last executing test programs:

3m48.943997293s ago: executing program 32 (id=229):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x1abd800, 0x0, 0x0, 0xfffffffd})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000003980)={0x0, 0x0})

2m43.988103412s ago: executing program 33 (id=1604):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x40)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r6=>r4, {0x9}}, './file0\x00'})
bind$xdp(r6, &(0x7f0000000740)={0x2c, 0x8, 0x0, 0x5}, 0x10)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
alarm(0x1)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x800)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r8}, &(0x7f0000000200), &(0x7f0000000800)}, 0x20)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x46, &(0x7f0000001940)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x80, 0x3f18, {0x5, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "2077530a9b14cee2"}}}}}, 0x0)

2m16.168198894s ago: executing program 5 (id=2237):
openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x490882, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x100000001}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x2000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
pipe(&(0x7f0000000000))
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f00000001c0))
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r6], 0xc4}}, 0x0)

2m16.040566756s ago: executing program 5 (id=2241):
r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7ffe, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40018})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2ab}, 0x18)
io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYBLOB, @ANYRES32=0x0], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x5, 0x80a, &(0x7f0000000340)="$eJzs3UFsHFcZAOB/XCdxXIiqgkIUpek0LVIipe7aSV1ZlWi367Ezrb1rdtdVIoTaiDhRFKetEiqRHEhzAYGKKsSBY9sDFzghLiAkkEACTkhw5VapEocWBIIDqJLRzKwTO/baSeomUfk+K56Z997M++ftZv4dr2YmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBIGpO12mgSM3lz/njaX2Oy3ZrdoH55e79eNdmg34ik+BdDQ7GnKtrz+evVu4tfB2JftbQvhorJUFy+f/cDT39ucGB5/Q0C2mqD6xVevHT53MnFxYULdzCQT8B3f7lq8UfDcZMjO501804rn61PZ2neaaUT4+O1J45NddKpfCbrnOh0s9m00c7q3VY7Pdg4lI5OTBxJs5ETrfnm9GR9JksHq8KnHh+r1cbT50fmsnq702o+8fxIp3Esn5nJm9PlikV10eap4o34Qt5Nu1l9Nk1Pn11cOLI6pJ1rgiwaja4q+Whp5dK+xx54//X3/nl2YWyz3R2rjY2Njo6NjY4nEVGrDV4veHLiyadqtcHaDWJNizv6puUetMVHcLh9A738HzORRzPm43ik6/40YjLa0YrZuP4GXlnfs5z/v/jE3/64Ub9vVfn/6opI9u25vrA3yvy/v1ra3y//V31v39En5k/q5/r+X4xLcTnOxclYjMVYiAsr2+3Yqv6SrYt94NbaD29SPx1ZNCOPTrQij9molyVprySNiRiP8ajFS3EspqITaUxFHjORRSdORCe6kZXvqEa0I4t6dKMV7UjjYDTiUKQxGhMxEUcijSxG4kS0Yj6aMR2TUS+3cjrOluN+5Ia4dn/z5V+c+dP7b5ev1nKj0Y2G+I2IstE/Nmi0JpnL/9yyiPjtFhy54eNbWs7/AAAAwKdWUn7HXpz/b4uHyrmpfCb7yiZrDRa/3rgzEQIAAAAfV/nN/75isq2YeyiS4vy/trrRT7bdneAAAACALZGU19glETEcD1dzy5dL1e52bAAAAMDWKL//319MhiOu7Fwudv4PAAAAnyIv/qw3c+M99t97vlhMkhiY25H86u/Rbm9Ljr5z/LHkfL2oqJ+/r1qvN3nx2ha7U3uT6N1QsNzW+ODl+4vlwUa2L1m+ee5HO6rph+XvvYPXVl8dx7O9v0gkSVIEcHWubwCxKoBdvb24FkC5FG/GI1WbR05V01PLNdUdhYen8plspNGaeXo06vVdA93sePf1V85+I8rd/05zdlcSp88uLox87dXFU2Us5Q2Mr57v7e+a+yhuEMtSbwTiobV3Ny42ta28EKPX73DVb23l/g9c3FXMDNxCn9+KA58p2xwYrtoOr97/oaLP0ZF+ez9c7d/omj0fXPvGqqI40Vu6IYpHq9JHDz5aTdaJYmyjKIqxGFsZRW8Qbm0s1o0iHoiItx+5cvzfv2sl2ZHNojjyMaMAuFtOl3f9KbJQlY6qLPTfpUqR/9vtbdtjVd6pVrjZo1xS9tJ7ks+ZN9e/k//NZ/f/LG1wRD9YtTlYfZ4Y3LtOXqmtc0R/7exrv+8d0Y/++IfvfHX/H35623l9aLnJte9SHvzN/QNRRrGzF8XlXk17W/K9a5mkyqrvFuXv9u23MzOWFB8X7vv6+ddi98VLlx8/e/7kmYUzC6+MjR0Zrx2t1Z5Mkt6Lt1R+YpB7AFjHgdhfJfK+z9jp8xSe8gNAlbuPbnRWfV8kD167pKDIia/GYpyKw+XVBhHx8Pr9Dlfr/Kv4VHI4DlRtv9wL+oaz1uEVT3g5vMm55faIXtuxTdsOr3i8zHVf+P4n+HIAwB1xYJM83Df/rzh3P7zJeffwiksKD8ehqu2h5Qj65/KIeObOjgYA/H/I2h8mw91vJ+12PvfS6MTEaL17LEvbrcYLaTufnM7SvNnN2jFYb05n6Vy71W01WjPFzIv5ZNZJO/Nzc612N51qtdO5Vic/Xj75Pe09+r2Tzdab3bzRmZvJ6p0sbbSa3Xqjm07mnUY6N//cTN45lrXLlTtzWSOfyhv1bt5qpp3WfLuRjaRpJ8tWNMwns2Y3n8qL2WY6185n6+2rETEzP5ulk1mn0c7nuq1qg8t95c2pVnu23Oxfd93t0QaAe8PFS5fPnVxcXLhwUzM/iIhVJX+5mbX69z7kxsIAcBdcz9IffPbGOn98BwAAAAAAAAAAAACAe8OtXf93EzM7t3aDQ32qvrRrceHC0pWItVXJ0tLSLXSxMzZps703VFs8UHdk5uqWbGcg1hvne2cm6V/18jPPnOu3+nNX9hzr85aoXCvZ9H/KYNG6utT1jQ+2//ytqurZ29qdgVtf688RcRt9LSUbtLl7xyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Od/AQAA//8WKmR4")
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r9, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886)
write$eventfd(0xffffffffffffffff, &(0x7f0000001040)=0x5, 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x188)
r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
r12 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14010000000101040000000000000000020000001c001880080001400000000208000240000000000800034000000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x44010)
sendfile(r11, r10, 0x0, 0x3a)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r10, 0xc0105303, &(0x7f0000000000)={0xfe, 0x0, 0xb})
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f00000003c0)={0x0, 0x100000000, 0xffffffffb574a774})

