last executing test programs:

1m20.267914085s ago: executing program 4 (id=5):
r0 = socket$netlink(0x10, 0x3, 0x14) (async)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@user_xattr}, {@norecovery}, {@errors_remount}]}, 0x1, 0x570, &(0x7f00000019c0)="$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") (async)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000f9ffffff000000001100000018110000", @ANYRES32, @ANYBLOB="0000000000000060b702000014"], 0x0, 0x8000, 0x0, 0x0, 0x40f00, 0x4b, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000700)=ANY=[], 0x381, 0x2)

1m19.92764247s ago: executing program 4 (id=6):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18)
r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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")
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
dup2(r3, r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180200000300000000000000000000008500000022000000850000007d0000009500000000000000402bca7352f843c77c504b24b7d19994c053aa2e05a39c8b013943758ebfa1c64325881f2fd51114e58e8bd2151d63fa757156212bce58457287eac9860d86"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r4, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0400000000d85ff9782762f88ca", 0x0, 0xadca, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000140), 0x4)
r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
pwrite64(r5, &(0x7f0000000840)="e67ab166972ce298f4681ef5c755f60473b17b7887d68440dd9005bc69f6c3c5238bebfbce6236501dd64c37eeaeec2d13731c56a864da45a465e64de685887f27f84f348e4149ccee167605da33c412d53af0256fc973711375855a0a610654714099f4d540f9cba457b1813b73957a98aa2cc497c1e3ea0000", 0x7a, 0x1)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000400)=0x8)
io_setup(0x2007, &(0x7f0000000200)=<r6=>0x0)
r7 = eventfd2(0x81, 0x800)
r8 = syz_io_uring_setup(0x23d, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x4000000, 0x4023d}, &(0x7f00000002c0)=<r9=>0x0, &(0x7f00000001c0)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x7, r7, 0x0, 0x0, 0xe37, 0x0, 0x1, r7}])
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x283c0, 0xa0)
lsetxattr$security_selinux(&(0x7f0000000940)='./file1\x00', &(0x7f0000000100), &(0x7f00000002c0)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x3)
r11 = socket$netlink(0x10, 0x3, 0x14)
syz_extract_tcp_res(&(0x7f0000000240), 0x553, 0x8)
syz_emit_ethernet(0x118e, &(0x7f0000001240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "b9fdd5", 0x1158, 0x33, 0xff, @dev={0xfe, 0x80, '\x00', 0x16}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@fragment={0x89, 0x0, 0x80, 0x1, 0x0, 0x9, 0x67}, @hopopts={0x89, 0x1, '\x00', [@generic={0x9, 0x7, "38ecdc809cdfc0"}, @jumbo={0xc2, 0x4, 0x2}]}, @srh={0x0, 0x6, 0x4, 0x3, 0x8, 0x0, 0x6, [@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x13}]}, @srh={0x2b, 0x6, 0x4, 0x3, 0x5, 0x68, 0x401, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @private0]}, @dstopts={0x5c, 0x17, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @pad1, @ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @generic={0x4, 0xa0, "6d4bbe82c375e9802b2b3354267d0e8b4593057665d30e58abb611770a5e85e68f09e9026fe44e8ee08308c3216241055393285c6cbf6a86dc7f236960c6f703d524da658ceb7eba4923a127d491d9e225cf9401d6147d6ba259a2db16b1dd06864617ac9c48ee5a56e2c5ed5fc547af386ed4d33c20a5ae890d15d02d52a571a9ee3b47486134d418311d030e5b28ad8b60ea0a9c0081f5fc34d34e8a176002"}]}], "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"}}}}}, 0x0)
r12 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r13 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r13, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)

1m19.039942642s ago: executing program 4 (id=12):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 64)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (rerun: 64)
write$cgroup_type(r1, &(0x7f0000000180), 0x40001) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0000000000f400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x8, 0x7fe2, 0x1, 0xa90c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @value=r1}, 0x50)
r4 = fcntl$getown(r2, 0x9)
syz_clone3(&(0x7f0000000880)={0x200000, &(0x7f00000001c0)=<r5=>0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000780)=<r6=>0x0, {0x1b}, &(0x7f00000007c0)=""/2, 0x2, &(0x7f0000000800)=""/15, &(0x7f0000000840)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4, {r0}}, 0x58) (async)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback={0x300}, 0x800000}, 0x1c)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r8, @ANYRESDEC=r2, @ANYRES64=r6, @ANYRESOCT=r5, @ANYRES16=r6], &(0x7f0000000280)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r9}, 0x18) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r10}, 0x18) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r11}, 0x10) (async)
r12 = fsopen(&(0x7f0000000100)='selinuxfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r12, 0x6, 0x0, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) (async)
r13 = fsmount(r12, 0x0, 0x0)
fspick(r13, &(0x7f00000002c0)='.\x00', 0x0) (async)
r14 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r14, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) (async, rerun: 64)
r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) (rerun: 64)
r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r15, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r16, 0x0, 0x400000}, 0x18) (async)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m18.986111894s ago: executing program 4 (id=14):
mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x44f0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f00000000c0)=0x7, 0x4)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', r1, 0x2}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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")
sendmsg$inet6(r3, &(0x7f0000000980)={&(0x7f0000000740)={0xa, 0x4e21, 0xfffffffa, @mcast1, 0x250}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000780)="0d3d50ddf320c0e099fc75b8", 0xc}], 0x1, &(0x7f0000000800)=[@tclass={{0x14, 0x29, 0x43, 0xfff}}, @hopopts={{0x40, 0x29, 0x36, {0x2e, 0x4, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x7, 0x0, [0xb4, 0x8000, 0x90]}}, @enc_lim={0x4, 0x1, 0x8}]}}}, @rthdrdstopts={{0x80, 0x29, 0x37, {0x3b, 0xc, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1d}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x80}, @calipso={0x7, 0x18, {0x3, 0x4, 0x1, 0x5, [0x55efa75a, 0x5]}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x4, 0x8, [0x5, 0x1, 0x2, 0x6]}}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x10001}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0x32, 0x9, '\x00', [@generic={0x6, 0x2c, "37f6173cb411a003093fdb5d1f928a9e6572582703d548e7b34b0867e9b4689213e99c0cccf969792e4cd646"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x6c, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @ra={0x5, 0x2, 0x40}]}}}], 0x180}, 0x80)
r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10)
write$binfmt_register(r7, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x200)

1m18.392782742s ago: executing program 4 (id=19):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000380)='signal_generate\x00', 0xffffffffffffffff, 0x0, 0x1fc}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff00100085000000710000009500"/81], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x1, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000140)="24000000010006", 0x7)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0x14, &(0x7f00000005c0)=ANY=[@ANYRES8=r1, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x70, &(0x7f0000000300)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100c93a}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c00)=ANY=[@ANYBLOB="655fde103ddd53ca533e71dc7751bf7e96a1dd94adfdd939620625d9b05fce56113da1e08c0698029d8eebcbf45799dec4a424ed9799a90e1369c5459b56603cad8384fc111bf86bd1b0e2107a7e6308cca09ca28aed418a97f88aee8030f8625830abaa88bccca7b98e39abf887944880128b51ede3b8f813054c251a2655bbe18ac2444e2d2bf013ea65669416145552fdfda1b0381338ff2197b76b835cfef097096742d71f46f0a1919c53ecf4cf8e4b0bb66b2eba4bda3e173b9bfb625a15e314d47e526c9fd63bdf845c174b15def29a60bb979b56359ab2c50862f6afce95a1e3dc908edd5bfc8c8652abd6d0f6131edac87ae2d50cc8f2c439d032cb1b77b336b3078769b2a2f8daa6b50498abf9de0708cbef251555d3a392de2c98b04cd473e80327a5073889b25bbebaff48da94b9ad4030275597ca351714dc61262001be052ee599974fecd6b77b2144e2faf97ca128928dc47946c963686a2a58a5cc7c9d865ff69988af864f578157bcaeffe19fd4a17476cfc9597487149f5ae9b69331adedecab434e6673087042ed97d42b05ab2ce741d8a5706ae6a59ebe9a13ceb110ea044626b0864d0154e462a666fbf22c33b3d26f9fbed2c150ed56e7a4a41270e60f2ed089b88509a5ccb6cd362252cc6d06d5d927861d7c4358b78f99f6ec787979aefae0e45608c15df26cd270b4f69b7093cfadb65d58e397f497a3956fa83e44a93016e83d951ff954c38f52b1ff4042c14fecd345e3a3a792e716fc00e43b855eab712c0bc8bbb032997ee83829665da0d6e8081c4004d9d22d5685e6263c14b8f88ea79801398baa55217b76af212f30ebd288a6a49287a4c10a3759f5f2e5cb3656bd1a23e701cb36397a7a76c0c2fdbe6160e61dae93945d8f8be738d63e03629abeb10e66d8437ed74e2cdabb00567189eabdd4451ec57294e547fe16fe9723e81fefceee723f5a3c9dbcf29b82fdd11530b64663ad150d51efb8bfd4ed410c1a9845670ad1ffe2399287cb68f9157af6a3dedac586567812854f7ebc80f13b3fbc9d32d29556b5314a2fffb1789b45b14c67b207b1f5fbd41548d43c8b12256c01a3512771e3ff4d0ec429f31882c06cb1e4a0f034dd68970ea41e9e167da0d448eb90f8819a2c47d1949c3b702010707a8f02788a45d37d5b78c707c15a2c5d3bb3f310faecf0081e00c9fc48dcaabdc878cacc54025e8cd483fe19d3d128c6793dab3c3d8183c81203491a083a9fdae89c47bb974ea0a9227da21cc7fb8670bd1ea11df66d29173dcc17602cd6cd97b2d28d708cf8453ddc7c1274534f42474165de192818bfee360ed98bdb77ddec4c885af847170bd7d9241be9340aad576488389d1f5c14eff1c35a334abc0b658f1f5a0665bab6766a4074b7143d64e06aac4e1db31e2ba417307b66fd5996abaaa243d1902f6983e25b1a04f79f4ccbff4dbc976a585bf7c7417c870efab2e43fc3f43f7e5988a4607eaa3821e90c78f1bb896ca602138beada112474efa527f1c52ee9b0113423334a0d16e96a01f4c68351606af71844325113389a9108e3ba93978b05918f8577c63e0da579f293fa5e97c3211892b03ed4c340db23bdfc0b5ce153ce25977fc8f73ecf79b3accbe5b157f8ed31cc88e24be400bc9ee38f8dfd227aef24c4affd63082c182465742fb40b191be119c0b38c9d41a43f22caeee5f865bde923f6482b00bf5711ce9b076f6f5bc37d50865250e4dee6f36c0d3e8236cb327ceba0d7299a9836ac57c9169d85324ae49104a345fc750e85c74e9d3ef16de225b210ec15467afe2142b69b7891b510eb6c0740d4f69c02c8b47c8245b069ac78a94aaf861569c91a144a29a6cec53f60921a2b2be7a44e9cdfaf57cc810fc31e1498da69979216af2f61c52397c44065437e5333fb86b12f1c4d5c788b025566cb2d8c068d9e4ac0fe0a860cba086e05df9e4aa0ba579066e5a4779b4ecca08ab0a0555c72d9be7cf706e79c5463edfb6d68146533aeef8a23265be82ae23ec1ae2701a952a65be9fb1e43800e1c66e02ce3afc6605009c2e12decfa81601b796eee43b2a67113cd059c08992136e640b136f9914509f9f6ebb7374f2b07a964277303f46cacd96d63292bdfa02c385b94296cef8ac66f0344099ba40e112b8f216e80b5b94fc550cd08b47b571985a214e81ec5a121f2db0d8f3ff571d9cc1cc2452c5bbd2ba6af201904bbe2d0c6c1679a0e09ba6025d480a36983ac347ff5d7fd5b9fe3fbe2b27c495ca6e9342deec32cc856d095ecac5bd90408f428f4a9e925d96d37f326fdfb1b9a180ff55ab05d926f098d9c99fca43dcd7a4b3862f6a93f1df5d9dc409dded6600107f4ceb4159b7b6681e7c963a3e8cb16860475211fa1b2217b1c19f07fe9aaac4895d95605e17914e1ed3763ccb6b2da0b14aef666a3aaedd405c9fc56dc8b83bda279ad2aacc207f28194d1ca10f8e9ecf05c7dc07a2d3860bfbca5c2d1698f47193876ec09bee7f5284bbdfdf0274e599050fd0a918d741ba2ebd47874bea7bd29f34550d5fb1ef75e8ee71bbbeeace11403a9985c131f85f932c07715ffaf5035561da21495103aa41e12bd5e9b3b86154db2613ec4a8a2f00d7c9d9741efb6f71811f97a425715f180a9001a884d13cc59e0ffaf410fd0ceb62f63f65296be051360b129f9cf093abcdb7a7d604b82bc6d04fb0c19857356b7ad46cee39c408a99f411d56a05992778204c36a2e110cb13e24cef0512f99796f8c5690c63dac66ab89f72d4aea82d4b353edb6235af9dfba48492e707b32cae356e53c26ce37a198d95b0446545656baea0cd77da4f5e2c2a4d800835e1b1fd8bd7b2ad4c4cd9ecc9e6d4df61e75049e0cc1eb9937185dae79deeb2118e501146dc4070356bbf707ce0ba58edc52465cd02646e4008d9a362339487a18f0b2c948424550fe3c755b4df92ed59287ef01e77ae642ab6fa997d90a60902bd1411823ce83e3c67bf70e1dbcd2d4e6e11f45186393c4f01e1863a807a30fca7da424eb2b496e067986e6dc81d75e330c2aac4bea2ebc36f8a21d6a6dd85b7fbb0e9ddf47f38431b487dd59f0916d3e5982b3751b05290d0bf7f70f26d744d007cdaf56aa8dc8c153ebad70e1546d5a7e644f2d2ca71018bce6f53dd78e00ca2ce2a4750d8f4722a0a4e5837f39b75a34c2853733bce0ea54571c3cdb3a51e4185024a8501cf7fce1e1241c6c9e68a1caa15a174a3c83351c1fa0c6a98f65a7e0041c8ca76ca01284adcdfc8170294ffc5b4defd8e1b7c4919b6d6208aa82df38e20bbaa8de82ce28286ce0ef69b7a2223dcf6a57c0d41003f45152e0dcb4e18e523b3efe03eab43ef7086874e8eff2a08d10e72633797ccb8bc7b73684248f15ae66cc645e1f979f526d7107b98275a36c25d09a06177f46b4207cadc3cfadd638321dabd513cf8c6a7c3eb3beebf5b19c3a63b90babf5868fade1364b1b9c4f315c8cf939f0888e9d179ea34c4893f8125da0ff2f6ef586f1eb986502416a45e15a7e824602f069f2f217dd748e9465ea9a5c4b123772e980e496551780fcc5bfa6f2257d80e983f3a839838b83f46baa64f8128e2df4be1015f31cbdbe021b3a3da0a8006a3f9bc799a7f3e479e88ca357fa32cac7a9f23ef6072b01eb5c0aefb2231bffbfff663a64c8765efed935e3dc1892168388b0facd44e172b7c2c20afb4a852c9591bed092bea0e6eb29e61c5f0d1a874af311dd70e743a601c503c4fad4fe399a2573d359d35cb55086d5627e8d13585e9d31c575a6b971c273386ca46815eb0453f4a1f2199b8356579cd81fbd03ee8073691433769f53dabd36d9bff8f79cc217ec949d6ac41b320cbb9449c020be3a0ea0f2352f31b316c6381cfd78fa5d25e88c6dde7d7fc3454d94e23d34ad4e8cfba2775d5fe028f439a2f3b9e24fdf53ebfab6dae537c255ea8f7924b1f74e8a8ce18b02cf00d86b8bb20af10f85db4f71e05b8107577a183c666a575a47c829272690f57125f4ae96db2118657989ed784ed7b27530d25c102e8016f5effcda144682774ff2c83317295a9c3c258a136569e51729d35a1482741c2235771861a1b16f973c4e069ecb2df298f679caa9cf90dfd9f2576ce60e2041a4c3b6b60e3bb0e135527ddf948978e12d176ba61686b59ea665006123f4b0f7d6fc28fa0b084845f4e2e64064e4a9d8070dc0eea2bf7a718cb86f8f468b3a57c0e63c61199da3a45bc3eef8aa47bb1260be1e4055c9611e633cd8b428ca226ded978f11dc7c9cacda7c314f711b85c70fd919b10e09561eb6010edc2eb5d5dd6772edebc4ea7ba8a81120535e951bdc061dfbf7d70919f929b61b597c539e1fbbe03ee4d0c673cbf3f60998e46e2dc0d8e9a05ac8831a18a8d2e5a4990481757d5387b0fcd6f9337e178cc1cf11cfc5823c6370e66e07febc0acb76cc9eb19e42beba438ec1857fd833e7915c3fbca1ccda45e147fd694b078b20b7ff1b6e85ecdbc131649c0e96d6f4f432c8e0fdd274c0c376a5746625a9bbb17cb8ca7d54f9bf3def2ec78182e397d7c833e60fac426c28be9bb9e8eb0495c9c16a4b0108d521850be1b49ceb58c05e71444a40252cbf1fc6968d60fd77b8894f7f7fba29af84067cdd878ed6c51cbeab375136c6c603828365c11e9ec675ff97970df3957403b79a34672d99954564e989658f85d66f1fb003b18f19036c3c52601a3965ac36dc260687fb5f285b69321fb4609b98a64d64dd5d34424963c95ee679405af576282d466afa676898fbd9ee3c084b57cd32dbacf79dd418a5d9d2bc4e9af487798aedfdc7f90acdbcd326f27e99b29dd889f9c56f2d16773fae0fddc29a140c14927f086e8e6ebc2d8fdf5eda3c76fb6665bea9b363c10c17d75052e77114d864cdad8afbf6ed659c73e493e22519812f49414498ac98acc6e1fc4aa80231e1b9748a604d19801742ac589c983da9ff4efc3edb829466ddb03d348f649bf4e8e3651df2476ea65ff5982dd8f850d7410b2a2cf39326353bc58de2afe8590dc2eefd8d9bbe171371acc6548c40d5fa9334f26a59aee8aa4204d4ab74b3bd407c02d0294da755daecf264d69a1b2c9a23ca7721ef67966e9bf11f91fc32125e2317c819d16a0a1ece7aa33a7a6c3050341f372636ac89a07877652a8fb4197fbe45a907c6189035f549093877d82a9112736161f717c112c0e9065f7a908e55a2dcbd5ac0393b211c80c8926dfb83730dac6f6af212773731a1d218e3e04fb9da73175285a2e6e1d898e9a67222bcf3513bd5a40b82eaa2e821034083557077c83b72c812da0884dc94584e3c0749cf0c37aacc87d998211b480a9b63fb2e2a75c08050cada197b6bd1f2f6257d4710b5ac6a0a92686d0852017240e8564d5a967eea48f4752609cd138db1d8bf849b69fbad894774991bb94b7e309f8d49bb2c2840d42ee68a317aa07618f5c4d8ea0f9bd966b6aea4dd836631e4465434cc1e2a3754a97e3e5b7b4aac46f32308d861b59b3deafff8c094be124a486e01b453fbb96b9d64461ef5dd60ee801f49efdeddf5bcb94521a3a2219b6942a14dd6d7ee9967e9f266e97e2a2b1603eb3c170bf0319ab7f48b7484d5efbf0bbe5688f925d9b5c5fc89efd03d8bb054ec2b97870d5eb45a13770f97b26b95f50d27347cdc29d36c049db86fcb5805bf2d081e40523538374fe08fb48a943600d62b45e39ea6a32b0638544e9b176965a0721980db7f2a143eab1583433255ed96821f758349e5068945d2a", @ANYRES16=r7, @ANYRES16=r10], 0x1c}, 0x1, 0x0, 0x0, 0x88081}, 0x4000054)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="08002dbd7000fedbdf257c00000008000300", @ANYRES32=r12, @ANYBLOB="0a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a00060008021100000000000a0006000802110000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x48004}, 0x20008000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18)
sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0x4, 0xfff2}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810)
sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="14"], 0x30, 0x40400d1}}], 0x1, 0x10)

1m15.78843763s ago: executing program 4 (id=49):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0x9, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)={0x30, r4, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@void, @val={0xc, 0x99, {0xffffffff, 0x75}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x30}}, 0x20000000)
add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r6, &(0x7f0000000080), &(0x7f00000000c0), 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa40}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='mm_page_free\x00', r7, 0x0, 0x1000000}, 0x18)
r8 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1})
io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@block_validity}, {@norecovery}, {@auto_da_alloc}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000f80)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x5, 0x6d, 0x91, 0x800}, {0x9, 0x80, 0x60, 0xe15}]})
openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r6, &(0x7f0000000100), &(0x7f0000000140), 0x0)
openat$binfmt(0xffffffffffffff9c, r6, 0x2, 0x0)
execveat$binfmt(0xffffffffffffff9c, r6, &(0x7f0000000280), &(0x7f00000002c0), 0x0)
execveat$binfmt(0xffffffffffffff9c, r6, &(0x7f0000000340), &(0x7f0000000380), 0x400)

1m15.78794366s ago: executing program 32 (id=49):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0x9, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)={0x30, r4, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@void, @val={0xc, 0x99, {0xffffffff, 0x75}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x30}}, 0x20000000)
add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r6, &(0x7f0000000080), &(0x7f00000000c0), 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa40}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='mm_page_free\x00', r7, 0x0, 0x1000000}, 0x18)
r8 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1})
io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@block_validity}, {@norecovery}, {@auto_da_alloc}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000f80)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x5, 0x6d, 0x91, 0x800}, {0x9, 0x80, 0x60, 0xe15}]})
openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r6, &(0x7f0000000100), &(0x7f0000000140), 0x0)
openat$binfmt(0xffffffffffffff9c, r6, 0x2, 0x0)
execveat$binfmt(0xffffffffffffff9c, r6, &(0x7f0000000280), &(0x7f00000002c0), 0x0)
execveat$binfmt(0xffffffffffffff9c, r6, &(0x7f0000000340), &(0x7f0000000380), 0x400)

1m15.274730418s ago: executing program 3 (id=56):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x1e, 0x2, 0x0)
sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24040014}, 0x0) (fail_nth: 1)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)

1m14.984593702s ago: executing program 3 (id=59):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESDEC], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048041}, 0x40000000)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4, 0x1)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
pipe(0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000)

1m14.762563195s ago: executing program 3 (id=61):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x3fffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\a\x00\x00'], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18)
mkdirat(0xffffffffffffff9c, 0x0, 0x16)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = syz_open_dev$loop(0x0, 0x2, 0x800)
ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x9)
sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044)
socket$inet6(0xa, 0x3, 0x81)
unshare(0x20000400)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e841cca555077e3a159110193dd2ff1fa7c3205bfedbe9d8f3bd23cd78a07e32fe0231368b2264f9c504b2f1f65515b2e1a38d522be18bd10a48b043ccc42673d06d7535f7866925d86751dfced1fd8accae669e173a659c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbcbfb42c30d294a55e1c46680bee88956f2b3599f455c7a3a49a01010000009f2f0517e4ca0e1803a20000000013d4e21b3336f1ae0796f23526ec0fd97f7325eac34c4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39d5ae913b2d22eb2c09244ba5dbe9180950f76f7049db5cb19d7962fed44e00f39ed8c13a11fa798de504e2865cd81f2b77fdd76c677f812d249c8130b018d4300000020000000db3947c85c3a9027ce9e856fa8b7fb05000000000000593d60abc9b3e67d127e56f3d3759dcfeb820634fd4d419efaefc74305b2bea2000600000051fcf5d62205561b6efaad206335a309f7b9e01446a6285f4665a7fe3cda2349f8bf400100000000000000f435f28fbeda75cf971f54a9698cf3270f420ee83f2d9babe7b922401639ce3c4ff0850a8e078374909413f3fbd3ced3285252dc81a46ef7ce29484dc6b6adfd7a4db730fc594609654d97836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f3914909187b6b0776952be71b0417d33d3ab25493418ba0fbacf768e07c1a939d31f606085b9e3efc93b0f58d5ec37494d9d10d76e603129e9a726579ac7d672cacd581b7ca77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e04ad3711a66da2254a6f911b1469c62a6e1e3f9c1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f03040889500000000179dcf66d93907cedd49e0c5752f755849953957143a0335d2f62acbf18b251ce63b29fe177745448ccc925770fac12cf9e291200df6bb669d5a57dd74df817ef2f8698f710c359afe73947afebdf5536e4db8b0231d0cbc798766ec60586f14b44775bc9d250e4515cb83275d3b495fa90000e69a68b47ac4595463e1442d88e0606a060000cc914fae896ab129ccdf8792a8435972c8391d132a2fcbd40e865d62cc7c4200000000000000000000000000000800002a77fbbccfdb1ab3d8434905f09726b8145ea99c7640faab578dc98a6134df0a10a54ce7e7ddbb709a27d977d1f91ab9ee940700009594c9a50961b7fcc56d82584dc8254df7c411fa61353a6897c4f3b9f6f2ab47adb29aefecce96c94f360e129c9f2af569c794b68b2ead404bcdd4aa9cb6a128e1ad45fd4030e1e69adf4986b7860f3122d59c079f0f9a1732f691590f45512aec4ed2413f66cac7dd022301741c576dea82005b166d6c3b9ed0c297ac197a92188a618745e78dca0b3c62f1601243089d9c687563382b0b88a7d80fd7bf7fae8a690f52db1464d29b1b926414cd35705c89662c585e32c881d917b74f027674dbc017499ba15a2e2900000000000000000000000000007b593ecbdd162fee9f239a3c615b3e9a3fb0af254bdd247a5a5abdbc0123c950eec0f1800b295be71418dd65de15e11beef9630499c70fce74135a7c7c8e818b79b85ff65d59d89492d7a663d3f25651e252ab49d358eac853ffe182ee37a5db085a072647719cb8604ba2e0b80af3f1867bd8fb6afca671437e0a5a9d5a088436739262d894986882ec0fb419a377ef47f4920a5de6d8de0d3090b4cb6b773e825442d351f980eed0d997a4d98a51220c41b145e2186546c646128a3e69f52fcad83a026def90b9eb55f4a0a2251bbae428c6c017b5a47f1580831a7ce232857e6aa9e777e99da1a3ad03fdc93fa7ed96228deac5e3bce983971041297a6ba18783a2edc7e3901cc891035872c61e7ea375b0902be0c5cc7fdef968ba1ca17ce5e11f2f384cd28c1194f56d3cf074e8ba4e60e84dc2f352c3cd170581aee0c93ca8ceff84cda40325d340759e79e5c4bcec227e37f7ec2193c78877fb319ec1f2d4dcf1d46a15cde1d6cecce6ecdb0c0a3413394d51341a7b3606ad8c29b6dbf6be3265b528c3208de35161bfe19678df43a45b314e5a0f8754cfaf4f9d3fdf9c8f7b7c296bf2e632d25ba8ee6369b362a8e4c9dff176d482d32249c93680a04f6464f184acfd0376662fee9e1031e569248db9bc724cdd97976a4d7c5c5172d1383fa1e442f68a14b747a9f2597bf115dd0111fe8ba3584a43176f33bd39a408f8648b19839bba9cc47624ea19e46dbbdf0faf591bcdc8613828a0c5a40c04ae34bbf4a0e27828b0c7cb9d7a7455db030425a4bd69cf6dcb4b1d066f8ef4ea1c710e05819df82d5cc94ace6b41c2de37a2eaf24f24b3d9a7dd4d197d51407be3e90000000000000000dbc0b0d6e11ccb71437ebea7ad01d5b93a7a0561e4a1b3fa1aa9c75f3aaec4ace1b6201a3e007b657be62df59133b4d8f0f145d9fc954cc7792077268bf0977e2a699722ce3dbb97248b8a8a771dd0f7d9c97e6587524a44fd6d49330ccbc39ca277b84f7f0a39759ef0b42388bd69fe341a925e8cdc5d7b2d6ddb7331a081bd0672bf4d02255de095a179e51bf5492d4e89c3cbad59db725c0dd7e35cbd9887175286a37d7621a361eb830cc5b842b11b5d040ccceb254d6a0c9c43718d0816bb2465928e236101b8cd46b5ef9cb930378a9249cbb41bcde9bb78d71c512153d2f1d765b56d2e5ef3e3d34975787646630051074c9706747fda873ccfdb394fc269c8cfadc0a52c3402f392a38052f859ab5600000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b000000000000"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x7, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000004"], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x0, 0x8, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x0, 0x80000000}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x7, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0x1, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2f, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0x84, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x6, 0x4, 0x100, 0x1401, 0x4, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x80000001, 0x4, 0x0, 0x1000004, 0x7ffe, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xb, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x10000003, 0xf, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x801, 0xfffffff4, 0x10000, 0x5, 0x8, 0x0, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x7, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffefb, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0xfd, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x800000, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x6, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000380)={0x6, 'wlan0\x00', {0xfffffffc}, 0x1})
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x5}, 0x1c)

