last executing test programs:

22.901532983s ago: executing program 2 (id=369):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kfree\x00', r2, 0x0, 0x8}, 0x18)
r3 = open(&(0x7f0000000200)='./bus\x00', 0x1050c1, 0x1d6)
unshare(0x2040400)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
fgetxattr(r3, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0)
connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003680)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x40000002, 0x0)
socketpair(0x9, 0x3, 0xb, &(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="5953fdff0800000090000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007200000010001d800c00008008000d8004000180"], 0x38}}, 0x0)
r10 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=<r11=>0x0, &(0x7f0000000100)=<r12=>0x0)
syz_io_uring_submit(r11, r12, &(0x7f00000009c0)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1})
io_uring_enter(r10, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76)
sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="5d81e346fb67b82545f569c5d971099f1f314896ae6e468084b104eb56ae6a627364a6a1fb2a8d7ed7e85dcc73599e92c635687df8009f3e4da028b6ffffffffffffffff795b82cd685c4c5b3ff423f6171e20c5c60a28de1afaddc1d614e7a11f5ac402e127e18cbddc9fc40ef89d0941d0518f3b85b4b895a68c0b6a3d19fe7ef12e00b05fc37a2307c61f3e715ea48617de63e3fff48f4cac42a8f6721f076bc894de228fa8d17fcd2040f2fd65720ebacc49f45abffb52e3184033e5ba4e8b509d2a9ac1fe5fec61077689699a4402b7109cb55a", @ANYRES16=r8, @ANYBLOB="000125bd7000fedbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x6008000)
sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1}}], 0x1, 0x24048084)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)

22.035013206s ago: executing program 2 (id=382):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)

21.981816577s ago: executing program 2 (id=384):
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) (async)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}, {&(0x7f0000000040)='\\', 0x1}], 0x2) (async)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000000)={[{@errors_remount}, {@noload}, {@nobarrier}]}, 0x4, 0x56d, &(0x7f0000000c00)="$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") (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) (async)
r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x40, r9, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x81}]}, 0x40}}, 0x20) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
close(r11) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0x1}, 0x50) (async)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r12, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r13}, 0x10) (async)
open_by_handle_at(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="566a8c98fc08000900000000000b0100"], 0x0)

21.900869198s ago: executing program 2 (id=386):
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r0, 0x20, &(0x7f00000004c0)={&(0x7f0000000900)=""/169, 0xa9, <r1=>0x0, &(0x7f0000000740)=""/107, 0x6b}}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x1d, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x0)
getdents64(r5, 0xfffffffffffffffe, 0x29)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000400000002000000000000000000000015", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000ffffff0000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, @perf_config_ext={0x5, 0x9}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$getregset(0x4204, r8, 0x202, &(0x7f0000000180)={0x0})
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x8600, 0x0)
gettid()
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000ac0)={0x0, 0x6}, &(0x7f0000000e00)=0x8)
sendmsg$inet_sctp(r9, &(0x7f0000000ec0)={&(0x7f0000000d40)=@in6={0xa, 0x4e24, 0x7f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000001a40)=[{&(0x7f0000000400)="7a8f3ed849a096aca3307e2543a0dadc89b7a220f4cad4ae8ecd9ac71080edeb698ff021a531b206a4695aabe841fca774177706445ede1280af78f53f8ee97003b99ca352ef13ca619bbb31b5284d927ee7f25271344f775344dee6b4d80db8cff7e7c5637f94a28efcc0435aa9af95bc4db1dc0ed1a595fece889b6c72df3f209ed22ebfe121bb43a51665f40ff04352284909d0246f3deca579e9cc26da994322956752859001a50bff32e12468bc1b42f5237a1a3925d52fa0e2a5", 0xbd}, {&(0x7f00000004c0)}, {&(0x7f0000000300)="e420f498ea39bcca26d2359b3154ed3af445df56090000005f3898b569f73fa50e5623eea1010000", 0x28}, {&(0x7f0000000580)="ad01f9d3abc7e5718642b3ff625dc32aecf4615e62bbb7f56698d4a87fd23afde6d06dc69e1a40265cbec303623eaa8f916a609497cf6fd1c85379ef1e936e82ca644fdf111647965f59960c8ba45335c544d7077bb75f2e63eae131b52608", 0x5f}, {&(0x7f0000000600)="1fcfd0dd9967ed", 0x7}, {&(0x7f0000000680)="0d55110e8187b461bba483a74650a5e232db11eee8209a6d5f900ab8025bc1e31809a913682f65aeec2b7e5dd074d13d087fe6fdbbdf865d81a2c8b64517c0f632ccf293e0c0243315cf91c8e7e4dacf972a88cdefa17f34bd755d9fc9f4a8877dcd202c5406dda52c56944b15d0a2775f97c0f898c3dab24d7fa8f76d1e438a054d683e8c018b06f6b536bfbe13210e1003af04fa2b6d8a26273e443796399603030524b50da6aabfc0bec84498", 0xae}, {&(0x7f0000000fc0)="5e4ac750e62fe3f825076375ed19c724f143136fed98116e3db7a23ecfa214b2e2924073bc3e046920788e73c76ad4483a5c497e47a090bad951f3856d3d46b5855f029dfae13923fab868a56dc44fb84ae65566dd8e578be2c2fe2230ad3dd1c06a77ccfc16f33904441a53ea802407757cecca72d73c8e545ade6690295caa288996fed1be56cf915c306374dd2ce9f1c0e3a530f6fe64c601a6c8c5c738eb725adb03e379c1d667bea592497f96014c52d65f6e8872862eaaad161d38866d31a52de524fdc56b90d628eda3cc62bab9406f8d55118c8e5b514e8c6beccc2671bf487dada05e34b697587a02b937740513a0474d53", 0xf6}, {&(0x7f0000001b80)="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"/443, 0x1bb}, {&(0x7f0000000bc0)="08a2e0b62dc67e7f3c55d15061fdd30241c781102cf19715a22babb880a0fc7ee69b9e5c92a55d5b1e6b610269fbd01b775e1e76a4af6aad5fccd5210712081903d42db567c937090095ff880b05a1ebed35104c5d835467f195920ce472f14f17f121da0d17688f6f094262fdef40013226e2526afc3d650c19423a346506b6babfe5126a296f47ee5ffbe6f10ebcc4b82031f9ce3b374ad4d8a122d914bf75", 0xa0}, {&(0x7f0000000c80)="0cc1a4c871277543523a5f00fa49bc10fc34c697662dde945edd3946397f791c8ba99efc511f35d24695f8744dd879ab7e39aa7562ef755d3326eeff05adce376a3c5e6f4d3d3335ab791aad43e01ca1a27c4c1a521a7aeacbc7a2855c2c4512165930fedb5c2d854e91f4f409838263b61deb6c11c8bbebd29db4d33271c93a083fd79fae33dab219ea26cee1a2e4600aec69ce4affebcd1cbcaa6b5d7088ebadd2f6fdf7194b98fc93c7", 0xab}, {&(0x7f0000000880)="e13f1cb025", 0x5}, {&(0x7f0000000e40)="6eea5cab83438e0678252bf72e7a2f0220ee78adf345bb2b37fadee6a25bf7603b59c31d1979c42497ac23c39bb4aef765ea8cf033e41fd35fae87eb34efeb7431212cfd703fe0b16f7cfc9c2c019cda344be85fc4e2c3e2cc15344282a89a215e1edd57bb6a75fa4c02632cb10e93", 0x6f}, {&(0x7f0000000f40)="3cf973a74c2baaaaddb9a74f78397c94e008dd980b9f5dfe745cb5abe215729d4adca0691e73726c2815da3f35a2589585ff41d46196afe84013e1", 0x3b}, {&(0x7f0000001740)="3be5b6fab2100e756a30b1943054f3446426671ed1b62f6585473f592c0218ba71a5823b935e09d0d180963e64fd5d6aa0e4922cebc46d983ac0796b611a0d21c24337099980bdedb522b72eae5620ccd6941ee5528ad06c2ebd2128582f53b998d0fdd12da63b28cb37062005be31186e0d303af6c54c1095075bb9c0f71e86176044501fcb82e274bde1d3db8dd0fe7af475825a176bc402f484822dafebea17", 0xa1}, {&(0x7f0000001800)="f72f991e55c9d81ac8a44bb3374d26ba860932a57c9157e9d410e97cb7e4035f9b9333e512af3d4e4186e640ee7100d636279c0de757ca4694f075fc92b7fa4e1ea645e26ff13a07af0c79dacdd564cf7f3be50f53307df099af64852bcdd3014a8cd3c68fa1b68aa9e4fc38875e52d992ddcee14b93c27b38921bfed06c4c8f31f558eec9b0ba83405624d7f510a30dce352ca5f47191b7d5e11a5f2d298e3bd9113f323450ea77e1751530ed085d7921974974c2b164055955ab6139f5e2e225d01ce4ebd3c3464befecffeca889c21297a77816d1e1378bb21ba48ce25007325c6964380b38b3363eb6156b608caf2fa4d16724", 0xf5}, {&(0x7f0000001e00)="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", 0x153}, {&(0x7f0000001a00)="b4995536a22c2b2def4864a95da56fe31d201b", 0x13}], 0x11, &(0x7f0000000f00)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="20000000000000008400000002000000040001000800000081000000", @ANYRES8=r3], 0x80, 0x14}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

21.712806071s ago: executing program 2 (id=390):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100060808004149014006040800", 0x58}], 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r1, 0x5)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)={0x1780, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_USERDATA={0x25, 0x7, 0x1, 0x0, "dd3d387016800df26ec45a0658b8f9c2272bb3629f92258900a9f28ed5866a51fc"}, @NFTA_RULE_EXPRESSIONS={0x1744, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}]}}}, {0x1720, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1710, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_BITWISE_MASK={0x2c0, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xc9, 0x1, "5b9c3ae854de761ec18f0ae8a3b59e9b3ef90e672666454c1a9c241e0110bb7a25d9533985540b029b2bd0aeaf8a7cfd8fa14ecfce353b325f65f733ccc871a100f641bf57483b416d342d829734b9b5c9ad23a1d247c49630061547febef88d2bb129af53ef27b0cbc0931131cfd12a695c6b11e6e634ccc2a5cb15c89ccf478ea9ed621e883118e57e74be5c4bdb76dcc0b1f4cf13cd8693522d7940c0067f274386eda14d45a1825b342de6a16bd8758a8db2c728c03f95bda79a7197011051e6f55e60"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xe, 0x1, "c565832056e404383be8"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x9a, 0x1, "3965e69fd5584aa18b62bdadea48be48e14c02da15c2fceb59d990f2c5e3b69851e4f642e931a095173b57b2daef9db437d782e394431904d59b9d37f6d246fd3d381eb4890eef25bc34918f014dd9cc1f16858cae91b8a337dfd73b6f92ea43fce2e8e161aba787b447cd7482944a2bb7bb3a016eca1ea18e87fff97ce63264932046a043e9acf71c949a476260ee58f7b94f8a49aa"}]}, @NFTA_BITWISE_DATA={0x11b0, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd9, 0x1, "2cf42af12dc082363ddd4d82e9a53f557639157298484d43b6e9ffa24835dbcff416adfbb0cbb6eb32a8ba881282f8f2c5f7ff5f7ecb6a545e284f16dadac0ea584033342ec1ef323dcb3905fd8ddc5f61eaf25b073d2a88ff409704e46d5790f185e3a4a8ebb83754f7e0de6264a50f7925ed1ffc9bd18f2db0024f6da3f275c8ed6eb28b4d8a9d200251325aa05d32c27bf8523a1896f477656c878df91da19759f7c39791e3251362557914c83a9e65e88e86601e1d1fe159702c0de3a4c077f7b30bbcae5ac31324ad009a1f7433e61220c0cf"}, @NFTA_DATA_VALUE={0x9b, 0x1, "8936222f1fc4c913c9754eac15b0bbacef8f024380719de393cf1a13c55d5c12efca57f20981a0d8152b799c9aee8d5d8dea43a40446f18af6db0f1da43444d911d1792cf9031ea897d93f7b6ec6150da1fcf3b36dd09cc060e56639ebed48ef0bbceb3b37c2947cca4fe437c1c86a0ec84a01572a994cde5368943097438c54794d1f364d04328244688b9ccb4b5f1c98b331ca398438"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_BITWISE_XOR={0x28c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd8, 0x1, "85f882b7b75a4275fcf24f05fb65a37e1692c13c53709b85a850d4b8f5c0205c63b89d9d37448c965b32664f8dc0f63dbb34f4509b27067792fd0706b4545e9911111ab4c626395aa9d86cce1503e5cb41f4aaa184053e9e0e7d7fa9c1da0faae4e728bfd7e32a22067106e03dec715c5e1454087923deb042834fb4848039e4ee06b18fff769a61e237f1c898c5b313c4c00c702ae16051ae456ac51d473f43d66c63157103583380e8e703fd6a29b2566c369df72608ac8b71525ff4878adbf5262c815445bbd6ecb98e56a41e548353e13eda"}, @NFTA_DATA_VALUE={0xaf, 0x1, "53997b90b1a20b4ed210b095974f516bac69ff19cb311b4c1267a248900780571939432034897566f772f284a4a133aa1b7cbd457d18b9b583a1ab1741eecf94b5ef37cd3e722f18a5ccb4fcaaf6d755de5e8412add7b652aff24d464de670ab00b244c4ab6083d173a03c35702fbeb70ccccc3588066e838a268747359c7c0a78950b11cfb98ac5fc1ec02e77b4ca9535de065024e1011c4ea0250ac9c8d76018e344d9f982a1a529c289"}, @NFTA_DATA_VALUE={0xb1, 0x1, "0df0789781406718d9a325b3fd305ecae92247688f31fbe485fef7d3696c1c621766cdf7d79b4dc31531c9dfc25e51f3d8e2dcd1bb64abb6bf1d042d3660c3896d6b3fb04789f937a0938a7e80435b11ed7071ff975fcc6915edcfb2ed97e25248563552ed3aaa164ded09b3c4241e96036b5345f49be297e587a6ac2555921e05caa98f299d9e03486e9d7700d56e8f9ec80320d61cfd6ec1fa4ea848f7decf2c81b8bab3b1c8cf0be4646270"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}, 0x1780}, 0x1, 0x0, 0x0, 0x800}, 0x400)
dup3(r2, r1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x2}, @timestamp, @timestamp, @window={0x3, 0x1, 0x1}, @window={0x3, 0x5, 0x9}, @mss={0x2, 0x530}, @sack_perm, @timestamp, @sack_perm], 0x9)

21.468769165s ago: executing program 2 (id=397):
r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}]}}]}, 0xa4}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x1b, &(0x7f0000000300)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffb}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xe}, @alu={0x4, 0x1, 0x2, 0x3, 0xa, 0xffffffffffffff50}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe55d}], &(0x7f0000000000)='GPL\x00', 0x9000, 0x1c, &(0x7f0000000080)=""/28, 0x41000, 0x40, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x2, 0x7, 0xffff6fd1}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000240), &(0x7f0000000400)=[{0x5, 0x5, 0xf, 0xa}, {0x3, 0x1, 0xe, 0x3}, {0x5, 0x1, 0x4, 0x8}, {0x5, 0x3, 0xb, 0x2}, {0x5, 0x2, 0xa, 0x9}, {0x5, 0x3, 0x3, 0xc}, {0x1, 0x2, 0x10, 0x5}, {0x3, 0x1, 0x4, 0xa}, {0x0, 0x2, 0xf, 0x8}, {0x1, 0x4, 0x2, 0x1}], 0x10, 0x7f}, 0x94)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
r6 = request_key(&(0x7f0000000240)='blacklist\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000580)='/dev/autofs\x00', 0xfffffffffffffff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1b)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10)
recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40010122, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
setgroups(0x0, 0x0)
r8 = socket(0x2, 0x80805, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r9, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={<r10=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={<r11=>r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r8, &(0x7f0000004e80)=[{&(0x7f00000001c0)=@in6={0xa, 0x4e20, 0xfffffffc, @remote, 0x6}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000240)="37ad", 0x2}], 0x1, &(0x7f0000000740)=[@sndrcv={0x30, 0x84, 0x1, {0x3, 0x5, 0x2, 0x200, 0x3, 0xa1, 0x80, 0x3fe1, r11}}], 0x30, 0x810}], 0x1, 0x0)
r12 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$link(0x8, r6, r12)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

21.442202595s ago: executing program 32 (id=397):
r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}]}}]}, 0xa4}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x1b, &(0x7f0000000300)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffb}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xe}, @alu={0x4, 0x1, 0x2, 0x3, 0xa, 0xffffffffffffff50}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe55d}], &(0x7f0000000000)='GPL\x00', 0x9000, 0x1c, &(0x7f0000000080)=""/28, 0x41000, 0x40, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x2, 0x7, 0xffff6fd1}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000240), &(0x7f0000000400)=[{0x5, 0x5, 0xf, 0xa}, {0x3, 0x1, 0xe, 0x3}, {0x5, 0x1, 0x4, 0x8}, {0x5, 0x3, 0xb, 0x2}, {0x5, 0x2, 0xa, 0x9}, {0x5, 0x3, 0x3, 0xc}, {0x1, 0x2, 0x10, 0x5}, {0x3, 0x1, 0x4, 0xa}, {0x0, 0x2, 0xf, 0x8}, {0x1, 0x4, 0x2, 0x1}], 0x10, 0x7f}, 0x94)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
r6 = request_key(&(0x7f0000000240)='blacklist\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000580)='/dev/autofs\x00', 0xfffffffffffffff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1b)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10)
recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40010122, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
setgroups(0x0, 0x0)
r8 = socket(0x2, 0x80805, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r9, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={<r10=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={<r11=>r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r8, &(0x7f0000004e80)=[{&(0x7f00000001c0)=@in6={0xa, 0x4e20, 0xfffffffc, @remote, 0x6}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000240)="37ad", 0x2}], 0x1, &(0x7f0000000740)=[@sndrcv={0x30, 0x84, 0x1, {0x3, 0x5, 0x2, 0x200, 0x3, 0xa1, 0x80, 0x3fe1, r11}}], 0x30, 0x810}], 0x1, 0x0)
r12 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$link(0x8, r6, r12)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

11.553108075s ago: executing program 4 (id=491):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
clock_settime(0x1, &(0x7f0000000200))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0x3204400, &(0x7f0000000880)=ANY=[], 0x1, 0x282, &(0x7f0000000c00)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb)
write$P9_RUNLINKAT(r4, &(0x7f00000004c0)={0xfffffffffffffe15, 0x4d, 0x6}, 0x7395a0d2)
r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14d5be, 0x21)
close(0xffffffffffffffff)
socket$inet(0xa, 0x801, 0x84)
socket$tipc(0x1e, 0x4, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
fallocate(r5, 0x1, 0x0, 0x1001f0)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x264, 0x2, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x100, 0x513, 0x5e000000, 0x401, 0x9, 0xfffffffa, 0x8]}, @CTA_TUPLE_MASTER={0x80, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x13}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_NAT_SRC={0xd0, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x36}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_PROTO={0x4}]}, @CTA_NAT_SRC={0x5c, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}]}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @CTA_TUPLE_ORIG={0x4}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x10000, 0x3, 0xfffff7b2]}]}, 0x264}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000)
pread64(r2, 0x0, 0x0, 0x6)

11.197175421s ago: executing program 4 (id=496):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0)

11.176712801s ago: executing program 4 (id=497):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000400000000600000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
r1 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x8, @empty}, 0x1c)
r2 = dup2(r1, r1)
write$tun(r2, 0x0, 0x46)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x22, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0xfffffff6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000100)=0x401)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, 0x0, 0xffff, 0xa5, &(0x7f0000000140)=""/165, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2f1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000600)='skb_copy_datagram_iovec\x00', r4}, 0x1c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'wg1\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x33, "a4c3ea051fc8f66eedf1c6676b4e9ac4711a3ee41b102a78284f8818400000fe", "c493c69907ac61ee57f3ff6656218f8c880cab0b7f5f977f29b54144914986b5", "7795433781033bb967429b7c68c2566066943f3a566d7fd05557583a535a3b9e", "cba936683f411a1265d9ffb369dbe16de72fd8ee91c60f531196c136add25f43", "3fda464b4ffcb83f5c89e20fe8814b4e26bb81519905d65c5a0ae43be09d9f7b", "9900255a099270427859ce54", 0x43dd5e67, 0x9, 0x4, 0x5, 0x9}})
syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)

