last executing test programs:

22m5.698054165s ago: executing program 32 (id=23):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, r0, 0x0, 0xa002a0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_pts(0xffffffffffffffff, 0x8182)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000000500010006000000050004000000000009"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0xffff0000, 0x0, 0x10000082}, 0x80)

22m4.246324603s ago: executing program 33 (id=34):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a183000000000000000005"], 0x78}}, 0x0)

22m3.7907363s ago: executing program 34 (id=39):
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000000c0)={0x1, 0x0, [{0x8, 0x0, 0x2, [0x10, 0x4, 0x3, 0xfff, 0x3ff, 0x4, 0x401, 0x7]}]})
r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0xa0000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48)
syz_open_dev$sg(&(0x7f0000000500), 0x9, 0x200000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[])
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={<r3=>0x0, @dev, @broadcast}, &(0x7f0000000080)=0xc)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x7, [@var={0xe, 0x0, 0x0, 0xe, 0x1, 0x1}, @fwd={0x7}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xd, 0x2}, {0x4, 0x4}, {0x0, 0x1003}, {0xc, 0x1}, {0xc, 0x3}, {0xc, 0x3}, {0x80000002, 0x4}]}]}, {0x0, [0x2e, 0x30, 0x30, 0x61, 0x0]}}, &(0x7f0000000140)=""/19, 0x7f, 0x13, 0x1, 0xe, 0x10000}, 0x28)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, @fallback=0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd4f, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x9}, 0x18)

21m59.438008264s ago: executing program 35 (id=76):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0)
writev(r3, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaebfd2607ee", 0x26}, {&(0x7f0000000100)="b700"/12, 0xc}, {&(0x7f0000000300)="37a81d359c993d7b1cdca6c41e", 0xd}, {&(0x7f0000000280)="3de496b26cb156fc17de651bb0059979575c10b71057fb", 0x17}], 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6)
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500001c0000000000119078000000000000000000004e20004890780300000000000000ead43f1ebd755fcaa13bae2a229fb3bd16e4c459c1f46a6c391aa94c42fca7ead0e17e59f1bea955800221ccbbdadfc61a4a9a2d00ed4c44"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x4092}, 0x18)
r8 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000180)='cpu==0||!')
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000480), 0x840, 0x0)
ioctl$EVIOCGABS3F(r9, 0x8018457f, &(0x7f0000000540)=""/177)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES64=r2], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1808bd5d6b00ff00006f01040006110000000000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
syz_emit_ethernet(0x52, &(0x7f0000000600)={@local, @random="7b719c3217c1", @void, {@mpls_uc={0x8847, {[{0x7, 0x0, 0x1}], @generic="4ad9123e0134de383220456f6459db64b33a0468caa226478c210bca1e3d2f7ef2433b4c5af1b9a60ac90551b3627f187ed5c08ece1549561b27087c6804ace6"}}}}, 0x0)

21m55.490274004s ago: executing program 36 (id=113):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x80)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)={0x20, 0x17, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004005}, 0x4000000)

21m55.407089611s ago: executing program 37 (id=115):
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffa}, 0x50)

21m53.778760673s ago: executing program 38 (id=126):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0})

21m40.922181848s ago: executing program 39 (id=245):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20)

21m32.489342023s ago: executing program 40 (id=339):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4c840}, 0x800)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$getregset(0x4205, r0, 0x202, 0x0)

21m31.54156782s ago: executing program 41 (id=352):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1e000000010000000100000097d6000080000000", @ANYRES32, @ANYBLOB="ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
pwritev2(r1, &(0x7f0000001100)=[{&(0x7f0000000340)="77dea376d927864f74856d75287d06ba95192e42ead9ef1a5b1f7526a9af758ab312c204aa857a7a1a30d05d8f67af5023b1cab605da0d3ebdd06b084a6238c3554f41f2f55614131a4e001ccb4c3838f447522cd50ea7ea9dc1b46ce7488ac61d93dc73f56d96", 0x67}, {&(0x7f0000000540)="b59c0e3db2f47f0de91724e5488d18d6d28451cd77467761088e9eacc50ebcddda6a2bde2f9f2813445c4d63671db9896f7dbf3ca9ae46aec582d8871dc184d1dc99e18013c0fc3abd88051875f0d22bfbc9669675f6f3045807ad522d879f1a94409faf69d864836b00c639ebdd1abe9f84b99d9890b7da677e34b187744b722de93de841d5b0aba7bd5f912997f920bdb0d1b9222ea289ce5403d568276781c312f5a3f9bda08bb0032dfd1b3275e3ba35", 0xb2}, {&(0x7f0000000c80)="d872af9a9c1540ff6c776fac4e9c744828a2225590f5363f08424ccb8021683669ea40a8c36ce591b45e2a311228170b37fa320a454693d5ea3a4b804aa363656088b1a5c48b06318cafeb09146291f8dc24d9c764c7e1eb4c79f74e1d62ca9066eb90f65094b6a75340d9d14b6477e11e229fe1619e600901361d150696be2e256ab87326c41c0b661f12c70dd80af1dd85fecd106bb02309c0304c5ffbdf82140834c0352981fa74ea5078d6e9baf2b68d23e3a3894b3cb461de074dfe07087d9f6910f9d3cb5353204e516666635190f80c466df4fcb0bb8971de", 0xdc}, {&(0x7f0000000400)="ecb1261dc8ad45a561dc571bcba3c2909357", 0x12}, {&(0x7f0000000d80)="b6a2b9a63121689a83e62e11a063e4675547a6e530b895af6573edc672fa8a2e5ff4b18be879e17c117b178fdc30af4af8d753f4ec6cc5cbcbc7afa7ac16a0e4e45281b88f9bb8703d03c97e83159ea8e36dcce24a6fa7c0a9c8aa1efa79b6f38f9e7a218dac2411b2c3d81bacefe7de71e9415c057c4954dd85121ab418b546fb2aa2f4", 0x84}, {&(0x7f0000000e40)="e21cad9d3b366d6391d6b8b273244f363ae152cff6236cbce548356b07a828d47faf5663d10f706172c37e01bd90bc75cc5a9daed40122f14be41a710f124abdd5c9a461016a1895b1824f4e59f9923c49332c2da73190e4c55d5d3be80cdd90cb10a31012983ebe8e1ff512be348c650ac0d00cd2e8ece3a5cec6bb96340753e431393887875c14283208cf41454cb6a8393350077524cee52e8e338300ee581a69020b7e7d4d610962117c", 0xac}, {&(0x7f0000000b80)="a6cab9fabdec4088d86da98900eaee0c29759d85eadd4a35e5f5e8b9bba91f115eca66e0fc871f0fc6a1d6e188ff582d2add9427a58391aa145308cf9ee799fc5873ad270c01bdce4477d3a829499e5147c97645bb7c05f4c079", 0x5a}, {&(0x7f0000000f80)="56539055be0b34b8d4356977a9d86a8d9dad70d081dd45b82f7fd41181704f66f8b69331e8e1404e3ff6e938c639a4694d36880a932f252d15c0921841e09ac2c54fec1c083941867f230afaf74fe2594f9016a742e0f15b5212e9040b8a7a69a1081fa49ea41b95ed97960ccef9cf191b7e65d9c5069f5220da1cac18ce4fc12f8085802aceeb2cef14ab40b7b27e4584a3235303a6403bcda6de34c7b9f9e186a44e40be80cc539c778a94cffe5fc137af4838f6c3cce66f135d", 0xbb}, {&(0x7f0000001040)="4eeadc4209d7cd382d1941996cba9b98a15fecca87abe2b194f19dea04761be97dc7b9b7eddd8f5082ed187d1cd87448ba5a86607a786aefc5b6e8316d193d4f269c15b6631c139125ed6793a6d9a4cb34984bf10b0092c1d5b33cead4125b16a44dd80d543179498864b3a936c7a020eb71f3a5dba5e4acba5cfb2eddc8a9af7b016eca80dce8184240e22d75d9146c828f28e9fbcf38b5d77cbdec879cd0af02567e9ec7518995afe87ebecfce4c40f68111", 0xb3}], 0x9, 0x16a, 0x800, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000c00)=ANY=[@ANYBLOB="6400000002070103000000000000000002000007240007800800024000000003080001400000000408cb23060f491eef482888beb02b82133d8a3e8408000240000000000c0006400000000000000c00024000000000000000060c0006400000000080de0100"/112], 0x64}, 0x1, 0x0, 0x0, 0x440c0}, 0x4040804)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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")

21m29.038041863s ago: executing program 42 (id=377):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES32, @ANYRESOCT, @ANYRES16], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000060000850000000700000018110000a800b07e170100a86f934b8e966abce3b5fec294bb69de", @ANYRES32=r0, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0)
io_uring_setup(0x4e72, &(0x7f0000004bc0)={0x0, 0x3c1d, 0x20, 0x2, 0x3a8})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xd}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10)
sync_file_range(0xffffffffffffffff, 0x2, 0x8, 0x3)

21m27.049954605s ago: executing program 43 (id=389):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x800000000000}, 0x18)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={[0x2]}, 0x8)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

21m26.510010689s ago: executing program 44 (id=391):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x100)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000440)={{{@in6}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_pgetevents(0x0, 0x0, 0x3, &(0x7f0000000200)=[{}, {}, {}], &(0x7f00000002c0), &(0x7f0000000400)={&(0x7f00000003c0)={[0x2]}, 0x8})

21m18.492163831s ago: executing program 45 (id=472):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001b00)="6786e2123562ccbee9ec664324266af4eadbef3482a9045875adf5b27e308af9752860fe2d08df42ed74168be506f7f96e4bdb6c", 0x34}, {&(0x7f0000001d00)="df0d8d30c4a22b80d557eb3c5c89952628cd7be71355dc0b4d72bcc694f6da3475e756c22611c66dc46c458da2670ca2dc7d00d055183c1c3e94c91f93ecf9c10b32f76f057fa93554fd3b6c03b4e466f7c736fdb9319bbefd3c53a7629febfad58460470005b2910f368695ee0255349ebbc1fc0a594503fae9c9eadd2625", 0x7f}, {&(0x7f0000001b40)='Ga', 0x2}, {&(0x7f0000001d80)="599e8fa39365f890a1bd5b265100df39c04d28d0bd2ccf6cb92f3f6780b519b11901fe21fdf4053255c699455ad9af9b37fd2344a1d21b82ddcca7bcc1ac37363eb988bd1383685d622662c76d1920fdeb0570142217b98772858735ac73eb280ed924e2d2df5f1bafa5f8781f08b7659e7f770a14802d5e5631607b5bb42079ef8a47d87f3befae83628bb16716203a05c2269fdd3cc1038e192603", 0x9c}], 0x4, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001b80)="b82e52d2289d174b279e0e24909b43617f4fc2c73141899b634cf4c891f795861d8e8bf2df98cb7673cd67dbcac1528a805ecd8829abd282bbc28a1e104eb4c733ebe324a22dd32ee670c021d4eeb9b8555db099489a6e0e47009db2541528cea87e2fc6cc1bc0c540b2582cf0cca42ba8307dea048914955dca36f661d128d3801752539320cfcc87287ef42bc570a3623fc401026156374040a0c62851822257865e438dcbc79b2c54b39b35c36f89fda424f73951897cc6f23e9e9c9eac1fc1d69a64d4323afb55b7decbdc66ff73c0dc099aedfb077a02355425", 0xdc}], 0x1}}], 0x2, 0x2004c840)
close(r0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0xffc8}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=ANY=[@ANYRES8=0x0], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]})
getcwd(&(0x7f00000000c0)=""/127, 0x7f)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r6 = fcntl$dupfd(r4, 0x0, r0)
readv(r6, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/181, 0xb5}, {0x0}], 0x2)
ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, &(0x7f00000000c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r7, 0x11, 0x40, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
eventfd(0x9)

21m17.309693857s ago: executing program 46 (id=480):
syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @random="0332b2aebdc5", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x6c, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, @local}}}}, 0x0)

21m11.420742705s ago: executing program 47 (id=541):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000500)={0x2, 0xfc, 0x27f})

21m8.429608948s ago: executing program 4 (id=589):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18)
syz_open_dev$evdev(&(0x7f0000000500), 0x2, 0x4002)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
lsm_set_self_attr(0x69, 0x0, 0x42, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c001}, 0x4004110)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0)
dup2(r5, r6)

21m8.300750519s ago: executing program 4 (id=590):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

21m8.086035796s ago: executing program 4 (id=592):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x13, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5}, [@exit, @generic={0xf3, 0xf, 0x4, 0x80, 0x3}, @call={0x85, 0x0, 0x0, 0xb7}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x51e}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

21m7.963721646s ago: executing program 4 (id=595):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})

21m7.763551362s ago: executing program 4 (id=599):
r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfffffffffffffffb, 0x80000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000003c0)=@urb_type_bulk={0x3, {0x6, 0x1}, 0x8, 0x1, &(0x7f00000002c0)="2d18c2692421f42670e14d2df67aedabb62511f06f48e721da81f81d631428ad14fcd37e92eb672a24ce4f5eeb38532b0828c5d9486cd382e5aa082021992151fb55e4ac98e4c83cfc4bd70885f9201305417fb79967c45abe243c77a3fa05b00a91eeeec784fac8fd2998e2f7f16aa0391926ae40a1b315bc5f53299d94a539d83a90fa", 0x84, 0x9, 0x8, 0x2, 0x9, 0x8, &(0x7f0000000380)="533e3c3f74a03c3bee138546d30d9da187092a039d73ff715c2f1bdb67ecbd7c6e18e6"})
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000c8f0789fe1106e905e80d2199707d2dd33acd9e4ae5c879474942fc052e8f0b179d51e0b3dab65ed0972aa62885f4b69adacb9b9e4327ae748fd863753a314515ddd72f727cfeabe9e5bcfe6986297fc701f7bbbe1836b746c74a01b4523547967ed6f7b2252b3329aeaf12ab37d25480adc75f7336edc1a2ba6d2f8c2f907ff7d3c6a1bd336ab22a521de54c10ad7d2d1740f85674d688794942dccefb416da55e4d451501ee3eb16e17ad5ab8e5b2707bc4a1d17fd0fca6e72beabcd8ca2", @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000ffa200000000000007020000f8ffffffb703000008000000b704000000000037d37561000300000095000000000000001264377dca4d3c0399eb2719333f5d788eee85e017d6478f1a11fbca875e8fa47305551ab10685ded15218b9d187c27df61e12cd75a66f1d11993236d8f632e7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x1c, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r4}, 0x10)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2000000004000000020000000000000001020000", @ANYRES32, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00d41c7300000000000000000000000000f30000"], 0x50)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0xc015)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

21m7.685813019s ago: executing program 48 (id=601):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r0, 0x5607, 0x3)

21m7.294943441s ago: executing program 4 (id=605):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000080"], 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x20000004)

21m7.250336614s ago: executing program 49 (id=605):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000080"], 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x20000004)

20m6.195642196s ago: executing program 3 (id=1779):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x10000000000006}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = io_uring_setup(0x4f04, &(0x7f00000002c0)={0x0, 0x48c7, 0x400, 0x0, 0xffffffff})
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00"/260], 0x138)
close_range(r0, 0xffffffffffffffff, 0x0)

20m5.993247492s ago: executing program 3 (id=1780):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x400, &(0x7f00000001c0)={[{@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@nombcache}, {@i_version}, {@barrier}, {@block_validity}, {@sysvgroups}]}, 0xdf, 0x4b8, &(0x7f0000000e40)="$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")
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0)
dup2(r2, r1)
setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmmsg(r1, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200040d1)

20m5.758052851s ago: executing program 3 (id=1783):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32], 0x17)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r0}, 0x4)
socket$pppoe(0x18, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x180ce5a, &(0x7f0000000000)={[{@errors_remount}, {@journal_path={'journal_path', 0x3d, './file1'}}], [{@obj_role={'obj_role', 0x3d, '\')'}}, {@appraise}, {@fowner_gt}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x66, 0x66, 0x35, 0x63, 0x62, 0x35, 0x37], 0x2d, [0x35, 0x65, 0x30, 0x36], 0x2d, [0x63, 0xdf, 0xd809a66a8a5e4fb9, 0x34], 0x2d, [0x34, 0xc, 0x32, 0x33], 0x2d, [0x39, 0x34, 0x61, 0x34, 0x31, 0x32, 0x62, 0x65]}}}, {@seclabel}, {@audit}, {@fsmagic={'fsmagic', 0x3d, 0x1000}}]}, 0x22, 0x63f, &(0x7f0000000d80)="$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")

20m5.691776676s ago: executing program 3 (id=1784):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES8=r0], 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x26, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2404c0d0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x5c})
r5 = socket$packet(0x11, 0x2, 0x300)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040), 0xff, 0x240, &(0x7f00000002c0)="$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")
r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r8}, 0x18)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000e00)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}]})
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r9}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
io_pgetevents(0x0, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={[0x7]}, 0x8})
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x2, 0x6, 0xfffff034}, {0x6, 0x99, 0xff, 0x2}]}, 0x10)
sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x40040)
r10 = syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_REMOVE(r11, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="ff2c9668e99d3185ae7ec7dd79ce4c000000", @ANYRES16=r12, @ANYBLOB="010028bd7000fedbdf25090000000800040003000000050005006700000008000400f8ffffff0800040000080000080003000700000008000200070000000500050004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8808)

20m5.27325267s ago: executing program 3 (id=1797):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x804)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000000000000000000100090000000000030006006c0000000200000000000000000000000000800002000100000000000002060b00000000030005000000000002000000000000000000000000000000010018"], 0x60}, 0x1, 0x7}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$tipc(r0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ff90000000000000100000850000007b00000095"], &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='io_uring_create\x00', r2, 0x0, 0x39c4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000012c0)='io_uring_create\x00'}, 0x18)
syz_io_uring_setup(0x1113, &(0x7f0000000280)={0x0, 0xb44a, 0x0, 0x0, 0x21e}, &(0x7f0000000000), &(0x7f0000000040))

20m3.859887825s ago: executing program 3 (id=1811):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close(0xffffffffffffffff)
semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0x8001}, {0x3, 0x9, 0x400}], 0x178, 0x0)

20m3.832263327s ago: executing program 50 (id=1811):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close(0xffffffffffffffff)
semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0x8001}, {0x3, 0x9, 0x400}], 0x178, 0x0)

18m39.330876014s ago: executing program 2 (id=3927):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9)
mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000005200010070bd7000ffdbdf251c00000014000100fc0200000000000000000000000000005bf3d67e089cf95928c4cc2140b0e3eaacae879e99a1acac27c603aed79d63f6bc43a3f647bf02ee16a14e85ddffe68e10abfd29559e8b13102b51bda2ab1057809d8c0a2e16439e763bfde25fce37db6e69ec949d75dd951ffa2d3c340d8656ab0a720444796c42add6c205d1140b77c2c934d918fb8c246cffc55479becc6c83dcbd3450ac397c546ab204c18d2efd0f9e4b7e0e271e7f6a2e8b2e8d6bac250233403d7a0da8dd32b3322dc38482ae09d2cbd388467ce82474ce8508fae61f1ed1527efd0bb7"], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000100000000110000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000020000"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0xd0060, &(0x7f0000000340)=ANY=[@ANYBLOB='gid='])
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r8}, 0x10)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x12, r6, 0xfffff000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10})
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0xd, 0xb, 0x1)
pipe2$9p(&(0x7f00000000c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x20010, &(0x7f0000000680)=ANY=[@ANYBLOB="616e7e3d66642c7266646e6f3d0000bf8f6b6e1bdd04f290223ea077e27b05ebec2408194d92212fa87af7b446ef41593b468579dbb9b10cd80fede2d4dcc079dd105dc180d5cdb8fffa80bacee27957af6af5fb44f4a20f0ab1b281fef530bb7aa2b067e823417629769fa8260c86bb2b878d3acc1e589099e4880b7cbd93bdba7fb025ef2063d7aa071ff0798a314526a30c583dab98a6fda0f8eb231d5843d3ae363ff0e02c62642d490e60908d256f964afdb1632753e399", @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',version=9p2000,\x00'])

18m39.070480915s ago: executing program 2 (id=3931):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1, 0xfffffffd}}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r3}, 0x18)
close(r0)

18m38.964607953s ago: executing program 2 (id=3933):
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x2, 0x0, 0x0, 0x1000, {[@generic={0x22, 0x2}, @md5sig={0x13, 0x12, "2313a3101166d6c856214c013c019043"}, @generic={0x13, 0x2}]}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0xc4)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x85)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x12d7498, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x84022, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r4 = mq_open(&(0x7f0000000b40)='\aP\xdf\x80\xfeL\x007\xe8e\xda{`\x9e\xcd\xf1^{\xeb>P\xf1<@\x00\xba\x87\xd0\x0eB\x00\xf2\x02bw\xdeN\x02E\xa2\xe52}\x1e\"B1\xa3\x8a\x0e\x916\x00H=\xf2\t\x89Ej\x1a\x97\t5V\xca\xf0\xee-\xbf$f9~\x0f_\xe6\xc6\x19\x00X*\xc9v\xe5U\xe7z\x9b\xa9\x8b\xa6n\x14b\xfc\xff\xf1\xd4K/V\x1b\x10vZ\x8e\x1f\x95\xcf', 0x42, 0x25, &(0x7f0000000900)={0x1, 0x30a3, 0x2, 0xfffffffffffff220})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_page_free\x00'}, 0x15)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300), 0x3, 0x42f, &(0x7f0000000940)="$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")
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYRES16=r0, @ANYBLOB="472280b7962fe1d410b33f70e72251374dc015618ae95a916318ac49b7bed556bc456e771c731be1d71b2284711f4f8af962cfda4b80107fca7f0f6c8b1f25a890e4585ba97f0de4fceddec40b5dfc621cf15149a0fc75959e7d5f730a96a8f23ab52046890714c0794d12d976370abb0cbda0a4e9c276fa282e7a4c955fefb8f88edcbde39a285d105f75128eb6f0b5934c137cea303ff639db8aa42710468d2f9dbbb173b07faea6a699168460e0c8c999b25ecbe07ef9264b34a63d28aab7f6f7025f202863ab50b4440095dacf80d5e67e94d21785a7bd3d8f26fff2a09b004ad0c6f0b6af9288a69e2172825d6588d53ed9", @ANYRESOCT=r4], 0xdc}, 0x1, 0x0, 0x0, 0x9eace7d64fee541}, 0x804)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