1m13.556780503s ago: executing program 3 (id=67):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0xa04016, &(0x7f0000000340)={[{@usrquota}, {@nojournal_checksum}]}, 0xff, 0x257, &(0x7f0000000500)="$eJzs3U9oFFccB/DfzO42TbKUtL0USv9AKaUNhPRW6CW9tBAoIZRSaAsppfSiJEJM8JZ48uJBj6KSk5cg3oweJZfgRRE8Rc0hXgQNHgweVFjZnQTyTxOzmx1xPh+YzEzy5v3eMPN9ExaGDaCweiJiICJKEdEbEZWISDY2+DJbetZ2ZzoXRiJqtd8eJ4122X5m/bjuiJiOiB8iYj5N4lA5YnLur+Wni798c3Ki8vWFuT8723qSa1aWl35dPT904vLg95M3bz8cSmIgqpvOq/WSHX5XTiI+Oohib4mknPcI2IvhY5fu1HP/cUR81ch/JdLILt6p8ffmK/HduVcde/rRrU/bOVag9Wq1Sv0ZOF0DCieNiGokaV9EZNtp2teX/Q9/t9SVHh4bP9r7/9jE6H95z1RAq1Qjln6+2nGle0v+H5Sy/APvqOxDqaXfh2fv1TdWS3kPCGiLz7JV/fnf+8/UtyH/UDjyD8Ul/1Bc8g/FJf9QXPIPxSX/UFzyD8Ul/1Bc+87/mRcHNyigLTbmHwAollrHvt4abv2LyEDb5T3/AAAAAAAAAAAAAAAAAAAA2810LoysL63psbxri+tnI1Z+yppur19qfB9xxPuNn11Pkk09Jnuq8Hp/f9FkB026mPPb1x/cz7f+jc/zrT81GjF9PCL6y+Xt91+ydv/t34e7/L3yb5MF3lCyZf/HP9pbf6vns/nWH1yMuFaff/p3mn/S+KSx3nn+qdavX5P1jzxrsgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa5mUAAAD//7FLbdg=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x1438c2, 0x19)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0), 0x3, 0x4c1, &(0x7f0000000b80)="$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")
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b000000"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='mm_page_free\x00', r3}, 0x18)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x8002)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff00000000000000f6ff060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172"], 0x40}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x4, 0x3ff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x736, 0x7, 0x1}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', 0x0})
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000400c)
mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x40020, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0x7}}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe90}, 0x94)

1m13.194658128s ago: executing program 3 (id=75):
getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0x9a)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000980))
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4001, 0x1, 0x0, 0x9}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001600010027bd7000fddbdf250a000000", @ANYRES32=0x0, @ANYBLOB="140004"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001f)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r6}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000300)={'sit0\x00', <r7=>0x0, 0x0, 0x20, 0x40, 0xf, {{0xf, 0x4, 0x1, 0x0, 0x3c, 0x64, 0xd5, 0x40, 0x2f, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x28, 0x3b, 0x0, 0x8, [0x8, 0x3ff, 0x8, 0x1, 0x80000000, 0x8, 0xe42, 0x3, 0x2]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl1\x00', <r8=>0x0, 0x700, 0x80, 0x100, 0x1924, {{0xc, 0x4, 0x0, 0x1, 0x30, 0x68, 0x0, 0x19, 0x2f, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x1b, 0x85, [@loopback, @loopback, @local, @local, @private=0xa010102, @multicast2]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan1\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r12, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r11], 0x68}}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000009c0)={0x338, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc0}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8d8}, @ETHTOOL_A_BITSET_VALUE={0x71, 0x4, "cdaf3b8368a9a8b87c486450d1f51a945559e6a0d55bce18a78aaf48f529ebc342018248fc643090e60fc2697c37bef0dab4886953fe8a8e5e2c104998f2d235a642113fb607038e8d9e62b44af1655fca0d6e27a33da0deb88b59057f5150dc3f55bf1a179f80e77c43005a7a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'[-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'mirred\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x17c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x92, 0x4, "f2b4bb3cfb5cc08c4ce93c736f2c05b675116d2feb26c8e8360cb5b2d266d240cfe9ec5d47b63f3273a9345e972f75e31c4304efb4ef4040a818875fd30ebd159dca25b64c3b1d674020387ba1499305a103e34f4be94ce018bbd4e8c4a4178740c1695015cea1b7a16e9612c02d9ab06eb09693795c4d1804eecd27f72af26e05bf61a6a85de1f04419ee29e885"}, @ETHTOOL_A_BITSET_MASK={0xa4, 0x5, "5c2f4e4ef2061fcc562c8698bbd14cd2471e800b768262715c568ebf21a1d16dbf86ca5d5208bb7656ce37d79fe82c93428167d278949d09be643c115ba6f0888bc9b23a26dfbe454722e598a420307f9ba933a1720ae46e56568d9cda67d7ecd03f2fd43f6372cf77f7b52fb2dcb6177410583314069ef08d835456e4c76b40c91b630a7f5855dd2670fa7e72f1cd6084b68e660daf01278cb2e52f62c8a54f"}, @ETHTOOL_A_BITSET_VALUE={0x3d, 0x4, "24021e1086f988d6778fdf1336b516683b98a3e6788a886dae11d99b983e9f3ba29b75d5bf5d1fc1e021345dd256684979d422c8a9486efebb"}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10)
r13 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r13, &(0x7f00000000c0)=ANY=[], 0x20)
r14 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r14, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

1m11.74080763s ago: executing program 3 (id=86):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10)
get_robust_list(0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2(&(0x7f0000001cc0)={<r5=>0xffffffffffffffff}, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRES64=r2, @ANYBLOB=',access=', @ANYBLOB="8230"])
syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), r5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18)
getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newtclass={0xcc, 0x28, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xffff, 0xfff2}, {0x8, 0x918c3c77d99bd9ff}, {0x3, 0xffff}}, [@tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0x74, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x30, 0x0, 0x6}}, @TCA_HFSC_RSC={0x10, 0x1, {0x1, 0x8, 0xfff}}, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0xaeb, 0x9}}, @TCA_HFSC_FSC={0x10, 0x2, {0xfffffff9, 0x10000, 0x8}}, @TCA_HFSC_RSC={0x10, 0x1, {0x1765c7ff, 0x0, 0xa}}, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x80000001, 0xc}}, @TCA_HFSC_RSC={0x10, 0x1, {0xfffffc00, 0x43d8000, 0x2d0}}]}}, @tclass_kind_options=@c_mqprio={0xb}]}, 0xcc}}, 0x800)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x2, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x21d, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x400c8b4)
getsockname$packet(r8, &(0x7f0000000540)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@gettfilter={0x2c, 0x2e, 0x20, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x9, 0x6}, {0x9, 0x9}, {0x6, 0x6}}, [{0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10)

1m11.74054829s ago: executing program 33 (id=86):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10)
get_robust_list(0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2(&(0x7f0000001cc0)={<r5=>0xffffffffffffffff}, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRES64=r2, @ANYBLOB=',access=', @ANYBLOB="8230"])
syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), r5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18)
getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newtclass={0xcc, 0x28, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xffff, 0xfff2}, {0x8, 0x918c3c77d99bd9ff}, {0x3, 0xffff}}, [@tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0x74, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x30, 0x0, 0x6}}, @TCA_HFSC_RSC={0x10, 0x1, {0x1, 0x8, 0xfff}}, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0xaeb, 0x9}}, @TCA_HFSC_FSC={0x10, 0x2, {0xfffffff9, 0x10000, 0x8}}, @TCA_HFSC_RSC={0x10, 0x1, {0x1765c7ff, 0x0, 0xa}}, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x80000001, 0xc}}, @TCA_HFSC_RSC={0x10, 0x1, {0xfffffc00, 0x43d8000, 0x2d0}}]}}, @tclass_kind_options=@c_mqprio={0xb}]}, 0xcc}}, 0x800)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x2, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x21d, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x400c8b4)
getsockname$packet(r8, &(0x7f0000000540)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@gettfilter={0x2c, 0x2e, 0x20, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x9, 0x6}, {0x9, 0x9}, {0x6, 0x6}}, [{0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10)

1m1.594600639s ago: executing program 6 (id=216):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
io_setup(0x2278, &(0x7f0000000180))
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0))
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440)=r6, 0x1)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=@newtfilter={0x336c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3340, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file1\x00'}, @TCA_BPF_ACT={0x32e4, 0x1, [@m_ife={0x4c, 0x6, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x8, 0x6, "1d49a5e3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x1064, 0xa, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0x11c, 0x16, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x3, 0x10000000, 0x0, 0x1}, @multicast2, @multicast2, 0xffff00}}]}, {0xcc, 0x6, "d21cdd1cbdf1abe8fd615cc15d0b17cd57eba849a669915926355c504ac357b3f4ac1b0c70bab164b07b45475526b9979da4c9d055ab77e9ccafc2f06e1a4f24c1da9ec105a8374fb0efa14fbdf5f01f7711407426f814d07853ed320ff1d03954d299e01c8ea17b8359cac637f15cd1ece341c0fbceb0822dd821514435979221b1b2c473677d3eee85e0b7769c30f82a09bdd558d9feeb106589899d61b17f434360b9ad6658c0b0e47503d810a948ac34648673f1850c0dd831a8eb189c29c3fc0802420ed5f0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ct={0xf4, 0xa, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x6}]}, {0xc4, 0x6, "0c407c9f5e221b4210ff2c35b79d63890219080e2d404ec49deeb64a584bc327efdf71824479429276daee094a03cd75dbd8d9fdd74562afee62d90c37ad05c2037c360b1479f257180caf9600b4133094225df974704437cd473795ce2097abe5b3d9f4849c9ef9ebe6ef059258196ff603fad0cbb8d7e63400be2977605b507bc869fc271e769f605772b979ff9421c862548a42c9675ef2a896c63195289c17e2d1e27c58c677298c3fd3e41a65e37b6c3cd120b4966ab31ac21d98438f50"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x120, 0x1a, 0x0, 0x0, {{0xb}, {0xb0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x6, 0x4, 0x5, 0xc}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0xbfed, 0x7, 0x401, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x9, 0x7, 0x9, 0x1}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_DATA={0x7, 0x3, '$&\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xa, 0x4, 0x8, 0x9, 0x1800000}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xfffffeff, 0x8, 0x2, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5e22, 0x3, 0x20000000, 0x2, 0x40}}]}, {0x45, 0x6, "bb3ea1f20d5688d5126d3bd2df9cfa01c939194e56d0c39c6fbdbfb84f167b272feddf8445a6b57373c459b508a5ab6e518a98adfc8821892a5cfcc74d9a4ecbb2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x1d4, 0x20, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x7, 0x4, 0x3, 0x4}, 0x32}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xe83a, 0x1, 0x10000, 0xdae}, 0x41}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x7, 0x3, 0x7, 0x3}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x60, 0x4, 0x20000000, 0x1, 0x3}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x10000000, 0x3, 0x407e}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x10000000, 0x2, 0x4f5c0c77}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x0, 0xa, 0x4}, 0x6b}}]}, {0xe1, 0x6, "fb76fc4099a3bdd65b1db6f52dcdec889c66e8a05f3548b16a9eace5c7fa3c900182ceb07005ad1972cc82c2b8250a59c0664bffbd84fd55f8045e77371f260554baa9a4e708b4bef51e2b09becf0bdd4d2a620995217ffc16436dcd11152078190f710ebe6cf269f13ae9c56f49b3e7b0dcdd2a7aed4b45533c9351756750451bba24466d12a7b536f14af461bbc3de8267d40ef7dc4dc6d1e027d899d653fb1dd062b9f59b027f00e12e702a68452645a0ea2ca0f16d0673f9674cc4c9426dfc33fe02e48f74d0ee4e7bdd9ff86481b97f7b695c77b07eb55bca54d2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7, 0x1}}}}, @m_police={0x1d2c, 0x96d, 0x0, 0x0, {{0xb}, {0x1c44, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x80000001, 0x2, 0x9, 0x1, 0x7, 0x81, 0xff, 0x387, 0x4, 0xff, 0x9, 0x2, 0xe, 0x7, 0x80, 0xcb66, 0x8, 0x0, 0x2, 0x3, 0x6, 0x4, 0x95, 0x3, 0x10, 0x5, 0xff, 0x80000000, 0x0, 0x6, 0x100, 0x1, 0x7f36, 0x80000000, 0x20, 0x0, 0x9, 0x9, 0x5, 0x2, 0x3, 0xa12e, 0x2, 0x200, 0x5, 0x3, 0x7, 0x81, 0xcb5, 0x3, 0x0, 0x13, 0x0, 0x0, 0x218, 0x7f, 0xcc, 0x4f7, 0x5, 0x4, 0x1, 0x6f03af4f, 0x0, 0x9, 0x6, 0x4, 0x9, 0x3ff, 0x8, 0x52e, 0x5, 0x8, 0xffffff81, 0xff, 0x0, 0xffffff81, 0xffffecef, 0x5, 0xfffffff7, 0x3, 0x2, 0xca85, 0x8, 0xca, 0xffffffff, 0x7, 0x5e79ac64, 0x4000000, 0x1ff, 0x0, 0x0, 0xff, 0xc0000, 0x9cb, 0xb6f, 0x1000, 0x5, 0xfffffffe, 0x8, 0x5, 0x6, 0x4, 0xfffffc6f, 0x7fffffff, 0x1, 0x8, 0x8, 0x1, 0x80, 0x2, 0x3, 0x144c, 0xaa81, 0x5, 0x7, 0x8, 0x8001, 0x2, 0xffff, 0x3, 0x5, 0x5, 0xc, 0xfffffffe, 0x5, 0xfffffff5, 0x2, 0x800, 0x1, 0x80000001, 0x0, 0x0, 0x2, 0x1, 0x660, 0x5, 0x0, 0x3, 0xfffffffc, 0xc, 0x7, 0x0, 0x6, 0xea69, 0x9, 0x26, 0x5, 0x0, 0x3, 0x35e7, 0xef, 0x6, 0x8, 0x4, 0x80000000, 0x9, 0x31, 0xb, 0xe393, 0x2, 0x401, 0x7, 0x1469, 0x904, 0x9, 0x5, 0xc, 0x6520, 0x8, 0x8, 0x9, 0x401, 0x1ff, 0x3ff, 0x3, 0x3, 0xfc46, 0x3, 0x8, 0x80000001, 0xff, 0x7, 0x1, 0xfff, 0xa, 0x8, 0x9, 0x3, 0x6, 0x3, 0xb45, 0x0, 0x7ff, 0x81, 0xe, 0x8, 0x2, 0x1, 0x3, 0xffff, 0x4, 0x6, 0xe8df, 0x7, 0x101, 0x6e, 0x0, 0x200, 0xd, 0x9, 0x2, 0x401, 0x4, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0xc, 0x10000, 0x80000001, 0x1, 0x1, 0xfffffffa, 0xffffffff, 0x6, 0x200, 0x7, 0x3, 0x4d3d, 0xfffffffd, 0x80000000, 0x7ff, 0x2, 0xb, 0x5, 0x9, 0x8001, 0x9c2, 0x8, 0x7fff, 0x6, 0x2, 0x4, 0x0, 0x6, 0x80, 0x5ef, 0x8, 0x8, 0x3, 0x9, 0x101, 0xe]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x6, 0x55, 0x8, 0x5, 0x5f, 0x3d4f, 0x1, 0x0, 0x3, 0x40, 0x8, 0x3, 0x81, 0x2, 0x100, 0x125, 0x1a959f59, 0x1, 0x323c, 0x9, 0x6, 0x4, 0x101, 0x979, 0x2, 0x1, 0x2, 0x5, 0xb, 0x3, 0xfffffff8, 0x4569, 0x2f6, 0x80000000, 0x8, 0x200, 0x101, 0x3, 0x81, 0x4, 0xc, 0x5, 0x6, 0x9, 0xfffffffd, 0xd, 0x2, 0xa, 0x4, 0x9, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x8000, 0x5, 0x1, 0x3, 0x401, 0x0, 0x9, 0x5, 0x9e, 0x0, 0x8, 0xa, 0x3, 0x7, 0x4, 0x2, 0x6, 0xfff, 0x2, 0xd, 0x9, 0x7, 0x4, 0x5fd, 0x3, 0x2, 0x4, 0x0, 0x7ff, 0x9, 0x2, 0x9, 0x3, 0x100, 0x3ff, 0x3, 0x2, 0x3, 0x6, 0x0, 0x2, 0x2, 0x4, 0x80, 0xd0, 0x5, 0x9, 0xe, 0x2, 0x7, 0x8001, 0xe46, 0xe, 0x1, 0x6, 0x1, 0x8, 0x40, 0x5, 0xe, 0x5, 0x80000001, 0x0, 0x7ff, 0x521, 0x6, 0x10, 0xffffffff, 0x8, 0x3, 0xb, 0x8, 0x3, 0x374a, 0xfffffffb, 0x8000, 0x80000001, 0x8000, 0x7, 0x10000, 0x9, 0xcfd, 0x4, 0xe, 0x1, 0x5, 0xe, 0x3, 0x7, 0x8, 0x9, 0x1, 0x5, 0x7ff, 0x42d, 0x61, 0x101, 0x9, 0x58a16a01, 0x7, 0x7, 0x7, 0x10001, 0xb5, 0xfff, 0xb, 0x1, 0xff, 0x578b, 0xa506, 0x80000001, 0x7fff, 0x17, 0x3, 0x80000001, 0x81, 0x4, 0xdc, 0x3, 0x7ff, 0xde, 0x80, 0x3, 0x2, 0x2, 0x6, 0x1000, 0x5, 0x80000001, 0x8000, 0x7, 0x6, 0x4, 0x3, 0xc2, 0x2, 0x7ff, 0x8, 0x7, 0x8, 0xe53, 0x54, 0x6, 0x10000000, 0x6, 0x4, 0x2, 0x0, 0x40, 0x8, 0xfffffffe, 0x9, 0x83, 0x582, 0x5, 0x6, 0x6, 0x3, 0x7, 0x9, 0x602, 0xe48, 0x77, 0x2, 0x14, 0x6, 0x60, 0x5, 0x6, 0x6f9e, 0xffffffff, 0x3e07, 0x8001, 0x7, 0x3, 0x3, 0x0, 0x1, 0xffffff70, 0x2, 0x7, 0x7, 0x2, 0x8, 0x100, 0x2b57, 0x5b1, 0x1, 0x4, 0x3, 0xffff, 0xa, 0xa, 0x9, 0x7, 0x2, 0x0, 0x4, 0x400, 0x6]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x6, 0x0, 0x5, 0x3, 0x9, 0x7, 0x4f, 0x6, 0x37c, 0x5, 0x0, 0x1, 0xcd, 0x7, 0x1, 0xffffffff, 0xa, 0xc, 0x6, 0x40000000, 0x8000, 0x3, 0x0, 0xfffffff3, 0x7ff, 0x1, 0x6, 0x1000, 0x8, 0x7, 0x1, 0x5, 0x7fff, 0x4, 0xfffffffc, 0x4, 0x2, 0xee, 0x4, 0xf1, 0x8, 0xa60, 0xe0f, 0xc, 0x5, 0x4, 0x6, 0x5, 0x6, 0x8, 0x5, 0xffff, 0x3, 0xa942, 0x4, 0xa, 0x2, 0x60, 0xb4fe, 0x6, 0xfffffffe, 0x7, 0x0, 0x6, 0x80000000, 0x59de, 0x654, 0xc, 0xb5a, 0xc7b, 0x9, 0x4, 0xfffffffe, 0x7, 0x6, 0x2, 0x9, 0x6, 0xe0, 0x3, 0x7, 0x7, 0x7, 0x1, 0xb0, 0x5, 0x9, 0xfffffff7, 0x2, 0x29, 0x10000, 0x0, 0x6, 0x8, 0x5, 0x7f, 0x8000, 0xb68, 0x10, 0x6, 0xfffffff9, 0x5, 0x1d, 0x8, 0x6, 0x6, 0xf98, 0xa, 0x0, 0x2a, 0x7, 0x8cb, 0x2, 0xffffffff, 0x9, 0x8, 0x5, 0xffff3e24, 0x1, 0xb8c8, 0xb, 0xff, 0xff, 0x7, 0x7847, 0x8, 0x3, 0x80000001, 0x9, 0x4, 0x6a, 0x3, 0x81, 0x7, 0x7fffffff, 0x8, 0x37, 0x7, 0x7ff, 0xc4, 0xb5d6, 0xfffffc01, 0x4, 0x1, 0x6, 0x1, 0x8001, 0x621, 0x8, 0xfffff957, 0x0, 0x3, 0x9, 0x8, 0x1, 0x80000000, 0xfb, 0x2, 0x7, 0x1000, 0x5, 0x7fffffff, 0x40, 0x4, 0xfffffffd, 0x7, 0xa5e08296, 0xd29c, 0xcffc, 0x0, 0x3, 0x0, 0x9, 0xd, 0x80000001, 0x0, 0x10001, 0x401, 0x1, 0x401, 0xffffffff, 0x6, 0x2, 0xb, 0x1, 0x9, 0x0, 0x6, 0x3, 0x400, 0x0, 0x3ff, 0x7, 0x8, 0x0, 0x9, 0x2, 0xffff, 0x7, 0x9, 0xc5, 0x5a, 0x0, 0xbb, 0xbc, 0x0, 0x13, 0x4304645d, 0xa2ea, 0x8001, 0x12, 0x5, 0x62fa, 0xc5, 0x80000001, 0x3, 0x2, 0x2, 0x2, 0x4, 0x1, 0x4, 0xf3a, 0x1c2, 0xff, 0x5, 0x1000, 0x0, 0x9, 0x9, 0x20401, 0x5, 0x7fffffff, 0x5, 0x7ff, 0x1, 0x5, 0x3, 0x60, 0xfffffffe, 0x5, 0xffff1e68, 0x8f71, 0x1000, 0x56, 0x7, 0x0, 0xfffffffb, 0x1, 0x3ff, 0x5, 0x37, 0x2, 0x6, 0xfffffff8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x3, 0x2, 0x7, 0x5, 0xa, 0x80000001, 0x5, 0xfa, 0x32, 0x73d, 0xffffff00, 0x6dd, 0x4, 0x7, 0x10001, 0x58f, 0x4, 0x5, 0x8, 0x0, 0x2, 0xaad, 0xfffffffe, 0x9, 0x2, 0x9, 0x4, 0x66119c00, 0x4, 0x0, 0x4, 0x0, 0x2, 0x7ff, 0x66b, 0xa4, 0x5, 0x4, 0x2, 0x7fffffff, 0x6, 0x400, 0x7, 0xfffffffd, 0x7, 0x3, 0x3, 0xfc10, 0xc7d, 0x0, 0x0, 0x6, 0x400, 0x8001, 0x6, 0x6, 0x7f, 0x4, 0x80000000, 0x47, 0x0, 0x6da, 0xfffffffa, 0xc, 0xc315, 0x8, 0x6, 0x2, 0x0, 0x7, 0x7, 0x10000, 0x2, 0x7, 0x3, 0x3000, 0xb3bd, 0x4, 0xfffffffe, 0x80000000, 0x7, 0x5, 0x0, 0x0, 0x458, 0x9, 0x3, 0x3ff, 0x9, 0x8, 0x4d, 0x7, 0x2, 0x5, 0x7fff, 0x9, 0x8, 0x380, 0x8, 0x6, 0x4, 0x2, 0xfffffffc, 0x3ff, 0x0, 0xf, 0x7, 0x6d, 0x1, 0x40, 0x5, 0x0, 0x400, 0x4, 0x2fb0b96, 0x5, 0x8, 0x400, 0x0, 0x2, 0xfffffffa, 0x10000, 0x8, 0x100, 0x8, 0x8, 0x7, 0x90, 0xaca5, 0x10000, 0x1, 0x5, 0x5, 0x7ff, 0x7, 0x1000000, 0x7, 0x8, 0x6, 0x9, 0xfffffffd, 0x1, 0xa, 0x0, 0x400, 0x5, 0x7, 0x4, 0x7fff, 0x80000000, 0x80000001, 0x9, 0x3, 0x3, 0x0, 0x100, 0x0, 0x7, 0x2, 0x8, 0x91, 0xffff, 0x8, 0xacbc, 0x2, 0x4, 0x81, 0xd, 0x7, 0x4, 0x0, 0x800, 0x1d, 0x2, 0x2, 0x6, 0x3, 0x10, 0x2, 0x9, 0xb48, 0x40, 0x5, 0xe, 0x81, 0x3ff, 0x80, 0x4, 0x7, 0xfffffffd, 0x10001, 0x3, 0x7, 0xfffffeff, 0xfffff147, 0x2, 0x3, 0x2, 0x0, 0x0, 0xb4, 0x7ff, 0x4, 0xa8, 0x0, 0x0, 0x2, 0x81, 0x1, 0x6, 0x1, 0x2, 0x9, 0x3, 0x41, 0x5, 0x6, 0x400, 0xfffffff7, 0x21d, 0x3, 0xfffffffa, 0x8000, 0x946, 0x6, 0x7, 0x5, 0x8b, 0x1, 0x4, 0x9d, 0x2, 0x0, 0x8, 0x8000, 0x0, 0x73, 0x4, 0x7, 0xfffffff6, 0x0, 0x7, 0xe, 0x3, 0x5, 0xfffffffe, 0x2, 0xe, 0x0, 0x5, 0x7006, 0x8, 0x6, 0x8, 0x81]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8203}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0x3, 0x1000, 0x80, 0x2, 0x7fff, 0x9b, 0x4, 0x894, 0x8, 0x3, 0x8, 0x3, 0x1, 0x7, 0x7, 0x8, 0xfffffffb, 0x2c907d61, 0x8, 0x4, 0x401, 0x0, 0x0, 0x4, 0x35, 0x7fffffff, 0x7, 0xd, 0x1, 0x3, 0x3ff, 0x4d, 0x1, 0x87, 0x3, 0xb, 0x7, 0xc7a, 0x4, 0x98, 0x9, 0x1, 0xfffffffd, 0x2, 0x80000000, 0x10, 0x5, 0x8, 0x1f, 0x8, 0x3, 0x9, 0xfffffff1, 0x6, 0xffffffff, 0x74df, 0x2, 0x1, 0x7fff, 0x8, 0xa, 0xd, 0xfff, 0x0, 0x7fff, 0x3, 0x9, 0x100, 0x1, 0x9d9, 0x3, 0x7, 0x2, 0x6, 0x0, 0x4, 0x8, 0x4, 0x3, 0x9, 0x5, 0x8, 0x2, 0x7, 0x548, 0xd, 0x1, 0x2, 0x7, 0x800, 0x10001, 0xa8, 0x8, 0x10001, 0x1fffc000, 0xfffffffd, 0xb, 0x8221, 0x9, 0x5, 0x71b, 0x3, 0x3, 0x633, 0x3, 0x7fffffff, 0x2, 0x2, 0x9, 0xc541, 0x4, 0x1ff, 0x1, 0x4, 0x100, 0x4, 0x8, 0x0, 0x6000000, 0xfffffffb, 0x80, 0x9, 0x8, 0x7fffffff, 0xffffffff, 0x4, 0x4, 0x200, 0x9, 0x0, 0xfffffff6, 0x3, 0x1, 0xa1, 0x0, 0xffffffff, 0xcd9, 0x7, 0x9, 0x0, 0x89, 0x617f97d5, 0x5, 0xb59, 0x0, 0x1, 0xfff, 0x4, 0xfffffff7, 0x541, 0x4, 0x9, 0x6, 0x7, 0x5, 0x401, 0x100, 0xa0a4, 0xf, 0x9, 0x2, 0x7, 0x5, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x4, 0x8000, 0xffffffff, 0x6, 0x4, 0x5, 0x7fffffff, 0x45b4, 0x4, 0x9d, 0xf9, 0x80, 0x1, 0x80, 0x6, 0x68ab000, 0x7ff, 0x1ff, 0x4, 0xfffffffb, 0x5, 0x0, 0x1ff, 0x8, 0xfffffffb, 0xed0f, 0x4, 0x2, 0x0, 0x6, 0x4e, 0x1000, 0x5, 0x7fff, 0x74a15d52, 0x0, 0x0, 0x3, 0x81, 0x7fffffff, 0x0, 0x0, 0xee23, 0x7ff, 0x0, 0x2, 0x9, 0x86, 0x9, 0x7, 0xc4, 0x7fff, 0xfffff6fb, 0x4, 0x4, 0x4, 0x3, 0x4, 0x3, 0xf, 0x68, 0x1, 0x0, 0x10, 0x6, 0x3, 0x6, 0x9, 0x30, 0x8, 0x9, 0x800, 0x401, 0x6, 0x4, 0x5, 0x1, 0xe, 0x5, 0x4, 0xda, 0x8000, 0x1, 0x6, 0xffffffbf, 0x5, 0xd6e]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x3e8000, 0x8001, 0x25, 0x80000001, 0x7, 0x7, 0x1, 0x3, 0xd0, 0x4, 0x4, 0xffffcf6a, 0x8001, 0xfff, 0xffff, 0x8, 0x8, 0x6, 0x8, 0x200, 0x0, 0x51a, 0x4, 0x7, 0x5, 0x10001, 0x4, 0xe821, 0x63, 0x6, 0xffffffff, 0x8, 0xf, 0xa47b, 0x7, 0xffff0000, 0x1d3, 0x44, 0x5, 0x9, 0xfe, 0x7, 0x7, 0x9, 0x5, 0x2, 0x1, 0x9, 0x1, 0x2, 0x2, 0x0, 0x4, 0x7, 0x8, 0x3, 0x4, 0xe6b, 0x6, 0xb4, 0x3, 0x5, 0x9bfd, 0xf9, 0xffffffff, 0x4, 0x7b80, 0xfffffffa, 0x4, 0x9734, 0x4, 0x8, 0x8, 0x3, 0x8, 0x80000001, 0x6, 0x1, 0x2, 0x8000, 0x1ff, 0x0, 0x8, 0x5, 0x1, 0x9, 0x0, 0x5b, 0x5, 0x3, 0x5, 0x5963, 0x6, 0x6, 0xffffff01, 0x2, 0x1, 0xfffffffc, 0x200, 0x13f5, 0x7fff, 0x3, 0x400, 0x4, 0x647a, 0x0, 0x6c5, 0x1, 0x4, 0x9, 0x4, 0x3, 0x5, 0x7, 0x2, 0x8001, 0x6, 0xffffffff, 0xfffffffb, 0x0, 0x1, 0x4, 0x100, 0x4, 0x3, 0xfffffff9, 0x644, 0x5f, 0x7ff, 0xd6, 0x200, 0x6, 0x8, 0x9, 0x7, 0x8000, 0x8, 0x1, 0x40, 0x200, 0x7, 0x75, 0x4, 0x4, 0x33, 0x6, 0x3, 0x45a, 0x2, 0x3ff, 0x6, 0x9, 0x2, 0x35, 0x94, 0xd9, 0x7fff0, 0x2, 0x4f, 0x4, 0xbd57, 0x80, 0x9, 0xe8, 0xfffffffc, 0x100, 0x5, 0x7fffffff, 0x2, 0x1, 0xff, 0x10, 0x5, 0x3, 0x3, 0x57c, 0x2dc4, 0xfffffffa, 0x2, 0x4, 0x5, 0x4, 0x10000, 0x9, 0xcf, 0x3, 0x4, 0x4, 0x8, 0x2, 0x400, 0x8, 0xfffffff9, 0x5, 0x1, 0x1, 0x1, 0xb, 0x0, 0x1, 0x9, 0x7, 0x9, 0x7fff, 0x9, 0xe, 0x6, 0x8000, 0x6, 0x20, 0x9, 0x4, 0x8, 0x9, 0x8, 0x85, 0xfffffffd, 0x9, 0x6ca, 0x6, 0xf5c, 0x9, 0x0, 0x2, 0xb7, 0x4, 0x1, 0x0, 0x8, 0x8, 0x2, 0x9c, 0x200, 0x9, 0x10, 0xfffffffc, 0x6, 0x3, 0xc, 0x5153, 0x1, 0x2, 0x4, 0x2, 0xa7, 0x71f2, 0x8, 0x887, 0x400, 0x400, 0x4, 0x1, 0x8, 0x5, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x800}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x10, 0x0, 0xfff, 0x6, 0x0, 0x74, 0x0, 0xfffffffe, 0x40000000, 0x81, 0xb, 0xdc, 0x0, 0x3, 0x0, 0x7, 0xfffffffa, 0x400, 0x8, 0x1, 0x8, 0x2, 0xfffffff7, 0x45, 0x2, 0x7, 0xe, 0x2, 0x0, 0x5016, 0x3, 0x2, 0xff, 0x2e3, 0x8, 0x38, 0xd, 0x7, 0x4, 0x2, 0xc7d2, 0x5, 0x3, 0x80, 0x101, 0x1ff, 0x7, 0x6, 0x3ff, 0x0, 0x12d, 0x9, 0x4, 0x1, 0x5, 0x8, 0x8, 0x3, 0x9, 0x7b0, 0x5, 0x40, 0x4, 0x8, 0x0, 0x7f, 0x1, 0x7fff, 0x8, 0x5, 0xffffffff, 0x8, 0x5, 0x5, 0xffff2408, 0x0, 0xb, 0x8000, 0x7, 0x98, 0x3ff, 0x5, 0x1, 0xfc, 0x80, 0xd0c, 0x21aa, 0x2, 0x1dccefdd, 0x724, 0x4, 0xa, 0x6c, 0x4, 0x4, 0xfffffffc, 0x0, 0x8, 0x8, 0x4, 0x3, 0x5, 0x0, 0x3ff, 0x4, 0xffffffff, 0x9, 0x5, 0x9, 0x6, 0x8, 0x1, 0x4, 0x7fff, 0x7fffffff, 0x3, 0x0, 0xffffffff, 0x1, 0xc429, 0xfffffffa, 0xfffff001, 0x7, 0x8, 0x5, 0x2, 0xc3aa, 0x7ff, 0x3ff, 0x200, 0x2, 0x1, 0x6, 0x1, 0x2, 0x6, 0xf, 0x70, 0x7, 0x3, 0x4, 0xfffffffa, 0x0, 0x1, 0xa7ae, 0xfff, 0x8, 0x9, 0x101, 0x2, 0x6, 0x7, 0x9, 0xffff, 0xfa7a, 0x4797, 0xe, 0x3, 0x1, 0x4, 0x2020000, 0x1ff, 0x4, 0x80000001, 0x94da, 0x8, 0x2, 0x0, 0x401, 0xe9, 0x800, 0x80, 0xfffffffe, 0x3, 0x1ff, 0x7bd2, 0x2, 0xffff41a1, 0x8, 0x7a, 0x1, 0x40, 0x4, 0x0, 0x1d, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8, 0x6, 0x5, 0x6, 0x8001, 0x8, 0xf, 0x9, 0x0, 0x5, 0x8a, 0x0, 0x400, 0x6e0, 0x6, 0x8, 0x1, 0x1, 0x3, 0x3, 0x3, 0xad6, 0xb00, 0x80000000, 0x8, 0xffff, 0x200, 0x400000, 0x8001, 0x7, 0x0, 0x978, 0x7, 0x9, 0x7, 0x9, 0x4, 0x3, 0x0, 0x8, 0xa, 0x400, 0xdbc, 0x80000001, 0x0, 0x6, 0xc, 0x1000, 0x643e9050, 0x7, 0x1000, 0xffff, 0x4d, 0x7, 0x3, 0xe0, 0x401, 0x7, 0x6, 0x400, 0x400, 0xdc4, 0x6, 0xc, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]]}, {0xbe, 0x6, "88ff210f2d321b2a6822ff67db1f9b8c41fd67cc8d0af8f2d5dcd7a6d12c13a07a98f934ac1522b4278575b09d458690e73e9b05d7c584fbaab9828e67f86d622a02ecc100812995219a55868068d160d365030b759e6bdec13ef583a818d0ee83b17188457326cde96d77c344a7cbeadf15dd55f465de4395b1326d4e6f71c624dfc823e88aca5dc7249223622a77807bcc4c9f1ba03f0a49dba3187c407025c0345c304611c0f7479e1437d782e8b7e845bf37f70af73f225f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x42, 0xf9, 0x49, 0x1000}, {0xc, 0xc, 0x1, 0x8}, {0xf4c6, 0xf9, 0xb, 0x6}, {0x3, 0x6, 0x9, 0x2}, {0x6, 0xd9, 0xac, 0x8}, {0x8, 0xdf, 0x0, 0x5}, {0x400, 0x7, 0xb, 0xa}]}}]}}]}, 0x336c}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054)

