91a76d4021ef4363a7945cfe2c0a", 0xfc}, {&(0x7f00000021c0)="4fa2aa23c6ddbde1d885654dc5901bd608bab61cc3d21f010dd5509915a11fa392bd9e185d912036b7302afb4a3c397c89bd98d051f1bf09f59a22b9e66fb2f7ede7a47b620985cae844731733bce33dc4cefc887e6384c01a6d40b17d23fd863ef5355835efe822b96e377ba9564a185c86e86d9d76074732b8344223fe7938ae69a2232b28a60283c8d03198f34d294d525bc0a950b3b401a963e9b2168674414835f151744745f2bc31fedf52350c5f6666ec60033ffdc3ac2506ee8372469b414c49d0daa91ded1efc88ca12c72c2b635d0b3916c92cafa484e1c808f72f", 0xe0}, {&(0x7f00000022c0)="ad6ab1d60daed73a3cf529bbad78104966c75d6e12d4ab5dfcae6360fc761f43cf1fd0309211683ff583360770e9a935973dba076149a3c6", 0x38}, {&(0x7f0000002300)="93f1d98569e1b87c6fb76516a54b7e462c83443e8ae76808e007dfbd37897987776e0c24dc25f72484265af71ca464016e313884dda2cd576af5e3628959af535de0815fabe0aba8149092a05301fea78f06977f24cf0dadff1b836d86728fa6695f6cfad06a4d0f2ea202ca253892ea3bf918fcaae6591b0a3ae184f3", 0x7d}, {&(0x7f0000002380)="e7c5f7a3190fdbe4a5bdc42c95a66edd9d67953845761f57d660690ed5c58f220056cd85f297b1ca3b7ca76fb066b37e63", 0x31}], 0x9, &(0x7f0000002840)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r5, r4, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}], 0xc8, 0x40090}}], 0x6, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000c00)=ANY=[@ANYBLOB="02000000010001000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="029d5500", @ANYRES32=0xee01, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="040001000000000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\f\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x2) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000300)=0x9, 0x8, 0x0) (rerun: 32)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x20200, 0x83, 0x4}, 0x18)
getdents64(r10, &(0x7f0000000240)=""/117, 0x75)

1m40.177559359s ago: executing program 4 (id=5603):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x10)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
link(0x0, 0x0)
add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_elf32(r3, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x7, 0x2, 0x0, 0x2, 0x2, 0x0, 0x6, 0x146, 0x22, 0x4, 0x9, 0x4f68, 0x20, 0x2, 0x7f, 0x44cc, 0x9}, [{0x6474e551, 0x3de, 0x101, 0xd, 0x4, 0x1ff, 0x9, 0xb1b}, {0x3, 0x7, 0xc, 0x75, 0x7e2, 0x7fffffff, 0x8, 0x7}], "f8308fda7c2cdda732dca1e3b84a4cdaa0fa29eef98acc84cfd274efe308cb1457601fd7236ed2c0c6fb3e6d7aa9a9fbaefd00f983b416bc50947add", ['\x00', '\x00', '\x00']}, 0x3b4)
syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0)

1m40.090086881s ago: executing program 4 (id=5605):
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x3a, 0x1, 0x8, 0x0, 0x0, 0x5, 0x9284, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0x1320, 0x1, 0xf2, 0x8, 0x0, 0x800000, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x1}, 0x28)
socket$inet_tcp(0x2, 0x1, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff0000}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x0, 0x1}, 0x20)
unshare(0x22020400)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)

1m25.058257174s ago: executing program 37 (id=5605):
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x3a, 0x1, 0x8, 0x0, 0x0, 0x5, 0x9284, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0x1320, 0x1, 0xf2, 0x8, 0x0, 0x800000, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x1}, 0x28)
socket$inet_tcp(0x2, 0x1, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff0000}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x0, 0x1}, 0x20)
unshare(0x22020400)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)

1m20.027044352s ago: executing program 3 (id=5859):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000}, 0x18)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pivot_root(&(0x7f00000001c0)='.\x00', 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

1m19.995001143s ago: executing program 3 (id=5860):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000080)={0xc, 0x6, 0xfa00, {0xfffffffffffffffe}}, 0x10)

1m19.11123582s ago: executing program 3 (id=5878):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080)=[{{0x4, 0x0, 0x1}, {0x2, 0x1, 0x1}}], 0x8)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010)

1m19.092341221s ago: executing program 3 (id=5880):
syz_emit_ethernet(0x66, &(0x7f0000000c00)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800303afffe8000000000000000000000000000aaff02000000000000000000000000000187fc907800000000fe8000000000000000000000000000aa0e02000000000000000020000000000101012025b07f3c58"], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
lseek(r1, 0xf9ff100000000000, 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r2, 0x0, 0xffffffffffff8001}, 0x18)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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")
r3 = creat(&(0x7f0000000100)='./bus\x00', 0x4)
r4 = openat$incfs(r3, 0x0, 0x80080, 0x7)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xe, &(0x7f0000001180)={0x33, 0x0, &(0x7f0000000f80)=[{&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000000)=""/35, 0x23}, {&(0x7f0000000480)=""/30, 0x1e}], &(0x7f0000001140)=[0x8000000000, 0x1, 0x2, 0x1, 0x0, 0x60bc, 0xc6f2], 0x3}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg1\x00', <r5=>0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="85200000040095000000006000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x60880, 0x25, '\x00', r5, 0x0, r3, 0x8, &(0x7f0000000240)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x8, 0x200, 0x7ff}, 0x10, 0x303f1, r4, 0x1, &(0x7f0000000300)=[r4, r3], &(0x7f0000000340)=[{0x0, 0x3, 0xd, 0xa}]}, 0x94)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280), 0x0)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x4}, 0x18)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r9}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r10, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x25)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES8=r10], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="04f7659ce6cddb4107baf96f66ef713c1c20e414ab7858b3c5c00f44b1ac43f362b9287fff497992cf8555a14645f7e977a30bf43a00c1d68dfedea05934babe2061f7e0eb442a9bdb9276a3a417fd18fc077dafe984b3ab65fd9d024135ef4fe84951c4505fdb59ac7dd031d739e39760989085731b469bff7b219e44c22644747d01519a656745b5a9df2a54880eaf8538c4ed4c54698aa5297c30f247d297446adbe06ddb20f163e8de428315cae4630668ccdd0c733bc9"], 0x9)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d530494c)

1m18.990225482s ago: executing program 3 (id=5881):
r0 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x21e}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1})
io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1})

1m17.112142879s ago: executing program 3 (id=5904):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000}, 0x18)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pivot_root(&(0x7f00000001c0)='.\x00', 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

1m17.04685981s ago: executing program 38 (id=5904):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000}, 0x18)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pivot_root(&(0x7f00000001c0)='.\x00', 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

2.54916117s ago: executing program 7 (id=7266):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000140)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

2.380320773s ago: executing program 1 (id=7268):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r1}, 0x18)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2)

2.279325505s ago: executing program 1 (id=7269):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000000000900020073797a310000000005000500020000000500010006"], 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x2080)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)

2.161904978s ago: executing program 7 (id=7270):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24002de8)
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfcbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x81}, @NL802154_ATTR_WPAN_PHY={0xfffffffffffffe6a, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20010)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x800, 0x4)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000400)={0x0, {}, 0x0, {}, 0xc, 0x0, 0xffffffff, 0x18, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d7469166f4f4e1df82d00", [0x6, 0x9]})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="30000000680001002abd7000fddbdf25020002000000000004000b0014000600fc010013000000000000000000000001b455a0aa13e16e7c1ccf13d24befef7de43b5a55c9343380b75841f9e26fdc3bd5338979b5d3c0a8e86de5f3a5fd054af9b2f9f86ba408cca62a3de2c55973ea0208e7cb1d850b648023f3a7b2d52b695fccecd3bc40a5551618"], 0x30}, 0x1, 0x9f, 0x0, 0x20004002}, 0x40004)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
syz_open_dev$mouse(&(0x7f0000000000), 0xffffffff, 0x24a000)
pwritev(r1, &(0x7f00000003c0)=[{&(0x7f00000002c0)="fcadb90bdfcce341b989dbf3b49a0e2caecd134587820d0eb8f48d2ed672b0e76d4dafc96a6144734ac392cceac36400a8cfeb6c1b8fb0a1058b804322ef6b77fc677d421f10d9abe6ccb61ec91df774cee88f14ce1f6715acf004cd562ccb151d", 0x61}, {&(0x7f00000004c0)="a00811a62663966b0b575c0261b596bd9e72dc97c8a64d46422b3a7f02c0325ed07657d0407a28c955ed8517ffc54773a8e0b93f49ecb4bd8e66e3b40ee7222dd93906654131cbe68ccbbdebdaf9a513ab308b11f5f597a6ca88b6c366d7c60f102f7768f114778c09fcb649074f3a4d6d059c6fbeb3fdcb70d8b9b69a97c71345e19834b57c9fd34232ddb010b78bf095ae2d6c2511c3ebf97b42ea7130aa4090c0b64c186be4e8ed8489ff026cf3eff37504547b362b61e1", 0xb9}, {&(0x7f0000000380)="1503606e385dd5372c0c798b31c82bae52be8341b902e3953786711438b9a8", 0x1f}], 0x3, 0x7fffffff, 0xb)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

2.013173151s ago: executing program 1 (id=7271):
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000e00)={'syztnl0\x00', 0x0, 0x40, 0x8, 0x9, 0x202, {{0x30, 0x4, 0x0, 0x0, 0xc0, 0x64, 0x0, 0xfd, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@cipso={0x86, 0x3f, 0xffffffffffffffff, [{0x1, 0x7, "255555f1d9"}, {0x0, 0x10, "f8ad2b292088e76e849d46ecd29c"}, {0x2, 0xf, "888ccee6bf62169c82d02d7246"}, {0x0, 0xf, "5e00d8259cc028eae108e4de64"}, {0x0, 0x4, "8f79"}]}, @end, @ssrr={0x89, 0x7, 0xb7, [@multicast2]}, @generic={0x7, 0x6, "92f6d866"}, @timestamp={0x44, 0x10, 0x4a, 0x0, 0x3, [0x66c0, 0x8, 0xc04]}, @rr={0x7, 0x23, 0x72, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x3c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x2c, 0xc6, 0x1, 0x2, [{@loopback, 0x4}, {@local, 0x4}, {@rand_addr=0x64010102, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@rand_addr=0x64010100, 0x4}]}]}}}}})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000fc0)={'filter\x00', 0x0, 0x0, 0x0, [0x8000000000000000, 0xffffffffffffffff, 0x3, 0x369d, 0x7, 0x3], 0x8, &(0x7f0000000f40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, 0xf8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0\x00'})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
listen(r3, 0xfffffff8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10)
close_range(r3, 0xffffffffffffffff, 0x0)

1.734143466s ago: executing program 7 (id=7272):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r1 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4)
r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}, {0x5, 0x0, 0xb187}], 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x5c})
r5 = gettid()
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
openat(r9, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r10 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', <r11=>0x0})
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r11, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0)
r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200), 0xa0000)
read(r13, &(0x7f0000000200)=""/209, 0xd1)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9, 0x0})
io_uring_enter(r1, 0x47f9, 0x4db, 0x0, 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000f14010028bd7000fedbdf2508000300000000000c00450069625f73727074000b004500736d635f69620001090045006973736d000000000800010002000000080001000100000008000300"/92], 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)

1.604920359s ago: executing program 9 (id=7274):
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
lsm_get_self_attr(0x65, 0x0, &(0x7f0000000300), 0x0)

1.56279855s ago: executing program 9 (id=7275):
connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbf8}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x128, 0x6, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xe7, 0x7, 0x1, 0x0, "66518ffa66ce6b2ddd7c6b65c6f536607fe63f00e5db0f81547bb9cd391b85a92d0d2c7e6c7a58d0c0162820ab594448088eb6086fee079fa5afb5d67a5c7d5dbeb68f18b2301c858adec224053ac56e95eafcb9fd5a4124c8242ea3f0c1c5b17fdc07f1da430f7370986d448ee7b5ffc4171b219b3d6de5e3408ff2b870844b89c704056daf95becba101766d4d065819ef13953aedd4b4e01cab507326148abec9f27dad478ef7ee8901c9325a0187e296b792b514360893c24cb078deca3220158b0ce5334d45ebdbc0a124b5e7375da46151762f49f892ad7ac0c28b6c36bcc1bc"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x90, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9b5cb57}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp1\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x244}, 0x1, 0x0, 0x0, 0x4008004}, 0x84)

1.51845022s ago: executing program 9 (id=7277):
r0 = syz_io_uring_setup(0x3b51, &(0x7f00000006c0)={0x0, 0x7758, 0x1000, 0x8003, 0x1bf}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000600)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1})
io_uring_enter(r0, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0)

1.381601783s ago: executing program 9 (id=7281):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x25)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0)

1.301957534s ago: executing program 8 (id=7282):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, @perf_config_ext={0x5, 0x7ff}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3, 0x0, 0xf}, 0x18)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0xfffffffffffffd15}}}}}, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@loopback}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@private0, 0x0, 0x2}, {{@in=@loopback, 0x0, 0x2b}, 0xa, @in6=@private1, 0x0, 0x5}]}]}, 0x23c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
acct(&(0x7f0000000240)='./file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000480)='percpu_alloc_percpu\x00', r2}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='percpu_alloc_percpu\x00', r6}, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000e80)=0x14)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f000000adc0), 0xffffffffffffffff)

1.277955205s ago: executing program 8 (id=7283):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000140)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

1.157983517s ago: executing program 1 (id=7284):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x800}]}}]}, 0x38}}, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0xb)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', <r8=>0x0})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
connect$qrtr(r9, &(0x7f0000000280)={0x2a, 0x4, 0x8000}, 0xc)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0x1, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x4)

1.04714072s ago: executing program 8 (id=7285):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r2, &(0x7f0000000100)="b8", 0x1, 0x2000c855, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x9)