10.421612372s ago: executing program 0 (id=499):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = open(&(0x7f0000000140)='./file2\x00', 0x147842, 0x184)
preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000540)={'bridge0\x00', 0x10})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r3, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, &(0x7f0000000580)='./file2\x00')
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
r4 = semget$private(0x0, 0x4000000009, 0x0)
semop(r4, &(0x7f0000000040)=[{0x4, 0x1}, {0x4}], 0x2)
semtimedop(r4, &(0x7f0000000040)=[{0x2, 0x8000, 0x1000}, {0x2, 0xf, 0x1800}], 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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")
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc)
setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r6, 0x0, 0x0, 0x1001f0)
fallocate(r6, 0x3, 0x9, 0x10000)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0xfc}}, 0x0)

10.356355273s ago: executing program 4 (id=501):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf1112f4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0x1ff, 0x8]}) (fail_nth: 4)
pipe(0x0)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
acct(0x0)

10.162606746s ago: executing program 4 (id=503):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)

10.082587947s ago: executing program 4 (id=504):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYRES64=r1, @ANYRESOCT=r4, @ANYRES8=r3, @ANYRES32=r0, @ANYRESOCT=r4, @ANYRES64=r1, @ANYRES16=r2, @ANYRESDEC=r3], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001", @ANYRES64=r2], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc000)
close_range(r3, 0xffffffffffffffff, 0x100000000000000)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r5, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x0, 0x81, 0x11}, 0x9c)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="000000feff000000b7030000000000008500865354860000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x36, 0x4, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x10000, 0xfffffffc, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000900020073797a310000000005000400000000001400078008001240000100000800114000000000050001000600f20005000500000000000d000300686173683a6d616300"], 0x5c}}, 0x4004804)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r11, 0x0, 0x48f, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000140))
ioctl$EXT4_IOC_MIGRATE(r10, 0x6609)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7}, 0x18)

10.059120088s ago: executing program 33 (id=504):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYRES64=r1, @ANYRESOCT=r4, @ANYRES8=r3, @ANYRES32=r0, @ANYRESOCT=r4, @ANYRES64=r1, @ANYRES16=r2, @ANYRESDEC=r3], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001", @ANYRES64=r2], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc000)
close_range(r3, 0xffffffffffffffff, 0x100000000000000)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r5, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x0, 0x81, 0x11}, 0x9c)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="000000feff000000b7030000000000008500865354860000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x36, 0x4, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x10000, 0xfffffffc, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000900020073797a310000000005000400000000001400078008001240000100000800114000000000050001000600f20005000500000000000d000300686173683a6d616300"], 0x5c}}, 0x4004804)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r11, 0x0, 0x48f, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000140))
ioctl$EXT4_IOC_MIGRATE(r10, 0x6609)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7}, 0x18)

9.554802405s ago: executing program 0 (id=513):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000580)="8000102ecae26878", 0x8}], 0x1, &(0x7f0000000380)=ANY=[], 0x18}}], 0x1, 0x20010080) (async)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) (async)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa5a01f3c2f13608060001080006040002aaaaaaaaaaaaac1414bbaaaaaaaaaaaeac1414bb"], 0x0) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r2 = socket(0x200000000000011, 0x2, 0x1)
bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 32)
socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32)
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000000c0), 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0\x00', <r3=>0x0})
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x154444, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0xfffffffffffff6eb, 0x7}, 0x100410, 0x1fc, 0x2, 0x4, 0x400, 0xa, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) (async)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@empty, 0x14, r3}) (async)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000004c40)={@remote, r3}, 0x14) (async, rerun: 32)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000240)={0x7, {{0xa, 0x4e24, 0x7, @empty, 0xa9a}}, {{0xa, 0x4e22, 0x800, @remote}}}, 0x108) (async, rerun: 32)
socketpair(0x1a, 0x3, 0x5, &(0x7f0000000180))

9.421123127s ago: executing program 0 (id=514):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)

9.391219438s ago: executing program 0 (id=516):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf1112f4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0x1ff, 0x8]})
pipe(0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="0000f7ff23"], 0x48)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
acct(0x0)

9.102720512s ago: executing program 0 (id=519):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10, 0x103) (async)
kexec_load(0x1, 0x0, 0x0, 0x3e0000) (async)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) (async, rerun: 64)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0) (rerun: 64)
write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15)
r1 = dup(r0)
open$dir(&(0x7f00000001c0)='./file0\x00', 0x4c8b00, 0x1) (async, rerun: 32)
syz_emit_ethernet(0x72, &(0x7f0000000f00)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x3c, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0x0, 0x6, "e68634", 0x0, 0x2f, 0x0, @private1, @local, [], "ad589e645ea437efa25f0026"}}}}}}}, 0x0) (async, rerun: 32)
write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c00)=@newtfilter={0x24, 0x2c, 0xd29, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff3}, {}, {0xc, 0xa}}}, 0x24}}, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200001, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) (async)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000040), 0x2000000, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e99bcf4f0ff000000006f3d", @ANYRES32=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

8.812796687s ago: executing program 0 (id=522):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}, 0xc104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100))
writev(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x7)
syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0x2, &(0x7f0000006680))
fchown(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000001900), 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x25, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6})
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@allocspi={0x110, 0x16, 0x1, 0x70bd27, 0x25dfdbfb, {{{@in=@multicast2, @in6=@private2, 0x4e21, 0x0, 0x4e24, 0xb, 0xa, 0x30, 0x80, 0x2f}, {@in=@broadcast, 0x4d5, 0x32}, @in6=@private2, {0x4, 0x1, 0x6, 0x51, 0x5, 0x9, 0x1de, 0xfffffffffffffffb}, {0x3a, 0x1, 0x4, 0x5}, {0x31e, 0x2, 0xc}, 0x70bd2a, 0x3504, 0xa, 0x4, 0x4, 0x1}, 0x0, 0x3}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x10}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x49}}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000100}, 0x48040)
mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x274, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c755ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8914}]}]}], {0x14}}, 0x29c}}, 0x4048010)

8.812494887s ago: executing program 34 (id=522):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}, 0xc104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100))
writev(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x7)
syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0x2, &(0x7f0000006680))
fchown(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000001900), 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x25, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6})
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@allocspi={0x110, 0x16, 0x1, 0x70bd27, 0x25dfdbfb, {{{@in=@multicast2, @in6=@private2, 0x4e21, 0x0, 0x4e24, 0xb, 0xa, 0x30, 0x80, 0x2f}, {@in=@broadcast, 0x4d5, 0x32}, @in6=@private2, {0x4, 0x1, 0x6, 0x51, 0x5, 0x9, 0x1de, 0xfffffffffffffffb}, {0x3a, 0x1, 0x4, 0x5}, {0x31e, 0x2, 0xc}, 0x70bd2a, 0x3504, 0xa, 0x4, 0x4, 0x1}, 0x0, 0x3}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x10}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x49}}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000100}, 0x48040)
mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x274, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c755ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8914}]}]}], {0x14}}, 0x29c}}, 0x4048010)

2.939958745s ago: executing program 7 (id=590):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2)
sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40)

2.62422613s ago: executing program 6 (id=598):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x6903, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa8)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x474, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x448, 0x2, [@TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2c, 0x20000000, 0x1, 0x0, 0x542, {0x2, 0x0, 0x794, 0x2, 0xfff, 0x966c}, {0x9, 0x1, 0x2, 0x2, 0x5, 0x5}, 0x7, 0x0, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x3, 0x3, 0x7, 0x4, 0x9, 0x5, 0x3, 0x3, 0xa3d5, 0x9, 0x5, 0x7, 0xc23, 0x100, 0x7, 0x5a, 0x5, 0x5, 0xffffffff, 0x8, 0x4, 0x9, 0x4000, 0xfff, 0x1, 0x7fffffff, 0x400, 0x6cf3768d, 0xf, 0x2, 0x5, 0x9, 0x6, 0x5, 0x1, 0x0, 0x2, 0x8, 0x6, 0x2, 0x8000, 0x9, 0xf3, 0x8, 0x1, 0x800, 0xa9, 0x6, 0x56c, 0x9f, 0x7, 0x4, 0x4000, 0x4, 0xfffffff7, 0xfffffff7, 0x200, 0x0, 0x5, 0x1, 0x0, 0x6, 0x9, 0xc9ed, 0xfffffffc, 0x4, 0x1000, 0x7, 0x81, 0x101, 0x7851, 0x9, 0x7, 0x4, 0x6, 0x6, 0x5, 0x4, 0x4, 0xfff00000, 0x0, 0xe, 0x7, 0xc, 0x5, 0x7fff, 0x80000001, 0x3, 0xb, 0xa966, 0x3, 0x1ff, 0x0, 0x2069, 0x8000, 0x3, 0x8, 0x7, 0x5, 0x7, 0xffff, 0x6, 0x1ff, 0x0, 0x1, 0x3, 0x9, 0x9, 0x9, 0xd3, 0x9, 0x2, 0x3, 0x6, 0x9, 0x6, 0x5, 0xfff, 0x80000000, 0x401, 0x0, 0x0, 0x10, 0x1, 0x6, 0x10, 0xc0, 0x5, 0x2, 0x8, 0x3, 0x800, 0x5, 0xdb, 0x3, 0xdb, 0x8, 0x1, 0x6, 0x9, 0x1, 0x3, 0x6, 0x1, 0x2, 0xc4b4, 0x4, 0x40, 0x401, 0xf0e2, 0x4, 0x8, 0x2, 0x2, 0x7, 0x9, 0x3, 0x2, 0x3, 0x8, 0x3, 0x1, 0x4, 0x6, 0x6, 0x6, 0x4, 0x2, 0x5, 0xdc8, 0x15fb, 0x6, 0x6, 0xffffffef, 0x3, 0x2e80, 0x1, 0x0, 0x9c1, 0x0, 0x4, 0x4, 0x2, 0x8368, 0x9, 0x3, 0xa, 0x0, 0x158, 0x5, 0x8f, 0x7fffffff, 0x6, 0x7, 0x4, 0x7fff, 0x5, 0x200, 0x96, 0x1b6, 0x0, 0x0, 0x200, 0x9839, 0x6, 0x6, 0x7, 0x7, 0x6, 0x1f7c0000, 0x5, 0xfffffffd, 0x5, 0x4, 0x8, 0x1, 0x9, 0x3, 0x237a, 0x1a, 0x5, 0x2, 0x10001, 0x10000, 0x0, 0x4, 0x92, 0x0, 0xa, 0x9, 0x21, 0x4, 0x9, 0x7911159a, 0x6, 0x2, 0x80000000, 0x6, 0x7, 0xc, 0x101, 0x7ff, 0x7, 0x8, 0xfffffff8, 0xed60, 0x2, 0x3, 0x7, 0xdbf1, 0xf3, 0x3, 0xe, 0x4]}]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x81}, 0x800)

2.596326671s ago: executing program 7 (id=600):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x80000000000}, 0x18)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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")
openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e67650000000400028009000100"], 0x108}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r5=>0x0})
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18)
sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
close(r6)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r5, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)

2.371681994s ago: executing program 6 (id=606):
r0 = getpid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10)
io_uring_setup(0x218a, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000020c0)={&(0x7f0000002100)='sched_switch\x00', r3}, 0x18)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, &(0x7f00000000c0)=0x3, 0x4)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000040), 0x4)
process_vm_readv(r0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)

2.091110208s ago: executing program 6 (id=608):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x80)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r3, &(0x7f0000000180)='./bus\x00', 0x0)
renameat2(r3, &(0x7f0000000380)='./file0\x00', r3, &(0x7f0000000200)='./bus/file0\x00', 0x0)
unlinkat(r3, &(0x7f0000000080)='./bus/file0\x00', 0x200)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
lseek(r6, 0x6, 0x1)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x3}, 0xc)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000080000400"/28], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0x0, 0x1}, 0x18208, 0x3, 0x0, 0x0, 0x1000, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
fstatfs(r8, &(0x7f0000000340)=""/132)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10)
pipe(&(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0)
io_setup(0x2, &(0x7f00000011c0)=<r12=>0x0)
io_submit(r12, 0x2000000000000326, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, r11}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r11, &(0x7f00000001c0)='m', 0xfffffdfc}])
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)

1.689614684s ago: executing program 1 (id=613):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10)
r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x242, 0x161)
write$tcp_mem(r6, &(0x7f000003eec0)={0x7fffffffffffffff, 0x20, 0x1, 0x20, 0x2}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18)
memfd_secret(0x80000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, 0x0})
io_uring_enter(r2, 0x847ba, 0x2000, 0xe, 0x0, 0x0)

1.572666877s ago: executing program 1 (id=615):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001"], 0x10}}, 0x0)

1.558606197s ago: executing program 1 (id=617):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x6903, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa8)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x474, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x448, 0x2, [@TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2c, 0x20000000, 0x1, 0x0, 0x542, {0x2, 0x0, 0x794, 0x2, 0xfff, 0x966c}, {0x9, 0x1, 0x2, 0x2, 0x5, 0x5}, 0x7, 0x0, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x3, 0x3, 0x7, 0x4, 0x9, 0x5, 0x3, 0x3, 0xa3d5, 0x9, 0x5, 0x7, 0xc23, 0x100, 0x7, 0x5a, 0x5, 0x5, 0xffffffff, 0x8, 0x4, 0x9, 0x4000, 0xfff, 0x1, 0x7fffffff, 0x400, 0x6cf3768d, 0xf, 0x2, 0x5, 0x9, 0x6, 0x5, 0x1, 0x0, 0x2, 0x8, 0x6, 0x2, 0x8000, 0x9, 0xf3, 0x8, 0x1, 0x800, 0xa9, 0x6, 0x56c, 0x9f, 0x7, 0x4, 0x4000, 0x4, 0xfffffff7, 0xfffffff7, 0x200, 0x0, 0x5, 0x1, 0x0, 0x6, 0x9, 0xc9ed, 0xfffffffc, 0x4, 0x1000, 0x7, 0x81, 0x101, 0x7851, 0x9, 0x7, 0x4, 0x6, 0x6, 0x5, 0x4, 0x4, 0xfff00000, 0x0, 0xe, 0x7, 0xc, 0x5, 0x7fff, 0x80000001, 0x3, 0xb, 0xa966, 0x3, 0x1ff, 0x0, 0x2069, 0x8000, 0x3, 0x8, 0x7, 0x5, 0x7, 0xffff, 0x6, 0x1ff, 0x0, 0x1, 0x3, 0x9, 0x9, 0x9, 0xd3, 0x9, 0x2, 0x3, 0x6, 0x9, 0x6, 0x5, 0xfff, 0x80000000, 0x401, 0x0, 0x0, 0x10, 0x1, 0x6, 0x10, 0xc0, 0x5, 0x2, 0x8, 0x3, 0x800, 0x5, 0xdb, 0x3, 0xdb, 0x8, 0x1, 0x6, 0x9, 0x1, 0x3, 0x6, 0x1, 0x2, 0xc4b4, 0x4, 0x40, 0x401, 0xf0e2, 0x4, 0x8, 0x2, 0x2, 0x7, 0x9, 0x3, 0x2, 0x3, 0x8, 0x3, 0x1, 0x4, 0x6, 0x6, 0x6, 0x4, 0x2, 0x5, 0xdc8, 0x15fb, 0x6, 0x6, 0xffffffef, 0x3, 0x2e80, 0x1, 0x0, 0x9c1, 0x0, 0x4, 0x4, 0x2, 0x8368, 0x9, 0x3, 0xa, 0x0, 0x158, 0x5, 0x8f, 0x7fffffff, 0x6, 0x7, 0x4, 0x7fff, 0x5, 0x200, 0x96, 0x1b6, 0x0, 0x0, 0x200, 0x9839, 0x6, 0x6, 0x7, 0x7, 0x6, 0x1f7c0000, 0x5, 0xfffffffd, 0x5, 0x4, 0x8, 0x1, 0x9, 0x3, 0x237a, 0x1a, 0x5, 0x2, 0x10001, 0x10000, 0x0, 0x4, 0x92, 0x0, 0xa, 0x9, 0x21, 0x4, 0x9, 0x7911159a, 0x6, 0x2, 0x80000000, 0x6, 0x7, 0xc, 0x101, 0x7ff, 0x7, 0x8, 0xfffffff8, 0xed60, 0x2, 0x3, 0x7, 0xdbf1, 0xf3, 0x3, 0xe, 0x4]}]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x81}, 0x800)

1.453072938s ago: executing program 5 (id=618):
r0 = getpid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10)
io_uring_setup(0x218a, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000020c0)={&(0x7f0000002100)='sched_switch\x00', r3}, 0x18)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, &(0x7f00000000c0)=0x3, 0x4)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000040), 0x4)
process_vm_readv(r0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)

1.391838299s ago: executing program 1 (id=629):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = open(&(0x7f0000000140)='./file2\x00', 0x147842, 0x184)
preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000540)={'bridge0\x00', 0x10})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r3, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, &(0x7f0000000580)='./file2\x00')
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
r4 = semget$private(0x0, 0x4000000009, 0x0)
semop(r4, &(0x7f0000000040)=[{0x4, 0x1}, {0x4}], 0x2)
semtimedop(r4, &(0x7f0000000040)=[{0x2, 0x8000, 0x1000}, {0x2, 0xf, 0x1800}], 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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")
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc)
setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r6, 0x0, 0x0, 0x1001f0)
fallocate(r6, 0x3, 0x9, 0x10000)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a300000"], 0xfc}}, 0x0)