18m38.781225338s ago: executing program 2 (id=3936):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000500), 0x1, 0x4f8, &(0x7f0000001900)="$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")
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x64, 0x183000, 0x23456})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_UNLOCK(r3, 0xc)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800))
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000880))
r5 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0)
setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000200)=0x5, 0x4)
stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940))
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$getregset(0x4204, r6, 0x2, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20})
r7 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000780)=0xc)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="340000001800010000000000010000000200000008000000040000001800088014000a8008dd0300ac1414bb08007100c0021600a84db3d79b7f98ef62262d5563f01d81897c9733de612b73d6382365eedb8fa35ec2b1e1ba8d5f4466cd825cc470e6818a3507e721bbb569f11dcbd72b25bcc0f9d290026934273e5eb7ae36c65776662158eb6a98c2101dada4064c8cadb9279e6dcdaba6c6a3dd7b2efa8d793a9e2afd7c1e"], 0x34}}, 0x4040801)
getresgid(&(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40))
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004540)={{{@in, @in6=@dev}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000004640)=0xe8)
getegid()
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)

18m38.307820577s ago: executing program 2 (id=3945):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x8, r3}, 0x38)

18m37.814117077s ago: executing program 2 (id=3956):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b98", 0xffe}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8010}, 0x0)
dup2(r1, r0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmmsg(r0, 0x0, 0x0, 0x200040d1)

18m37.813909227s ago: executing program 51 (id=3956):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0xffe}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8010}, 0x0)
dup2(r1, r0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmmsg(r0, 0x0, 0x0, 0x200040d1)

18m23.684916865s ago: executing program 0 (id=4319):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0)

18m23.612807981s ago: executing program 0 (id=4320):
r0 = socket$unix(0x1, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mount$cgroup(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x1000080, &(0x7f00000004c0)={[{@clone_children}, {@subsystem='blkio'}, {@nofavordynmods}, {@favordynmods}, {@none}, {@favordynmods}, {@release_agent={'release_agent', 0x3d, '\xe9\x1fq\x89Y\x1e\x923aK'}}, {@clone_children}, {@subsystem='io'}, {@cpuset_v2_mode}, {@cpuset_v2_mode}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@seclabel}]})

18m23.315021365s ago: executing program 0 (id=4321):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa00"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
sched_setscheduler(0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x3}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

18m22.840340603s ago: executing program 0 (id=4325):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0)
r0 = inotify_init1(0x800)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500), 0xfd, 0x57e, &(0x7f0000001940)="$eJzs3d9rW1UcAPDvTdv96rQdjKE+yGAPTsbStfXHBGHzUXQ40PcZ2qyMpsto0rHWgduDe/FFhiDiQPwDfPdx+A/4Vwx0MGQURUSI3PSmy9qkTbvUxOXzgbudk3uTc07O/d6cc2/SG8DAOp7+k4t4OSK+SiLGmtYNR7by+Np2q49vzqRLErXax78ncW7DayXZ/6NZ5qWI+PmLiFO5zeVWllfmC6VScTHLT1QXrk1UlldOX1kozBXnilenpqfPvjk99c7bb3Wtra9f/PPbj+6/f/bLE6vf/PjwyN0kzsfhbF3ari4Ucas5c7zwT5YaifMbNpzsQmH9JOl1BdiVoSzORyI9BozFUBb1wPPv84ioAQMqEf8woBrjgMbcvkvz4P+NR++tTYA2t3947dxIHKjPjQ6tJk/NjNL57ngXyk/L+Om3e3fTJbY+D3FwmzzAjty6HRFnhoc3H/+S7Pi3e2fqJ4+3trGMQfv8gV66n45/klsRm+I/tz7+iRbjn9EWsbsb28d/7mEXimkrHf+923L8u37oGh/Kci/Ux3wjyeUrpeKZiHgxIk7GyP40v9X1nLOrD2rt1jWP/9IlLb8xFszq8XB4/9PPmS1UC8/S5maPbke80nL8m6z3f9Ki/9P342KHZRwr3nu13brt27+3aj9EvNay/59c0Uq2vj45Ud8fJhp7xWZ/3Dn2S7vye93+tP8Pbd3+8aT5em1l52V8f+DvYrt1u93/9yWf1NP7ssduFKrVxcmIfcmHw6MbH5968txGvrF92v6TJ1rH/1b7fzr5+rTD9t85eqftpv3Q/7M76v+dJx588Nl37crvrP/fqKdOZo90cvzrtILP8t4BAAAAAABAv8lFxOFIcvn1dC6Xz699v+NoHMqVypXqqcvlpauzUf+t7HiM5BpXuseavg8xmX0ftpGf2pCfjogjEfH10MF6Pj9TLs32uvEAAAAAAAAAAAAAAAAAAADQJ0bb/P4/9etQr2sH7Ln6jQ3297oWQC9se8v/btzpCehL28Y/8Nzaefw7MwDPC5//MLjEPwwu8Q+Dq9P4Hxnb44oA/zmf/zC4xD8AAAAAAAAAAAAAAAAAAAAAAAAAAAB01cULF9Kltvr45kyan72+vDRfvn56tliZzy8szeRnyovX8nPl8lypmJ8pL2z3eqVy+drkVCzdmKgWK9WJyvLKpYXy0tXqpSsLhbnipeKIPzYMAAAAAAAAAAAAAAAAAAAAm1SWV+YLpVJxUaJt4lz0RTX2soFrdvX04Z634mA/vIdtEslftbp+qU/niR4fmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgyb8BAAD//yNRNnE=")
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x500082c)
lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x40040, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="020300090e000000000000000000000005000600490000000a00000000000000ff0200000000000000000000000000010000000000000000020001000000000000000003010000d005000500008000000a0000"], 0x70}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

18m22.602886533s ago: executing program 0 (id=4329):
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffffffffffff, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000015c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
shutdown(r3, 0x1)

18m15.634004379s ago: executing program 0 (id=4429):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d850000000700000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10)
r4 = epoll_create1(0x80000)
epoll_pwait(r4, 0x0, 0x0, 0x1, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x50, &(0x7f00000002c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0xff, @empty, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x1, 0x72, 0x0, @void}, "b8d365056e3f"}}}}}}}, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r7, 0x0, 0xf7}, 0x18)
io_submit(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_continue}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000f40)="$eJzs3EtvG0UcAPD/bpq+S0Ipjz6AQEFEPJImLdADFxBIvSAhwaEcQ5pWpWmDmiDRKqIpQuWI+gmAIxKfgBNcEHACcYU7QqpQLgQOaNHau6lx7GAncZ3g30/aeGZ31jt/7449O2MngJ41lP9JIvZGxM8RMRARffUFhqoPS4vzk38uzk8mkWWv/57ku8Ufi/OTZdGkeNxTZIbTiPTDJA43OO7slasXJqanpy4X+dG5i++Mzl65+sz5ixPnps5NXRo/efLE8bHnnxt/dkPi3JfX9dD7M0cOnnrz5quTp2++9d0XeX33Fttr46gaXPcxh2Jo+TWp9/i6n31z2VeTTrZ1sSK0JW/r+enqr7T/geiL2ydvIF75oKuVAzoqy7Jsx4q1yz2AhQz4H0ui2zUAuqP8oM/vf8vlDnY/uu7Wi9UboDzupWKpbtkWaVGmv+7+diMNRcTphb8+yZdoOA4BALCxvsr7P0836v+lcV9NubuKuaHBiLg7IvZHxD0RcSAi7o2olL0/Ih5o8/hDdfmV/Z8fd60psBbl/b8Xirmtf/f/yt5fDPYVuX2V+PuTs+enp44Vr8lw9O/I82OrHOPrl3/6uNm22v5fviz1x2TZFyzq8du2ugG6MxNzE+uJudat65UxwGsr40+WZwKSiDgYEYfW8Pw7I+L8k58fabZ9RfyL83Xxr2ID5pmyzyKeqJ7/haiLv5SsPj85ujOmp46NllfFSt//cOO1ZsdfV/wbID//uxte/8vxDya187Wz7R/jxi8fNb2n+e/4G1//25M3Kuntxbr3JubmLo9FbE8WVq4fv71vmS/L5/EPH23c/vdH/P1psd/hiMgv4gcj4qGIeLio+yMR8WhEHF0l/m9feuzttcffWXn8Z9o6/+0n+i5882Wz47d2/k9UUsPFmlbe/1qt4HpeOwAAANgq0sp34JN0ZDmdpiMj1e/wH4jd6fTM7NxTZ2fevXSm+l35wehPy5GugZrx0LFibLjMj9flj1fGjbMsy3ZV8iOTM9OdmlMHWrOnSfvP/drX7doBHdfWPFqzX7QBW5Lfa0Lv0v6hd2n/0Lu0f+hdjdr/tYilVXe63rHqAHeQz3/oXdo/9C7tH3qX9g89aT2/618tsf9Ua4XLf0DYoWpsgUTf5qhG24lIN0U11pZIN0c1qokdEdFq4Wt3rKV0+Y0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/wTAAD//7YA6Ok=")
r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r8, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18)
bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)

18m15.606207801s ago: executing program 52 (id=4429):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d850000000700000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10)
r4 = epoll_create1(0x80000)
epoll_pwait(r4, 0x0, 0x0, 0x1, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x50, &(0x7f00000002c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0xff, @empty, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x1, 0x72, 0x0, @void}, "b8d365056e3f"}}}}}}}, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r7, 0x0, 0xf7}, 0x18)
io_submit(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_continue}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000f40)="$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")
r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r8, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18)
bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)

18m3.734145496s ago: executing program 5 (id=4685):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d00"], 0x30}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='svc_xprt_enqueue\x00', r5, 0x0, 0x7}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
setitimer(0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x0)
write$char_usb(r7, &(0x7f00000002c0)='AS', 0x2)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x4, 0x0, 0x0, 0x21ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa80}, 0x0, 0x0, 0xffffffffffffffff, 0xd)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x64, 0x8b}, 0x0)
set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x810)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f646f74732c757365667265652c666d61736b3d30303030303030303030303032303030303030303027d95d216f647d483c3a4a00d8df6172642c6e6f646fd3732c6e6f646f74732c6e6f636173652c6e6f646f74732c00"], 0x1, 0x159, &(0x7f0000000340)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)

18m3.348933247s ago: executing program 5 (id=4695):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x3}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

18m3.085124009s ago: executing program 5 (id=4708):
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[], 0x44}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffffffffffff, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000015c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
shutdown(r2, 0x1)

18m2.804411232s ago: executing program 5 (id=4710):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 64)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (rerun: 64)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r1 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xf6c447fee59241f0})
close(r1) (async)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) (async)
r2 = memfd_create(&(0x7f0000000b80)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r<Y\xa1\xdeP\b\xf1kM\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\x06]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x05\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) (async)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r2, 0x0) (async, rerun: 64)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (rerun: 64)
mount$bind(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x809401, 0x0) (async, rerun: 32)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 32)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
lseek(r3, 0x9, 0x0) (async)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x5, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x34f0a87871305eb2}, 0x9c) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async, rerun: 32)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x1ea) (rerun: 32)
fsetxattr$system_posix_acl(r5, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x20}, [], {}, [], {0x10, 0x7}}, 0x24, 0x0) (async, rerun: 32)
umount2(&(0x7f00000003c0)='./file0\x00', 0xa) (rerun: 32)

18m2.729105348s ago: executing program 5 (id=4713):
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)
r3 = dup(r1)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @period={0x5d, 0xa370, 0x0, 0x7f, 0x2, {0x1, 0x3, 0x4, 0x2}, 0x0, 0x0}})
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80))

18m2.478401288s ago: executing program 5 (id=4720):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002106000d40931000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b8010"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101)

18m2.473591868s ago: executing program 53 (id=4720):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002106000d40931000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b8010"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101)

3.104831178s ago: executing program 7 (id=19797):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x5f}]}, 0x98}}, 0x0)

3.028140104s ago: executing program 7 (id=19800):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00'}, 0x10)
r6 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000100))
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[@ANYBLOB="00cdf0b3373e19744a101e8c91407176ad69f47a10954db9dd96888078f300e4fd5ccd1539e0c9462c274ee70479ae4a05d9a547611852"], 0x1, 0x556, &(0x7f0000000840)="$eJzs3d9v0+YawPHHbSNKzlEPOucMoarAS9mkIpXgJBCUceU5b1JDYke2g9orVNEUVaSAKJPWXsEN26T9E9zuj+B+N/tP0C53yWQ7oWmbxPRnEPp+otZv7MevHzuRHzmJbQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGLYFdPMG1J33NayGs6u+F5jxPRefzf2DEYsV8SI/mR6Wi4loy79f3fyxejfvMwlz+ZkOhpMy86/Ll6497+pid78IxI6E1vbO09XO532y3EnMiY17TqB5zSsmp6UwFPlUsm8tVQNVNWp62AlCHVD2b62Qs9XC/YNlS+Xi0rnVryWW6tYdd0befdmwTRL6n6uqS0/8Nxb93OBveTU645bi2OiyVHM3eiN+MAJVaithlLrG512MS3JKCif6b6xRgUV0noqmIVCPl8o5Et3ynfumubUgRHmPnIgYvxvWozXCe69geOZ6NZ/qYsjrrRkWdTAhy0V8cWTxpDpXb36/90tPXK5/fW/V+Uv7U6elbj+X0meXRlW/4fkcnaPLdmWHXkqq9KRjrTl5dgzOtbjwmG3aE20uOJIIJ440hArHqO6Y5SUpSQlMeWRLElVAlFSFUfqoiWQFQkkFB2/o2zxRYsloXjii5IFseWGKMlLWcpSFCVacrIinrTElZpUxIp7WZeNeLsXR+QYBxmv25JPC4p6KowIov7j+E5+Jw4c0cde/R8uc3bZAAAAAACA02DEn74b8WH+5bhVderaHHdaAAAAAADgBMXf/M9Fg/hr/sticPwPAAAAAMDXxojPsTNEJCtXk1bvTCg+BAAAAAAA4CsRf/9/JRpko9ZVMTj+BwAAAADga/NL6jX2/548Z7z/S3w/Y7xpLn9rbFpRnLU5mcw3ub/HsDprzHQ7iQelqe4zW88Z3atffroI5ofuYD0tD+MEEpDf5FoSc20tGa5FU5KrH0ZLyVadus5lpH4vL5Y1MxHq5fDHZxs/Sbz6v7qNGUPWNzrt3OPnnbU4lzfRrG82uxdQPHAdxRG5vIqvtxCfczFwjTPxiRjJcqe73Zn96z+RjJs4xDLfynwSM59NhtnelGSZ09Ey87lha59N1j5/zDV/K9eTmOsL15PBgCwKaVkU+rPo3xbnTzCLYloWxV4Wmd2X4jCvCACMy3pKFTIOFv4j7OXOprq/lYUkZmE23rFOzQ7Yo5tpe3Szv67MJB1+dnU7NyW/Z/bfA2lIjf34Hz9jZGVvVX0XzfBuaFUN6i+MaBNOvtp8IRe3tndubmyuPmk/aT8rFIol87Zp3ilIJl6N7oDaAwAYIP0eO6kRxu2BR9W7Fe+/n35SkJPH8lw6siaL8dkG8S8OBvaa7fsZwmLKUetubF4WU47qsn03eumL7RXDIbHF/Zvtm+9P4bUAAOCszKfU4c+p/4spx917a/mwo+M/DtTyAQ586AAAAA5P+x+MbPiz4ftO81G+XM5b4ZJWvmc/UL5TqWnluKH27SXLrWnV9L3Qs7161HjoVHSgglaz6fmhqnq+anqBsxzf+V11b/0e6Iblho4dNOvaCrSyPTe07FBVnMBWzdYPdSdY0n48c9DUtlN1bCt0PFcFXqt310HdF+hUtBs6VSdquqrpOw3LX1EPvXqroVVFB7bvNEMv6bC3LMeten4j7jaX9Ph+nNsbAIAvwdb2ztPVTqf98hQb415HAACwF1UaAAAAAAAAAAAAAAAAAAAAAIAvX/f3/zJ9FicCjmycF5EjzP76c4L//HeytodPbOpIc9GgcUYN47R6HveeCcBp+ycAAP//4ctJKA==")

2.915454663s ago: executing program 1 (id=19802):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0x0, 0x7, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0xff, 0x0, 0xfffffffe, 0x6, 0x6, 0x0, 0x272, 0xb, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0xfffffffe, 0x1000, 0x52ed, 0x4, 0x0, 0x3, 0x0, 0x10000002, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x60f9, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x6, 0x6, 0x9, 0x0, 0x1, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x5b73, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x2, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x8000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x5f}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x4840)

1.806360993s ago: executing program 1 (id=19808):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10)
r2 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

1.775813405s ago: executing program 8 (id=19810):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r5=>0xffffffffffffffff})
mount$tmpfs(0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="6d706f6c3d696e7465725fd8dd251f6a86255fd2d90559808d6c656176653d72656c61746976653a2c300a05"])
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000040)=0x7)
ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000080))
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x4, 0x4)
sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0)
ioctl$KDGKBSENT(r6, 0x4b48, &(0x7f00000000c0)={0x80, "6862fd0e2089e033cb96f3abadb3f6b5e54ee082d2c168e304a2afb8e42431fdecba33fb7f00f069bd8f6144b747b3a07351954dd69aa594383e72e5ef464236f3b7c52e89c8ac7ff1d5177412fa8696bcab7eb31987f7dead3d5af5d2e71de421c0c6de23187c4d47f15c05dbb07f61acf2d56444f76be7247d3709702606b7aec749cf4590b21ea0e8031c8b506f8d748ce61199ce4d8491cbc88c8e51f1967f4ada3218e5c3146a928a9e2f2f32c8c1088b27dab4a76f2735c42df814ba242a721691c1c48535d1d74e9f79accd805e58dd791cc55a965c9a5075f616e53bdf889317e3678bc14ad72e7b57bad2801d900c40ac263d4bdf9241cf42636a1dacf9871f6fdab4bba975cbd712496c78522353fa1d2dd52839f5e0174608817fcce3bdc115f7d78c2e7744447b04852f6e68abd2f19646edb271fda2a7ac86fdd263e0be0b2b82310c99ca74f066e84b0049ab13338aa1ba643092c7c6a509630e0f0e62a86fbb45bb37b2a398d7f30a3a5c564d45acfaa94e04e51ddc1cf63f20f3ace29b30029444449443d72a8d023529a9968f4f921d363cefb5c8df5a4e3dfa77777f4cc484e53808547eefb5a4b327fb4393e66e7fd0a80bcae824df99b0a6d2f775cd4edf1dbdb8af888daa945396c203e2a96a3b6efd95abec331eb82e4f008c3a3afd69330d785992c53fa9de249cc982d3517013fb36a792ddee59"})
pipe(&(0x7f00000001c0))
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20)

1.661029895s ago: executing program 8 (id=19812):
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x2, 0xff}, 0x1}, 0x18)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x21, 0x2, 0xa)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote})

1.557652513s ago: executing program 8 (id=19815):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000306010400001d0000000000070000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)

1.539326265s ago: executing program 8 (id=19816):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19)
pwritev2(r1, 0x0, 0x0, 0x1400, 0x0, 0x0)

1.506995767s ago: executing program 7 (id=19818):
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x400, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f00000003c0)=0x800001, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES16], &(0x7f0000000200)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100270008004500002000000000fc2f907800001fe1e000000180006558080c0000000a0000"], 0x32)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xb, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20)
r6 = io_uring_setup(0x4717, &(0x7f00000000c0)={0x0, 0x191, 0x4, 0x1, 0x1c0})
io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, &(0x7f00000002c0)={&(0x7f0000000280)={&(0x7f00000001c0)="ca1f22aa224ae295e4c476e0ab649251af91f7", 0x13, 0x0, 0xe, 0x8001}, 0x1}, 0x1)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20)
r7 = io_uring_setup(0x53fc, &(0x7f0000000200)={0x0, 0x23d4, 0x0, 0xfffffffc, 0x83})
io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20)

1.454173071s ago: executing program 8 (id=19819):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x18)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x2, 0xf, 0x3, 0x3, 0x33, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x6e6bbf, 0x0, {0x6, 0x3c, 0x0, 0x1d, 0x0, 0x3, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x33}, @in6=@private2}}, @sadb_x_sec_ctx={0x20, 0x18, 0x7, 0x6, 0xf5, "7b9816e6b85350c957f7280ce96532cbef5bb74996cbb5a91e09e731cd7364bf3283db4c6a753a1510a9ccae402d6ea11986af4d0a4870b94e153c12a00220faba0f0193cab392cd216d9069a06bcce9e42331e8e953d0dd65cda114440b1f0f367133647affc02f5837b31b61d869e414105ed0be6641ffd9a23bfcdf535ab0730775f206cf902e94e7b699f12e49b582b2ffad837614da3f4347b01ec9f39d1593c593d5dadc850c939e5ca66e577979a83651110777b3e86e6a0e86aa29555df11a61da67b5d4ef619b49e75b206042c621c00b52e7f65641a0a85bc565a57140f00a79a7f4c4e486be8cdbeea48d549536029f"}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}, @sadb_x_policy={0x8, 0x12, 0x2, 0x4, 0x0, 0x6e6bb6, 0x3, {0x6, 0x2b, 0x2, 0x61, 0x0, 0x8, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x32}, @in6=@remote}}]}, 0x198}}, 0x4008040)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000240)={'syztnl2\x00', <r2=>0x0, 0x10, 0x7800, 0x6a4, 0xff, {{0x27, 0x4, 0x1, 0x2, 0x9c, 0x68, 0x0, 0x3, 0x29, 0x0, @multicast1, @private=0xa010102, {[@timestamp_addr={0x44, 0x4c, 0x4f, 0x1, 0x8, [{@multicast1, 0x9}, {@local, 0x3ff}, {@local, 0x4}, {@rand_addr=0x64010102, 0x6}, {@private=0xa010100, 0x7}, {@multicast1, 0x5}, {@multicast2, 0x2}, {@private=0xa010100, 0xd68a}, {@broadcast, 0x80}]}, @lsrr={0x83, 0x7, 0x28, [@dev={0xac, 0x14, 0x14, 0x42}]}, @rr={0x7, 0x7, 0x1e, [@multicast2]}, @lsrr={0x83, 0xf, 0x66, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp_prespec={0x44, 0xc, 0x89, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd}]}, @noop, @timestamp={0x44, 0xc, 0x84, 0x0, 0x0, [0x7, 0x7]}, @noop]}}}}})
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x5)
fcntl$notify(r3, 0x402, 0x848234f1c7d17d24)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x7, '\x00', r2, r3, 0x1, 0x0, 0x4}, 0x50)