990.288351ms ago: executing program 8 (id=7286):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000001140))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7f, 0xe)
write$P9_RLINK(r2, &(0x7f0000000080)={0x7, 0x47, 0x1}, 0x7)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000000c0), 0x0, 0x72d, &(0x7f00000014c0)="$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")
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r4)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x800, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x6, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newtfilter={0x18f0, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x18c0, 0x2, [@TCA_ROUTE4_POLICE={0x50, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0x10000000, 0x5, 0x3, 0x6, {0xbb, 0x2, 0x1a00, 0x101, 0x7ff, 0xe352}, {0x0, 0x2, 0x6, 0x2e6f, 0x4, 0x3a3d33a2}, 0x101, 0x6, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x937}]}, @TCA_ROUTE4_ACT={0x1700, 0x6, [@m_simple={0x104, 0x15, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x831b, 0x9, 0x2, 0x7, 0x5100}}, @TCA_DEF_DATA={0x6, 0x3, '/\x00'}, @TCA_DEF_DATA={0xd, 0x3, 'nl802154\x00'}]}, {0xa7, 0x6, "ae00103ac8208342b894f60fbc1fbf8dfd3586b26fd13f07dcd752d7a948558ed560e8372c682b48677b64e32d00522ba4d5bd87072729ffba4fc11fc8efcf6ac8b13873de8dbfee9c2411efc588beb7c0136fe2cf753b739f28b7fb043412a12f65b1fa2d3641d409cd14bbdf0dcfcc1f9c759e3d1e45a206ac644470991f1589dc992f9f68c551778b159fc8f1f630849a3c80c80da80d0f4bb216cd0b1a521ce932"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x14c, 0x20, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x6, 0x10000000, 0x0, 0x4}, 0x40}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0x2, 0x10000000, 0x4, 0x101}, 0x140}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x7, 0x4, 0x9, 0x1}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x5, 0x0, 0x526}, 0xfff7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd9, 0x5, 0x8, 0x200}, 0x3}}]}, {0x8d, 0x6, "403fba451250e9fb67500e5aba04f8a4dd2a66bd1ba1b130d37dbbc88a732a81c034892c2a3822d03f9c866981d7cb0c6dd3c975bb6ba6f14268ba699087d1eb67e5279dc98b2505650ab570a3d74b3b2e9abe76f915125f74e324e83350902d5b114920f2658e02184f70965daa0b927c6f2afa3261bfda5a213974e95aae48640bbac1feea0b17c7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x565fb86767a5d35, 0x3}}}}, @m_gact={0x198, 0x2, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xb9, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x3, 0x0, 0xe85, 0x7fff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xc00000, 0x3d, 0x8, 0x6230, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x19ca, 0x10000008}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x265, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffff8, 0xfffffffd, 0x5, 0x9, 0xffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x299, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x21ae, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xcc47, 0x5, 0x2, 0x100}}]}, {0xcd, 0x6, "1770abb7d40e172c84c7789d40c33186c7bc7870451d71d1994a8574cf74d695e164953bc6ae5e7ed54b145fe5f76096fef089053c5c78f4fdaf09ce173ba3a5c9ce184252c440e37f121660267c3dc8982d202821faf451236919c2979520d143d06762d1f8c66db2cc8d7ec55a4cd8a972d6fc1f3e7b942b860e8f1465bf0f32b75a7724c35c3ec84d232ef447f157c63856c72fab02a2a6d699feac7465c10ef5cf09cb0a6418fc5f308ff68d53d3fee07be99d63d09e5e492dc3a1da2eb95bcec08bcf9ed28936"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_simple={0x110, 0x9, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '-\'\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x34ba, 0x80000001, 0x20000000, 0xb, 0x10}}]}, {0xbc, 0x6, "55d024ec005f5eae26df03b93f2cbf7ac0efff5ca238beccdc25fcfaadb7b7f3536101f8bd42eaf9e67de9f5f37bc26a4f0913a99ac0317fabe541031c2c2b8c8565b5c2aaf51070fcbd145e92987b6ad53fd10287f89c86234ee983455f8911ff4f065e47bb2a94d7bae78ac3cef732fffe979ca2215e2fe5b53ee63b7a673d0bbca40ed8d09b099a6b8768a885aaad55db2f233163eb93353cd0e6ab973e81305feae15bdc8c328d1e2f426ba4c8fb34646d6b0329ccdd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x1114, 0xa, 0x0, 0x0, {{0x7}, {0xec, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0xac, 0x6, {0x5fa4, 'mangle\x00', 0xf, 0xe63, "32cdd0afd7774fce062ce06ab15c0da05783c26a2f273870d2d29108c75fc85b537ed65710fe30fd68927ee5d49065a246d7020db631c8e2dea9c059ffdf883761ba2860b0bdbc997fb581990ffcada08bb11c727fb132fa435782b0d4ed2b6cdbb9ce93365a03f7c5044f6eafdcf53f02178fae51635c4938393a5fdf2a1eff2b97"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xf0, 0x1c, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x80, 0x1, 0x6, 0xffffff00}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x9}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xc}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010102}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x9, 0x7, 0xfffffff6, 0x8001}, 0x2}}]}, {0x67, 0x6, "4a72336ac21530b35d2c4d60b2c6b89169623213deef3c18ba6893dd805d0a442e8c4d71d37e0093448c59d692d760ab5b4ff525a6f602065882fcaa08f145cd1c297f6514673de8437cefe95ad6d279ddee6c1e51e71cf3c6a2c4618e5475867f45aa"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x2a}, @TCA_ROUTE4_ACT={0x164, 0x6, [@m_csum={0x110, 0x9, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x5, 0x6, 0x800}, 0x3a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x4, 0x4, 0x2}, 0x7f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x20000000, 0xc, 0x8}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x20000000, 0x2, 0xfffffff9}, 0x25}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x7, 0x4, 0x5, 0x5}, 0x1b}}]}, {0x56, 0x6, "c5c7295b8d47af66ca3905c0813c33827060a9073bab8d2685482a181eefb94ef08babeac6c3c4dfcaac7c19b11419d6e8bb9d57690e7fa5124aa26ffa489bad2e902045bd72e64156f5c0ba40a867fd977b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x50, 0x7, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x34b5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xffe0}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x18f0}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10)
r9 = semget$private(0x0, 0x3, 0x0)
semctl$IPC_RMID(r9, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000002c0)='clear_refs\x00')
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0xd, @any, 0x0, 0x2}, 0xe)

847.906153ms ago: executing program 7 (id=7287):
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
lsm_get_self_attr(0x65, 0x0, &(0x7f0000000300), 0x0)

774.161434ms ago: executing program 7 (id=7288):
r0 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r1], 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0)

728.315735ms ago: executing program 7 (id=7289):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x5}, 0x100b28, 0x6, 0x3, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=<r2=>r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r1, 0x0, 0x2}, 0x18)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x124)
removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00')
r5 = msgget$private(0x0, 0x141)
msgrcv(r5, 0x0, 0x0, 0x2, 0x3000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0xffffffffffffffe2, &(0x7f0000000580)=ANY=[@ANYBLOB="b405000000080000611028000000000063012e00000000009500090000000000", @ANYRESDEC=0x0, @ANYRES64=r2, @ANYRES64=r2, @ANYRES64=r1, @ANYRESOCT=r4, @ANYRESHEX=r3], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
getgroups(0x27, &(0x7f0000002540))
setgroups(0x0, &(0x7f0000000040))
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
connect$netlink(r10, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbf8}, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r10, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0xfffd}}, 0x14}}, 0x200448c0)
ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x128, 0x6, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xe7, 0x7, 0x1, 0x0, "66518ffa66ce6b2ddd7c6b65c6f536607fe63f00e5db0f81547bb9cd391b85a92d0d2c7e6c7a58d0c0162820ab594448088eb6086fee079fa5afb5d67a5c7d5dbeb68f18b2301c858adec224053ac56e95eafcb9fd5a4124c8242ea3f0c1c5b17fdc07f1da430f7370986d448ee7b5ffc4171b219b3d6de5e3408ff2b870844b89c704056daf95becba101766d4d065819ef13953aedd4b4e01cab507326148abec9f27dad478ef7ee8901c9325a0187e296b792b514360893c24cb078deca3220158b0ce5334d45ebdbc0a124b5e7375da46151762f49f892ad7ac0c28b6c36bcc1bc"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x90, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9b5cb57}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp1\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x244}, 0x1, 0x0, 0x0, 0x4008004}, 0x84)

335.303524ms ago: executing program 2 (id=7295):
socket$unix(0x1, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x7d}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)

298.023304ms ago: executing program 1 (id=7296):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x378, &(0x7f00000007c0)="$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")
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
fallocate(r0, 0x0, 0x0, 0x1000f4)
io_setup(0x7d, &(0x7f0000000600))
socket(0x2b, 0x1, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, {0x2, 0x0, @empty}})
syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6013c07200183a000000000000000000000000001600000000ffffac1e00010000907800000000fe80"], 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000140))
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x8200)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0)
epoll_create1(0x0)

269.701155ms ago: executing program 2 (id=7297):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r3}, 0x18)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0)
r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)=r6}, 0x20)
write$tcp_congestion(r4, 0x0, 0x0)
openat$vsock(0xffffffffffffff9c, 0x0, 0x28080, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000)

213.472646ms ago: executing program 2 (id=7298):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000140)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

193.798026ms ago: executing program 2 (id=7299):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xfffffffffffffeac)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00')
pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
setitimer(0x0, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10)
r10 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_DISALLOCATE(r10, 0x5608)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r7)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@private2, <r12=>0x0}, &(0x7f0000000140)=0x14)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'pimreg1\x00'})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x7c, r11, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x100005}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x801)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="10002abd7000ffdbdf250300000008000300010000006c0e20d6ef49490a3b0d70cc14078f727699452668f392d0806e52e11b652670a8d4aba600177302ba8c0f0c1585cfc94604c86967339ed31071dc0d79b3fbfd7693c01f5720edbffefcdd6e984969c31d903f91cebcbe145afff4ff0799daa12ba894fce82f5da2ebcd0fb18b60f21502"], 0x1c}, 0x1, 0x0, 0x0, 0x4020091}, 0x4008004)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x2c, r13, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)

154.820067ms ago: executing program 1 (id=7300):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24002de8)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x70bd2a, 0x25dfcbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x81}, @NL802154_ATTR_WPAN_PHY={0xfffffffffffffe6a, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20010)
sendfile(0xffffffffffffffff, r2, &(0x7f0000000280)=0x800, 0x4)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000400)={0x0, {}, 0x0, {}, 0xc, 0x0, 0xffffffff, 0x18, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d7469166f4f4e1df82d00", [0x6, 0x9]})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="30000000680001002abd7000fddbdf25020002000000000004000b0014000600fc010013000000000000000000000001b455a0aa13e16e7c1ccf13d24befef7de43b5a55c9343380b75841f9e26fdc3bd5338979b5d3c0a8e86de5f3a5fd054af9b2f9f86ba408cca62a3de2c55973ea0208e7cb1d850b648023f3a7b2d52b695fccecd3bc40a5551618"], 0x30}, 0x1, 0x9f, 0x0, 0x20004002}, 0x40004)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
syz_open_dev$mouse(&(0x7f0000000000), 0xffffffff, 0x24a000)
pwritev(r1, &(0x7f00000003c0)=[{&(0x7f00000002c0)="fcadb90bdfcce341b989dbf3b49a0e2caecd134587820d0eb8f48d2ed672b0e76d4dafc96a6144734ac392cceac36400a8cfeb6c1b8fb0a1058b804322ef6b77fc677d421f10d9abe6ccb61ec91df774cee88f14ce1f6715acf004cd562ccb151d", 0x61}, {&(0x7f00000004c0)="a00811a62663966b0b575c0261b596bd9e72dc97c8a64d46422b3a7f02c0325ed07657d0407a28c955ed8517ffc54773a8e0b93f49ecb4bd8e66e3b40ee7222dd93906654131cbe68ccbbdebdaf9a513ab308b11f5f597a6ca88b6c366d7c60f102f7768f114778c09fcb649074f3a4d6d059c6fbeb3fdcb70d8b9b69a97c71345e19834b57c9fd34232ddb010b78bf095ae2d6c2511c3ebf97b42ea7130aa4090c0b64c186be4e8ed8489ff026cf3eff37504547b362b61e1", 0xb9}, {&(0x7f0000000380)="1503606e385dd5372c0c798b31c82bae52be8341b902e3953786711438b9a8", 0x1f}], 0x3, 0x7fffffff, 0xb)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

120.573288ms ago: executing program 2 (id=7301):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000003c0)="fddfa9472bad3aab6649609d4b815600ea5f6a09b21b399a752151ac6881a82746c330a3e5fd3eb75a579d5e130017493ace6976ac0205f9a218a14436ede7894c7cc29c", &(0x7f00000004c0)=""/169, 0x4}, 0x20)

119.076878ms ago: executing program 9 (id=7302):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r3}, 0x18)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0)
r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)=r6}, 0x20)
write$tcp_congestion(r4, 0x0, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x28080, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000)

72.981388ms ago: executing program 9 (id=7303):
socket(0x0, 0x6, 0x644)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
gettid()
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48)
r3 = socket(0x2c, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r5, 0x0, 0x3ffff)
sendfile(r6, r5, 0x0, 0x7ffff000)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20)

71.398259ms ago: executing program 8 (id=7304):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r2, &(0x7f0000000100)="b8", 0x1, 0x2000c855, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x9)

60.619088ms ago: executing program 2 (id=7305):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24002de8)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x70bd2a, 0x25dfcbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x81}, @NL802154_ATTR_WPAN_PHY={0xfffffffffffffe6a, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20010)
sendfile(0xffffffffffffffff, r2, &(0x7f0000000280)=0x800, 0x4)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000400)={0x0, {}, 0x0, {}, 0xc, 0x0, 0xffffffff, 0x18, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d7469166f4f4e1df82d00", [0x6, 0x9]})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="30000000680001002abd7000fddbdf25020002000000000004000b0014000600fc010013000000000000000000000001b455a0aa13e16e7c1ccf13d24befef7de43b5a55c9343380b75841f9e26fdc3bd5338979b5d3c0a8e86de5f3a5fd054af9b2f9f86ba408cca62a3de2c55973ea0208e7cb1d850b648023f3a7b2d52b695fccecd3bc40a5551618"], 0x30}, 0x1, 0x9f, 0x0, 0x20004002}, 0x40004)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
syz_open_dev$mouse(&(0x7f0000000000), 0xffffffff, 0x24a000)
pwritev(r1, &(0x7f00000003c0)=[{&(0x7f00000002c0)="fcadb90bdfcce341b989dbf3b49a0e2caecd134587820d0eb8f48d2ed672b0e76d4dafc96a6144734ac392cceac36400a8cfeb6c1b8fb0a1058b804322ef6b77fc677d421f10d9abe6ccb61ec91df774cee88f14ce1f6715acf004cd562ccb151d", 0x61}, {&(0x7f00000004c0)="a00811a62663966b0b575c0261b596bd9e72dc97c8a64d46422b3a7f02c0325ed07657d0407a28c955ed8517ffc54773a8e0b93f49ecb4bd8e66e3b40ee7222dd93906654131cbe68ccbbdebdaf9a513ab308b11f5f597a6ca88b6c366d7c60f102f7768f114778c09fcb649074f3a4d6d059c6fbeb3fdcb70d8b9b69a97c71345e19834b57c9fd34232ddb010b78bf095ae2d6c2511c3ebf97b42ea7130aa4090c0b64c186be4e8ed8489ff026cf3eff37504547b362b61e1", 0xb9}, {&(0x7f0000000380)="1503606e385dd5372c0c798b31c82bae52be8341b902e3953786711438b9a8", 0x1f}], 0x3, 0x7fffffff, 0xb)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="540000005f84964cfb179d310b2e8c7e2ac759126b87b97ef6bf1169f27ff692a6769487c16a0a0fa6a72845abfabbf4a80d6c3d449a3e1dc044e03c9e205c78e58968a0acaf706025ac561cf1051e3705a61cff6d", @ANYRES16=r6, @ANYBLOB="010028bd70000000000003000000400001802c0004001400010002000004ac141413000000000000000014000200020000000a01010200000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

0s ago: executing program 8 (id=7306):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f})
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2)

kernel console output (not intermixed with test programs):