1m1.287586243s ago: executing program 6 (id=221):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x3, 0x1}})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xff3e, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18)
personality(0x4000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}})
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r2, @ANYRES16=r9, @ANYBLOB="3183000000010000000219000000180001801400020064756d4d79300e00000000000000000055bed41c29e72ec7a4378b5241d4f2f7441039ad77d572c5747a694f1f21ce5f9d2eb9e016fb98c2bcae56c3f94fbee2a53f025a953db8f8267ad47a0f3230a7659200c9ee5450be0528434257fc1efce85e948e8a64bbcc5b3b9a2fc385d13d17c1bbcb98e3185c3f9685c40de66e8310de54b600f8725ea607e1a1c169d8c5111517c9347bc7c564e4236c4591eb460094a9d473fa69e6583c18244bf2226d917017fbdcdf9a68e35185bd81e9ceb8709c8752494181"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886)

1m0.889255108s ago: executing program 6 (id=225):
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14)
unshare(0x62040200)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
close(r0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
socket(0x80000000000000a, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00400000c31a0100240012800b000100627269646765000014000280060009000100000000002d000100000008000500", @ANYRES32=r6, @ANYBLOB="08002e000400"/18], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000100)='\x00\x00\x00\x00', &(0x7f0000000000), 0x2}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x10514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xc}, 0x2ef8, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200))
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r10, 0x0, 0xfffffffffffffffd}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x2704, &(0x7f0000000300)={0x0, 0x19, 0x2000, 0x3, 0x136}, &(0x7f0000ff0000), 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x42)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

1m0.421725126s ago: executing program 6 (id=234):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="eee3d6a0040000000800000008"], 0x48)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f00004f7000/0x11000)=nil, 0x11000, 0x2000002, 0x28011, 0xffffffffffffffff, 0x0)
fdatasync(r2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000001180)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='tlb_flush\x00', r3}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r2)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
io_setup(0x3, &(0x7f0000001080))
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006)
sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000001240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="a4b4b6b4dfc07db98a97ae22410550155e77ec9d1d84b0d5228cff97ce180ea9fecbb7ad2a0b157e7b9a5b9c6521b33636e3ce2d06e64e7b0d3d7202ac5ac4eb9a7117f595ec733ebe409c493c0512cbefd57abe2a3cf26cac6b09a82cc23bbbcef57ecc433b37876900ebfafa78b3105e896ed354c80a1a279c5c610e847bfcae835b", @ANYBLOB="040025bd7000fcdbdf2500000000140002007767310000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08003569bbea1c2ea229621fbaa291e9060001000100"], 0x38}}, 0x801)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000050000000090100000000000000424c41c500f2ff07000a40000000000900020073797a31000000000900010073797a3100000000000003400000008900000440000000dc140000001000010000000000000000000084000a"], 0x98}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)

59.745953205s ago: executing program 6 (id=246):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000014c0)={0x30, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, ':+-]\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x2000a804)

58.831557019s ago: executing program 6 (id=262):
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f0000000180)="1c0000001c001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f3fac8da1a297e0099c5ac0000c5b068d0bf46d3234565a0016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x20000000, 0x0, 0x0)

58.831471739s ago: executing program 34 (id=262):
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f0000000180)="1c0000001c001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f3fac8da1a297e0099c5ac0000c5b068d0bf46d3234565a0016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x20000000, 0x0, 0x0)

4.685604411s ago: executing program 0 (id=1017):
r0 = socket(0x2, 0x80805, 0x0)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x10)
fcntl$setlease(r1, 0x400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0)
write$vga_arbiter(r1, &(0x7f0000000240)=@target={'target ', {'PCI:', '0', ':', '1c', ':', '10', '.', 'c'}}, 0x15)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)

4.318556087s ago: executing program 0 (id=1023):
r0 = socket(0x400000000010, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfffc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@tcp6, 0x1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r4, 0x2)

4.117175839s ago: executing program 0 (id=1024):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000)

3.996459471s ago: executing program 0 (id=1025):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'ip6gre0\x00', 0x1000}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r1, 0x29, 0xd9, 0x4, 0x1, 0x50, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x8, 0x10, 0x5, 0x5}}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64)
r2 = socket(0x10, 0x3, 0x0) (rerun: 64)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) (async, rerun: 32)
r5 = socket(0x1e, 0x4, 0x0) (async, rerun: 32)
socket(0x1e, 0x4, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x200480c0) (async)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r7}, 0x18) (async)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r8 = io_uring_setup(0x2a59, &(0x7f0000000080)={0x0, 0x69be, 0x400})
io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async, rerun: 32)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f00000003c0)={0x2, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) (rerun: 32)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001740)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f00000016c0), &(0x7f0000001700)='%-5lx  \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000017c0)={r9, &(0x7f0000001780)="0d611d07e2beea9b9abd809d61c5888349d29ed43280"}, 0x20) (async)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'})

3.893019913s ago: executing program 0 (id=1026):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x2}, 0x18)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = inotify_init1(0x0)
read(r3, 0x0, 0x0)

3.035108705s ago: executing program 0 (id=1029):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYBLOB="9d9f27272eca30808a293953c84d4e3df2db5be641d7911a890946739edf8c7d8c9c6edca20ead9d212feaeedf0a2cae5cf624715bb2b2bf0a28b8b9a6dd11d248e73a16c02774dad1a1775d5c56926f15bc92e1c82c5f27d2239288d1bf72bc296d373d506b90c3f385baba03799d864dfa60954adba15c09adc7534903c9273b47db747a16d68018fd4d93eb0a0d5cb3"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0x100}, 0x18)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
remap_file_pages(&(0x7f00006c4000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB=']\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01032dbd7000ffdbdf25010000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
io_uring_setup(0x25a4, &(0x7f00000001c0)={0x0, 0x763, 0x4, 0x7, 0x11cb})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810)
perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r9, 0x0, 0x0, 0x9000)

2.828592139s ago: executing program 2 (id=1033):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
preadv2(r0, &(0x7f0000000080), 0x0, 0x1dcf, 0x3, 0x43af759600791f3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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")

2.560780423s ago: executing program 2 (id=1036):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x8, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) (async)
r0 = syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b1"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3, 0x0, 0xffffffffffffffff}, 0x18) (async)
r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async)
getsockname$packet(r5, 0x0, &(0x7f0000000200)) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0) (async)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) (async)
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) (async)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r6)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x50, r9, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) (async)
io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5)

2.468294844s ago: executing program 2 (id=1039):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)

2.424405875s ago: executing program 2 (id=1044):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x3}, 0x18)
r1 = io_uring_setup(0x1694, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

2.397186875s ago: executing program 2 (id=1046):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x0, 0x8000c62)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
shutdown(r5, 0x1)

2.219035508s ago: executing program 1 (id=1049):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r0}, 0x10)
socket$key(0xf, 0x3, 0x2)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @local}, &(0x7f0000000100)=0xc)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

2.158553358s ago: executing program 1 (id=1050):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4)
r3 = dup2(r2, r2)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1200204}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r4, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x73}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}]}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa1c1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5a82}]}, 0x74}, 0x1, 0x0, 0x0, 0x50}, 0x48080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0x100}, 0x18)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r8, 0x402, 0x8000001e)
close_range(r8, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(r8, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r9, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r10, 0xffffffffffffffff, 0x0)

2.108942609s ago: executing program 1 (id=1052):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000)

2.07584582s ago: executing program 1 (id=1053):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000080000008500000078000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)

1.951943821s ago: executing program 1 (id=1054):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)={@map=r2, 0xffffffffffffffff, 0x2c, 0x1000}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
r7 = syz_clone(0xc4200000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0))
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x18)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
truncate(&(0x7f0000000040)='./file2\x00', 0x8000c00)

1.780126654s ago: executing program 5 (id=1055):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)

1.600959647s ago: executing program 5 (id=1056):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x3}, 0x18)
r1 = io_uring_setup(0x1694, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0)

1.561631677s ago: executing program 7 (id=1057):
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYRES64=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10)
munlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000)
r3 = socket(0x8, 0x2, 0x0)
tee(r0, r3, 0xfffffffffffffffc, 0xd)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2})

1.513248358s ago: executing program 5 (id=1058):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f00000000c0), 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x80)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r1}, 0x18)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3, 0x600}, 0x21)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r5=>0x0})
bind$can_raw(r4, &(0x7f0000000200)={0x1d, r5}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001040)=@getchain={0x34, 0x11, 0x839, 0x70bd65, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x6}, {0xffff}, {0x1}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x8}]}, 0x34}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001080))
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x4, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7040000080000008500000078000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000001100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

1.39529523s ago: executing program 7 (id=1059):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfffc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f0000000080), &(0x7f0000000280)=@tcp6, 0x1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r5, 0x2)