1.33063156s ago: executing program 7 (id=620):
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) (async)
geteuid()
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
set_mempolicy(0x3, &(0x7f00000000c0)=0xdb, 0xa) (async)
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x50, r0, 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) (async)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff})
vmsplice(r2, 0x0, 0x0, 0x0) (async)
socket$kcm(0xa, 0x1, 0x106) (async)
sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x6, @dev, 0x5, 0xfffffffd}, 0x80, 0x0}, 0x2400c85d)
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="6de39958aeb78239da591d27e12e83f8178128ca31dad978c37de8e3bab4dc4e8e8df3383af80ac5167e99bdd3e96e596f3fa14f6ac5d2575e4af4f5d50551df0235bcf2606e15c1fe1e110be3c13dc47dc52a511c111393895cd0d083e3642e31f28bd233978f17c7281264c877c943486b57f642f379a0d343297c54fc3168cfe2bc59aae819eda8faa3f6baa6c0f38608793a9d3743d5c15087af463e8b", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf252c000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10)
creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000600)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$eJzs3F1oXFUeAPD/nXz2a5vd7Xa33e5uut1lwxaTNq02D4JUFHxQECuojyFJS23aSJOCLVWmIPVRCr6Lj7764Kv6UsQnwdf6KEihSF/aCuLInbl3vjKTNJNkxpjfD27mnHtn7jnnnnvunHtO5gawbY2mf5JK+E5E7I2IQvMbRisvD+9fn3l0//pMFEulMz8m5Y89SOOZbDexK4uMFSIK7yW1DXUWr167MD0/P3c5i08sXXxrYvHqtSfOD2drpqaS/g4L1SK9tFwPDr67cOjAC2/cemmmuuc8tfpybJTRGG2VlbL/bnRiPbanLtxxvdF16fmfVtdAuf3vjb5YqfKKXcwZsNlKpVJpqP3mYqnZjWVrgC0rhnudA6A38i/69P43X1p1BAY3p/vRc/dOV26A0nI/zJaIf5VX5uMgA033txtpNCJeL/70UbrEJo1DAADU++J03hNs6v+NVGZGfr5y+5n09Q/ZHMpIRPwxIv4UEX+OiH0R8ZeI2B8Rf42IvzXtvy8iSiukP9oUr6ZfnYQq3N2goraU9v+ezua20qU291UNjfRlsT0ReYd57lh2TMZiYOjs+fm54yuk8eVz337Qblt9/y9d0jzkfcEsH3f7mwboZqeXpjsr7XL3bkQc7K+Vv9L/TfojkupMQBIRByLi4Br2O1IXPv//Tw5VIwON71u9/GWllvNoGzDPVPo44n+V+i9GtfzRMImYNMxPXpw+N3du7tLk1NTJE8dPPTX55MRwzM8dm0jPgmMt0/j6m5svt0t/1fJ/9n3zR54/9fmZrGWtX1r/O+vO/8jnb2vlH0kikup87eLa07j53ftt72k6Pf8Hk1fL4fy+9O3ppaXLxyMGkxeXr5+sfTaPp69RrJR/7Ejz+V9Ot3yNy4/E3yMiPYn/ERH/jModYpr3wxHx74g4skL5v3r2P292Xv7NlZZ/NhrLX6n5hvqvzde3CyTZ3GDDpsFIA30XDt951Obi8Xj1f7IcGsvWtL7+JQ2XiHY5zb/t0jW/rPvoAQAAwNZQiIjddWNJu6NQGB+vjAHti52F+YXFpaNnF65cmk23RYzEQCEf6aqMBw8k+fjnSF18sil+Ihs3/rBvRzk+PrMwP9vTkgO7ym0+KYxHvNZX1/5TP2zMEDPwW+b3WrB9rdT+0078/ltdzAzQVY///X/7nU3NCNB1de2/3S/8ix383xewBbj/B2pWf9CPawZsfSVtGba1NbX/ox4CCL8n/fFKNVzoaU6AbtP/h21p1d/1rytQGmq9aTiWvzmGV95hX3SWjR0t0upJIO1Z9ST1HZ18Kn+aQtv3RGFtOxyKxjWDHdbp2XUejeLlxXP7ayd//myRdR7nUva/8htdg592pZ22CnT9UgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALApfg0AAP//XhrXwA==")
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000340)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
getpid() (async)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r7, 0x407, 0x10005)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x15, @val=@netkit={@void, @value=r1}}, 0x1c)
r8 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r8, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x0) (async)
close(r8)

1.177417762s ago: executing program 3 (id=621):
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
pipe(&(0x7f0000000080))
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$igmp(0x2, 0x3, 0x2)
socket$netlink(0x10, 0x3, 0xb)
socket$inet6_udplite(0xa, 0x2, 0x88)
pipe(&(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
pipe(&(0x7f0000000040))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\a', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.133060373s ago: executing program 7 (id=622):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0xfd45}, 0x1, 0x0, 0x0, 0xc004}, 0x0)
write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="71050409020201f80b0df71a0206050401b4"], 0x12)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
writev(r1, &(0x7f0000000380)=[{&(0x7f0000000340)="02761e731151766b", 0x8}], 0x1)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000001280)=0x4, 0x4)
recvmsg(0xffffffffffffffff, 0x0, 0x4c2103a0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00', 0x80000000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000100))
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r9}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="0000d94a1a13ecbc2db29a0e46d461b6000000a1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28], 0x48)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r10=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x4, r10, 0x1, 0xf, 0x6, @local}, 0x14)

1.128046483s ago: executing program 3 (id=623):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
listen(0xffffffffffffffff, 0xfffffffc)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd000000080003000601ff1f418e01400004fcff", 0x58}], 0x1)
r6 = syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x22c00)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r8}, 0x10)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
syz_clone3(&(0x7f0000000180)={0x105000600, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, &(0x7f0000001580)=[0xffffffffffffffff], 0x1}, 0x58)
ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000000c0)=ANY=[])
pipe(&(0x7f0000000000))
msgget(0x3, 0x1)

1.123900273s ago: executing program 6 (id=624):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2)
sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40)

1.088796683s ago: executing program 5 (id=625):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0)
r1 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r1, 0x0, 0x3, &(0x7f00000003c0), 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10)

1.041753754s ago: executing program 5 (id=626):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)

1.015901685s ago: executing program 5 (id=627):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001"], 0x10}}, 0x0)

953.077106ms ago: executing program 5 (id=628):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

289.689516ms ago: executing program 7 (id=630):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x6903, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa8)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x474, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x448, 0x2, [@TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2c, 0x20000000, 0x1, 0x0, 0x542, {0x2, 0x0, 0x794, 0x2, 0xfff, 0x966c}, {0x9, 0x1, 0x2, 0x2, 0x5, 0x5}, 0x7, 0x0, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x3, 0x3, 0x7, 0x4, 0x9, 0x5, 0x3, 0x3, 0xa3d5, 0x9, 0x5, 0x7, 0xc23, 0x100, 0x7, 0x5a, 0x5, 0x5, 0xffffffff, 0x8, 0x4, 0x9, 0x4000, 0xfff, 0x1, 0x7fffffff, 0x400, 0x6cf3768d, 0xf, 0x2, 0x5, 0x9, 0x6, 0x5, 0x1, 0x0, 0x2, 0x8, 0x6, 0x2, 0x8000, 0x9, 0xf3, 0x8, 0x1, 0x800, 0xa9, 0x6, 0x56c, 0x9f, 0x7, 0x4, 0x4000, 0x4, 0xfffffff7, 0xfffffff7, 0x200, 0x0, 0x5, 0x1, 0x0, 0x6, 0x9, 0xc9ed, 0xfffffffc, 0x4, 0x1000, 0x7, 0x81, 0x101, 0x7851, 0x9, 0x7, 0x4, 0x6, 0x6, 0x5, 0x4, 0x4, 0xfff00000, 0x0, 0xe, 0x7, 0xc, 0x5, 0x7fff, 0x80000001, 0x3, 0xb, 0xa966, 0x3, 0x1ff, 0x0, 0x2069, 0x8000, 0x3, 0x8, 0x7, 0x5, 0x7, 0xffff, 0x6, 0x1ff, 0x0, 0x1, 0x3, 0x9, 0x9, 0x9, 0xd3, 0x9, 0x2, 0x3, 0x6, 0x9, 0x6, 0x5, 0xfff, 0x80000000, 0x401, 0x0, 0x0, 0x10, 0x1, 0x6, 0x10, 0xc0, 0x5, 0x2, 0x8, 0x3, 0x800, 0x5, 0xdb, 0x3, 0xdb, 0x8, 0x1, 0x6, 0x9, 0x1, 0x3, 0x6, 0x1, 0x2, 0xc4b4, 0x4, 0x40, 0x401, 0xf0e2, 0x4, 0x8, 0x2, 0x2, 0x7, 0x9, 0x3, 0x2, 0x3, 0x8, 0x3, 0x1, 0x4, 0x6, 0x6, 0x6, 0x4, 0x2, 0x5, 0xdc8, 0x15fb, 0x6, 0x6, 0xffffffef, 0x3, 0x2e80, 0x1, 0x0, 0x9c1, 0x0, 0x4, 0x4, 0x2, 0x8368, 0x9, 0x3, 0xa, 0x0, 0x158, 0x5, 0x8f, 0x7fffffff, 0x6, 0x7, 0x4, 0x7fff, 0x5, 0x200, 0x96, 0x1b6, 0x0, 0x0, 0x200, 0x9839, 0x6, 0x6, 0x7, 0x7, 0x6, 0x1f7c0000, 0x5, 0xfffffffd, 0x5, 0x4, 0x8, 0x1, 0x9, 0x3, 0x237a, 0x1a, 0x5, 0x2, 0x10001, 0x10000, 0x0, 0x4, 0x92, 0x0, 0xa, 0x9, 0x21, 0x4, 0x9, 0x7911159a, 0x6, 0x2, 0x80000000, 0x6, 0x7, 0xc, 0x101, 0x7ff, 0x7, 0x8, 0xfffffff8, 0xed60, 0x2, 0x3, 0x7, 0xdbf1, 0xf3, 0x3, 0xe, 0x4]}]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x81}, 0x800)

289.426876ms ago: executing program 1 (id=631):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x80000000000}, 0x18)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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")
openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e67650000000400028009000100"], 0x108}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r5=>0x0})
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18)
sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
close(r6)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r5, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)

289.094496ms ago: executing program 6 (id=632):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b782fc7d0a000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
getresuid(&(0x7f00000002c0), &(0x7f00000004c0), &(0x7f0000000500))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x18)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x5, 0x1}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r6, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120)
readv(r6, &(0x7f0000000140)=[{&(0x7f0000000300)=""/155, 0x9b}, {0x0}], 0x2)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c)
sendto$inet6(r5, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$sock(r5, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)='4', 0x1}], 0x1}}], 0x1, 0x40000)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0)
sendto$inet6(r3, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0)

272.253036ms ago: executing program 3 (id=633):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x20000000)
socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=<r4=>0xffffffffffffffff, @ANYRES8=r1], 0x48)
unshare(0x2c060000)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000200)=[{0x2ff3, 0x20, 0x6, 0x5}, {0xad, 0x6, 0x5, 0x6}]}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002200)=ANY=[@ANYBLOB="e012000010000100000ab52ed1671515cc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000000000032000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000004c0014006469676573745f6e756c6c"], 0x12e0}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x77f}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000840)=ANY=[@ANYRES8=r1, @ANYBLOB="6b8c59cedd54dae8c6e329e7cad31f908f689fbfb0cbb0295868db3f6bea6f9f1d24d7ee7bbe72d3416d3d9b0cebab3b960445349d80bc080f5441f5cba79c86dacfe59c4932f083193a9815ca8ba43f81c0c847f33a19da3627b325e99bb5b6b931b8d8090626091313c608d66e9dd5407774c4973fce3da3f02ffc2abc1a22928e25ea62", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRESDEC=r2, @ANYRES32=r5, @ANYRESOCT=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x9135}, 0x18)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x4000000, 0xffffffff, 0x1, 0x0, 0x0, 0x5, 0x4})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r8, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
unshare(0x2c020400)
r9 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, 0x0, 0x0)
lsm_get_self_attr(0x67, &(0x7f0000000400)={0x0, 0x0, 0xad, 0x8d, ""/141}, &(0x7f0000000080)=0xad, 0x0)

181.023817ms ago: executing program 3 (id=634):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000810}, 0x4040)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='mm_page_alloc\x00', r1, 0x0, 0x7}, 0x18)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x5000)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
unshare(0x26020480)
r4 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kfree\x00', r5}, 0x18)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x1c}], 0x1)
ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000840)=r1)
r6 = openat(0xffffffffffffffff, 0x0, 0x260c80, 0x0)
getdents64(r6, 0x0, 0x0)
r7 = socket$inet(0x2, 0x3, 0x8)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x76, 0x2, 0x5, 0x0, 0x0, 0x5, 0x200, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r6, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2514805e07eb95d6fdad937a00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000001db685000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b70300000000"], &(0x7f0000000800)='syzkaller\x00', 0xe29, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='percpu_free_percpu\x00', r8}, 0x10)
close(0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)
fsopen(&(0x7f00000018c0)='rpc_pipefs\x00', 0x1)
r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)

144.039268ms ago: executing program 6 (id=635):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x80)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r3, &(0x7f0000000180)='./bus\x00', 0x0)
renameat2(r3, &(0x7f0000000380)='./file0\x00', r3, &(0x7f0000000200)='./bus/file0\x00', 0x0)
unlinkat(r3, &(0x7f0000000080)='./bus/file0\x00', 0x200)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
lseek(r6, 0x6, 0x1)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x3}, 0xc)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000080000400"/28], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0x0, 0x1}, 0x18208, 0x3, 0x0, 0x0, 0x1000, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
fstatfs(r8, &(0x7f0000000340)=""/132)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10)
pipe(&(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0)
io_setup(0x2, &(0x7f00000011c0)=<r12=>0x0)
io_submit(r12, 0x2000000000000326, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, r11}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r11, &(0x7f00000001c0)='m', 0xfffffdfc}])
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)

134.867498ms ago: executing program 7 (id=636):
r0 = getpid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10)
io_uring_setup(0x218a, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000020c0)={&(0x7f0000002100)='sched_switch\x00', r3}, 0x18)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, &(0x7f00000000c0)=0x3, 0x4)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000040), 0x4)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0)

84.999149ms ago: executing program 5 (id=637):
r0 = socket(0x10, 0x803, 0x0)
getpeername$packet(r0, &(0x7f00000004c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14)
statx(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x6000, 0x200, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
ioprio_set$uid(0x0, r2, 0x0)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0)
pwrite64(r4, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1}, 0x4)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0x0, 0x934, 0x8}, 0xc)
r7 = fsopen(&(0x7f0000000980)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x0)
openat(r8, &(0x7f0000000000)='./file0\x00', 0x8180, 0xc0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xe, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x13a1, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000240)='GPL\x00', 0xffffffff, 0xfffffffffffffee4, &(0x7f00000003c0)=""/95, 0x0, 0xd, '\x00', r1, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x4, 0x1, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000800)=[0xffffffffffffffff, r4, r6, r5, r6, r8, r4], &(0x7f0000000840)=[{0x3, 0x1, 0x4, 0x5}, {0x5, 0x4, 0x2, 0x2}, {0x5, 0x1, 0x7, 0x8}, {0x4, 0x5, 0x2000000f, 0x9}], 0x10, 0x8}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xe8c, <r10=>0x0}, 0x8)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x18)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='signal_generate\x00', r12}, 0x10)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f0000000480)=@known='system.posix_acl_access\x00', 0x0, 0x1a)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94)
r14 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r14, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './bus\x00'})

76.611299ms ago: executing program 1 (id=638):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
syz_emit_ethernet(0x7a, &(0x7f0000000100)=ANY=[], 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) (async)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
socket$kcm(0x29, 0x5, 0x0) (async)
r6 = socket$kcm(0x29, 0x5, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='net\x00')
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r7)
sendmsg$DEVLINK_CMD_GET(r7, 0x0, 0x1)
sendmmsg$inet(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000300)}], 0x1, &(0x7f0000000a00)=ANY=[@ANYRESOCT=r7, @ANYRESHEX, @ANYRES16, @ANYRES64=r5, @ANYRES8=r7, @ANYBLOB="a57144860111fd94129e0ac3573c9db7db0502451f97700aa034192fa8f5cabaee85b780ff5ef195961f3ea542c0e419f950ae0c021876fc7a66d3c79192ba83c1a661fa1244d5f13e65de99af1e802ee3763816f03674cf91c4a0f037e085f0f01a6ab90d2f16bded9fd8583d1620cd804cae6d5078a12005d6e73e2184d9724e264c267d60e6f2610d784530ca5beb59b7ded0e4cd7d7d2e0b374a7cb4cb14f3fdbbda798677de8853f082299b7faed302acaea04ca2e5", @ANYRESDEC=0x0], 0xd0}}], 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r8 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000)
readv(r9, &(0x7f0000000080)=[{&(0x7f0000000880)=""/97, 0x61}], 0x1) (async)
readv(r9, &(0x7f0000000080)=[{&(0x7f0000000880)=""/97, 0x61}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x8, &(0x7f00000004c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

24.32125ms ago: executing program 3 (id=639):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000004}, 0x18)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0)

0s ago: executing program 3 (id=640):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0xfd45}, 0x1, 0x0, 0x0, 0xc004}, 0x0)
write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="71050409020201f80b0df71a0206050401b4"], 0x12)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
writev(r1, &(0x7f0000000380)=[{&(0x7f0000000340)="02761e731151766b", 0x8}], 0x1)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000001280)=0x4, 0x4)
recvmsg(0xffffffffffffffff, 0x0, 0x4c2103a0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00', 0x80000000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000100))
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r9}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="0000d94a1a13ecbc2db29a0e46d461b6000000a1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28], 0x48)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r10=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x4, r10, 0x1, 0xf, 0x6, @local}, 0x14)

kernel console output (not intermixed with test programs):