2m15.951068417s ago: executing program 5 (id=2243):
rseq(0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0)

2m15.924475068s ago: executing program 5 (id=2245):
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x0, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x2}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x4]}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000020000000500000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0)
write$binfmt_register(r5, &(0x7f0000000400)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8, 0x3a, '{', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x29)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$SO_TIMESTAMP(r6, 0x1, 0x4c, 0x0, &(0x7f0000000000)=0x58)
write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b)
socket(0x40000000015, 0x5, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r7, 0x0)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r9 = accept(r7, 0x0, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r9}, 0x47)
shutdown(r9, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)

2m15.001794792s ago: executing program 5 (id=2262):
openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x490882, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x100000001}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x2000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
pipe(&(0x7f0000000000))
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f00000001c0))
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r5], 0xc4}}, 0x0)

2m14.754483176s ago: executing program 5 (id=2265):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000400)={[{@nogrpid}, {@noblock_validity}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@orlov}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040), 0x10)
listen(r4, 0x5)
r5 = socket(0x28, 0x5, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989})
setrlimit(0x40000000000008, &(0x7f0000000000))
connect$vsock_stream(r5, &(0x7f0000000080), 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newtaction={0x14, 0x30, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x40004)
sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)

2m14.754124277s ago: executing program 34 (id=2265):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000400)={[{@nogrpid}, {@noblock_validity}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@orlov}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040), 0x10)
listen(r4, 0x5)
r5 = socket(0x28, 0x5, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989})
setrlimit(0x40000000000008, &(0x7f0000000000))
connect$vsock_stream(r5, &(0x7f0000000080), 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newtaction={0x14, 0x30, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x40004)
sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)