ntered promiscuous mode
[  349.103093][T21238] loop1: detected capacity change from 0 to 512
[  349.130528][T19773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.143540][T21124] veth0_macvtap: entered promiscuous mode
[  349.152665][T21124] veth1_macvtap: entered promiscuous mode
[  349.200740][T21124] batman_adv: batadv0: Interface activated: batadv_slave_0
[  349.210056][T21238] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000)
[  349.220469][T21238] FAT-fs (loop1): Filesystem has been set read-only
[  349.253779][T21124] batman_adv: batadv0: Interface activated: batadv_slave_1
[  349.273848][T21238] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000)
[  349.307302][T21275] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.317517][T21275] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.327475][T21238] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000)
[  349.339444][T21275] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.350249][T21275] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  349.681137][T21313] loop2: detected capacity change from 0 to 1024
[  349.710366][T21313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  349.753173][T19773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.988450][T21339] loop2: detected capacity change from 0 to 1024
[  350.013404][T21339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  350.090109][T19773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.460580][T21381] __nla_validate_parse: 8 callbacks suppressed
[  350.460596][T21381] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6442'.
[  350.477534][T21382] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6442'.
[  350.488831][T21380] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6442'.
[  350.559417][T21387] loop7: detected capacity change from 0 to 16384
[  350.624352][T21388] pim6reg: entered allmulticast mode
[  350.637678][T21388] pim6reg: left allmulticast mode
[  350.744794][T21392] pim6reg: entered allmulticast mode
[  350.759735][T21392] pim6reg: left allmulticast mode
[  350.826934][T21387] loop7: detected capacity change from 16384 to 16383
[  350.891028][T21401] loop7: detected capacity change from 0 to 1764
[  351.164066][T21416] loop1: detected capacity change from 0 to 512
[  351.191202][T21416] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000)
[  351.201508][T21416] FAT-fs (loop1): Filesystem has been set read-only
[  351.209382][T21416] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000)
[  351.220101][T21416] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000)
[  351.274305][   T29] kauditd_printk_skb: 202 callbacks suppressed
[  351.274323][   T29] audit: type=1326 audit(1758663198.909:33743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21427 comm="syz.2.6462" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f71ec71eec9 code=0x0
[  351.368423][T21424] bridge0: port 3(gretap0) entered blocking state
[  351.374999][T21424] bridge0: port 3(gretap0) entered disabled state
[  351.386975][T21424] gretap0: entered allmulticast mode
[  351.392955][T21424] gretap0: entered promiscuous mode
[  351.398993][T21424] bridge0: port 3(gretap0) entered blocking state
[  351.405560][T21424] bridge0: port 3(gretap0) entered forwarding state
[  351.467017][T21433] Falling back ldisc for ttyS3.
[  351.898316][   T29] audit: type=1400 audit(1758663199.539:33744): avc:  denied  { ioctl } for  pid=21453 comm="syz.7.6471" path="socket:[70439]" dev="sockfs" ino=70439 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  352.112009][T21477] loop7: detected capacity change from 0 to 512
[  352.143147][T21477] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000)
[  352.153483][T21477] FAT-fs (loop7): Filesystem has been set read-only
[  352.179372][   T29] audit: type=1400 audit(1758663199.819:33745): avc:  denied  { mounton } for  pid=21479 comm="syz.2.6483" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  352.186968][T21477] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000)
[  352.234630][   T29] audit: type=1400 audit(1758663199.819:33746): avc:  denied  { ioctl } for  pid=21479 comm="syz.2.6483" path="socket:[70526]" dev="sockfs" ino=70526 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  352.267215][T21477] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000)
[  352.417280][T21485] Falling back ldisc for ttyS3.
[  352.495256][T21507] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6494'.
[  352.571492][T21513] loop1: detected capacity change from 0 to 2048
[  352.610257][T21513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  352.626086][T21525] FAULT_INJECTION: forcing a failure.
[  352.626086][T21525] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  352.628022][T21522] loop7: detected capacity change from 0 to 16384
[  352.639536][T21525] CPU: 1 UID: 0 PID: 21525 Comm: +}[@ Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  352.639592][T21525] Tainted: [W]=WARN
[  352.639602][T21525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  352.639630][T21525] Call Trace:
[  352.639639][T21525]  <TASK>
[  352.639658][T21525]  __dump_stack+0x1d/0x30
[  352.639688][T21525]  dump_stack_lvl+0xe8/0x140
[  352.639715][T21525]  dump_stack+0x15/0x1b
[  352.639738][T21525]  should_fail_ex+0x265/0x280
[  352.639845][T21525]  should_fail_alloc_page+0xf2/0x100
[  352.639881][T21525]  __alloc_frozen_pages_noprof+0xff/0x360
[  352.639933][T21525]  alloc_pages_mpol+0xb3/0x250
[  352.639985][T21525]  alloc_pages_noprof+0x90/0x130
[  352.640081][T21525]  pte_alloc_one+0x2d/0x120
[  352.640173][T21525]  __pte_alloc+0x32/0x2b0
[  352.640233][T21525]  handle_mm_fault+0x1c55/0x2c20
[  352.640276][T21525]  ? check_vma_flags+0x26e/0x340
[  352.640378][T21525]  __get_user_pages+0x102e/0x1fa0
[  352.640425][T21525]  __gup_longterm_locked+0x8f4/0xe60
[  352.640459][T21525]  ? freeze_slab+0x5c/0x80
[  352.640596][T21525]  ? process_vm_rw+0x27c/0x960
[  352.640633][T21525]  ? should_fail_ex+0xdb/0x280
[  352.640676][T21525]  pin_user_pages_remote+0x7e/0xb0
[  352.640794][T21525]  process_vm_rw+0x484/0x960
[  352.640870][T21525]  __x64_sys_process_vm_writev+0x78/0x90
[  352.640910][T21525]  x64_sys_call+0x2a7c/0x2ff0
[  352.640962][T21525]  do_syscall_64+0xd2/0x200
[  352.641006][T21525]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  352.641043][T21525]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  352.641135][T21525]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.641165][T21525] RIP: 0033:0x7f1a4ea9eec9
[  352.641185][T21525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  352.641257][T21525] RSP: 002b:00007f1a4d507038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[  352.641283][T21525] RAX: ffffffffffffffda RBX: 00007f1a4ecf5fa0 RCX: 00007f1a4ea9eec9
[  352.641300][T21525] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000076
[  352.641318][T21525] RBP: 00007f1a4d507090 R08: 000000000000023a R09: 0000000000000000
[  352.641335][T21525] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001
[  352.641382][T21525] R13: 00007f1a4ecf6038 R14: 00007f1a4ecf5fa0 R15: 00007ffd6d98c388
[  352.641411][T21525]  </TASK>
[  352.647000][T21513] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  352.723491][T21517] loop8: detected capacity change from 0 to 1024
[  352.820407][T21527] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6496: bg 0: block 345: padding at end of block bitmap is not set
[  352.866409][T21522] pim6reg: entered allmulticast mode
[  352.910176][T21527] EXT4-fs (loop1): Remounting filesystem read-only
[  352.920085][T21245] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  352.934776][T21531] pim6reg: left allmulticast mode
[  352.941494][T21517] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  352.958174][T21529] pim6reg: entered allmulticast mode
[  352.966578][T21529] pim6reg: left allmulticast mode
[  353.008531][T13524] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.057080][T21522] loop7: detected capacity change from 16384 to 16383
[  353.099656][   T29] audit: type=1400 audit(1758663200.739:33747): avc:  denied  { create } for  pid=21539 comm="syz.2.6505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  353.141266][   T29] audit: type=1400 audit(1758663200.769:33748): avc:  denied  { bind } for  pid=21539 comm="syz.2.6505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  353.161128][   T29] audit: type=1400 audit(1758663200.779:33749): avc:  denied  { write } for  pid=21539 comm="syz.2.6505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  353.230251][   T29] audit: type=1326 audit(1758663200.869:33750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21551 comm="syz.8.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50b3aeec9 code=0x7ffc0000
[  353.254116][   T29] audit: type=1326 audit(1758663200.869:33751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21551 comm="syz.8.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50b3aeec9 code=0x7ffc0000
[  353.277739][   T29] audit: type=1326 audit(1758663200.869:33752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21551 comm="syz.8.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd50b3aeec9 code=0x7ffc0000
[  353.306181][T19404] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.419230][T21564] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 (while UP)
[  353.453464][T21570] loop7: detected capacity change from 0 to 1024
[  353.460767][T21565] loop9: detected capacity change from 0 to 512
[  353.475261][T21570] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  353.514622][T21552] loop8: detected capacity change from 0 to 256
[  353.546074][T20873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.560954][T21575] loop2: detected capacity change from 0 to 2048
[  353.588822][T21575] EXT4-fs (loop2): failed to initialize system zone (-117)
[  353.600256][T21575] EXT4-fs (loop2): mount failed
[  353.625408][T21585] FAULT_INJECTION: forcing a failure.
[  353.625408][T21585] name failslab, interval 1, probability 0, space 0, times 0
[  353.638227][T21585] CPU: 1 UID: 0 PID: 21585 Comm: syz.8.6521 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  353.638327][T21585] Tainted: [W]=WARN
[  353.638333][T21585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  353.638346][T21585] Call Trace:
[  353.638392][T21585]  <TASK>
[  353.638448][T21585]  __dump_stack+0x1d/0x30
[  353.638475][T21585]  dump_stack_lvl+0xe8/0x140
[  353.638495][T21585]  dump_stack+0x15/0x1b
[  353.638534][T21585]  should_fail_ex+0x265/0x280
[  353.638576][T21585]  should_failslab+0x8c/0xb0
[  353.638617][T21585]  __kmalloc_noprof+0xa5/0x3e0
[  353.638652][T21585]  ? sel_write_member+0x18c/0x370
[  353.638817][T21585]  sel_write_member+0x18c/0x370
[  353.638856][T21585]  selinux_transaction_write+0xc6/0x110
[  353.638884][T21585]  ? __pfx_selinux_transaction_write+0x10/0x10
[  353.638912][T21585]  vfs_write+0x266/0x960
[  353.638992][T21585]  ? __rcu_read_unlock+0x4f/0x70
[  353.639079][T21585]  ? __fget_files+0x184/0x1c0
[  353.639154][T21585]  ? finish_task_switch+0xad/0x2b0
[  353.639182][T21585]  ksys_write+0xda/0x1a0
[  353.639209][T21585]  __x64_sys_write+0x40/0x50
[  353.639232][T21585]  x64_sys_call+0x27fe/0x2ff0
[  353.639329][T21585]  do_syscall_64+0xd2/0x200
[  353.639374][T21585]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  353.639406][T21585]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  353.639508][T21585]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.639537][T21585] RIP: 0033:0x7fd50b3aeec9
[  353.639555][T21585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.639587][T21585] RSP: 002b:00007fd509e0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  353.639611][T21585] RAX: ffffffffffffffda RBX: 00007fd50b605fa0 RCX: 00007fd50b3aeec9
[  353.639695][T21585] RDX: 0000000000000056 RSI: 0000200000000080 RDI: 0000000000000005
[  353.639710][T21585] RBP: 00007fd509e0f090 R08: 0000000000000000 R09: 0000000000000000
[  353.639725][T21585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  353.639740][T21585] R13: 00007fd50b606038 R14: 00007fd50b605fa0 R15: 00007ffe578d0ac8
[  353.639765][T21585]  </TASK>
[  353.879706][T21587] loop7: detected capacity change from 0 to 1024
[  353.898034][T21587] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  353.941014][T20873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.023870][T21602] loop7: detected capacity change from 0 to 1024
[  354.039671][T21602] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  354.071687][T20873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.096530][T21614] loop7: detected capacity change from 0 to 1024
[  354.107903][T21614] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  354.140006][T20873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.201866][T21604] chnl_net:caif_netlink_parms(): no params data found
[  354.253904][T21604] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.261073][T21604] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.268250][T21604] bridge_slave_0: entered allmulticast mode
[  354.274717][T21604] bridge_slave_0: entered promiscuous mode
[  354.283119][T21604] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.290372][T21604] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.300432][T21604] bridge_slave_1: entered allmulticast mode
[  354.307037][T21604] bridge_slave_1: entered promiscuous mode
[  354.330280][T21604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.340918][T21604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  354.363017][T21604] team0: Port device team_slave_0 added
[  354.369884][T21604] team0: Port device team_slave_1 added
[  354.384732][T21636] smc: net device bond0 applied user defined pnetid SYZ0
[  354.393828][T21636] smc: net device bond0 erased user defined pnetid SYZ0
[  354.407107][T21604] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.414201][T21604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.440364][T21604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.451703][T21635] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6536'.
[  354.462050][T21604] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.469164][T21604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.495557][T21604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.538427][T21604] hsr_slave_0: entered promiscuous mode
[  354.544823][T21604] hsr_slave_1: entered promiscuous mode
[  354.552492][T21604] debugfs: 'hsr0' already exists in 'hsr'
[  354.558290][T21604] Cannot create hsr debugfs directory
[  354.660077][T21653] smc: net device bond0 applied user defined pnetid SYZ0
[  354.692395][T21604] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.770282][T21604] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.830081][T21604] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.879844][T21604] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.965101][T21604] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  354.978861][T21604] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  354.990952][T21604] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  355.001186][T21604] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  355.052180][T21604] 8021q: adding VLAN 0 to HW filter on device bond0
[  355.069424][T21604] 8021q: adding VLAN 0 to HW filter on device team0
[  355.080400][  T136] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.087506][  T136] bridge0: port 1(bridge_slave_0) entered forwarding state
[  355.101322][  T136] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.108446][  T136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.138659][T21604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  355.223028][T21604] 8021q: adding VLAN 0 to HW filter on device batadv0
[  355.380326][T21681] loop1: detected capacity change from 0 to 256
[  355.411174][T21604] veth0_vlan: entered promiscuous mode
[  355.417630][T21684] loop7: detected capacity change from 0 to 16384
[  355.418892][T21604] veth1_vlan: entered promiscuous mode
[  355.449250][T21604] veth0_macvtap: entered promiscuous mode
[  355.456721][T21604] veth1_macvtap: entered promiscuous mode
[  355.469413][T21604] batman_adv: batadv0: Interface activated: batadv_slave_0
[  355.482603][T21686] pim6reg: entered allmulticast mode
[  355.490735][T21604] batman_adv: batadv0: Interface activated: batadv_slave_1
[  355.498225][T21686] pim6reg: left allmulticast mode
[  355.510105][T21289] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.520124][T21289] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.537155][T21289] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.576328][T21289] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.727232][T21684] loop7: detected capacity change from 16384 to 16383
[  355.762014][T21701] loop1: detected capacity change from 0 to 1024
[  355.769938][T21698] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6548'.
[  355.781974][T21701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.837756][T19404] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.866059][T21706] loop7: detected capacity change from 0 to 16384
[  355.943100][T21711] pim6reg: entered allmulticast mode
[  355.951351][T21714] loop1: detected capacity change from 0 to 1024
[  355.954780][T21711] pim6reg: left allmulticast mode
[  355.967708][T21714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  356.009161][T19404] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.064674][T21721] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6555'.
[  356.107754][T21725] smc: net device bond0 erased user defined pnetid SYZ0
[  356.157037][T21711] loop7: detected capacity change from 16384 to 16383
[  356.257257][T21734] Falling back ldisc for ttyS3.
[  356.289402][   T29] kauditd_printk_skb: 262 callbacks suppressed
[  356.289420][   T29] audit: type=1400 audit(1758663203.929:34015): avc:  denied  { create } for  pid=21743 comm="syz.2.6568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  356.365602][T21751] netlink: 464 bytes leftover after parsing attributes in process `syz.1.6571'.
[  356.374869][T21751] netlink: 464 bytes leftover after parsing attributes in process `syz.1.6571'.
[  356.421624][   T29] audit: type=1326 audit(1758663204.059:34016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21756 comm="syz.1.6573" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb06383eec9 code=0x0
[  356.819861][   T29] audit: type=1326 audit(1758663204.459:34017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21777 comm="syz.8.6582" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35fbffeec9 code=0x0