1.157693313s ago: executing program 7 (id=1060):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
io_setup(0x2278, &(0x7f0000000180))
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0))
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440)=r6, 0x1)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=@newtfilter={0x3264, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3238, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file1\x00'}, @TCA_BPF_ACT={0x31dc, 0x1, [@m_ife={0x4c, 0x6, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x8, 0x6, "1d49a5e3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x1064, 0xa, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0x11c, 0x16, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x3, 0x10000000, 0x0, 0x1}, @multicast2, @multicast2, 0xffff00}}]}, {0xcc, 0x6, "d21cdd1cbdf1abe8fd615cc15d0b17cd57eba849a669915926355c504ac357b3f4ac1b0c70bab164b07b45475526b9979da4c9d055ab77e9ccafc2f06e1a4f24c1da9ec105a8374fb0efa14fbdf5f01f7711407426f814d07853ed320ff1d03954d299e01c8ea17b8359cac637f15cd1ece341c0fbceb0822dd821514435979221b1b2c473677d3eee85e0b7769c30f82a09bdd558d9feeb106589899d61b17f434360b9ad6658c0b0e47503d810a948ac34648673f1850c0dd831a8eb189c29c3fc0802420ed5f0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ct={0xf4, 0xa, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x6}]}, {0xc4, 0x6, "0c407c9f5e221b4210ff2c35b79d63890219080e2d404ec49deeb64a584bc327efdf71824479429276daee094a03cd75dbd8d9fdd74562afee62d90c37ad05c2037c360b1479f257180caf9600b4133094225df974704437cd473795ce2097abe5b3d9f4849c9ef9ebe6ef059258196ff603fad0cbb8d7e63400be2977605b507bc869fc271e769f605772b979ff9421c862548a42c9675ef2a896c63195289c17e2d1e27c58c677298c3fd3e41a65e37b6c3cd120b4966ab31ac21d98438f50"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x1d4, 0x20, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x7, 0x4, 0x3, 0x4}, 0x32}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xe83a, 0x1, 0x10000, 0xdae}, 0x41}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x7, 0x3, 0x7, 0x3}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x60, 0x4, 0x20000000, 0x1, 0x3}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x10000000, 0x3, 0x407e}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x10000000, 0x2, 0x4f5c0c77}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x0, 0xa, 0x4}, 0x6b}}]}, {0xe1, 0x6, "fb76fc4099a3bdd65b1db6f52dcdec889c66e8a05f3548b16a9eace5c7fa3c900182ceb07005ad1972cc82c2b8250a59c0664bffbd84fd55f8045e77371f260554baa9a4e708b4bef51e2b09becf0bdd4d2a620995217ffc16436dcd11152078190f710ebe6cf269f13ae9c56f49b3e7b0dcdd2a7aed4b45533c9351756750451bba24466d12a7b536f14af461bbc3de8267d40ef7dc4dc6d1e027d899d653fb1dd062b9f59b027f00e12e702a68452645a0ea2ca0f16d0673f9674cc4c9426dfc33fe02e48f74d0ee4e7bdd9ff86481b97f7b695c77b07eb55bca54d2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7, 0x1}}}}, @m_police={0x1d44, 0x96d, 0x0, 0x0, {{0xb}, {0x1c44, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x80000001, 0x2, 0x9, 0x1, 0x7, 0x81, 0xff, 0x387, 0x4, 0xff, 0x9, 0x2, 0xe, 0x7, 0x80, 0xcb66, 0x8, 0x0, 0x2, 0x3, 0x6, 0x4, 0x95, 0x3, 0x10, 0x5, 0xff, 0x80000000, 0x0, 0x6, 0x100, 0x1, 0x7f36, 0x80000000, 0x20, 0x0, 0x9, 0x9, 0x5, 0x2, 0x3, 0xa12e, 0x2, 0x200, 0x5, 0x3, 0x7, 0x81, 0xcb5, 0x3, 0x0, 0x13, 0x0, 0x0, 0x218, 0x7f, 0xcc, 0x4f7, 0x5, 0x4, 0x1, 0x6f03af4f, 0x0, 0x9, 0x6, 0x4, 0x9, 0x3ff, 0x8, 0x52e, 0x5, 0x8, 0xffffff81, 0xff, 0x0, 0xffffff81, 0xffffecef, 0x5, 0xfffffff7, 0x3, 0x2, 0xca85, 0x8, 0xca, 0xffffffff, 0x7, 0x5e79ac64, 0x4000000, 0x1ff, 0x0, 0x0, 0xff, 0xc0000, 0x9cb, 0xb6f, 0x1000, 0x5, 0xfffffffe, 0x8, 0x5, 0x6, 0x4, 0xfffffc6f, 0x7fffffff, 0x1, 0x8, 0x8, 0x1, 0x80, 0x2, 0x3, 0x144c, 0xaa81, 0x5, 0x7, 0x8, 0x8001, 0x2, 0xffff, 0x3, 0x5, 0x5, 0xc, 0xfffffffe, 0x5, 0xfffffff5, 0x2, 0x800, 0x1, 0x80000001, 0x0, 0x0, 0x2, 0x1, 0x660, 0x5, 0x0, 0x3, 0xfffffffc, 0xc, 0x7, 0x0, 0x6, 0xea69, 0x9, 0x26, 0x5, 0x0, 0x3, 0x35e7, 0xef, 0x6, 0x8, 0x4, 0x80000000, 0x9, 0x31, 0xb, 0xe393, 0x2, 0x401, 0x7, 0x1469, 0x904, 0x9, 0x5, 0xc, 0x6520, 0x8, 0x8, 0x9, 0x401, 0x1ff, 0x3ff, 0x3, 0x3, 0xfc46, 0x3, 0x8, 0x80000001, 0xff, 0x7, 0x1, 0xfff, 0xa, 0x8, 0x9, 0x3, 0x6, 0x3, 0xb45, 0x0, 0x7ff, 0x81, 0xe, 0x8, 0x2, 0x1, 0x3, 0xffff, 0x4, 0x6, 0xe8df, 0x7, 0x101, 0x6e, 0x0, 0x200, 0xd, 0x9, 0x2, 0x401, 0x4, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0xc, 0x10000, 0x80000001, 0x1, 0x1, 0xfffffffa, 0xffffffff, 0x6, 0x200, 0x7, 0x3, 0x4d3d, 0xfffffffd, 0x80000000, 0x7ff, 0x2, 0xb, 0x5, 0x9, 0x8001, 0x9c2, 0x8, 0x7fff, 0x6, 0x2, 0x4, 0x0, 0x6, 0x80, 0x5ef, 0x8, 0x8, 0x3, 0x9, 0x101, 0xe]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x6, 0x55, 0x8, 0x5, 0x5f, 0x3d4f, 0x1, 0x0, 0x3, 0x40, 0x8, 0x3, 0x81, 0x2, 0x100, 0x125, 0x1a959f59, 0x1, 0x323c, 0x9, 0x6, 0x4, 0x101, 0x979, 0x2, 0x1, 0x2, 0x5, 0xb, 0x3, 0xfffffff8, 0x4569, 0x2f6, 0x80000000, 0x8, 0x200, 0x101, 0x3, 0x81, 0x4, 0xc, 0x5, 0x6, 0x9, 0xfffffffd, 0xd, 0x2, 0xa, 0x4, 0x9, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x8000, 0x5, 0x1, 0x3, 0x401, 0x0, 0x9, 0x5, 0x9e, 0x0, 0x8, 0xa, 0x3, 0x7, 0x4, 0x2, 0x6, 0xfff, 0x2, 0xd, 0x9, 0x7, 0x4, 0x5fd, 0x3, 0x2, 0x4, 0x0, 0x7ff, 0x9, 0x2, 0x9, 0x3, 0x100, 0x3ff, 0x3, 0x2, 0x3, 0x6, 0x0, 0x2, 0x2, 0x4, 0x80, 0xd0, 0x5, 0x9, 0xe, 0x2, 0x7, 0x8001, 0xe46, 0xe, 0x1, 0x6, 0x1, 0x8, 0x40, 0x5, 0xe, 0x5, 0x80000001, 0x0, 0x7ff, 0x521, 0x6, 0x10, 0xffffffff, 0x8, 0x3, 0xb, 0x8, 0x3, 0x374a, 0xfffffffb, 0x8000, 0x80000001, 0x8000, 0x7, 0x10000, 0x9, 0xcfd, 0x4, 0xe, 0x1, 0x5, 0xe, 0x3, 0x7, 0x8, 0x9, 0x1, 0x5, 0x7ff, 0x42d, 0x61, 0x101, 0x9, 0x58a16a01, 0x7, 0x7, 0x7, 0x10001, 0xb5, 0xfff, 0xb, 0x1, 0xff, 0x578b, 0xa506, 0x80000001, 0x7fff, 0x17, 0x3, 0x80000001, 0x81, 0x4, 0xdc, 0x3, 0x7ff, 0xde, 0x80, 0x3, 0x2, 0x2, 0x6, 0x1000, 0x5, 0x80000001, 0x8000, 0x7, 0x6, 0x4, 0x3, 0xc2, 0x2, 0x7ff, 0x8, 0x7, 0x8, 0xe53, 0x54, 0x6, 0x10000000, 0x6, 0x4, 0x2, 0x0, 0x40, 0x8, 0xfffffffe, 0x9, 0x83, 0x582, 0x5, 0x6, 0x6, 0x3, 0x7, 0x9, 0x602, 0xe48, 0x77, 0x2, 0x14, 0x6, 0x60, 0x5, 0x6, 0x6f9e, 0xffffffff, 0x3e07, 0x8001, 0x7, 0x3, 0x3, 0x0, 0x1, 0xffffff70, 0x2, 0x7, 0x7, 0x2, 0x8, 0x100, 0x2b57, 0x5b1, 0x1, 0x4, 0x3, 0xffff, 0xa, 0xa, 0x9, 0x7, 0x2, 0x0, 0x4, 0x400, 0x6]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x6, 0x0, 0x5, 0x3, 0x9, 0x7, 0x4f, 0x6, 0x37c, 0x5, 0x0, 0x1, 0xcd, 0x7, 0x1, 0xffffffff, 0xa, 0xc, 0x6, 0x40000000, 0x8000, 0x3, 0x0, 0xfffffff3, 0x7ff, 0x1, 0x6, 0x1000, 0x8, 0x7, 0x1, 0x5, 0x7fff, 0x4, 0xfffffffc, 0x4, 0x2, 0xee, 0x4, 0xf1, 0x8, 0xa60, 0xe0f, 0xc, 0x5, 0x4, 0x6, 0x5, 0x6, 0x8, 0x5, 0xffff, 0x3, 0xa942, 0x4, 0xa, 0x2, 0x60, 0xb4fe, 0x6, 0xfffffffe, 0x7, 0x0, 0x6, 0x80000000, 0x59de, 0x654, 0xc, 0xb5a, 0xc7b, 0x9, 0x4, 0xfffffffe, 0x7, 0x6, 0x2, 0x9, 0x6, 0xe0, 0x3, 0x7, 0x7, 0x7, 0x1, 0xb0, 0x5, 0x9, 0xfffffff7, 0x2, 0x29, 0x10000, 0x0, 0x6, 0x8, 0x5, 0x7f, 0x8000, 0xb68, 0x10, 0x6, 0xfffffff9, 0x5, 0x1d, 0x8, 0x6, 0x6, 0xf98, 0xa, 0x0, 0x2a, 0x7, 0x8cb, 0x2, 0xffffffff, 0x9, 0x8, 0x5, 0xffff3e24, 0x1, 0xb8c8, 0xb, 0xff, 0xff, 0x7, 0x7847, 0x8, 0x3, 0x80000001, 0x9, 0x4, 0x6a, 0x3, 0x81, 0x7, 0x7fffffff, 0x8, 0x37, 0x7, 0x7ff, 0xc4, 0xb5d6, 0xfffffc01, 0x4, 0x1, 0x6, 0x1, 0x8001, 0x621, 0x8, 0xfffff957, 0x0, 0x3, 0x9, 0x8, 0x1, 0x80000000, 0xfb, 0x2, 0x7, 0x1000, 0x5, 0x7fffffff, 0x40, 0x4, 0xfffffffd, 0x7, 0xa5e08296, 0xd29c, 0xcffc, 0x0, 0x3, 0x0, 0x9, 0xd, 0x80000001, 0x0, 0x10001, 0x401, 0x1, 0x401, 0xffffffff, 0x6, 0x2, 0xb, 0x1, 0x9, 0x0, 0x6, 0x3, 0x400, 0x0, 0x3ff, 0x7, 0x8, 0x0, 0x9, 0x2, 0xffff, 0x7, 0x9, 0xc5, 0x5a, 0x0, 0xbb, 0xbc, 0x0, 0x13, 0x4304645d, 0xa2ea, 0x8001, 0x12, 0x5, 0x62fa, 0xc5, 0x80000001, 0x3, 0x2, 0x2, 0x2, 0x4, 0x1, 0x4, 0xf3a, 0x1c2, 0xff, 0x5, 0x1000, 0x0, 0x9, 0x9, 0x20401, 0x5, 0x7fffffff, 0x5, 0x7ff, 0x1, 0x5, 0x3, 0x60, 0xfffffffe, 0x5, 0xffff1e68, 0x8f71, 0x1000, 0x56, 0x7, 0x0, 0xfffffffb, 0x1, 0x3ff, 0x5, 0x37, 0x2, 0x6, 0xfffffff8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x3, 0x2, 0x7, 0x5, 0xa, 0x80000001, 0x5, 0xfa, 0x32, 0x73d, 0xffffff00, 0x6dd, 0x4, 0x7, 0x10001, 0x58f, 0x4, 0x5, 0x8, 0x0, 0x2, 0xaad, 0xfffffffe, 0x9, 0x2, 0x9, 0x4, 0x66119c00, 0x4, 0x0, 0x4, 0x0, 0x2, 0x7ff, 0x66b, 0xa4, 0x5, 0x4, 0x2, 0x7fffffff, 0x6, 0x400, 0x7, 0xfffffffd, 0x7, 0x3, 0x3, 0xfc10, 0xc7d, 0x0, 0x0, 0x6, 0x400, 0x8001, 0x6, 0x6, 0x7f, 0x4, 0x80000000, 0x47, 0x0, 0x6da, 0xfffffffa, 0xc, 0xc315, 0x8, 0x6, 0x2, 0x0, 0x7, 0x7, 0x10000, 0x2, 0x7, 0x3, 0x3000, 0xb3bd, 0x4, 0xfffffffe, 0x80000000, 0x7, 0x5, 0x0, 0x0, 0x458, 0x9, 0x3, 0x3ff, 0x9, 0x8, 0x4d, 0x7, 0x2, 0x5, 0x7fff, 0x9, 0x8, 0x380, 0x8, 0x6, 0x4, 0x2, 0xfffffffc, 0x3ff, 0x0, 0xf, 0x7, 0x6d, 0x1, 0x40, 0x5, 0x0, 0x400, 0x4, 0x2fb0b96, 0x5, 0x8, 0x400, 0x0, 0x2, 0xfffffffa, 0x10000, 0x8, 0x100, 0x8, 0x8, 0x7, 0x90, 0xaca5, 0x10000, 0x1, 0x5, 0x5, 0x7ff, 0x7, 0x1000000, 0x7, 0x8, 0x6, 0x9, 0xfffffffd, 0x1, 0xa, 0x0, 0x400, 0x5, 0x7, 0x4, 0x7fff, 0x80000000, 0x80000001, 0x9, 0x3, 0x3, 0x0, 0x100, 0x0, 0x7, 0x2, 0x8, 0x91, 0xffff, 0x8, 0xacbc, 0x2, 0x4, 0x81, 0xd, 0x7, 0x4, 0x0, 0x800, 0x1d, 0x2, 0x2, 0x6, 0x3, 0x10, 0x2, 0x9, 0xb48, 0x40, 0x5, 0xe, 0x81, 0x3ff, 0x80, 0x4, 0x7, 0xfffffffd, 0x10001, 0x3, 0x7, 0xfffffeff, 0xfffff147, 0x2, 0x3, 0x2, 0x0, 0x0, 0xb4, 0x7ff, 0x4, 0xa8, 0x0, 0x0, 0x2, 0x81, 0x1, 0x6, 0x1, 0x2, 0x9, 0x3, 0x41, 0x5, 0x6, 0x400, 0xfffffff7, 0x21d, 0x3, 0xfffffffa, 0x8000, 0x946, 0x6, 0x7, 0x5, 0x8b, 0x1, 0x4, 0x9d, 0x2, 0x0, 0x8, 0x8000, 0x0, 0x73, 0x4, 0x7, 0xfffffff6, 0x0, 0x7, 0xe, 0x3, 0x5, 0xfffffffe, 0x2, 0xe, 0x0, 0x5, 0x7006, 0x8, 0x6, 0x8, 0x81]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8203}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0x3, 0x1000, 0x80, 0x2, 0x7fff, 0x9b, 0x4, 0x894, 0x8, 0x3, 0x8, 0x3, 0x1, 0x7, 0x7, 0x8, 0xfffffffb, 0x2c907d61, 0x8, 0x4, 0x401, 0x0, 0x0, 0x4, 0x35, 0x7fffffff, 0x7, 0xd, 0x1, 0x3, 0x3ff, 0x4d, 0x1, 0x87, 0x3, 0xb, 0x7, 0xc7a, 0x4, 0x98, 0x9, 0x1, 0xfffffffd, 0x2, 0x80000000, 0x10, 0x5, 0x8, 0x1f, 0x8, 0x3, 0x9, 0xfffffff1, 0x6, 0xffffffff, 0x74df, 0x2, 0x1, 0x7fff, 0x8, 0xa, 0xd, 0xfff, 0x0, 0x7fff, 0x3, 0x9, 0x100, 0x1, 0x9d9, 0x3, 0x7, 0x2, 0x6, 0x0, 0x4, 0x8, 0x4, 0x3, 0x9, 0x5, 0x8, 0x2, 0x7, 0x548, 0xd, 0x1, 0x2, 0x7, 0x800, 0x10001, 0xa8, 0x8, 0x10001, 0x1fffc000, 0xfffffffd, 0xb, 0x8221, 0x9, 0x5, 0x71b, 0x3, 0x3, 0x633, 0x3, 0x7fffffff, 0x2, 0x2, 0x9, 0xc541, 0x4, 0x1ff, 0x1, 0x4, 0x100, 0x4, 0x8, 0x0, 0x6000000, 0xfffffffb, 0x80, 0x9, 0x8, 0x7fffffff, 0xffffffff, 0x4, 0x4, 0x200, 0x9, 0x0, 0xfffffff6, 0x3, 0x1, 0xa1, 0x0, 0xffffffff, 0xcd9, 0x7, 0x9, 0x0, 0x89, 0x617f97d5, 0x5, 0xb59, 0x0, 0x1, 0xfff, 0x4, 0xfffffff7, 0x541, 0x4, 0x9, 0x6, 0x7, 0x5, 0x401, 0x100, 0xa0a4, 0xf, 0x9, 0x2, 0x7, 0x5, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x4, 0x8000, 0xffffffff, 0x6, 0x4, 0x5, 0x7fffffff, 0x45b4, 0x4, 0x9d, 0xf9, 0x80, 0x1, 0x80, 0x6, 0x68ab000, 0x7ff, 0x1ff, 0x4, 0xfffffffb, 0x5, 0x0, 0x1ff, 0x8, 0xfffffffb, 0xed0f, 0x4, 0x2, 0x0, 0x6, 0x4e, 0x1000, 0x5, 0x7fff, 0x74a15d52, 0x0, 0x0, 0x3, 0x81, 0x7fffffff, 0x0, 0x0, 0xee23, 0x7ff, 0x0, 0x2, 0x9, 0x86, 0x9, 0x7, 0xc4, 0x7fff, 0xfffff6fb, 0x4, 0x4, 0x4, 0x3, 0x4, 0x3, 0xf, 0x68, 0x1, 0x0, 0x10, 0x6, 0x3, 0x6, 0x9, 0x30, 0x8, 0x9, 0x800, 0x401, 0x6, 0x4, 0x5, 0x1, 0xe, 0x5, 0x4, 0xda, 0x8000, 0x1, 0x6, 0xffffffbf, 0x5, 0xd6e]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x3e8000, 0x8001, 0x25, 0x80000001, 0x7, 0x7, 0x1, 0x3, 0xd0, 0x4, 0x4, 0xffffcf6a, 0x8001, 0xfff, 0xffff, 0x8, 0x8, 0x6, 0x8, 0x200, 0x0, 0x51a, 0x4, 0x7, 0x5, 0x10001, 0x4, 0xe821, 0x63, 0x6, 0xffffffff, 0x8, 0xf, 0xa47b, 0x7, 0xffff0000, 0x1d3, 0x44, 0x5, 0x9, 0xfe, 0x7, 0x7, 0x9, 0x5, 0x2, 0x1, 0x9, 0x1, 0x2, 0x2, 0x0, 0x4, 0x7, 0x8, 0x3, 0x4, 0xe6b, 0x6, 0xb4, 0x3, 0x5, 0x9bfd, 0xf9, 0xffffffff, 0x4, 0x7b80, 0xfffffffa, 0x4, 0x9734, 0x4, 0x8, 0x8, 0x3, 0x8, 0x80000001, 0x6, 0x1, 0x2, 0x8000, 0x1ff, 0x0, 0x8, 0x5, 0x1, 0x9, 0x0, 0x5b, 0x5, 0x3, 0x5, 0x5963, 0x6, 0x6, 0xffffff01, 0x2, 0x1, 0xfffffffc, 0x200, 0x13f5, 0x7fff, 0x3, 0x400, 0x4, 0x647a, 0x0, 0x6c5, 0x1, 0x4, 0x9, 0x4, 0x3, 0x5, 0x7, 0x2, 0x8001, 0x6, 0xffffffff, 0xfffffffb, 0x0, 0x1, 0x4, 0x100, 0x4, 0x3, 0xfffffff9, 0x644, 0x5f, 0x7ff, 0xd6, 0x200, 0x6, 0x8, 0x9, 0x7, 0x8000, 0x8, 0x1, 0x40, 0x200, 0x7, 0x75, 0x4, 0x4, 0x33, 0x6, 0x3, 0x45a, 0x2, 0x3ff, 0x6, 0x9, 0x2, 0x35, 0x94, 0xd9, 0x7fff0, 0x2, 0x4f, 0x4, 0xbd57, 0x80, 0x9, 0xe8, 0xfffffffc, 0x100, 0x5, 0x7fffffff, 0x2, 0x1, 0xff, 0x10, 0x5, 0x3, 0x3, 0x57c, 0x2dc4, 0xfffffffa, 0x2, 0x4, 0x5, 0x4, 0x10000, 0x9, 0xcf, 0x3, 0x4, 0x4, 0x8, 0x2, 0x400, 0x8, 0xfffffff9, 0x5, 0x1, 0x1, 0x1, 0xb, 0x0, 0x1, 0x9, 0x7, 0x9, 0x7fff, 0x9, 0xe, 0x6, 0x8000, 0x6, 0x20, 0x9, 0x4, 0x8, 0x9, 0x8, 0x85, 0xfffffffd, 0x9, 0x6ca, 0x6, 0xf5c, 0x9, 0x0, 0x2, 0xb7, 0x4, 0x1, 0x0, 0x8, 0x8, 0x2, 0x9c, 0x200, 0x9, 0x10, 0xfffffffc, 0x6, 0x3, 0xc, 0x5153, 0x1, 0x2, 0x4, 0x2, 0xa7, 0x71f2, 0x8, 0x887, 0x400, 0x400, 0x4, 0x1, 0x8, 0x5, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x800}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x10, 0x0, 0xfff, 0x6, 0x0, 0x74, 0x0, 0xfffffffe, 0x40000000, 0x81, 0xb, 0xdc, 0x0, 0x3, 0x0, 0x7, 0xfffffffa, 0x400, 0x8, 0x1, 0x8, 0x2, 0xfffffff7, 0x45, 0x2, 0x7, 0xe, 0x2, 0x0, 0x5016, 0x3, 0x2, 0xff, 0x2e3, 0x8, 0x38, 0xd, 0x7, 0x4, 0x2, 0xc7d2, 0x5, 0x3, 0x80, 0x101, 0x1ff, 0x7, 0x6, 0x3ff, 0x0, 0x12d, 0x9, 0x4, 0x1, 0x5, 0x8, 0x8, 0x3, 0x9, 0x7b0, 0x5, 0x40, 0x4, 0x8, 0x0, 0x7f, 0x1, 0x7fff, 0x8, 0x5, 0xffffffff, 0x8, 0x5, 0x5, 0xffff2408, 0x0, 0xb, 0x8000, 0x7, 0x98, 0x3ff, 0x5, 0x1, 0xfc, 0x80, 0xd0c, 0x21aa, 0x2, 0x1dccefdd, 0x724, 0x4, 0xa, 0x6c, 0x4, 0x4, 0xfffffffc, 0x0, 0x8, 0x8, 0x4, 0x3, 0x5, 0x0, 0x3ff, 0x4, 0xffffffff, 0x9, 0x5, 0x9, 0x6, 0x8, 0x1, 0x4, 0x7fff, 0x7fffffff, 0x3, 0x0, 0xffffffff, 0x1, 0xc429, 0xfffffffa, 0xfffff001, 0x7, 0x8, 0x5, 0x2, 0xc3aa, 0x7ff, 0x3ff, 0x200, 0x2, 0x1, 0x6, 0x1, 0x2, 0x6, 0xf, 0x70, 0x7, 0x3, 0x4, 0xfffffffa, 0x0, 0x1, 0xa7ae, 0xfff, 0x8, 0x9, 0x101, 0x2, 0x6, 0x7, 0x9, 0xffff, 0xfa7a, 0x4797, 0xe, 0x3, 0x1, 0x4, 0x2020000, 0x1ff, 0x4, 0x80000001, 0x94da, 0x8, 0x2, 0x0, 0x401, 0xe9, 0x800, 0x80, 0xfffffffe, 0x3, 0x1ff, 0x7bd2, 0x2, 0xffff41a1, 0x8, 0x7a, 0x1, 0x40, 0x4, 0x0, 0x1d, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8, 0x6, 0x5, 0x6, 0x8001, 0x8, 0xf, 0x9, 0x0, 0x5, 0x8a, 0x0, 0x400, 0x6e0, 0x6, 0x8, 0x1, 0x1, 0x3, 0x3, 0x3, 0xad6, 0xb00, 0x80000000, 0x8, 0xffff, 0x200, 0x400000, 0x8001, 0x7, 0x0, 0x978, 0x7, 0x9, 0x7, 0x9, 0x4, 0x3, 0x0, 0x8, 0xa, 0x400, 0xdbc, 0x80000001, 0x0, 0x6, 0xc, 0x1000, 0x643e9050, 0x7, 0x1000, 0xffff, 0x4d, 0x7, 0x3, 0xe0, 0x401, 0x7, 0x6, 0x400, 0x400, 0xdc4, 0x6, 0xc, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]]}, {0xd8, 0x6, "88ff210f2d321b2a6822ff67db1f9b8c41fd67cc8d0af8f2d5dcd7a6d12c13a07a98f934ac1522b4278575b09d458690e73e9b05d7c584fbaab9828e67f86d622a02ecc100812995219a55868068d160d365030b759e6bdec13ef583a818d0ee83b17188457326cde96d77c344a7cbeadf15dd55f465de4395b1326d4e6f71c624dfc823e88aca5dc7249223622a77807bcc4c9f1ba03f0a49dba3187c407025c0345c304611c0f7479e1437d782e8b7e845bf37f70af73f225ffc787163418173121ddb627cb6eaeea8f99f9c50f9bc0bbf072c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x42, 0xf9, 0x49, 0x1000}, {0xc, 0xc, 0x1, 0x8}, {0xf4c6, 0xf9, 0xb, 0x6}, {0x3, 0x6, 0x9, 0x2}, {0x6, 0xd9, 0xac, 0x8}, {0x8, 0xdf, 0x0, 0x5}, {0x400, 0x7, 0xb, 0xa}]}}]}}]}, 0x3264}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054)

625.040371ms ago: executing program 7 (id=1061):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r5}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r6, 0x0, 0x6}, 0x18)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x10, 0x803, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0)

382.977225ms ago: executing program 5 (id=1062):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r0}, 0x10)
socket$key(0xf, 0x3, 0x2)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @local}, &(0x7f0000000100)=0xc)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

320.120166ms ago: executing program 7 (id=1063):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000)

249.111756ms ago: executing program 5 (id=1064):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000080000008500000078000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)

224.450057ms ago: executing program 7 (id=1065):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
syz_emit_ethernet(0x1f, &(0x7f0000000780)={@local, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "bf", "997238", 0x886c, "b73edb3d918b9ef7ab"}}}}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080))
write$cgroup_pid(r1, &(0x7f00000005c0), 0x12)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

50.545019ms ago: executing program 1 (id=1066):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r2=>r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x20000000, 0x4b}, 0x10, 0x0, 0x0, 0x1, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000340)=ANY=[@ANYBLOB="5266000001"])
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
r6 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0)
write$binfmt_script(r6, &(0x7f0000000240)={'#! ', './file0'}, 0xb)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3e, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000001040)='xen_mmu_pte_clear\x00', r9, 0x0, 0x800000af8}, 0x18)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='sched_switch\x00', r10, 0x0, 0xa}, 0x18)
r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, "ff00f7000000000000000000af88008300"})
syz_open_pts(r11, 0x141601)
close_range(r11, 0xffffffffffffffff, 0x0)

50.151759ms ago: executing program 5 (id=1067):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000000206010400000000000000000000000705000100070000000900020073797a31000000000500050002000000050004000100000013000300686173683a6e65742c69666163650000b6726a8e89b7a2c90ef0fe50bee00002e8045705aa3342763fe3999de76af11f159a7d7fc095c4ff46cc9f69fd4c3c1e836a35adb251a95964e5a02af5857c9e53c9ed1b61389118d8b9c1314f89fd67078563fb9901f40503006124548b46501f30eb3cce1b0680e75280cd03a26a90eb863aa169cd175665101eafe6be75cc7cbe3f396c6c07b557e46f22741f28e19dd5ad1974d7feef764e076326c521"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x810, r2, 0xc1fbf000)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb, 0x100}, 0xc)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000180)='i2c_reply\x00', r4}, 0x2b)
close(0x4)
r5 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000040), 0x12)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d)
sendfile(r1, r6, 0x0, 0x1000004)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x80)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x8, 0x1, 0x0, 0x4, 0x0, 0xfffffffffffffffb, 0xd0048, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x4, @perf_config_ext={0x100000001, 0x4}, 0x200, 0x1, 0x81, 0x7, 0x2, 0x3, 0x3, 0x0, 0x3}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x2)

0s ago: executing program 2 (id=1068):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x3}, 0x18)
r1 = io_uring_setup(0x1694, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