2m0.534386907s ago: executing program 2 (id=2601):
openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x490882, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x100000001}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x2000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
pipe(&(0x7f0000000000))
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f00000001c0))
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r6], 0xc4}}, 0x0)

2m0.453289779s ago: executing program 2 (id=2604):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r1 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040), 0x3f00}], 0x1, 0x0, 0x0, 0xfffffff0}, 0x0)

2m0.390473419s ago: executing program 2 (id=2605):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x1, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200001c5}, 0x8840)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {<r6=>0xee00, 0xffffffffffffffff}}, './file0\x00'})
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x4e22, 0x7, 0x4e24, 0x8ad, 0xa, 0xa0, 0xa0, 0x2f, r5, r6}, {0x5, 0x7, 0x5, 0x6000000, 0x3db, 0x18f, 0x9, 0x4bb}, {0x8000000000000001, 0x7, 0x2, 0x7ff}, 0x10000, 0x6e6bbd, 0x3, 0x0, 0x3, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0xff}, 0xa, @in6=@loopback, 0x3503, 0x4, 0x3, 0x0, 0x2, 0xf, 0x6}}, 0xe8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x3}, 0x18)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[], 0x15)
r10 = dup(r9)
write$P9_RLERRORu(r10, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r10, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10])
chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0)

2m0.389990709s ago: executing program 2 (id=2606):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18)
syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0)

2m0.282947761s ago: executing program 2 (id=2608):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000061101400000000009500"/32], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
close(0xffffffffffffffff)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) (async)
listen(r0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000002800018014000400001fff00000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) (async)
r5 = socket(0x2, 0x80805, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f0000000240))
r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="030000000500f7ffffff00000900000009000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000c060a23f6ac5e1b8e37b922b8a11049b", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r8) (async)
syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[], 0x0) (async)
ioctl$EVIOCRMFF(r8, 0x80085502, &(0x7f0000000500))
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYRES32, @ANYRES8=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
ioctl$TCSETSW2(0xffffffffffffffff, 0x5425, 0x0)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000740)={<r10=>0x0, 0xd6, "7d2da9d219a8e7c7ecfbce772dc4acabcd159e6f08d95b5651538b6ea326017d438883011869792aae6f7caefcbd99a25b9e591afb1df28cfd78049ed86a461ab2ed29741f476585c4a39eab15bc6bed296ce28b19d141c45b021648cbd583e9aa99ad832c8ccbc68f6906e757aebd225df3e89a1d2a33e8d105e1c511d7be95410935cea2c2e466d2ec721dbea9d55455f64c20f85de995786097e9edacfbb79ced17adaed819a6e0dce6d7bec6d2d68203645b72c18d19684377f3714d68a75029b1ca9621a9828c606988ff4fb4fdfd041d9dbd34"}, &(0x7f00000004c0)=0xde)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={r10, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)

1m59.617011642s ago: executing program 2 (id=2618):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18)
syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0)

1m44.548347375s ago: executing program 35 (id=2618):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18)
syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0)

1m15.161421552s ago: executing program 0 (id=3377):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) (async, rerun: 32)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) (async, rerun: 32)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x850) (async)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109"], 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r5=>0x0}) (async)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRESHEX=r2, @ANYBLOB="1400350064756d6d793004000000000000000000"], 0x3c}}, 0x0) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010029bd7000ffdbdf250a00100600040000da92e1f708001900", @ANYRES32=0x0, @ANYBLOB="4e2e03fc54c8d931901deebe667f2eff0100000000000082c5"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000000020000000e57450100007ef2b8d3ca6c686aa55e39cfd173cdcb1a5f7872c43e3894cada9cb18f78e7c5905b3c8ef4dc3858a6b0e9044ac67aa5e51595bc42ecbb73496ee3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (rerun: 64)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r5, @ANYRES64=r4, @ANYRESOCT=r7, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESOCT=r7, @ANYRES8=r4, @ANYRESOCT=r1, @ANYRES16=r1], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000000000800030000009500000000000000a0155634ef3ac1cde0b967b028288576ef787cac87fd288ba99ba44390e1a04bfb9fbffe49ce4dd948ceecd53371c449f6794d2e5a30710a6fd1e28683785baa647b9ee5c6ff362083f4b8393258f0239af8f1d72d59d3a7346e3c4f64b244c1fe3bc71b31cdd3dd20d81cf91c8327f73db90370e0890a61ac479782aa9b4341b9ff4da6437b323ffa9c6be55909dbea8a64c826"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x42, r12, 0x1, 0x80000000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e746572"], 0x118}, 0x1, 0x0, 0x0, 0x40040}, 0x0)