[  356.933313][   T29] audit: type=1326 audit(1758663204.569:34018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21789 comm="syz.7.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  356.964099][   T29] audit: type=1326 audit(1758663204.569:34019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21789 comm="syz.7.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  356.987808][   T29] audit: type=1326 audit(1758663204.579:34020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21789 comm="syz.7.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  356.987967][   T29] audit: type=1326 audit(1758663204.579:34021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21789 comm="syz.7.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  356.987991][   T29] audit: type=1326 audit(1758663204.579:34022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21789 comm="syz.7.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  356.988039][   T29] audit: type=1326 audit(1758663204.579:34023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21789 comm="syz.7.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  356.988097][   T29] audit: type=1326 audit(1758663204.579:34024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21789 comm="syz.7.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  357.150916][T21797] loop7: detected capacity change from 0 to 512
[  357.423787][T21810] loop7: detected capacity change from 0 to 2048
[  357.458543][T21810] EXT4-fs (loop7): failed to initialize system zone (-117)
[  357.466076][T21810] EXT4-fs (loop7): mount failed
[  357.518637][T21817] netlink: 264 bytes leftover after parsing attributes in process `syz.2.6595'.
[  357.552928][T21821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6597'.
[  357.623923][T21829] loop8: detected capacity change from 0 to 1024
[  357.635887][T21831] loop2: detected capacity change from 0 to 512
[  357.645551][T21829] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  357.661197][T21831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  357.674591][T21831] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  357.694622][T21831] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.6601: corrupted xattr block 19: overlapping e_value 
[  357.708933][T21831] EXT4-fs (loop2): Remounting filesystem read-only
[  357.715576][T21831] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[  357.724958][T21831] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[  357.725833][T21604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.734036][T21831] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[  357.774022][T19773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.953490][T21848] loop7: detected capacity change from 0 to 16384
[  358.014467][T21849] pim6reg: entered allmulticast mode
[  358.021962][T21849] pim6reg: left allmulticast mode
[  358.187087][T21848] loop7: detected capacity change from 16384 to 16383
[  358.273290][T21855] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  358.273290][T21855]    program syz.2.6608 not setting count and/or reply_len properly
[  358.321434][T21860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6610'.
[  358.943560][T21884] loop7: detected capacity change from 0 to 16384
[  359.104708][T21886] pim6reg: entered allmulticast mode
[  359.347908][T21884] loop7: detected capacity change from 16384 to 16383
[  359.368665][T21892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6621'.
[  359.451763][T21903] netlink: 348 bytes leftover after parsing attributes in process `syz.2.6626'.
[  359.461026][T21903] netlink: 348 bytes leftover after parsing attributes in process `syz.2.6626'.
[  359.525763][T21912] loop7: detected capacity change from 0 to 1024
[  359.537246][T21912] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  359.557538][T21915] loop9: detected capacity change from 0 to 1024
[  359.566530][T21915] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  359.599224][T21904] Falling back ldisc for ttyS3.
[  359.817840][T21938] hub 8-0:1.0: USB hub found
[  359.824018][T21938] hub 8-0:1.0: 8 ports detected
[  359.970362][T20873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.019574][T21124] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.055228][T21953] loop7: detected capacity change from 0 to 16384
[  360.097075][T21954] Falling back ldisc for ttyS3.
[  360.135215][T21956] pim6reg: entered allmulticast mode
[  360.144428][T21956] pim6reg: left allmulticast mode
[  360.160936][T21958] pim6reg: entered allmulticast mode
[  360.176422][T21958] pim6reg: left allmulticast mode
[  360.306983][T21953] loop7: detected capacity change from 16384 to 16383
[  360.321185][T21965] loop8: detected capacity change from 0 to 512
[  360.338199][T21965] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.6648: iget: bad i_size value: 38620345925642
[  360.352076][T21965] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.6648: couldn't read orphan inode 15 (err -117)
[  360.366153][T21965] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  360.382743][T21965] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  360.390192][T21965] batman_adv: batadv0: Removing interface: batadv_slave_0
[  360.397799][T21965] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  360.405181][T21965] batman_adv: batadv0: Removing interface: batadv_slave_1
[  360.507095][T21972] Falling back ldisc for ttyS3.
[  360.550488][T21981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  360.559119][T21981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  360.579405][T21981] netlink: 'syz.9.6654': attribute type 24 has an invalid length.
[  360.587489][T21981] FAULT_INJECTION: forcing a failure.
[  360.587489][T21981] name failslab, interval 1, probability 0, space 0, times 0
[  360.600271][T21981] CPU: 1 UID: 0 PID: 21981 Comm: syz.9.6654 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  360.600369][T21981] Tainted: [W]=WARN
[  360.600378][T21981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  360.600463][T21981] Call Trace:
[  360.600469][T21981]  <TASK>
[  360.600478][T21981]  __dump_stack+0x1d/0x30
[  360.600556][T21981]  dump_stack_lvl+0xe8/0x140
[  360.600576][T21981]  dump_stack+0x15/0x1b
[  360.600596][T21981]  should_fail_ex+0x265/0x280
[  360.600627][T21981]  should_failslab+0x8c/0xb0
[  360.600762][T21981]  kmem_cache_alloc_node_noprof+0x57/0x320
[  360.600794][T21981]  ? __alloc_skb+0x101/0x320
[  360.600816][T21981]  __alloc_skb+0x101/0x320
[  360.600839][T21981]  netlink_ack+0xfd/0x500
[  360.600948][T21981]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  360.600978][T21981]  netlink_rcv_skb+0x192/0x220
[  360.601078][T21981]  ? __pfx_genl_rcv_msg+0x10/0x10
[  360.601126][T21981]  genl_rcv+0x28/0x40
[  360.601161][T21981]  netlink_unicast+0x5c0/0x690
[  360.601191][T21981]  netlink_sendmsg+0x58b/0x6b0
[  360.601238][T21981]  ? __pfx_netlink_sendmsg+0x10/0x10
[  360.601265][T21981]  __sock_sendmsg+0x145/0x180
[  360.601303][T21981]  ____sys_sendmsg+0x31e/0x4e0
[  360.601407][T21981]  ___sys_sendmsg+0x17b/0x1d0
[  360.601452][T21981]  __x64_sys_sendmsg+0xd4/0x160
[  360.601546][T21981]  x64_sys_call+0x191e/0x2ff0
[  360.601567][T21981]  do_syscall_64+0xd2/0x200
[  360.601627][T21981]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  360.601711][T21981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.601738][T21981] RIP: 0033:0x7f04dc06eec9
[  360.601756][T21981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  360.601778][T21981] RSP: 002b:00007f04daad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  360.601801][T21981] RAX: ffffffffffffffda RBX: 00007f04dc2c5fa0 RCX: 00007f04dc06eec9
[  360.601881][T21981] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000019
[  360.601892][T21981] RBP: 00007f04daad7090 R08: 0000000000000000 R09: 0000000000000000
[  360.601904][T21981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  360.601932][T21981] R13: 00007f04dc2c6038 R14: 00007f04dc2c5fa0 R15: 00007fff7fa68a28
[  360.601951][T21981]  </TASK>
[  360.603807][T21604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.037188][T22000] Falling back ldisc for ttyS3.
[  361.062764][T22002] __nla_validate_parse: 21 callbacks suppressed
[  361.062778][T22002] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6663'.
[  361.203759][T22017] FAULT_INJECTION: forcing a failure.
[  361.203759][T22017] name failslab, interval 1, probability 0, space 0, times 0
[  361.216588][T22017] CPU: 0 UID: 0 PID: 22017 Comm: syz.1.6670 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  361.216689][T22017] Tainted: [W]=WARN
[  361.216697][T22017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  361.216713][T22017] Call Trace:
[  361.216720][T22017]  <TASK>
[  361.216729][T22017]  __dump_stack+0x1d/0x30
[  361.216777][T22017]  dump_stack_lvl+0xe8/0x140
[  361.216794][T22017]  dump_stack+0x15/0x1b
[  361.216809][T22017]  should_fail_ex+0x265/0x280
[  361.216842][T22017]  should_failslab+0x8c/0xb0
[  361.216883][T22017]  kmem_cache_alloc_noprof+0x50/0x310
[  361.216917][T22017]  ? getname_flags+0x80/0x3b0
[  361.216953][T22017]  getname_flags+0x80/0x3b0
[  361.217011][T22017]  user_path_at+0x28/0x130
[  361.217049][T22017]  __se_sys_mount+0x25b/0x2e0
[  361.217077][T22017]  ? fput+0x8f/0xc0
[  361.217189][T22017]  __x64_sys_mount+0x67/0x80
[  361.217219][T22017]  x64_sys_call+0x2b4d/0x2ff0
[  361.217246][T22017]  do_syscall_64+0xd2/0x200
[  361.217287][T22017]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  361.217321][T22017]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  361.217359][T22017]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.217386][T22017] RIP: 0033:0x7fb06383eec9
[  361.217406][T22017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  361.217431][T22017] RSP: 002b:00007fb0622a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  361.217472][T22017] RAX: ffffffffffffffda RBX: 00007fb063a95fa0 RCX: 00007fb06383eec9
[  361.217565][T22017] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000
[  361.217580][T22017] RBP: 00007fb0622a7090 R08: 00002000000008c0 R09: 0000000000000000
[  361.217608][T22017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  361.217623][T22017] R13: 00007fb063a96038 R14: 00007fb063a95fa0 R15: 00007ffe5633ce98
[  361.217673][T22017]  </TASK>
[  361.422529][   T29] kauditd_printk_skb: 191 callbacks suppressed
[  361.422542][   T29] audit: type=1400 audit(1758663209.059:34216): avc:  denied  { read } for  pid=22019 comm="syz.1.6671" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  361.465128][T22022] blkio.reset_stats is deprecated
[  361.731013][T22028] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6675'.
[  361.748500][T22030] vlan2: entered allmulticast mode
[  361.753675][T22030] veth0_macvtap: entered allmulticast mode
[  361.814609][   T29] audit: type=1326 audit(1758663209.449:34217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22033 comm="syz.8.6678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fbffeec9 code=0x7ffc0000
[  361.839601][   T29] audit: type=1326 audit(1758663209.449:34218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22033 comm="syz.8.6678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fbffeec9 code=0x7ffc0000
[  361.863302][   T29] audit: type=1326 audit(1758663209.479:34219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22033 comm="syz.8.6678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35fbffeec9 code=0x7ffc0000
[  361.886896][   T29] audit: type=1326 audit(1758663209.479:34220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22033 comm="syz.8.6678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fbffeec9 code=0x7ffc0000
[  361.910627][   T29] audit: type=1326 audit(1758663209.479:34221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22033 comm="syz.8.6678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fbffeec9 code=0x7ffc0000
[  361.934609][   T29] audit: type=1326 audit(1758663209.479:34222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22033 comm="syz.8.6678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35fbffeec9 code=0x7ffc0000
[  361.958368][   T29] audit: type=1326 audit(1758663209.479:34223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22033 comm="syz.8.6678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fbffeec9 code=0x7ffc0000
[  361.982054][   T29] audit: type=1326 audit(1758663209.479:34224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22033 comm="syz.8.6678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fbffeec9 code=0x7ffc0000
[  362.005708][   T29] audit: type=1326 audit(1758663209.479:34225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22033 comm="syz.8.6678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35fbffeec9 code=0x7ffc0000
[  362.349960][T22049] loop7: detected capacity change from 0 to 16384
[  362.412647][T22050] pim6reg: entered allmulticast mode
[  362.445135][T22049] pim6reg: left allmulticast mode
[  362.616874][T22049] loop7: detected capacity change from 16384 to 16383
[  362.950612][T22063] syzkaller0: entered promiscuous mode
[  362.956154][T22063] syzkaller0: entered allmulticast mode
[  363.040498][T22065] loop7: detected capacity change from 0 to 1024
[  363.049385][T22065] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  363.371748][T20873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.498052][T22086] bridge0: entered promiscuous mode
[  363.503338][T22086] macvtap1: entered allmulticast mode
[  363.508766][T22086] bridge0: entered allmulticast mode
[  363.526121][T22086] bridge0: port 3(macvtap1) entered blocking state
[  363.532883][T22086] bridge0: port 3(macvtap1) entered disabled state
[  363.560148][T22086] bridge0: left allmulticast mode
[  363.565376][T22086] bridge0: left promiscuous mode
[  363.582330][T22097] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6700'.
[  363.630110][T22100] loop1: detected capacity change from 0 to 512
[  363.638340][T22100] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  363.650568][T22100] EXT4-fs (loop1): 1 truncate cleaned up
[  363.656656][T22100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  363.677759][T22102] Falling back ldisc for ttyS3.
[  363.736985][T19404] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.747043][T22107] Falling back ldisc for ttyS3.
[  363.774879][T22110] loop1: detected capacity change from 0 to 512
[  363.799292][T22110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  363.813427][T22110] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  363.826389][T22110] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.6705: corrupted xattr block 19: overlapping e_value 
[  363.842992][T22110] EXT4-fs (loop1): Remounting filesystem read-only
[  363.849698][T22110] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  363.860246][T22110] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  363.886976][T22110] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  363.927995][T19404] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.939019][ T4688] hid_parser_main: 8 callbacks suppressed
[  363.939040][ T4688] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0
[  363.952285][ T4688] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0
[  363.959738][ T4688] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0
[  363.967696][ T4688] hid-generic 0003:0004:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  363.980855][T22122] netlink: 'syz.7.6709': attribute type 5 has an invalid length.
[  363.989535][T22122] netlink: 'syz.7.6709': attribute type 5 has an invalid length.
[  363.997493][T22122] netlink: 'syz.7.6709': attribute type 5 has an invalid length.
[  364.845231][T22155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6722'.
[  364.875858][T22158] loop7: detected capacity change from 0 to 16384
[  364.940648][T22163] pim6reg: entered allmulticast mode
[  364.961658][T22163] pim6reg: left allmulticast mode
[  365.028249][T22165] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6725'.
[  365.216938][T22158] loop7: detected capacity change from 16384 to 16383
[  365.232129][T22176] FAULT_INJECTION: forcing a failure.
[  365.232129][T22176] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  365.245271][T22176] CPU: 1 UID: 0 PID: 22176 Comm: syz.7.6729 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  365.245374][T22176] Tainted: [W]=WARN
[  365.245383][T22176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  365.245425][T22176] Call Trace:
[  365.245432][T22176]  <TASK>
[  365.245439][T22176]  __dump_stack+0x1d/0x30
[  365.245459][T22176]  dump_stack_lvl+0xe8/0x140
[  365.245477][T22176]  dump_stack+0x15/0x1b
[  365.245493][T22176]  should_fail_ex+0x265/0x280
[  365.245587][T22176]  should_fail+0xb/0x20
[  365.245649][T22176]  should_fail_usercopy+0x1a/0x20
[  365.245680][T22176]  _copy_from_user+0x1c/0xb0
[  365.245710][T22176]  ___sys_recvmsg+0xaa/0x370
[  365.245799][T22176]  ? 0xffffffff81000000
[  365.245813][T22176]  ? __rcu_read_unlock+0x4f/0x70
[  365.245849][T22176]  __x64_sys_recvmsg+0xd1/0x160
[  365.245940][T22176]  x64_sys_call+0x2b42/0x2ff0
[  365.245981][T22176]  do_syscall_64+0xd2/0x200
[  365.246014][T22176]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  365.246115][T22176]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  365.246154][T22176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.246175][T22176] RIP: 0033:0x7f1a4ea9eec9
[  365.246205][T22176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  365.246227][T22176] RSP: 002b:00007f1a4d507038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  365.246248][T22176] RAX: ffffffffffffffda RBX: 00007f1a4ecf5fa0 RCX: 00007f1a4ea9eec9
[  365.246260][T22176] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[  365.246272][T22176] RBP: 00007f1a4d507090 R08: 0000000000000000 R09: 0000000000000000
[  365.246286][T22176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  365.246371][T22176] R13: 00007f1a4ecf6038 R14: 00007f1a4ecf5fa0 R15: 00007ffd6d98c388
[  365.246395][T22176]  </TASK>
[  365.442993][T22174] loop9: detected capacity change from 0 to 1024
[  365.463822][T22174] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  365.490208][T21124] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.559009][T22190] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6734'.
[  365.622764][T22195] loop9: detected capacity change from 0 to 1024
[  365.632792][T22195] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  365.644026][T22201] loop7: detected capacity change from 0 to 16384
[  365.724183][T22204] pim6reg: entered allmulticast mode
[  365.742712][T22201] pim6reg: left allmulticast mode
[  365.931747][T21124] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.956988][T22201] loop7: detected capacity change from 16384 to 16383
[  366.372340][T22214] pim6reg: entered allmulticast mode
[  366.391481][T22214] pim6reg: left allmulticast mode
[  366.491574][T22231] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6748'.
[  366.579491][T22235] loop8: detected capacity change from 0 to 1024
[  366.597263][T22235] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  366.613784][   T29] kauditd_printk_skb: 174 callbacks suppressed