1.449972082s ago: executing program 8 (id=19820):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x2c, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x6}, {0xffff}, {0x11, 0xfff1}}, [{0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff9f}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000880), 0x0, 0x835, 0x0)

1.34606558s ago: executing program 7 (id=19823):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0)

1.294879895s ago: executing program 7 (id=19825):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) (fail_nth: 6)

1.206166882s ago: executing program 7 (id=19828):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00'}, 0x10)
r6 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000100))
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[@ANYBLOB="00cdf0b3373e19744a101e8c91407176ad69f47a10954db9dd96888078f300e4fd5ccd1539e0c9462c274ee70479ae4a05d9a547611852"], 0x1, 0x556, &(0x7f0000000840)="$eJzs3d9v0+YawPHHbSNKzlEPOucMoarAS9mkIpXgJBCUceU5b1JDYke2g9orVNEUVaSAKJPWXsEN26T9E9zuj+B+N/tP0C53yWQ7oWmbxPRnEPp+otZv7MevHzuRHzmJbQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGLYFdPMG1J33NayGs6u+F5jxPRefzf2DEYsV8SI/mR6Wi4loy79f3fyxejfvMwlz+ZkOhpMy86/Ll6497+pid78IxI6E1vbO09XO532y3EnMiY17TqB5zSsmp6UwFPlUsm8tVQNVNWp62AlCHVD2b62Qs9XC/YNlS+Xi0rnVryWW6tYdd0befdmwTRL6n6uqS0/8Nxb93OBveTU645bi2OiyVHM3eiN+MAJVaithlLrG512MS3JKCif6b6xRgUV0noqmIVCPl8o5Et3ynfumubUgRHmPnIgYvxvWozXCe69geOZ6NZ/qYsjrrRkWdTAhy0V8cWTxpDpXb36/90tPXK5/fW/V+Uv7U6elbj+X0meXRlW/4fkcnaPLdmWHXkqq9KRjrTl5dgzOtbjwmG3aE20uOJIIJ440hArHqO6Y5SUpSQlMeWRLElVAlFSFUfqoiWQFQkkFB2/o2zxRYsloXjii5IFseWGKMlLWcpSFCVacrIinrTElZpUxIp7WZeNeLsXR+QYBxmv25JPC4p6KowIov7j+E5+Jw4c0cde/R8uc3bZAAAAAACA02DEn74b8WH+5bhVderaHHdaAAAAAADgBMXf/M9Fg/hr/sticPwPAAAAAMDXxojPsTNEJCtXk1bvTCg+BAAAAAAA4CsRf/9/JRpko9ZVMTj+BwAAAADga/NL6jX2/548Z7z/S3w/Y7xpLn9rbFpRnLU5mcw3ub/HsDprzHQ7iQelqe4zW88Z3atffroI5ofuYD0tD+MEEpDf5FoSc20tGa5FU5KrH0ZLyVadus5lpH4vL5Y1MxHq5fDHZxs/Sbz6v7qNGUPWNzrt3OPnnbU4lzfRrG82uxdQPHAdxRG5vIqvtxCfczFwjTPxiRjJcqe73Zn96z+RjJs4xDLfynwSM59NhtnelGSZ09Ey87lha59N1j5/zDV/K9eTmOsL15PBgCwKaVkU+rPo3xbnTzCLYloWxV4Wmd2X4jCvCACMy3pKFTIOFv4j7OXOprq/lYUkZmE23rFOzQ7Yo5tpe3Szv67MJB1+dnU7NyW/Z/bfA2lIjf34Hz9jZGVvVX0XzfBuaFUN6i+MaBNOvtp8IRe3tndubmyuPmk/aT8rFIol87Zp3ilIJl6N7oDaAwAYIP0eO6kRxu2BR9W7Fe+/n35SkJPH8lw6siaL8dkG8S8OBvaa7fsZwmLKUetubF4WU47qsn03eumL7RXDIbHF/Zvtm+9P4bUAAOCszKfU4c+p/4spx917a/mwo+M/DtTyAQ586AAAAA5P+x+MbPiz4ftO81G+XM5b4ZJWvmc/UL5TqWnluKH27SXLrWnV9L3Qs7161HjoVHSgglaz6fmhqnq+anqBsxzf+V11b/0e6Iblho4dNOvaCrSyPTe07FBVnMBWzdYPdSdY0n48c9DUtlN1bCt0PFcFXqt310HdF+hUtBs6VSdquqrpOw3LX1EPvXqroVVFB7bvNEMv6bC3LMeten4j7jaX9Ph+nNsbAIAvwdb2ztPVTqf98hQb415HAACwF1UaAAAAAAAAAAAAAAAAAAAAAIAvX/f3/zJ9FicCjmycF5EjzP76c4L//HeytodPbOpIc9GgcUYN47R6HveeCcBp+ycAAP//4ctJKA==")

960.581081ms ago: executing program 1 (id=19831):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10)

905.628996ms ago: executing program 1 (id=19833):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0xfffffffd}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000580)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x4, &(0x7f0000000280), 0x1, 0x40, 0x1})
io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)

756.110748ms ago: executing program 6 (id=19834):
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x2000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000088000000", @ANYRES32, @ANYBLOB="01000000000000000000000000000000000000009e8b3c54698518c2aafa9bba3b319ca166e38f457e1b4b4a257bb5094d9f0ff81ed857998a7a50cbc5e80de808962edcc31146843849980cc2ff83250822234ccb13677f28576d0654e9612d67f13daf96edd19642f4c6f7350b90e9e59d48e9129734578d4deb5c9c27f1bac20ef8b9a530970dcc0aca53d635739caf47eba943a7946d9c316be715fefa27588e383f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r1}, 0x10)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r5}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x3)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r7, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000300)=0x32, 0x4)
setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0f00000004000000040000000400010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005000000000000000000000000000000000000000000000004357de75308127394f5a86e23202818a9b322fe4e03000000000000005a491fdc2051dc17dee7b9621630f4fde8ab5cc8883fca4b43c717d1295aebe5c1d3816317f5df9767303ce6c5815d37affeba49f662641d5ca4bd476f3cf138c18999e8005a09e7f2940b5d615488029c9bdf0e33fff7bddedd7851d15d3065448ac3eeb76669fdbadd067ba436214e"], 0x48)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)

730.35785ms ago: executing program 1 (id=19835):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xffffffff000)
recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12100, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={0x0, r0, 0x0, 0x97a3}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000080)='./file0\x00', r7}, 0x18)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {0x0}}, 0x18)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x24, &(0x7f00000002c0)={&(0x7f0000000000)=@delchain={0x0, 0x65, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1a}, {0x6, 0xfff1}}, [@TCA_CHAIN={0x0, 0xb, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYRES16=r4], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
lsetxattr$security_ima(&(0x7f00000008c0)='./cgroup/../file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r12=>0xffffffffffffffff})
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r11, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000280)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000d3d911ea7cdcdf8c55214ad87c0deebe9ef13818038550a1936c7c3c29c09f1c8b2ecc2ef2960f676714b60325dafd328f73f4dca5a11544bc00"/74, @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf250500000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x40000)

700.310523ms ago: executing program 9 (id=19836):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0)

657.539046ms ago: executing program 9 (id=19837):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2bf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffe)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0)

586.923402ms ago: executing program 1 (id=19838):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)=0x7ffffffc)
ioctl$EVIOCGRAB(r2, 0x40044590, 0x0)
write$selinux_access(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB='system_u:object_r:gpo_agent_exec_t:s0 unconf'], 0x46)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r4, &(0x7f0000000740)="cc", 0x1)
sendfile(r4, r3, 0x0, 0x3ffff)
sendfile(r4, r3, 0x0, 0x7fffeffd)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
flock(0xffffffffffffffff, 0x5)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1002, 0x40)
sendfile(r7, r5, 0x0, 0x40001)
sendfile(r7, r6, 0x0, 0x7ffff000)

537.446986ms ago: executing program 9 (id=19839):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0xa)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b000000"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
creat(&(0x7f00000003c0)='./file0\x00', 0x36)

534.343956ms ago: executing program 6 (id=19840):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10)
fcntl$setlease(r2, 0x400, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
fcntl$setlease(r2, 0x400, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nodioread_nolock}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x563, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbDbp6+/XFEpREQn0YKU2aRJfKnioR9FiQe91SaahdNMt2U1pYsH2YC9epAgiFsS73j0W/wH/ioIWipSgBy+R2czmpdlNtukmu+1+PjDheWZm93memfk+eZ6dWTaAvjWS/SlEvBwR3yQRRyIiybcVI984srLf0uObU9mSxPLyp38l9f2yfOO9Gq87lGdeiojfvoo4VdhcbnVh8UqpXE7n8vxYbfbaWHVh8fTl2dJMOpNenZicPPv25MR7777Tsba+ceGf7z+5/+HZr08sfffLw6N3kzgXh/Nt69vxDG6tz4zESH5MBuPcEzuOd6CwXpJ0uwLsyEAe54OR9QFHYiCPeuDF92VELAN9KhH/0Kca44DG3L5D8+DnxqMPViZAm9tfXPlsJPbX50YHl5INM6NsvjvcgfKzMn79897dbInOfQ4BsK1btyPiTLG4uf9L8v5v5860sc+TZej/YO/cz8Y/bzYb/xRWxz/RZPxzqEns7sT28V942IFiWsrGf+/n5e7fUP7qTavhgTz3v/qYbzC5dLmcZn3b/yPiZAzuy/Jb3c85u/RgudW29eO/bMnKb4wF83o8LO7b+JrpUq30LG1e79HtiFeajn+T1fOfNDn/2fG40GYZx9N7r7Xatn37d9fyTxGvN53/rN3RSra+PzlWvx7GGlfFZn/fOf77xjVrR7Lb7c/O/8Gt2z+crL9fW336Mn7c/2/aatuG9kf71/9Q8lk9PZSvu1Gq1ebGI4aSjzevn1h7bSPf2D9r/8kTW/d/za7/AxHxeZvtv3Ps51fban+Xzv/0U53/p088+OiLH1qV317/91Y9dTJf007/124Fn+XYAQAAAAAAQK8pRMThSAqjq+lCYXR05fmOY3GwUK5Ua6cuVeavTkf9u7LDMVho3Ok+su55iPH8edhGfuKJ/GREHI2IbwcO1POjU5XydLcbDwAAAAAAAAAAAAAAAAAAAD3iUIvv/2f+GOh27YBd18ZPfg/tRT2Avbdt/Hfil56AntTG/3/gBSX+oX+Jf+hf4h/6l/iH/iX+oX+Jf+hf4h8AAAAAAAAAAAAAAAAAAAAAAAAAAAA66sL589myvPT45lSWn76+MH+lcv30dFot5LvMXRudqVRmyunoVGV2u/crVyrXxidi/sZYLa3WxqoLixdnK/NXaxcvz5Zm0ovp4K63CAAAAAAAAAAAAAAAAAAAAJ4/1YXFK6VyOZ2TkNhRotgb1ehSotgb1diFRLd7JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABY818AAAD//0h7Mcc=")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x96)
pwrite64(r3, &(0x7f0000000140)='2', 0x155c2, 0x8000c64)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="023e9beaad1d6e2fc801000000000000"], 0x10}}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r6, 0x0, 0x6, 0x10001)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r7, 0x20, 0x4000, 0x8000)

416.483916ms ago: executing program 9 (id=19841):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
syz_clone3(&(0x7f00000003c0)={0x44084000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x3}, &(0x7f0000000180)=""/163, 0xa3, &(0x7f0000000240)=""/9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)

352.909911ms ago: executing program 6 (id=19842):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r5=>0xffffffffffffffff})
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="6d706f6c3d696e7465725fd8dd251f6a86255fd2d90559808d6c656176653d72656c61746976653a2c300a05"])
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000040)=0x7)
ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000080))
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x4, 0x4)
sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0)
ioctl$KDGKBSENT(r6, 0x4b48, &(0x7f00000000c0)={0x80, "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"})
pipe(&(0x7f00000001c0))
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20)

332.754132ms ago: executing program 6 (id=19843):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x100, 0x7}, 0x2202, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x2, 0xb, 0x5, 0xc801, 0x1, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x5}, 0x50)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, [@tail_call, @ldst={0x3, 0x1, 0x4, 0x2, 0x6, 0xfffffffffffffff4, 0xfffffffffffffffc}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0x2, 0x2, 0x1000}, 0x10, 0x1c4d8, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0x1, 0x1, r0, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000280)=[{0x2, 0x2, 0x8, 0x2}, {0x1, 0x4, 0xb, 0x1}, {0x0, 0x2, 0x4, 0xa}, {0x3, 0x3, 0x8, 0x9}, {0x1, 0x2, 0xe, 0x3}, {0x4, 0x1, 0xf}], 0x10, 0x8}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000f060104000000000000000000000004050001"], 0x1c}}, 0x8000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}})
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50)
r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0)
r10 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r10, 0x21, &(0x7f0000000440)=r9, 0x1)
ioctl$TCSETS(r9, 0x5402, &(0x7f00000004c0)={0x73d8, 0xcb5, 0x9, 0xad, 0x11, "7e7471d5e12422e109faedfb83dbfe172ae2f1"})
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000440)={r1, r8}, 0xc)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r12}, 0x10)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r13}, 0x10)
setitimer(0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

216.241521ms ago: executing program 9 (id=19844):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0xfffffffd}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000580)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x4, &(0x7f0000000280), 0x1, 0x40, 0x1})
io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)

157.362636ms ago: executing program 6 (id=19845):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x240500, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'})

66.316074ms ago: executing program 6 (id=19846):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0xfffffffd}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000580)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x4, &(0x7f0000000280), 0x1, 0x40, 0x1})
io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)

0s ago: executing program 9 (id=19847):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
io_uring_setup(0x68f6, &(0x7f00000004c0)={0x0, 0xf72b, 0x8, 0x1, 0x1000168})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r3)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0), 0x501000, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000600), 0x4)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0341, 0x0)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

kernel console output (not intermixed with test programs):