1m14.934284686s ago: executing program 0 (id=3379):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x4)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
r4 = openat(r0, &(0x7f0000000080)='.\x00', 0x68400, 0x0)
fcntl$notify(r4, 0x402, 0xd)

1m14.866663297s ago: executing program 0 (id=3380):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001340)=@generic={&(0x7f0000001300)='./file0\x00', r2}, 0x18)

1m14.846519277s ago: executing program 0 (id=3382):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x30, r1, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6d09d09916f9a3f8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008040}, 0x4004000)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000100008d"], 0x0, 0x3a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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")
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
r6 = dup2(r5, r5)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
ioctl$BLKTRACESETUP(r6, 0x1276, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)

1m14.625382951s ago: executing program 0 (id=3386):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0100f600714743432b27ffffffff000000007b22f5ed531bbd76a6ca3ec3000084c306a7d5f82d8d871659b942f80b9aa3de01169c1e9a74e8ab62b5d316b63a3f94b0999a343f3f8cc6fc2e09cad8b301d9238ca814d0ab4edb6e47ecc9381d9f62bb", @ANYRES32, @ANYBLOB="0400"/20, @ANYBLOB="6fea502679c3343d04936cf784b5f8c378667938fb727f617ae703b65c411061c0dfc8ebb9f8b05ad3d70f527c3b0d64090eafef619a76fe9537b243203fbf29742b4c0a73d00041fe6595b24ef4", @ANYRES32, @ANYBLOB="000000000200"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1e, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
capset(0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0))
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r5 = io_uring_setup(0x1694, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0x0}, 0x20)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f00000003c0)=ANY=[], 0x1, 0x2ee, &(0x7f00000006c0)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r7, &(0x7f0000000200)="7c5e873470a61614567a", 0xa)
sendfile(r7, r6, 0x0, 0x3ffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fallocate(r8, 0x0, 0x0, 0x2000402)

1m13.730553334s ago: executing program 0 (id=3399):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
sendto$inet6(r0, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c)

1m13.730185854s ago: executing program 36 (id=3399):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
sendto$inet6(r0, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c)

1m6.572948356s ago: executing program 6 (id=3523):
openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x131, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r6=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7400000010000305000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a62d2297d7db5caf5bb000018000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r6], 0x74}}, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'veth0_to_bridge\x00'})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1m6.522979387s ago: executing program 6 (id=3524):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r5=>0x0})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x20000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r6}, 0x10)
chmod(&(0x7f0000000000)='./file1\x00', 0x100)
mbind(&(0x7f0000828000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000180)=0x7, 0xd, 0x4)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff})
ioctl$F2FS_IOC_RESIZE_FS(r6, 0x4008f510, &(0x7f0000000140)=0x6)
fcntl$lock(r7, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7})
fcntl$lock(r7, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x1})
r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
ioctl$IMADDTIMER(r8, 0x80044940, &(0x7f00000000c0)=0x32)
close(r8)
sendto$packet(r4, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
r9 = dup(r2)
write$P9_RLERRORu(r9, &(0x7f0000000540)=ANY=[], 0x53)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r9])
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[], &(0x7f0000000340)=""/47, 0xcc, 0x2f, 0x3, 0x4, 0x0, @void, @value}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002f80)={r10, 0x20, &(0x7f0000002f40)={&(0x7f0000002e00)=""/110, 0x6e, 0x0, &(0x7f0000002e80)=""/162, 0xa2}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000101801000020756c250000000039002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1m6.378464029s ago: executing program 6 (id=3526):
openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x490882, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x100000001}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x2000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
pipe(&(0x7f0000000000))
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f00000001c0))
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r6], 0xc4}}, 0x0)