 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01
[   55.973370][ T4187] RSP: 002b:00007f96aa3f54a0 EFLAGS: 00010246
[   55.973384][ T4187] RAX: 0000000000000001 RBX: 00007f96aa3f5540 RCX: 0000000000000101
[   55.973396][ T4187] RDX: 0000000000000070 RSI: 0000000000000001 RDI: 00007f96aa3f55e0
[   55.973407][ T4187] RBP: 0000000000000102 R08: 00007f96a1fd6000 R09: 0000000000000000
[   55.973494][ T4187] R10: 0000000000000000 R11: 00007f96aa3f5550 R12: 0000000000000001
[   55.973509][ T4187] R13: 00007f96abe4c3a0 R14: 0000000000000000 R15: 00007f96aa3f55e0
[   55.973533][ T4187]  </TASK>
[   55.973545][ T4187] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   56.052848][ T4186] 9pnet_fd: Insufficient options for proto=fd
[   56.071382][ T4187] loop4: detected capacity change from 0 to 512
[   56.088147][ T4187] EXT4-fs (loop4): orphan cleanup on readonly fs
[   56.183713][ T4194] loop3: detected capacity change from 0 to 1024
[   56.206359][ T4194] EXT4-fs: Ignoring removed oldalloc option
[   56.212751][ T4194] EXT4-fs: dax option not supported
[   56.213516][ T4187] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.220: bad orphan inode 13
[   56.219903][ T4182] bond1 (unregistering): Released all slaves
[   56.250720][ T4193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'.
[   56.265365][ T4187] ext4_test_bit(bit=12, block=18) = 1
[   56.271079][ T4187] is_bad_inode(inode)=0
[   56.275373][ T4187] NEXT_ORPHAN(inode)=2130706432
[   56.280321][ T4187] max_ino=32
[   56.283811][ T4187] i_nlink=1
[   56.306327][ T4187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   56.312335][ T4193] IPVS: Unknown mcast interface: vcan0
[   56.400379][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.431579][ T4205] FAULT_INJECTION: forcing a failure.
[   56.431579][ T4205] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   56.446529][ T4205] CPU: 1 UID: 0 PID: 4205 Comm: syz.1.225 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   56.446563][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   56.446580][ T4205] Call Trace:
[   56.446589][ T4205]  <TASK>
[   56.446599][ T4205]  __dump_stack+0x1d/0x30
[   56.446626][ T4205]  dump_stack_lvl+0xe8/0x140
[   56.446653][ T4205]  dump_stack+0x15/0x1b
[   56.446697][ T4205]  should_fail_ex+0x265/0x280
[   56.446737][ T4205]  should_fail+0xb/0x20
[   56.446771][ T4205]  should_fail_usercopy+0x1a/0x20
[   56.446822][ T4205]  _copy_to_user+0x20/0xa0
[   56.446868][ T4205]  simple_read_from_buffer+0xb5/0x130
[   56.446910][ T4205]  proc_fail_nth_read+0x100/0x140
[   56.447020][ T4205]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   56.447060][ T4205]  vfs_read+0x19d/0x6f0
[   56.447094][ T4205]  ? __rcu_read_unlock+0x4f/0x70
[   56.447116][ T4205]  ? __fget_files+0x184/0x1c0
[   56.447205][ T4205]  ksys_read+0xda/0x1a0
[   56.447258][ T4205]  __x64_sys_read+0x40/0x50
[   56.447359][ T4205]  x64_sys_call+0x2d77/0x2fb0
[   56.447387][ T4205]  do_syscall_64+0xd2/0x200
[   56.447408][ T4205]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   56.447515][ T4205]  ? clear_bhb_loop+0x40/0x90
[   56.447542][ T4205]  ? clear_bhb_loop+0x40/0x90
[   56.447567][ T4205]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.447594][ T4205] RIP: 0033:0x7f79e2f0d33c
[   56.447669][ T4205] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   56.447691][ T4205] RSP: 002b:00007f79e1577030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   56.447714][ T4205] RAX: ffffffffffffffda RBX: 00007f79e3135fa0 RCX: 00007f79e2f0d33c
[   56.447729][ T4205] RDX: 000000000000000f RSI: 00007f79e15770a0 RDI: 0000000000000005
[   56.447744][ T4205] RBP: 00007f79e1577090 R08: 0000000000000000 R09: 0000000000000000
[   56.447789][ T4205] R10: 0000000000000066 R11: 0000000000000246 R12: 0000000000000001
[   56.447804][ T4205] R13: 0000000000000000 R14: 00007f79e3135fa0 R15: 00007ffdf8700e88
[   56.447829][ T4205]  </TASK>
[   56.688383][ T4182] loop3: detected capacity change from 0 to 2048
[   56.713430][ T4193] 9pnet_fd: Insufficient options for proto=fd
[   56.760943][ T4208] UHID_CREATE from different security context by process 115 (syz.4.226), this is not allowed.
[   56.772548][ T4182]  loop3: p1 < > p3 p4 < >
[   56.779247][ T4182] loop3: p3 start 4284289 is beyond EOD, truncated
[   56.900712][ T4225] FAULT_INJECTION: forcing a failure.
[   56.900712][ T4225] name failslab, interval 1, probability 0, space 0, times 0
[   56.913643][ T4225] CPU: 0 UID: 0 PID: 4225 Comm: syz.4.232 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   56.913677][ T4225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   56.913692][ T4225] Call Trace:
[   56.913700][ T4225]  <TASK>
[   56.913708][ T4225]  __dump_stack+0x1d/0x30
[   56.913729][ T4225]  dump_stack_lvl+0xe8/0x140
[   56.913754][ T4225]  dump_stack+0x15/0x1b
[   56.913782][ T4225]  should_fail_ex+0x265/0x280
[   56.913815][ T4225]  should_failslab+0x8c/0xb0
[   56.913843][ T4225]  kmem_cache_alloc_noprof+0x50/0x310
[   56.913874][ T4225]  ? __proc_create+0x265/0x500
[   56.913952][ T4225]  __proc_create+0x265/0x500
[   56.913983][ T4225]  proc_create_data+0xa3/0x1e0
[   56.914012][ T4225]  recent_mt_check+0x779/0x8f0
[   56.914071][ T4225]  recent_mt_check_v0+0x67/0x90
[   56.914110][ T4225]  xt_check_match+0x2aa/0x4f0
[   56.914144][ T4225]  ? strnlen+0x28/0x50
[   56.914167][ T4225]  ? strcmp+0x22/0x50
[   56.914189][ T4225]  ? xt_find_match+0x1d1/0x210
[   56.914231][ T4225]  translate_table+0xb4b/0x1070
[   56.914267][ T4225]  ? _copy_from_user+0x89/0xb0
[   56.914360][ T4225]  do_ip6t_set_ctl+0x678/0x840
[   56.914383][ T4225]  ? kstrtoull+0x111/0x140
[   56.914410][ T4225]  ? __rcu_read_unlock+0x4f/0x70
[   56.914451][ T4225]  nf_setsockopt+0x196/0x1b0
[   56.914488][ T4225]  ipv6_setsockopt+0x11a/0x130
[   56.914519][ T4225]  tcp_setsockopt+0x95/0xb0
[   56.914575][ T4225]  sock_common_setsockopt+0x69/0x80
[   56.914629][ T4225]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   56.914723][ T4225]  __sys_setsockopt+0x184/0x200
[   56.914765][ T4225]  __x64_sys_setsockopt+0x64/0x80
[   56.914798][ T4225]  x64_sys_call+0x2bd5/0x2fb0
[   56.914818][ T4225]  do_syscall_64+0xd2/0x200
[   56.914900][ T4225]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   56.914925][ T4225]  ? clear_bhb_loop+0x40/0x90
[   56.914944][ T4225]  ? clear_bhb_loop+0x40/0x90
[   56.914978][ T4225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.915001][ T4225] RIP: 0033:0x7f96abdae929
[   56.915016][ T4225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   56.915095][ T4225] RSP: 002b:00007f96aa417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   56.915113][ T4225] RAX: ffffffffffffffda RBX: 00007f96abfd5fa0 RCX: 00007f96abdae929
[   56.915125][ T4225] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005
[   56.915142][ T4225] RBP: 00007f96aa417090 R08: 0000000000000470 R09: 0000000000000000
[   56.915156][ T4225] R10: 0000200000000b40 R11: 0000000000000246 R12: 0000000000000001
[   56.915171][ T4225] R13: 0000000000000000 R14: 00007f96abfd5fa0 R15: 00007ffdcdcf4908
[   56.915196][ T4225]  </TASK>
[   56.919463][ T4226] program syz.1.228 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   57.207282][ T4228] loop4: detected capacity change from 0 to 1024
[   57.294616][ T4228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.339141][ T4241] netlink: 'syz.0.237': attribute type 1 has an invalid length.
[   57.386695][ T4241] bond1: entered promiscuous mode
[   57.421675][ T4249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.233'.
[   57.450281][ T4252] netlink: 3 bytes leftover after parsing attributes in process `syz.0.237'.
[   57.501957][ T4241] 8021q: adding VLAN 0 to HW filter on device bond1
[   57.513533][ T4256] netlink: 3 bytes leftover after parsing attributes in process `syz.0.237'.
[   57.530649][ T4251] ipvlan2: entered promiscuous mode
[   57.549950][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.552355][ T4252] batadv1: entered promiscuous mode
[   57.564265][ T4252] batadv1: entered allmulticast mode
[   57.586696][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv1
[   57.587572][ T4260] capability: warning: `syz.2.243' uses deprecated v2 capabilities in a way that may be insecure
[   57.595609][ T4252] bond1: (slave batadv1): making interface the new active one
[   57.624533][ T4252] bond1: (slave batadv1): Enslaving as an active interface with an up link
[   57.648808][ T4256] batadv2: entered promiscuous mode
[   57.654264][ T4256] batadv2: entered allmulticast mode
[   57.685847][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv2
[   57.698146][ T4256] bond1: (slave batadv2): Enslaving as an active interface with an up link
[   57.755486][ T4280] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   57.768294][ T4280] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[   57.835384][ T4285] loop1: detected capacity change from 0 to 256
[   57.850061][ T4288] lo speed is unknown, defaulting to 1000
[   57.866821][ T4288] lo speed is unknown, defaulting to 1000
[   57.887206][ T4288] lo speed is unknown, defaulting to 1000
[   57.912250][ T4288] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   57.940001][ T4288] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   57.967764][ T4288] lo speed is unknown, defaulting to 1000
[   57.981254][ T4288] lo speed is unknown, defaulting to 1000
[   57.992861][ T4293] hub 2-0:1.0: USB hub found
[   58.004879][ T4288] lo speed is unknown, defaulting to 1000
[   58.012984][ T4293] hub 2-0:1.0: 8 ports detected
[   58.025561][ T4288] lo speed is unknown, defaulting to 1000
[   58.066634][ T4288] lo speed is unknown, defaulting to 1000
[   58.081321][ T4293] loop2: detected capacity change from 0 to 1024
[   58.128595][ T4293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.195754][ T4302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'.
[   58.218606][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.269003][ T4307] loop4: detected capacity change from 0 to 1764
[   58.284706][ T4307] iso9660: Corrupted directory entry in block 2 of inode 1920
[   58.366322][ T4317] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[   58.415689][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   58.424159][ T3393] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   58.442808][ T4322] loop2: detected capacity change from 0 to 1024
[   58.450592][ T4322] EXT4-fs: Ignoring removed nomblk_io_submit option
[   58.470614][ T4322] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   58.491508][ T4322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.508349][ T4322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.518881][ T4337] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.264'.
[   58.535163][ T4331] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.264'.
[   58.611070][ T4339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.267'.
[   58.716846][   T29] kauditd_printk_skb: 136 callbacks suppressed
[   58.716865][   T29] audit: type=1326 audit(1752469650.152:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f962f58e7 code=0x7ffc0000
[   58.749226][   T29] audit: type=1326 audit(1752469650.152:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f9629ab19 code=0x7ffc0000
[   58.772776][   T29] audit: type=1326 audit(1752469650.152:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9f962fe929 code=0x7ffc0000
[   58.796993][   T29] audit: type=1326 audit(1752469650.182:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f962f58e7 code=0x7ffc0000
[   58.820415][   T29] audit: type=1326 audit(1752469650.182:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f9629ab19 code=0x7ffc0000
[   58.844023][   T29] audit: type=1326 audit(1752469650.182:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9f962fe929 code=0x7ffc0000
[   58.867640][   T29] audit: type=1326 audit(1752469650.192:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f962f58e7 code=0x7ffc0000
[   58.891333][   T29] audit: type=1326 audit(1752469650.192:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f9629ab19 code=0x7ffc0000
[   58.917294][   T29] audit: type=1326 audit(1752469650.192:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9f962fe929 code=0x7ffc0000
[   58.944582][   T29] audit: type=1326 audit(1752469650.202:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f962f58e7 code=0x7ffc0000
[   58.982760][ T4346] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.043391][ T4346] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.093765][ T4346] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.153670][ T4346] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.228285][ T4346] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.263751][ T4346] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.285515][ T4346] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.305137][ T4346] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.320977][ T4347] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.364640][ T4358] lo speed is unknown, defaulting to 1000
[   59.393942][ T4347] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.438129][ T4354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'.
[   59.463495][ T4347] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.509658][ T4347] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.555813][ T4371] lo speed is unknown, defaulting to 1000
[   59.587780][ T4369] loop2: detected capacity change from 0 to 8192
[   59.672667][ T4377] netlink: 'syz.2.280': attribute type 10 has an invalid length.
[   59.709630][ T4377] process 'syz.2.280' launched '/dev/fd/3' with NULL argv: empty string added
[   59.797365][ T4388] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   59.857815][ T4396] FAULT_INJECTION: forcing a failure.
[   59.857815][ T4396] name failslab, interval 1, probability 0, space 0, times 0
[   59.870788][ T4396] CPU: 1 UID: 0 PID: 4396 Comm: syz.0.288 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   59.870878][ T4396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   59.870893][ T4396] Call Trace:
[   59.870902][ T4396]  <TASK>
[   59.870911][ T4396]  __dump_stack+0x1d/0x30
[   59.870951][ T4396]  dump_stack_lvl+0xe8/0x140
[   59.870971][ T4396]  dump_stack+0x15/0x1b
[   59.870986][ T4396]  should_fail_ex+0x265/0x280
[   59.871017][ T4396]  should_failslab+0x8c/0xb0
[   59.871095][ T4396]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[   59.871240][ T4396]  ? kasprintf+0x83/0xb0
[   59.871268][ T4396]  kvasprintf+0x8a/0x110
[   59.871297][ T4396]  kasprintf+0x83/0xb0
[   59.871322][ T4396]  ? alloc_bprm+0x5c/0x350
[   59.871387][ T4396]  alloc_bprm+0x12d/0x350
[   59.871415][ T4396]  do_execveat_common+0x12e/0x750
[   59.871445][ T4396]  ? getname_flags+0x154/0x3b0
[   59.871529][ T4396]  __x64_sys_execveat+0x73/0x90
[   59.871567][ T4396]  x64_sys_call+0x2dae/0x2fb0
[   59.871595][ T4396]  do_syscall_64+0xd2/0x200
[   59.871635][ T4396]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   59.871676][ T4396]  ? clear_bhb_loop+0x40/0x90
[   59.871699][ T4396]  ? clear_bhb_loop+0x40/0x90
[   59.871727][ T4396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.871750][ T4396] RIP: 0033:0x7f9f962fe929
[   59.871840][ T4396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.871974][ T4396] RSP: 002b:00007f9f94967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[   59.871997][ T4396] RAX: ffffffffffffffda RBX: 00007f9f96525fa0 RCX: 00007f9f962fe929
[   59.872013][ T4396] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[   59.872028][ T4396] RBP: 00007f9f94967090 R08: 0000000000001000 R09: 0000000000000000
[   59.872043][ T4396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   59.872058][ T4396] R13: 0000000000000000 R14: 00007f9f96525fa0 R15: 00007ffe88b44f08
[   59.872080][ T4396]  </TASK>
[   60.077816][ T4397] loop3: detected capacity change from 0 to 128
[   60.104750][ T4399] loop2: detected capacity change from 0 to 1024
[   60.159476][ T4399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.210762][ T4406] lo speed is unknown, defaulting to 1000
[   60.263506][ T4406] loop4: detected capacity change from 0 to 512
[   60.576787][ T4399] pim6reg: entered allmulticast mode
[   60.586169][ T4399] pim6reg: left allmulticast mode
[   60.657415][ T4401] __nla_validate_parse: 9 callbacks suppressed
[   60.657429][ T4401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'.
[   60.777545][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.926875][ T4429] hub 2-0:1.0: USB hub found
[   60.932039][ T4429] hub 2-0:1.0: 8 ports detected
[   60.937988][ T4431] bridge0: entered promiscuous mode
[   60.947886][ T4429] loop4: detected capacity change from 0 to 1024
[   60.966479][ T4429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.996308][ T4429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'.
[   61.015830][ T4442] netlink: 56 bytes leftover after parsing attributes in process `syz.0.300'.
[   61.025073][ T4442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.300'.
[   61.035522][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.180898][ T4444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'.
[   61.249798][ T4450] lo speed is unknown, defaulting to 1000
[   61.471066][ T4460] netlink: 'syz.3.307': attribute type 3 has an invalid length.
[   61.594918][ T4475] hub 2-0:1.0: USB hub found
[   61.599826][ T4475] hub 2-0:1.0: 8 ports detected
[   61.614305][ T4475] loop3: detected capacity change from 0 to 1024
[   61.625999][ T4475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.695148][ T4480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'.
[   61.766483][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.775608][ T4482] loop4: detected capacity change from 0 to 8192
[   61.899187][ T4484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'.
[   61.998488][ T4492] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   62.033636][ T4493] loop3: detected capacity change from 0 to 128
[   62.043703][ T4493] FAULT_INJECTION: forcing a failure.
[   62.043703][ T4493] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   62.058064][ T4493] CPU: 1 UID: 0 PID: 4493 Comm: syz.3.314 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   62.058092][ T4493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   62.058104][ T4493] Call Trace:
[   62.058154][ T4493]  <TASK>
[   62.058163][ T4493]  __dump_stack+0x1d/0x30
[   62.058190][ T4493]  dump_stack_lvl+0xe8/0x140
[   62.058277][ T4493]  dump_stack+0x15/0x1b
[   62.058348][ T4493]  should_fail_ex+0x265/0x280
[   62.058385][ T4493]  should_fail+0xb/0x20
[   62.058411][ T4493]  should_fail_usercopy+0x1a/0x20
[   62.058441][ T4493]  copy_folio_from_iter_atomic+0x278/0x1170
[   62.058555][ T4493]  ? fat_write_begin+0x4f/0xe0
[   62.058589][ T4493]  ? __pfx_fat_get_block+0x10/0x10
[   62.058659][ T4493]  generic_perform_write+0x2c2/0x490
[   62.058684][ T4493]  __generic_file_write_iter+0xec/0x120
[   62.058703][ T4493]  ? __pfx_generic_file_write_iter+0x10/0x10
[   62.058805][ T4493]  generic_file_write_iter+0x8d/0x2f0
[   62.058835][ T4493]  ? _parse_integer_limit+0x170/0x190
[   62.058935][ T4493]  ? _parse_integer+0x27/0x40
[   62.059014][ T4493]  ? kstrtoull+0x111/0x140
[   62.059047][ T4493]  ? kstrtouint+0x76/0xc0
[   62.059079][ T4493]  ? kstrtouint_from_user+0x9f/0xf0
[   62.059148][ T4493]  ? avc_policy_seqno+0x15/0x30
[   62.059179][ T4493]  ? selinux_file_permission+0x1e4/0x320
[   62.059212][ T4493]  ? __pfx_generic_file_write_iter+0x10/0x10
[   62.059242][ T4493]  vfs_write+0x49d/0x8e0
[   62.059314][ T4493]  ksys_write+0xda/0x1a0
[   62.059347][ T4493]  __x64_sys_write+0x40/0x50
[   62.059382][ T4493]  x64_sys_call+0x2cdd/0x2fb0
[   62.059406][ T4493]  do_syscall_64+0xd2/0x200
[   62.059423][ T4493]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   62.059471][ T4493]  ? clear_bhb_loop+0x40/0x90
[   62.059493][ T4493]  ? clear_bhb_loop+0x40/0x90
[   62.059519][ T4493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.059576][ T4493] RIP: 0033:0x7fecca61e929
[   62.059595][ T4493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.059617][ T4493] RSP: 002b:00007fecc8c66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   62.059640][ T4493] RAX: ffffffffffffffda RBX: 00007fecca846080 RCX: 00007fecca61e929
[   62.059673][ T4493] RDX: 0000000000032600 RSI: 0000200000000300 RDI: 0000000000000008
[   62.059687][ T4493] RBP: 00007fecc8c66090 R08: 0000000000000000 R09: 0000000000000000
[   62.059699][ T4493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   62.059710][ T4493] R13: 0000000000000000 R14: 00007fecca846080 R15: 00007ffee5179148
[   62.059728][ T4493]  </TASK>
[   62.060747][ T4493] syz.3.314: attempt to access beyond end of device
[   62.060747][ T4493] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128
[   62.130451][ T4495] loop0: detected capacity change from 0 to 1024
[   62.343400][ T4495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.360666][ T4495] pim6reg: entered allmulticast mode
[   62.367409][ T4495] pim6reg: left allmulticast mode
[   62.782506][ T3417] usb usb8-port1: attempt power cycle
[   62.837990][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.193770][ T4609] loop0: detected capacity change from 0 to 512
[   63.204103][ T4609] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   63.217195][ T4609] EXT4-fs (loop0): 1 truncate cleaned up
[   63.227206][ T4609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.241781][ T4609] netlink: 40 bytes leftover after parsing attributes in process `gtp'.
[   63.265745][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.325237][ T4627] loop0: detected capacity change from 0 to 8192
[   63.509672][ T4659] netlink: 'syz.4.327': attribute type 21 has an invalid length.
[   63.510258][ T3393] Process accounting resumed
[   63.556054][ T4662] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   63.566491][ T4656] Process accounting resumed
[   63.662062][ T4347] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.677005][ T4667] loop4: detected capacity change from 0 to 1024
[   63.679187][ T4347] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.691990][ T4664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'.