l'
[ 1311.313082][T29455] netlink: 'syz.6.19219': attribute type 3 has an invalid length.
[ 1311.327297][T29478] FAULT_INJECTION: forcing a failure.
[ 1311.327297][T29478] name failslab, interval 1, probability 0, space 0, times 0
[ 1311.329428][T29455] netlink: 'syz.6.19219': attribute type 3 has an invalid length.
[ 1311.340403][T29478] CPU: 0 UID: 0 PID: 29478 Comm: syz.8.19221 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1311.340526][T29478] Tainted: [W]=WARN
[ 1311.340536][T29478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1311.340619][T29478] Call Trace:
[ 1311.340630][T29478]  <TASK>
[ 1311.340640][T29478]  __dump_stack+0x1d/0x30
[ 1311.340671][T29478]  dump_stack_lvl+0xe8/0x140
[ 1311.340699][T29478]  dump_stack+0x15/0x1b
[ 1311.340721][T29478]  should_fail_ex+0x265/0x280
[ 1311.340791][T29478]  should_failslab+0x8c/0xb0
[ 1311.340826][T29478]  __kmalloc_node_noprof+0xa9/0x410
[ 1311.340912][T29478]  ? __vmalloc_node_range_noprof+0x3f9/0xe00
[ 1311.340962][T29478]  __vmalloc_node_range_noprof+0x3f9/0xe00
[ 1311.341055][T29478]  ? bpf_trace_run2+0x124/0x1c0
[ 1311.341113][T29478]  ? should_failslab+0x19/0xb0
[ 1311.341209][T29478]  ? n_tty_open+0x1b/0xf0
[ 1311.341233][T29478]  vzalloc_noprof+0x82/0xc0
[ 1311.341276][T29478]  ? n_tty_open+0x1b/0xf0
[ 1311.341301][T29478]  n_tty_open+0x1b/0xf0
[ 1311.341363][T29478]  tty_ldisc_failto+0xe5/0x1a0
[ 1311.341404][T29478]  tty_ldisc_restore+0x2f/0xc0
[ 1311.341453][T29478]  tty_set_ldisc+0x209/0x380
[ 1311.341526][T29478]  tiocsetd+0x51/0x60
[ 1311.341606][T29478]  tty_ioctl+0xa7f/0xb80
[ 1311.341646][T29478]  ? __pfx_tty_ioctl+0x10/0x10
[ 1311.341763][T29478]  __se_sys_ioctl+0xce/0x140
[ 1311.341814][T29478]  __x64_sys_ioctl+0x43/0x50
[ 1311.341922][T29478]  x64_sys_call+0x1816/0x2ff0
[ 1311.341968][T29478]  do_syscall_64+0xd2/0x200
[ 1311.342003][T29478]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1311.342045][T29478]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1311.342081][T29478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1311.342221][T29478] RIP: 0033:0x7f352214eb69
[ 1311.342242][T29478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1311.342268][T29478] RSP: 002b:00007f35207b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1311.342307][T29478] RAX: ffffffffffffffda RBX: 00007f3522375fa0 RCX: 00007f352214eb69
[ 1311.342326][T29478] RDX: 0000200000000100 RSI: 0000000000005423 RDI: 0000000000000006
[ 1311.342344][T29478] RBP: 00007f35207b7090 R08: 0000000000000000 R09: 0000000000000000
[ 1311.342434][T29478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1311.342452][T29478] R13: 0000000000000000 R14: 00007f3522375fa0 R15: 00007fffc497bcb8
[ 1311.342480][T29478]  </TASK>
[ 1311.342491][T29478] syz.8.19221: vmalloc error: size 12288, failed to allocated page array size 24, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[ 1311.606533][T29478] CPU: 0 UID: 0 PID: 29478 Comm: syz.8.19221 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1311.606580][T29478] Tainted: [W]=WARN
[ 1311.606587][T29478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1311.606599][T29478] Call Trace:
[ 1311.606605][T29478]  <TASK>
[ 1311.606613][T29478]  __dump_stack+0x1d/0x30
[ 1311.606633][T29478]  dump_stack_lvl+0xe8/0x140
[ 1311.606651][T29478]  dump_stack+0x15/0x1b
[ 1311.606730][T29478]  warn_alloc+0x12b/0x1a0
[ 1311.606778][T29478]  ? should_failslab+0x8c/0xb0
[ 1311.606805][T29478]  __vmalloc_node_range_noprof+0x497/0xe00
[ 1311.606843][T29478]  ? bpf_trace_run2+0x124/0x1c0
[ 1311.606888][T29478]  ? should_failslab+0x19/0xb0
[ 1311.606909][T29478]  ? n_tty_open+0x1b/0xf0
[ 1311.606926][T29478]  vzalloc_noprof+0x82/0xc0
[ 1311.606965][T29478]  ? n_tty_open+0x1b/0xf0
[ 1311.607018][T29478]  n_tty_open+0x1b/0xf0
[ 1311.607041][T29478]  tty_ldisc_failto+0xe5/0x1a0
[ 1311.607101][T29478]  tty_ldisc_restore+0x2f/0xc0
[ 1311.607231][T29478]  tty_set_ldisc+0x209/0x380
[ 1311.607277][T29478]  tiocsetd+0x51/0x60
[ 1311.607302][T29478]  tty_ioctl+0xa7f/0xb80
[ 1311.607354][T29478]  ? __pfx_tty_ioctl+0x10/0x10
[ 1311.607379][T29478]  __se_sys_ioctl+0xce/0x140
[ 1311.607427][T29478]  __x64_sys_ioctl+0x43/0x50
[ 1311.607457][T29478]  x64_sys_call+0x1816/0x2ff0
[ 1311.607499][T29478]  do_syscall_64+0xd2/0x200
[ 1311.607521][T29478]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1311.607556][T29478]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1311.607575][T29478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1311.607595][T29478] RIP: 0033:0x7f352214eb69
[ 1311.607676][T29478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1311.607693][T29478] RSP: 002b:00007f35207b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1311.607710][T29478] RAX: ffffffffffffffda RBX: 00007f3522375fa0 RCX: 00007f352214eb69
[ 1311.607721][T29478] RDX: 0000200000000100 RSI: 0000000000005423 RDI: 0000000000000006
[ 1311.607741][T29478] RBP: 00007f35207b7090 R08: 0000000000000000 R09: 0000000000000000
[ 1311.607754][T29478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1311.607766][T29478] R13: 0000000000000000 R14: 00007f3522375fa0 R15: 00007fffc497bcb8
[ 1311.607847][T29478]  </TASK>
[ 1311.836927][T29478] Mem-Info:
[ 1311.840265][T29478] active_anon:6401 inactive_anon:7 isolated_anon:0
[ 1311.840265][T29478]  active_file:15643 inactive_file:13498 isolated_file:0
[ 1311.840265][T29478]  unevictable:0 dirty:152 writeback:0
[ 1311.840265][T29478]  slab_reclaimable:3681 slab_unreclaimable:15621
[ 1311.840265][T29478]  mapped:32686 shmem:3401 pagetables:916
[ 1311.840265][T29478]  sec_pagetables:0 bounce:0
[ 1311.840265][T29478]  kernel_misc_reclaimable:0
[ 1311.840265][T29478]  free:1873471 free_pcp:8554 free_cma:0
[ 1311.885475][T29478] Node 0 active_anon:25488kB inactive_anon:28kB active_file:62572kB inactive_file:53992kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133760kB dirty:608kB writeback:0kB shmem:13604kB kernel_stack:3056kB pagetables:3780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1311.913139][T29478] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1311.941907][T29478] lowmem_reserve[]: 0 2883 7862 7862
[ 1311.947386][T29478] Node 0 DMA32 free:2949332kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952864kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB
[ 1311.977880][T29478] lowmem_reserve[]: 0 0 4978 4978
[ 1311.983077][T29478] Node 0 Normal free:4525096kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25552kB inactive_anon:28kB active_file:62572kB inactive_file:53992kB unevictable:0kB writepending:652kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:30336kB local_pcp:19680kB free_cma:0kB
[ 1312.015380][T29478] lowmem_reserve[]: 0 0 0 0
[ 1312.019976][T29478] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1312.032960][T29478] Node 0 DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949332kB
[ 1312.049133][T29478] Node 0 Normal: 31*4kB (UME) 390*8kB (UME) 1727*16kB (UME) 765*32kB (UME) 320*64kB (UME) 262*128kB (UME) 277*256kB (UM) 260*512kB (UM) 187*1024kB (UM) 65*2048kB (UM) 949*4096kB (UME) = 4525116kB
[ 1312.068669][T29478] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[ 1312.078015][T29478] 32496 total pagecache pages
[ 1312.082728][T29478] 8 pages in swap cache
[ 1312.086907][T29478] Free swap  = 124964kB
[ 1312.091104][T29478] Total swap = 124996kB
[ 1312.095315][T29478] 2097051 pages RAM
[ 1312.099137][T29478] 0 pages HighMem/MovableOnly
[ 1312.103847][T29478] 80435 pages reserved
[ 1312.128264][T29258] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1312.135639][T29258] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1312.142970][T29258] bridge_slave_1: entered allmulticast mode
[ 1312.149440][T29258] bridge_slave_1: entered promiscuous mode
[ 1312.161921][T29478] Falling back ldisc for ttyS3.
[ 1312.174979][T29258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1312.187896][T29258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1312.238495][T29258] team0: Port device team_slave_0 added
[ 1312.248319][T29258] team0: Port device team_slave_1 added
[ 1312.265212][   T29] kauditd_printk_skb: 137 callbacks suppressed
[ 1312.265230][   T29] audit: type=1400 audit(1754351079.098:55796): avc:  denied  { create } for  pid=29552 comm="syz.7.19223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1312.277285][   T29] audit: type=1400 audit(1754351079.109:55797): avc:  denied  { read } for  pid=29593 comm="syz.1.19227" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1312.277322][   T29] audit: type=1400 audit(1754351079.109:55798): avc:  denied  { open } for  pid=29593 comm="syz.1.19227" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1312.278093][   T29] audit: type=1400 audit(1754351079.109:55799): avc:  denied  { ioctl } for  pid=29593 comm="syz.1.19227" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1312.300169][   T29] audit: type=1400 audit(1754351079.141:55800): avc:  denied  { ioctl } for  pid=29552 comm="syz.7.19223" path="socket:[248274]" dev="sockfs" ino=248274 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1312.330433][T29258] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1312.330448][T29258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1312.330497][T29258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1312.331163][T29258] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1312.331178][T29258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1312.331206][T29258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1312.409797][T29258] hsr_slave_0: entered promiscuous mode
[ 1312.411141][T29258] hsr_slave_1: entered promiscuous mode
[ 1312.411405][T29258] debugfs: 'hsr0' already exists in 'hsr'
[ 1312.411421][T29258] Cannot create hsr debugfs directory
[ 1312.584780][   T29] audit: type=1400 audit(1754351079.431:55801): avc:  denied  { create } for  pid=29683 comm="syz.6.19228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1312.684050][   T29] audit: type=1400 audit(1754351079.495:55802): avc:  denied  { bind } for  pid=29683 comm="syz.6.19228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1312.741446][   T29] audit: type=1400 audit(1754351079.592:55803): avc:  denied  { mounton } for  pid=29717 comm="syz.6.19232" path="/133/file0" dev="tmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1312.741483][   T29] audit: type=1400 audit(1754351079.592:55804): avc:  denied  { mount } for  pid=29717 comm="syz.6.19232" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1312.741559][   T29] audit: type=1400 audit(1754351079.603:55805): avc:  denied  { write } for  pid=29717 comm="syz.6.19232" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1312.907783][T29776] FAULT_INJECTION: forcing a failure.
[ 1312.907783][T29776] name failslab, interval 1, probability 0, space 0, times 0
[ 1312.907864][T29776] CPU: 0 UID: 0 PID: 29776 Comm: syz.6.19234 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1312.907907][T29776] Tainted: [W]=WARN
[ 1312.907916][T29776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1312.907933][T29776] Call Trace:
[ 1312.907941][T29776]  <TASK>
[ 1312.907951][T29776]  __dump_stack+0x1d/0x30
[ 1312.907974][T29776]  dump_stack_lvl+0xe8/0x140
[ 1312.908038][T29776]  dump_stack+0x15/0x1b
[ 1312.908060][T29776]  should_fail_ex+0x265/0x280
[ 1312.908109][T29776]  should_failslab+0x8c/0xb0
[ 1312.908139][T29776]  __kmalloc_noprof+0xa5/0x3e0
[ 1312.908175][T29776]  ? tcp_sigpool_alloc_ahash+0x80/0x660
[ 1312.908305][T29776]  tcp_sigpool_alloc_ahash+0x80/0x660
[ 1312.908402][T29776]  tcp_md5_alloc_sigpool+0x1b/0x60
[ 1312.908445][T29776]  tcp_md5_do_add+0x7f/0x1c0
[ 1312.908481][T29776]  tcp_v4_parse_md5_keys+0x314/0x3c0
[ 1312.908594][T29776]  do_tcp_setsockopt+0xf21/0x1670
[ 1312.908699][T29776]  ? selinux_socket_setsockopt+0x1ad/0x1e0
[ 1312.908747][T29776]  tcp_setsockopt+0x51/0xb0
[ 1312.908828][T29776]  sock_common_setsockopt+0x66/0x80
[ 1312.908877][T29776]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1312.908915][T29776]  __sys_setsockopt+0x184/0x200
[ 1312.908994][T29776]  __x64_sys_setsockopt+0x64/0x80
[ 1312.909040][T29776]  x64_sys_call+0x20ec/0x2ff0
[ 1312.909072][T29776]  do_syscall_64+0xd2/0x200
[ 1312.909105][T29776]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1312.909195][T29776]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1312.909226][T29776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1312.909258][T29776] RIP: 0033:0x7f874304eb69
[ 1312.909315][T29776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1312.909342][T29776] RSP: 002b:00007f87416af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1312.909432][T29776] RAX: ffffffffffffffda RBX: 00007f8743275fa0 RCX: 00007f874304eb69
[ 1312.909451][T29776] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000005
[ 1312.909547][T29776] RBP: 00007f87416af090 R08: 00000000000000d8 R09: 0000000000000000
[ 1312.909565][T29776] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001
[ 1312.909583][T29776] R13: 0000000000000000 R14: 00007f8743275fa0 R15: 00007ffe88b61078
[ 1312.909610][T29776]  </TASK>
[ 1313.133063][T29258] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1313.141618][T29258] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1313.326049][T29258] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1313.340972][T29258] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1313.367280][T29805] lo speed is unknown, defaulting to 1000
[ 1313.383703][T29805] lo speed is unknown, defaulting to 1000
[ 1313.397156][T29805] lo speed is unknown, defaulting to 1000
[ 1313.412848][T29805] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1313.425266][T29817] netlink: 'syz.7.19239': attribute type 21 has an invalid length.
[ 1313.428025][T29258] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1313.454452][T29817] netlink: 'syz.7.19239': attribute type 1 has an invalid length.
[ 1313.462423][T29817] netlink: 132 bytes leftover after parsing attributes in process `syz.7.19239'.
[ 1313.471701][T29805] lo speed is unknown, defaulting to 1000
[ 1313.482851][T29805] lo speed is unknown, defaulting to 1000
[ 1313.490441][T29258] 8021q: adding VLAN 0 to HW filter on device team0
[ 1313.498829][T29805] lo speed is unknown, defaulting to 1000
[ 1313.512210][T29805] lo speed is unknown, defaulting to 1000
[ 1313.521815][ T7106] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1313.528944][ T7106] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1313.541642][ T7109] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1313.548810][ T7109] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1313.558775][T29805] lo speed is unknown, defaulting to 1000
[ 1313.570399][T29822] siw: device registration error -23
[ 1313.583338][T29822] netlink: 'syz.1.19241': attribute type 21 has an invalid length.
[ 1313.591783][T29258] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1313.602400][T29258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1313.644320][T29822] netlink: 'syz.1.19241': attribute type 1 has an invalid length.
[ 1313.652477][T29822] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19241'.
[ 1313.778452][T29832] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[ 1313.808698][T29258] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1313.828396][T29830] random: crng reseeded on system resumption
[ 1314.179061][T29258] veth0_vlan: entered promiscuous mode
[ 1314.188670][T29258] veth1_vlan: entered promiscuous mode
[ 1314.210520][T29258] veth0_macvtap: entered promiscuous mode
[ 1314.219114][T29258] veth1_macvtap: entered promiscuous mode
[ 1314.225608][T29258] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1314.237469][T29258] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1314.241508][ T7274] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1314.241575][ T7274] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1314.241619][ T7274] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1314.241685][ T7274] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1314.562265][T29884] vxcan1: entered allmulticast mode
[ 1314.612834][T29888] netlink: 'syz.9.19253': attribute type 21 has an invalid length.
[ 1314.612909][T29888] netlink: 144 bytes leftover after parsing attributes in process `syz.9.19253'.
[ 1314.675365][T29890] FAULT_INJECTION: forcing a failure.
[ 1314.675365][T29890] name failslab, interval 1, probability 0, space 0, times 0
[ 1314.675469][T29890] CPU: 1 UID: 0 PID: 29890 Comm: syz.7.19254 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1314.675530][T29890] Tainted: [W]=WARN
[ 1314.675537][T29890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1314.675550][T29890] Call Trace:
[ 1314.675557][T29890]  <TASK>
[ 1314.675564][T29890]  __dump_stack+0x1d/0x30
[ 1314.675610][T29890]  dump_stack_lvl+0xe8/0x140
[ 1314.675631][T29890]  dump_stack+0x15/0x1b
[ 1314.675691][T29890]  should_fail_ex+0x265/0x280
[ 1314.675799][T29890]  should_failslab+0x8c/0xb0
[ 1314.675882][T29890]  kmem_cache_alloc_noprof+0x50/0x310
[ 1314.675949][T29890]  ? audit_log_start+0x365/0x6c0
[ 1314.676032][T29890]  audit_log_start+0x365/0x6c0
[ 1314.676077][T29890]  audit_seccomp+0x48/0x100
[ 1314.676187][T29890]  ? __seccomp_filter+0x68c/0x10d0
[ 1314.676216][T29890]  __seccomp_filter+0x69d/0x10d0
[ 1314.676301][T29890]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1314.676395][T29890]  ? vfs_write+0x75e/0x8e0
[ 1314.676423][T29890]  ? __rcu_read_unlock+0x4f/0x70
[ 1314.676451][T29890]  ? __fget_files+0x184/0x1c0
[ 1314.676493][T29890]  __secure_computing+0x82/0x150
[ 1314.676519][T29890]  syscall_trace_enter+0xcf/0x1e0
[ 1314.676547][T29890]  do_syscall_64+0xac/0x200
[ 1314.676594][T29890]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1314.676624][T29890]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1314.676655][T29890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1314.676679][T29890] RIP: 0033:0x7f673a62d57c
[ 1314.676777][T29890] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1314.676801][T29890] RSP: 002b:00007f6738c8f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1314.676825][T29890] RAX: ffffffffffffffda RBX: 00007f673a855fa0 RCX: 00007f673a62d57c
[ 1314.676842][T29890] RDX: 000000000000000f RSI: 00007f6738c8f0a0 RDI: 0000000000000006
[ 1314.676859][T29890] RBP: 00007f6738c8f090 R08: 0000000000000000 R09: 0000000000000000
[ 1314.676875][T29890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1314.676887][T29890] R13: 0000000000000000 R14: 00007f673a855fa0 R15: 00007fff313b79d8
[ 1314.676921][T29890]  </TASK>
[ 1315.148110][T29912] SELinux: ebitmap: truncated map
[ 1315.167203][T29912] SELinux: failed to load policy
[ 1315.195588][T29916] FAULT_INJECTION: forcing a failure.
[ 1315.195588][T29916] name failslab, interval 1, probability 0, space 0, times 0
[ 1315.208492][T29916] CPU: 0 UID: 0 PID: 29916 Comm: syz.8.19261 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1315.208527][T29916] Tainted: [W]=WARN
[ 1315.208616][T29916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1315.208629][T29916] Call Trace:
[ 1315.208638][T29916]  <TASK>
[ 1315.208648][T29916]  __dump_stack+0x1d/0x30
[ 1315.208677][T29916]  dump_stack_lvl+0xe8/0x140
[ 1315.208746][T29916]  dump_stack+0x15/0x1b
[ 1315.208807][T29916]  should_fail_ex+0x265/0x280
[ 1315.208851][T29916]  ? ip6_setup_cork+0x113/0x7a0
[ 1315.208893][T29916]  should_failslab+0x8c/0xb0
[ 1315.208924][T29916]  __kmalloc_cache_noprof+0x4c/0x320
[ 1315.209037][T29916]  ip6_setup_cork+0x113/0x7a0
[ 1315.209070][T29916]  ? ___slab_alloc+0x270/0x900
[ 1315.209105][T29916]  ip6_append_data+0x18e/0x250
[ 1315.209172][T29916]  ? __pfx_raw6_getfrag+0x10/0x10
[ 1315.209209][T29916]  rawv6_sendmsg+0xdce/0xf80
[ 1315.209331][T29916]  ? __pfx_rawv6_sendmsg+0x10/0x10
[ 1315.209373][T29916]  inet_sendmsg+0xc5/0xd0
[ 1315.209417][T29916]  __sock_sendmsg+0x102/0x180
[ 1315.209463][T29916]  sock_write_iter+0x165/0x1b0
[ 1315.209498][T29916]  do_iter_readv_writev+0x41e/0x4c0
[ 1315.209607][T29916]  vfs_writev+0x2df/0x8b0
[ 1315.209652][T29916]  do_writev+0xe7/0x210
[ 1315.209691][T29916]  __x64_sys_writev+0x45/0x50
[ 1315.209720][T29916]  x64_sys_call+0x1e9a/0x2ff0
[ 1315.209795][T29916]  do_syscall_64+0xd2/0x200
[ 1315.209827][T29916]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1315.209858][T29916]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1315.209924][T29916]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1315.209963][T29916] RIP: 0033:0x7f352214eb69
[ 1315.209983][T29916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1315.210008][T29916] RSP: 002b:00007f35207b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 1315.210034][T29916] RAX: ffffffffffffffda RBX: 00007f3522375fa0 RCX: 00007f352214eb69
[ 1315.210047][T29916] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1315.210132][T29916] RBP: 00007f35207b7090 R08: 0000000000000000 R09: 0000000000000000
[ 1315.210148][T29916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1315.210167][T29916] R13: 0000000000000000 R14: 00007f3522375fa0 R15: 00007fffc497bcb8
[ 1315.210188][T29916]  </TASK>
[ 1315.578084][T29920] lo speed is unknown, defaulting to 1000
[ 1315.588031][T29935] atomic_op ffff888115e7e528 conn xmit_atomic 0000000000000000
[ 1315.671768][T29960] vxcan1: entered allmulticast mode
[ 1315.860800][T29958] SELinux: ebitmap: truncated map
[ 1315.863335][T29958] SELinux: failed to load policy
[ 1315.885374][T29975] netlink: 444 bytes leftover after parsing attributes in process `syz.9.19273'.
[ 1315.952546][T29975] Falling back ldisc for ttyS3.
[ 1316.465184][T29991] FAULT_INJECTION: forcing a failure.
[ 1316.465184][T29991] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1316.465220][T29991] CPU: 0 UID: 0 PID: 29991 Comm: syz.7.19275 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1316.465268][T29991] Tainted: [W]=WARN
[ 1316.465277][T29991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1316.465293][T29991] Call Trace:
[ 1316.465302][T29991]  <TASK>
[ 1316.465408][T29991]  __dump_stack+0x1d/0x30
[ 1316.465429][T29991]  dump_stack_lvl+0xe8/0x140
[ 1316.465451][T29991]  dump_stack+0x15/0x1b
[ 1316.465494][T29991]  should_fail_ex+0x265/0x280
[ 1316.465537][T29991]  should_fail+0xb/0x20
[ 1316.465574][T29991]  should_fail_usercopy+0x1a/0x20
[ 1316.465598][T29991]  _copy_from_iter+0xcf/0xe40
[ 1316.465699][T29991]  ? __build_skb_around+0x1a0/0x200
[ 1316.465742][T29991]  ? __alloc_skb+0x223/0x320
[ 1316.465858][T29991]  netlink_sendmsg+0x471/0x6b0
[ 1316.465911][T29991]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1316.465958][T29991]  __sock_sendmsg+0x145/0x180
[ 1316.466025][T29991]  ____sys_sendmsg+0x31e/0x4e0
[ 1316.466084][T29991]  ___sys_sendmsg+0x17b/0x1d0
[ 1316.466137][T29991]  __x64_sys_sendmsg+0xd4/0x160
[ 1316.466250][T29991]  x64_sys_call+0x191e/0x2ff0
[ 1316.466283][T29991]  do_syscall_64+0xd2/0x200
[ 1316.466316][T29991]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1316.466378][T29991]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1316.466409][T29991]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1316.466442][T29991] RIP: 0033:0x7f673a62eb69