1m6.30157983s ago: executing program 6 (id=3530):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18)
open(0x0, 0x60840, 0x4)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={<r3=>0xffffffffffffffff}, 0x13f, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r3, 0x400}}, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@getstats={0x1c, 0x5e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x4888}, 0x4000000)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000980)={0x16, 0x98, 0xfa00, {0x0, 0x2, r3, 0x30, 0x1, @ib={0x1b, 0x1, 0x1, {"c6b7b7e198082124066b72a4ca8bf843"}, 0x7, 0x7, 0x3}}}, 0xa0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9001)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)

1m6.194150812s ago: executing program 6 (id=3531):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x6}, 0x0, 0x5dd8, 0x3, 0x5, 0x3, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0)=@known='user.incfs.metadata\x00')
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r3 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYRESDEC=r1, @ANYRES64, @ANYBLOB="007f6728a1ee8e6e619d1d9088a0f320c204bd136651b5a9fd1ff36f86beb0f63d9f1a3849ebd0341edce927b8f40551dddd4eb89126738e1416b959a2ba7d20eda17d7296cbdf3a4699ae8dd4e665a6645b2b1b96bf1725586e74f5644b1792fa590241bd98c066ad137035a5e1b662ae88a9ccc96a70ec646cee3dfc81d0f742acb4adfc28c150d002e8a19130a14d9efc8b113f65fb9d4cb3fdc91ea18d141e36bd476226b6569bebb0062593954cdccda1bf1ccf655cfce669215135f3db54b8e3dc8a4d4723cfab6aacd74cd074725d84f0", @ANYRESOCT, @ANYRESDEC, @ANYRESDEC, @ANYRES64=r2], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000ff7f04000400000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='dlm_lock_end\x00'}, 0x18)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x50}, 0x9c)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000000740)="5842a1d1156408bc4b81d5309fda447c073106a9552511276250ffd23ccfa3fbf0dbd35fa9690ea4fbf4d45b95c5f1bb1e8014bd8e68ed93db5edf25ad4679080a8ce83d305d656ca829e41a16bb1a202ca7e0fbf1b97d3bc3499bb15cc3a4ae20dd925c3cf190", 0x67, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0xfffffffffffffe5c)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x358, 0x0)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)=""/107, &(0x7f0000000100)=0x6b)
r7 = getpid()
wait4(r3, &(0x7f0000000280), 0x2, &(0x7f0000000500))
r8 = syz_pidfd_open(r7, 0x0)
memfd_create(&(0x7f00000005c0)='GPL\x00', 0x6)
process_madvise(r8, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000180)="a4", 0x1}], 0x2, 0x13, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)

1m6.149256582s ago: executing program 6 (id=3533):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000200)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@map_normal}, {@utf8}, {@uid}, {@session={'session', 0x3d, 0x9}}, {@overriderock}, {@map_off}, {@mode={'mode', 0x3d, 0x4}}, {@cruft}, {@unhide}, {@check_strict}, {@unhide}]}, 0x4, 0xa00, &(0x7f00000003c0)="$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")
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)

1m6.130638752s ago: executing program 37 (id=3533):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000200)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@map_normal}, {@utf8}, {@uid}, {@session={'session', 0x3d, 0x9}}, {@overriderock}, {@map_off}, {@mode={'mode', 0x3d, 0x4}}, {@cruft}, {@unhide}, {@check_strict}, {@unhide}]}, 0x4, 0xa00, &(0x7f00000003c0)="$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")
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)

40.862860726s ago: executing program 7 (id=4002):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
gettid()
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

40.782345976s ago: executing program 7 (id=4003):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$selinux_validatetrans(r2, &(0x7f0000000080)={'system_u:object_r:syslogd_initrc_exec_t:s0', 0x20, 'system_u:object_r:systemd_logind_sessions_t:s0', 0x20, 0x4, 0x20, '/usr/sbin/cups-browsed\x00'}, 0x86)

40.697153148s ago: executing program 7 (id=4004):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x14, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="4fa9e0fcda6395114656fd9a10a63bd654af975c870294aeec1a8a3bf0afe4815b04403618498d72d5df477d6f3a07dfc917ec3956dac4d414390d1ce5e9bee5bf88b5b030849544ecce32434a", @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x159077d20556b2b6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x103001, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), r5)
sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000011"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x8c, r6, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1c4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301)
ioctl$USBDEVFS_REAPURB(r7, 0x4008550c, &(0x7f0000000180))
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0})