[   63.704053][ T4667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.721633][ T4347] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.735076][ T4347] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.768044][ T4667] pim6reg: entered allmulticast mode
[   63.802299][ T4674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.817951][ T4667] pim6reg: left allmulticast mode
[   63.852725][ T4674] syzkaller1: entered promiscuous mode
[   63.858302][ T4674] syzkaller1: entered allmulticast mode
[   63.910658][ T4683] 9pnet_fd: Insufficient options for proto=fd
[   63.971361][ T4687] FAULT_INJECTION: forcing a failure.
[   63.971361][ T4687] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   63.984533][ T4687] CPU: 0 UID: 0 PID: 4687 Comm: syz.3.337 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   63.984562][ T4687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   63.984574][ T4687] Call Trace:
[   63.984579][ T4687]  <TASK>
[   63.984586][ T4687]  __dump_stack+0x1d/0x30
[   63.984605][ T4687]  dump_stack_lvl+0xe8/0x140
[   63.984671][ T4687]  dump_stack+0x15/0x1b
[   63.984692][ T4687]  should_fail_ex+0x265/0x280
[   63.984725][ T4687]  should_fail+0xb/0x20
[   63.984779][ T4687]  should_fail_usercopy+0x1a/0x20
[   63.984806][ T4687]  strncpy_from_user+0x25/0x230
[   63.984827][ T4687]  ? kmem_cache_alloc_noprof+0x186/0x310
[   63.984919][ T4687]  ? getname_flags+0x80/0x3b0
[   63.984940][ T4687]  getname_flags+0xae/0x3b0
[   63.984959][ T4687]  user_path_at+0x28/0x130
[   63.985041][ T4687]  __se_sys_mount+0x25b/0x2e0
[   63.985069][ T4687]  ? fput+0x8f/0xc0
[   63.985091][ T4687]  __x64_sys_mount+0x67/0x80
[   63.985153][ T4687]  x64_sys_call+0xd36/0x2fb0
[   63.985304][ T4687]  do_syscall_64+0xd2/0x200
[   63.985319][ T4687]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   63.985342][ T4687]  ? clear_bhb_loop+0x40/0x90
[   63.985395][ T4687]  ? clear_bhb_loop+0x40/0x90
[   63.985414][ T4687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.985432][ T4687] RIP: 0033:0x7fecca61e929
[   63.985463][ T4687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   63.985488][ T4687] RSP: 002b:00007fecc8c87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   63.985504][ T4687] RAX: ffffffffffffffda RBX: 00007fecca845fa0 RCX: 00007fecca61e929
[   63.985519][ T4687] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000
[   63.985535][ T4687] RBP: 00007fecc8c87090 R08: 0000200000000240 R09: 0000000000000000
[   63.985550][ T4687] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001
[   63.985563][ T4687] R13: 0000000000000000 R14: 00007fecca845fa0 R15: 00007ffee5179148
[   63.985582][ T4687]  </TASK>
[   64.408167][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.503930][ T4703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'.
[   64.519479][ T4720] loop4: detected capacity change from 0 to 1024
[   64.531738][ T4720] /dev/loop4: Can't open blockdev
[   64.537999][ T4721] netlink: 'syz.4.348': attribute type 10 has an invalid length.
[   64.554086][ T4721] team0: Port device dummy0 added
[   64.560721][ T4720] netlink: 'syz.4.348': attribute type 10 has an invalid length.
[   64.594160][ T4720] team0: Port device dummy0 removed
[   64.608680][ T4720] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   64.627159][ T4721] loop4: detected capacity change from 0 to 1024
[   64.712581][ T4721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.744670][   T29] kauditd_printk_skb: 307 callbacks suppressed
[   64.744690][   T29] audit: type=1400 audit(1752469656.182:1161): avc:  denied  { mounton } for  pid=4719 comm="syz.4.348" path="/65/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   64.786768][ T4729] hub 2-0:1.0: USB hub found
[   64.790125][   T29] audit: type=1326 audit(1752469656.182:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96abdae929 code=0x7ffc0000
[   64.802358][ T4729] hub 2-0:1.0: 8 ports detected
[   64.814822][   T29] audit: type=1326 audit(1752469656.182:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f96abdae929 code=0x7ffc0000
[   64.843192][   T29] audit: type=1326 audit(1752469656.182:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96abdae929 code=0x7ffc0000
[   64.852129][ T3417] usb usb8-port1: unable to enumerate USB device
[   64.866912][   T29] audit: type=1326 audit(1752469656.182:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f96abdae929 code=0x7ffc0000
[   64.897535][   T29] audit: type=1326 audit(1752469656.182:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96abdae929 code=0x7ffc0000
[   64.897539][ T4434] vhci_hcd: default hub control req: 1100 v0000 i0008 l0
[   64.897906][ T4729] loop0: detected capacity change from 0 to 1024
[   64.921767][   T29] audit: type=1326 audit(1752469656.182:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96abdae929 code=0x7ffc0000
[   64.958972][   T29] audit: type=1326 audit(1752469656.182:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f96abdae929 code=0x7ffc0000
[   64.982804][   T29] audit: type=1326 audit(1752469656.212:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96abdae929 code=0x7ffc0000
[   65.006335][   T29] audit: type=1326 audit(1752469656.212:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96abdae929 code=0x7ffc0000
[   65.156969][ T3305] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz-executor: missing EA_INODE flag
[   65.169865][ T4748] random: crng reseeded on system resumption
[   65.170747][ T3305] EXT4-fs (loop4): Remounting filesystem read-only
[   65.196786][ T4748] hugetlbfs: Unknown parameter 'tid5I[	ˆäÌ$HÒ» FR Ÿã|Ó¼]¡!¾.¬þé/Á$‹<IdÉy?D»V…X�lÅN¯Ø00000000000000000000'
[   65.353040][ T4771] loop2: detected capacity change from 0 to 512
[   65.363815][ T4771] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   65.377659][ T4771] EXT4-fs (loop2): 1 truncate cleaned up
[   65.644347][ T4785] FAULT_INJECTION: forcing a failure.
[   65.644347][ T4785] name failslab, interval 1, probability 0, space 0, times 0
[   65.657075][ T4785] CPU: 1 UID: 0 PID: 4785 Comm: syz.3.365 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   65.657126][ T4785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   65.657138][ T4785] Call Trace:
[   65.657144][ T4785]  <TASK>
[   65.657152][ T4785]  __dump_stack+0x1d/0x30
[   65.657178][ T4785]  dump_stack_lvl+0xe8/0x140
[   65.657199][ T4785]  dump_stack+0x15/0x1b
[   65.657215][ T4785]  should_fail_ex+0x265/0x280
[   65.657387][ T4785]  should_failslab+0x8c/0xb0
[   65.657440][ T4785]  kmem_cache_alloc_lru_noprof+0x55/0x310
[   65.657471][ T4785]  ? __d_alloc+0x3d/0x350
[   65.657524][ T4785]  __d_alloc+0x3d/0x350
[   65.657552][ T4785]  d_alloc_parallel+0x53/0xc40
[   65.657653][ T4785]  ? __rcu_read_unlock+0x4f/0x70
[   65.657678][ T4785]  ? __d_lookup+0x316/0x340
[   65.657720][ T4785]  ? link_path_walk+0x823/0x900
[   65.657799][ T4785]  path_openat+0x6b5/0x2170
[   65.657834][ T4785]  ? __perf_event_task_sched_in+0xa5b/0xac0
[   65.657873][ T4785]  do_filp_open+0x109/0x230
[   65.657944][ T4785]  ? __pfx_kfree_link+0x10/0x10
[   65.657986][ T4785]  do_sys_openat2+0xa6/0x110
[   65.658014][ T4785]  __x64_sys_openat+0xf2/0x120
[   65.658042][ T4785]  x64_sys_call+0x1af/0x2fb0
[   65.658143][ T4785]  do_syscall_64+0xd2/0x200
[   65.658160][ T4785]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   65.658263][ T4785]  ? clear_bhb_loop+0x40/0x90
[   65.658374][ T4785]  ? clear_bhb_loop+0x40/0x90
[   65.658434][ T4785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.658457][ T4785] RIP: 0033:0x7fecca61d290
[   65.658476][ T4785] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[   65.658569][ T4785] RSP: 002b:00007fecc8c44f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[   65.658642][ T4785] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fecca61d290
[   65.658654][ T4785] RDX: 0000000000000002 RSI: 00007fecc8c44fa0 RDI: 00000000ffffff9c
[   65.658665][ T4785] RBP: 00007fecc8c44fa0 R08: 0000000000000000 R09: 0000000000000000
[   65.658680][ T4785] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[   65.658695][ T4785] R13: 0000000000000000 R14: 00007fecca846160 R15: 00007ffee5179148
[   65.658724][ T4785]  </TASK>
[   66.007098][ T4791] loop0: detected capacity change from 0 to 1024
[   66.091265][ T4787] __nla_validate_parse: 10 callbacks suppressed
[   66.091338][ T4787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'.
[   66.190340][ T4815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.376'.
[   66.243569][ T4818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'.
[   66.253384][ T4818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.376'.
[   66.336710][ T4823] netlink: 176 bytes leftover after parsing attributes in process `syz.3.380'.
[   66.558750][ T4840] loop2: detected capacity change from 0 to 2048
[   66.607636][ T4840] lo speed is unknown, defaulting to 1000
[   66.752723][ T3308] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[   66.986940][   T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.066506][   T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.125295][   T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.157090][ T4877] IPv6: Can't replace route, no match found
[   67.205673][   T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.283373][   T51] bridge_slave_1: left allmulticast mode
[   67.289115][   T51] bridge_slave_1: left promiscuous mode
[   67.294971][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.832234][   T51] bridge_slave_0: left allmulticast mode
[   67.837953][   T51] bridge_slave_0: left promiscuous mode
[   67.843730][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.970856][ T4892] loop0: detected capacity change from 0 to 512
[   68.044359][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   68.063283][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   68.083072][   T51] bond0 (unregistering): Released all slaves
[   68.114778][ T4889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'.
[   68.135243][   T51] tipc: Left network mode
[   68.156248][   T51] hsr_slave_0: left promiscuous mode
[   68.163678][ T4904] FAULT_INJECTION: forcing a failure.
[   68.163678][ T4904] name failslab, interval 1, probability 0, space 0, times 0
[   68.176841][ T4904] CPU: 1 UID: 0 PID: 4904 Comm: syz.0.404 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   68.176918][ T4904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   68.177068][ T4904] Call Trace:
[   68.177074][ T4904]  <TASK>
[   68.177082][ T4904]  __dump_stack+0x1d/0x30
[   68.177107][ T4904]  dump_stack_lvl+0xe8/0x140
[   68.177131][ T4904]  dump_stack+0x15/0x1b
[   68.177151][ T4904]  should_fail_ex+0x265/0x280
[   68.177222][ T4904]  should_failslab+0x8c/0xb0
[   68.177249][ T4904]  kmem_cache_alloc_node_noprof+0x57/0x320
[   68.177282][ T4904]  ? __alloc_skb+0x101/0x320
[   68.177313][ T4904]  __alloc_skb+0x101/0x320
[   68.177346][ T4904]  netlink_alloc_large_skb+0xba/0xf0
[   68.177411][ T4904]  netlink_sendmsg+0x3cf/0x6b0
[   68.177430][ T4904]  ? __pfx_netlink_sendmsg+0x10/0x10
[   68.177447][ T4904]  __sock_sendmsg+0x145/0x180
[   68.177491][ T4904]  ____sys_sendmsg+0x31e/0x4e0
[   68.177564][ T4904]  ___sys_sendmsg+0x17b/0x1d0
[   68.177681][ T4904]  __x64_sys_sendmsg+0xd4/0x160
[   68.177722][ T4904]  x64_sys_call+0x2999/0x2fb0
[   68.177756][ T4904]  do_syscall_64+0xd2/0x200
[   68.177822][ T4904]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   68.177854][ T4904]  ? clear_bhb_loop+0x40/0x90
[   68.177881][ T4904]  ? clear_bhb_loop+0x40/0x90
[   68.177908][ T4904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.178005][ T4904] RIP: 0033:0x7f9f962fe929
[   68.178021][ T4904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.178042][ T4904] RSP: 002b:00007f9f94967038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   68.178087][ T4904] RAX: ffffffffffffffda RBX: 00007f9f96525fa0 RCX: 00007f9f962fe929
[   68.178098][ T4904] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[   68.178109][ T4904] RBP: 00007f9f94967090 R08: 0000000000000000 R09: 0000000000000000
[   68.178120][ T4904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   68.178131][ T4904] R13: 0000000000000000 R14: 00007f9f96525fa0 R15: 00007ffe88b44f08
[   68.178149][ T4904]  </TASK>
[   68.178328][   T51] hsr_slave_1: left promiscuous mode
[   68.394622][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.402072][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.412418][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.419862][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.435130][   T51] veth1_macvtap: left promiscuous mode
[   68.440868][   T51] veth0_macvtap: left promiscuous mode
[   68.451903][   T51] veth1_vlan: left promiscuous mode
[   68.457194][   T51] veth0_vlan: left promiscuous mode
[   68.597422][   T51] team0 (unregistering): Port device team_slave_1 removed
[   68.609117][   T51] team0 (unregistering): Port device team_slave_0 removed
[   68.716267][ T4878] lo speed is unknown, defaulting to 1000
[   68.819511][ T4878] chnl_net:caif_netlink_parms(): no params data found
[   68.971019][ T4925] FAULT_INJECTION: forcing a failure.
[   68.971019][ T4925] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   68.984612][ T4925] CPU: 0 UID: 0 PID: 4925 Comm: syz.0.409 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   68.984657][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   68.984734][ T4925] Call Trace:
[   68.984742][ T4925]  <TASK>
[   68.984751][ T4925]  __dump_stack+0x1d/0x30
[   68.984775][ T4925]  dump_stack_lvl+0xe8/0x140
[   68.984863][ T4925]  dump_stack+0x15/0x1b
[   68.984879][ T4925]  should_fail_ex+0x265/0x280
[   68.984912][ T4925]  should_fail+0xb/0x20
[   68.984943][ T4925]  should_fail_usercopy+0x1a/0x20
[   68.984990][ T4925]  _copy_from_user+0x1c/0xb0
[   68.985030][ T4925]  ___sys_sendmsg+0xc1/0x1d0
[   68.985083][ T4925]  __x64_sys_sendmsg+0xd4/0x160
[   68.985122][ T4925]  x64_sys_call+0x2999/0x2fb0
[   68.985144][ T4925]  do_syscall_64+0xd2/0x200
[   68.985247][ T4925]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   68.985325][ T4925]  ? clear_bhb_loop+0x40/0x90
[   68.985345][ T4925]  ? clear_bhb_loop+0x40/0x90
[   68.985366][ T4925]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.985390][ T4925] RIP: 0033:0x7f9f962fe929
[   68.985408][ T4925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.985530][ T4925] RSP: 002b:00007f9f94946038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   68.985558][ T4925] RAX: ffffffffffffffda RBX: 00007f9f96526080 RCX: 00007f9f962fe929
[   68.985573][ T4925] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000006
[   68.985615][ T4925] RBP: 00007f9f94946090 R08: 0000000000000000 R09: 0000000000000000
[   68.985631][ T4925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   68.985647][ T4925] R13: 0000000000000000 R14: 00007f9f96526080 R15: 00007ffe88b44f08
[   68.985670][ T4925]  </TASK>
[   68.988398][ T4929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'.
[   69.176341][ T4929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'.
[   69.185518][ T4929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'.
[   69.214467][ T4878] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.221871][ T4878] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.239574][ T4878] bridge_slave_0: entered allmulticast mode
[   69.246523][ T4878] bridge_slave_0: entered promiscuous mode
[   69.253929][ T4878] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.261094][ T4878] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.278918][ T4878] bridge_slave_1: entered allmulticast mode
[   69.287460][ T4878] bridge_slave_1: entered promiscuous mode
[   69.324319][ T4878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.332273][ T4932] hub 2-0:1.0: USB hub found
[   69.335315][ T4878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.374871][ T4932] hub 2-0:1.0: 8 ports detected
[   69.385091][ T4934] FAULT_INJECTION: forcing a failure.
[   69.385091][ T4934] name failslab, interval 1, probability 0, space 0, times 0
[   69.397967][ T4934] CPU: 1 UID: 0 PID: 4934 Comm: syz.1.412 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   69.397994][ T4934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   69.398008][ T4934] Call Trace:
[   69.398016][ T4934]  <TASK>
[   69.398025][ T4934]  __dump_stack+0x1d/0x30
[   69.398051][ T4934]  dump_stack_lvl+0xe8/0x140
[   69.398075][ T4934]  dump_stack+0x15/0x1b
[   69.398123][ T4934]  should_fail_ex+0x265/0x280
[   69.398161][ T4934]  should_failslab+0x8c/0xb0
[   69.398231][ T4934]  kmem_cache_alloc_noprof+0x50/0x310
[   69.398263][ T4934]  ? alloc_empty_file+0x76/0x200
[   69.398293][ T4934]  alloc_empty_file+0x76/0x200
[   69.398327][ T4934]  alloc_file_pseudo+0xc6/0x160
[   69.398361][ T4934]  __shmem_file_setup+0x1de/0x210
[   69.398400][ T4934]  shmem_file_setup+0x3b/0x50
[   69.398436][ T4934]  __se_sys_memfd_create+0x2c3/0x590
[   69.398512][ T4934]  __x64_sys_memfd_create+0x31/0x40
[   69.398591][ T4934]  x64_sys_call+0x122f/0x2fb0
[   69.398619][ T4934]  do_syscall_64+0xd2/0x200
[   69.398642][ T4934]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   69.398758][ T4934]  ? clear_bhb_loop+0x40/0x90
[   69.398779][ T4934]  ? clear_bhb_loop+0x40/0x90
[   69.398806][ T4934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.398834][ T4934] RIP: 0033:0x7f79e2f0e929
[   69.398853][ T4934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.398936][ T4934] RSP: 002b:00007f79e1576e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   69.398955][ T4934] RAX: ffffffffffffffda RBX: 000000000000050a RCX: 00007f79e2f0e929
[   69.398984][ T4934] RDX: 00007f79e1576ef0 RSI: 0000000000000000 RDI: 00007f79e2f914cc
[   69.398999][ T4934] RBP: 0000200000000940 R08: 00007f79e1576bb7 R09: 00007f79e1576e40
[   69.399076][ T4934] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0
[   69.399089][ T4934] R13: 00007f79e1576ef0 R14: 00007f79e1576eb0 R15: 00002000000008c0
[   69.399114][ T4934]  </TASK>
[   69.399473][ T4878] team0: Port device team_slave_0 added
[   69.613124][ T4878] team0: Port device team_slave_1 added
[   69.654177][ T4935] loop0: detected capacity change from 0 to 1024
[   69.666500][ T4878] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.674153][ T4878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.701661][ T4878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.728328][ T4878] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.735834][ T4878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.762777][ T4878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.778162][   T29] kauditd_printk_skb: 264 callbacks suppressed
[   69.778176][   T29] audit: type=1400 audit(1752469661.212:1435): avc:  denied  { read append } for  pid=4940 comm="syz.3.415" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   69.778733][ T4942] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.784414][   T29] audit: type=1400 audit(1752469661.212:1436): avc:  denied  { open } for  pid=4940 comm="syz.3.415" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   69.847158][ T4939] loop1: detected capacity change from 0 to 512
[   69.871437][ T4939] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   69.894859][ T4878] hsr_slave_0: entered promiscuous mode
[   69.900995][ T4878] hsr_slave_1: entered promiscuous mode
[   69.913653][ T4935] EXT4-fs mount: 9 callbacks suppressed
[   69.913672][ T4935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.935017][ T4939] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.414: invalid block
[   69.948413][ T4878] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   69.958664][ T4878] Cannot create hsr debugfs directory
[   69.966329][ T4939] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.414: invalid indirect mapped block 4294967295 (level 1)
[   69.999629][   T29] audit: type=1400 audit(1752469661.212:1437): avc:  denied  { create } for  pid=4940 comm="syz.3.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   70.019289][   T29] audit: type=1400 audit(1752469661.262:1438): avc:  denied  { write } for  pid=4940 comm="syz.3.415" path="socket:[8133]" dev="sockfs" ino=8133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   70.043113][   T29] audit: type=1400 audit(1752469661.352:1439): avc:  denied  { read write } for  pid=4946 comm="syz.3.416" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   70.067322][   T29] audit: type=1400 audit(1752469661.352:1440): avc:  denied  { open } for  pid=4946 comm="syz.3.416" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   70.091006][   T29] audit: type=1400 audit(1752469661.402:1441): avc:  denied  { ioctl } for  pid=4946 comm="syz.3.416" path="socket:[8148]" dev="sockfs" ino=8148 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   70.115516][   T29] audit: type=1400 audit(1752469661.422:1442): avc:  denied  { bind } for  pid=4946 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   70.135080][   T29] audit: type=1400 audit(1752469661.432:1443): avc:  denied  { create } for  pid=4931 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   70.155440][ T4939] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.414: invalid indirect mapped block 4294967295 (level 1)
[   70.169477][   T29] audit: type=1400 audit(1752469661.492:1444): avc:  denied  { setopt } for  pid=4955 comm="syz.3.417" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   70.193626][ T4939] EXT4-fs (loop1): 2 truncates cleaned up
[   70.199954][ T4939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.254309][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.322287][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.402909][ T4963] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   70.425215][ T4878] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   70.436430][ T4878] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   70.446396][ T4878] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   70.455809][ T4878] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   70.515551][ T4967] netlink: 24 bytes leftover after parsing attributes in process `syz.3.422'.
[   70.522836][ T4982] loop1: detected capacity change from 0 to 1024
[   70.548009][ T4982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.596289][ T4982] pim6reg: entered allmulticast mode
[   70.613637][ T4982] pim6reg: left allmulticast mode