[  366.613798][   T29] audit: type=1326 audit(1758663214.249:34400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22228 comm="syz.7.6746" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a4ea9eec9 code=0x0
[  366.759735][T22241] loop1: detected capacity change from 0 to 512
[  366.782703][T22241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  366.795673][T22241] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  366.809650][T22241] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.6750: corrupted xattr block 19: overlapping e_value 
[  366.833571][T22241] EXT4-fs (loop1): Remounting filesystem read-only
[  366.840318][T22241] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  366.854908][T22241] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  366.864609][T22241] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  366.891025][T22250] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  366.908476][T22250] SELinux: failed to load policy
[  366.932311][T22250] loop9: detected capacity change from 0 to 164
[  366.943134][T19404] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.975130][   T29] audit: type=1326 audit(1758663214.609:34401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22254 comm="syz.1.6753" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb06383eec9 code=0x0
[  366.999842][T21604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.046064][T22263] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6757'.
[  367.116474][T22265] netlink: 'syz.8.6758': attribute type 1 has an invalid length.
[  367.577937][T22280] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22280 comm=syz.7.6764
[  367.597096][T22280] loop7: detected capacity change from 0 to 1024
[  367.603760][T22280] EXT4-fs: Ignoring removed nomblk_io_submit option
[  367.619821][T22280] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  367.632883][T22280] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.719949][T22285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6765'.
[  367.833884][T22289] netlink: 'syz.2.6766': attribute type 2 has an invalid length.
[  367.841687][T22289] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6766'.
[  367.860033][   T29] audit: type=1400 audit(1758663215.469:34402): avc:  denied  { getopt } for  pid=22288 comm="syz.2.6766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  367.891304][T22292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6766'.
[  367.943211][   T29] audit: type=1326 audit(1758663215.579:34403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22293 comm="syz.1.6769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  367.966914][   T29] audit: type=1326 audit(1758663215.579:34404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22293 comm="syz.1.6769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  368.025747][T22297] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6770'.
[  368.034491][   T29] audit: type=1326 audit(1758663215.639:34405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22293 comm="syz.1.6769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  368.058302][   T29] audit: type=1326 audit(1758663215.639:34406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22293 comm="syz.1.6769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  368.082087][   T29] audit: type=1326 audit(1758663215.639:34407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22293 comm="syz.1.6769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  368.105774][   T29] audit: type=1326 audit(1758663215.639:34408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22293 comm="syz.1.6769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  368.129319][   T29] audit: type=1326 audit(1758663215.639:34409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22293 comm="syz.1.6769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  368.159127][T22303] loop7: detected capacity change from 0 to 1024
[  368.192751][T22303] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  368.270915][T22319] loop8: detected capacity change from 0 to 512
[  368.321653][T22319] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  368.334411][T22319] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  368.347812][T22319] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.6776: corrupted xattr block 19: overlapping e_value 
[  368.363032][T22319] EXT4-fs (loop8): Remounting filesystem read-only
[  368.369618][T22319] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  368.381553][T22319] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  368.390882][T22319] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  368.448736][T21604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.514335][T20873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.551620][T22331] loop2: detected capacity change from 0 to 1024
[  368.565591][T22331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  368.581621][T22334] loop7: detected capacity change from 0 to 1024
[  368.591196][T22334] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  368.625394][T20873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.679293][T22350] loop7: detected capacity change from 0 to 512
[  368.686354][T22350] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  368.698669][T22350] EXT4-fs (loop7): 1 truncate cleaned up
[  368.704699][T22350] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  368.723921][T22350] EXT4-fs error (device loop7): ext4_ext_precache:632: inode #15: comm syz.7.6785: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964)
[  368.755529][T20873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.909862][ T1034] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0
[  368.917343][ T1034] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0
[  368.924932][ T1034] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0
[  368.932943][ T1034] hid-generic 0003:0004:0000.0008: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  368.933507][T19773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.952925][T22358] netlink: 'syz.7.6788': attribute type 5 has an invalid length.
[  369.000549][T22362] loop7: detected capacity change from 0 to 1024
[  369.010947][T22362] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  369.479732][T20873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.508960][T22384] loop9: detected capacity change from 0 to 512
[  369.535607][T22388] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6799'.
[  369.572069][T22384] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  369.612377][T22384] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  369.628595][T22396] bridge0: entered promiscuous mode
[  369.636144][T22384] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.6798: corrupted xattr block 19: overlapping e_value 
[  369.651710][T22396] macvtap1: entered allmulticast mode
[  369.657306][T22396] bridge0: entered allmulticast mode
[  369.673326][T22384] EXT4-fs (loop9): Remounting filesystem read-only
[  369.679936][T22384] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop9 ino=15
[  369.691764][T22396] bridge0: port 3(macvtap1) entered blocking state
[  369.698374][T22396] bridge0: port 3(macvtap1) entered disabled state
[  369.718051][T22384] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop9 ino=15
[  369.729887][T22396] bridge0: left allmulticast mode
[  369.735055][T22396] bridge0: left promiscuous mode
[  369.741981][T22384] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop9 ino=15
[  369.938701][T22423] loop7: detected capacity change from 0 to 16384
[  369.992261][T22424] FAULT_INJECTION: forcing a failure.
[  369.992261][T22424] name failslab, interval 1, probability 0, space 0, times 0
[  370.005019][T22424] CPU: 1 UID: 0 PID: 22424 Comm: }\)\ Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  370.005054][T22424] Tainted: [W]=WARN
[  370.005136][T22424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  370.005153][T22424] Call Trace:
[  370.005161][T22424]  <TASK>
[  370.005170][T22424]  __dump_stack+0x1d/0x30
[  370.005223][T22424]  dump_stack_lvl+0xe8/0x140
[  370.005246][T22424]  dump_stack+0x15/0x1b
[  370.005264][T22424]  should_fail_ex+0x265/0x280
[  370.005298][T22424]  should_failslab+0x8c/0xb0
[  370.005325][T22424]  kmem_cache_alloc_noprof+0x50/0x310
[  370.005352][T22424]  ? getname_flags+0x80/0x3b0
[  370.005430][T22424]  getname_flags+0x80/0x3b0
[  370.005525][T22424]  do_readlinkat+0x64/0x320
[  370.005557][T22424]  __x64_sys_readlinkat+0x51/0x60
[  370.005595][T22424]  x64_sys_call+0x16b4/0x2ff0
[  370.005621][T22424]  do_syscall_64+0xd2/0x200
[  370.005670][T22424]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  370.005756][T22424]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  370.005790][T22424]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.005818][T22424] RIP: 0033:0x7f1a4ea9eec9
[  370.005836][T22424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  370.005896][T22424] RSP: 002b:00007f1a4d507038 EFLAGS: 00000246 ORIG_RAX: 000000000000010b
[  370.005937][T22424] RAX: ffffffffffffffda RBX: 00007f1a4ecf5fa0 RCX: 00007f1a4ea9eec9
[  370.005953][T22424] RDX: 0000200000000780 RSI: 00002000000001c0 RDI: 0000000000000007
[  370.005969][T22424] RBP: 00007f1a4d507090 R08: 0000000000000000 R09: 0000000000000000
[  370.005984][T22424] R10: 00000000000000c6 R11: 0000000000000246 R12: 0000000000000001
[  370.006000][T22424] R13: 00007f1a4ecf6038 R14: 00007f1a4ecf5fa0 R15: 00007ffd6d98c388
[  370.006091][T22424]  </TASK>
[  370.229589][T22423] pim6reg: entered allmulticast mode
[  370.307083][T22432] bridge0: entered promiscuous mode
[  370.312475][T22432] macvtap1: entered allmulticast mode
[  370.317934][T22432] bridge0: entered allmulticast mode
[  370.333325][T22432] bridge0: port 3(macvtap1) entered blocking state
[  370.339967][T22432] bridge0: port 3(macvtap1) entered disabled state
[  370.378085][T22432] bridge0: left allmulticast mode
[  370.383250][T22432] bridge0: left promiscuous mode
[  370.416969][T22423] loop7: detected capacity change from 16384 to 16383
[  370.484867][T22440] loop2: detected capacity change from 0 to 1024
[  370.521883][T22450] openvswitch: netlink: Message has 6 unknown bytes.
[  370.529218][T22448] openvswitch: netlink: Message has 6 unknown bytes.
[  370.540882][T22452] netlink: 'syz.9.6821': attribute type 1 has an invalid length.
[  370.548691][T22452] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6821'.
[  370.559665][ T1034] hid-generic 0000:0000:0000.0009: unknown main item tag 0x1
[  370.567171][ T1034] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  370.574673][ T1034] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  370.582108][ T1034] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  370.589543][ T1034] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  370.596986][ T1034] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  370.604390][ T1034] hid-generic 0000:0000:0000.0009: unknown main item tag 0x4
[  370.611923][ T1034] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  370.619371][ T1034] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  370.626929][ T1034] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  370.640347][ T1034] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  370.654299][T22449] loop2: detected capacity change from 0 to 164
[  370.702639][ T2956] hid-generic 0003:0004:0000.000A: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  370.722798][T22464] netlink: 'syz.2.6826': attribute type 5 has an invalid length.
[  370.789129][T22471] loop2: detected capacity change from 0 to 1024
[  370.873505][T22481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6831'.
[  371.000760][T22491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6838'.
[  371.068406][T22493] 9pnet_fd: Insufficient options for proto=fd
[  371.264108][T22516] loop1: detected capacity change from 0 to 2048
[  371.277885][  T136] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  371.286732][  T136] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  371.295616][  T136] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  371.304825][T22516] EXT4-fs (loop1): failed to initialize system zone (-117)
[  371.305785][  T136] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  371.321912][T22516] EXT4-fs (loop1): mount failed
[  371.428275][T22526] loop7: detected capacity change from 0 to 16384
[  371.462696][T22528] loop8: detected capacity change from 0 to 1024
[  371.492653][T22532] pim6reg: entered allmulticast mode
[  371.510614][T22532] pim6reg: left allmulticast mode
[  371.726874][T22526] loop7: detected capacity change from 16384 to 16383
[  371.787234][T22542] __nla_validate_parse: 1 callbacks suppressed
[  371.787252][T22542] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6854'.
[  371.872620][T22544] loop8: detected capacity change from 0 to 512
[  371.886257][T22548] FAULT_INJECTION: forcing a failure.
[  371.886257][T22548] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  371.891853][T22550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6857'.
[  371.899504][T22548] CPU: 1 UID: 0 PID: 22548 Comm: syz.9.6856 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  371.899548][T22548] Tainted: [W]=WARN
[  371.899559][T22548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  371.899618][T22548] Call Trace:
[  371.899627][T22548]  <TASK>
[  371.899636][T22548]  __dump_stack+0x1d/0x30
[  371.899665][T22548]  dump_stack_lvl+0xe8/0x140
[  371.899694][T22548]  dump_stack+0x15/0x1b
[  371.899718][T22548]  should_fail_ex+0x265/0x280
[  371.899753][T22548]  should_fail+0xb/0x20
[  371.899813][T22548]  should_fail_usercopy+0x1a/0x20
[  371.899849][T22548]  _copy_from_iter+0xd2/0xe80
[  371.899930][T22548]  ? skb_set_owner_w+0x16a/0x1c0
[  371.899979][T22548]  ? sock_alloc_send_pskb+0x456/0x4f0
[  371.900022][T22548]  skb_copy_datagram_from_iter+0xb1/0x490
[  371.900082][T22548]  ? mntput+0x4b/0x80
[  371.900194][T22548]  ? skb_put+0xa9/0xf0
[  371.900226][T22548]  tun_get_user+0xafa/0x2680
[  371.900272][T22548]  ? ref_tracker_alloc+0x1f2/0x2f0
[  371.900310][T22548]  ? selinux_file_permission+0x1e4/0x320
[  371.900356][T22548]  tun_chr_write_iter+0x15e/0x210
[  371.900422][T22548]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  371.900446][T22548]  vfs_write+0x527/0x960
[  371.900486][T22548]  ksys_write+0xda/0x1a0
[  371.900521][T22548]  __x64_sys_write+0x40/0x50
[  371.900563][T22548]  x64_sys_call+0x27fe/0x2ff0
[  371.900593][T22548]  do_syscall_64+0xd2/0x200
[  371.900639][T22548]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  371.900674][T22548]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  371.900796][T22548]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.900895][T22548] RIP: 0033:0x7f04dc06eec9
[  371.900918][T22548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  371.900944][T22548] RSP: 002b:00007f04daad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  371.900972][T22548] RAX: ffffffffffffffda RBX: 00007f04dc2c5fa0 RCX: 00007f04dc06eec9
[  371.900991][T22548] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[  371.901008][T22548] RBP: 00007f04daad7090 R08: 0000000000000000 R09: 0000000000000000
[  371.901068][T22548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  371.901086][T22548] R13: 00007f04dc2c6038 R14: 00007f04dc2c5fa0 R15: 00007fff7fa68a28
[  371.901114][T22548]  </TASK>
[  371.936028][T22544] __quota_error: 118 callbacks suppressed
[  371.936049][T22544] Quota error (device loop8): v2_read_file_info: Free block number 1 out of range (1, 6).
[  372.065720][T22560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=22560 comm=syz.7.6860
[  372.068609][T22544] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  372.092687][T22560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22560 comm=syz.7.6860
[  372.097106][T22544] EXT4-fs (loop8): mount failed
[  372.156207][T22560] loop7: detected capacity change from 0 to 512
[  372.210281][T22560] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  372.232661][T22560] EXT4-fs (loop7): 1 truncate cleaned up
[  372.310905][   T31] gretap0: left allmulticast mode
[  372.316188][   T31] gretap0: left promiscuous mode
[  372.321471][   T31] bridge0: port 3(gretap0) entered disabled state
[  372.344346][   T31] bridge_slave_1: left allmulticast mode
[  372.344568][T22572] loop7: detected capacity change from 0 to 16384
[  372.350086][   T31] bridge_slave_1: left promiscuous mode
[  372.350344][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.412355][   T31] bridge_slave_0: left allmulticast mode
[  372.418058][   T31] bridge_slave_0: left promiscuous mode
[  372.423777][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.604426][   T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  372.636314][   T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  372.690744][   T31] bond0 (unregistering): Released all slaves
[  372.720154][   T31] bond1 (unregistering): Released all slaves
[  372.765204][   T31] hsr_slave_0: left promiscuous mode
[  372.802408][   T31] hsr_slave_1: left promiscuous mode
[  372.810895][   T31] veth1_macvtap: left promiscuous mode
[  372.816498][   T31] veth0_macvtap: left promiscuous mode
[  372.822040][T22582] netlink: 'syz.2.6866': attribute type 3 has an invalid length.
[  372.823267][   T31] veth1_vlan: left promiscuous mode
[  372.835975][T22572] loop7: detected capacity change from 16384 to 16383
[  372.844140][   T31] veth0_vlan: left promiscuous mode
[  372.958112][   T31] team0 (unregistering): Port device team_slave_1 removed
[  372.984152][   T31] team0 (unregistering): Port device team_slave_0 removed
[  373.176052][T22597] loop1: detected capacity change from 0 to 128
[  373.191310][   T29] audit: type=1400 audit(1758663220.829:34528): avc:  denied  { mounton } for  pid=22596 comm="syz.1.6872" path="/191/file0/file0" dev="loop1" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  373.331721][T22609] FAULT_INJECTION: forcing a failure.
[  373.331721][T22609] name failslab, interval 1, probability 0, space 0, times 0
[  373.344609][T22609] CPU: 0 UID: 0 PID: 22609 Comm: syz.7.6876 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  373.344662][T22609] Tainted: [W]=WARN
[  373.344671][T22609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  373.344689][T22609] Call Trace:
[  373.344697][T22609]  <TASK>
[  373.344705][T22609]  __dump_stack+0x1d/0x30
[  373.344726][T22609]  dump_stack_lvl+0xe8/0x140
[  373.344754][T22609]  dump_stack+0x15/0x1b
[  373.344775][T22609]  should_fail_ex+0x265/0x280
[  373.344807][T22609]  should_failslab+0x8c/0xb0
[  373.344862][T22609]  kmem_cache_alloc_noprof+0x50/0x310
[  373.344899][T22609]  ? getname_flags+0x80/0x3b0
[  373.344928][T22609]  getname_flags+0x80/0x3b0
[  373.344963][T22609]  do_sys_openat2+0x60/0x110