[ 1316.466464][T29991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1316.466634][T29991] RSP: 002b:00007f6738c8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1316.466662][T29991] RAX: ffffffffffffffda RBX: 00007f673a855fa0 RCX: 00007f673a62eb69
[ 1316.466680][T29991] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000006
[ 1316.466698][T29991] RBP: 00007f6738c8f090 R08: 0000000000000000 R09: 0000000000000000
[ 1316.466718][T29991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1316.466735][T29991] R13: 0000000000000000 R14: 00007f673a855fa0 R15: 00007fff313b79d8
[ 1316.466762][T29991]  </TASK>
[ 1316.860981][T30012] vxcan1: entered allmulticast mode
[ 1317.082444][   T29] kauditd_printk_skb: 155 callbacks suppressed
[ 1317.082475][   T29] audit: type=1326 audit(1754351084.270:55957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30024 comm="syz.9.19283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1317.163881][   T29] audit: type=1326 audit(1754351084.270:55958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30024 comm="syz.9.19283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1317.187887][   T29] audit: type=1326 audit(1754351084.270:55959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30024 comm="syz.9.19283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1317.211481][   T29] audit: type=1326 audit(1754351084.270:55960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30024 comm="syz.9.19283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1317.235363][   T29] audit: type=1326 audit(1754351084.270:55961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30024 comm="syz.9.19283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1317.259475][   T29] audit: type=1326 audit(1754351084.270:55962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30024 comm="syz.9.19283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1317.283278][   T29] audit: type=1326 audit(1754351084.270:55963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30024 comm="syz.9.19283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1317.307214][   T29] audit: type=1326 audit(1754351084.270:55964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30024 comm="syz.9.19283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1317.439734][   T29] audit: type=1400 audit(1754351084.645:55965): avc:  denied  { connect } for  pid=30039 comm="syz.8.19288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1317.459841][   T29] audit: type=1400 audit(1754351084.645:55966): avc:  denied  { setattr } for  pid=30039 comm="syz.8.19288" name="RDS" dev="sockfs" ino=249978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1317.675742][T30074] lo speed is unknown, defaulting to 1000
[ 1318.406718][T30122] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1318.711215][T30151] FAULT_INJECTION: forcing a failure.
[ 1318.711215][T30151] name failslab, interval 1, probability 0, space 0, times 0
[ 1318.723929][T30151] CPU: 0 UID: 0 PID: 30151 Comm: syz.1.19310 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1318.724023][T30151] Tainted: [W]=WARN
[ 1318.724032][T30151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1318.724047][T30151] Call Trace:
[ 1318.724115][T30151]  <TASK>
[ 1318.724124][T30151]  __dump_stack+0x1d/0x30
[ 1318.724150][T30151]  dump_stack_lvl+0xe8/0x140
[ 1318.724175][T30151]  dump_stack+0x15/0x1b
[ 1318.724196][T30151]  should_fail_ex+0x265/0x280
[ 1318.724284][T30151]  ? subflow_ulp_init+0x98/0x2c0
[ 1318.724308][T30151]  should_failslab+0x8c/0xb0
[ 1318.724339][T30151]  __kmalloc_cache_noprof+0x4c/0x320
[ 1318.724389][T30151]  ? do_syscall_64+0xd2/0x200
[ 1318.724500][T30151]  subflow_ulp_init+0x98/0x2c0
[ 1318.724526][T30151]  tcp_set_ulp+0x1d6/0x220
[ 1318.724561][T30151]  mptcp_subflow_create_socket+0x2eb/0x630
[ 1318.724648][T30151]  __mptcp_nmpc_sk+0xb3/0x3a0
[ 1318.724672][T30151]  mptcp_connect+0x58/0x890
[ 1318.724707][T30151]  __inet_stream_connect+0x169/0x7e0
[ 1318.724877][T30151]  ? _raw_spin_unlock_bh+0x36/0x40
[ 1318.724910][T30151]  ? release_sock+0x116/0x150
[ 1318.724944][T30151]  ? _raw_spin_unlock_bh+0x36/0x40
[ 1318.725012][T30151]  ? lock_sock_nested+0x112/0x140
[ 1318.725040][T30151]  ? selinux_netlbl_socket_connect+0x115/0x130
[ 1318.725087][T30151]  inet_stream_connect+0x44/0x70
[ 1318.725195][T30151]  ? __pfx_inet_stream_connect+0x10/0x10
[ 1318.725269][T30151]  __sys_connect+0x1ef/0x2b0
[ 1318.725308][T30151]  __x64_sys_connect+0x3f/0x50
[ 1318.725424][T30151]  x64_sys_call+0x2c08/0x2ff0
[ 1318.725463][T30151]  do_syscall_64+0xd2/0x200
[ 1318.725490][T30151]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1318.725521][T30151]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1318.725550][T30151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1318.725585][T30151] RIP: 0033:0x7fc8cdd5eb69
[ 1318.725602][T30151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1318.725686][T30151] RSP: 002b:00007fc8cc3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1318.725712][T30151] RAX: ffffffffffffffda RBX: 00007fc8cdf85fa0 RCX: 00007fc8cdd5eb69
[ 1318.725727][T30151] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000005
[ 1318.725796][T30151] RBP: 00007fc8cc3c7090 R08: 0000000000000000 R09: 0000000000000000
[ 1318.725813][T30151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1318.725835][T30151] R13: 0000000000000000 R14: 00007fc8cdf85fa0 R15: 00007ffd875dfb58
[ 1318.725861][T30151]  </TASK>
[ 1319.004631][T30153] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19311'.
[ 1319.013944][T30153] IPVS: Error joining to the multicast group
[ 1319.018045][T30157] FAULT_INJECTION: forcing a failure.
[ 1319.018045][T30157] name failslab, interval 1, probability 0, space 0, times 0
[ 1319.032838][T30157] CPU: 0 UID: 0 PID: 30157 Comm: syz.6.19312 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1319.032879][T30157] Tainted: [W]=WARN
[ 1319.032888][T30157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1319.032955][T30157] Call Trace:
[ 1319.032963][T30157]  <TASK>
[ 1319.032973][T30157]  __dump_stack+0x1d/0x30
[ 1319.033008][T30157]  dump_stack_lvl+0xe8/0x140
[ 1319.033036][T30157]  dump_stack+0x15/0x1b
[ 1319.033059][T30157]  should_fail_ex+0x265/0x280
[ 1319.033094][T30157]  should_failslab+0x8c/0xb0
[ 1319.033150][T30157]  kmem_cache_alloc_noprof+0x50/0x310
[ 1319.033197][T30157]  ? getname_flags+0x80/0x3b0
[ 1319.033235][T30157]  getname_flags+0x80/0x3b0
[ 1319.033269][T30157]  user_path_at+0x28/0x130
[ 1319.033391][T30157]  __se_sys_fspick+0xaa/0x240
[ 1319.033527][T30157]  __x64_sys_fspick+0x43/0x50
[ 1319.033560][T30157]  x64_sys_call+0x44c/0x2ff0
[ 1319.033588][T30157]  do_syscall_64+0xd2/0x200
[ 1319.033655][T30157]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1319.033688][T30157]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1319.033761][T30157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1319.033784][T30157] RIP: 0033:0x7f874304eb69
[ 1319.033805][T30157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1319.033830][T30157] RSP: 002b:00007f87416af038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1
[ 1319.033856][T30157] RAX: ffffffffffffffda RBX: 00007f8743275fa0 RCX: 00007f874304eb69
[ 1319.033889][T30157] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 1319.033907][T30157] RBP: 00007f87416af090 R08: 0000000000000000 R09: 0000000000000000
[ 1319.033931][T30157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1319.033948][T30157] R13: 0000000000000001 R14: 00007f8743275fa0 R15: 00007ffe88b61078
[ 1319.033982][T30157]  </TASK>
[ 1319.037146][T30153] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1319.287304][T30169] FAULT_INJECTION: forcing a failure.
[ 1319.287304][T30169] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1319.300499][T30169] CPU: 1 UID: 0 PID: 30169 Comm: syz.1.19317 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1319.300536][T30169] Tainted: [W]=WARN
[ 1319.300543][T30169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1319.300615][T30169] Call Trace:
[ 1319.300622][T30169]  <TASK>
[ 1319.300629][T30169]  __dump_stack+0x1d/0x30
[ 1319.300651][T30169]  dump_stack_lvl+0xe8/0x140
[ 1319.300678][T30169]  dump_stack+0x15/0x1b
[ 1319.300701][T30169]  should_fail_ex+0x265/0x280
[ 1319.300746][T30169]  should_fail+0xb/0x20
[ 1319.300850][T30169]  should_fail_usercopy+0x1a/0x20
[ 1319.300870][T30169]  _copy_to_user+0x20/0xa0
[ 1319.300901][T30169]  simple_read_from_buffer+0xb5/0x130
[ 1319.300984][T30169]  proc_fail_nth_read+0x10e/0x150
[ 1319.301014][T30169]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1319.301116][T30169]  vfs_read+0x19d/0x6f0
[ 1319.301144][T30169]  ? __rcu_read_unlock+0x4f/0x70
[ 1319.301238][T30169]  ? __fget_files+0x184/0x1c0
[ 1319.301274][T30169]  ksys_read+0xda/0x1a0
[ 1319.301298][T30169]  __x64_sys_read+0x40/0x50
[ 1319.301333][T30169]  x64_sys_call+0x27bc/0x2ff0
[ 1319.301361][T30169]  do_syscall_64+0xd2/0x200
[ 1319.301391][T30169]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1319.301423][T30169]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1319.301452][T30169]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1319.301546][T30169] RIP: 0033:0x7fc8cdd5d57c
[ 1319.301564][T30169] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1319.301588][T30169] RSP: 002b:00007fc8cc3c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1319.301688][T30169] RAX: ffffffffffffffda RBX: 00007fc8cdf85fa0 RCX: 00007fc8cdd5d57c
[ 1319.301705][T30169] RDX: 000000000000000f RSI: 00007fc8cc3c70a0 RDI: 0000000000000005
[ 1319.301720][T30169] RBP: 00007fc8cc3c7090 R08: 0000000000000000 R09: 0000000000000000
[ 1319.301732][T30169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1319.301786][T30169] R13: 0000000000000000 R14: 00007fc8cdf85fa0 R15: 00007ffd875dfb58
[ 1319.301812][T30169]  </TASK>
[ 1319.304838][T30153] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1319.593347][T30153] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1319.670847][T30192] Invalid logical block size (2)
[ 1319.694735][T30203] netlink: 132 bytes leftover after parsing attributes in process `syz.8.19322'.
[ 1319.717919][T30153] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1319.771143][T30205] netlink: 176 bytes leftover after parsing attributes in process `syz.1.19325'.
[ 1319.803575][ T7106] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1319.836347][ T7106] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1319.854616][T30216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19326'.
[ 1319.863769][T30216] netlink: 'syz.1.19326': attribute type 5 has an invalid length.
[ 1319.872294][ T7106] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1319.894989][ T7106] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1319.911097][T30220] FAULT_INJECTION: forcing a failure.
[ 1319.911097][T30220] name failslab, interval 1, probability 0, space 0, times 0
[ 1319.923850][T30220] CPU: 0 UID: 0 PID: 30220 Comm: syz.8.19327 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1319.923962][T30220] Tainted: [W]=WARN
[ 1319.923969][T30220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1319.923982][T30220] Call Trace:
[ 1319.923989][T30220]  <TASK>
[ 1319.923996][T30220]  __dump_stack+0x1d/0x30
[ 1319.924024][T30220]  dump_stack_lvl+0xe8/0x140
[ 1319.924051][T30220]  dump_stack+0x15/0x1b
[ 1319.924091][T30220]  should_fail_ex+0x265/0x280
[ 1319.924133][T30220]  should_failslab+0x8c/0xb0
[ 1319.924163][T30220]  __kmalloc_noprof+0xa5/0x3e0
[ 1319.924199][T30220]  ? iovec_from_user+0x84/0x210
[ 1319.924241][T30220]  ? kstrtoull+0x111/0x140
[ 1319.924280][T30220]  iovec_from_user+0x84/0x210
[ 1319.924314][T30220]  __import_iovec+0xf3/0x540
[ 1319.924345][T30220]  ? __rcu_read_unlock+0x4f/0x70
[ 1319.924376][T30220]  import_iovec+0x61/0x80
[ 1319.924440][T30220]  __se_sys_keyctl+0x4e6/0xb80
[ 1319.924528][T30220]  __x64_sys_keyctl+0x67/0x80
[ 1319.924553][T30220]  x64_sys_call+0x2f6d/0x2ff0
[ 1319.924578][T30220]  do_syscall_64+0xd2/0x200
[ 1319.924603][T30220]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1319.924716][T30220]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1319.924741][T30220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1319.924763][T30220] RIP: 0033:0x7f352214eb69
[ 1319.924783][T30220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1319.924808][T30220] RSP: 002b:00007f35207b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[ 1319.924834][T30220] RAX: ffffffffffffffda RBX: 00007f3522375fa0 RCX: 00007f352214eb69
[ 1319.924890][T30220] RDX: 0000200000003580 RSI: 0000000000000000 RDI: 0000000000000014
[ 1319.924903][T30220] RBP: 00007f35207b7090 R08: 0000000000000000 R09: 0000000000000000
[ 1319.924937][T30220] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001
[ 1319.924950][T30220] R13: 0000000000000001 R14: 00007f3522375fa0 R15: 00007fffc497bcb8
[ 1319.924976][T30220]  </TASK>
[ 1320.199554][T30226] netlink: 'syz.8.19330': attribute type 1 has an invalid length.
[ 1320.241489][T30226] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1320.306611][T30263] bond1: (slave bridge1): making interface the new active one
[ 1320.320419][T30263] bond1: (slave bridge1): Enslaving as an active interface with an up link
[ 1320.485817][T30294] netlink: 64 bytes leftover after parsing attributes in process `syz.9.19335'.
[ 1320.559703][T30303] netlink: 444 bytes leftover after parsing attributes in process `syz.6.19341'.
[ 1320.659247][T30303] Falling back ldisc for ttyS3.
[ 1320.797665][T30323] netlink: 28 bytes leftover after parsing attributes in process `syz.9.19343'.
[ 1320.886086][T30343] FAULT_INJECTION: forcing a failure.
[ 1320.886086][T30343] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1320.899287][T30343] CPU: 0 UID: 0 PID: 30343 Comm: syz.9.19344 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1320.899376][T30343] Tainted: [W]=WARN
[ 1320.899382][T30343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1320.899394][T30343] Call Trace:
[ 1320.899400][T30343]  <TASK>
[ 1320.899407][T30343]  __dump_stack+0x1d/0x30
[ 1320.899427][T30343]  dump_stack_lvl+0xe8/0x140
[ 1320.899445][T30343]  dump_stack+0x15/0x1b
[ 1320.899471][T30343]  should_fail_ex+0x265/0x280
[ 1320.899502][T30343]  should_fail+0xb/0x20
[ 1320.899561][T30343]  should_fail_usercopy+0x1a/0x20
[ 1320.899578][T30343]  _copy_from_user+0x1c/0xb0
[ 1320.899608][T30343]  io_submit_one+0x52/0x11d0
[ 1320.899643][T30343]  __se_sys_io_submit+0xfb/0x280
[ 1320.899683][T30343]  __x64_sys_io_submit+0x43/0x50
[ 1320.899705][T30343]  x64_sys_call+0x2d5d/0x2ff0
[ 1320.899725][T30343]  do_syscall_64+0xd2/0x200
[ 1320.899798][T30343]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1320.899841][T30343]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1320.899864][T30343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1320.899886][T30343] RIP: 0033:0x7f0b08a8eb69
[ 1320.899907][T30343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1320.899924][T30343] RSP: 002b:00007f0b070ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 1320.899999][T30343] RAX: ffffffffffffffda RBX: 00007f0b08cb5fa0 RCX: 00007f0b08a8eb69
[ 1320.900011][T30343] RDX: 0000200000001c00 RSI: 0000000000000001 RDI: 00007f0b097f1000
[ 1320.900022][T30343] RBP: 00007f0b070ef090 R08: 0000000000000000 R09: 0000000000000000
[ 1320.900033][T30343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1320.900059][T30343] R13: 0000000000000000 R14: 00007f0b08cb5fa0 R15: 00007ffccc7e8968
[ 1320.900100][T30343]  </TASK>
[ 1321.145562][T30345] lo speed is unknown, defaulting to 1000
[ 1321.269476][T30374] FAULT_INJECTION: forcing a failure.
[ 1321.269476][T30374] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1321.282819][T30374] CPU: 0 UID: 0 PID: 30374 Comm: syz.9.19348 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1321.282857][T30374] Tainted: [W]=WARN
[ 1321.282864][T30374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1321.282876][T30374] Call Trace:
[ 1321.282883][T30374]  <TASK>
[ 1321.282892][T30374]  __dump_stack+0x1d/0x30
[ 1321.282992][T30374]  dump_stack_lvl+0xe8/0x140
[ 1321.283019][T30374]  dump_stack+0x15/0x1b
[ 1321.283112][T30374]  should_fail_ex+0x265/0x280
[ 1321.283172][T30374]  should_fail+0xb/0x20
[ 1321.283210][T30374]  should_fail_usercopy+0x1a/0x20
[ 1321.283267][T30374]  _copy_from_user+0x1c/0xb0
[ 1321.283345][T30374]  perf_copy_attr+0x145/0x610
[ 1321.283425][T30374]  __se_sys_perf_event_open+0x67/0x11c0
[ 1321.283458][T30374]  ? vfs_write+0x75e/0x8e0
[ 1321.283481][T30374]  ? __rcu_read_unlock+0x4f/0x70
[ 1321.283511][T30374]  __x64_sys_perf_event_open+0x67/0x80
[ 1321.283575][T30374]  x64_sys_call+0x7bd/0x2ff0
[ 1321.283598][T30374]  do_syscall_64+0xd2/0x200
[ 1321.283624][T30374]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1321.283677][T30374]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1321.283701][T30374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1321.283734][T30374] RIP: 0033:0x7f0b08a8eb69
[ 1321.283750][T30374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1321.283777][T30374] RSP: 002b:00007f0b070ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[ 1321.283798][T30374] RAX: ffffffffffffffda RBX: 00007f0b08cb5fa0 RCX: 00007f0b08a8eb69
[ 1321.283811][T30374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[ 1321.283827][T30374] RBP: 00007f0b070ef090 R08: 0000000000000000 R09: 0000000000000000
[ 1321.283841][T30374] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[ 1321.283854][T30374] R13: 0000000000000000 R14: 00007f0b08cb5fa0 R15: 00007ffccc7e8968
[ 1321.283947][T30374]  </TASK>
[ 1321.722664][T30399] netlink: 'syz.8.19356': attribute type 3 has an invalid length.
[ 1321.742148][T30399] netlink: 'syz.8.19356': attribute type 3 has an invalid length.
[ 1321.772618][   T29] kauditd_printk_skb: 87 callbacks suppressed
[ 1321.772637][   T29] audit: type=1326 audit(1754351089.291:56054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30402 comm="syz.6.19357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874304eb69 code=0x7ffc0000
[ 1321.789769][T30403] lo speed is unknown, defaulting to 1000
[ 1321.802704][   T29] audit: type=1326 audit(1754351089.291:56055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30402 comm="syz.6.19357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874304eb69 code=0x7ffc0000
[ 1321.845616][T30397] lo speed is unknown, defaulting to 1000
[ 1321.862534][T30399] tmpfs: Bad value for 'mpol'
[ 1321.872233][   T29] audit: type=1326 audit(1754351089.291:56056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30402 comm="syz.6.19357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f874304eb69 code=0x7ffc0000
[ 1321.896494][   T29] audit: type=1326 audit(1754351089.366:56057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30402 comm="syz.6.19357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874304eb69 code=0x7ffc0000
[ 1321.920280][   T29] audit: type=1326 audit(1754351089.366:56058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30402 comm="syz.6.19357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874304eb69 code=0x7ffc0000
[ 1322.041000][T30460] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19362'.
[ 1322.072909][   T29] audit: type=1326 audit(1754351089.613:56059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30444 comm="syz.8.19360" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f352214eb69 code=0x0
[ 1322.140890][   T29] audit: type=1400 audit(1754351089.677:56060): avc:  denied  { prog_load } for  pid=30463 comm="syz.1.19363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1322.140938][   T29] audit: type=1400 audit(1754351089.677:56061): avc:  denied  { bpf } for  pid=30463 comm="syz.1.19363" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1322.140988][   T29] audit: type=1400 audit(1754351089.677:56062): avc:  denied  { perfmon } for  pid=30463 comm="syz.1.19363" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1322.141080][   T29] audit: type=1400 audit(1754351089.677:56063): avc:  denied  { map_create } for  pid=30465 comm="syz.8.19364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1322.261493][T30474] pim6reg: entered allmulticast mode
[ 1322.706791][T30485] FAULT_INJECTION: forcing a failure.
[ 1322.706791][T30485] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1322.706858][T30485] CPU: 1 UID: 0 PID: 30485 Comm: syz.7.19368 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1322.706892][T30485] Tainted: [W]=WARN
[ 1322.706899][T30485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1322.706912][T30485] Call Trace:
[ 1322.706918][T30485]  <TASK>
[ 1322.706978][T30485]  __dump_stack+0x1d/0x30
[ 1322.707010][T30485]  dump_stack_lvl+0xe8/0x140
[ 1322.707036][T30485]  dump_stack+0x15/0x1b
[ 1322.707058][T30485]  should_fail_ex+0x265/0x280
[ 1322.707170][T30485]  should_fail+0xb/0x20
[ 1322.707200][T30485]  should_fail_usercopy+0x1a/0x20
[ 1322.707252][T30485]  _copy_from_user+0x1c/0xb0
[ 1322.707278][T30485]  ___sys_recvmsg+0xaa/0x370
[ 1322.707296][T30485]  ? _parse_integer+0x27/0x40
[ 1322.707340][T30485]  do_recvmmsg+0x1ef/0x540
[ 1322.707394][T30485]  ? fput+0x8f/0xc0
[ 1322.707429][T30485]  __x64_sys_recvmmsg+0xe5/0x170
[ 1322.707450][T30485]  x64_sys_call+0x27a6/0x2ff0
[ 1322.707476][T30485]  do_syscall_64+0xd2/0x200
[ 1322.707507][T30485]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1322.707579][T30485]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1322.707601][T30485]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1322.707622][T30485] RIP: 0033:0x7f673a62eb69
[ 1322.707700][T30485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1322.707720][T30485] RSP: 002b:00007f6738c8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1322.707740][T30485] RAX: ffffffffffffffda RBX: 00007f673a855fa0 RCX: 00007f673a62eb69
[ 1322.707756][T30485] RDX: 0000000000000001 RSI: 0000200000000fc0 RDI: 0000000000000007
[ 1322.707773][T30485] RBP: 00007f6738c8f090 R08: 0000000000000000 R09: 0000000000000000
[ 1322.707865][T30485] R10: 0000000000000220 R11: 0000000000000246 R12: 0000000000000001
[ 1322.707881][T30485] R13: 0000000000000000 R14: 00007f673a855fa0 R15: 00007fff313b79d8
[ 1322.707906][T30485]  </TASK>
[ 1322.841434][T30489] netlink: 'syz.6.19370': attribute type 3 has an invalid length.
[ 1322.962393][T30489] netlink: 'syz.6.19370': attribute type 3 has an invalid length.
[ 1322.963204][T30463] pim6reg: left allmulticast mode
[ 1322.985539][T30489] tmpfs: Bad value for 'mpol'
[ 1323.120281][T30497] lo speed is unknown, defaulting to 1000
[ 1323.122344][T30504] netlink: 20 bytes leftover after parsing attributes in process `syz.8.19374'.
[ 1323.294274][T30532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19377'.
[ 1323.424517][T30540] IPVS: Error joining to the multicast group
[ 1323.516063][T30548] netlink: 'syz.9.19382': attribute type 3 has an invalid length.