[   70.657026][ T4878] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.706263][ T4878] 8021q: adding VLAN 0 to HW filter on device team0
[   70.721706][  T171] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.728992][  T171] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.747131][ T4998] loop0: detected capacity change from 0 to 512
[   70.759975][   T54] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.767125][   T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.779043][ T4998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.794724][ T4998] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.927790][ T4878] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.941012][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.066575][ T5018] loop0: detected capacity change from 0 to 8192
[   71.171109][ T4878] veth0_vlan: entered promiscuous mode
[   71.184226][ T4878] veth1_vlan: entered promiscuous mode
[   71.212540][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.225185][ T5041] Q±6ã×\b‹¡Y­4��: renamed from lo (while UP)
[   71.236002][ T5040] hub 2-0:1.0: USB hub found
[   71.240779][ T5040] hub 2-0:1.0: 8 ports detected
[   71.245857][ T5041] FAULT_INJECTION: forcing a failure.
[   71.245857][ T5041] name failslab, interval 1, probability 0, space 0, times 0
[   71.259244][ T5041] CPU: 1 UID: 0 PID: 5041 Comm: syz.4.431 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   71.259341][ T5041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   71.259354][ T5041] Call Trace:
[   71.259359][ T5041]  <TASK>
[   71.259368][ T5041]  __dump_stack+0x1d/0x30
[   71.259394][ T5041]  dump_stack_lvl+0xe8/0x140
[   71.259426][ T5041]  dump_stack+0x15/0x1b
[   71.259512][ T5041]  should_fail_ex+0x265/0x280
[   71.259568][ T5041]  should_failslab+0x8c/0xb0
[   71.259590][ T5041]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[   71.259664][ T5041]  ? kstrdup_const+0x3e/0x50
[   71.259685][ T5041]  ? __schedule+0x6a8/0xb30
[   71.259713][ T5041]  kstrdup+0x3e/0xd0
[   71.259733][ T5041]  kstrdup_const+0x3e/0x50
[   71.259846][ T5041]  kernfs_rename_ns+0x22c/0x410
[   71.259874][ T5041]  sysfs_rename_link_ns+0xfc/0x120
[   71.259989][ T5041]  device_rename+0xd2/0x180
[   71.260014][ T5041]  netif_change_name+0x1eb/0x6b0
[   71.260050][ T5041]  dev_change_name+0xc0/0x170
[   71.260117][ T5041]  dev_ifsioc+0x302/0xaa0
[   71.260201][ T5041]  dev_ioctl+0x4a7/0x960
[   71.260225][ T5041]  sock_do_ioctl+0x197/0x220
[   71.260249][ T5041]  sock_ioctl+0x41b/0x610
[   71.260278][ T5041]  ? __pfx_sock_ioctl+0x10/0x10
[   71.260319][ T5041]  __se_sys_ioctl+0xcb/0x140
[   71.260433][ T5041]  __x64_sys_ioctl+0x43/0x50
[   71.260470][ T5041]  x64_sys_call+0x19a8/0x2fb0
[   71.260517][ T5041]  do_syscall_64+0xd2/0x200
[   71.260595][ T5041]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   71.260630][ T5041]  ? clear_bhb_loop+0x40/0x90
[   71.260659][ T5041]  ? clear_bhb_loop+0x40/0x90
[   71.260689][ T5041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.260777][ T5041] RIP: 0033:0x7f96abdae929
[   71.260798][ T5041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   71.260851][ T5041] RSP: 002b:00007f96aa417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   71.260870][ T5041] RAX: ffffffffffffffda RBX: 00007f96abfd5fa0 RCX: 00007f96abdae929
[   71.260883][ T5041] RDX: 0000200000000cc0 RSI: 0000000000008923 RDI: 0000000000000008
[   71.260899][ T5041] RBP: 00007f96aa417090 R08: 0000000000000000 R09: 0000000000000000
[   71.260916][ T5041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   71.260984][ T5041] R13: 0000000000000000 R14: 00007f96abfd5fa0 R15: 00007ffdcdcf4908
[   71.261010][ T5041]  </TASK>
[   71.508502][ T5040] loop3: detected capacity change from 0 to 1024
[   71.521854][ T4878] veth0_macvtap: entered promiscuous mode
[   71.531953][ T5040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.555415][ T4878] veth1_macvtap: entered promiscuous mode
[   71.557388][ T5047] loop4: detected capacity change from 0 to 512
[   71.575400][ T4878] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.584904][ T4878] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.604709][ T4878] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.610175][ T5047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.613508][ T4878] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.635055][ T4878] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.643878][ T4878] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.655973][ T5047] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.667277][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.760740][ T5061] loop3: detected capacity change from 0 to 512
[   71.768515][ T5061] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   71.769484][ T5063] Q±6ã×\b‹¡Y­4��: renamed from lo (while UP)
[   71.810579][ T5061] EXT4-fs error (device loop3): xattr_find_entry:333: inode #15: comm syz.3.437: corrupted xattr entries
[   71.823550][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.827217][ T5067] loop5: detected capacity change from 0 to 128
[   71.840048][ T5061] EXT4-fs (loop3): Remounting filesystem read-only
[   71.846955][ T5061] EXT4-fs (loop3): 1 truncate cleaned up
[   71.853359][ T5061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.890681][ T5074] FAULT_INJECTION: forcing a failure.
[   71.890681][ T5074] name failslab, interval 1, probability 0, space 0, times 0
[   71.903529][ T5074] CPU: 1 UID: 0 PID: 5074 Comm: syz.4.441 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   71.903576][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   71.903591][ T5074] Call Trace:
[   71.903599][ T5074]  <TASK>
[   71.903608][ T5074]  __dump_stack+0x1d/0x30
[   71.903637][ T5074]  dump_stack_lvl+0xe8/0x140
[   71.903660][ T5074]  dump_stack+0x15/0x1b
[   71.903676][ T5074]  should_fail_ex+0x265/0x280
[   71.903763][ T5074]  should_failslab+0x8c/0xb0
[   71.903785][ T5074]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[   71.903818][ T5074]  ? sidtab_sid2str_get+0xa0/0x130
[   71.903840][ T5074]  ? skb_put+0xa9/0xf0
[   71.903916][ T5074]  kmemdup_noprof+0x2b/0x70
[   71.903955][ T5074]  sidtab_sid2str_get+0xa0/0x130
[   71.903977][ T5074]  security_sid_to_context_core+0x1eb/0x2e0
[   71.904076][ T5074]  security_sid_to_context+0x27/0x40
[   71.904112][ T5074]  avc_audit_post_callback+0x9d/0x520
[   71.904147][ T5074]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   71.904182][ T5074]  common_lsm_audit+0x1b8/0x230
[   71.904210][ T5074]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   71.904248][ T5074]  slow_avc_audit+0x104/0x140
[   71.904284][ T5074]  avc_has_perm+0x128/0x150
[   71.904322][ T5074]  selinux_socket_sendmsg+0x175/0x1b0
[   71.904366][ T5074]  security_socket_sendmsg+0x48/0x80
[   71.904398][ T5074]  __sock_sendmsg+0x30/0x180
[   71.904426][ T5074]  ____sys_sendmsg+0x31e/0x4e0
[   71.904487][ T5074]  ___sys_sendmsg+0x17b/0x1d0
[   71.904541][ T5074]  __x64_sys_sendmsg+0xd4/0x160
[   71.904616][ T5074]  x64_sys_call+0x2999/0x2fb0
[   71.904637][ T5074]  do_syscall_64+0xd2/0x200
[   71.904729][ T5074]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   71.904795][ T5074]  ? clear_bhb_loop+0x40/0x90
[   71.904824][ T5074]  ? clear_bhb_loop+0x40/0x90
[   71.904853][ T5074]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.904879][ T5074] RIP: 0033:0x7f96abdae929
[   71.904899][ T5074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   71.904968][ T5074] RSP: 002b:00007f96aa417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   71.905027][ T5074] RAX: ffffffffffffffda RBX: 00007f96abfd5fa0 RCX: 00007f96abdae929
[   71.905044][ T5074] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004
[   71.905058][ T5074] RBP: 00007f96aa417090 R08: 0000000000000000 R09: 0000000000000000
[   71.905070][ T5074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   71.905151][ T5074] R13: 0000000000000000 R14: 00007f96abfd5fa0 R15: 00007ffdcdcf4908
[   71.905178][ T5074]  </TASK>
[   72.219199][ T5078] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   72.316098][ T5087] hub 2-0:1.0: USB hub found
[   72.325519][ T5087] hub 2-0:1.0: 8 ports detected
[   72.345427][ T5088] loop5: detected capacity change from 0 to 1024
[   72.358478][ T5087] loop0: detected capacity change from 0 to 1024
[   72.378002][ T5088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.401943][ T5087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.418161][ T5088] pim6reg: entered allmulticast mode
[   72.424489][ T5088] pim6reg: left allmulticast mode
[   72.486830][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.498332][ T5087] __nla_validate_parse: 1 callbacks suppressed
[   72.498354][ T5087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.444'.
[   72.549874][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.551104][ T5115] FAULT_INJECTION: forcing a failure.
[   72.551104][ T5115] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   72.572620][ T5115] CPU: 0 UID: 0 PID: 5115 Comm: syz.1.452 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   72.572648][ T5115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   72.572663][ T5115] Call Trace:
[   72.572670][ T5115]  <TASK>
[   72.572678][ T5115]  __dump_stack+0x1d/0x30
[   72.572737][ T5115]  dump_stack_lvl+0xe8/0x140
[   72.572759][ T5115]  dump_stack+0x15/0x1b
[   72.572776][ T5115]  should_fail_ex+0x265/0x280
[   72.572813][ T5115]  should_fail+0xb/0x20
[   72.572903][ T5115]  should_fail_usercopy+0x1a/0x20
[   72.573016][ T5115]  _copy_from_iter+0xcf/0xe40
[   72.573066][ T5115]  ? _copy_from_iter+0x16d/0xe40
[   72.573114][ T5115]  copy_page_from_iter+0x178/0x2a0
[   72.573190][ T5115]  skb_copy_datagram_from_iter+0x232/0x490
[   72.573311][ T5115]  tun_get_user+0xa0e/0x2500
[   72.573353][ T5115]  ? ref_tracker_alloc+0x1f2/0x2f0
[   72.573442][ T5115]  ? selinux_file_permission+0x1e4/0x320
[   72.573465][ T5115]  tun_chr_write_iter+0x15e/0x210
[   72.573492][ T5115]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   72.573569][ T5115]  vfs_write+0x49d/0x8e0
[   72.573657][ T5115]  ksys_write+0xda/0x1a0
[   72.573724][ T5115]  __x64_sys_write+0x40/0x50
[   72.573761][ T5115]  x64_sys_call+0x2cdd/0x2fb0
[   72.573783][ T5115]  do_syscall_64+0xd2/0x200
[   72.573877][ T5115]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   72.573906][ T5115]  ? clear_bhb_loop+0x40/0x90
[   72.573926][ T5115]  ? clear_bhb_loop+0x40/0x90
[   72.573952][ T5115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.574016][ T5115] RIP: 0033:0x7f79e2f0e929
[   72.574040][ T5115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   72.574062][ T5115] RSP: 002b:00007f79e1577038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   72.574084][ T5115] RAX: ffffffffffffffda RBX: 00007f79e3135fa0 RCX: 00007f79e2f0e929
[   72.574100][ T5115] RDX: 000000000000fdef RSI: 00002000000005c0 RDI: 0000000000000004
[   72.574115][ T5115] RBP: 00007f79e1577090 R08: 0000000000000000 R09: 0000000000000000
[   72.574182][ T5115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   72.574193][ T5115] R13: 0000000000000000 R14: 00007f79e3135fa0 R15: 00007ffdf8700e88
[   72.574249][ T5115]  </TASK>
[   72.857853][ T5120] loop0: detected capacity change from 0 to 8192
[   73.014394][ T5127] netlink: 'syz.1.455': attribute type 10 has an invalid length.
[   73.026955][ T5127] team0: Port device dummy0 added
[   73.059499][ T5127] netlink: 'syz.1.455': attribute type 10 has an invalid length.
[   73.164882][ T5133] lo speed is unknown, defaulting to 1000
[   73.281369][ T5131] FAULT_INJECTION: forcing a failure.
[   73.281369][ T5131] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   73.294508][ T5131] CPU: 0 UID: 0 PID: 5131 Comm: syz.0.456 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   73.294543][ T5131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   73.294555][ T5131] Call Trace:
[   73.294562][ T5131]  <TASK>
[   73.294570][ T5131]  __dump_stack+0x1d/0x30
[   73.294590][ T5131]  dump_stack_lvl+0xe8/0x140
[   73.294609][ T5131]  dump_stack+0x15/0x1b
[   73.294630][ T5131]  should_fail_ex+0x265/0x280
[   73.294665][ T5131]  should_fail+0xb/0x20
[   73.294729][ T5131]  should_fail_usercopy+0x1a/0x20
[   73.294759][ T5131]  _copy_to_user+0x20/0xa0
[   73.294784][ T5131]  simple_read_from_buffer+0xb5/0x130
[   73.294823][ T5131]  proc_fail_nth_read+0x100/0x140
[   73.294897][ T5131]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   73.294936][ T5131]  vfs_read+0x19d/0x6f0
[   73.294969][ T5131]  ? __rcu_read_unlock+0x4f/0x70
[   73.295055][ T5131]  ? __fget_files+0x184/0x1c0
[   73.295107][ T5131]  ksys_read+0xda/0x1a0
[   73.295186][ T5131]  __x64_sys_read+0x40/0x50
[   73.295216][ T5131]  x64_sys_call+0x2d77/0x2fb0
[   73.295237][ T5131]  do_syscall_64+0xd2/0x200
[   73.295329][ T5131]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   73.295354][ T5131]  ? clear_bhb_loop+0x40/0x90
[   73.295374][ T5131]  ? clear_bhb_loop+0x40/0x90
[   73.295466][ T5131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.295485][ T5131] RIP: 0033:0x7f9f962fd33c
[   73.295501][ T5131] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   73.295523][ T5131] RSP: 002b:00007f9f94967030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   73.295566][ T5131] RAX: ffffffffffffffda RBX: 00007f9f96525fa0 RCX: 00007f9f962fd33c
[   73.295581][ T5131] RDX: 000000000000000f RSI: 00007f9f949670a0 RDI: 0000000000000007
[   73.295596][ T5131] RBP: 00007f9f94967090 R08: 0000000000000000 R09: 0000000000000000
[   73.295659][ T5131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   73.295674][ T5131] R13: 0000000000000000 R14: 00007f9f96525fa0 R15: 00007ffe88b44f08
[   73.295761][ T5131]  </TASK>
[   73.792983][ T5127] team0: Port device dummy0 removed
[   73.822979][ T4878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.840761][ T5127] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   74.014135][ T5149] loop5: detected capacity change from 0 to 1024
[   74.043344][ T5149] EXT4-fs: Ignoring removed bh option
[   74.089387][ T5149] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.361316][ T5168] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.494434][ T4878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.504871][ T5168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'.
[   74.602254][ T5176] hub 2-0:1.0: USB hub found
[   74.607132][ T5176] hub 2-0:1.0: 8 ports detected
[   74.617756][ T5174] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.662902][ T5176] loop3: detected capacity change from 0 to 1024
[   74.708247][ T5176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.808570][ T5184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'.
[   74.870998][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.187971][   T29] kauditd_printk_skb: 148 callbacks suppressed
[   75.187990][   T29] audit: type=1400 audit(1752469666.622:1593): avc:  denied  { mount } for  pid=5192 comm="syz.3.471" name="/" dev="hugetlbfs" ino=10247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[   75.241280][   T29] audit: type=1400 audit(1752469666.672:1594): avc:  denied  { read write } for  pid=5192 comm="syz.3.471" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   75.241335][ T5193] random: crng reseeded on system resumption
[   75.292249][   T29] audit: type=1400 audit(1752469666.672:1595): avc:  denied  { ioctl open } for  pid=5192 comm="syz.3.471" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   75.306984][ T5202] FAULT_INJECTION: forcing a failure.
[   75.306984][ T5202] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   75.316327][   T29] audit: type=1326 audit(1752469666.712:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5194 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f962fe929 code=0x7ffc0000
[   75.329605][ T5202] CPU: 0 UID: 0 PID: 5202 Comm: syz.1.477 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   75.329659][ T5202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   75.329673][ T5202] Call Trace:
[   75.329683][ T5202]  <TASK>
[   75.329695][ T5202]  __dump_stack+0x1d/0x30
[   75.329724][ T5202]  dump_stack_lvl+0xe8/0x140
[   75.329827][ T5202]  dump_stack+0x15/0x1b
[   75.329851][ T5202]  should_fail_ex+0x265/0x280
[   75.329892][ T5202]  should_fail+0xb/0x20
[   75.329927][ T5202]  should_fail_usercopy+0x1a/0x20
[   75.329996][ T5202]  _copy_to_user+0x20/0xa0
[   75.330065][ T5202]  simple_read_from_buffer+0xb5/0x130
[   75.330107][ T5202]  proc_fail_nth_read+0x100/0x140
[   75.330159][ T5202]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   75.330203][ T5202]  vfs_read+0x19d/0x6f0
[   75.330241][ T5202]  ? __rcu_read_unlock+0x4f/0x70
[   75.330272][ T5202]  ? __fget_files+0x184/0x1c0
[   75.330337][ T5202]  ksys_read+0xda/0x1a0
[   75.330378][ T5202]  __x64_sys_read+0x40/0x50
[   75.330454][ T5202]  x64_sys_call+0x2d77/0x2fb0
[   75.330485][ T5202]  do_syscall_64+0xd2/0x200
[   75.330508][ T5202]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   75.330592][ T5202]  ? clear_bhb_loop+0x40/0x90
[   75.330666][ T5202]  ? clear_bhb_loop+0x40/0x90
[   75.330695][ T5202]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.330723][ T5202] RIP: 0033:0x7f79e2f0d33c
[   75.330757][ T5202] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   75.330782][ T5202] RSP: 002b:00007f79e1577030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   75.330814][ T5202] RAX: ffffffffffffffda RBX: 00007f79e3135fa0 RCX: 00007f79e2f0d33c
[   75.330857][ T5202] RDX: 000000000000000f RSI: 00007f79e15770a0 RDI: 0000000000000004
[   75.330874][ T5202] RBP: 00007f79e1577090 R08: 0000000000000000 R09: 0000000000000000
[   75.330891][ T5202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   75.330907][ T5202] R13: 0000000000000000 R14: 00007f79e3135fa0 R15: 00007ffdf8700e88
[   75.330931][ T5202]  </TASK>
[   75.560936][   T29] audit: type=1326 audit(1752469666.712:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5194 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f962fe929 code=0x7ffc0000
[   75.584345][   T29] audit: type=1326 audit(1752469666.712:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5194 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f962fe929 code=0x7ffc0000
[   75.607904][   T29] audit: type=1326 audit(1752469666.722:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5194 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f962fe929 code=0x7ffc0000
[   75.615388][ T5208] loop1: detected capacity change from 0 to 128
[   75.631685][   T29] audit: type=1326 audit(1752469666.722:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5194 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f962fe929 code=0x7ffc0000
[   75.661551][   T29] audit: type=1326 audit(1752469666.722:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5194 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f962fe929 code=0x7ffc0000
[   75.685281][   T29] audit: type=1326 audit(1752469666.722:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5194 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f962fe929 code=0x7ffc0000
[   75.693348][ T5208] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   75.724426][ T5208] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   75.761417][ T5208] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[   76.318360][ T5227] FAULT_INJECTION: forcing a failure.
[   76.318360][ T5227] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   76.332532][ T5227] CPU: 0 UID: 0 PID: 5227 Comm: syz.4.485 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   76.332568][ T5227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   76.332585][ T5227] Call Trace:
[   76.332592][ T5227]  <TASK>
[   76.332602][ T5227]  __dump_stack+0x1d/0x30
[   76.332627][ T5227]  dump_stack_lvl+0xe8/0x140
[   76.332682][ T5227]  dump_stack+0x15/0x1b
[   76.332702][ T5227]  should_fail_ex+0x265/0x280
[   76.332741][ T5227]  should_fail_alloc_page+0xf2/0x100
[   76.332772][ T5227]  __alloc_frozen_pages_noprof+0xff/0x360
[   76.332884][ T5227]  alloc_pages_mpol+0xb3/0x250
[   76.332977][ T5227]  vma_alloc_folio_noprof+0x1aa/0x300
[   76.333008][ T5227]  handle_mm_fault+0xec2/0x2be0
[   76.333034][ T5227]  ? __rcu_read_unlock+0x4f/0x70
[   76.333074][ T5227]  do_user_addr_fault+0x3fe/0x1090
[   76.333140][ T5227]  exc_page_fault+0x62/0xa0
[   76.333172][ T5227]  asm_exc_page_fault+0x26/0x30
[   76.333190][ T5227] RIP: 0010:rep_movs_alternative+0x4a/0x90
[   76.333256][ T5227] Code: f1 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 0f f1 01 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[   76.333309][ T5227] RSP: 0018:ffffc90000e07d50 EFLAGS: 00050206
[   76.333328][ T5227] RAX: ffff8881195dec18 RBX: 0000000000001000 RCX: 0000000000000240
[   76.333343][ T5227] RDX: 0000000000000000 RSI: ffff88811871edc0 RDI: 0000200000005000
[   76.333355][ T5227] RBP: ffff88811871e000 R08: 00000000000003be R09: 0000000000000000
[   76.333367][ T5227] R10: 000188811871e000 R11: 000188811871efff R12: 0000200000005240
[   76.333383][ T5227] R13: 00007ffffffff000 R14: 0000200000004240 R15: ffff88811871e000
[   76.333407][ T5227]  _copy_to_user+0x7c/0xa0
[   76.333465][ T5227]  pagemap_read+0x379/0x5e0
[   76.333507][ T5227]  ? __pfx_pagemap_read+0x10/0x10
[   76.333545][ T5227]  vfs_read+0x19d/0x6f0
[   76.333637][ T5227]  ? __rcu_read_unlock+0x4f/0x70
[   76.333657][ T5227]  ? __fget_files+0x184/0x1c0
[   76.333759][ T5227]  __x64_sys_pread64+0xfd/0x150
[   76.333802][ T5227]  x64_sys_call+0x296d/0x2fb0
[   76.333829][ T5227]  do_syscall_64+0xd2/0x200
[   76.333920][ T5227]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   76.333960][ T5227]  ? clear_bhb_loop+0x40/0x90
[   76.333987][ T5227]  ? clear_bhb_loop+0x40/0x90
[   76.334059][ T5227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.334148][ T5227] RIP: 0033:0x7f96abdae929
[   76.334164][ T5227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   76.334186][ T5227] RSP: 002b:00007f96aa417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[   76.334214][ T5227] RAX: ffffffffffffffda RBX: 00007f96abfd5fa0 RCX: 00007f96abdae929
[   76.334230][ T5227] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000004
[   76.334246][ T5227] RBP: 00007f96aa417090 R08: 0000000000000000 R09: 0000000000000000