9323][   T29] audit: type=1326 audit(1752463556.363:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.7.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4114ee929 code=0x7ffc0000
[   65.423003][   T29] audit: type=1326 audit(1752463556.433:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5082 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d109e929 code=0x7ffc0000
[   65.441193][ T5034] lo speed is unknown, defaulting to 1000
[   65.446612][   T29] audit: type=1326 audit(1752463556.433:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5082 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d109e929 code=0x7ffc0000
[   65.497099][ T5096] loop5: detected capacity change from 0 to 128
[   65.523569][ T5096] bio_check_eod: 15749 callbacks suppressed
[   65.523628][ T5096] syz.5.345: attempt to access beyond end of device
[   65.523628][ T5096] loop5: rw=0, sector=121, nr_sectors = 120 limit=128
[   65.716711][ T5113] can0: slcan on ttyS3.
[   65.753602][ T5122] loop2: detected capacity change from 0 to 1024
[   65.781931][ T5122] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   65.792990][ T5122] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[   65.816746][ T5122] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   65.828900][ T5122] EXT4-fs (loop2): invalid journal inode
[   65.846915][ T5122] EXT4-fs (loop2): can't get journal size
[   65.880305][ T5122] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #3: comm syz.2.352: blocks 2-2 from inode overlap system zone
[   65.903876][ T5122] EXT4-fs (loop2): failed to initialize system zone (-117)
[   65.911523][ T5122] EXT4-fs (loop2): mount failed
[   65.965276][   T29] audit: type=1326 audit(1752463557.093:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.2.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[   65.988989][   T29] audit: type=1326 audit(1752463557.093:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.2.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[   66.124747][ T5155] loop2: detected capacity change from 0 to 2048
[   66.301917][ T5169] loop7: detected capacity change from 0 to 128
[   66.333869][ T5169] syz.7.360: attempt to access beyond end of device
[   66.333869][ T5169] loop7: rw=0, sector=121, nr_sectors = 920 limit=128
[   66.527827][ T5110] can0 (unregistered): slcan off ttyS3.
[   66.544583][ T5182] __nla_validate_parse: 14 callbacks suppressed
[   66.544606][ T5182] netlink: 20 bytes leftover after parsing attributes in process `syz.7.361'.
[   66.630804][ T5188] loop5: detected capacity change from 0 to 512
[   66.674683][ T5188] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   66.800123][ T5188] EXT4-fs (loop5): 1 truncate cleaned up
[   66.817971][ T5188] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.875056][ T5199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.364'.
[   66.963890][ T5207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.365'.
[   66.994221][ T3633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.741857][ T5264] netlink: 12 bytes leftover after parsing attributes in process `syz.5.375'.
[   67.776676][ T5269] loop7: detected capacity change from 0 to 512
[   67.904258][ T5269] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   67.942650][ T5269] EXT4-fs (loop7): 1 truncate cleaned up
[   67.953919][ T5269] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.080040][ T4700] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.330652][ T5296] netlink: 20 bytes leftover after parsing attributes in process `syz.5.379'.
[   68.552528][ T5314] loop7: detected capacity change from 0 to 1024
[   68.600593][ T5314] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   68.611687][ T5314] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[   68.625818][ T5317] tmpfs: Bad value for 'mpol'
[   68.632047][ T5321] loop1: detected capacity change from 0 to 512
[   68.639863][ T5314] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   68.655396][ T5321] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   68.690580][ T5314] EXT4-fs (loop7): invalid journal inode
[   68.696522][ T5314] EXT4-fs (loop7): can't get journal size
[   68.716747][ T5314] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #3: comm syz.7.381: blocks 2-2 from inode overlap system zone
[   68.721521][ T5321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.743231][ T5314] EXT4-fs (loop7): failed to initialize system zone (-117)
[   68.757545][ T5314] EXT4-fs (loop7): mount failed
[   68.806925][ T5321] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.878399][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.219752][ T5369] netlink: 20 bytes leftover after parsing attributes in process `syz.7.392'.
[   69.330565][ T5379] netlink: 'syz.1.394': attribute type 1 has an invalid length.
[   69.932156][ T5415] loop7: detected capacity change from 0 to 1024
[   70.052183][ T5415] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.132745][   T29] kauditd_printk_skb: 80 callbacks suppressed
[   70.132762][   T29] audit: type=1400 audit(1752463561.263:1132): avc:  denied  { create } for  pid=5412 comm="syz.7.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   70.259354][   T29] audit: type=1400 audit(1752463561.393:1133): avc:  denied  { remount } for  pid=5431 comm="syz.5.401" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   70.318174][ T4700] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.347548][   T29] audit: type=1400 audit(1752463561.443:1134): avc:  denied  { name_connect } for  pid=5431 comm="syz.5.401" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   70.466715][ T5445] FAULT_INJECTION: forcing a failure.
[   70.466715][ T5445] name failslab, interval 1, probability 0, space 0, times 0
[   70.479719][ T5445] CPU: 1 UID: 0 PID: 5445 Comm: syz.7.402 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   70.479765][ T5445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   70.479780][ T5445] Call Trace:
[   70.479789][ T5445]  <TASK>
[   70.479799][ T5445]  __dump_stack+0x1d/0x30
[   70.479852][ T5445]  dump_stack_lvl+0xe8/0x140
[   70.479900][ T5445]  dump_stack+0x15/0x1b
[   70.479921][ T5445]  should_fail_ex+0x265/0x280
[   70.479958][ T5445]  ? ip_fib_metrics_init+0x64/0x470
[   70.480062][ T5445]  should_failslab+0x8c/0xb0
[   70.480094][ T5445]  __kmalloc_cache_noprof+0x4c/0x320
[   70.480182][ T5445]  ip_fib_metrics_init+0x64/0x470
[   70.480208][ T5445]  ? should_failslab+0x8c/0xb0
[   70.480233][ T5445]  ? __kmalloc_noprof+0x1dd/0x3e0
[   70.480266][ T5445]  fib_create_info+0xbe3/0x1980
[   70.480297][ T5445]  fib_table_insert+0x60/0xeb0
[   70.480428][ T5445]  ? fib_trie_table+0xd0/0xf0
[   70.480451][ T5445]  ? fib_new_table+0x1ac/0x1c0
[   70.480485][ T5445]  inet_rtm_newroute+0xab/0x140
[   70.480542][ T5445]  ? __pfx_inet_rtm_newroute+0x10/0x10
[   70.480582][ T5445]  rtnetlink_rcv_msg+0x5fe/0x6d0
[   70.480609][ T5445]  netlink_rcv_skb+0x120/0x220
[   70.480639][ T5445]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   70.480699][ T5445]  rtnetlink_rcv+0x1c/0x30
[   70.480718][ T5445]  netlink_unicast+0x5a5/0x680
[   70.480753][ T5445]  netlink_sendmsg+0x58b/0x6b0
[   70.480779][ T5445]  ? __pfx_netlink_sendmsg+0x10/0x10
[   70.480826][ T5445]  __sock_sendmsg+0x145/0x180
[   70.480852][ T5445]  ____sys_sendmsg+0x31e/0x4e0
[   70.480885][ T5445]  ___sys_sendmsg+0x17b/0x1d0
[   70.480935][ T5445]  __x64_sys_sendmsg+0xd4/0x160
[   70.481034][ T5445]  x64_sys_call+0x2999/0x2fb0
[   70.481060][ T5445]  do_syscall_64+0xd2/0x200
[   70.481076][ T5445]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   70.481101][ T5445]  ? clear_bhb_loop+0x40/0x90
[   70.481192][ T5445]  ? clear_bhb_loop+0x40/0x90
[   70.481212][ T5445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.481250][ T5445] RIP: 0033:0x7fd4114ee929
[   70.481282][ T5445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   70.481299][ T5445] RSP: 002b:00007fd40fb57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   70.481318][ T5445] RAX: ffffffffffffffda RBX: 00007fd411715fa0 RCX: 00007fd4114ee929
[   70.481334][ T5445] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[   70.481359][ T5445] RBP: 00007fd40fb57090 R08: 0000000000000000 R09: 0000000000000000
[   70.481374][ T5445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   70.481387][ T5445] R13: 0000000000000000 R14: 00007fd411715fa0 R15: 00007ffc26e58148
[   70.481405][ T5445]  </TASK>
[   70.798842][   T29] audit: type=1326 audit(1752463561.903:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5448 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62b3fe929 code=0x7ffc0000
[   70.822886][   T29] audit: type=1326 audit(1752463561.903:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5448 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe62b3fe929 code=0x7ffc0000
[   70.846932][   T29] audit: type=1326 audit(1752463561.903:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5448 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62b3fe929 code=0x7ffc0000
[   70.870415][   T29] audit: type=1326 audit(1752463561.903:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5448 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe62b3fe929 code=0x7ffc0000
[   70.894657][   T29] audit: type=1326 audit(1752463561.903:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5448 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62b3fe929 code=0x7ffc0000
[   70.918478][   T29] audit: type=1326 audit(1752463561.903:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5448 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe62b3fe929 code=0x7ffc0000
[   70.942224][   T29] audit: type=1326 audit(1752463561.903:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5448 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62b3fe929 code=0x7ffc0000
[   71.150143][ T5463] netlink: 'syz.5.406': attribute type 1 has an invalid length.
[   71.415468][ T5487] loop5: detected capacity change from 0 to 2048
[   71.448123][ T5487] EXT4-fs: Ignoring removed bh option
[   71.492314][ T5487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.535789][ T5487] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #12: comm syz.5.414: corrupted in-inode xattr: e_name out of bounds
[   71.657164][ T5506] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #12: comm syz.5.414: corrupted in-inode xattr: e_name out of bounds
[   71.736456][ T3633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.773730][ T5512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.417'.
[   71.794433][ T5512] FAULT_INJECTION: forcing a failure.
[   71.794433][ T5512] name failslab, interval 1, probability 0, space 0, times 0
[   71.807282][ T5512] CPU: 0 UID: 0 PID: 5512 Comm: syz.5.417 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   71.807317][ T5512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   71.807332][ T5512] Call Trace:
[   71.807340][ T5512]  <TASK>
[   71.807349][ T5512]  __dump_stack+0x1d/0x30
[   71.807417][ T5512]  dump_stack_lvl+0xe8/0x140
[   71.807435][ T5512]  dump_stack+0x15/0x1b
[   71.807511][ T5512]  should_fail_ex+0x265/0x280
[   71.807554][ T5512]  should_failslab+0x8c/0xb0
[   71.807575][ T5512]  kmem_cache_alloc_node_noprof+0x57/0x320
[   71.807615][ T5512]  ? __alloc_skb+0x101/0x320
[   71.807651][ T5512]  __alloc_skb+0x101/0x320
[   71.807683][ T5512]  ? __account_obj_stock+0x211/0x350
[   71.807728][ T5512]  netlink_ack+0xfd/0x500
[   71.807769][ T5512]  netlink_rcv_skb+0x192/0x220
[   71.807861][ T5512]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   71.807893][ T5512]  rtnetlink_rcv+0x1c/0x30
[   71.807916][ T5512]  netlink_unicast+0x5a5/0x680
[   71.807951][ T5512]  netlink_sendmsg+0x58b/0x6b0
[   71.808005][ T5512]  ? __pfx_netlink_sendmsg+0x10/0x10
[   71.808045][ T5512]  __sock_sendmsg+0x145/0x180
[   71.808076][ T5512]  ____sys_sendmsg+0x31e/0x4e0
[   71.808116][ T5512]  ___sys_sendmsg+0x17b/0x1d0
[   71.808182][ T5512]  __x64_sys_sendmsg+0xd4/0x160
[   71.808267][ T5512]  x64_sys_call+0x2999/0x2fb0
[   71.808360][ T5512]  do_syscall_64+0xd2/0x200
[   71.808376][ T5512]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   71.808409][ T5512]  ? clear_bhb_loop+0x40/0x90
[   71.808435][ T5512]  ? clear_bhb_loop+0x40/0x90
[   71.808456][ T5512]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.808522][ T5512] RIP: 0033:0x7f9f7bbae929
[   71.808546][ T5512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   71.808612][ T5512] RSP: 002b:00007f9f7a217038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   71.808635][ T5512] RAX: ffffffffffffffda RBX: 00007f9f7bdd5fa0 RCX: 00007f9f7bbae929
[   71.808650][ T5512] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[   71.808665][ T5512] RBP: 00007f9f7a217090 R08: 0000000000000000 R09: 0000000000000000
[   71.808680][ T5512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   71.808695][ T5512] R13: 0000000000000000 R14: 00007f9f7bdd5fa0 R15: 00007ffdb1a88b68
[   71.808718][ T5512]  </TASK>
[   72.213685][ T5526] loop1: detected capacity change from 0 to 512
[   72.224771][ T5526] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   72.247838][ T5526] EXT4-fs (loop1): 1 truncate cleaned up
[   72.254798][ T5526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.294659][ T5530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.423'.
[   72.304444][ T5530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.423'.
[   72.331367][ T5530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.423'.
[   72.341209][ T5530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.423'.
[   72.364566][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.398973][ T5541] loop7: detected capacity change from 0 to 2048
[   72.402998][ T5530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.423'.
[   72.432448][ T5543] lo speed is unknown, defaulting to 1000
[   72.438818][ T5543] lo speed is unknown, defaulting to 1000
[   72.460125][ T5530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.423'.
[   72.624331][ T5557] loop1: detected capacity change from 0 to 512
[   72.710473][ T5541] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.727196][ T5557] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.429: Parent and EA inode have the same ino 15
[   72.742875][ T5561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.432'.
[   72.751930][ T5561] netlink: 28 bytes leftover after parsing attributes in process `syz.5.432'.
[   72.761028][ T5561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.432'.
[   72.789696][ T5561] netlink: 'syz.5.432': attribute type 6 has an invalid length.
[   72.797560][ T5557] EXT4-fs (loop1): Remounting filesystem read-only
[   72.804550][ T5563] netlink: 'syz.0.434': attribute type 4 has an invalid length.
[   72.832189][ T5557] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[   72.853750][ T5558] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[   72.875322][ T5558] netdevsim netdevsim5 netdevsim0: left promiscuous mode
[   72.883097][ T5557] EXT4-fs (loop1): 1 orphan inode deleted
[   72.889735][ T5557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.973254][ T5561] lo speed is unknown, defaulting to 1000
[   73.010152][ T5561] lo speed is unknown, defaulting to 1000
[   73.271296][ T5583] geneve2: entered promiscuous mode
[   73.348677][ T5586] loop5: detected capacity change from 0 to 1024
[   73.380420][ T5586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.448846][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.491327][ T5586] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.517674][ T5591] loop1: detected capacity change from 0 to 1024
[   73.524790][ T5591] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   73.535802][ T5591] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[   73.549932][ T5591] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   73.564808][ T5591] EXT4-fs (loop1): invalid journal inode
[   73.581471][ T5586] lo speed is unknown, defaulting to 1000
[   73.587593][ T5591] EXT4-fs (loop1): can't get journal size
[   73.587671][ T5586] lo speed is unknown, defaulting to 1000
[   73.587933][ T5591] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.440: blocks 2-2 from inode overlap system zone
[   73.623835][ T5591] EXT4-fs (loop1): failed to initialize system zone (-117)
[   73.633477][ T5586] ext4: Unknown parameter '¶±Eéu�h¾uÏr¤û¼µ÷üg~Êìn·•£Ÿ'ñQ%¶N!äc!pyg‡{®ixí2×h8NÏÃ(Kâ�00000000000000000000000*…4E?i{è”ÃÁ3fY¢ÿÒPŸ7úïÆc� O>ƒ`s%Ensçqéìe7ukBZؘ¿3<nÊB4Û�÷’Ô'
[   73.678979][ T5591] EXT4-fs (loop1): mount failed
[   73.711067][ T3633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.781809][ T5595] loop5: detected capacity change from 0 to 1024
[   73.808839][ T5595] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   73.820052][ T5595] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[   73.887459][ T5595] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   73.990879][ T5595] EXT4-fs (loop5): invalid journal inode
[   74.047878][ T5595] EXT4-fs (loop5): can't get journal size
[   74.067646][ T5595] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.441: blocks 2-2 from inode overlap system zone
[   74.103590][ T5612] netlink: 'syz.2.447': attribute type 6 has an invalid length.
[   74.111734][ T5595] EXT4-fs (loop5): failed to initialize system zone (-117)
[   74.150755][ T5612] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   74.168713][ T5595] EXT4-fs (loop5): mount failed
[   74.189761][ T5612] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[   74.259232][ T5616] lo speed is unknown, defaulting to 1000
[   74.276053][ T5616] lo speed is unknown, defaulting to 1000
[   74.313341][ T5623] loop5: detected capacity change from 0 to 1024
[   74.459970][ T5623] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   74.471375][ T5623] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[   74.537732][ T5623] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   74.574535][ T5623] EXT4-fs (loop5): invalid journal inode
[   74.599250][ T5623] EXT4-fs (loop5): can't get journal size
[   74.605582][ T5623] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.452: blocks 2-2 from inode overlap system zone
[   74.625758][ T5623] EXT4-fs (loop5): failed to initialize system zone (-117)
[   74.635158][ T5623] EXT4-fs (loop5): mount failed
[   74.692906][ T5631] loop2: detected capacity change from 0 to 8192
[   74.775788][ T5638] netlink: 'syz.0.458': attribute type 4 has an invalid length.
[   74.882701][ T5649] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[   75.022129][ T5659] loop2: detected capacity change from 0 to 128
[   75.119672][ T5663] netlink: 'syz.5.467': attribute type 13 has an invalid length.
[   75.252890][ T5663] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.260481][ T5663] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.352495][ T5663] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.363866][ T5663] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.418452][ T5663] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.427897][ T5663] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.437020][ T5663] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.446422][ T5663] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.535110][ T5674] loop2: detected capacity change from 0 to 1024
[   75.609112][ T5674] lo speed is unknown, defaulting to 1000
[   75.615371][ T5674] lo speed is unknown, defaulting to 1000
[   75.765157][ T5685] netlink: 'syz.1.474': attribute type 4 has an invalid length.
[   76.075351][   T29] kauditd_printk_skb: 167 callbacks suppressed
[   76.075368][   T29] audit: type=1400 audit(1752463567.203:1309): avc:  denied  { load_policy } for  pid=5694 comm="syz.1.478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   76.177409][ T5695] SELinux: failed to load policy
[   76.283095][ T5712] loop2: detected capacity change from 0 to 128
[   76.369551][ T5715] netlink: 'syz.5.486': attribute type 4 has an invalid length.
[   76.453612][ T5722] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.461268][ T5722] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.488623][ T5722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.496177][ T5722] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.848819][ T5741] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   77.088705][   T29] audit: type=1400 audit(1752463568.223:1310): avc:  denied  { connect } for  pid=5739 comm="syz.2.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   77.108538][   T29] audit: type=1400 audit(1752463568.223:1311): avc:  denied  { write } for  pid=5739 comm="syz.2.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   77.858845][ T5764] netlink: 'syz.1.501': attribute type 4 has an invalid length.
[   77.990664][ T5768] loop1: detected capacity change from 0 to 128
[   78.067938][ T5768] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   78.075857][ T5768] FAT-fs (loop1): Filesystem has been set read-only
[   78.096875][ T5773] loop2: detected capacity change from 0 to 512
[   78.146425][ T5768] syz.1.503: attempt to access beyond end of device
[   78.146425][ T5768] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   78.187278][ T5768] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   78.195223][ T5768] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   78.238468][ T5768] syz.1.503: attempt to access beyond end of device
[   78.238468][ T5768] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   78.281652][ T5768] syz.1.503: attempt to access beyond end of device
[   78.281652][ T5768] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   78.303983][ T5787] netlink: 'syz.2.509': attribute type 3 has an invalid length.
[   78.313820][   T29] audit: type=1326 audit(1752463569.443:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5786 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[   78.337449][   T29] audit: type=1326 audit(1752463569.443:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5786 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[   78.360903][   T29] audit: type=1326 audit(1752463569.443:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5786 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[   78.367603][ T5768] syz.1.503: attempt to access beyond end of device
[   78.367603][ T5768] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   78.409412][ T5789] __nla_validate_parse: 17 callbacks suppressed
[   78.409512][ T5789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.507'.
[   78.420864][   T29] audit: type=1326 audit(1752463569.533:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5786 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a1e3858e7 code=0x7ffc0000
[   78.448452][   T29] audit: type=1326 audit(1752463569.533:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5786 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a1e32ab19 code=0x7ffc0000
[   78.472058][   T29] audit: type=1326 audit(1752463569.533:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5786 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[   78.497682][ T5768] syz.1.503: attempt to access beyond end of device
[   78.497682][ T5768] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   78.595842][ T5768] syz.1.503: attempt to access beyond end of device
[   78.595842][ T5768] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   78.649613][ T5768] syz.1.503: attempt to access beyond end of device
[   78.649613][ T5768] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   78.678066][ T5768] syz.1.503: attempt to access beyond end of device
[   78.678066][ T5768] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   78.697834][ T5768] syz.1.503: attempt to access beyond end of device
[   78.697834][ T5768] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   78.718745][ T5768] syz.1.503: attempt to access beyond end of device
[   78.718745][ T5768] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   78.931892][   T29] audit: type=1400 audit(1752463570.063:1318): avc:  denied  { connect } for  pid=5796 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   79.010197][ T5811] loop5: detected capacity change from 0 to 1024
[   79.024059][ T5811] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   79.035140][ T5811] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[   79.048097][ T5811] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   79.086178][ T5814] netlink: 'syz.0.514': attribute type 4 has an invalid length.
[   79.096436][ T5811] EXT4-fs (loop5): invalid journal inode
[   79.102381][ T5811] EXT4-fs (loop5): can't get journal size
[   79.118651][ T5811] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.513: blocks 2-2 from inode overlap system zone
[   79.159157][ T5811] EXT4-fs (loop5): failed to initialize system zone (-117)
[   79.179078][ T5811] EXT4-fs (loop5): mount failed
[   79.212342][ T4700] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.261672][ T5825] loop7: detected capacity change from 0 to 512
[   79.276178][ T5825] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   79.296457][ T5825] EXT4-fs (loop7): 1 truncate cleaned up
[   79.299467][ T5830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.521'.
[   79.305779][ T5825] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.370941][ T4700] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.425726][ T5835] loop7: detected capacity change from 0 to 512
[   79.441590][ T5835] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   79.464265][ T5835] EXT4-fs (loop7): 1 truncate cleaned up
[   79.476188][ T5835] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.508874][ T5842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'.
[   79.517913][ T5842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.525'.
[   79.526891][ T5842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'.
[   79.546664][ T5842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.525'.
[   79.555631][ T5842] netlink: 'syz.2.525': attribute type 6 has an invalid length.
[   79.570854][ T4700] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.582766][ T5842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'.
[   79.594276][ T5842] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   79.604910][ T5842] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[   79.651200][ T5846] lo speed is unknown, defaulting to 1000
[   79.657373][ T5846] lo speed is unknown, defaulting to 1000
[   79.764122][ T5851] loop7: detected capacity change from 0 to 2048
[   79.791652][ T5851] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.913673][ T5860] loop2: detected capacity change from 0 to 2048
[   79.934056][ T5864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.533'.
[   80.045883][ T5869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.534'.
[   80.211547][ T5872] netlink: 'syz.5.535': attribute type 1 has an invalid length.
[   80.231588][ T5872] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.248090][ T5872] netlink: 4 bytes leftover after parsing attributes in process `syz.5.535'.
[   80.259802][ T5872] ipvlan2: entered promiscuous mode
[   80.265339][ T5872] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   80.273435][ T5872] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   80.318285][ T5876] SET target dimension over the limit!
[   80.592138][ T5888] loop1: detected capacity change from 0 to 1024
[   80.615466][ T5888] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   80.626483][ T5888] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[   80.679731][ T5888] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   80.715619][ T5888] EXT4-fs (loop1): invalid journal inode
[   80.746250][ T5888] EXT4-fs (loop1): can't get journal size
[   80.767806][ T5888] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.541: blocks 2-2 from inode overlap system zone
[   80.798318][ T5888] EXT4-fs (loop1): failed to initialize system zone (-117)
[   80.810956][ T5888] EXT4-fs (loop1): mount failed
[   80.867498][ T5895] loop2: detected capacity change from 0 to 512
[   80.906049][ T5890] loop5: detected capacity change from 0 to 8192
[   80.963031][ T5902] netlink: 'syz.0.546': attribute type 1 has an invalid length.
[   81.023478][ T5907] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[   81.030055][ T5907] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   81.037791][ T5907] vhci_hcd vhci_hcd.0: Device attached
[   81.069496][ T5908] vhci_hcd: cannot find the pending unlink 6
[   81.079999][ T5908] vhci_hcd: connection closed
[   81.084768][ T3780] vhci_hcd: stop threads
[   81.093775][ T3780] vhci_hcd: release socket
[   81.098305][ T3780] vhci_hcd: disconnect device
[   81.103592][   T29] kauditd_printk_skb: 113 callbacks suppressed
[   81.103605][   T29] audit: type=1400 audit(1752463572.233:1432): avc:  denied  { bind } for  pid=5889 comm="syz.5.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   81.183551][ T5904] FAT-fs (loop5): error, corrupted directory (invalid entries)
[   81.191224][ T5904] FAT-fs (loop5): Filesystem has been set read-only
[   81.202134][   T29] audit: type=1400 audit(1752463572.333:1433): avc:  denied  { setopt } for  pid=5889 comm="syz.5.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   81.203863][ T5890] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2075)