[ 1323.534786][T30548] netlink: 'syz.9.19382': attribute type 3 has an invalid length.
[ 1323.554626][T30548] tmpfs: Bad value for 'mpol'
[ 1323.717133][T30558] pim6reg: entered allmulticast mode
[ 1324.078076][T30562] lo speed is unknown, defaulting to 1000
[ 1324.194314][T30588] __nla_validate_parse: 1 callbacks suppressed
[ 1324.194335][T30588] netlink: 132 bytes leftover after parsing attributes in process `syz.8.19387'.
[ 1324.240739][T30567] FAULT_INJECTION: forcing a failure.
[ 1324.240739][T30567] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1324.240824][T30567] CPU: 1 UID: 0 PID: 30567 Comm: syz.7.19386 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1324.240858][T30567] Tainted: [W]=WARN
[ 1324.240866][T30567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1324.240933][T30567] Call Trace:
[ 1324.240941][T30567]  <TASK>
[ 1324.240952][T30567]  __dump_stack+0x1d/0x30
[ 1324.240975][T30567]  dump_stack_lvl+0xe8/0x140
[ 1324.240994][T30567]  dump_stack+0x15/0x1b
[ 1324.241012][T30567]  should_fail_ex+0x265/0x280
[ 1324.241070][T30567]  should_fail_alloc_page+0xf2/0x100
[ 1324.241103][T30567]  __alloc_frozen_pages_noprof+0xff/0x360
[ 1324.241143][T30567]  alloc_pages_mpol+0xb3/0x250
[ 1324.241199][T30567]  folio_alloc_mpol_noprof+0x39/0x80
[ 1324.241271][T30567]  shmem_get_folio_gfp+0x3cf/0xd60
[ 1324.241336][T30567]  shmem_write_begin+0xa8/0x190
[ 1324.241361][T30567]  generic_perform_write+0x184/0x490
[ 1324.241403][T30567]  shmem_file_write_iter+0xc5/0xf0
[ 1324.241462][T30567]  do_iter_readv_writev+0x41e/0x4c0
[ 1324.241497][T30567]  vfs_writev+0x2df/0x8b0
[ 1324.241651][T30567]  __se_sys_pwritev2+0xfc/0x1c0
[ 1324.241682][T30567]  __x64_sys_pwritev2+0x67/0x80
[ 1324.241778][T30567]  x64_sys_call+0x2c55/0x2ff0
[ 1324.241806][T30567]  do_syscall_64+0xd2/0x200
[ 1324.241838][T30567]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1324.241913][T30567]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1324.241943][T30567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1324.241972][T30567] RIP: 0033:0x7f673a62eb69
[ 1324.241991][T30567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1324.242011][T30567] RSP: 002b:00007f6738c8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 1324.242060][T30567] RAX: ffffffffffffffda RBX: 00007f673a855fa0 RCX: 00007f673a62eb69
[ 1324.242078][T30567] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 000000000000000a
[ 1324.242099][T30567] RBP: 00007f6738c8f090 R08: 0000000000000000 R09: 0000000000000001
[ 1324.242116][T30567] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000001
[ 1324.242129][T30567] R13: 0000000000000000 R14: 00007f673a855fa0 R15: 00007fff313b79d8
[ 1324.242175][T30567]  </TASK>
[ 1324.410201][T30553] pim6reg: left allmulticast mode
[ 1324.623136][T30600] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19390'.
[ 1324.642963][T30600] IPVS: Error joining to the multicast group
[ 1324.681842][T30604] FAULT_INJECTION: forcing a failure.
[ 1324.681842][T30604] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1324.695089][T30604] CPU: 0 UID: 0 PID: 30604 Comm: syz.7.19392 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1324.695133][T30604] Tainted: [W]=WARN
[ 1324.695142][T30604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1324.695172][T30604] Call Trace:
[ 1324.695180][T30604]  <TASK>
[ 1324.695191][T30604]  __dump_stack+0x1d/0x30
[ 1324.695213][T30604]  dump_stack_lvl+0xe8/0x140
[ 1324.695237][T30604]  dump_stack+0x15/0x1b
[ 1324.695268][T30604]  should_fail_ex+0x265/0x280
[ 1324.695321][T30604]  should_fail+0xb/0x20
[ 1324.695350][T30604]  should_fail_usercopy+0x1a/0x20
[ 1324.695369][T30604]  _copy_from_user+0x1c/0xb0
[ 1324.695512][T30604]  ___sys_sendmsg+0xc1/0x1d0
[ 1324.695574][T30604]  __x64_sys_sendmsg+0xd4/0x160
[ 1324.695613][T30604]  x64_sys_call+0x191e/0x2ff0
[ 1324.695779][T30604]  do_syscall_64+0xd2/0x200
[ 1324.695815][T30604]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1324.695892][T30604]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1324.695999][T30604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1324.696029][T30604] RIP: 0033:0x7f673a62eb69
[ 1324.696051][T30604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1324.696107][T30604] RSP: 002b:00007f6738c8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1324.696206][T30604] RAX: ffffffffffffffda RBX: 00007f673a855fa0 RCX: 00007f673a62eb69
[ 1324.696221][T30604] RDX: 0000000000000894 RSI: 0000200000000000 RDI: 0000000000000003
[ 1324.696234][T30604] RBP: 00007f6738c8f090 R08: 0000000000000000 R09: 0000000000000000
[ 1324.696330][T30604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1324.696347][T30604] R13: 0000000000000000 R14: 00007f673a855fa0 R15: 00007fff313b79d8
[ 1324.696374][T30604]  </TASK>
[ 1324.899760][T30606] netlink: 'syz.7.19393': attribute type 3 has an invalid length.
[ 1324.917893][T30606] netlink: 'syz.7.19393': attribute type 3 has an invalid length.
[ 1324.927945][T30606] tmpfs: Bad value for 'mpol'
[ 1325.159059][T30615] FAULT_INJECTION: forcing a failure.
[ 1325.159059][T30615] name failslab, interval 1, probability 0, space 0, times 0
[ 1325.171762][T30615] CPU: 0 UID: 0 PID: 30615 Comm: syz.7.19396 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1325.171809][T30615] Tainted: [W]=WARN
[ 1325.171816][T30615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1325.171895][T30615] Call Trace:
[ 1325.171955][T30615]  <TASK>
[ 1325.171964][T30615]  __dump_stack+0x1d/0x30
[ 1325.171987][T30615]  dump_stack_lvl+0xe8/0x140
[ 1325.172007][T30615]  dump_stack+0x15/0x1b
[ 1325.172024][T30615]  should_fail_ex+0x265/0x280
[ 1325.172069][T30615]  should_failslab+0x8c/0xb0
[ 1325.172161][T30615]  kmem_cache_alloc_node_noprof+0x57/0x320
[ 1325.172282][T30615]  ? __alloc_skb+0x101/0x320
[ 1325.172324][T30615]  __alloc_skb+0x101/0x320
[ 1325.172364][T30615]  tipc_buf_acquire+0x2c/0xb0
[ 1325.172403][T30615]  tipc_named_withdraw+0x13b/0x360
[ 1325.172445][T30615]  tipc_nametbl_withdraw+0x114/0x200
[ 1325.172474][T30615]  tipc_sk_leave+0x258/0x270
[ 1325.172511][T30615]  tipc_release+0x83/0xd10
[ 1325.172577][T30615]  ? task_work_add+0x268/0x2c0
[ 1325.172609][T30615]  sock_close+0x68/0x150
[ 1325.172631][T30615]  ? __pfx_sock_close+0x10/0x10
[ 1325.172708][T30615]  __fput+0x29b/0x650
[ 1325.172750][T30615]  ____fput+0x1c/0x30
[ 1325.172853][T30615]  task_work_run+0x131/0x1a0
[ 1325.172885][T30615]  exit_to_user_mode_loop+0xe4/0x100
[ 1325.172908][T30615]  do_syscall_64+0x1d6/0x200
[ 1325.172938][T30615]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1325.173045][T30615]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1325.173067][T30615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1325.173089][T30615] RIP: 0033:0x7f673a62eb69
[ 1325.173105][T30615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1325.173125][T30615] RSP: 002b:00007f6738c8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 1325.173196][T30615] RAX: 0000000000000003 RBX: 00007f673a855fa0 RCX: 00007f673a62eb69
[ 1325.173209][T30615] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1325.173221][T30615] RBP: 00007f6738c8f090 R08: 0000000000000000 R09: 0000000000000000
[ 1325.173234][T30615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1325.173248][T30615] R13: 0000000000000000 R14: 00007f673a855fa0 R15: 00007fff313b79d8
[ 1325.173273][T30615]  </TASK>
[ 1325.173284][T30615] tipc: Withdrawal distribution failure
[ 1325.561225][T30624] lo speed is unknown, defaulting to 1000
[ 1325.652854][T30641] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19400'.
[ 1325.789390][T30662] pim6reg: entered allmulticast mode
[ 1325.807893][T30656] random: crng reseeded on system resumption
[ 1325.927851][T30674] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8)
[ 1325.934423][T30674] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1325.934498][T30674] vhci_hcd vhci_hcd.0: Device attached
[ 1325.935766][T30675] vhci_hcd: cannot find the pending unlink 6
[ 1325.945823][T30675] vhci_hcd: connection closed
[ 1325.951544][ T7274] vhci_hcd: stop threads
[ 1325.951556][ T7274] vhci_hcd: release socket
[ 1325.951564][ T7274] vhci_hcd: disconnect device
[ 1326.451571][T30653] pim6reg: left allmulticast mode
[ 1326.500313][   T29] kauditd_printk_skb: 150 callbacks suppressed
[ 1326.500328][   T29] audit: type=1400 audit(1754351094.366:56214): avc:  denied  { watch_reads } for  pid=30685 comm="syz.1.19410" path="/105" dev="tmpfs" ino=582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1326.529633][   T29] audit: type=1400 audit(1754351094.366:56215): avc:  denied  { create } for  pid=30687 comm="syz.6.19411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1326.535686][T30686] lo speed is unknown, defaulting to 1000
[ 1326.549551][   T29] audit: type=1400 audit(1754351094.376:56216): avc:  denied  { setopt } for  pid=30687 comm="syz.6.19411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1326.549581][   T29] audit: type=1400 audit(1754351094.376:56217): avc:  denied  { bind } for  pid=30687 comm="syz.6.19411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1326.594827][   T29] audit: type=1400 audit(1754351094.376:56218): avc:  denied  { name_bind } for  pid=30687 comm="syz.6.19411" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[ 1326.616881][   T29] audit: type=1400 audit(1754351094.376:56219): avc:  denied  { node_bind } for  pid=30687 comm="syz.6.19411" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[ 1326.638074][   T29] audit: type=1400 audit(1754351094.387:56220): avc:  denied  { name_bind } for  pid=30685 comm="syz.1.19410" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[ 1326.660049][   T29] audit: type=1400 audit(1754351094.387:56221): avc:  denied  { node_bind } for  pid=30685 comm="syz.1.19410" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 1326.675701][T30713] FAULT_INJECTION: forcing a failure.
[ 1326.675701][T30713] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1326.682783][   T29] audit: type=1400 audit(1754351094.398:56222): avc:  denied  { read write } for  pid=30685 comm="syz.1.19410" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1326.682818][   T29] audit: type=1400 audit(1754351094.398:56223): avc:  denied  { open } for  pid=30685 comm="syz.1.19410" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1326.695904][T30713] CPU: 0 UID: 0 PID: 30713 Comm: syz.9.19412 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1326.696003][T30713] Tainted: [W]=WARN
[ 1326.696013][T30713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1326.696034][T30713] Call Trace:
[ 1326.696044][T30713]  <TASK>
[ 1326.696054][T30713]  __dump_stack+0x1d/0x30
[ 1326.696085][T30713]  dump_stack_lvl+0xe8/0x140
[ 1326.696135][T30713]  dump_stack+0x15/0x1b
[ 1326.696158][T30713]  should_fail_ex+0x265/0x280
[ 1326.696208][T30713]  should_fail+0xb/0x20
[ 1326.696251][T30713]  should_fail_usercopy+0x1a/0x20
[ 1326.696354][T30713]  _copy_from_user+0x1c/0xb0
[ 1326.696401][T30713]  ___sys_sendmsg+0xc1/0x1d0
[ 1326.696471][T30713]  __x64_sys_sendmsg+0xd4/0x160
[ 1326.696550][T30713]  x64_sys_call+0x191e/0x2ff0
[ 1326.696589][T30713]  do_syscall_64+0xd2/0x200
[ 1326.696622][T30713]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1326.696658][T30713]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1326.696690][T30713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1326.696743][T30713] RIP: 0033:0x7f0b08a8eb69
[ 1326.696765][T30713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1326.696793][T30713] RSP: 002b:00007f0b070ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1326.696870][T30713] RAX: ffffffffffffffda RBX: 00007f0b08cb5fa0 RCX: 00007f0b08a8eb69
[ 1326.696889][T30713] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[ 1326.696907][T30713] RBP: 00007f0b070ef090 R08: 0000000000000000 R09: 0000000000000000
[ 1326.696926][T30713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1326.696945][T30713] R13: 0000000000000000 R14: 00007f0b08cb5fa0 R15: 00007ffccc7e8968
[ 1326.696973][T30713]  </TASK>
[ 1326.939201][T30688] lo speed is unknown, defaulting to 1000
[ 1326.987538][T30717] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19413'.
[ 1327.051692][T30747] FAULT_INJECTION: forcing a failure.
[ 1327.051692][T30747] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1327.065098][T30747] CPU: 0 UID: 0 PID: 30747 Comm: syz.9.19416 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1327.065144][T30747] Tainted: [W]=WARN
[ 1327.065154][T30747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1327.065178][T30747] Call Trace:
[ 1327.065187][T30747]  <TASK>
[ 1327.065198][T30747]  __dump_stack+0x1d/0x30
[ 1327.065268][T30747]  dump_stack_lvl+0xe8/0x140
[ 1327.065288][T30747]  dump_stack+0x15/0x1b
[ 1327.065311][T30747]  should_fail_ex+0x265/0x280
[ 1327.065381][T30747]  should_fail+0xb/0x20
[ 1327.065419][T30747]  should_fail_usercopy+0x1a/0x20
[ 1327.065446][T30747]  _copy_from_user+0x1c/0xb0
[ 1327.065521][T30747]  __sys_bind+0x106/0x2a0
[ 1327.065588][T30747]  __x64_sys_bind+0x3f/0x50
[ 1327.065623][T30747]  x64_sys_call+0x2b6e/0x2ff0
[ 1327.065645][T30747]  do_syscall_64+0xd2/0x200
[ 1327.065669][T30747]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1327.065765][T30747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1327.065787][T30747] RIP: 0033:0x7f0b08a8eb69
[ 1327.065802][T30747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1327.065827][T30747] RSP: 002b:00007f0b070ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 1327.065853][T30747] RAX: ffffffffffffffda RBX: 00007f0b08cb5fa0 RCX: 00007f0b08a8eb69
[ 1327.065919][T30747] RDX: 0000000000000006 RSI: 0000200000000140 RDI: 0000000000000008
[ 1327.065932][T30747] RBP: 00007f0b070ef090 R08: 0000000000000000 R09: 0000000000000000
[ 1327.065945][T30747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1327.065959][T30747] R13: 0000000000000000 R14: 00007f0b08cb5fa0 R15: 00007ffccc7e8968
[ 1327.065982][T30747]  </TASK>
[ 1327.321693][T30754] lo speed is unknown, defaulting to 1000
[ 1327.350054][T30761] netlink: 1347 bytes leftover after parsing attributes in process `syz.6.19419'.
[ 1327.465984][T30785] pim6reg: entered allmulticast mode
[ 1328.161219][T30770] pim6reg: left allmulticast mode
[ 1328.289959][T30811] FAULT_INJECTION: forcing a failure.
[ 1328.289959][T30811] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1328.303280][T30811] CPU: 0 UID: 0 PID: 30811 Comm: syz.9.19426 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1328.303320][T30811] Tainted: [W]=WARN
[ 1328.303327][T30811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1328.303342][T30811] Call Trace:
[ 1328.303352][T30811]  <TASK>
[ 1328.303427][T30811]  __dump_stack+0x1d/0x30
[ 1328.303456][T30811]  dump_stack_lvl+0xe8/0x140
[ 1328.303481][T30811]  dump_stack+0x15/0x1b
[ 1328.303497][T30811]  should_fail_ex+0x265/0x280
[ 1328.303591][T30811]  should_fail+0xb/0x20
[ 1328.303631][T30811]  should_fail_usercopy+0x1a/0x20
[ 1328.303694][T30811]  _copy_from_user+0x1c/0xb0
[ 1328.303743][T30811]  ___sys_sendmsg+0xc1/0x1d0
[ 1328.303825][T30811]  __x64_sys_sendmsg+0xd4/0x160
[ 1328.303886][T30811]  x64_sys_call+0x191e/0x2ff0
[ 1328.303930][T30811]  do_syscall_64+0xd2/0x200
[ 1328.303963][T30811]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1328.304001][T30811]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1328.304023][T30811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1328.304059][T30811] RIP: 0033:0x7f0b08a8eb69
[ 1328.304078][T30811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1328.304102][T30811] RSP: 002b:00007f0b070ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1328.304121][T30811] RAX: ffffffffffffffda RBX: 00007f0b08cb5fa0 RCX: 00007f0b08a8eb69
[ 1328.304224][T30811] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000000d
[ 1328.304241][T30811] RBP: 00007f0b070ef090 R08: 0000000000000000 R09: 0000000000000000
[ 1328.304315][T30811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1328.304332][T30811] R13: 0000000000000000 R14: 00007f0b08cb5fa0 R15: 00007ffccc7e8968
[ 1328.304353][T30811]  </TASK>
[ 1328.506409][T30812] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19424'.
[ 1328.515508][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811a6d8200: rx timeout, send abort
[ 1328.773675][T30831] netlink: 12 bytes leftover after parsing attributes in process `syz.9.19431'.
[ 1328.968202][T30834] lo speed is unknown, defaulting to 1000
[ 1329.248527][T30862] lo speed is unknown, defaulting to 1000
[ 1329.396534][T30891] tc_dump_action: action bad kind
[ 1330.206391][T30902] netlink: 132 bytes leftover after parsing attributes in process `syz.7.19439'.
[ 1330.226344][T30904] netlink: 8 bytes leftover after parsing attributes in process `syz.9.19440'.
[ 1331.047030][T30924] netlink: 'syz.6.19449': attribute type 3 has an invalid length.
[ 1331.061287][T30924] netlink: 'syz.6.19449': attribute type 3 has an invalid length.
[ 1331.077901][T30924] tmpfs: Bad value for 'mpol'
[ 1331.265451][   T29] kauditd_printk_skb: 97 callbacks suppressed
[ 1331.265468][   T29] audit: type=1400 audit(1754351099.419:56321): avc:  denied  { bind } for  pid=30933 comm="syz.8.19453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1331.341745][T30942] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19454'.
[ 1331.422599][   T29] audit: type=1326 audit(1754351099.634:56322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.9.19452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1331.446592][   T29] audit: type=1326 audit(1754351099.634:56323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.9.19452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1331.470306][   T29] audit: type=1326 audit(1754351099.634:56324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.9.19452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1331.494218][   T29] audit: type=1326 audit(1754351099.634:56325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.9.19452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1331.518187][   T29] audit: type=1326 audit(1754351099.634:56326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.9.19452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1331.541946][   T29] audit: type=1326 audit(1754351099.634:56327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.9.19452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1331.565713][   T29] audit: type=1326 audit(1754351099.634:56328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.9.19452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1331.589604][   T29] audit: type=1326 audit(1754351099.634:56329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.9.19452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1331.613353][   T29] audit: type=1326 audit(1754351099.634:56330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.9.19452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1331.654946][T30942] IPVS: Unknown mcast interface: vcan0
[ 1331.813546][T30947] netlink: 444 bytes leftover after parsing attributes in process `syz.7.19456'.
[ 1332.112448][T30954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19457'.
[ 1332.122604][T30954] IPVS: Error joining to the multicast group
[ 1332.447622][T30963] netlink: 'syz.8.19461': attribute type 3 has an invalid length.
[ 1332.476304][T30963] netlink: 'syz.8.19461': attribute type 3 has an invalid length.
[ 1332.500016][T30966] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19460'.
[ 1332.524052][T30963] tmpfs: Bad value for 'mpol'
[ 1332.718449][T30974] random: crng reseeded on system resumption
[ 1332.865444][T30979] FAULT_INJECTION: forcing a failure.
[ 1332.865444][T30979] name failslab, interval 1, probability 0, space 0, times 0
[ 1332.878136][T30979] CPU: 1 UID: 0 PID: 30979 Comm: syz.1.19459 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1332.878181][T30979] Tainted: [W]=WARN
[ 1332.878241][T30979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1332.878257][T30979] Call Trace:
[ 1332.878266][T30979]  <TASK>
[ 1332.878276][T30979]  __dump_stack+0x1d/0x30
[ 1332.878302][T30979]  dump_stack_lvl+0xe8/0x140
[ 1332.878329][T30979]  dump_stack+0x15/0x1b
[ 1332.878367][T30979]  should_fail_ex+0x265/0x280
[ 1332.878411][T30979]  should_failslab+0x8c/0xb0
[ 1332.878505][T30979]  kmem_cache_alloc_noprof+0x50/0x310
[ 1332.878535][T30979]  ? getname_flags+0x80/0x3b0
[ 1332.878570][T30979]  getname_flags+0x80/0x3b0
[ 1332.878607][T30979]  do_sys_openat2+0x60/0x110
[ 1332.878680][T30979]  __x64_sys_openat+0xf2/0x120
[ 1332.878727][T30979]  x64_sys_call+0x2e9c/0x2ff0
[ 1332.878750][T30979]  do_syscall_64+0xd2/0x200
[ 1332.878804][T30979]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1332.878829][T30979]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1332.878852][T30979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1332.878886][T30979] RIP: 0033:0x7fc8cdd5d4d0
[ 1332.878906][T30979] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[ 1332.879065][T30979] RSP: 002b:00007fc8cc384b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1332.879090][T30979] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fc8cdd5d4d0
[ 1332.879172][T30979] RDX: 0000000000000002 RSI: 00007fc8cc384c10 RDI: 00000000ffffff9c
[ 1332.879189][T30979] RBP: 00007fc8cc384c10 R08: 0000000000000000 R09: 00007fc8cc384987
[ 1332.879206][T30979] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 1332.879285][T30979] R13: 0000000000000000 R14: 00007fc8cdf86160 R15: 00007ffd875dfb58
[ 1332.879308][T30979]  </TASK>
[ 1332.898396][T30981] netlink: 'syz.6.19464': attribute type 4 has an invalid length.
[ 1333.270564][T30984] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1333.349127][T30984] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1333.441481][T30984] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1333.534106][T30984] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1333.701692][ T7109] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1333.752656][ T7109] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1333.800374][ T7109] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1333.847695][ T7109] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1334.832995][T31035] random: crng reseeded on system resumption
[ 1335.186248][T31053] syzkaller1: entered promiscuous mode
[ 1335.191916][T31053] syzkaller1: entered allmulticast mode
[ 1335.355263][T31064] syzkaller1: entered promiscuous mode
[ 1335.355282][T31064] syzkaller1: entered allmulticast mode
[ 1335.790677][T31068] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19486'.
[ 1335.790764][T31068] IPVS: Unknown mcast interface: vcan0
[ 1335.886614][T31073] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1335.927662][T31084] netlink: 'syz.9.19492': attribute type 3 has an invalid length.
[ 1335.940564][T31084] netlink: 'syz.9.19492': attribute type 3 has an invalid length.
[ 1335.967454][T31084] tmpfs: Bad value for 'mpol'