[   76.334261][ T5227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   76.334277][ T5227] R13: 0000000000000000 R14: 00007f96abfd5fa0 R15: 00007ffdcdcf4908
[   76.334326][ T5227]  </TASK>
[   76.677617][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   76.782507][ T5233] SELinux: failed to load policy
[   76.894400][ T5239] random: crng reseeded on system resumption
[   76.934696][ T5242] loop4: detected capacity change from 0 to 128
[   76.964056][ T5242] syz.4.491: attempt to access beyond end of device
[   76.964056][ T5242] loop4: rw=2049, sector=129, nr_sectors = 1 limit=128
[   76.977534][ T5242] Buffer I/O error on dev loop4, logical block 129, lost async page write
[   76.995935][ T5174] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.011911][ T5242] syz.4.491: attempt to access beyond end of device
[   77.011911][ T5242] loop4: rw=2049, sector=130, nr_sectors = 1 limit=128
[   77.025605][ T5242] Buffer I/O error on dev loop4, logical block 130, lost async page write
[   77.034870][ T5242] syz.4.491: attempt to access beyond end of device
[   77.034870][ T5242] loop4: rw=2049, sector=139, nr_sectors = 1 limit=128
[   77.048452][ T5242] Buffer I/O error on dev loop4, logical block 139, lost async page write
[   77.058802][ T5242] syz.4.491: attempt to access beyond end of device
[   77.058802][ T5242] loop4: rw=2049, sector=140, nr_sectors = 1 limit=128
[   77.072270][ T5242] Buffer I/O error on dev loop4, logical block 140, lost async page write
[   77.087535][ T5242] syz.4.491: attempt to access beyond end of device
[   77.087535][ T5242] loop4: rw=2049, sector=141, nr_sectors = 1 limit=128
[   77.101333][ T5242] Buffer I/O error on dev loop4, logical block 141, lost async page write
[   77.114191][ T5242] syz.4.491: attempt to access beyond end of device
[   77.114191][ T5242] loop4: rw=2049, sector=142, nr_sectors = 1 limit=128
[   77.127823][ T5242] Buffer I/O error on dev loop4, logical block 142, lost async page write
[   77.136978][ T5242] syz.4.491: attempt to access beyond end of device
[   77.136978][ T5242] loop4: rw=2049, sector=143, nr_sectors = 1 limit=128
[   77.150717][ T5242] Buffer I/O error on dev loop4, logical block 143, lost async page write
[   77.161054][ T5174] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.173877][ T5242] syz.4.491: attempt to access beyond end of device
[   77.173877][ T5242] loop4: rw=2049, sector=144, nr_sectors = 1 limit=128
[   77.187399][ T5242] Buffer I/O error on dev loop4, logical block 144, lost async page write
[   77.196514][ T5242] syz.4.491: attempt to access beyond end of device
[   77.196514][ T5242] loop4: rw=2049, sector=147, nr_sectors = 1 limit=128
[   77.210323][ T5242] Buffer I/O error on dev loop4, logical block 147, lost async page write
[   77.219451][ T5242] syz.4.491: attempt to access beyond end of device
[   77.219451][ T5242] loop4: rw=2049, sector=148, nr_sectors = 1 limit=128
[   77.233316][ T5242] Buffer I/O error on dev loop4, logical block 148, lost async page write
[   77.246069][ T5174] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.261626][ T5250] 8021q: VLANs not supported on ip6gre0
[   77.328711][ T5174] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.328803][ T5260] ALSA: seq fatal error: cannot create timer (-22)
[   77.341351][ T5174] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.405452][ T5174] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.453760][ T5174] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.935471][ T5263] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   78.049704][ T5265] loop1: detected capacity change from 0 to 1024
[   78.064980][ T5265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.081291][ T5265] pim6reg: entered allmulticast mode
[   78.083176][ T5269] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   78.089589][ T5265] pim6reg: left allmulticast mode
[   78.130111][ T5273] loop4: detected capacity change from 0 to 128
[   78.137260][ T5273] EXT4-fs: Ignoring removed nobh option
[   78.146925][ T5273] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   78.159394][ T5273] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   78.159411][ T5272] loop3: detected capacity change from 0 to 128
[   78.161788][ T5272] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   78.188679][ T5272] ext4 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   78.226130][ T5277] loop0: detected capacity change from 0 to 1024
[   78.234731][ T5273] loop4: detected capacity change from 128 to 0
[   78.241348][    C1] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0
[   78.250878][ T5278] EXT4-fs error (device loop4): __ext4_find_entry:1615: inode #2: comm syz.4.501: reading directory lblock 0
[   78.253961][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   78.262933][ T5278] EXT4-fs (loop4): I/O error while writing superblock
[   78.280514][ T5277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.301920][ T5277] pim6reg: entered allmulticast mode
[   78.309893][ T5277] pim6reg: left allmulticast mode
[   78.316947][ T3305] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block
[   78.345211][   T37] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4915: inode #12: block 36: comm kworker/u8:2: unable to read itable block
[   78.359497][   T37] EXT4-fs (loop4): I/O error while writing superblock
[   78.373145][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   78.387710][ T3305] EXT4-fs (loop4): I/O error while writing superblock
[   78.434558][ T5283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'.
[   78.446139][ T5283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'.
[   78.456615][ T5283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'.
[   78.467597][ T5283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'.
[   78.549816][ T5297] team0 (unregistering): Port device team_slave_0 removed
[   78.559641][ T5297] team0 (unregistering): Port device team_slave_1 removed
[   78.582661][ T5287] lo speed is unknown, defaulting to 1000
[   78.650338][ T5287] chnl_net:caif_netlink_parms(): no params data found
[   78.677482][ T5305] hub 2-0:1.0: USB hub found
[   78.682931][ T5305] hub 2-0:1.0: 8 ports detected
[   78.697716][ T5305] loop3: detected capacity change from 0 to 1024
[   78.698000][ T5287] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.711635][ T5287] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.715430][ T5305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.719113][ T5287] bridge_slave_0: entered allmulticast mode
[   78.738229][ T5287] bridge_slave_0: entered promiscuous mode
[   78.745286][ T5287] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.752709][ T5287] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.761291][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'.
[   78.762142][ T5287] bridge_slave_1: entered allmulticast mode
[   78.780067][ T5287] bridge_slave_1: entered promiscuous mode
[   78.803566][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.816842][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.817010][ T5287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.836924][ T5287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.859292][ T5287] team0: Port device team_slave_0 added
[   78.866468][ T5287] team0: Port device team_slave_1 added
[   78.895153][ T5319] random: crng reseeded on system resumption
[   78.909043][ T5287] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.916332][ T5287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.943004][ T5287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.954820][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.955135][ T5287] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.971390][ T5287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.998190][ T5287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.035778][ T5287] hsr_slave_0: entered promiscuous mode
[   79.042991][ T5287] hsr_slave_1: entered promiscuous mode
[   79.050220][ T5287] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.058657][ T5287] Cannot create hsr debugfs directory
[   79.115830][ T5334] loop0: detected capacity change from 0 to 128
[   79.123393][ T5334] EXT4-fs: Ignoring removed nobh option
[   79.134177][ T5334] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   79.154100][ T5334] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   79.172253][ T5337] bond0: entered promiscuous mode
[   79.177699][ T5337] bond_slave_0: entered promiscuous mode
[   79.183549][ T5337] bond_slave_1: entered promiscuous mode
[   79.193979][ T5337] batadv0: entered promiscuous mode
[   79.200161][ T5337] 8021q: adding VLAN 0 to HW filter on device hsr1
[   79.208972][ T5337] bond0: left promiscuous mode
[   79.213881][ T5337] bond_slave_0: left promiscuous mode
[   79.219487][ T5337] bond_slave_1: left promiscuous mode
[   79.229001][ T5337] batadv0: left promiscuous mode
[   79.251874][ T5334] loop0: detected capacity change from 128 to 0
[   79.258389][    C1] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0
[   79.267252][ T5287] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   79.268021][ T5340] EXT4-fs error (device loop0): __ext4_find_entry:1615: inode #2: comm syz.0.516: reading directory lblock 0
[   79.288862][ T5329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'.
[   79.292014][ T5340] EXT4-fs (loop0): I/O error while writing superblock
[   79.300867][ T5287] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   79.318194][ T5329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'.
[   79.329915][ T5287] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   79.339205][ T5329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'.
[   79.351416][ T5287] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   79.358220][ T3310] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block
[   79.383904][ T5329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'.
[   79.399034][ T5345] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   79.408032][   T37] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4915: inode #12: block 36: comm kworker/u8:2: unable to read itable block
[   79.425318][   T37] EXT4-fs (loop0): I/O error while writing superblock
[   79.437918][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   79.448197][ T3310] EXT4-fs (loop0): I/O error while writing superblock
[   79.482405][ T5287] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.497181][ T5287] 8021q: adding VLAN 0 to HW filter on device team0
[   79.508021][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.515392][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.526819][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.534157][ T3321] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.541890][ T5355] loop3: detected capacity change from 0 to 1024
[   79.545695][ T5354] hub 2-0:1.0: USB hub found
[   79.553641][ T5354] hub 2-0:1.0: 8 ports detected
[   79.557849][ T5355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.571286][ T5354] loop1: detected capacity change from 0 to 1024
[   79.589395][ T5355] pim6reg: entered allmulticast mode
[   79.597550][ T5354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.607994][ T5355] pim6reg: left allmulticast mode
[   79.644993][ T5355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.520'.
[   79.655645][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.715380][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.739310][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[   79.745876][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   79.763699][ T5287] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.785899][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.840518][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.856889][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.928222][ T5366] lo speed is unknown, defaulting to 1000
[   79.967163][   T12] bridge_slave_1: left allmulticast mode
[   79.972936][   T12] bridge_slave_1: left promiscuous mode
[   79.973265][ T5391] netlink: 'syz.1.526': attribute type 1 has an invalid length.
[   79.978864][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.994857][   T12] bridge_slave_0: left allmulticast mode
[   80.000853][   T12] bridge_slave_0: left promiscuous mode
[   80.006889][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.086552][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.096565][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.106441][   T12] bond0 (unregistering): Released all slaves
[   80.115162][   T12] bond1 (unregistering): (slave batadv1): Releasing active interface
[   80.125615][   T12] bond1 (unregistering): (slave batadv2): Releasing active interface
[   80.135970][   T12] bond1 (unregistering): Released all slaves
[   80.150017][ T5391] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.170668][ T5394] bond1: (slave bridge1): making interface the new active one
[   80.179849][ T5394] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   80.202189][   T12] tipc: Left network mode
[   80.206820][ T5287] veth0_vlan: entered promiscuous mode
[   80.214804][ T5287] veth1_vlan: entered promiscuous mode
[   80.238002][   T12] hsr_slave_0: left promiscuous mode
[   80.245970][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.255735][   T12] hsr_slave_1: left promiscuous mode
[   80.270144][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.278313][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.287921][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.296066][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.309421][   T12] veth1_macvtap: left promiscuous mode
[   80.316901][   T12] veth0_macvtap: left promiscuous mode
[   80.324882][   T12] veth1_vlan: left promiscuous mode
[   80.330833][   T12] veth0_vlan: left promiscuous mode
[   80.388345][   T29] kauditd_printk_skb: 251 callbacks suppressed
[   80.388368][   T29] audit: type=1400 audit(1752469671.822:1854): avc:  denied  { append } for  pid=5410 comm="syz.1.532" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   80.422213][   T12] team0 (unregistering): Port device team_slave_1 removed
[   80.436154][   T12] team0 (unregistering): Port device team_slave_0 removed
[   80.452353][   T29] audit: type=1400 audit(1752469671.882:1855): avc:  denied  { create } for  pid=5410 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   80.478460][   T12] team0 (unregistering): Port device dummy0 removed
[   80.503901][   T29] audit: type=1400 audit(1752469671.942:1856): avc:  denied  { ioctl } for  pid=5410 comm="syz.1.532" path="socket:[11300]" dev="sockfs" ino=11300 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   80.553294][ T5287] veth0_macvtap: entered promiscuous mode
[   80.559962][ T3418] lo speed is unknown, defaulting to 1000
[   80.565951][ T3418] infiniband syz1: ib_query_port failed (-19)
[   80.572901][ T5287] veth1_macvtap: entered promiscuous mode
[   80.587916][ T5287] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.599360][ T5366] chnl_net:caif_netlink_parms(): no params data found
[   80.611667][ T5287] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.638018][ T5287] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.647256][ T5287] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.656456][ T5287] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.665417][ T5287] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.698057][ T5366] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.705837][ T5366] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.718364][ T5366] bridge_slave_0: entered allmulticast mode
[   80.725605][ T5366] bridge_slave_0: entered promiscuous mode
[   80.727842][   T29] audit: type=1400 audit(1752469672.162:1857): avc:  denied  { read append } for  pid=5425 comm="syz.1.534" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   80.732798][ T5366] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.756623][   T29] audit: type=1400 audit(1752469672.162:1858): avc:  denied  { open } for  pid=5425 comm="syz.1.534" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   80.763915][ T5366] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.797426][ T5366] bridge_slave_1: entered allmulticast mode
[   80.804404][ T5366] bridge_slave_1: entered promiscuous mode
[   80.831013][ T5426] program syz.1.534 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   80.846748][ T5366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.852307][   T29] audit: type=1326 audit(1752469672.282:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5429 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecca61e929 code=0x7ffc0000
[   80.858057][ T5430] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   80.879164][   T29] audit: type=1326 audit(1752469672.282:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5429 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fecca61e929 code=0x7ffc0000
[   80.910401][   T29] audit: type=1326 audit(1752469672.282:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5429 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecca61e929 code=0x7ffc0000
[   80.934107][   T29] audit: type=1326 audit(1752469672.282:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5429 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fecca61e929 code=0x7ffc0000
[   80.957660][   T29] audit: type=1326 audit(1752469672.282:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5429 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecca61e929 code=0x7ffc0000
[   80.983077][ T5366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.012083][ T5432] loop3: detected capacity change from 0 to 1024
[   81.020950][ T5366] team0: Port device team_slave_0 added
[   81.036024][ T5366] team0: Port device team_slave_1 added
[   81.050329][ T5440] FAULT_INJECTION: forcing a failure.
[   81.050329][ T5440] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   81.063545][ T5440] CPU: 1 UID: 0 PID: 5440 Comm: syz.1.537 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   81.063578][ T5440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   81.063593][ T5440] Call Trace:
[   81.063601][ T5440]  <TASK>
[   81.063610][ T5440]  __dump_stack+0x1d/0x30
[   81.063673][ T5440]  dump_stack_lvl+0xe8/0x140
[   81.063717][ T5440]  dump_stack+0x15/0x1b
[   81.063741][ T5440]  should_fail_ex+0x265/0x280
[   81.063776][ T5440]  should_fail+0xb/0x20
[   81.063805][ T5440]  should_fail_usercopy+0x1a/0x20
[   81.063857][ T5440]  _copy_from_user+0x1c/0xb0
[   81.063878][ T5440]  __sys_bpf+0x178/0x790
[   81.063945][ T5440]  __x64_sys_bpf+0x41/0x50
[   81.064050][ T5440]  x64_sys_call+0x2478/0x2fb0
[   81.064133][ T5440]  do_syscall_64+0xd2/0x200
[   81.064150][ T5440]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   81.064191][ T5440]  ? clear_bhb_loop+0x40/0x90
[   81.064216][ T5440]  ? clear_bhb_loop+0x40/0x90
[   81.064245][ T5440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.064388][ T5440] RIP: 0033:0x7f79e2f0e929
[   81.064404][ T5440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.064426][ T5440] RSP: 002b:00007f79e1577038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   81.064445][ T5440] RAX: ffffffffffffffda RBX: 00007f79e3135fa0 RCX: 00007f79e2f0e929
[   81.064457][ T5440] RDX: 0000000000000028 RSI: 00002000000005c0 RDI: 0000000000000012
[   81.064490][ T5440] RBP: 00007f79e1577090 R08: 0000000000000000 R09: 0000000000000000
[   81.064502][ T5440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   81.064517][ T5440] R13: 0000000000000000 R14: 00007f79e3135fa0 R15: 00007ffdf8700e88
[   81.064539][ T5440]  </TASK>
[   81.065569][ T5432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.264524][ T5366] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.271588][ T5366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.298143][ T5366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.325764][ T5366] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.332903][ T5366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.358930][ T5366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.379557][ T5432] pim6reg: entered allmulticast mode
[   81.388604][ T5442] pim6reg: left allmulticast mode
[   81.482971][ T5366] hsr_slave_0: entered promiscuous mode
[   81.485533][ T5366] hsr_slave_1: entered promiscuous mode
[   81.529121][ T5450] random: crng reseeded on system resumption
[   81.723905][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.783897][ T5366] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   81.800680][ T5366] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   81.820158][ T5366] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   81.836412][ T5366] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   81.871267][ T5466] ALSA: seq fatal error: cannot create timer (-22)
[   82.006043][ T5471] hub 2-0:1.0: USB hub found
[   82.010912][ T5471] hub 2-0:1.0: 8 ports detected
[   82.026191][ T5471] loop5: detected capacity change from 0 to 1024
[   82.043849][ T5471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.120154][    C1] vcan0: j1939_xtp_rx_dat: no rx connection found
[   82.126680][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.134529][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.142527][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.150377][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.158277][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.166159][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.174273][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.182173][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.190249][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.198224][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.206122][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.214015][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.221892][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.229751][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.237645][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.245518][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.247375][ T5479] loop6: detected capacity change from 0 to 512