[  373.345006][T22609]  __x64_sys_creat+0x65/0x90
[  373.345094][T22609]  x64_sys_call+0x2d94/0x2ff0
[  373.345116][T22609]  do_syscall_64+0xd2/0x200
[  373.345235][T22609]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  373.345261][T22609]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  373.345294][T22609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.345380][T22609] RIP: 0033:0x7f1a4ea9eec9
[  373.345400][T22609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  373.345467][T22609] RSP: 002b:00007f1a4d507038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  373.345486][T22609] RAX: ffffffffffffffda RBX: 00007f1a4ecf5fa0 RCX: 00007f1a4ea9eec9
[  373.345498][T22609] RDX: 0000000000000000 RSI: 0000000000000036 RDI: 00002000000003c0
[  373.345511][T22609] RBP: 00007f1a4d507090 R08: 0000000000000000 R09: 0000000000000000
[  373.345527][T22609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  373.345543][T22609] R13: 00007f1a4ecf6038 R14: 00007f1a4ecf5fa0 R15: 00007ffd6d98c388
[  373.345639][T22609]  </TASK>
[  373.605345][T22615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=22615 comm=syz.7.6878
[  373.626050][T22613] loop2: detected capacity change from 0 to 1024
[  373.659944][   T29] audit: type=1326 audit(1758663221.299:34529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22619 comm="syz.2.6881" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f71ec71eec9 code=0x0
[  373.686784][ T1034] hid-generic 0003:0004:0000.000B: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  374.018143][T22630] Falling back ldisc for ttyS3.
[  374.074398][T22639] loop9: detected capacity change from 0 to 128
[  374.105580][T22639] tipc: Started in network mode
[  374.110550][T22639] tipc: Node identity ac14140f, cluster identity 4711
[  374.117621][T22639] tipc: New replicast peer: 255.255.255.255
[  374.123734][T22639] tipc: Enabled bearer <udp:s>, priority 10
[  374.226182][   T29] audit: type=1326 audit(1758663221.859:34530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22647 comm="syz.1.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  374.256564][   T29] audit: type=1326 audit(1758663221.889:34531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22647 comm="syz.1.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  374.280292][   T29] audit: type=1326 audit(1758663221.889:34532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22647 comm="syz.1.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  374.304068][   T29] audit: type=1326 audit(1758663221.889:34533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22647 comm="syz.1.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  374.327791][   T29] audit: type=1326 audit(1758663221.889:34534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22647 comm="syz.1.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  374.351432][   T29] audit: type=1326 audit(1758663221.889:34535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22647 comm="syz.1.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  374.375186][   T29] audit: type=1326 audit(1758663221.889:34536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22647 comm="syz.1.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  374.410923][T22651] loop9: detected capacity change from 0 to 1024
[  374.515648][T22662] netlink: 'syz.8.6890': attribute type 3 has an invalid length.
[  374.534005][T22659] bridge0: entered promiscuous mode
[  374.539566][T22659] macvtap1: entered allmulticast mode
[  374.545025][T22659] bridge0: entered allmulticast mode
[  374.567740][T22659] bridge0: port 3(macvtap1) entered blocking state
[  374.574439][T22659] bridge0: port 3(macvtap1) entered disabled state
[  374.598185][T22659] bridge0: left allmulticast mode
[  374.603297][T22659] bridge0: left promiscuous mode
[  374.673746][T22677] loop9: detected capacity change from 0 to 512
[  374.690722][T22677] EXT4-fs (loop9): orphan cleanup on readonly fs
[  374.711041][T22677] ------------[ cut here ]------------
[  374.716587][T22677] WARNING: CPU: 1 PID: 22677 at fs/ext4/xattr.c:1906 ext4_xattr_block_set+0x18b1/0x1a30
[  374.726390][T22677] Modules linked in:
[  374.730331][T22677] CPU: 1 UID: 0 PID: 22677 Comm: syz.9.6900 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  374.741815][T22677] Tainted: [W]=WARN
[  374.745626][T22677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  374.755704][T22677] RIP: 0010:ext4_xattr_block_set+0x18b1/0x1a30
[  374.761954][T22677] Code: e8 b4 80 9d ff 81 fb 00 04 00 00 75 3c e8 67 7c 9d ff f0 41 80 65 28 fd eb 34 e8 5a 7c 9d ff e9 fe f3 ff ff e8 50 7c 9d ff 90 <0f> 0b 90 4c 89 ff e8 94 39 b8 ff 49 8b 1f 4c 89 e7 e8 89 39 b8 ff
[  374.781617][T22677] RSP: 0018:ffffc90002e1b658 EFLAGS: 00010283
[  374.787731][T22677] RAX: ffffffff81ba7d00 RBX: 0000000000000010 RCX: 0000000000080000
[  374.795716][T22677] RDX: ffffc90006a30000 RSI: 00000000000038f6 RDI: 00000000000038f7
[  374.803716][T22677] RBP: ffff88811a4e8800 R08: 0001c90002e1b86f R09: 0000000000000000
[  374.811771][T22677] R10: ffff888146c87400 R11: ffff888146c87000 R12: ffffc90002e1b868
[  374.819787][T22677] R13: 0000000000000000 R14: ffffc90002e1b858 R15: ffffc90002e1b860
[  374.827794][T22677] FS:  00007f04daad76c0(0000) GS:ffff8882aef40000(0000) knlGS:0000000000000000
[  374.836881][T22677] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  374.843491][T22677] CR2: 0000000000000000 CR3: 000000010e6c6000 CR4: 00000000003506f0
[  374.851530][T22677] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000
[  374.859803][T22677] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  374.868167][T22677] Call Trace:
[  374.871457][T22677]  <TASK>
[  374.874400][T22677]  ? strnlen+0x28/0x50
[  374.878562][T22677]  ? memcmp+0x5e/0x90
[  374.882564][T22677]  ? xattr_find_entry+0x18e/0x1b0
[  374.887634][T22677]  ext4_expand_extra_isize_ea+0xc65/0x11f0
[  374.893532][T22677]  __ext4_expand_extra_isize+0x246/0x280
[  374.899202][T22677]  __ext4_mark_inode_dirty+0x29d/0x3f0
[  374.904732][T22677]  ext4_evict_inode+0x80e/0xd90
[  374.909643][T22677]  ? __pfx_ext4_evict_inode+0x10/0x10
[  374.915054][T22677]  evict+0x2e3/0x550
[  374.919034][T22677]  ? __dquot_initialize+0x146/0x7c0
[  374.924355][T22677]  iput+0x447/0x5b0
[  374.928250][T22677]  ext4_process_orphan+0x1a9/0x1c0
[  374.933432][T22677]  ext4_orphan_cleanup+0x6a8/0xa00
[  374.938624][T22677]  ext4_fill_super+0x3260/0x35d0
[  374.943668][T22677]  ? set_blocksize+0x1a8/0x310
[  374.948490][T22677]  ? sb_set_blocksize+0xe3/0x100
[  374.953462][T22677]  ? setup_bdev_super+0x30e/0x370
[  374.958583][T22677]  ? __pfx_ext4_fill_super+0x10/0x10
[  374.963961][T22677]  get_tree_bdev_flags+0x28e/0x300
[  374.969143][T22677]  ? __pfx_ext4_fill_super+0x10/0x10
[  374.974549][T22677]  get_tree_bdev+0x1f/0x30
[  374.979015][T22677]  ext4_get_tree+0x1c/0x30
[  374.983484][T22677]  vfs_get_tree+0x57/0x1d0
[  374.987968][T22677]  do_new_mount+0x207/0x5e0
[  374.992777][T22677]  ? security_capable+0x83/0x90
[  374.997825][T22677]  path_mount+0x4a4/0xb20
[  375.002203][T22677]  ? user_path_at+0x109/0x130
[  375.007138][T22677]  __se_sys_mount+0x28f/0x2e0
[  375.011845][T22677]  ? trace_reschedule_exit+0xd/0xc0
[  375.017098][T22677]  __x64_sys_mount+0x67/0x80
[  375.021756][T22677]  x64_sys_call+0x2b4d/0x2ff0
[  375.026452][T22677]  do_syscall_64+0xd2/0x200
[  375.031091][T22677]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  375.037190][T22677]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  375.043058][T22677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.049004][T22677] RIP: 0033:0x7f04dc07066a
[  375.053464][T22677] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  375.073261][T22677] RSP: 002b:00007f04daad6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  375.081719][T22677] RAX: ffffffffffffffda RBX: 00007f04daad6ef0 RCX: 00007f04dc07066a
[  375.089737][T22677] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f04daad6eb0
[  375.097793][T22677] RBP: 0000200000000180 R08: 00007f04daad6ef0 R09: 000000000080078b
[  375.105791][T22677] R10: 000000000080078b R11: 0000000000000246 R12: 00002000000001c0
[  375.113965][T22677] R13: 00007f04daad6eb0 R14: 000000000000046a R15: 0000200000000680
[  375.116949][ T2956] tipc: Node number set to 2886997007
[  375.122243][T22677]  </TASK>
[  375.130732][T22677] ---[ end trace 0000000000000000 ]---
[  375.136966][T22677] EXT4-fs (loop9): 1 orphan inode deleted
[  375.252817][T21124] EXT4-fs unmount: 14 callbacks suppressed
[  375.252835][T21124] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.300438][T22693] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.360208][T22693] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.399845][T22704] loop8: detected capacity change from 0 to 1024
[  375.408752][T22704] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  375.445186][T22693] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.464994][T22709] bond1: entered promiscuous mode
[  375.470215][T22709] bond1: entered allmulticast mode
[  375.476066][T22709] 8021q: adding VLAN 0 to HW filter on device bond1
[  375.487885][T22709] bond1 (unregistering): Released all slaves
[  375.503327][T22693] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.627016][T21277] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.653329][T21277] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.663101][T21277] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.671907][T21277] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.714264][T22718] netlink: 'wÞ£ÿ': attribute type 21 has an invalid length.
[  375.722149][T22718] netlink: 132 bytes leftover after parsing attributes in process `wÞ£ÿ'.
[  375.784082][T21604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.883174][T22732] loop7: detected capacity change from 0 to 16384
[  376.046909][T22733] loop7: detected capacity change from 16384 to 16383
[  376.131070][T22736] netlink: 'syz.2.6917': attribute type 3 has an invalid length.
[  376.570940][T22751] bridge0: entered promiscuous mode
[  376.576457][T22751] macvtap1: entered allmulticast mode
[  376.582007][T22751] bridge0: entered allmulticast mode
[  376.588632][T22751] bridge0: port 3(macvtap1) entered blocking state
[  376.595182][T22751] bridge0: port 3(macvtap1) entered disabled state
[  376.603123][T22751] bridge0: left allmulticast mode
[  376.608238][T22751] bridge0: left promiscuous mode
[  376.666630][T22756] loop7: detected capacity change from 0 to 512
[  376.679602][T22756] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.692551][T22756] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  376.718361][T22756] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.6925: corrupted xattr block 19: overlapping e_value 
[  376.739558][T22756] EXT4-fs (loop7): Remounting filesystem read-only
[  376.746103][T22756] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  376.755381][T22756] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  376.769015][T22756] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  376.795643][T20873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.845436][T22768] loop2: detected capacity change from 0 to 1024
[  376.855022][T22768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.987074][T22774] loop7: detected capacity change from 0 to 16384
[  377.059627][T22780] pim6reg: entered allmulticast mode
[  377.071088][T22780] pim6reg: left allmulticast mode
[  377.099207][T22782] netlink: 'syz.8.6933': attribute type 21 has an invalid length.
[  377.114988][T22782] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6933'.
[  377.217653][T19773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.277002][T22783] loop7: detected capacity change from 16384 to 16383
[  377.363991][   T29] kauditd_printk_skb: 87 callbacks suppressed
[  377.364007][   T29] audit: type=1326 audit(1758663224.999:34624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22794 comm="syz.7.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  377.397411][   T29] audit: type=1326 audit(1758663225.029:34625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22794 comm="syz.7.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  377.421333][   T29] audit: type=1326 audit(1758663225.039:34626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22794 comm="syz.7.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  377.445131][   T29] audit: type=1326 audit(1758663225.039:34627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22794 comm="syz.7.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  377.468747][   T29] audit: type=1326 audit(1758663225.039:34628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22794 comm="syz.7.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  377.493432][T22795] syzkaller1: entered promiscuous mode
[  377.498048][   T29] audit: type=1326 audit(1758663225.039:34629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22794 comm="syz.7.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  377.498978][T22795] syzkaller1: entered allmulticast mode
[  377.522576][   T29] audit: type=1326 audit(1758663225.039:34630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22794 comm="syz.7.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  377.551723][   T29] audit: type=1326 audit(1758663225.039:34631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22794 comm="syz.7.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  377.557703][T22797] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6938'.
[  377.575355][   T29] audit: type=1326 audit(1758663225.129:34632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22794 comm="syz.7.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  377.638359][T22799] loop7: detected capacity change from 0 to 16384
[  377.645619][   T29] audit: type=1326 audit(1758663225.229:34633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22794 comm="syz.7.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  377.733600][ T4688] hid_parser_main: 34 callbacks suppressed
[  377.733619][ T4688] hid-generic 0000:0000:0000.000C: unknown main item tag 0x1
[  377.747022][ T4688] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  377.754491][ T4688] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  377.761933][ T4688] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  377.769414][ T4688] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  377.776862][ T4688] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  377.784360][ T4688] hid-generic 0000:0000:0000.000C: unknown main item tag 0x4
[  377.791890][ T4688] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  377.799368][ T4688] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  377.806926][ T4688] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  377.815244][ T4688] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  377.846965][T22800] loop7: detected capacity change from 16384 to 16383
[  377.953353][T22812] netlink: 'syz.2.6945': attribute type 21 has an invalid length.
[  377.956474][T22814] loop7: detected capacity change from 0 to 16384
[  377.971105][T22812] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6945'.
[  377.995385][T22816] loop9: detected capacity change from 0 to 128
[  378.032477][T22820] pim6reg: entered allmulticast mode
[  378.050503][T22818] loop2: detected capacity change from 0 to 1024
[  378.059982][T22820] pim6reg: left allmulticast mode
[  378.079617][T22818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  378.356384][T19773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.429085][ T4688] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  378.433421][T22842] bridge0: entered promiscuous mode
[  378.445546][T22842] macvtap1: entered allmulticast mode
[  378.451133][T22842] bridge0: entered allmulticast mode
[  378.481949][T22842] bridge0: port 3(macvtap1) entered blocking state
[  378.488715][T22842] bridge0: port 3(macvtap1) entered disabled state
[  378.503060][ T1034] hid-generic 0003:0004:0000.000E: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  378.534055][T22842] bridge0: left allmulticast mode
[  378.539417][T22842] bridge0: left promiscuous mode
[  378.563240][T22849] pim6reg: entered allmulticast mode
[  378.589646][T22849] pim6reg: left allmulticast mode
[  378.662141][T22851] FAULT_INJECTION: forcing a failure.
[  378.662141][T22851] name failslab, interval 1, probability 0, space 0, times 0
[  378.680540][T22851] CPU: 1 UID: 0 PID: 22851 Comm: syz.7.6956 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  378.680592][T22851] Tainted: [W]=WARN
[  378.680599][T22851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  378.680612][T22851] Call Trace:
[  378.680618][T22851]  <TASK>
[  378.680627][T22851]  __dump_stack+0x1d/0x30
[  378.680694][T22851]  dump_stack_lvl+0xe8/0x140
[  378.680718][T22851]  dump_stack+0x15/0x1b
[  378.680740][T22851]  should_fail_ex+0x265/0x280
[  378.680770][T22851]  should_failslab+0x8c/0xb0
[  378.680801][T22851]  kmem_cache_alloc_noprof+0x50/0x310
[  378.680862][T22851]  ? audit_log_start+0x365/0x6c0
[  378.680896][T22851]  audit_log_start+0x365/0x6c0
[  378.680990][T22851]  audit_seccomp+0x48/0x100
[  378.681016][T22851]  ? __seccomp_filter+0x68c/0x10d0
[  378.681044][T22851]  __seccomp_filter+0x69d/0x10d0
[  378.681070][T22851]  ? read_tsc+0x9/0x20
[  378.681090][T22851]  ? ktime_get+0x1eb/0x210
[  378.681184][T22851]  ? lapic_next_event+0x11/0x20
[  378.681215][T22851]  ? clockevents_program_event+0x240/0x4e0
[  378.681249][T22851]  __secure_computing+0x82/0x150
[  378.681311][T22851]  syscall_trace_enter+0xcf/0x1e0
[  378.681343][T22851]  do_syscall_64+0xac/0x200
[  378.681486][T22851]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  378.681578][T22851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.681679][T22851] RIP: 0033:0x7f1a4ea9eec9
[  378.681698][T22851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  378.681720][T22851] RSP: 002b:00007f1a4d507038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[  378.681743][T22851] RAX: ffffffffffffffda RBX: 00007f1a4ecf5fa0 RCX: 00007f1a4ea9eec9
[  378.681757][T22851] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000008
[  378.681774][T22851] RBP: 00007f1a4d507090 R08: 0000000000000007 R09: 0000000000000009
[  378.681785][T22851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  378.681799][T22851] R13: 00007f1a4ecf6038 R14: 00007f1a4ecf5fa0 R15: 00007ffd6d98c388
[  378.681821][T22851]  </TASK>
[  378.892097][T22847] loop7: detected capacity change from 16384 to 16383
[  378.994236][T22870] loop9: detected capacity change from 0 to 1024
[  378.994766][ T2956] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  379.027924][T22870] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.080657][T21124] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.095850][T22878] loop8: detected capacity change from 0 to 1024