[ 1335.985118][   T29] kauditd_printk_skb: 83 callbacks suppressed
[ 1335.985137][   T29] audit: type=1400 audit(1754351104.548:56414): avc:  denied  { prog_load } for  pid=31087 comm="syz.8.19494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1336.011064][   T29] audit: type=1400 audit(1754351104.548:56415): avc:  denied  { bpf } for  pid=31087 comm="syz.8.19494" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1336.031898][   T29] audit: type=1400 audit(1754351104.548:56416): avc:  denied  { perfmon } for  pid=31087 comm="syz.8.19494" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1336.102490][   T29] audit: type=1400 audit(1754351104.623:56417): avc:  denied  { create } for  pid=31072 comm="syz.7.19489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1336.122450][   T29] audit: type=1400 audit(1754351104.623:56418): avc:  denied  { ioctl } for  pid=31081 comm="syz.9.19492" path="/dev/vsock" dev="devtmpfs" ino=257 ioctlcmd=0x4b48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1336.122489][   T29] audit: type=1400 audit(1754351104.623:56419): avc:  denied  { map_create } for  pid=31087 comm="syz.8.19494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1336.122514][   T29] audit: type=1400 audit(1754351104.623:56420): avc:  denied  { map_read map_write } for  pid=31087 comm="syz.8.19494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1336.122651][   T29] audit: type=1400 audit(1754351104.655:56421): avc:  denied  { bind } for  pid=31072 comm="syz.7.19489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1336.122676][   T29] audit: type=1400 audit(1754351104.666:56422): avc:  denied  { create } for  pid=31093 comm="syz.1.19495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1336.122771][   T29] audit: type=1400 audit(1754351104.666:56423): avc:  denied  { read } for  pid=31093 comm="syz.1.19495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1336.174808][T31098] pim6reg: entered allmulticast mode
[ 1336.294978][T31105] syzkaller1: entered promiscuous mode
[ 1336.295001][T31105] syzkaller1: entered allmulticast mode
[ 1336.316016][T31101] netlink: 'syz.1.19495': attribute type 1 has an invalid length.
[ 1336.486810][T31120] netlink: 'syz.1.19499': attribute type 31 has an invalid length.
[ 1336.760820][T31087] pim6reg: left allmulticast mode
[ 1336.870271][T31132] netlink: 'syz.8.19503': attribute type 1 has an invalid length.
[ 1336.898254][T31132] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1336.912046][T31132] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19503'.
[ 1336.924870][T31132] bond2 (unregistering): Released all slaves
[ 1337.360377][T31207] netlink: 132 bytes leftover after parsing attributes in process `syz.9.19505'.
[ 1337.749096][T31210] lo speed is unknown, defaulting to 1000
[ 1337.981831][T31242] netlink: 'syz.1.19510': attribute type 3 has an invalid length.
[ 1337.999666][T31242] netlink: 'syz.1.19510': attribute type 3 has an invalid length.
[ 1338.023667][T31242] tmpfs: Bad value for 'mpol'
[ 1338.611486][T31281] netlink: 8 bytes leftover after parsing attributes in process `syz.9.19520'.
[ 1338.631320][T31281] IPVS: Error joining to the multicast group
[ 1338.659025][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811a42c800: rx timeout, send abort
[ 1338.884754][T31310] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1338.943444][T31315] FAULT_INJECTION: forcing a failure.
[ 1338.943444][T31315] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1338.956752][T31315] CPU: 0 UID: 0 PID: 31315 Comm: syz.7.19530 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1338.956797][T31315] Tainted: [W]=WARN
[ 1338.956806][T31315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1338.956823][T31315] Call Trace:
[ 1338.956831][T31315]  <TASK>
[ 1338.956841][T31315]  __dump_stack+0x1d/0x30
[ 1338.956936][T31315]  dump_stack_lvl+0xe8/0x140
[ 1338.956958][T31315]  dump_stack+0x15/0x1b
[ 1338.956980][T31315]  should_fail_ex+0x265/0x280
[ 1338.957137][T31315]  should_fail+0xb/0x20
[ 1338.957232][T31315]  should_fail_usercopy+0x1a/0x20
[ 1338.957252][T31315]  _copy_from_user+0x1c/0xb0
[ 1338.957278][T31315]  do_sys_poll+0x149/0xbd0
[ 1338.957322][T31315]  ? selinux_file_open+0x2df/0x330
[ 1338.957416][T31315]  __se_sys_poll+0xdd/0x200
[ 1338.957448][T31315]  __x64_sys_poll+0x43/0x50
[ 1338.957477][T31315]  x64_sys_call+0x27d2/0x2ff0
[ 1338.957499][T31315]  do_syscall_64+0xd2/0x200
[ 1338.957527][T31315]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1338.957551][T31315]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1338.957577][T31315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1338.957662][T31315] RIP: 0033:0x7f673a62eb69
[ 1338.957678][T31315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1338.957697][T31315] RSP: 002b:00007f6738c8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007
[ 1338.957717][T31315] RAX: ffffffffffffffda RBX: 00007f673a855fa0 RCX: 00007f673a62eb69
[ 1338.957731][T31315] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000
[ 1338.957748][T31315] RBP: 00007f6738c8f090 R08: 0000000000000000 R09: 0000000000000000
[ 1338.957764][T31315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1338.957810][T31315] R13: 0000000000000000 R14: 00007f673a855fa0 R15: 00007fff313b79d8
[ 1338.957830][T31315]  </TASK>
[ 1339.096353][    C1] vcan0: j1939_tp_rxtimer: 0xffff888119805200: rx timeout, send abort
[ 1339.180504][T31310] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1339.234748][T31328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19534'.
[ 1339.246509][T31328] IPVS: Error joining to the multicast group
[ 1339.267080][T31319] lo speed is unknown, defaulting to 1000
[ 1339.304471][T31310] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1339.410053][T31310] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1339.444866][T31359] netlink: 444 bytes leftover after parsing attributes in process `syz.8.19537'.
[ 1339.626153][    C1] vcan0: j1939_tp_rxtimer: 0xffff888119805200: abort rx timeout. Force session deactivation
[ 1340.445398][T31385] vxcan1: entered allmulticast mode
[ 1340.616309][T31395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31395 comm=syz.1.19545
[ 1340.660556][   T29] kauditd_printk_skb: 513 callbacks suppressed
[ 1340.660577][   T29] audit: type=1400 audit(1754351365.515:56937): avc:  denied  { create } for  pid=31394 comm="syz.1.19545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1340.687318][   T29] audit: type=1400 audit(1754351365.526:56938): avc:  denied  { write } for  pid=31394 comm="syz.1.19545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1340.707820][   T29] audit: type=1400 audit(1754351365.526:56939): avc:  denied  { nlmsg_write } for  pid=31394 comm="syz.1.19545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1340.728725][   T29] audit: type=1400 audit(1754351365.536:56940): avc:  denied  { sys_module } for  pid=31394 comm="syz.1.19545" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 1340.844889][T31404] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1340.916383][   T29] audit: type=1400 audit(1754351365.751:56941): avc:  denied  { prog_load } for  pid=31401 comm="syz.6.19546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1340.916493][   T29] audit: type=1400 audit(1754351365.751:56942): avc:  denied  { bpf } for  pid=31401 comm="syz.6.19546" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1340.916528][   T29] audit: type=1400 audit(1754351365.751:56943): avc:  denied  { perfmon } for  pid=31401 comm="syz.6.19546" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1340.916589][   T29] audit: type=1400 audit(1754351365.751:56944): avc:  denied  { map_create } for  pid=31401 comm="syz.6.19546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1340.916614][   T29] audit: type=1400 audit(1754351365.751:56945): avc:  denied  { map_read map_write } for  pid=31401 comm="syz.6.19546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1340.916739][   T29] audit: type=1400 audit(1754351365.826:56946): avc:  denied  { create } for  pid=31401 comm="syz.6.19546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1340.938159][T31406] pim6reg: entered allmulticast mode
[ 1340.959534][T31409] netlink: 'syz.1.19548': attribute type 3 has an invalid length.
[ 1340.959574][T31409] netlink: 'syz.1.19548': attribute type 3 has an invalid length.
[ 1340.984636][T31409] tmpfs: Bad value for 'mpol'
[ 1341.183158][T31421] netlink: 'syz.1.19553': attribute type 3 has an invalid length.
[ 1341.183240][T31421] netlink: 'syz.1.19553': attribute type 3 has an invalid length.
[ 1341.184482][T31417] random: crng reseeded on system resumption
[ 1341.213412][T31421] tmpfs: Bad value for 'mpol'
[ 1341.354897][T31429] netlink: 132 bytes leftover after parsing attributes in process `syz.7.19557'.
[ 1341.403354][T31435] bridge0: port 3(batadv1) entered blocking state
[ 1341.403393][T31435] bridge0: port 3(batadv1) entered disabled state
[ 1341.403578][T31435] batadv1: entered allmulticast mode
[ 1341.424055][T31435] batadv1: entered promiscuous mode
[ 1341.622243][T31401] pim6reg: left allmulticast mode
[ 1342.048947][T31457] lo speed is unknown, defaulting to 1000
[ 1342.087853][ T7106] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[ 1342.097126][ T7106] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[ 1342.188875][ T7106] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1342.219329][ T7106] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1342.243040][ T7106] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1342.251634][ T7106] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1342.265080][T31493] FAULT_INJECTION: forcing a failure.
[ 1342.265080][T31493] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1342.278405][T31493] CPU: 1 UID: 0 PID: 31493 Comm: syz.6.19567 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1342.278451][T31493] Tainted: [W]=WARN
[ 1342.278461][T31493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1342.278478][T31493] Call Trace:
[ 1342.278487][T31493]  <TASK>
[ 1342.278496][T31493]  __dump_stack+0x1d/0x30
[ 1342.278563][T31493]  dump_stack_lvl+0xe8/0x140
[ 1342.278589][T31493]  dump_stack+0x15/0x1b
[ 1342.278659][T31493]  should_fail_ex+0x265/0x280
[ 1342.278703][T31493]  should_fail+0xb/0x20
[ 1342.278799][T31493]  should_fail_usercopy+0x1a/0x20
[ 1342.278820][T31493]  _copy_from_user+0x1c/0xb0
[ 1342.278911][T31493]  memdup_user+0x5e/0xd0
[ 1342.278938][T31493]  strndup_user+0x68/0xb0
[ 1342.278985][T31493]  __se_sys_mount+0x4d/0x2e0
[ 1342.279009][T31493]  ? fput+0x8f/0xc0
[ 1342.279039][T31493]  ? ksys_write+0x192/0x1a0
[ 1342.279068][T31493]  __x64_sys_mount+0x67/0x80
[ 1342.279140][T31493]  x64_sys_call+0x2b4d/0x2ff0
[ 1342.279167][T31493]  do_syscall_64+0xd2/0x200
[ 1342.279218][T31493]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1342.279251][T31493]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1342.279276][T31493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1342.279322][T31493] RIP: 0033:0x7f874304eb69
[ 1342.279339][T31493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1342.279371][T31493] RSP: 002b:00007f87416af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1342.279392][T31493] RAX: ffffffffffffffda RBX: 00007f8743275fa0 RCX: 00007f874304eb69
[ 1342.279404][T31493] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000000000000000
[ 1342.279420][T31493] RBP: 00007f87416af090 R08: 0000200000000180 R09: 0000000000000000
[ 1342.279436][T31493] R10: 0000000000208000 R11: 0000000000000246 R12: 0000000000000001
[ 1342.279452][T31493] R13: 0000000000000000 R14: 00007f8743275fa0 R15: 00007ffe88b61078
[ 1342.279479][T31493]  </TASK>
[ 1342.588414][T31497] netlink: 132 bytes leftover after parsing attributes in process `syz.6.19569'.
[ 1342.800313][T31506] pim6reg: entered allmulticast mode
[ 1342.940152][T31524] netlink: 'syz.1.19575': attribute type 1 has an invalid length.
[ 1342.974072][T31524] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1343.007347][T31524] bond1: (slave dummy0): making interface the new active one
[ 1343.016593][T31524] bond1: (slave dummy0): Enslaving as an active interface with an up link
[ 1343.402167][T31496] pim6reg: left allmulticast mode
[ 1343.762672][T31585] random: crng reseeded on system resumption
[ 1344.443308][T31607] FAULT_INJECTION: forcing a failure.
[ 1344.443308][T31607] name failslab, interval 1, probability 0, space 0, times 0
[ 1344.443343][T31607] CPU: 0 UID: 0 PID: 31607 Comm: syz.1.19593 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1344.443420][T31607] Tainted: [W]=WARN
[ 1344.443430][T31607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1344.443445][T31607] Call Trace:
[ 1344.443452][T31607]  <TASK>
[ 1344.443460][T31607]  __dump_stack+0x1d/0x30
[ 1344.443481][T31607]  dump_stack_lvl+0xe8/0x140
[ 1344.443504][T31607]  dump_stack+0x15/0x1b
[ 1344.443522][T31607]  should_fail_ex+0x265/0x280
[ 1344.443560][T31607]  should_failslab+0x8c/0xb0
[ 1344.443687][T31607]  kmem_cache_alloc_noprof+0x50/0x310
[ 1344.443795][T31607]  ? audit_log_start+0x365/0x6c0
[ 1344.443828][T31607]  audit_log_start+0x365/0x6c0
[ 1344.443866][T31607]  audit_seccomp+0x48/0x100
[ 1344.443900][T31607]  ? __seccomp_filter+0x68c/0x10d0
[ 1344.443989][T31607]  __seccomp_filter+0x69d/0x10d0
[ 1344.444019][T31607]  ? __list_add_valid_or_report+0x38/0xe0
[ 1344.444052][T31607]  ? _raw_spin_unlock+0x26/0x50
[ 1344.444103][T31607]  __secure_computing+0x82/0x150
[ 1344.444208][T31607]  syscall_trace_enter+0xcf/0x1e0
[ 1344.444316][T31607]  do_syscall_64+0xac/0x200
[ 1344.444350][T31607]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1344.444385][T31607]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1344.444418][T31607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1344.444448][T31607] RIP: 0033:0x7fc8cdd5d57c
[ 1344.444538][T31607] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1344.444565][T31607] RSP: 002b:00007fc8cc3c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1344.444593][T31607] RAX: ffffffffffffffda RBX: 00007fc8cdf85fa0 RCX: 00007fc8cdd5d57c
[ 1344.444612][T31607] RDX: 000000000000000f RSI: 00007fc8cc3c70a0 RDI: 0000000000000003
[ 1344.444630][T31607] RBP: 00007fc8cc3c7090 R08: 0000000000000000 R09: 0000000000000000
[ 1344.444649][T31607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1344.444669][T31607] R13: 0000000000000000 R14: 00007fc8cdf85fa0 R15: 00007ffd875dfb58
[ 1344.444764][T31607]  </TASK>
[ 1345.145474][T31643] random: crng reseeded on system resumption
[ 1345.332152][T31650] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19608'.
[ 1345.341323][   T29] kauditd_printk_skb: 195 callbacks suppressed
[ 1345.341342][   T29] audit: type=1400 audit(1754351370.568:57140): avc:  denied  { write } for  pid=31649 comm="syz.7.19608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1345.368313][   T29] audit: type=1400 audit(1754351370.568:57141): avc:  denied  { read } for  pid=31649 comm="syz.7.19608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1345.399526][T31650] IPVS: Unknown mcast interface: vcan0
[ 1345.517107][   T29] audit: type=1400 audit(1754351370.762:57142): avc:  denied  { write } for  pid=31653 comm="syz.1.19610" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1345.540656][   T29] audit: type=1400 audit(1754351370.762:57143): avc:  denied  { write } for  pid=31653 comm="syz.1.19610" name="ip6_mr_cache" dev="proc" ino=4026533355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[ 1345.564786][   T29] audit: type=1400 audit(1754351370.762:57144): avc:  denied  { read } for  pid=31653 comm="syz.1.19610" dev="nsfs" ino=4026532371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1345.586329][   T29] audit: type=1400 audit(1754351370.762:57145): avc:  denied  { open } for  pid=31653 comm="syz.1.19610" path="net:[4026532371]" dev="nsfs" ino=4026532371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1345.609871][   T29] audit: type=1400 audit(1754351370.762:57146): avc:  denied  { mounton } for  pid=31653 comm="syz.1.19610" path="/146" dev="tmpfs" ino=797 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1345.655795][   T29] audit: type=1400 audit(1754351370.772:57147): avc:  denied  { create } for  pid=31653 comm="syz.1.19610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1345.685131][   T29] audit: type=1400 audit(1754351370.933:57148): avc:  denied  { create } for  pid=31660 comm="syz.1.19611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1345.749590][   T29] audit: type=1400 audit(1754351370.955:57149): avc:  denied  { ioctl } for  pid=31660 comm="syz.1.19611" path="socket:[253354]" dev="sockfs" ino=253354 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1345.908998][T31683] FAULT_INJECTION: forcing a failure.
[ 1345.908998][T31683] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1345.922516][T31683] CPU: 0 UID: 0 PID: 31683 Comm: syz.7.19618 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1345.922558][T31683] Tainted: [W]=WARN
[ 1345.922567][T31683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1345.922580][T31683] Call Trace:
[ 1345.922587][T31683]  <TASK>
[ 1345.922595][T31683]  __dump_stack+0x1d/0x30
[ 1345.922617][T31683]  dump_stack_lvl+0xe8/0x140
[ 1345.922647][T31683]  dump_stack+0x15/0x1b
[ 1345.922669][T31683]  should_fail_ex+0x265/0x280
[ 1345.922806][T31683]  should_fail_alloc_page+0xf2/0x100
[ 1345.922843][T31683]  __alloc_frozen_pages_noprof+0xff/0x360
[ 1345.922895][T31683]  alloc_pages_mpol+0xb3/0x250
[ 1345.922976][T31683]  vma_alloc_folio_noprof+0x1aa/0x300
[ 1345.923048][T31683]  do_wp_page+0x5db/0x24e0
[ 1345.923080][T31683]  ? __rcu_read_lock+0x37/0x50
[ 1345.923112][T31683]  handle_mm_fault+0x77d/0x2c20
[ 1345.923140][T31683]  ? __rcu_read_unlock+0x4f/0x70
[ 1345.923170][T31683]  do_user_addr_fault+0x3fe/0x1090
[ 1345.923257][T31683]  exc_page_fault+0x62/0xa0
[ 1345.923284][T31683]  asm_exc_page_fault+0x26/0x30
[ 1345.923342][T31683] RIP: 0010:__put_user_4+0xd/0x20
[ 1345.923368][T31683] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90
[ 1345.923386][T31683] RSP: 0018:ffffc9000868fd80 EFLAGS: 00050202
[ 1345.923406][T31683] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000007ff8
[ 1345.923423][T31683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1345.923439][T31683] RBP: 0000000000040000 R08: 0001c9000868fc07 R09: 0000000000000000
[ 1345.923455][T31683] R10: 00000000ffffff97 R11: 0000000000000000 R12: 0000000000000000
[ 1345.923588][T31683] R13: 0000200000007fc0 R14: 0000200000007fc0 R15: 00000000000003ff
[ 1345.923612][T31683]  __sys_sendmmsg+0x19b/0x300
[ 1345.923670][T31683]  __x64_sys_sendmmsg+0x57/0x70
[ 1345.923709][T31683]  x64_sys_call+0x1c4a/0x2ff0
[ 1345.923777][T31683]  do_syscall_64+0xd2/0x200
[ 1345.923806][T31683]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1345.923865][T31683]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1345.923894][T31683]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1345.923918][T31683] RIP: 0033:0x7f673a62eb69
[ 1345.923933][T31683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1345.923951][T31683] RSP: 002b:00007f6738c8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1345.924043][T31683] RAX: ffffffffffffffda RBX: 00007f673a855fa0 RCX: 00007f673a62eb69
[ 1345.924060][T31683] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003
[ 1345.924150][T31683] RBP: 00007f6738c8f090 R08: 0000000000000000 R09: 0000000000000000
[ 1345.924168][T31683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1345.924180][T31683] R13: 0000000000000000 R14: 00007f673a855fa0 R15: 00007fff313b79d8
[ 1345.924235][T31683]  </TASK>
[ 1346.242621][T31686] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19619'.
[ 1346.252104][T31686] IPVS: Unknown mcast interface: vcan0
[ 1346.808482][T31718] pim6reg: entered allmulticast mode
[ 1347.479998][T31715] pim6reg: left allmulticast mode
[ 1347.497375][T31729] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19631'.
[ 1347.520529][T31729] IPVS: Unknown mcast interface: vcan0
[ 1347.678006][T31748] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19637'.
[ 1347.752899][T31753] random: crng reseeded on system resumption
[ 1348.051719][T31759] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1348.404696][T31768] pim6reg: entered allmulticast mode
[ 1348.741800][T31782] netlink: 132 bytes leftover after parsing attributes in process `syz.6.19649'.
[ 1348.814989][T31786] lo speed is unknown, defaulting to 1000
[ 1348.882464][T31789] lo speed is unknown, defaulting to 1000
[ 1348.982863][T31773] netlink: 20 bytes leftover after parsing attributes in process `syz.7.19646'.
[ 1349.434265][T31843] netlink: 29 bytes leftover after parsing attributes in process `syz.1.19654'.
[ 1350.331226][T31880] futex_wake_op: syz.1.19665 tries to shift op by -1; fix this program
[ 1350.362475][   T29] kauditd_printk_skb: 116 callbacks suppressed
[ 1350.362493][   T29] audit: type=1400 audit(1754351375.965:57264): avc:  denied  { create } for  pid=31879 comm="syz.1.19665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[ 1350.412903][T31878] random: crng reseeded on system resumption
[ 1350.438286][T31880] lo speed is unknown, defaulting to 1000
[ 1350.487493][   T29] audit: type=1400 audit(1754351376.019:57265): avc:  denied  { sys_admin } for  pid=31879 comm="syz.1.19665" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 1350.627959][   T29] audit: type=1326 audit(1754351376.180:57266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31898 comm="syz.9.19667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1350.651739][   T29] audit: type=1326 audit(1754351376.180:57267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31898 comm="syz.9.19667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1350.675531][   T29] audit: type=1326 audit(1754351376.180:57268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31898 comm="syz.9.19667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1350.699427][   T29] audit: type=1326 audit(1754351376.180:57269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31898 comm="syz.9.19667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1350.723293][   T29] audit: type=1326 audit(1754351376.180:57270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31898 comm="syz.9.19667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1350.747289][   T29] audit: type=1326 audit(1754351376.180:57271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31898 comm="syz.9.19667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1350.771067][   T29] audit: type=1326 audit(1754351376.190:57272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31898 comm="syz.9.19667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1350.794878][   T29] audit: type=1326 audit(1754351376.190:57273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31898 comm="syz.9.19667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b08a8eb69 code=0x7ffc0000
[ 1351.073738][T31917] lo speed is unknown, defaulting to 1000