40.343016273s ago: executing program 7 (id=4005):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x4004010)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001300), 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=")
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x201000, 0x0)
r6 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r6, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syz_tun\x00', <r8=>0x0})
r9 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r8}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, {0x0, 0x4, 0x0, 0x200000000a78b}, 0xfffffffe, 0x0, 0x1, 0x1}, {{@in6=@local, 0x0, 0x3c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0xfe}, 0x0, 0x3, 0x1, 0x7, 0x80000000}}, 0xe8)
sendmmsg(r9, &(0x7f0000000480), 0x2e9, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'ip_vti0\x00'}}, 0x1e)
r10 = socket$pppoe(0x18, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071003b000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x120c018, &(0x7f0000000b40)={[{@nojoliet}, {@unhide}, {@check_relaxed}, {@map_normal}, {@uid}, {@dmode={'dmode', 0x3d, 0x20001000}}, {@session={'session', 0x3d, 0x6}}, {@overriderock}, {@map_normal}, {@uid}, {@mode={'mode', 0x3d, 0x1e3f}}, {@unhide}, {@uid}, {@map_off}, {@overriderock}], [{@uid_lt}, {@fsname={'fsname', 0x3d, '\\.\\\\(}'}}, {@seclabel}, {@obj_type={'obj_type', 0x3d, 'dmode'}}]}, 0xff, 0x539, &(0x7f0000001540)="$eJzs3V1v01YYwPHHpV2rTELTmBCqChzKJhWpBMeBoIgrzzlJDzh2ZDuovUIVbaeKFCbKpLU3gxu2SduH4HYfYt9o2kdgsp2UvuSF0Zeg6v+L4JzYJz7PSaPzyG18LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQCyvZtslS3wTtJfVYF4tCpsfnnZffWSD3DpQDOlXxEr/ycyMXMk3Xfnmw+7L6X/zMpc/m5OZtJiR3S8vf/Xg0uRE7/VDAj4T2zu7z1Y7nfWX4w7kFF2dHryvoQMTh6bpNrQycaiqlYp9Z6keq7rxdbwSJ7qpvEi7SRipBe+WsqrVstLFlbAdNGqur7ONpWr1/m3HtivqYbGl3SgOgzsPi7G3ZHzfBI2sTbo7bXM//SA+MolKtNtUamOzs14eNYC0UeljGjmjGjm245RKjlOq3Kveu2/bk0c22IfIkRbj/9BivE5w9gaOZ6Kb/8UXI4G0ZVlU34cnNYkklOaA/V29/P/dHT203/35v5flr3zYPStZ/r+WP7s2KP8PiOXsHtuyI7vyTFalIx1Zl5djj+hsHw3REoiRWEIx0hQ326K6W5RUpSIVseWJLEldYlFSFyO+aIllRWJJRGefKE8i0eJKIqFEomRBPLklSkpSlaqURYmWoqxIKG0JpCE1cbOjbMhm9r6XRVmDYtxrVBo4jELvc7cuzpDRkv9xfCc6fwPH8b6X/wEAAAAAwLllZb99T8//p+RqVqsbX9vjDgsAAAAAAJyg7C//c2kxldauisX5PwAAAAAA542VXWNniUhBrue1DbGyy6X4JQAAAAAAAOdE9vf/a2mRrYFyXay95VI4/wcAAAAA4Jz4bfAa+++n8z2taevvfyWKpqw3reVvrS033ehuXcj3Xjh8xKQ+a13sHiQrKnkxOenpOWsmb7S3COY/3WJj1Fr/Vr8AXv+fAC5Nyh9yI29zYy0v13p78l4KdeProhf6D0riuhcnEr2c/PR882fJhv970LxoycZmZ7349EVnLYvlTXqUN1vdBRSPrKM4JJZX2XoL2TUXfUc8lV2I0e23kPdr7x//RP7yiUNdTsvgPt/KfN5ovrvibeHg+GfSPkvFQaPvRlE65sjfys28zc2Fm3nRJwpnVBTO/igGvBfHjqI8KoryMaMAgHHZGJGFrKOJ/xNmuU/L7jIwu1tiSb8ZfSFvszCbTayTs31mdHvUjG4fM7v9deQeSINybNrvn4ey6rv0Be+O9Pu+W8a+Y6Vv4YVXWz/K5e2d3dubW6tT8sP6c8cpV+y7tn3PkalsGN2C3AMA6GP0PXZGtrDujjir/nrvKwVFeSovpCNrsphdbZB946DvUQv7voawOOKstZClyfwOL4tDzuq+yK5y6B3XGdr2YAzl0/9BAABwhuZH5OGPyf+LI867D+by4WfHhX13awMAAKdDR6+tQvKrFUWm9aRUrZbcZEmrKPQeqcjUGlqZINGRt+QGDa1aUZiEXuinlcempmMVt1utMEpUPYxUK4zNcnbnd9W99Xusm26QGC9u+dqNtfLCIHG9RNVM7KlW+3vfxEs6yl4ct7Rn6sZzExMGKg7bkaeLSsVa72toajpITN2k1UC1ItN0oxX1OPTbTa1qOvYi00rC/IC9vkxQD6NmdtjiuN9sAAA+E9s7u89WO531l6dYGfcYAQDAQWRpAAAAAAAAAAAAAAAAAAAAAAA+f2dx/R+Vc17pLQX9ucRD5QQqI6eOX059cgJwqv4LAAD//3xATuE=")
connect$pppoe(r10, &(0x7f00000000c0)={0x18, 0x0, {0x2, @broadcast, 'veth1_virt_wifi\x00'}}, 0x1e)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94)