[   81.237542][ T5890] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2075)
[   81.300802][ T3633] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2075)
[   81.656210][ T5936] netlink: 'syz.0.559': attribute type 1 has an invalid length.
[   82.325650][ T5969] netlink: 'syz.0.567': attribute type 4 has an invalid length.
[   82.520866][ T5986] netlink: 'syz.5.570': attribute type 1 has an invalid length.
[   82.586129][ T5991] loop1: detected capacity change from 0 to 512
[   82.608339][ T5991] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   82.658323][ T5991] EXT4-fs (loop1): 1 truncate cleaned up
[   82.666029][ T5991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.777580][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.845671][ T6008] netlink: 'syz.1.573': attribute type 6 has an invalid length.
[   82.878974][ T6008] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   82.912029][ T6008] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[   82.949063][ T6015] lo speed is unknown, defaulting to 1000
[   82.960499][ T6015] lo speed is unknown, defaulting to 1000
[   83.191375][ T6034] loop1: detected capacity change from 0 to 1024
[   83.265788][ T6034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.329347][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.374195][   T29] audit: type=1400 audit(1752463574.503:1434): avc:  denied  { create } for  pid=6056 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   83.383926][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.401157][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.422175][ T6064] netlink: 'syz.0.581': attribute type 1 has an invalid length.
[   83.456268][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.464074][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.527675][ T6072] loop1: detected capacity change from 0 to 128
[   83.559012][ T6072] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   83.608379][ T6072] ext4 filesystem being mounted at /157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   83.706537][ T6057] wg2: entered promiscuous mode
[   83.711611][ T6057] wg2: entered allmulticast mode
[   83.773596][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   83.876026][ T4700] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.921842][ T6099] __nla_validate_parse: 9 callbacks suppressed
[   83.921857][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.585'.
[   83.937030][ T6099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.585'.
[   83.946038][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.585'.
[   83.961853][ T6099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.585'.
[   83.970885][ T6099] netlink: 'syz.1.585': attribute type 6 has an invalid length.
[   83.988006][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'.
[   84.021097][ T6099] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   84.063277][ T6099] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[   84.102680][ T6103] lo speed is unknown, defaulting to 1000
[   84.110413][ T6103] lo speed is unknown, defaulting to 1000
[   84.175511][ T6109] loop5: detected capacity change from 0 to 512
[   84.266502][ T6109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.295461][ T6109] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.307439][   T29] audit: type=1400 audit(1752463575.433:1435): avc:  denied  { listen } for  pid=6111 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   84.349472][ T6109] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.588: corrupted xattr block 33: e_value out of bounds
[   84.363798][ T6109] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[   84.367852][   T29] audit: type=1400 audit(1752463575.463:1436): avc:  denied  { create } for  pid=6111 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   84.386759][ T6109] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.588: corrupted xattr block 33: e_value out of bounds
[   84.392812][   T29] audit: type=1400 audit(1752463575.483:1437): avc:  denied  { view } for  pid=6108 comm="syz.5.588" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   84.428485][ T6109] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[   84.428547][ T6122] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.588: corrupted xattr block 33: e_value out of bounds
[   84.457613][   T29] audit: type=1400 audit(1752463575.573:1438): avc:  denied  { read } for  pid=6108 comm="syz.5.588" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   84.480440][ T6122] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[   84.501086][   T29] audit: type=1326 audit(1752463575.613:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6108 comm="syz.5.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7bbae929 code=0x7ffc0000
[   84.524781][   T29] audit: type=1326 audit(1752463575.613:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6108 comm="syz.5.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9f7bbae929 code=0x7ffc0000
[   84.548430][   T29] audit: type=1326 audit(1752463575.613:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6108 comm="syz.5.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7bbae929 code=0x7ffc0000
[   84.575831][ T3633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.673108][ T6135] netlink: 'syz.5.592': attribute type 1 has an invalid length.
[   84.844902][ T6150] loop5: detected capacity change from 0 to 2048
[   84.855583][ T6150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.928854][ T3633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.982586][ T6157] loop7: detected capacity change from 0 to 2048
[   85.146603][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.606'.
[   85.155690][ T6173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.606'.
[   85.164654][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.606'.
[   85.180001][ T6173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.606'.
[   85.189006][ T6173] netlink: 'syz.1.606': attribute type 6 has an invalid length.
[   85.198342][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'.
[   85.224472][ T6174] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   85.255182][ T6174] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[   85.296120][ T6173] lo speed is unknown, defaulting to 1000
[   85.302805][ T6173] lo speed is unknown, defaulting to 1000
[   85.370756][ T6185] loop7: detected capacity change from 0 to 128
[   85.480369][ T6190] loop1: detected capacity change from 0 to 1024
[   85.497996][ T6190] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   85.509642][ T6190] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[   85.526262][ T6190] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   85.547890][ T6190] EXT4-fs (loop1): invalid journal inode
[   85.553936][ T6190] EXT4-fs (loop1): can't get journal size
[   85.575946][ T6193] loop7: detected capacity change from 0 to 2048
[   85.585136][ T6190] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.613: blocks 2-2 from inode overlap system zone
[   85.601823][ T6190] EXT4-fs (loop1): failed to initialize system zone (-117)
[   85.609257][ T6190] EXT4-fs (loop1): mount failed
[   85.773713][ T6200] loop1: detected capacity change from 0 to 512
[   85.782774][ T6200] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   85.940436][ T6202] FAULT_INJECTION: forcing a failure.
[   85.940436][ T6202] name failslab, interval 1, probability 0, space 0, times 0
[   85.953257][ T6202] CPU: 0 UID: 0 PID: 6202 Comm: syz.7.617 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   85.953288][ T6202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   85.953381][ T6202] Call Trace:
[   85.953390][ T6202]  <TASK>
[   85.953399][ T6202]  __dump_stack+0x1d/0x30
[   85.953446][ T6202]  dump_stack_lvl+0xe8/0x140
[   85.953470][ T6202]  dump_stack+0x15/0x1b
[   85.953487][ T6202]  should_fail_ex+0x265/0x280
[   85.953517][ T6202]  should_failslab+0x8c/0xb0
[   85.953537][ T6202]  kmem_cache_alloc_node_noprof+0x57/0x320
[   85.953624][ T6202]  ? __alloc_skb+0x101/0x320
[   85.953652][ T6202]  __alloc_skb+0x101/0x320
[   85.953683][ T6202]  alloc_uevent_skb+0x5c/0x120
[   85.953742][ T6202]  kobject_uevent_net_broadcast+0xfb/0x410
[   85.953779][ T6202]  kobject_uevent_env+0x43d/0x570
[   85.953814][ T6202]  kobject_uevent+0x1d/0x30
[   85.953905][ T6202]  __kobject_del+0x88/0x190
[   85.953934][ T6202]  kobject_put+0x127/0x190
[   85.953960][ T6202]  net_rx_queue_update_kobjects+0x477/0x520
[   85.953993][ T6202]  netdev_unregister_kobject+0xbf/0x270
[   85.954020][ T6202]  unregister_netdevice_many_notify+0x1292/0x1690
[   85.954061][ T6202]  unregister_netdevice_queue+0x1f5/0x220
[   85.954144][ T6202]  unregister_netdev+0xb3/0xe0
[   85.954265][ T6202]  slip_close+0xe4/0x100
[   85.954291][ T6202]  ? __pfx_slip_close+0x10/0x10
[   85.954339][ T6202]  tty_ldisc_close+0x71/0xa0
[   85.954367][ T6202]  tty_set_ldisc+0x1b9/0x380
[   85.954393][ T6202]  tiocsetd+0x51/0x60
[   85.954449][ T6202]  tty_ioctl+0xa7f/0xb80
[   85.954484][ T6202]  ? __pfx_tty_ioctl+0x10/0x10
[   85.954583][ T6202]  __se_sys_ioctl+0xcb/0x140
[   85.954619][ T6202]  __x64_sys_ioctl+0x43/0x50
[   85.954687][ T6202]  x64_sys_call+0x19a8/0x2fb0
[   85.954715][ T6202]  do_syscall_64+0xd2/0x200
[   85.954731][ T6202]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   85.954755][ T6202]  ? clear_bhb_loop+0x40/0x90
[   85.954775][ T6202]  ? clear_bhb_loop+0x40/0x90
[   85.954869][ T6202]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.954910][ T6202] RIP: 0033:0x7fd4114ee929
[   85.954927][ T6202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   85.955020][ T6202] RSP: 002b:00007fd40fb57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   85.955040][ T6202] RAX: ffffffffffffffda RBX: 00007fd411715fa0 RCX: 00007fd4114ee929
[   85.955055][ T6202] RDX: 0000200000000100 RSI: 0000000000005423 RDI: 0000000000000003
[   85.955071][ T6202] RBP: 00007fd40fb57090 R08: 0000000000000000 R09: 0000000000000000
[   85.955085][ T6202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   85.955179][ T6202] R13: 0000000000000000 R14: 00007fd411715fa0 R15: 00007ffc26e58148
[   85.955255][ T6202]  </TASK>
[   86.280950][ T6200] EXT4-fs (loop1): 1 truncate cleaned up
[   86.287331][ T6200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.319608][ T6222] FAULT_INJECTION: forcing a failure.
[   86.319608][ T6222] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   86.333387][ T6222] CPU: 1 UID: 0 PID: 6222 Comm: syz.0.619 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   86.333514][ T6222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   86.333526][ T6222] Call Trace:
[   86.333533][ T6222]  <TASK>
[   86.333541][ T6222]  __dump_stack+0x1d/0x30
[   86.333567][ T6222]  dump_stack_lvl+0xe8/0x140
[   86.333592][ T6222]  dump_stack+0x15/0x1b
[   86.333613][ T6222]  should_fail_ex+0x265/0x280
[   86.333704][ T6222]  should_fail_alloc_page+0xf2/0x100
[   86.333734][ T6222]  __alloc_frozen_pages_noprof+0xff/0x360
[   86.333820][ T6222]  alloc_pages_mpol+0xb3/0x250
[   86.333866][ T6222]  alloc_pages_noprof+0x90/0x130
[   86.333951][ T6222]  pte_alloc_one+0x2d/0x120
[   86.333995][ T6222]  __pte_alloc+0x32/0x2b0
[   86.334083][ T6222]  ? mas_state_walk+0x574/0x650
[   86.334122][ T6222]  handle_mm_fault+0x1c16/0x2be0
[   86.334147][ T6222]  ? mas_walk+0xf2/0x120
[   86.334214][ T6222]  do_user_addr_fault+0x636/0x1090
[   86.334254][ T6222]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   86.334287][ T6222]  exc_page_fault+0x62/0xa0
[   86.334337][ T6222]  asm_exc_page_fault+0x26/0x30
[   86.334356][ T6222] RIP: 0033:0x7fe62b2c0ca3
[   86.334371][ T6222] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[   86.334423][ T6222] RSP: 002b:00007fe629a664a0 EFLAGS: 00010206
[   86.334442][ T6222] RAX: 0000000000000000 RBX: 00007fe629a66540 RCX: 00007fe621647000
[   86.334457][ T6222] RDX: 00007fe629a666e0 RSI: 0000000000000077 RDI: 00007fe629a665e0
[   86.334547][ T6222] RBP: 000000000000013c R08: 0000000000000009 R09: 00000000000001c8
[   86.334558][ T6222] R10: 00000000000001da R11: 00007fe629a66540 R12: 00007fe629a66540
[   86.334628][ T6222] R13: 00007fe62b49c3a0 R14: 0000000000000060 R15: 00007fe629a665e0
[   86.334647][ T6222]  </TASK>
[   86.334656][ T6222] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   86.547565][ T6202] Falling back ldisc for ttyS3.
[   86.562652][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.594804][ T6237] netlink: 'syz.7.622': attribute type 6 has an invalid length.
[   86.633576][ T6237] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[   86.645642][ T6237] netdevsim netdevsim7 netdevsim0: left promiscuous mode
[   86.748536][ T6237] lo speed is unknown, defaulting to 1000
[   86.763423][ T6237] lo speed is unknown, defaulting to 1000
[   86.909938][ T6257] loop1: detected capacity change from 0 to 128
[   87.079498][ T6263] loop1: detected capacity change from 0 to 1024
[   87.098348][ T6263] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   87.109481][ T6263] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[   87.128719][ T6263] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   87.154879][ T6263] EXT4-fs (loop1): invalid journal inode
[   87.175252][ T6263] EXT4-fs (loop1): can't get journal size
[   87.182382][ T6263] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.627: blocks 2-2 from inode overlap system zone
[   87.199613][ T6263] EXT4-fs (loop1): failed to initialize system zone (-117)
[   87.206969][ T6263] EXT4-fs (loop1): mount failed
[   87.224653][   T29] kauditd_printk_skb: 43 callbacks suppressed
[   87.224670][   T29] audit: type=1326 audit(1752463578.353:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d109e929 code=0x7ffc0000
[   87.277731][   T29] audit: type=1326 audit(1752463578.383:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79d109e929 code=0x7ffc0000
[   87.301223][   T29] audit: type=1326 audit(1752463578.383:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d109e929 code=0x7ffc0000
[   87.324625][   T29] audit: type=1326 audit(1752463578.383:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d109e929 code=0x7ffc0000
[   87.348097][   T29] audit: type=1326 audit(1752463578.383:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79d109e929 code=0x7ffc0000
[   87.371618][   T29] audit: type=1326 audit(1752463578.383:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d109e929 code=0x7ffc0000
[   87.395490][   T29] audit: type=1326 audit(1752463578.383:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d109e929 code=0x7ffc0000
[   87.419898][   T29] audit: type=1326 audit(1752463578.383:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79d109e929 code=0x7ffc0000
[   87.443741][   T29] audit: type=1326 audit(1752463578.383:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d109e929 code=0x7ffc0000
[   87.467349][   T29] audit: type=1326 audit(1752463578.383:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79d109e929 code=0x7ffc0000
[   87.510537][ T6270] loop1: detected capacity change from 0 to 512
[   87.523419][ T6270] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   87.607542][ T6270] EXT4-fs (loop1): 1 truncate cleaned up
[   87.613798][ T6270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.663251][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.702629][ T6284] loop1: detected capacity change from 0 to 128
[   87.912566][ T6294] loop1: detected capacity change from 0 to 128
[   87.924578][ T6294] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   87.932560][ T6294] FAT-fs (loop1): Filesystem has been set read-only
[   87.966003][ T6294] bio_check_eod: 1585 callbacks suppressed
[   87.966025][ T6294] syz.1.640: attempt to access beyond end of device
[   87.966025][ T6294] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   87.987522][ T6294] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   87.995482][ T6294] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   88.006067][ T6294] syz.1.640: attempt to access beyond end of device
[   88.006067][ T6294] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   88.032637][ T6294] syz.1.640: attempt to access beyond end of device
[   88.032637][ T6294] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   88.075452][ T6294] syz.1.640: attempt to access beyond end of device
[   88.075452][ T6294] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   88.099022][ T6294] syz.1.640: attempt to access beyond end of device
[   88.099022][ T6294] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   88.142536][ T6311] loop5: detected capacity change from 0 to 128
[   88.157959][ T6311] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[   88.162854][ T6294] syz.1.640: attempt to access beyond end of device
[   88.162854][ T6294] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   88.165963][ T6311] FAT-fs (loop5): Filesystem has been set read-only
[   88.166131][ T6311] syz.5.647: attempt to access beyond end of device
[   88.166131][ T6311] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   88.193069][ T6294] syz.1.640: attempt to access beyond end of device
[   88.193069][ T6294] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   88.200013][ T6311] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[   88.221078][ T6311] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[   88.229712][ T6294] syz.1.640: attempt to access beyond end of device
[   88.229712][ T6294] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   88.267678][ T6311] syz.5.647: attempt to access beyond end of device
[   88.267678][ T6311] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[   88.954293][ T6338] loop1: detected capacity change from 0 to 128
[   89.224356][ T6345] __nla_validate_parse: 8 callbacks suppressed
[   89.224372][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.660'.
[   89.332821][ T6348] netlink: 28 bytes leftover after parsing attributes in process `syz.7.661'.
[   89.349999][ T6350] netlink: 148 bytes leftover after parsing attributes in process `syz.1.662'.
[   89.379918][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.7.661'.
[   89.381268][ T6348] netlink: 'syz.7.661': attribute type 8 has an invalid length.
[   89.396958][ T6348] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   89.434537][ T6353] netlink: 'syz.1.663': attribute type 4 has an invalid length.
[   90.421628][ T6379] netlink: 148 bytes leftover after parsing attributes in process `syz.7.673'.
[   90.485912][ T6381] netlink: 'syz.7.674': attribute type 4 has an invalid length.
[   90.560927][ T6383] 9pnet_fd: Insufficient options for proto=fd
[   90.639281][ T6385] SELinux: syz.5.676 (6385) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   90.707494][ T6385] FAULT_INJECTION: forcing a failure.
[   90.707494][ T6385] name failslab, interval 1, probability 0, space 0, times 0
[   90.720244][ T6385] CPU: 0 UID: 0 PID: 6385 Comm: syz.5.676 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   90.720346][ T6385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   90.720358][ T6385] Call Trace:
[   90.720365][ T6385]  <TASK>
[   90.720374][ T6385]  __dump_stack+0x1d/0x30
[   90.720400][ T6385]  dump_stack_lvl+0xe8/0x140
[   90.720431][ T6385]  dump_stack+0x15/0x1b
[   90.720446][ T6385]  should_fail_ex+0x265/0x280
[   90.720535][ T6385]  should_failslab+0x8c/0xb0
[   90.720645][ T6385]  __kmalloc_noprof+0xa5/0x3e0
[   90.720721][ T6385]  ? sel_write_user+0x1ac/0x440
[   90.720755][ T6385]  sel_write_user+0x1ac/0x440
[   90.720814][ T6385]  selinux_transaction_write+0xc3/0x110
[   90.720840][ T6385]  vfs_writev+0x406/0x8b0
[   90.720904][ T6385]  ? __pfx_selinux_transaction_write+0x10/0x10
[   90.720942][ T6385]  __x64_sys_pwritev+0xfd/0x1c0
[   90.721003][ T6385]  x64_sys_call+0x2752/0x2fb0
[   90.721023][ T6385]  do_syscall_64+0xd2/0x200
[   90.721046][ T6385]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   90.721077][ T6385]  ? clear_bhb_loop+0x40/0x90
[   90.721155][ T6385]  ? clear_bhb_loop+0x40/0x90
[   90.721182][ T6385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.721256][ T6385] RIP: 0033:0x7f9f7bbae929
[   90.721272][ T6385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.721289][ T6385] RSP: 002b:00007f9f7a217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128
[   90.721306][ T6385] RAX: ffffffffffffffda RBX: 00007f9f7bdd5fa0 RCX: 00007f9f7bbae929
[   90.721318][ T6385] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000005
[   90.721332][ T6385] RBP: 00007f9f7a217090 R08: 0000000000000008 R09: 0000000000000000
[   90.721433][ T6385] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001
[   90.721445][ T6385] R13: 0000000000000000 R14: 00007f9f7bdd5fa0 R15: 00007ffdb1a88b68
[   90.721467][ T6385]  </TASK>
[   91.195104][ T6397] loop5: detected capacity change from 0 to 2048
[   91.294903][ T6403] netlink: 148 bytes leftover after parsing attributes in process `syz.5.684'.
[   91.858008][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.692'.
[   91.900676][ T6421] syzkaller0: entered promiscuous mode
[   91.906320][ T6421] syzkaller0: entered allmulticast mode
[   92.038705][ T6424] netlink: 'syz.1.693': attribute type 4 has an invalid length.
[   92.143075][ T6434] netlink: 'syz.1.697': attribute type 1 has an invalid length.
[   92.156892][ T6432] loop2: detected capacity change from 0 to 2048
[   92.223076][ T6436] loop1: detected capacity change from 0 to 8192
[   92.297325][ T6440] loop7: detected capacity change from 0 to 2048
[   92.319544][ T6440] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.332339][   T29] kauditd_printk_skb: 50 callbacks suppressed
[   92.332351][   T29] audit: type=1400 audit(1752463583.453:1545): avc:  denied  { getopt } for  pid=6437 comm="syz.2.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   92.388323][   T29] audit: type=1326 audit(1752463583.513:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[   92.411783][   T29] audit: type=1326 audit(1752463583.513:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[   92.435347][   T29] audit: type=1326 audit(1752463583.513:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[   92.458913][   T29] audit: type=1326 audit(1752463583.513:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a1e38d290 code=0x7ffc0000
[   92.482800][   T29] audit: type=1326 audit(1752463583.513:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[   92.506793][   T29] audit: type=1326 audit(1752463583.513:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[   92.561066][   T29] audit: type=1326 audit(1752463583.633:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[   92.584505][   T29] audit: type=1326 audit(1752463583.633:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[   92.633326][ T4700] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.645923][   T29] audit: type=1326 audit(1752463583.773:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6447 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d109e929 code=0x7ffc0000
[   92.718038][ T6452] netlink: 148 bytes leftover after parsing attributes in process `syz.7.704'.
[   92.773713][ T6454] netlink: 'syz.2.707': attribute type 4 has an invalid length.
[   92.874348][ T6463] netlink: 'syz.2.709': attribute type 1 has an invalid length.
[   92.895314][ T6466] loop7: detected capacity change from 0 to 1024
[   92.921082][ T6466] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   92.932244][ T6466] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[   92.949170][ T6466] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   92.969882][ T6471] loop2: detected capacity change from 0 to 2048
[   92.976908][ T6466] EXT4-fs (loop7): invalid journal inode
[   92.982961][ T6466] EXT4-fs (loop7): can't get journal size
[   92.989465][ T6466] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #3: comm syz.7.711: blocks 2-2 from inode overlap system zone
[   93.005151][ T6472] loop1: detected capacity change from 0 to 128
[   93.007829][ T6466] EXT4-fs (loop7): failed to initialize system zone (-117)
[   93.014683][ T6472] FAULT_INJECTION: forcing a failure.
[   93.014683][ T6472] name failslab, interval 1, probability 0, space 0, times 0
[   93.031655][ T6472] CPU: 0 UID: 0 PID: 6472 Comm: wÞ£ÿ Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   93.031710][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   93.031728][ T6472] Call Trace:
[   93.031737][ T6472]  <TASK>
[   93.031748][ T6472]  __dump_stack+0x1d/0x30
[   93.031776][ T6472]  dump_stack_lvl+0xe8/0x140
[   93.031825][ T6472]  dump_stack+0x15/0x1b
[   93.031876][ T6472]  should_fail_ex+0x265/0x280
[   93.031919][ T6472]  should_failslab+0x8c/0xb0
[   93.031979][ T6472]  kmem_cache_alloc_noprof+0x50/0x310
[   93.032006][ T6472]  ? fat_cache_add+0x1ef/0x4a0
[   93.032053][ T6472]  fat_cache_add+0x1ef/0x4a0
[   93.032146][ T6472]  fat_get_cluster+0x5de/0x7b0
[   93.032245][ T6472]  ? fat_mirror_bhs+0x31e/0x320
[   93.032304][ T6472]  fat_get_mapped_cluster+0xe4/0x240
[   93.032348][ T6472]  fat_bmap+0x254/0x280
[   93.032431][ T6472]  fat_get_block+0x3b1/0x5e0
[   93.032464][ T6472]  __block_write_begin_int+0x3fd/0xf90
[   93.032505][ T6472]  ? folio_add_lru+0x175/0x1f0
[   93.032540][ T6472]  ? __pfx_fat_get_block+0x10/0x10
[   93.032624][ T6472]  cont_write_begin+0x5fc/0x970
[   93.032666][ T6472]  ? strcmp+0x22/0x50
[   93.032687][ T6472]  fat_write_begin+0x4f/0xe0
[   93.032771][ T6472]  ? __pfx_fat_get_block+0x10/0x10
[   93.032824][ T6472]  generic_perform_write+0x181/0x490
[   93.032847][ T6472]  __generic_file_write_iter+0xec/0x120
[   93.032866][ T6472]  ? __pfx_generic_file_write_iter+0x10/0x10
[   93.032889][ T6472]  generic_file_write_iter+0x8d/0x2f0
[   93.032977][ T6472]  ? _parse_integer_limit+0x170/0x190
[   93.033046][ T6472]  ? _parse_integer+0x27/0x40
[   93.033076][ T6472]  ? kstrtoull+0x111/0x140
[   93.033108][ T6472]  ? kstrtouint+0x76/0xc0
[   93.033133][ T6472]  ? kstrtouint_from_user+0x9f/0xf0
[   93.033177][ T6472]  ? avc_policy_seqno+0x15/0x30
[   93.033226][ T6472]  ? selinux_file_permission+0x1e4/0x320
[   93.033254][ T6472]  ? __pfx_generic_file_write_iter+0x10/0x10
[   93.033276][ T6472]  vfs_write+0x49d/0x8e0
[   93.033376][ T6472]  ksys_write+0xda/0x1a0
[   93.033503][ T6472]  __x64_sys_write+0x40/0x50
[   93.033542][ T6472]  x64_sys_call+0x2cdd/0x2fb0
[   93.033564][ T6472]  do_syscall_64+0xd2/0x200
[   93.033642][ T6472]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   93.033675][ T6472]  ? clear_bhb_loop+0x40/0x90
[   93.033700][ T6472]  ? clear_bhb_loop+0x40/0x90
[   93.033727][ T6472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.033819][ T6472] RIP: 0033:0x7f79d109e929
[   93.033838][ T6472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.033862][ T6472] RSP: 002b:00007f79cf707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   93.033885][ T6472] RAX: ffffffffffffffda RBX: 00007f79d12c5fa0 RCX: 00007f79d109e929
[   93.033898][ T6472] RDX: 00000000ffffffd7 RSI: 0000200000000000 RDI: 000000000000000a
[   93.033909][ T6472] RBP: 00007f79cf707090 R08: 0000000000000000 R09: 0000000000000000
[   93.033963][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   93.033978][ T6472] R13: 0000000000000000 R14: 00007f79d12c5fa0 R15: 00007fff0a049368
[   93.034002][ T6472]  </TASK>
[   93.360021][ T6466] EXT4-fs (loop7): mount failed
[   93.467921][ T6472] bio_check_eod: 16476 callbacks suppressed
[   93.467937][ T6472] wÞ£ÿ: attempt to access beyond end of device
[   93.467937][ T6472] loop1: rw=2049, sector=132, nr_sectors = 8 limit=128
[   93.502817][ T6472] wÞ£ÿ: attempt to access beyond end of device
[   93.502817][ T6472] loop1: rw=2049, sector=148, nr_sectors = 8 limit=128
[   93.526677][ T6472] wÞ£ÿ: attempt to access beyond end of device
[   93.526677][ T6472] loop1: rw=2049, sector=142, nr_sectors = 1 limit=128
[   93.540028][ T6472] Buffer I/O error on dev loop1, logical block 142, lost async page write
[   93.557705][ T6472] wÞ£ÿ: attempt to access beyond end of device
[   93.557705][ T6472] loop1: rw=2049, sector=143, nr_sectors = 1 limit=128
[   93.571072][ T6472] Buffer I/O error on dev loop1, logical block 143, lost async page write
[   93.762737][ T6472] wÞ£ÿ: attempt to access beyond end of device
[   93.762737][ T6472] loop1: rw=2049, sector=144, nr_sectors = 1 limit=128
[   93.776347][ T6472] Buffer I/O error on dev loop1, logical block 144, lost async page write
[   94.145464][ T6472] wÞ£ÿ: attempt to access beyond end of device
[   94.145464][ T6472] loop1: rw=2049, sector=145, nr_sectors = 1 limit=128
[   94.158854][ T6472] Buffer I/O error on dev loop1, logical block 145, lost async page write
[   94.171610][ T6492] netlink: 148 bytes leftover after parsing attributes in process `syz.7.717'.
[   94.185006][ T6472] wÞ£ÿ: attempt to access beyond end of device
[   94.185006][ T6472] loop1: rw=2049, sector=146, nr_sectors = 1 limit=128
[   94.198204][ T6472] Buffer I/O error on dev loop1, logical block 146, lost async page write
[   94.248111][ T6472] wÞ£ÿ: attempt to access beyond end of device
[   94.248111][ T6472] loop1: rw=2049, sector=147, nr_sectors = 1 limit=128
[   94.261431][ T6472] Buffer I/O error on dev loop1, logical block 147, lost async page write
[   94.313780][ T6496] FAULT_INJECTION: forcing a failure.