[ 1351.502256][T31943] lo speed is unknown, defaulting to 1000
[ 1351.555065][T31944] pim6reg: entered allmulticast mode
[ 1351.719330][T31981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19677'.
[ 1351.719471][T31981] IPVS: Error joining to the multicast group
[ 1351.762864][T31984] netlink: 76 bytes leftover after parsing attributes in process `syz.1.19678'.
[ 1351.953203][T31991] lo speed is unknown, defaulting to 1000
[ 1352.059589][T32018] netlink: 44 bytes leftover after parsing attributes in process `syz.8.19683'.
[ 1352.172195][T32036] netlink: 132 bytes leftover after parsing attributes in process `syz.6.19689'.
[ 1352.212699][T32042] netlink: 132 bytes leftover after parsing attributes in process `syz.8.19692'.
[ 1352.239805][T32044] netlink: 'syz.8.19693': attribute type 3 has an invalid length.
[ 1352.248015][T32044] netlink: 'syz.8.19693': attribute type 3 has an invalid length.
[ 1352.258399][T32044] tmpfs: Bad value for 'mpol'
[ 1352.305714][T32051] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19695'.
[ 1352.318520][T32048] lo speed is unknown, defaulting to 1000
[ 1352.346837][T32066] netlink: 44 bytes leftover after parsing attributes in process `syz.6.19696'.
[ 1352.430824][T32083] netlink: 132 bytes leftover after parsing attributes in process `syz.8.19701'.
[ 1352.503465][T32094] netlink: 'syz.6.19704': attribute type 3 has an invalid length.
[ 1352.512130][T32094] netlink: 'syz.6.19704': attribute type 3 has an invalid length.
[ 1352.523646][T32094] tmpfs: Bad value for 'mpol'
[ 1352.546178][T32099] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19706'.
[ 1352.576656][T32103] netlink: 16 bytes leftover after parsing attributes in process `syz.7.19708'.
[ 1352.688546][T32108] netlink: 'syz.7.19709': attribute type 4 has an invalid length.
[ 1352.953425][T32118] IPVS: Error joining to the multicast group
[ 1353.301004][T32136] netlink: 'syz.9.19717': attribute type 3 has an invalid length.
[ 1353.315428][T32136] netlink: 'syz.9.19717': attribute type 3 has an invalid length.
[ 1353.447361][T32150] FAULT_INJECTION: forcing a failure.
[ 1353.447361][T32150] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1353.460668][T32150] CPU: 1 UID: 0 PID: 32150 Comm: syz.1.19723 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1353.460720][T32150] Tainted: [W]=WARN
[ 1353.460730][T32150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1353.460748][T32150] Call Trace:
[ 1353.460757][T32150]  <TASK>
[ 1353.460767][T32150]  __dump_stack+0x1d/0x30
[ 1353.460798][T32150]  dump_stack_lvl+0xe8/0x140
[ 1353.460846][T32150]  dump_stack+0x15/0x1b
[ 1353.460950][T32150]  should_fail_ex+0x265/0x280
[ 1353.461088][T32150]  should_fail+0xb/0x20
[ 1353.461154][T32150]  should_fail_usercopy+0x1a/0x20
[ 1353.461182][T32150]  _copy_to_user+0x20/0xa0
[ 1353.461218][T32150]  simple_read_from_buffer+0xb5/0x130
[ 1353.461257][T32150]  proc_fail_nth_read+0x10e/0x150
[ 1353.461296][T32150]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1353.461390][T32150]  vfs_read+0x19d/0x6f0
[ 1353.461454][T32150]  ? __rcu_read_unlock+0x4f/0x70
[ 1353.461484][T32150]  ? __fget_files+0x184/0x1c0
[ 1353.461523][T32150]  ksys_read+0xda/0x1a0
[ 1353.461619][T32150]  __x64_sys_read+0x40/0x50
[ 1353.461725][T32150]  x64_sys_call+0x27bc/0x2ff0
[ 1353.461754][T32150]  do_syscall_64+0xd2/0x200
[ 1353.461860][T32150]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1353.461893][T32150]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1353.461923][T32150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1353.461960][T32150] RIP: 0033:0x7fc8cdd5d57c
[ 1353.461981][T32150] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1353.462009][T32150] RSP: 002b:00007fc8cc3c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1353.462104][T32150] RAX: ffffffffffffffda RBX: 00007fc8cdf85fa0 RCX: 00007fc8cdd5d57c
[ 1353.462122][T32150] RDX: 000000000000000f RSI: 00007fc8cc3c70a0 RDI: 0000000000000004
[ 1353.462138][T32150] RBP: 00007fc8cc3c7090 R08: 0000000000000000 R09: 0000000000000000
[ 1353.462154][T32150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1353.462170][T32150] R13: 0000000000000000 R14: 00007fc8cdf85fa0 R15: 00007ffd875dfb58
[ 1353.462266][T32150]  </TASK>
[ 1353.772165][T32166] ipvlan2: entered promiscuous mode
[ 1353.782384][T32166] bridge0: port 3(ipvlan2) entered blocking state
[ 1353.789254][T32166] bridge0: port 3(ipvlan2) entered disabled state
[ 1353.801293][T32166] ipvlan2: entered allmulticast mode
[ 1353.806766][T32166] bridge0: entered allmulticast mode
[ 1353.814042][T32166] ipvlan2: left allmulticast mode
[ 1353.819201][T32166] bridge0: left allmulticast mode
[ 1353.847162][T32188] lo speed is unknown, defaulting to 1000
[ 1353.922222][T32215] netlink: 'syz.1.19728': attribute type 3 has an invalid length.
[ 1353.933693][T32215] netlink: 'syz.1.19728': attribute type 3 has an invalid length.
[ 1353.943141][T32215] tmpfs: Bad value for 'mpol'
[ 1354.047359][T32231] netlink: 'syz.1.19731': attribute type 4 has an invalid length.
[ 1354.818132][T32248] IPVS: Error joining to the multicast group
[ 1354.852891][T32252] IPVS: Error joining to the multicast group
[ 1354.862617][T32254] tmpfs: Bad value for 'mpol'
[ 1354.898879][T32256] lo speed is unknown, defaulting to 1000
[ 1355.119283][   T29] kauditd_printk_skb: 141 callbacks suppressed
[ 1355.119297][   T29] audit: type=1400 audit(1754351381.072:57415): avc:  denied  { create } for  pid=32294 comm="syz.7.19747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1355.165480][   T29] audit: type=1400 audit(1754351381.104:57416): avc:  denied  { connect } for  pid=32294 comm="syz.7.19747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1355.581958][T32313] FAULT_INJECTION: forcing a failure.
[ 1355.581958][T32313] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1355.595195][T32313] CPU: 0 UID: 0 PID: 32313 Comm: syz.6.19751 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1355.595238][T32313] Tainted: [W]=WARN
[ 1355.595247][T32313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1355.595263][T32313] Call Trace:
[ 1355.595271][T32313]  <TASK>
[ 1355.595330][T32313]  __dump_stack+0x1d/0x30
[ 1355.595357][T32313]  dump_stack_lvl+0xe8/0x140
[ 1355.595405][T32313]  dump_stack+0x15/0x1b
[ 1355.595426][T32313]  should_fail_ex+0x265/0x280
[ 1355.595470][T32313]  should_fail+0xb/0x20
[ 1355.595538][T32313]  should_fail_usercopy+0x1a/0x20
[ 1355.595562][T32313]  _copy_from_user+0x1c/0xb0
[ 1355.595595][T32313]  inet6_ioctl+0xf1/0x190
[ 1355.595632][T32313]  sock_do_ioctl+0x73/0x220
[ 1355.595665][T32313]  sock_ioctl+0x41b/0x610
[ 1355.595719][T32313]  ? __pfx_sock_ioctl+0x10/0x10
[ 1355.595747][T32313]  __se_sys_ioctl+0xce/0x140
[ 1355.595801][T32313]  __x64_sys_ioctl+0x43/0x50
[ 1355.595908][T32313]  x64_sys_call+0x1816/0x2ff0
[ 1355.595974][T32313]  do_syscall_64+0xd2/0x200
[ 1355.596004][T32313]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[ 1355.596039][T32313]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[ 1355.596123][T32313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1355.596213][T32313] RIP: 0033:0x7f874304eb69
[ 1355.596230][T32313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1355.596252][T32313] RSP: 002b:00007f87416af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1355.596315][T32313] RAX: ffffffffffffffda RBX: 00007f8743275fa0 RCX: 00007f874304eb69
[ 1355.596332][T32313] RDX: 0000200000000540 RSI: 000000000000890b RDI: 0000000000000006
[ 1355.596348][T32313] RBP: 00007f87416af090 R08: 0000000000000000 R09: 0000000000000000
[ 1355.596364][T32313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1355.596380][T32313] R13: 0000000000000000 R14: 00007f8743275fa0 R15: 00007ffe88b61078
[ 1355.596405][T32313]  </TASK>
[ 1355.831054][T32315] IPVS: Error joining to the multicast group
[ 1355.926766][   T29] audit: type=1400 audit(1754351381.930:57417): avc:  denied  { create } for  pid=32326 comm="syz.8.19757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1355.977765][T32328] pim6reg: entered allmulticast mode
[ 1355.997818][   T29] audit: type=1400 audit(1754351381.930:57418): avc:  denied  { prog_load } for  pid=32326 comm="syz.8.19757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1356.017322][   T29] audit: type=1400 audit(1754351381.930:57419): avc:  denied  { bpf } for  pid=32326 comm="syz.8.19757" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1356.038305][   T29] audit: type=1400 audit(1754351381.930:57420): avc:  denied  { perfmon } for  pid=32326 comm="syz.8.19757" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1356.059694][   T29] audit: type=1400 audit(1754351381.930:57421): avc:  denied  { prog_run } for  pid=32326 comm="syz.8.19757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1356.079017][   T29] audit: type=1400 audit(1754351381.963:57422): avc:  denied  { create } for  pid=32326 comm="syz.8.19757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1356.100007][   T29] audit: type=1400 audit(1754351381.963:57423): avc:  denied  { write } for  pid=32326 comm="syz.8.19757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1356.120853][   T29] audit: type=1400 audit(1754351381.973:57424): avc:  denied  { map_create } for  pid=32327 comm="syz.6.19758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1356.163154][T32327] pim6reg: left allmulticast mode
[ 1356.398786][T32362] __nla_validate_parse: 13 callbacks suppressed
[ 1356.398805][T32362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19766'.
[ 1356.443196][T32364] netlink: 8 bytes leftover after parsing attributes in process `syz.9.19767'.
[ 1356.444801][T32362] IPVS: Error joining to the multicast group
[ 1356.727836][ T7117] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1356.811134][T32370] lo speed is unknown, defaulting to 1000
[ 1356.825235][ T7117] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1356.906019][ T7117] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1356.966509][ T7117] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1357.208358][ T7117] batadv1: left allmulticast mode
[ 1357.213490][ T7117] batadv1: left promiscuous mode
[ 1357.218654][ T7117] bridge0: port 3(batadv1) entered disabled state
[ 1357.292575][ T7117] bridge_slave_1: left allmulticast mode
[ 1357.298498][ T7117] bridge_slave_1: left promiscuous mode
[ 1357.304403][ T7117] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1357.351308][ T7117] bridge_slave_0: left allmulticast mode
[ 1357.357115][ T7117] bridge_slave_0: left promiscuous mode
[ 1357.362990][ T7117] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1357.505915][ T7117] bond1 (unregistering): (slave bridge1): Releasing active interface
[ 1357.551818][ T7117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1357.570987][ T7117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1357.585364][ T7117] bond0 (unregistering): Released all slaves
[ 1357.587177][T32515] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19778'.
[ 1357.604944][ T7117] bond1 (unregistering): Released all slaves
[ 1357.618387][T32515] IPVS: Unknown mcast interface: vcan0
[ 1357.632256][T32370] chnl_net:caif_netlink_parms(): no params data found
[ 1357.674997][T32506] lo speed is unknown, defaulting to 1000
[ 1357.683342][ T7117] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1357.690800][ T7117] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1357.699330][T32528] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19779'.
[ 1357.710109][ T7117] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1357.717775][ T7117] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1357.717908][ T7073] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1
[ 1357.760272][ T7117] veth1_macvtap: left promiscuous mode
[ 1357.771738][ T7117] veth0_macvtap: left promiscuous mode
[ 1357.851159][ T7117] pim6reg (unregistering): left allmulticast mode
[ 1357.890136][ T7117] team0 (unregistering): Port device team_slave_1 removed
[ 1357.900399][ T7117] team0 (unregistering): Port device team_slave_0 removed
[ 1357.962224][T32540] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1357.985380][T32562] validate_nla: 4 callbacks suppressed
[ 1357.985396][T32562] netlink: 'syz.6.19783': attribute type 4 has an invalid length.
[ 1358.039332][T32370] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1358.046688][T32370] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1358.056774][T32370] bridge_slave_0: entered allmulticast mode
[ 1358.063497][T32370] bridge_slave_0: entered promiscuous mode
[ 1358.084673][T32540] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1358.124567][T32370] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1358.131825][T32370] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1358.141958][T32370] bridge_slave_1: entered allmulticast mode
[ 1358.151196][T32370] bridge_slave_1: entered promiscuous mode
[ 1358.160132][T32540] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1358.191583][T32370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1358.204633][T32370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1358.241693][T32370] team0: Port device team_slave_0 added
[ 1358.255228][T32540] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1358.270952][T32370] team0: Port device team_slave_1 added
[ 1358.293242][T32370] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1358.300315][T32370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1358.326288][T32370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1358.341149][T32370] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1358.348174][T32370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1358.374261][T32370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1358.414816][T32370] hsr_slave_0: entered promiscuous mode
[ 1358.422341][T32370] hsr_slave_1: entered promiscuous mode
[ 1358.428536][T32370] debugfs: 'hsr0' already exists in 'hsr'
[ 1358.434313][T32370] Cannot create hsr debugfs directory
[ 1358.441809][ T7073] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1358.454793][ T7073] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1358.475869][ T7073] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1358.494744][ T7073] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1358.680272][  T336] bridge0: entered promiscuous mode
[ 1358.699116][  T336] bridge0: port 3(macsec1) entered blocking state
[ 1358.705811][  T336] bridge0: port 3(macsec1) entered disabled state
[ 1358.725508][  T336] macsec1: entered allmulticast mode
[ 1358.731052][  T336] bridge0: entered allmulticast mode
[ 1358.742242][  T336] macsec1: left allmulticast mode
[ 1358.747342][  T336] bridge0: left allmulticast mode
[ 1358.753458][  T336] bridge0: left promiscuous mode
[ 1358.768799][  T346] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1358.782026][  T345] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19789'.
[ 1358.791993][  T348] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1358.833791][  T361] netlink: 'syz.7.19793': attribute type 3 has an invalid length.
[ 1358.841807][  T361] netlink: 'syz.7.19793': attribute type 3 has an invalid length.
[ 1358.876986][  T346] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1358.903385][  T368] netlink: 132 bytes leftover after parsing attributes in process `syz.7.19795'.
[ 1358.917465][  T375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19796'.
[ 1358.927466][  T375] IPVS: Error joining to the multicast group
[ 1358.943872][  T346] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1358.983008][  T387] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1359.012195][T32370] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1359.058609][  T346] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1359.072210][  T401] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19801'.
[ 1359.082209][T32370] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1359.105387][  T382] lo speed is unknown, defaulting to 1000
[ 1359.119961][T32370] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1359.139313][  T407] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1359.154009][T32370] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1359.207930][T32370] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1359.222181][T32370] 8021q: adding VLAN 0 to HW filter on device team0
[ 1359.245447][T32370] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1359.255901][T32370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1359.317063][T32370] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1359.456014][T32370] veth0_vlan: entered promiscuous mode
[ 1359.464683][T32370] veth1_vlan: entered promiscuous mode
[ 1359.481459][T32370] veth0_macvtap: entered promiscuous mode
[ 1359.490591][T32370] veth1_macvtap: entered promiscuous mode
[ 1359.514206][T32370] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1359.526943][T32370] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1359.593187][ T7106] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1359.600312][ T7106] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1359.623786][ T7106] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1359.630925][ T7106] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1359.699144][T11976] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.741743][  T450] pim6reg: entered allmulticast mode
[ 1359.762811][T11976] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.803762][  T449] pim6reg: left allmulticast mode
[ 1359.813029][T11976] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.848715][T11976] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.867015][   T29] kauditd_printk_skb: 96 callbacks suppressed
[ 1359.867078][   T29] audit: type=1400 audit(1754351386.168:57521): avc:  denied  { allowed } for  pid=489 comm="syz.6.19805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1359.893030][   T29] audit: type=1400 audit(1754351386.168:57522): avc:  denied  { create } for  pid=489 comm="syz.6.19805" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1359.914797][   T29] audit: type=1400 audit(1754351386.168:57523): avc:  denied  { map } for  pid=489 comm="syz.6.19805" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=256557 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1359.939267][   T29] audit: type=1400 audit(1754351386.168:57524): avc:  denied  { read write } for  pid=489 comm="syz.6.19805" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=256557 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1359.971648][T11976] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.983917][T11976] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.999876][T11976] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1360.014143][T11976] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1360.041457][  T492] netlink: 132 bytes leftover after parsing attributes in process `syz.8.19806'.
[ 1360.079160][   T29] audit: type=1400 audit(1754351386.297:57525): avc:  denied  { prog_run } for  pid=489 comm="syz.6.19805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1360.098527][   T29] audit: type=1400 audit(1754351386.340:57526): avc:  denied  { read } for  pid=491 comm="syz.8.19806" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1360.121431][   T29] audit: type=1400 audit(1754351386.340:57527): avc:  denied  { open } for  pid=491 comm="syz.8.19806" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1360.145166][   T29] audit: type=1400 audit(1754351386.340:57528): avc:  denied  { ioctl } for  pid=491 comm="syz.8.19806" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1360.170091][   T29] audit: type=1326 audit(1754351386.372:57529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=489 comm="syz.6.19805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874304eb69 code=0x7ffc0000
[ 1360.193691][   T29] audit: type=1326 audit(1754351386.372:57530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=489 comm="syz.6.19805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874304eb69 code=0x7ffc0000
[ 1360.283317][  T502] netlink: 'syz.8.19810': attribute type 3 has an invalid length.
[ 1360.314711][  T502] netlink: 'syz.8.19810': attribute type 3 has an invalid length.
[ 1360.435940][  T511] vxcan1: entered allmulticast mode
[ 1360.535454][  T524] netlink: 12 bytes leftover after parsing attributes in process `syz.9.19817'.
[ 1361.311225][  T626] pim6reg: entered allmulticast mode
[ 1361.341362][  T632] __nla_validate_parse: 2 callbacks suppressed
[ 1361.341378][  T632] netlink: 8 bytes leftover after parsing attributes in process `syz.9.19836'.
[ 1361.379869][  T635] netlink: 8 bytes leftover after parsing attributes in process `syz.9.19837'.
[ 1361.394495][  T636] netlink: 'syz.1.19835': attribute type 4 has an invalid length.
[ 1361.402876][  T625] pim6reg: left allmulticast mode
[ 1361.428815][  T635] IPVS: Error joining to the multicast group
[ 1361.644718][  T655] netlink: 'syz.6.19842': attribute type 3 has an invalid length.
[ 1361.653841][  T655] netlink: 'syz.6.19842': attribute type 3 has an invalid length.
[ 1361.672318][  T653] lo speed is unknown, defaulting to 1000
[ 1361.755671][  T671] netlink: 260 bytes leftover after parsing attributes in process `syz.6.19843'.
[ 1361.764981][  T671] netlink: 260 bytes leftover after parsing attributes in process `syz.6.19843'.
[ 1362.049823][  T694] ==================================================================
[ 1362.057963][  T694] BUG: KCSAN: data-race in io_flush_timeouts / io_issue_sqe
[ 1362.065351][  T694] 
[ 1362.067677][  T694] read-write to 0xffff888119fc0a10 of 4 bytes by task 693 on cpu 1:
[ 1362.075655][  T694]  io_issue_sqe+0x19c/0x970
[ 1362.080670][  T694]  io_wq_submit_work+0x3f7/0x5f0
[ 1362.085630][  T694]  io_worker_handle_work+0x44e/0x9b0
[ 1362.090935][  T694]  io_wq_worker+0x22e/0x870
[ 1362.095472][  T694]  ret_from_fork+0xdd/0x150
[ 1362.099979][  T694]  ret_from_fork_asm+0x1a/0x30
[ 1362.104772][  T694] 
[ 1362.107094][  T694] read to 0xffff888119fc0a10 of 4 bytes by task 694 on cpu 0:
[ 1362.114550][  T694]  io_flush_timeouts+0x56/0x1d0
[ 1362.119414][  T694]  __io_commit_cqring_flush+0xeb/0x100
[ 1362.124890][  T694]  io_issue_sqe+0x7cb/0x970
[ 1362.129407][  T694]  io_wq_submit_work+0x3f7/0x5f0
[ 1362.134381][  T694]  io_worker_handle_work+0x44e/0x9b0
[ 1362.139703][  T694]  io_wq_worker+0x22e/0x870
[ 1362.144333][  T694]  ret_from_fork+0xdd/0x150
[ 1362.148862][  T694]  ret_from_fork_asm+0x1a/0x30
[ 1362.153650][  T694] 
[ 1362.155981][  T694] value changed: 0x000001cd -> 0x000001ce
[ 1362.161709][  T694] 
[ 1362.164036][  T694] Reported by Kernel Concurrency Sanitizer on:
[ 1362.170194][  T694] CPU: 0 UID: 0 PID: 694 Comm: iou-wrk-687 Tainted: G        W           6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) 
[ 1362.183843][  T694] Tainted: [W]=WARN
[ 1362.187728][  T694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1362.197868][  T694] ==================================================================