[  379.105524][T22878] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.157485][T21604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.553015][T22911] bridge0: entered promiscuous mode
[  379.562544][T22911] macvtap1: entered allmulticast mode
[  379.568030][T22911] bridge0: entered allmulticast mode
[  379.592573][T22911] bridge0: port 3(macvtap1) entered blocking state
[  379.599186][T22911] bridge0: port 3(macvtap1) entered disabled state
[  379.608558][T22911] bridge0: left allmulticast mode
[  379.613675][T22911] bridge0: left promiscuous mode
[  379.634209][T22912] bridge0: entered promiscuous mode
[  379.646889][T22912] macvtap1: entered allmulticast mode
[  379.652309][T22912] bridge0: entered allmulticast mode
[  379.659586][T22912] bridge0: port 3(macvtap1) entered blocking state
[  379.666153][T22912] bridge0: port 3(macvtap1) entered disabled state
[  379.674222][T22912] bridge0: left allmulticast mode
[  379.679330][T22912] bridge0: left promiscuous mode
[  379.771398][T22917] loop7: detected capacity change from 0 to 16384
[  379.841361][T22921] pim6reg: entered allmulticast mode
[  379.860791][T22919] tmpfs: Unknown parameter 's'
[  379.863193][T22921] pim6reg: left allmulticast mode
[  379.878112][T22919] can0: slcan on ttyS3.
[  379.947042][T22918] can0 (unregistered): slcan off ttyS3.
[  380.046940][T22917] loop7: detected capacity change from 16384 to 16383
[  380.152050][T22939] loop8: detected capacity change from 0 to 512
[  380.189392][T22939] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  380.215281][T22939] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  380.227490][T22939] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.6986: corrupted xattr block 19: overlapping e_value 
[  380.247933][T22939] EXT4-fs (loop8): Remounting filesystem read-only
[  380.254523][T22939] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  380.264023][T22939] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  380.273169][T22939] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  380.335148][T21604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.369253][T22961] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6993'.
[  380.401051][T22963] bridge0: entered promiscuous mode
[  380.409052][T22963] macvtap1: entered allmulticast mode
[  380.414478][T22963] bridge0: entered allmulticast mode
[  380.422764][T22963] bridge0: port 3(macvtap1) entered blocking state
[  380.429496][T22963] bridge0: port 3(macvtap1) entered disabled state
[  380.439878][T22963] bridge0: left allmulticast mode
[  380.445023][T22963] bridge0: left promiscuous mode
[  380.560751][ T1034] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  380.591497][T22990] FAULT_INJECTION: forcing a failure.
[  380.591497][T22990] name failslab, interval 1, probability 0, space 0, times 0
[  380.604225][T22990] CPU: 1 UID: 0 PID: 22990 Comm: syz.2.7001 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  380.604259][T22990] Tainted: [W]=WARN
[  380.604301][T22990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  380.604315][T22990] Call Trace:
[  380.604322][T22990]  <TASK>
[  380.604329][T22990]  __dump_stack+0x1d/0x30
[  380.604378][T22990]  dump_stack_lvl+0xe8/0x140
[  380.604399][T22990]  dump_stack+0x15/0x1b
[  380.604416][T22990]  should_fail_ex+0x265/0x280
[  380.604444][T22990]  should_failslab+0x8c/0xb0
[  380.604550][T22990]  kmem_cache_alloc_node_noprof+0x57/0x320
[  380.604583][T22990]  ? __alloc_skb+0x101/0x320
[  380.604609][T22990]  __alloc_skb+0x101/0x320
[  380.604656][T22990]  netlink_alloc_large_skb+0xba/0xf0
[  380.604682][T22990]  netlink_sendmsg+0x3cf/0x6b0
[  380.604724][T22990]  ? __pfx_netlink_sendmsg+0x10/0x10
[  380.604753][T22990]  __sock_sendmsg+0x145/0x180
[  380.604790][T22990]  ____sys_sendmsg+0x31e/0x4e0
[  380.604821][T22990]  ___sys_sendmsg+0x17b/0x1d0
[  380.604865][T22990]  __x64_sys_sendmsg+0xd4/0x160
[  380.604908][T22990]  x64_sys_call+0x191e/0x2ff0
[  380.604932][T22990]  do_syscall_64+0xd2/0x200
[  380.604996][T22990]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  380.605023][T22990]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  380.605056][T22990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.605138][T22990] RIP: 0033:0x7f71ec71eec9
[  380.605154][T22990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  380.605174][T22990] RSP: 002b:00007f71eb17f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  380.605194][T22990] RAX: ffffffffffffffda RBX: 00007f71ec975fa0 RCX: 00007f71ec71eec9
[  380.605207][T22990] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005
[  380.605220][T22990] RBP: 00007f71eb17f090 R08: 0000000000000000 R09: 0000000000000000
[  380.605249][T22990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  380.605261][T22990] R13: 00007f71ec976038 R14: 00007f71ec975fa0 R15: 00007ffc31eb5678
[  380.605282][T22990]  </TASK>
[  380.910541][T22999] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7003'.
[  380.924039][T22996] loop8: detected capacity change from 0 to 764
[  380.944961][T22996] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=22996 comm=syz.8.7005
[  381.026041][T23012] loop9: detected capacity change from 0 to 1024
[  381.040087][T23012] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  381.070450][T21124] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.126888][T23019] loop9: detected capacity change from 0 to 2048
[  381.190467][T23019] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7011'.
[  381.208653][T23019] FAULT_INJECTION: forcing a failure.
[  381.208653][T23019] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  381.222112][T23019] CPU: 0 UID: 0 PID: 23019 Comm: syz.9.7011 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  381.222181][T23019] Tainted: [W]=WARN
[  381.222188][T23019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  381.222201][T23019] Call Trace:
[  381.222208][T23019]  <TASK>
[  381.222216][T23019]  __dump_stack+0x1d/0x30
[  381.222241][T23019]  dump_stack_lvl+0xe8/0x140
[  381.222315][T23019]  dump_stack+0x15/0x1b
[  381.222429][T23019]  should_fail_ex+0x265/0x280
[  381.222459][T23019]  should_fail+0xb/0x20
[  381.222498][T23019]  should_fail_usercopy+0x1a/0x20
[  381.222524][T23019]  _copy_to_user+0x20/0xa0
[  381.222554][T23019]  rng_dev_read+0x3ef/0x740
[  381.222580][T23019]  ? __pfx_rng_dev_read+0x10/0x10
[  381.222635][T23019]  vfs_readv+0x3f8/0x690
[  381.222716][T23019]  __x64_sys_preadv+0xfd/0x1c0
[  381.222750][T23019]  x64_sys_call+0x282a/0x2ff0
[  381.222871][T23019]  do_syscall_64+0xd2/0x200
[  381.222960][T23019]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  381.222998][T23019]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  381.223094][T23019]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.223121][T23019] RIP: 0033:0x7f04dc06eec9
[  381.223139][T23019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  381.223156][T23019] RSP: 002b:00007f04daad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  381.223174][T23019] RAX: ffffffffffffffda RBX: 00007f04dc2c5fa0 RCX: 00007f04dc06eec9
[  381.223208][T23019] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000007
[  381.223224][T23019] RBP: 00007f04daad7090 R08: 0000000000000000 R09: 0000000000000000
[  381.223296][T23019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  381.223310][T23019] R13: 00007f04dc2c6038 R14: 00007f04dc2c5fa0 R15: 00007fff7fa68a28
[  381.223333][T23019]  </TASK>
[  381.507973][T23025] netlink: 'syz.8.7012': attribute type 3 has an invalid length.
[  381.563911][T23033] random: crng reseeded on system resumption
[  381.574319][T23034] random: crng reseeded on system resumption
[  381.814453][T23045] team0: Cannot enslave team device to itself
[  381.820624][T23045] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  381.900395][T23049] loop7: detected capacity change from 0 to 1024
[  381.908565][T23049] EXT4-fs: Ignoring removed mblk_io_submit option
[  381.948440][T23049] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal
[  382.050431][T23049] infiniband syz!: set active
[  382.055182][T23049] infiniband syz!: added team_slave_0
[  382.093034][T23049] RDS/IB: syz!: added
[  382.102651][T23049] smc: adding ib device syz! with port count 1
[  382.115441][T23049] smc:    ib device syz! port 1 has pnetid 
[  382.463399][   T29] kauditd_printk_skb: 499 callbacks suppressed
[  382.463414][   T29] audit: type=1326 audit(1758663230.099:35131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23048 comm="syz.7.7022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  382.520205][   T29] audit: type=1326 audit(1758663230.129:35132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23048 comm="syz.7.7022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  382.630497][T23062] loop7: detected capacity change from 0 to 16384
[  382.703937][T23063] pim6reg: entered allmulticast mode
[  382.727610][T23063] pim6reg: left allmulticast mode
[  382.936919][T23063] loop7: detected capacity change from 16384 to 16383
[  383.080777][T23067] netlink: 4436 bytes leftover after parsing attributes in process `syz.7.7027'.
[  383.745210][ T3391] hid_parser_main: 145 callbacks suppressed
[  383.745228][ T3391] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0
[  383.758776][ T3391] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0
[  383.766170][ T3391] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0
[  383.807990][ T3391] hid-generic 0003:0004:0000.0011: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  384.110222][   T29] audit: type=1400 audit(1758663231.749:35133): avc:  denied  { create } for  pid=23100 comm="syz.7.7041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  384.154645][T23101] netlink: 256 bytes leftover after parsing attributes in process `syz.7.7041'.
[  384.457992][   T29] audit: type=1326 audit(1758663232.089:35134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23117 comm="syz.1.7046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  384.481755][   T29] audit: type=1326 audit(1758663232.089:35135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23117 comm="syz.1.7046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  384.526100][T23124] loop7: detected capacity change from 0 to 16384
[  384.604849][T23125] pim6reg: entered allmulticast mode
[  384.614456][T23125] pim6reg: left allmulticast mode
[  384.907241][T23126] loop7: detected capacity change from 16384 to 16383
[  385.049343][T23134] loop7: detected capacity change from 0 to 1024
[  385.076109][T23134] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  385.151037][T20873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.186984][   T29] audit: type=1326 audit(1758663232.809:35136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23130 comm="syz.8.7049" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35fbffeec9 code=0x0
[  385.242851][   T29] audit: type=1326 audit(1758663232.859:35137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23143 comm="syz.7.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  385.266526][   T29] audit: type=1326 audit(1758663232.859:35138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23143 comm="syz.7.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  385.290411][   T29] audit: type=1326 audit(1758663232.859:35139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23143 comm="syz.7.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  385.314047][   T29] audit: type=1326 audit(1758663232.859:35140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23143 comm="syz.7.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  385.465608][T23154] bridge0: entered promiscuous mode
[  385.471193][T23154] macvtap1: entered allmulticast mode
[  385.476668][T23154] bridge0: entered allmulticast mode
[  385.483367][T23154] bridge0: port 3(macvtap1) entered blocking state
[  385.490035][T23154] bridge0: port 3(macvtap1) entered disabled state
[  385.534878][T23154] bridge0: left allmulticast mode
[  385.540122][T23154] bridge0: left promiscuous mode
[  385.777244][ T2956] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0
[  385.784705][ T2956] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0
[  385.792161][ T2956] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0
[  385.921156][ T2956] hid-generic 0003:0004:0000.0012: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  385.942961][T23167] netlink: 4436 bytes leftover after parsing attributes in process `syz.7.7062'.
[  385.963169][T23170] loop8: detected capacity change from 0 to 1024
[  385.984497][T23170] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  386.044464][T21604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  386.132826][T23180] loop8: detected capacity change from 0 to 1024
[  386.156382][T23180] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  386.651998][T23194] netlink: 'syz.7.7072': attribute type 21 has an invalid length.
[  386.673801][T23194] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7072'.
[  386.742156][T23198] loop7: detected capacity change from 0 to 16384
[  386.832997][T23201] pim6reg: entered allmulticast mode
[  386.867546][T23201] pim6reg: left allmulticast mode
[  387.013553][T21604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.096868][T23206] loop7: detected capacity change from 16384 to 16383
[  387.170003][T23217] bridge0: entered promiscuous mode
[  387.175584][T23217] macvtap1: entered allmulticast mode
[  387.181009][T23217] bridge0: entered allmulticast mode
[  387.191114][T23217] bridge0: port 3(macvtap1) entered blocking state
[  387.197799][T23217] bridge0: port 3(macvtap1) entered disabled state
[  387.205981][T23217] bridge0: left allmulticast mode
[  387.211206][T23217] bridge0: left promiscuous mode
[  387.321195][T23225] netlink: 'syz.1.7086': attribute type 21 has an invalid length.
[  387.329766][T23225] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7086'.
[  388.166330][T23246] loop7: detected capacity change from 0 to 16384
[  388.387279][T23249] loop7: detected capacity change from 16384 to 16383
[  388.579255][T23257] bridge0: entered promiscuous mode
[  388.584679][T23257] macvtap1: entered allmulticast mode
[  388.590109][T23257] bridge0: entered allmulticast mode
[  388.597390][T23257] bridge0: port 3(macvtap1) entered blocking state
[  388.604001][T23257] bridge0: port 3(macvtap1) entered disabled state
[  388.659708][T23257] bridge0: left allmulticast mode
[  388.664797][T23257] bridge0: left promiscuous mode
[  388.702288][   T29] kauditd_printk_skb: 126 callbacks suppressed
[  388.702304][   T29] audit: type=1400 audit(1758663236.339:35267): avc:  denied  { name_bind } for  pid=23258 comm="syz.8.7099" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  388.885232][   T29] audit: type=1326 audit(1758663236.519:35268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23263 comm="syz.2.7100" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f71ec71eec9 code=0x0
[  389.030362][T23281] netlink: 'syz.7.7108': attribute type 21 has an invalid length.
[  389.039465][T23281] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7108'.
[  389.074694][T23284] loop7: detected capacity change from 0 to 16384
[  389.236235][T23285] pim6reg: entered allmulticast mode
[  389.243719][T23285] pim6reg: left allmulticast mode
[  389.379119][   T29] audit: type=1326 audit(1758663236.999:35269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23287 comm="syz.1.7110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  389.402812][   T29] audit: type=1326 audit(1758663236.999:35270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23287 comm="syz.1.7110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  389.459784][   T29] audit: type=1326 audit(1758663237.029:35271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23287 comm="syz.1.7110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  389.483511][   T29] audit: type=1326 audit(1758663237.029:35272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23287 comm="syz.1.7110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  389.507206][   T29] audit: type=1326 audit(1758663237.029:35273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23287 comm="syz.1.7110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  389.530894][   T29] audit: type=1326 audit(1758663237.029:35274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23287 comm="syz.1.7110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  389.554516][   T29] audit: type=1326 audit(1758663237.029:35275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23287 comm="syz.1.7110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  389.578306][   T29] audit: type=1326 audit(1758663237.029:35276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23287 comm="syz.1.7110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06383eec9 code=0x7ffc0000
[  389.627856][T23286] loop7: detected capacity change from 16384 to 16383
[  389.884599][T23314] netlink: 'syz.7.7119': attribute type 21 has an invalid length.
[  389.895894][T23314] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7119'.
[  389.993807][T23318] random: crng reseeded on system resumption
[  390.008824][T23318] netlink: 'syz.1.7120': attribute type 13 has an invalid length.
[  390.110685][T23318] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.118028][T23318] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.185353][T23318] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  390.199683][T23318] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  390.289556][T21277] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  390.299748][T21277] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  390.308794][T21277] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  390.336662][T21277] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  390.382130][ T3391] hid-generic 0000:0000:0000.0013: unknown main item tag 0x1
[  390.389710][ T3391] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  390.397281][ T3391] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  390.404676][ T3391] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  390.412143][ T3391] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  390.419593][ T3391] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  390.427742][ T3391] hid-generic 0000:0000:0000.0013: unknown main item tag 0x4
[  390.435231][ T3391] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  390.442690][ T3391] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  390.450105][ T3391] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  390.503328][ T3391] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  390.525972][T23332] loop7: detected capacity change from 0 to 16384
[  390.556229][T23336] tipc: Started in network mode
[  390.561450][T23336] tipc: Node identity ac14140f, cluster identity 4711
[  390.580856][T23336] tipc: New replicast peer: 255.255.255.255