[   94.313780][ T6496] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   94.327441][ T6496] CPU: 1 UID: 0 PID: 6496 Comm: syz.0.719 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   94.327475][ T6496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   94.327488][ T6496] Call Trace:
[   94.327497][ T6496]  <TASK>
[   94.327506][ T6496]  __dump_stack+0x1d/0x30
[   94.327532][ T6496]  dump_stack_lvl+0xe8/0x140
[   94.327588][ T6496]  dump_stack+0x15/0x1b
[   94.327604][ T6496]  should_fail_ex+0x265/0x280
[   94.327642][ T6496]  should_fail+0xb/0x20
[   94.327675][ T6496]  should_fail_usercopy+0x1a/0x20
[   94.327775][ T6496]  _copy_to_user+0x20/0xa0
[   94.327793][ T6496]  simple_read_from_buffer+0xb5/0x130
[   94.327831][ T6496]  proc_fail_nth_read+0x100/0x140
[   94.327920][ T6496]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   94.327953][ T6496]  vfs_read+0x19d/0x6f0
[   94.328032][ T6496]  ? __rcu_read_unlock+0x4f/0x70
[   94.328059][ T6496]  ? __fget_files+0x184/0x1c0
[   94.328155][ T6496]  ksys_read+0xda/0x1a0
[   94.328210][ T6496]  __x64_sys_read+0x40/0x50
[   94.328259][ T6496]  x64_sys_call+0x2d77/0x2fb0
[   94.328285][ T6496]  do_syscall_64+0xd2/0x200
[   94.328308][ T6496]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   94.328338][ T6496]  ? clear_bhb_loop+0x40/0x90
[   94.328389][ T6496]  ? clear_bhb_loop+0x40/0x90
[   94.328415][ T6496]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.328438][ T6496] RIP: 0033:0x7fe62b3fd33c
[   94.328452][ T6496] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   94.328494][ T6496] RSP: 002b:00007fe629a67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   94.328512][ T6496] RAX: ffffffffffffffda RBX: 00007fe62b625fa0 RCX: 00007fe62b3fd33c
[   94.328524][ T6496] RDX: 000000000000000f RSI: 00007fe629a670a0 RDI: 000000000000000b
[   94.328535][ T6496] RBP: 00007fe629a67090 R08: 0000000000000000 R09: 0000000000000000
[   94.328547][ T6496] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[   94.328563][ T6496] R13: 0000000000000000 R14: 00007fe62b625fa0 R15: 00007ffc3f590c98
[   94.328587][ T6496]  </TASK>
[   94.333745][ T6472] wÞ£ÿ: attempt to access beyond end of device
[   94.333745][ T6472] loop1: rw=2049, sector=156, nr_sectors = 1 limit=128
[   94.553150][ T6472] Buffer I/O error on dev loop1, logical block 156, lost async page write
[   94.584202][ T6472] wÞ£ÿ: attempt to access beyond end of device
[   94.584202][ T6472] loop1: rw=2049, sector=157, nr_sectors = 1 limit=128
[   94.597415][ T6472] Buffer I/O error on dev loop1, logical block 157, lost async page write
[   94.645443][ T6472] Buffer I/O error on dev loop1, logical block 160, lost async page write
[   94.664343][ T6472] Buffer I/O error on dev loop1, logical block 161, lost async page write
[   94.708413][ T6503] netlink: 'syz.7.721': attribute type 4 has an invalid length.
[   94.769638][ T6508] netlink: 'syz.1.724': attribute type 1 has an invalid length.
[   94.799593][ T6510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.726'.
[   94.845951][ T6515] netlink: 148 bytes leftover after parsing attributes in process `syz.2.728'.
[   94.868432][ T6517] netlink: 60 bytes leftover after parsing attributes in process `syz.1.729'.
[   94.877796][ T6517] unsupported nlmsg_type 40
[   94.933067][ T6520] loop1: detected capacity change from 0 to 512
[   94.939207][ T6521] loop2: detected capacity change from 0 to 2048
[   94.970510][ T6520] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   95.020497][ T6520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.062399][ T6520] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   95.239896][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.272825][ T6533] loop7: detected capacity change from 0 to 512
[   95.326547][ T6533] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   95.347842][ T6533] EXT4-fs (loop7): mount failed
[   95.492880][ T6547] netlink: 'syz.7.739': attribute type 1 has an invalid length.
[   95.519721][ T6551] netlink: 148 bytes leftover after parsing attributes in process `syz.2.740'.
[   95.534432][ T6550] loop1: detected capacity change from 0 to 2048
[   95.586483][ T6555] loop2: detected capacity change from 0 to 512
[   95.601522][ T6553] loop7: detected capacity change from 0 to 512
[   95.639521][ T6553] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   95.668789][ T6553] EXT4-fs (loop7): 1 truncate cleaned up
[   95.694737][ T6553] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.876709][ T4700] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.040439][ T6566] loop7: detected capacity change from 0 to 2048
[   96.050663][ T6568] netlink: 'syz.1.749': attribute type 4 has an invalid length.
[   96.068622][ T6566] EXT4-fs: Mount option(s) incompatible with ext3
[   96.122559][ T6570] loop1: detected capacity change from 0 to 1024
[   96.144131][ T6570] EXT4-fs: Ignoring removed orlov option
[   96.170355][ T6570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.249782][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.295172][ T6580] netlink: 148 bytes leftover after parsing attributes in process `syz.2.753'.
[   96.359217][ T6585] netlink: 'syz.2.754': attribute type 1 has an invalid length.
[   96.446442][ T6587] netlink: 20 bytes leftover after parsing attributes in process `syz.2.755'.
[   96.688627][ T6595] loop2: detected capacity change from 0 to 128
[   96.998231][ T6599] loop1: detected capacity change from 0 to 8192
[   97.047000][ T6605] loop2: detected capacity change from 0 to 1024
[   97.054719][ T3299]  loop1: p2 p3 p4
[   97.069462][ T3299] loop1: p2 start 4294967295 is beyond EOD, truncated
[   97.076291][ T3299] loop1: p3 start 83886080 is beyond EOD, truncated
[   97.082948][ T3299] loop1: p4 size 3599499264 extends beyond EOD, truncated
[   97.100474][ T6609] netlink: 'syz.7.765': attribute type 1 has an invalid length.
[   97.118691][ T6605] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   97.129762][ T6605] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[   97.159357][ T6599]  loop1: p2 p3 p4
[   97.180646][ T6599] loop1: p2 start 4294967295 is beyond EOD, truncated
[   97.187604][ T6599] loop1: p3 start 83886080 is beyond EOD, truncated
[   97.194374][ T6599] loop1: p4 size 3599499264 extends beyond EOD, truncated
[   97.197641][ T6605] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   97.215959][ T6612] loop7: detected capacity change from 0 to 128
[   97.229236][ T6605] EXT4-fs (loop2): invalid journal inode
[   97.239113][ T6605] EXT4-fs (loop2): can't get journal size
[   97.265688][ T6605] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #3: comm syz.2.763: blocks 2-2 from inode overlap system zone
[   97.417773][ T6605] EXT4-fs (loop2): failed to initialize system zone (-117)
[   97.427844][ T6605] EXT4-fs (loop2): mount failed
[   97.529067][   T29] kauditd_printk_skb: 360 callbacks suppressed
[   97.529085][   T29] audit: type=1326 audit(1752463588.663:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6604 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[   97.558856][   T29] audit: type=1326 audit(1752463588.663:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6604 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[   97.593735][ T6617] netlink: 'syz.5.767': attribute type 39 has an invalid length.
[   97.677197][   T29] audit: type=1326 audit(1752463588.713:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6604 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[   97.700978][   T29] audit: type=1326 audit(1752463588.713:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6604 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[   97.724488][   T29] audit: type=1326 audit(1752463588.713:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6604 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[   97.748075][   T29] audit: type=1326 audit(1752463588.733:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6604 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[   97.771793][   T29] audit: type=1326 audit(1752463588.733:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6604 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[   97.796042][   T29] audit: type=1326 audit(1752463588.733:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6604 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[   97.819764][   T29] audit: type=1326 audit(1752463588.733:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6604 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[   97.843616][   T29] audit: type=1326 audit(1752463588.733:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6604 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[   97.991359][ T6630] loop5: detected capacity change from 0 to 128
[   98.190542][ T6640] netlink: 'syz.7.776': attribute type 1 has an invalid length.
[   98.344555][ T6647] loop5: detected capacity change from 0 to 512
[   98.377345][ T6647] EXT4-fs (loop5): 1 orphan inode deleted
[   98.388569][   T56] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1
[   98.416984][ T6647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.472935][ T6647] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.514963][ T6647] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   98.583812][ T3633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.586787][ T6655] loop1: detected capacity change from 0 to 1024
[   98.601857][ T6655] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   98.612943][ T6655] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[   98.623926][ T6655] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   98.634800][ T6655] EXT4-fs (loop1): invalid journal inode
[   98.641376][ T6655] EXT4-fs (loop1): can't get journal size
[   98.679533][ T6655] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.782: blocks 2-2 from inode overlap system zone
[   98.696125][ T6655] EXT4-fs (loop1): failed to initialize system zone (-117)
[   98.704410][ T6655] EXT4-fs (loop1): mount failed
[   98.947727][ T6664] loop2: detected capacity change from 0 to 512
[   99.059420][ T6670] netlink: 'syz.2.788': attribute type 1 has an invalid length.
[   99.083000][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.787'.
[   99.157136][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.5.793'.
[   99.220505][ T6683] loop5: detected capacity change from 0 to 2048
[   99.227353][ T6674] syzkaller0: entered promiscuous mode
[   99.233410][ T6674] syzkaller0: entered allmulticast mode
[   99.275262][ T6683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.340234][ T3633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.542208][ T6695] loop5: detected capacity change from 0 to 512
[   99.555481][ T6695] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   99.573227][ T6695] EXT4-fs (loop5): 1 truncate cleaned up
[   99.579629][ T6695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.806216][ T3633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.074590][ T6706] netlink: 'syz.2.802': attribute type 13 has an invalid length.
[  100.204309][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.211779][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.230740][ T6714] 9pnet_fd: Insufficient options for proto=fd
[  100.396246][ T6706] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.405361][ T6706] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.414553][ T6706] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.423734][ T6706] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.454300][ T6722] loop5: detected capacity change from 0 to 512
[  100.477772][ T6722] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  100.532204][ T6722] EXT4-fs (loop5): 1 truncate cleaned up
[  100.560663][ T6722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.618234][ T6727] netlink: 'syz.2.811': attribute type 4 has an invalid length.
[  100.643784][ T3633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.720543][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz.5.812'.
[  100.744914][ T6733] loop2: detected capacity change from 0 to 1024
[  100.796530][ T6731] syzkaller0: entered promiscuous mode
[  100.802215][ T6731] syzkaller0: entered allmulticast mode
[  100.850772][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.815'.
[  100.859971][ T6735] netlink: 28 bytes leftover after parsing attributes in process `syz.1.815'.
[  100.869310][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.815'.
[  100.901058][ T6735] netlink: 28 bytes leftover after parsing attributes in process `syz.1.815'.
[  100.910209][ T6735] netlink: 'syz.1.815': attribute type 6 has an invalid length.
[  100.928372][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'.
[  100.931648][ T6738] loop2: detected capacity change from 0 to 2048
[  100.950331][ T6735] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  100.967507][ T6735] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  101.018462][ T6739] lo speed is unknown, defaulting to 1000
[  101.051082][ T6739] lo speed is unknown, defaulting to 1000
[  101.161721][ T6743] loop2: detected capacity change from 0 to 2048
[  101.261860][ T6746] netlink: 20 bytes leftover after parsing attributes in process `syz.1.819'.
[  101.395867][ T6750] loop2: detected capacity change from 0 to 2048
[  101.540509][ T6752] 9pnet_fd: Insufficient options for proto=fd
[  101.567533][ T6754] netlink: 'syz.2.822': attribute type 1 has an invalid length.
[  101.689205][ T6760] loop1: detected capacity change from 0 to 512
[  101.715567][ T6760] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  101.734435][ T6762] loop5: detected capacity change from 0 to 1024
[  101.747657][ T6762] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  101.758960][ T6762] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  101.778260][ T6760] EXT4-fs (loop1): 1 truncate cleaned up
[  101.791593][ T6760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.818363][ T6762] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  101.840072][ T6762] EXT4-fs (loop5): invalid journal inode
[  101.845811][ T6762] EXT4-fs (loop5): can't get journal size
[  101.868796][ T6762] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.826: blocks 2-2 from inode overlap system zone
[  101.909074][ T6762] EXT4-fs (loop5): failed to initialize system zone (-117)
[  101.929838][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.939208][ T6762] EXT4-fs (loop5): mount failed
[  102.135783][ T6776] loop1: detected capacity change from 0 to 128
[  102.173920][ T6776] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  102.181902][ T6776] FAT-fs (loop1): Filesystem has been set read-only
[  102.229654][ T6776] bio_check_eod: 4 callbacks suppressed
[  102.229672][ T6776] syz.1.831: attempt to access beyond end of device
[  102.229672][ T6776] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  102.267728][ T6776] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  102.275724][ T6776] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  102.304062][ T6776] syz.1.831: attempt to access beyond end of device
[  102.304062][ T6776] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  102.319904][ T6781] loop5: detected capacity change from 0 to 8192
[  102.328129][ T6783] netlink: 'syz.7.834': attribute type 1 has an invalid length.
[  102.347623][ T6776] syz.1.831: attempt to access beyond end of device
[  102.347623][ T6776] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  102.389808][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.7.835'.
[  102.427583][ T6776] syz.1.831: attempt to access beyond end of device
[  102.427583][ T6776] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  102.451496][ T6776] syz.1.831: attempt to access beyond end of device
[  102.451496][ T6776] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  102.486319][ T6785] syzkaller0: entered promiscuous mode
[  102.492013][ T6785] syzkaller0: entered allmulticast mode
[  102.507575][ T6776] syz.1.831: attempt to access beyond end of device
[  102.507575][ T6776] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  102.527787][ T6776] syz.1.831: attempt to access beyond end of device
[  102.527787][ T6776] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  102.557620][ T6776] syz.1.831: attempt to access beyond end of device
[  102.557620][ T6776] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  102.585086][ T6791] loop2: detected capacity change from 0 to 512
[  102.598091][ T6776] syz.1.831: attempt to access beyond end of device
[  102.598091][ T6776] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  102.626810][ T6776] syz.1.831: attempt to access beyond end of device
[  102.626810][ T6776] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  102.694995][ T6794] 9pnet_fd: Insufficient options for proto=fd
[  102.880295][   T29] kauditd_printk_skb: 85 callbacks suppressed
[  102.880385][   T29] audit: type=1326 audit(1752463594.013:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6797 comm="syz.7.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4114ee929 code=0x7ffc0000
[  102.986767][   T29] audit: type=1326 audit(1752463594.053:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6797 comm="syz.7.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4114ee929 code=0x7ffc0000
[  103.010432][   T29] audit: type=1326 audit(1752463594.053:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6797 comm="syz.7.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4114ee929 code=0x7ffc0000
[  103.033907][   T29] audit: type=1326 audit(1752463594.053:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6797 comm="syz.7.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4114ee929 code=0x7ffc0000
[  103.057445][   T29] audit: type=1326 audit(1752463594.053:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6797 comm="syz.7.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4114ee929 code=0x7ffc0000
[  103.081056][   T29] audit: type=1326 audit(1752463594.053:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6797 comm="syz.7.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4114ee929 code=0x7ffc0000
[  103.104836][   T29] audit: type=1326 audit(1752463594.053:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6797 comm="syz.7.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4114ee929 code=0x7ffc0000
[  103.128456][   T29] audit: type=1326 audit(1752463594.053:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6797 comm="syz.7.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4114ee929 code=0x7ffc0000
[  103.146859][ T6802] netlink: 24 bytes leftover after parsing attributes in process `syz.7.842'.
[  103.152128][   T29] audit: type=1326 audit(1752463594.053:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6797 comm="syz.7.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4114ee929 code=0x7ffc0000
[  103.184374][   T29] audit: type=1326 audit(1752463594.053:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6797 comm="syz.7.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd4114ee929 code=0x7ffc0000
[  103.252027][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.843'.
[  103.261300][ T6804] netlink: 'syz.2.843': attribute type 6 has an invalid length.
[  103.281390][ T6804] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  103.297624][ T6804] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  103.348538][ T6808] lo speed is unknown, defaulting to 1000
[  103.354670][ T6808] lo speed is unknown, defaulting to 1000
[  103.368510][ T6811] netlink: 'syz.5.845': attribute type 1 has an invalid length.
[  103.459204][ T6814] loop5: detected capacity change from 0 to 2048
[  103.540217][ T6818] loop2: detected capacity change from 0 to 512
[  103.626117][ T6820] syzkaller0: entered promiscuous mode
[  103.631922][ T6820] syzkaller0: entered allmulticast mode
[  103.822867][ T6827] netlink: 'syz.2.850': attribute type 4 has an invalid length.
[  103.875681][ T6832] loop2: detected capacity change from 0 to 1024
[  103.900688][ T6832] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  103.911711][ T6832] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  103.950833][ T6832] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  103.962135][ T6832] EXT4-fs (loop2): invalid journal inode
[  103.968340][ T6832] EXT4-fs (loop2): can't get journal size
[  103.976594][ T6832] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #3: comm syz.2.853: blocks 2-2 from inode overlap system zone
[  103.993808][ T6832] EXT4-fs (loop2): failed to initialize system zone (-117)
[  104.001361][ T6832] EXT4-fs (loop2): mount failed
[  104.082690][ T6838] loop5: detected capacity change from 0 to 8192
[  104.215053][ T6842] netlink: 'syz.2.857': attribute type 1 has an invalid length.
[  104.271853][ T6845] netlink: 'syz.0.858': attribute type 6 has an invalid length.
[  104.318972][ T6847] netlink: 'syz.1.859': attribute type 4 has an invalid length.
[  104.344693][ T6845] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  104.389961][ T6845] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  104.423889][ T6840] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  104.431593][ T6840] FAT-fs (loop5): Filesystem has been set read-only
[  104.431844][ T6848] lo speed is unknown, defaulting to 1000
[  104.453672][ T6838] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2075)
[  104.473056][ T6852] syzkaller0: entered promiscuous mode
[  104.478160][ T6838] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2075)
[  104.478693][ T6852] syzkaller0: entered allmulticast mode
[  104.489256][ T6838] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2075)
[  104.504023][ T6848] lo speed is unknown, defaulting to 1000
[  104.599028][ T6857] netlink: 'syz.5.862': attribute type 13 has an invalid length.
[  104.728847][ T6868] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.737651][ T6868] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.746463][ T6868] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.755247][ T6868] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.849709][ T6876] syzkaller0: entered promiscuous mode
[  104.855354][ T6876] syzkaller0: entered allmulticast mode
[  104.995537][ T6881] netlink: 'syz.0.873': attribute type 6 has an invalid length.
[  105.006106][ T6881] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  105.014651][ T6881] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  105.075024][ T6881] lo speed is unknown, defaulting to 1000
[  105.089891][ T6881] lo speed is unknown, defaulting to 1000
[  105.271894][ T6893] lo speed is unknown, defaulting to 1000
[  105.278527][ T6893] lo speed is unknown, defaulting to 1000
[  105.459638][ T6907] syzkaller0: entered promiscuous mode
[  105.465228][ T6907] syzkaller0: entered allmulticast mode
[  105.605697][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4
[  105.613704][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2
[  105.638850][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[  105.646672][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[  105.654417][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[  105.662183][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[  105.669951][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[  105.677727][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[  105.685411][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[  105.693229][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[  105.701043][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[  105.708827][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[  105.716530][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[  105.724317][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[  105.732041][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[  105.739755][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[  105.754872][   T10] hid-generic 0000:3000000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  105.770557][ T6921] netlink: 'syz.7.886': attribute type 1 has an invalid length.
[  105.812889][ T6919] fido_id[6919]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  105.841429][ T6929] __nla_validate_parse: 19 callbacks suppressed
[  105.841448][ T6929] netlink: 96 bytes leftover after parsing attributes in process `syz.2.887'.
[  105.860388][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'.
[  105.873397][ T6929] IPVS: Error joining to the multicast group
[  106.094364][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.102158][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.117570][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.125101][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.132598][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.140144][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.147598][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.155100][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.162749][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.170212][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.177698][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.185128][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.201876][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.209418][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.216919][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.224577][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.232043][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.239577][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.247102][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.254674][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.262221][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.269668][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.277280][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.284742][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.292564][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.300209][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.307810][   T10] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0
[  106.320335][   T10] hid-generic 0000:0000:0004.0003: hidraw0: <UNKNOWN> HID v7f.ff Device [syz0] on syz0
[  106.381825][ T6976] fido_id[6976]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  107.538101][ T7021] netlink: 'syz.1.901': attribute type 1 has an invalid length.
[  107.614519][ T6943] syz.7.892 (6943) used greatest stack depth: 7160 bytes left
[  107.679289][ T7028] netlink: 16 bytes leftover after parsing attributes in process `syz.7.904'.
[  107.732623][ T7028] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.740230][ T7028] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.804083][ T7028] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.811733][ T7028] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.842232][ T7038] loop1: detected capacity change from 0 to 1024
[  107.902372][ T7044] loop5: detected capacity change from 0 to 512
[  107.916217][ T7038] EXT4-fs: Ignoring removed nomblk_io_submit option
[  107.943766][ T7044] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  108.014464][ T7044] EXT4-fs (loop5): 1 truncate cleaned up
[  108.041834][ T7044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.085063][ T7051] loop7: detected capacity change from 0 to 2048
[  108.100649][ T7038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.190838][ T3633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.488958][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.585909][ T7090] netlink: 'syz.0.914': attribute type 4 has an invalid length.
[  108.631595][ T7097] netlink: 'syz.1.913': attribute type 1 has an invalid length.
[  108.786483][ T7118] netlink: 36 bytes leftover after parsing attributes in process `syz.5.917'.
[  108.795531][ T7118] netlink: 16 bytes leftover after parsing attributes in process `syz.5.917'.
[  108.804506][ T7118] netlink: 36 bytes leftover after parsing attributes in process `syz.5.917'.
[  108.825820][ T7118] netlink: 36 bytes leftover after parsing attributes in process `syz.5.917'.
[  108.892168][ T7139] loop2: detected capacity change from 0 to 2048
[  108.893633][ T7141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.923'.
[  108.999425][ T7147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.926'.
[  109.169252][ T7156] loop2: detected capacity change from 0 to 8192
[  109.444545][ T7163] syzkaller0: entered promiscuous mode
[  109.450336][ T7163] syzkaller0: entered allmulticast mode
[  109.528964][ T7165] loop2: detected capacity change from 0 to 512
[  109.744733][ T7177] netlink: 36 bytes leftover after parsing attributes in process `syz.5.932'.
[  109.808775][ T7179] 9pnet: Could not find request transport: fd0x0000000000000003
[  109.932049][ T7188] loop1: detected capacity change from 0 to 512
[  109.939638][ T7188] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  109.951226][ T7188] EXT4-fs (loop1): 1 truncate cleaned up
[  109.957277][ T7188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.999306][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.063218][ T7199] loop7: detected capacity change from 0 to 2048
[  110.190183][ T7211] loop1: detected capacity change from 0 to 2048