[   82.253471][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.267557][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.275527][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.276768][ T5479] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   82.283386][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.283430][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.303287][ T5479] EXT4-fs error (device loop6): xattr_find_entry:333: inode #15: comm syz.6.548: corrupted xattr entries
[   82.309063][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.322364][ T5479] EXT4-fs (loop6): Remounting filesystem read-only
[   82.328680][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.335726][ T5479] EXT4-fs (loop6): 1 truncate cleaned up
[   82.343072][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.343119][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.349549][ T5479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.356680][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.384576][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.392437][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.400408][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.408299][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.416272][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.424139][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.432100][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.439937][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.447849][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.455797][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.463752][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.471584][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.479463][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.487417][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.495285][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.503287][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.511116][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.518989][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.526867][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.534719][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.542609][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.550530][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.558431][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.566297][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.574300][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.582206][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.590068][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.597946][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.605829][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.613700][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.621578][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.629493][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.637896][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.645961][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.653831][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.661770][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.669842][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.677868][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.685796][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.693769][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.701833][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.709748][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.717641][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.725529][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.733489][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.741340][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.749222][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.757174][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.765153][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.773035][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.780884][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.788829][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.796779][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.804894][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.812799][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   82.820630][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   82.861761][ T5489] loop3: detected capacity change from 0 to 512
[   82.871823][ T5489] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   82.899634][ T5366] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.917747][ T5366] 8021q: adding VLAN 0 to HW filter on device team0
[   82.942967][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.950075][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.962773][ T4878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.005804][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.013083][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.100605][ T5287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.219942][ T5504] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   83.226284][ T5366] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.349675][ T5526] loop6: detected capacity change from 0 to 1024
[   83.386094][ T5526] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.411402][ T5526] pim6reg: entered allmulticast mode
[   83.423338][ T5366] veth0_vlan: entered promiscuous mode
[   83.429475][ T5526] pim6reg: left allmulticast mode
[   83.446339][ T5366] veth1_vlan: entered promiscuous mode
[   83.457025][ T5533] __nla_validate_parse: 15 callbacks suppressed
[   83.457116][ T5533] netlink: 516 bytes leftover after parsing attributes in process `syz.3.559'.
[   83.487992][ T5534] netlink: 24 bytes leftover after parsing attributes in process `syz.6.553'.
[   83.543641][ T5366] veth0_macvtap: entered promiscuous mode
[   83.560247][ T5536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.556'.
[   83.582873][ T5366] veth1_macvtap: entered promiscuous mode
[   83.616514][ T5366] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.629222][ T5514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.556'.
[   83.644367][ T5366] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.656049][ T5514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.556'.
[   83.667060][ T5366] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.676366][ T5366] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.685604][ T5366] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.694636][ T5366] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.709059][ T5514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.556'.
[   83.872502][ T5549] veth0_to_team: entered promiscuous mode
[   83.878330][ T5549] veth0_to_team: entered allmulticast mode
[   84.039863][ T5287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.158608][ T5561] netlink: 'syz.6.567': attribute type 3 has an invalid length.
[   84.166660][ T5561] netlink: 1104 bytes leftover after parsing attributes in process `syz.6.567'.
[   84.193691][ T5563] FAULT_INJECTION: forcing a failure.
[   84.193691][ T5563] name failslab, interval 1, probability 0, space 0, times 0
[   84.206654][ T5563] CPU: 1 UID: 0 PID: 5563 Comm: syz.1.568 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   84.206709][ T5563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   84.206725][ T5563] Call Trace:
[   84.206734][ T5563]  <TASK>
[   84.206745][ T5563]  __dump_stack+0x1d/0x30
[   84.206797][ T5563]  dump_stack_lvl+0xe8/0x140
[   84.206821][ T5563]  dump_stack+0x15/0x1b
[   84.206843][ T5563]  should_fail_ex+0x265/0x280
[   84.206886][ T5563]  should_failslab+0x8c/0xb0
[   84.206914][ T5563]  kmem_cache_alloc_noprof+0x50/0x310
[   84.207026][ T5563]  ? skb_clone+0x151/0x1f0
[   84.207050][ T5563]  skb_clone+0x151/0x1f0
[   84.207072][ T5563]  __netlink_deliver_tap+0x2c9/0x500
[   84.207186][ T5563]  netlink_unicast+0x653/0x680
[   84.207226][ T5563]  netlink_sendmsg+0x58b/0x6b0
[   84.207252][ T5563]  ? __pfx_netlink_sendmsg+0x10/0x10
[   84.207309][ T5563]  __sock_sendmsg+0x145/0x180
[   84.207335][ T5563]  ____sys_sendmsg+0x31e/0x4e0
[   84.207379][ T5563]  ___sys_sendmsg+0x17b/0x1d0
[   84.207436][ T5563]  __x64_sys_sendmsg+0xd4/0x160
[   84.207538][ T5563]  x64_sys_call+0x2999/0x2fb0
[   84.207579][ T5563]  do_syscall_64+0xd2/0x200
[   84.207601][ T5563]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   84.207627][ T5563]  ? clear_bhb_loop+0x40/0x90
[   84.207654][ T5563]  ? clear_bhb_loop+0x40/0x90
[   84.207716][ T5563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.207741][ T5563] RIP: 0033:0x7f79e2f0e929
[   84.207766][ T5563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   84.207785][ T5563] RSP: 002b:00007f79e1577038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   84.207806][ T5563] RAX: ffffffffffffffda RBX: 00007f79e3135fa0 RCX: 00007f79e2f0e929
[   84.207820][ T5563] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005
[   84.207835][ T5563] RBP: 00007f79e1577090 R08: 0000000000000000 R09: 0000000000000000
[   84.207851][ T5563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   84.207863][ T5563] R13: 0000000000000000 R14: 00007f79e3135fa0 R15: 00007ffdf8700e88
[   84.207880][ T5563]  </TASK>
[   84.228617][ T5563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'.
[   84.487570][ T5570] hub 2-0:1.0: USB hub found
[   84.497336][ T5570] hub 2-0:1.0: 8 ports detected
[   84.518047][ T5570] loop6: detected capacity change from 0 to 1024
[   84.553970][ T5570] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.648261][ T5582] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   84.713828][ T5585] netlink: 4 bytes leftover after parsing attributes in process `syz.6.569'.
[   84.837593][ T5588] loop7: detected capacity change from 0 to 1024
[   84.864137][ T5287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.879949][ T5588] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.899921][ T5578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.572'.
[   84.924160][ T5588] pim6reg: entered allmulticast mode
[   84.930265][ T5588] pim6reg: left allmulticast mode
[   85.067245][ T5612] ALSA: seq fatal error: cannot create timer (-22)
[   85.127593][ T5617] loop3: detected capacity change from 0 to 1024
[   85.145980][ T5617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.314452][ T5626] hub 2-0:1.0: USB hub found
[   85.319436][ T5626] hub 2-0:1.0: 8 ports detected
[   85.330770][ T5626] loop5: detected capacity change from 0 to 1024
[   85.344582][ T5626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.391517][ T4878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.460490][   T29] kauditd_printk_skb: 139 callbacks suppressed
[   85.460510][   T29] audit: type=1400 audit(1752469676.892:2003): avc:  denied  { read write } for  pid=5633 comm="syz.5.589" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   85.461338][ T5634] 9pnet_fd: Insufficient options for proto=fd
[   85.467323][   T29] audit: type=1400 audit(1752469676.892:2004): avc:  denied  { open } for  pid=5633 comm="syz.5.589" path="/dev/usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   85.541049][ T5366] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.577118][ T5638] program syz.5.589 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   85.789412][ T5654] random: crng reseeded on system resumption
[   85.891360][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.907889][ T5656] random: crng reseeded on system resumption
[   85.919778][ T5660] hub 2-0:1.0: USB hub found
[   85.924866][ T5660] hub 2-0:1.0: 8 ports detected
[   85.938230][ T5660] loop7: detected capacity change from 0 to 1024
[   85.947312][ T5667] SELinux:  Context Ü is not valid (left unmapped).
[   85.957888][ T5670] ALSA: seq fatal error: cannot create timer (-22)
[   85.965635][ T5667] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   85.972168][ T5667] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   86.025302][   T29] audit: type=1400 audit(1752469677.442:2005): avc:  denied  { create } for  pid=5666 comm="syz.3.602" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=DC
[   86.046845][   T29] audit: type=1400 audit(1752469677.442:2006): avc:  denied  { associate } for  pid=5666 comm="syz.3.602" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=DC
[   86.055281][ T5678] 9pnet_fd: Insufficient options for proto=fd
[   86.069717][   T29] audit: type=1400 audit(1752469677.442:2007): avc:  denied  { read write open } for  pid=5666 comm="syz.3.602" path="/146/bus" dev="tmpfs" ino=801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=DC
[   86.107137][   T29] audit: type=1400 audit(1752469677.542:2008): avc:  denied  { write } for  pid=5666 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   86.143143][ T5660] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.231899][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   86.239813][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   86.258495][   T29] audit: type=1400 audit(1752469677.692:2009): avc:  denied  { setopt } for  pid=5680 comm="syz.1.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   86.389504][   T29] audit: type=1400 audit(1752469677.822:2010): avc:  denied  { unlink } for  pid=3312 comm="syz-executor" name="bus" dev="tmpfs" ino=801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=DC
[   86.497931][ T5697] FAULT_INJECTION: forcing a failure.
[   86.497931][ T5697] name failslab, interval 1, probability 0, space 0, times 0
[   86.510758][ T5697] CPU: 1 UID: 0 PID: 5697 Comm: syz.3.609 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   86.510845][ T5697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   86.510862][ T5697] Call Trace:
[   86.510869][ T5697]  <TASK>
[   86.510879][ T5697]  __dump_stack+0x1d/0x30
[   86.510904][ T5697]  dump_stack_lvl+0xe8/0x140
[   86.510929][ T5697]  dump_stack+0x15/0x1b
[   86.510950][ T5697]  should_fail_ex+0x265/0x280
[   86.511063][ T5697]  should_failslab+0x8c/0xb0
[   86.511084][ T5697]  __kmalloc_noprof+0xa5/0x3e0
[   86.511110][ T5697]  ? sock_kmalloc+0x85/0xc0
[   86.511143][ T5697]  sock_kmalloc+0x85/0xc0
[   86.511214][ T5697]  ipv6_renew_options+0x1fb/0x5f0
[   86.511253][ T5697]  ipv6_set_opt_hdr+0x13b/0x600
[   86.511284][ T5697]  do_ipv6_setsockopt+0x121b/0x22e0
[   86.511315][ T5697]  ? kstrtoull+0x111/0x140
[   86.511398][ T5697]  ? __rcu_read_unlock+0x4f/0x70
[   86.511426][ T5697]  ? avc_has_perm_noaudit+0x1b1/0x200
[   86.511505][ T5697]  ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0
[   86.511555][ T5697]  ipv6_setsockopt+0x59/0x130
[   86.511609][ T5697]  rawv6_setsockopt+0x1d2/0x420
[   86.511636][ T5697]  sock_common_setsockopt+0x69/0x80
[   86.511667][ T5697]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   86.511714][ T5697]  __sys_setsockopt+0x184/0x200
[   86.511817][ T5697]  __x64_sys_setsockopt+0x64/0x80
[   86.511857][ T5697]  x64_sys_call+0x2bd5/0x2fb0
[   86.511900][ T5697]  do_syscall_64+0xd2/0x200
[   86.511949][ T5697]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   86.511974][ T5697]  ? clear_bhb_loop+0x40/0x90
[   86.511994][ T5697]  ? clear_bhb_loop+0x40/0x90
[   86.512023][ T5697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.512050][ T5697] RIP: 0033:0x7fecca61e929
[   86.512126][ T5697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   86.512145][ T5697] RSP: 002b:00007fecc8c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   86.512169][ T5697] RAX: ffffffffffffffda RBX: 00007fecca845fa0 RCX: 00007fecca61e929
[   86.512184][ T5697] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000005
[   86.512199][ T5697] RBP: 00007fecc8c87090 R08: 0000000000000018 R09: 0000000000000000
[   86.512240][ T5697] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000001
[   86.512323][ T5697] R13: 0000000000000000 R14: 00007fecca845fa0 R15: 00007ffee5179148
[   86.512342][ T5697]  </TASK>
[   86.821900][   T29] audit: type=1326 audit(1752469678.232:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.1.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e2f0e929 code=0x7ffc0000
[   86.845522][   T29] audit: type=1326 audit(1752469678.232:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.1.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79e2f0e929 code=0x7ffc0000
[   86.930414][ T5701] random: crng reseeded on system resumption
[   86.950120][ T5711] random: crng reseeded on system resumption
[   87.112433][ T5720] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   87.149195][ T5366] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.179015][ T5721] bridge0: port 3(macvlan0) entered blocking state
[   87.185987][ T5721] bridge0: port 3(macvlan0) entered disabled state
[   87.193865][ T5721] macvlan0: entered allmulticast mode
[   87.199308][ T5721] bridge0: entered allmulticast mode
[   87.205719][ T5721] macvlan0: left allmulticast mode
[   87.211066][ T5721] bridge0: left allmulticast mode
[   87.257955][ T5723] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   87.272352][ T5728] loop1: detected capacity change from 0 to 1024
[   87.284505][ T5723] SELinux: failed to load policy
[   87.310049][ T5728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.325863][ T5728] pim6reg: entered allmulticast mode
[   87.332095][ T5728] pim6reg: left allmulticast mode
[   87.398570][ T5747] pimreg: entered allmulticast mode
[   87.412295][ T5748] ALSA: seq fatal error: cannot create timer (-22)
[   87.435202][ T5749] program syz.3.623 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   87.944371][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.215971][ T3825] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0
[   88.223773][ T3825] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0
[   88.231484][ T3825] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0
[   88.234821][ T5763] random: crng reseeded on system resumption
[   88.244092][ T5759] hub 2-0:1.0: USB hub found
[   88.249835][ T5759] hub 2-0:1.0: 8 ports detected
[   88.273023][ T5759] loop1: detected capacity change from 0 to 1024
[   88.283961][ T3825] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1
[   88.304849][ T5759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.402211][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.485626][ T5786] netlink: 'syz.1.638': attribute type 4 has an invalid length.
[   88.485626][ T5791] netlink: 'syz.1.638': attribute type 4 has an invalid length.
[   88.485770][ T5791] ==================================================================
[   88.493373][ T5791] BUG: KCSAN: data-race in data_push_tail / vsnprintf
[   88.493420][ T5791] 
[   88.493428][ T5791] write to 0xffffffff88e3aea5 of 18 bytes by task 5786 on cpu 0:
[   88.493448][ T5791]  vsnprintf+0x2ce/0x890
[   88.493476][ T5791]  vscnprintf+0x41/0x90
[   88.493504][ T5791]  printk_sprint+0x30/0x2d0
[   88.493526][ T5791]  vprintk_store+0x599/0x860
[   88.493548][ T5791]  vprintk_emit+0x178/0x650
[   88.493571][ T5791]  vprintk_default+0x26/0x30
[   88.493594][ T5791]  vprintk+0x1d/0x30
[   88.493630][ T5791]  _printk+0x79/0xa0
[   88.493665][ T5791]  __nla_validate_parse+0x1227/0x1d00
[   88.493707][ T5791]  __nla_parse+0x40/0x60
[   88.493746][ T5791]  rtnl_setlink+0xd2/0x420
[   88.493771][ T5791]  rtnetlink_rcv_msg+0x5fe/0x6d0
[   88.493795][ T5791]  netlink_rcv_skb+0x120/0x220
[   88.493828][ T5791]  rtnetlink_rcv+0x1c/0x30
[   88.493848][ T5791]  netlink_unicast+0x5a5/0x680
[   88.493883][ T5791]  netlink_sendmsg+0x58b/0x6b0
[   88.493904][ T5791]  __sock_sendmsg+0x145/0x180
[   88.493934][ T5791]  sock_write_iter+0x165/0x1b0
[   88.493959][ T5791]  do_iter_readv_writev+0x41e/0x4c0
[   88.494001][ T5791]  vfs_writev+0x2df/0x8b0
[   88.494027][ T5791]  do_writev+0xe7/0x210
[   88.494047][ T5791]  __x64_sys_writev+0x45/0x50
[   88.494067][ T5791]  x64_sys_call+0x2006/0x2fb0
[   88.494096][ T5791]  do_syscall_64+0xd2/0x200
[   88.494120][ T5791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.494148][ T5791] 
[   88.494158][ T5791] read to 0xffffffff88e3aeb0 of 8 bytes by task 5791 on cpu 1:
[   88.494180][ T5791]  data_push_tail+0xfd/0x420
[   88.494218][ T5791]  data_alloc+0xbf/0x2b0
[   88.494255][ T5791]  prb_reserve+0x808/0xaf0
[   88.494290][ T5791]  vprintk_store+0x56d/0x860
[   88.494308][ T5791]  vprintk_emit+0x178/0x650
[   88.494326][ T5791]  vprintk_default+0x26/0x30
[   88.494345][ T5791]  vprintk+0x1d/0x30
[   88.494375][ T5791]  _printk+0x79/0xa0
[   88.494409][ T5791]  __nla_validate_parse+0x1227/0x1d00
[   88.494449][ T5791]  __nla_parse+0x40/0x60
[   88.494483][ T5791]  rtnl_setlink+0xd2/0x420
[   88.494508][ T5791]  rtnetlink_rcv_msg+0x5fe/0x6d0
[   88.494534][ T5791]  netlink_rcv_skb+0x120/0x220
[   88.494575][ T5791]  rtnetlink_rcv+0x1c/0x30
[   88.494600][ T5791]  netlink_unicast+0x5a5/0x680
[   88.494636][ T5791]  netlink_sendmsg+0x58b/0x6b0
[   88.494659][ T5791]  __sock_sendmsg+0x145/0x180
[   88.494687][ T5791]  sock_write_iter+0x165/0x1b0
[   88.494711][ T5791]  do_iter_readv_writev+0x41e/0x4c0
[   88.494744][ T5791]  vfs_writev+0x2df/0x8b0
[   88.494768][ T5791]  do_writev+0xe7/0x210
[   88.494794][ T5791]  __x64_sys_writev+0x45/0x50
[   88.494816][ T5791]  x64_sys_call+0x2006/0x2fb0
[   88.494844][ T5791]  do_syscall_64+0xd2/0x200
[   88.494867][ T5791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.494891][ T5791] 
[   88.494897][ T5791] value changed: 0x00000000ffffe290 -> 0x6820342065707974
[   88.494909][ T5791] 
[   88.494915][ T5791] Reported by Kernel Concurrency Sanitizer on:
[   88.494929][ T5791] CPU: 1 UID: 0 PID: 5791 Comm: syz.1.638 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) 
[   88.494958][ T5791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   88.494972][ T5791] ==================================================================
[   88.537270][ T5786] netlink: 'syz.1.638': attribute type 4 has an invalid length.
[   88.601475][ T5794] ALSA: seq fatal error: cannot create timer (-22)
[   88.647977][ T5795] __nla_validate_parse: 25 callbacks suppressed
[   88.647998][ T5795] netlink: 8 bytes leftover after parsing attributes in process `syz.7.636'.
[   88.687406][ T5792] netlink: 'syz.1.638': attribute type 4 has an invalid length.