40.073638687s ago: executing program 7 (id=4013):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000030900010073797a31000000000b00070066696c746572000008000540ffffffff"], 0xb0}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r1}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
clock_getres(0x4, &(0x7f0000000300))
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r5, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

39.27565061s ago: executing program 7 (id=4029):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_buf(r3, 0x0, 0x30, 0x0, &(0x7f0000001fc0)=0x1100)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
socket$packet(0x11, 0x3, 0x300)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e1d000004007b0808"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r11}, 0x10)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r14=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r14], 0x2c}}, 0x0)
sendto$packet(r6, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14)
r15 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES16=r4, @ANYRESOCT=r1], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}}}]}, 0x78}}, 0x0)

39.27533693s ago: executing program 38 (id=4029):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_buf(r3, 0x0, 0x30, 0x0, &(0x7f0000001fc0)=0x1100)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
socket$packet(0x11, 0x3, 0x300)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e1d000004007b0808"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r11}, 0x10)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r14=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r14], 0x2c}}, 0x0)
sendto$packet(r6, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14)
r15 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES16=r4, @ANYRESOCT=r1], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}}}]}, 0x78}}, 0x0)

2.208566356s ago: executing program 3 (id=5008):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
creat(&(0x7f00000002c0)='./file0\x00', 0x6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r1}, &(0x7f0000000780), &(0x7f0000000900)='%pi6   \x00'}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x18)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r5}, 0x10)
close(r2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = getpid()
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x8e, 0x0, r7}}, 0x40)

2.164927826s ago: executing program 3 (id=5009):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xa3500, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000280)="5d1db419937fc6fc896058865e5c3897482b65700f125ee2cc5472488122eaf123a20794a82f8c87346f3dd5ee7f73ed4dc5509ad4cbab3ff0167d67e502de347dc68336a23ea053080e7e21a48b324019ad44969ef780e131b434dca0c0d34b70f43d4eeb6b2617678faf84dbb9b2aeb411ff9de66f84b63c363e838b80179bc07f5068982cceac49a090", 0x8b}, {&(0x7f0000000340)="33e9748e422970b1d7ea81464aefbf199571a5a9dffe715208f843403ce57b34a4addcfc504fc3ceb8f558f9984b928f8214f1c64f673ecf8f89c6ac5d498c0610cc33c04fc4c9d0", 0x48}, {&(0x7f0000000180)="65b7543ae0fc9c206ef900000010ae31ae1544f884398ffdfa00000000000000", 0x20}, {&(0x7f0000000500)="0d3f2168f606cf6780522d3d8c50df86a127824adefba849c1fbd0350b7c74bca5200a12cd38b49334423d9bd4d4ed0bc0cd38a831523c4134a27bdb066a5fb31e9ea2e1a7374f", 0x47}, {&(0x7f00000008c0)="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", 0x108}], 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x44000)

2.163843657s ago: executing program 3 (id=5011):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20882, 0x0)
dup3(r3, r2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x2)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_buf(r4, 0x0, 0x30, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000080)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0)
sendto$packet(r6, &(0x7f0000000180)="a6bea8a120e5f8320c30ce508847a5e986f34c10", 0x14, 0x0, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14)