[  110.205165][ T7213] loop7: detected capacity change from 0 to 128
[  110.217170][ T7211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.236044][ T7213] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100)
[  110.244126][ T7213] FAT-fs (loop7): Filesystem has been set read-only
[  110.251717][   T29] kauditd_printk_skb: 131 callbacks suppressed
[  110.251805][   T29] audit: type=1400 audit(1752463601.383:2149): avc:  denied  { setopt } for  pid=7210 comm="syz.1.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  110.254678][ T7211] FAULT_INJECTION: forcing a failure.
[  110.254678][ T7211] name failslab, interval 1, probability 0, space 0, times 0
[  110.258866][   T29] audit: type=1400 audit(1752463601.383:2150): avc:  denied  { ioctl } for  pid=7210 comm="syz.1.949" path="socket:[15865]" dev="sockfs" ino=15865 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  110.277504][ T7211] CPU: 1 UID: 0 PID: 7211 Comm: syz.1.949 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[  110.277541][ T7211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  110.277560][ T7211] Call Trace:
[  110.277569][ T7211]  <TASK>
[  110.277582][ T7211]  __dump_stack+0x1d/0x30
[  110.277677][ T7211]  dump_stack_lvl+0xe8/0x140
[  110.277723][ T7211]  dump_stack+0x15/0x1b
[  110.277744][ T7211]  should_fail_ex+0x265/0x280
[  110.277784][ T7211]  should_failslab+0x8c/0xb0
[  110.277816][ T7211]  kmem_cache_alloc_noprof+0x50/0x310
[  110.277858][ T7211]  ? __es_insert_extent+0x508/0xee0
[  110.277962][ T7211]  __es_insert_extent+0x508/0xee0
[  110.277995][ T7211]  ext4_es_insert_extent+0x435/0x1c10
[  110.278031][ T7211]  ext4_map_query_blocks+0x2fd/0x480
[  110.278115][ T7211]  ext4_map_blocks+0x3a1/0xd70
[  110.278159][ T7211]  ? bpf_trace_run2+0x124/0x1c0
[  110.278191][ T7211]  ? security_compute_sid+0x11da/0x1290
[  110.278224][ T7211]  ? security_compute_sid+0x11da/0x1290
[  110.278295][ T7211]  ext4_getblk+0x114/0x510
[  110.278388][ T7211]  ext4_bread_batch+0x5c/0x320
[  110.278415][ T7211]  __ext4_find_entry+0x840/0xf40
[  110.278535][ T7211]  ? avc_has_perm_noaudit+0x1b1/0x200
[  110.278579][ T7211]  ? may_create+0x26e/0x2b0
[  110.278610][ T7211]  ext4_lookup+0xbb/0x390
[  110.278649][ T7211]  ? __pfx_ext4_lookup+0x10/0x10
[  110.278709][ T7211]  path_openat+0xcf0/0x2170
[  110.278761][ T7211]  do_filp_open+0x109/0x230
[  110.278810][ T7211]  do_sys_openat2+0xa6/0x110
[  110.278853][ T7211]  __x64_sys_creat+0x65/0x90
[  110.278949][ T7211]  x64_sys_call+0x114d/0x2fb0
[  110.278980][ T7211]  do_syscall_64+0xd2/0x200
[  110.279007][ T7211]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  110.279044][ T7211]  ? clear_bhb_loop+0x40/0x90
[  110.279075][ T7211]  ? clear_bhb_loop+0x40/0x90
[  110.279105][ T7211]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.279218][ T7211] RIP: 0033:0x7f79d109e929
[  110.279239][ T7211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.279265][ T7211] RSP: 002b:00007f79cf707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  110.279291][ T7211] RAX: ffffffffffffffda RBX: 00007f79d12c5fa0 RCX: 00007f79d109e929
[  110.279308][ T7211] RDX: 0000000000000000 RSI: ecf86c37d53049cc RDI: 0000200000000000
[  110.279325][ T7211] RBP: 00007f79cf707090 R08: 0000000000000000 R09: 0000000000000000
[  110.279342][ T7211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  110.279361][ T7211] R13: 0000000000000000 R14: 00007f79d12c5fa0 R15: 00007fff0a049368
[  110.279397][ T7211]  </TASK>
[  110.305853][ T7213] bio_check_eod: 11485 callbacks suppressed
[  110.305871][ T7213] syz.7.950: attempt to access beyond end of device
[  110.305871][ T7213] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  110.314854][   T29] audit: type=1400 audit(1752463601.413:2151): avc:  denied  { read } for  pid=7210 comm="syz.1.949" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  110.338199][ T7213] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100)
[  110.623138][ T7213] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100)
[  110.631822][ T7213] syz.7.950: attempt to access beyond end of device
[  110.631822][ T7213] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128
[  110.645891][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.656891][ T7213] syz.7.950: attempt to access beyond end of device
[  110.656891][ T7213] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128
[  110.670624][ T7213] syz.7.950: attempt to access beyond end of device
[  110.670624][ T7213] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128
[  110.699731][ T7225] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125
[  110.717689][ T7213] syz.7.950: attempt to access beyond end of device
[  110.717689][ T7213] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128
[  110.747096][ T7213] syz.7.950: attempt to access beyond end of device
[  110.747096][ T7213] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128
[  110.761473][ T7213] syz.7.950: attempt to access beyond end of device
[  110.761473][ T7213] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128
[  110.777048][ T7213] syz.7.950: attempt to access beyond end of device
[  110.777048][ T7213] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128
[  110.800727][ T7230] loop1: detected capacity change from 0 to 128
[  110.813319][ T7230] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  110.821307][ T7230] FAT-fs (loop1): Filesystem has been set read-only
[  110.837551][ T7230] syz.1.956: attempt to access beyond end of device
[  110.837551][ T7230] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  110.851754][ T7213] syz.7.950: attempt to access beyond end of device
[  110.851754][ T7213] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128
[  110.851988][ T7230] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  110.873129][ T7230] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  110.876102][ T7240] netlink: 'syz.0.960': attribute type 13 has an invalid length.
[  111.002965][ T7247] __nla_validate_parse: 3 callbacks suppressed
[  111.002988][ T7247] netlink: 36 bytes leftover after parsing attributes in process `syz.2.958'.
[  111.019284][ T7247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.958'.
[  111.028440][ T7247] netlink: 36 bytes leftover after parsing attributes in process `syz.2.958'.
[  111.057794][ T7247] netlink: 36 bytes leftover after parsing attributes in process `syz.2.958'.
[  111.091447][ T7240] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.098950][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.151145][ T7240] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.163244][ T7240] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.215820][ T7240] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.224976][ T7240] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.234127][ T7240] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.243359][ T7240] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.261882][ T3384] lo speed is unknown, defaulting to 1000
[  111.267545][ T7246] netlink: 12 bytes leftover after parsing attributes in process `syz.5.962'.
[  111.267827][ T3384] syz2: Port: 1 Link DOWN
[  111.419849][ T7260] loop5: detected capacity change from 0 to 8192
[  111.481305][ T7264] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125
[  111.512922][ T7265] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  111.520622][ T7265] FAT-fs (loop5): Filesystem has been set read-only
[  111.543012][ T7260] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2075)
[  111.566049][ T7260] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2075)
[  111.593312][ T7269] loop7: detected capacity change from 0 to 2048
[  111.606583][ T3633] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2075)
[  111.784404][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.975'.
[  111.794563][ T7280] netlink: 'syz.1.974': attribute type 13 has an invalid length.
[  111.837526][ T7280] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.844853][ T7280] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.920036][ T7280] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.929124][ T7280] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.938925][ T7280] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.948333][ T7280] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.963805][ T4201] lo speed is unknown, defaulting to 1000
[  111.969983][ T4201] syz0: Port: 1 Link DOWN
[  111.970863][ T7284] netlink: 'syz.5.976': attribute type 4 has an invalid length.
[  112.011501][ T7290] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125
[  112.060687][ T7297] netlink: 'syz.5.981': attribute type 1 has an invalid length.
[  112.098668][ T7299] netlink: 'syz.5.982': attribute type 1 has an invalid length.
[  112.129654][ T7303] loop1: detected capacity change from 0 to 2048
[  112.160425][ T7301] loop2: detected capacity change from 0 to 8192
[  112.242320][ T7309] loop1: detected capacity change from 0 to 128
[  112.251715][ T7309] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  112.264929][ T7309] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.281231][   T29] audit: type=1326 audit(1752463603.413:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7308 comm="syz.1.986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79d109e929 code=0x0
[  112.355345][ T7315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.987'.
[  112.364922][ T7312] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[  112.443355][ T7317] netlink: 'syz.5.989': attribute type 4 has an invalid length.
[  112.467064][ T7319] netlink: 'syz.2.988': attribute type 13 has an invalid length.
[  112.477548][ T7319] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.486553][ T7319] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.495584][ T7319] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.504629][ T7319] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.538804][ T7323] loop2: detected capacity change from 0 to 1024
[  112.546148][ T7323] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  112.557186][ T7323] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  112.568098][ T7323] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  112.579242][ T7323] EXT4-fs (loop2): invalid journal inode
[  112.588540][ T7323] EXT4-fs (loop2): can't get journal size
[  112.594954][ T7323] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #3: comm syz.2.991: blocks 2-2 from inode overlap system zone
[  112.619057][ T7323] EXT4-fs (loop2): failed to initialize system zone (-117)
[  112.626686][ T7323] EXT4-fs (loop2): mount failed
[  112.650757][   T29] audit: type=1326 audit(1752463603.783:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.2.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[  112.674244][   T29] audit: type=1326 audit(1752463603.783:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.2.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[  112.697880][   T29] audit: type=1326 audit(1752463603.783:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.2.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[  112.721749][   T29] audit: type=1326 audit(1752463603.783:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.2.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[  112.747693][   T29] audit: type=1326 audit(1752463603.783:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.2.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[  112.771324][   T29] audit: type=1326 audit(1752463603.783:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.2.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a1e38e929 code=0x7ffc0000
[  112.839141][ T7336] loop5: detected capacity change from 0 to 2048
[  112.945449][ T7341] 9pnet_fd: Insufficient options for proto=fd
[  113.024193][ T7347] loop2: detected capacity change from 0 to 8192
[  113.193390][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  113.284496][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1005'.
[  113.307446][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1005'.
[  113.550259][ T7369] loop1: detected capacity change from 0 to 1024
[  113.579247][ T7369] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  113.590336][ T7369] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  113.633687][ T7369] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  113.664802][ T7369] EXT4-fs (loop1): invalid journal inode
[  113.687525][ T7369] EXT4-fs (loop1): can't get journal size
[  113.696929][ T7376] xt_CT: No such helper "pptp"
[  113.739185][ T7369] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.1010: blocks 2-2 from inode overlap system zone
[  113.812168][ T7381] netlink: 'syz.7.1012': attribute type 1 has an invalid length.
[  113.826541][ T7369] EXT4-fs (loop1): failed to initialize system zone (-117)
[  113.874102][ T7369] EXT4-fs (loop1): mount failed
[  113.898834][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1015'.
[  114.000770][ T7396] FAULT_INJECTION: forcing a failure.
[  114.000770][ T7396] name failslab, interval 1, probability 0, space 0, times 0
[  114.013545][ T7396] CPU: 0 UID: 0 PID: 7396 Comm: syz.7.1018 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[  114.013578][ T7396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  114.013590][ T7396] Call Trace:
[  114.013598][ T7396]  <TASK>
[  114.013614][ T7396]  __dump_stack+0x1d/0x30
[  114.013639][ T7396]  dump_stack_lvl+0xe8/0x140
[  114.013663][ T7396]  dump_stack+0x15/0x1b
[  114.013725][ T7396]  should_fail_ex+0x265/0x280
[  114.013762][ T7396]  ? _request_firmware+0x1a3/0xbb0
[  114.013831][ T7396]  should_failslab+0x8c/0xb0
[  114.013852][ T7396]  __kmalloc_cache_noprof+0x4c/0x320
[  114.013962][ T7396]  _request_firmware+0x1a3/0xbb0
[  114.013995][ T7396]  ? __rcu_read_unlock+0x4f/0x70
[  114.014085][ T7396]  ? avc_has_perm_noaudit+0x1b1/0x200
[  114.014126][ T7396]  ? __rcu_read_unlock+0x4f/0x70
[  114.014200][ T7396]  request_firmware+0x36/0x50
[  114.014232][ T7396]  devlink_compat_flash_update+0xb2/0x1b0
[  114.014260][ T7396]  dev_ethtool+0x148b/0x1650
[  114.014317][ T7396]  ? full_name_hash+0x92/0xe0
[  114.014347][ T7396]  dev_ioctl+0x2e0/0x960
[  114.014367][ T7396]  sock_do_ioctl+0x197/0x220
[  114.014499][ T7396]  sock_ioctl+0x41b/0x610
[  114.014544][ T7396]  ? __pfx_sock_ioctl+0x10/0x10
[  114.014563][ T7396]  __se_sys_ioctl+0xcb/0x140
[  114.014600][ T7396]  __x64_sys_ioctl+0x43/0x50
[  114.014660][ T7396]  x64_sys_call+0x19a8/0x2fb0
[  114.014687][ T7396]  do_syscall_64+0xd2/0x200
[  114.014704][ T7396]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  114.014729][ T7396]  ? clear_bhb_loop+0x40/0x90
[  114.014787][ T7396]  ? clear_bhb_loop+0x40/0x90
[  114.014807][ T7396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.014829][ T7396] RIP: 0033:0x7fd4114ee929
[  114.014845][ T7396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.014903][ T7396] RSP: 002b:00007fd40fb57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  114.014926][ T7396] RAX: ffffffffffffffda RBX: 00007fd411715fa0 RCX: 00007fd4114ee929
[  114.014940][ T7396] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000003
[  114.014951][ T7396] RBP: 00007fd40fb57090 R08: 0000000000000000 R09: 0000000000000000
[  114.014963][ T7396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  114.014974][ T7396] R13: 0000000000000000 R14: 00007fd411715fa0 R15: 00007ffc26e58148
[  114.015027][ T7396]  </TASK>
[  114.015041][ T7396] netdevsim netdevsim7: _request_firmware_prepare: kmalloc(struct firmware) failed
[  114.554126][ T7413] netlink: 'syz.0.1024': attribute type 1 has an invalid length.
[  115.241263][ T7424] syzkaller0: entered promiscuous mode
[  115.246875][ T7424] syzkaller0: entered allmulticast mode
[  115.324809][ T7427] FAULT_INJECTION: forcing a failure.
[  115.324809][ T7427] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  115.337958][ T7427] CPU: 0 UID: 0 PID: 7427 Comm: syz.7.1028 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[  115.337989][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  115.338004][ T7427] Call Trace:
[  115.338042][ T7427]  <TASK>
[  115.338052][ T7427]  __dump_stack+0x1d/0x30
[  115.338077][ T7427]  dump_stack_lvl+0xe8/0x140
[  115.338102][ T7427]  dump_stack+0x15/0x1b
[  115.338121][ T7427]  should_fail_ex+0x265/0x280
[  115.338150][ T7427]  should_fail+0xb/0x20
[  115.338182][ T7427]  should_fail_usercopy+0x1a/0x20
[  115.338261][ T7427]  _copy_to_user+0x20/0xa0
[  115.338280][ T7427]  simple_read_from_buffer+0xb5/0x130
[  115.338311][ T7427]  proc_fail_nth_read+0x100/0x140
[  115.338404][ T7427]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  115.338443][ T7427]  vfs_read+0x19d/0x6f0
[  115.338471][ T7427]  ? __rcu_read_unlock+0x4f/0x70
[  115.338564][ T7427]  ? __fget_files+0x184/0x1c0
[  115.338589][ T7427]  ksys_read+0xda/0x1a0
[  115.338683][ T7427]  __x64_sys_read+0x40/0x50
[  115.338768][ T7427]  x64_sys_call+0x2d77/0x2fb0
[  115.338794][ T7427]  do_syscall_64+0xd2/0x200
[  115.338816][ T7427]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  115.338843][ T7427]  ? clear_bhb_loop+0x40/0x90
[  115.338886][ T7427]  ? clear_bhb_loop+0x40/0x90
[  115.338907][ T7427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.338933][ T7427] RIP: 0033:0x7fd4114ed33c
[  115.338950][ T7427] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  115.339034][ T7427] RSP: 002b:00007fd40fb57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  115.339058][ T7427] RAX: ffffffffffffffda RBX: 00007fd411715fa0 RCX: 00007fd4114ed33c
[  115.339073][ T7427] RDX: 000000000000000f RSI: 00007fd40fb570a0 RDI: 0000000000000007
[  115.339089][ T7427] RBP: 00007fd40fb57090 R08: 0000000000000000 R09: 0000000000000000
[  115.339104][ T7427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  115.339119][ T7427] R13: 0000000000000000 R14: 00007fd411715fa0 R15: 00007ffc26e58148
[  115.339143][ T7427]  </TASK>
[  115.343584][   T29] kauditd_printk_skb: 49 callbacks suppressed
[  115.343688][   T29] audit: type=1326 audit(1752463606.473:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7426 comm="syz.7.1028" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4114ee929 code=0x0
[  115.771424][ T7435] netlink: 'syz.2.1031': attribute type 1 has an invalid length.
[  115.791584][   T29] audit: type=1400 audit(1752463606.923:2209): avc:  denied  { relabelfrom } for  pid=7434 comm="syz.2.1031" name="" dev="pipefs" ino=16751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  115.821314][ T7439] loop2: detected capacity change from 0 to 512
[  115.860485][ T7439] journal_path: Lookup failure for './file0/../file0'
[  115.867387][ T7439] EXT4-fs: error: could not find journal device path
[  115.881446][   T29] audit: type=1326 audit(1752463607.013:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d109e929 code=0x7ffc0000
[  115.905013][   T29] audit: type=1326 audit(1752463607.013:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f79d109e929 code=0x7ffc0000
[  115.928598][   T29] audit: type=1326 audit(1752463607.013:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d109e929 code=0x7ffc0000
[  115.952167][   T29] audit: type=1326 audit(1752463607.013:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f79d109e929 code=0x7ffc0000
[  115.975454][   T29] audit: type=1326 audit(1752463607.013:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d109e929 code=0x7ffc0000
[  115.999063][   T29] audit: type=1326 audit(1752463607.013:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f79d109e929 code=0x7ffc0000
[  116.022863][   T29] audit: type=1326 audit(1752463607.013:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d109e929 code=0x7ffc0000
[  116.046358][   T29] audit: type=1326 audit(1752463607.013:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f79d109e929 code=0x7ffc0000
[  116.075084][ T7442] syzkaller0: entered promiscuous mode
[  116.080665][ T7442] syzkaller0: entered allmulticast mode
[  116.469334][ T7481] netlink: 'syz.1.1049': attribute type 4 has an invalid length.
[  116.654475][ T7487] syzkaller0: entered promiscuous mode
[  116.660079][ T7487] syzkaller0: entered allmulticast mode
[  116.808330][ T7495] loop1: detected capacity change from 0 to 128
[  117.250151][ T7508] __nla_validate_parse: 2 callbacks suppressed
[  117.250203][ T7508] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1058'.
[  117.630982][ T7495] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  117.644130][ T7495] ext4 filesystem being mounted at /271/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  117.677931][ T7495] lo speed is unknown, defaulting to 1000
[  117.684588][ T7495] lo speed is unknown, defaulting to 1000
[  118.307038][ T7522] netlink: 'syz.5.1062': attribute type 4 has an invalid length.
[  118.582976][ T7529] syzkaller0: entered promiscuous mode
[  118.588632][ T7529] syzkaller0: entered allmulticast mode
[  118.598125][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  118.664421][ T2996] ==================================================================
[  118.672575][ T2996] BUG: KCSAN: data-race in block_uevent / inc_diskseq
[  118.679379][ T2996] 
[  118.681829][ T2996] write to 0xffff8881022fae18 of 8 bytes by task 3312 on cpu 1:
[  118.689518][ T2996]  inc_diskseq+0x2d/0x40
[  118.693794][ T2996]  disk_force_media_change+0x9e/0xe0
[  118.699121][ T2996]  lo_release+0x2cb/0x400
[  118.703484][ T2996]  bdev_release+0x370/0x3d0
[  118.708022][ T2996]  blkdev_release+0x15/0x20
[  118.712562][ T2996]  __fput+0x29b/0x650
[  118.716686][ T2996]  fput_close_sync+0x6e/0x120
[  118.721401][ T2996]  __x64_sys_close+0x56/0xf0
[  118.726029][ T2996]  x64_sys_call+0x2747/0x2fb0
[  118.730737][ T2996]  do_syscall_64+0xd2/0x200
[  118.735282][ T2996]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.741204][ T2996] 
[  118.743557][ T2996] read to 0xffff8881022fae18 of 8 bytes by task 2996 on cpu 0:
[  118.751123][ T2996]  block_uevent+0x31/0x50
[  118.755490][ T2996]  dev_uevent+0x349/0x3d0
[  118.759860][ T2996]  uevent_show+0x117/0x200
[  118.764309][ T2996]  dev_attr_show+0x3c/0xa0
[  118.768758][ T2996]  sysfs_kf_seq_show+0x1a0/0x280
[  118.773724][ T2996]  kernfs_seq_show+0x7f/0xa0
[  118.778360][ T2996]  seq_read_iter+0x316/0x940
[  118.782969][ T2996]  kernfs_fop_read_iter+0xc4/0x300
[  118.788106][ T2996]  vfs_read+0x5ca/0x6f0
[  118.792322][ T2996]  ksys_read+0xda/0x1a0
[  118.796588][ T2996]  __x64_sys_read+0x40/0x50
[  118.801115][ T2996]  x64_sys_call+0x2d77/0x2fb0
[  118.805806][ T2996]  do_syscall_64+0xd2/0x200
[  118.810337][ T2996]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.816245][ T2996] 
[  118.818580][ T2996] value changed: 0x000000000000015b -> 0x000000000000015c
[  118.825693][ T2996] 
[  118.828040][ T2996] Reported by Kernel Concurrency Sanitizer on:
[  118.834330][ T2996] CPU: 0 UID: 0 PID: 2996 Comm: udevd Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[  118.846340][ T2996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  118.856413][ T2996] ==================================================================
[  118.918733][ T7430] syz.0.1029 (7430) used greatest stack depth: 7000 bytes left
[  119.573570][ T7538] syz.1.1066 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  119.587739][ T7538] CPU: 0 UID: 0 PID: 7538 Comm: syz.1.1066 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[  119.587776][ T7538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  119.587791][ T7538] Call Trace:
[  119.587800][ T7538]  <TASK>
[  119.587842][ T7538]  __dump_stack+0x1d/0x30
[  119.587869][ T7538]  dump_stack_lvl+0xe8/0x140
[  119.587895][ T7538]  dump_stack+0x15/0x1b
[  119.587916][ T7538]  dump_header+0x81/0x220
[  119.587959][ T7538]  oom_kill_process+0x334/0x3f0
[  119.588058][ T7538]  out_of_memory+0x979/0xb80
[  119.588095][ T7538]  try_charge_memcg+0x5e6/0x9e0
[  119.588191][ T7538]  obj_cgroup_charge_pages+0xa6/0x150
[  119.588226][ T7538]  __memcg_kmem_charge_page+0x9f/0x170
[  119.588266][ T7538]  __alloc_frozen_pages_noprof+0x188/0x360
[  119.588310][ T7538]  alloc_pages_mpol+0xb3/0x250
[  119.588425][ T7538]  alloc_pages_noprof+0x90/0x130
[  119.588469][ T7538]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  119.588620][ T7538]  __kvmalloc_node_noprof+0x30f/0x4e0
[  119.588673][ T7538]  ? ip_set_alloc+0x1f/0x30
[  119.588790][ T7538]  ? ip_set_alloc+0x1f/0x30
[  119.588826][ T7538]  ? __kmalloc_cache_noprof+0x189/0x320
[  119.588905][ T7538]  ip_set_alloc+0x1f/0x30
[  119.588943][ T7538]  hash_netiface_create+0x282/0x740
[  119.588985][ T7538]  ? __pfx_hash_netiface_create+0x10/0x10
[  119.589027][ T7538]  ip_set_create+0x3c9/0x960
[  119.589136][ T7538]  ? __nla_parse+0x40/0x60
[  119.589170][ T7538]  nfnetlink_rcv_msg+0x4c3/0x590
[  119.589216][ T7538]  ? selinux_capable+0x1f9/0x270
[  119.589360][ T7538]  netlink_rcv_skb+0x120/0x220
[  119.589436][ T7538]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  119.589478][ T7538]  nfnetlink_rcv+0x16b/0x1690
[  119.589511][ T7538]  ? css_rstat_updated+0xcd/0x5b0
[  119.589544][ T7538]  ? page_counter_charge+0x207/0x230
[  119.589576][ T7538]  ? __rcu_read_unlock+0x4f/0x70
[  119.589684][ T7538]  ? obj_cgroup_charge_pages+0xf7/0x150
[  119.589722][ T7538]  ? __rcu_read_unlock+0x4f/0x70
[  119.589750][ T7538]  ? __memcg_kmem_charge_page+0xd1/0x170
[  119.589792][ T7538]  ? mas_next_slot+0x69b/0x6f0
[  119.589885][ T7538]  ? __rcu_read_unlock+0x4f/0x70
[  119.589973][ T7538]  ? cmp_ex_search+0x25/0x40
[  119.589992][ T7538]  ? should_fail_ex+0x30/0x280
[  119.590020][ T7538]  ? selinux_nlmsg_lookup+0x99/0x890
[  119.590055][ T7538]  ? selinux_netlink_send+0x59f/0x5f0
[  119.590095][ T7538]  ? __rcu_read_unlock+0x34/0x70
[  119.590116][ T7538]  ? __netlink_lookup+0x266/0x2a0
[  119.590141][ T7538]  netlink_unicast+0x5a5/0x680
[  119.590207][ T7538]  netlink_sendmsg+0x58b/0x6b0
[  119.590230][ T7538]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.590248][ T7538]  __sock_sendmsg+0x145/0x180
[  119.590272][ T7538]  ____sys_sendmsg+0x31e/0x4e0
[  119.590417][ T7538]  ___sys_sendmsg+0x17b/0x1d0
[  119.590478][ T7538]  __x64_sys_sendmsg+0xd4/0x160
[  119.590609][ T7538]  x64_sys_call+0x2999/0x2fb0
[  119.590634][ T7538]  do_syscall_64+0xd2/0x200
[  119.590733][ T7538]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  119.590758][ T7538]  ? clear_bhb_loop+0x40/0x90
[  119.590842][ T7538]  ? clear_bhb_loop+0x40/0x90
[  119.590864][ T7538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.590884][ T7538] RIP: 0033:0x7f79d109e929
[  119.590900][ T7538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.590973][ T7538] RSP: 002b:00007f79cf707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  119.590999][ T7538] RAX: ffffffffffffffda RBX: 00007f79d12c5fa0 RCX: 00007f79d109e929
[  119.591015][ T7538] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000b
[  119.591028][ T7538] RBP: 00007f79d1120b39 R08: 0000000000000000 R09: 0000000000000000
[  119.591040][ T7538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.591126][ T7538] R13: 0000000000000000 R14: 00007f79d12c5fa0 R15: 00007fff0a049368
[  119.591151][ T7538]  </TASK>
[  119.591160][ T7538] memory: usage 307200kB, limit 307200kB, failcnt 212
[  119.973150][ T7538] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0
[  119.981076][ T7538] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0
[  119.988467][ T7538] Memory cgroup stats for /syz1:
[  119.988797][ T7538] cache 0
[  119.996725][ T7538] rss 0
[  119.999532][ T7538] shmem 0
[  120.002503][ T7538] mapped_file 0
[  120.005996][ T7538] dirty 0
[  120.008999][ T7538] writeback 0
[  120.012303][ T7538] workingset_refault_anon 11
[  120.017028][ T7538] workingset_refault_file 0
[  120.021582][ T7538] swap 212992
[  120.024899][ T7538] swapcached 4096
[  120.028564][ T7538] pgpgin 158259
[  120.032041][ T7538] pgpgout 158250
[  120.035586][ T7538] pgfault 133756
[  120.039217][ T7538] pgmajfault 16
[  120.042690][ T7538] inactive_anon 4096
[  120.046641][ T7538] active_anon 0
[  120.050260][ T7538] inactive_file 32768
[  120.054281][ T7538] active_file 0
[  120.057809][ T7538] unevictable 0
[  120.061286][ T7538] hierarchical_memory_limit 314572800
[  120.066702][ T7538] hierarchical_memsw_limit 9223372036854771712
[  120.072931][ T7538] total_cache 0
[  120.076435][ T7538] total_rss 0
[  120.079790][ T7538] total_shmem 0
[  120.083411][ T7538] total_mapped_file 0
[  120.087409][ T7538] total_dirty 0
[  120.090928][ T7538] total_writeback 0
[  120.094811][ T7538] total_workingset_refault_anon 11
[  120.099996][ T7538] total_workingset_refault_file 0
[  120.105047][ T7538] total_swap 212992
[  120.108908][ T7538] total_swapcached 4096
[  120.113289][ T7538] total_pgpgin 158259
[  120.117325][ T7538] total_pgpgout 158250
[  120.121445][ T7538] total_pgfault 133756
[  120.125539][ T7538] total_pgmajfault 16
[  120.129569][ T7538] total_inactive_anon 4096
[  120.134020][ T7538] total_active_anon 0
[  120.138266][ T7538] total_inactive_file 32768
[  120.142876][ T7538] total_active_file 0
[  120.146881][ T7538] total_unevictable 0
[  120.150999][ T7538] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1066,pid=7537,uid=0
[  120.165744][ T7538] Memory cgroup out of memory: Killed process 7537 (syz.1.1066) total-vm:93756kB, anon-rss:1068kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000