[  390.587421][T23336] tipc: Enabled bearer <udp:s>, priority 10
[  390.698486][T23339] loop7: detected capacity change from 16384 to 16383
[  390.818117][T23347] macvtap1: entered allmulticast mode
[  390.823571][T23347] bridge0: entered allmulticast mode
[  390.831530][T23347] bridge0: port 3(macvtap1) entered blocking state
[  390.838382][T23347] bridge0: port 3(macvtap1) entered disabled state
[  390.846600][T23347] bridge0: left allmulticast mode
[  391.009507][T23359] loop7: detected capacity change from 0 to 16384
[  391.108540][T23364] pim6reg: entered allmulticast mode
[  391.113974][T23363] netlink: 'syz.7.7139': attribute type 21 has an invalid length.
[  391.123569][T23363] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7139'.
[  391.133457][T23364] pim6reg: left allmulticast mode
[  391.537064][T23367] loop7: detected capacity change from 16384 to 16383
[  391.565447][T23374] pim6reg: entered allmulticast mode
[  391.574604][T23374] pim6reg: left allmulticast mode
[  391.687592][T23383] loop7: detected capacity change from 0 to 16384
[  391.708611][ T2956] tipc: Node number set to 2886997007
[  391.756350][T23385] pim6reg: entered allmulticast mode
[  391.782171][T23385] pim6reg: left allmulticast mode
[  392.116951][T23390] loop7: detected capacity change from 16384 to 16383
[  392.614472][T23414] bridge0: entered promiscuous mode
[  392.620996][T23414] macvtap1: entered allmulticast mode
[  392.626503][T23414] bridge0: entered allmulticast mode
[  392.634465][T23414] bridge0: port 3(macvtap1) entered blocking state
[  392.641063][T23414] bridge0: port 3(macvtap1) entered disabled state
[  392.657704][T23414] bridge0: left allmulticast mode
[  392.662806][T23414] bridge0: left promiscuous mode
[  393.449523][T23446] bridge0: entered promiscuous mode
[  393.454917][T23446] macvtap1: entered allmulticast mode
[  393.461063][T23446] bridge0: entered allmulticast mode
[  393.469152][T23446] bridge0: port 3(macvtap1) entered blocking state
[  393.475783][T23446] bridge0: port 3(macvtap1) entered disabled state
[  393.483859][T23446] bridge0: left allmulticast mode
[  393.489327][T23446] bridge0: left promiscuous mode
[  393.866033][T23468] bridge0: entered promiscuous mode
[  393.893358][T23468] macvtap1: entered allmulticast mode
[  393.898934][T23468] bridge0: entered allmulticast mode
[  393.911128][T23468] bridge0: port 3(macvtap1) entered blocking state
[  393.918515][T23468] bridge0: port 3(macvtap1) entered disabled state
[  393.950860][T23468] bridge0: left allmulticast mode
[  393.955943][T23468] bridge0: left promiscuous mode
[  393.996344][T23473] tipc: Started in network mode
[  394.001451][T23473] tipc: Node identity ac14140f, cluster identity 4711
[  394.009555][T23473] tipc: New replicast peer: 255.255.255.255
[  394.015777][T23473] tipc: Enabled bearer <udp:s>, priority 10
[  394.082141][T23478] loop7: detected capacity change from 0 to 16384
[  394.101283][T23480] bridge0: entered promiscuous mode
[  394.115502][T23480] macvtap1: entered allmulticast mode
[  394.121218][T23480] bridge0: entered allmulticast mode
[  394.128395][T23480] bridge0: port 3(macvtap1) entered blocking state
[  394.134940][T23480] bridge0: port 3(macvtap1) entered disabled state
[  394.143550][T23480] bridge0: left allmulticast mode
[  394.149059][T23480] bridge0: left promiscuous mode
[  394.189820][T23483] pim6reg: entered allmulticast mode
[  394.195997][   T29] kauditd_printk_skb: 241 callbacks suppressed
[  394.196072][   T29] audit: type=1326 audit(1758663241.829:35518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23475 comm="syz.8.7181" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35fbffeec9 code=0x0
[  394.208492][T23483] pim6reg: left allmulticast mode
[  394.349411][T23484] loop7: detected capacity change from 16384 to 16383
[  394.507212][T23491] Falling back ldisc for ttyS3.
[  394.610883][T23508] bridge_slave_0: left allmulticast mode
[  394.616652][T23508] bridge_slave_0: left promiscuous mode
[  394.622472][T23508] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.633437][T23508] bridge_slave_1: left allmulticast mode
[  394.639219][T23508] bridge_slave_1: left promiscuous mode
[  394.644876][T23508] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.657258][T23509] netlink: 'syz.2.7195': attribute type 10 has an invalid length.
[  394.665107][T23509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7195'.
[  394.675258][T23508] bond0: (slave bond_slave_0): Releasing backup interface
[  394.685479][T23508] bond0: (slave bond_slave_1): Releasing backup interface
[  394.701047][T23508] team0: Port device team_slave_0 removed
[  394.712776][T23508] team0: Port device team_slave_1 removed
[  394.720695][T23508] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  394.728189][T23508] batman_adv: batadv0: Removing interface: batadv_slave_0
[  394.759848][T23508] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  394.767332][T23508] batman_adv: batadv0: Removing interface: batadv_slave_1
[  394.778667][   T29] audit: type=1400 audit(1758663242.409:35519): avc:  denied  { write } for  pid=23507 comm="syz.2.7195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  394.795078][T23509] batman_adv: batadv0: Adding interface: veth1_vlan
[  394.804990][T23509] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.833966][T23509] batman_adv: batadv0: Interface activated: veth1_vlan
[  394.871125][ T3391] hid-generic 0003:0004:0000.0014: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  394.928566][T23526] loop7: detected capacity change from 0 to 16384
[  394.997659][T23531] Falling back ldisc for ttyS3.
[  394.997986][T23536] pim6reg: entered allmulticast mode
[  395.016919][ T3391] tipc: Node number set to 2886997007
[  395.087334][T23540] Falling back ldisc for ttyS3.
[  395.167028][T23536] loop7: detected capacity change from 16384 to 16383
[  395.217538][T23551] loop8: detected capacity change from 0 to 1024
[  395.229465][T23551] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  395.234084][T23525] pim6reg: left allmulticast mode
[  395.264022][T21604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.348631][T23563] bridge_slave_0: left promiscuous mode
[  395.354466][T23563] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.373842][   T29] audit: type=1326 audit(1758663243.009:35520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23555 comm="syz.9.7209" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04dc06eec9 code=0x0
[  395.404671][T23563] bridge_slave_1: left allmulticast mode
[  395.410514][T23563] bridge_slave_1: left promiscuous mode
[  395.416322][T23563] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.435267][T23563] bond0: (slave bond_slave_0): Releasing backup interface
[  395.445604][T23563] bond0: (slave bond_slave_1): Releasing backup interface
[  395.454610][T23573] netlink: 'syz.1.7211': attribute type 10 has an invalid length.
[  395.462601][T23573] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7211'.
[  395.471891][T23563] team0: Port device team_slave_0 removed
[  395.480386][T23563] team0: Port device team_slave_1 removed
[  395.486412][T23563] batman_adv: batadv0: Removing interface: batadv_slave_0
[  395.493756][   T29] audit: type=1326 audit(1758663243.119:35521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23576 comm="syz.2.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec71eec9 code=0x7ffc0000
[  395.517570][   T29] audit: type=1326 audit(1758663243.119:35522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23576 comm="syz.2.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec71eec9 code=0x7ffc0000
[  395.541306][   T29] audit: type=1326 audit(1758663243.119:35523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23576 comm="syz.2.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f71ec71eec9 code=0x7ffc0000
[  395.564758][   T29] audit: type=1326 audit(1758663243.119:35524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23576 comm="syz.2.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec71eec9 code=0x7ffc0000
[  395.588437][   T29] audit: type=1326 audit(1758663243.119:35525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23576 comm="syz.2.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec71eec9 code=0x7ffc0000
[  395.612084][   T29] audit: type=1326 audit(1758663243.119:35526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23576 comm="syz.2.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f71ec71eec9 code=0x7ffc0000
[  395.635588][   T29] audit: type=1326 audit(1758663243.119:35527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23576 comm="syz.2.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec71eec9 code=0x7ffc0000
[  395.659982][T23563] batman_adv: batadv0: Removing interface: batadv_slave_1
[  395.672546][T23564] bridge0: entered promiscuous mode
[  395.678127][T23564] macvtap1: entered allmulticast mode
[  395.683573][T23564] bridge0: entered allmulticast mode
[  395.696892][T23564] bridge0: port 3(macvtap1) entered blocking state
[  395.703464][T23564] bridge0: port 3(macvtap1) entered disabled state
[  395.711138][T23564] bridge0: left allmulticast mode
[  395.716249][T23564] bridge0: left promiscuous mode
[  395.727310][T23572] bridge0: entered promiscuous mode
[  395.732617][T23572] macvtap1: entered allmulticast mode
[  395.738134][T23572] bridge0: entered allmulticast mode
[  395.745014][T23572] bridge0: port 3(macvtap1) entered blocking state
[  395.751643][T23572] bridge0: port 3(macvtap1) entered disabled state
[  395.759716][T23572] bridge0: left allmulticast mode
[  395.764790][T23572] bridge0: left promiscuous mode
[  395.784450][T23573] veth1_vlan: left promiscuous mode
[  395.790406][T23573] batman_adv: batadv0: Adding interface: veth1_vlan
[  395.797020][T23573] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.822977][T23573] batman_adv: batadv0: Interface activated: veth1_vlan
[  395.850527][T23591] netlink: 'syz.1.7221': attribute type 21 has an invalid length.
[  395.858665][T23591] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7221'.
[  395.904480][T23595] loop7: detected capacity change from 0 to 16384
[  396.047073][T23605] loop7: detected capacity change from 16384 to 16383
[  396.077188][T23608] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7228'.
[  396.198763][T23620] loop8: detected capacity change from 0 to 128
[  396.212253][T23618] loop7: detected capacity change from 0 to 1024
[  396.223647][T23618] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  396.228043][T23620] tipc: Started in network mode
[  396.241105][T23620] tipc: Node identity ac14140f, cluster identity 4711
[  396.248157][T23620] tipc: New replicast peer: 255.255.255.255
[  396.254204][T23620] tipc: Enabled bearer <udp:s>, priority 10
[  396.447826][T20873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.466921][T23630] netlink: 'syz.7.7236': attribute type 21 has an invalid length.
[  396.475069][T23630] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7236'.
[  396.715434][T23650] loop7: detected capacity change from 0 to 1024
[  396.739404][T23650] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  396.760573][T23655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7248'.
[  396.799543][T23658] bridge0: entered promiscuous mode
[  396.814151][T23658] macvtap1: entered allmulticast mode
[  396.819960][T23658] bridge0: entered allmulticast mode
[  396.826629][T23658] bridge0: port 1(macvtap1) entered blocking state
[  396.833253][T23658] bridge0: port 1(macvtap1) entered disabled state
[  396.847824][T23658] bridge0: left allmulticast mode
[  396.853085][T23658] bridge0: left promiscuous mode
[  396.895388][T23668] netlink: 'syz.8.7246': attribute type 3 has an invalid length.
[  397.099252][T23683] loop9: detected capacity change from 0 to 512
[  397.206504][T23683] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.7259: Invalid inode bitmap blk 4 in block_group 0
[  397.240888][T23683] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  397.376883][T21167] tipc: Node number set to 2886997007
[  397.496720][T20873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.553513][T23690] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7261'.
[  397.690202][T23679] Set syz1 is full, maxelem 65536 reached
[  397.775395][T23700] loop7: detected capacity change from 0 to 512
[  397.799021][T21124] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.811239][T23700] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  397.836218][T23700] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  397.903548][T23700] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.7266: corrupted xattr block 19: overlapping e_value 
[  397.948520][T23700] EXT4-fs (loop7): Remounting filesystem read-only
[  397.955084][T23700] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  398.146336][T20873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.203756][T23712] loop7: detected capacity change from 0 to 16384
[  398.376900][T23713] loop7: detected capacity change from 16384 to 16383
[  398.800475][T23734] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7278'.
[  399.040235][T23745] loop8: detected capacity change from 0 to 512
[  399.080284][T23745] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  399.104358][T23745] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  399.139276][T23745] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.7283: corrupted xattr block 19: overlapping e_value 
[  399.186986][T23745] EXT4-fs (loop8): Remounting filesystem read-only
[  399.193585][T23745] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  399.260207][T21604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.326611][T23756] netlink: 'syz.9.7281': attribute type 3 has an invalid length.
[  399.478881][T23760] loop8: detected capacity change from 0 to 2048
[  399.498750][   T29] kauditd_printk_skb: 79 callbacks suppressed
[  399.498767][   T29] audit: type=1326 audit(1758663247.139:35607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23763 comm="syz.7.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  399.550138][   T29] audit: type=1326 audit(1758663247.169:35608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23763 comm="syz.7.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  399.573736][   T29] audit: type=1326 audit(1758663247.169:35609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23763 comm="syz.7.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  399.597466][   T29] audit: type=1326 audit(1758663247.169:35610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23763 comm="syz.7.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  399.621075][   T29] audit: type=1326 audit(1758663247.169:35611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23763 comm="syz.7.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  399.644624][   T29] audit: type=1326 audit(1758663247.169:35612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23763 comm="syz.7.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  399.668283][   T29] audit: type=1326 audit(1758663247.169:35613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23763 comm="syz.7.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  399.692094][   T29] audit: type=1326 audit(1758663247.169:35614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23763 comm="syz.7.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  399.715627][   T29] audit: type=1326 audit(1758663247.169:35615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23763 comm="syz.7.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  399.739265][   T29] audit: type=1326 audit(1758663247.169:35616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23763 comm="syz.7.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ea9eec9 code=0x7ffc0000
[  399.807486][T23760] EXT4-fs (loop8): failed to initialize system zone (-117)
[  399.814845][T23760] EXT4-fs (loop8): mount failed
[  399.980763][T23781] netlink: 'syz.2.7295': attribute type 21 has an invalid length.
[  399.989357][T23781] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7295'.
[  400.027144][T23783] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  400.162835][T23793] loop7: detected capacity change from 0 to 16384
[  400.223814][T23801] pim6reg: entered allmulticast mode
[  400.239051][T23799] loop9: detected capacity change from 0 to 1024
[  400.251283][T23799] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  400.283632][T23807] pim6reg: entered allmulticast mode
[  400.301962][T23806] pim6reg: left allmulticast mode
[  400.336587][T23799] ==================================================================
[  400.344721][T23799] BUG: KCSAN: data-race in filemap_read / filemap_read
[  400.351602][T23799] 
[  400.353933][T23799] read to 0xffff88810421bbe8 of 8 bytes by task 23810 on cpu 0:
[  400.361580][T23799]  filemap_read+0x6f/0xa00
[  400.366008][T23799]  generic_file_read_iter+0x79/0x330
[  400.371316][T23799]  ext4_file_read_iter+0x1cc/0x290
[  400.376469][T23799]  copy_splice_read+0x43f/0x660
[  400.381343][T23799]  splice_direct_to_actor+0x290/0x680
[  400.386735][T23799]  do_splice_direct+0xda/0x150
[  400.391517][T23799]  do_sendfile+0x380/0x650
[  400.395964][T23799]  __x64_sys_sendfile64+0x105/0x150
[  400.401198][T23799]  x64_sys_call+0x2bb0/0x2ff0
[  400.405909][T23799]  do_syscall_64+0xd2/0x200
[  400.410455][T23799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.416375][T23799] 
[  400.418712][T23799] write to 0xffff88810421bbe8 of 8 bytes by task 23799 on cpu 1:
[  400.426450][T23799]  filemap_read+0x974/0xa00
[  400.430969][T23799]  generic_file_read_iter+0x79/0x330
[  400.436273][T23799]  ext4_file_read_iter+0x1cc/0x290
[  400.441434][T23799]  copy_splice_read+0x43f/0x660
[  400.446307][T23799]  splice_direct_to_actor+0x290/0x680
[  400.451706][T23799]  do_splice_direct+0xda/0x150
[  400.456493][T23799]  do_sendfile+0x380/0x650
[  400.460944][T23799]  __x64_sys_sendfile64+0x105/0x150
[  400.466169][T23799]  x64_sys_call+0x2bb0/0x2ff0
[  400.470884][T23799]  do_syscall_64+0xd2/0x200
[  400.475432][T23799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.481344][T23799] 
[  400.483679][T23799] value changed: 0x0000000000000097 -> 0x0000000000000098
[  400.490802][T23799] 
[  400.493134][T23799] Reported by Kernel Concurrency Sanitizer on:
[  400.499325][T23799] CPU: 1 UID: 0 PID: 23799 Comm: syz.9.7303 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  400.510817][T23799] Tainted: [W]=WARN
[  400.514639][T23799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  400.524718][T23799] ==================================================================
[  400.585124][T21124] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  400.597287][T23809] Falling back ldisc for ttyS3.
[  400.606869][T23801] loop7: detected capacity change from 16384 to 16383