2.028389549s ago: executing program 3 (id=5019):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x5000002, 0x80010, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = dup(0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x4, 0x0, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x58, 0x1, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}]}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x500}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x8}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0))
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xfffffffffffff, 0x4)
mmap(&(0x7f0000378000/0x4000)=nil, 0x4000, 0x2, 0x8031, 0xffffffffffffffff, 0xbf069000)
request_key(0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffd, 0x2)

1.995020239s ago: executing program 3 (id=5021):
r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x4, &(0x7f0000000680)={[{@nodioread_nolock}, {@orlov}, {@grpquota}, {@minixdf}, {@resgid}, {@journal_dev={'journal_dev', 0x3d, 0x400}}, {@usrjquota}, {@debug}, {@usrquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@nouid32}]}, 0x5, 0x45e, &(0x7f0000000780)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r2)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x8, 0x4)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000180)=0x8, 0x4)
bind$xdp(r3, &(0x7f00000002c0), 0x10)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB])
r4 = eventfd(0xfffff307)
io_submit(0x0, 0x9, &(0x7f0000000f80)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0xfff9, r0, &(0x7f00000002c0)="86322c565f4bfc38092c57cbbd5963173467259e254ea43ba870d4f9b0364d523085f23b4883874657afc83520747e07aa0ffbdf781d57ae04462200a24fac108f4de376261635aa7c65e53f64911e72329b139e3e0fde01b9712eac5fe0cc61d40b80b290cbe31bd63f2c38114e6944e17e3320", 0x74, 0x9, 0x0, 0x0, r1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f00000003c0)="0ae1cea4e12cec1ed9554ea425222557bcb743c41c1a7aabdcc5", 0x1a, 0x3, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x3, r0, &(0x7f0000000500)="88a7ba9475ac34d86e68890cc13fdee3a8311b4e4ef18ce33d82114eb8849ab63a5f10cb5385df925ac234f6004ba23e014d10b82f52913f55df41fb6c554b5cf29867599a25aca2c1ba404cc87825ba06f8ab45914e0c78be1a4864f1cf3ff8b2631b3dcb65a5ec05d1166471d2de34bf9173340f88144ff7963cdf27eacdc9ec05d254c3b592593949a751f2032a1460ec61ee12c05a2a34b7d5c2b5772cedfe9408d1ecfcade7d5131e49cb0ff74aba84fb11ec61a650e6fa3e6545ada5fd9ff712b982b64c75845587a32158878018da66f34c63", 0xd6, 0x4, 0x0, 0x1, r2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x7, r1, &(0x7f0000000600)="b7998b9ac78d1ae6df0a1b4177a5ceb6f9898e0b99bd033dcd7c56f8f287f1418ea3ec4178a756fd6c05e7b2fb4ca0702083c23046f3f466b7512d917f142a562239ab30f63327aaae4e1a08512e", 0x4e, 0x31, 0x0, 0x1, r1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000000c00)="82544390669f19b3e8c7430d18225e00d583f2da670098f3e335a5373644f91de1a90e451d1515e815c6dfcc96ef93dc2bd8b5eb4c5597c8e6f98bca6ba342783fd4de0e2c", 0x45, 0x0, 0x0, 0x1, r1}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x5, 0x7f, r0, &(0x7f0000000c80)="20435424363ce33973203e3e59bdfa252cae1c5bbba1393f0b95bd500f5e16b6bc5b151290c572bea5b62f15", 0x2c, 0x7fffffffffffffff, 0x0, 0x0, r4}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x3, 0x2, r0, &(0x7f0000000d00)="1c5726cedb4ce5db070d6423ca863b08b4b17905ca0f9adf44242441a052dbef2baaac61f6feb8f92c5c6c0805a6abf68ba70038b6d6847e91bede66762d356e8f0b3e0cd14c4f848ad036f0cfbfa136b323854e6fc54cf18993982c169af29258e80b064a6728ca6849e590496ab07472c553e64c5007209432dc8208b48e42dffe4ff26accd73175e814dcc7356e5420fefbd291dfc9dadb9c7a16a7524262e00e7801ce288bb2ca46613ff8439c0f62e6a6f39375e681f742bb", 0xbb, 0x2, 0x0, 0x3, r1}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x5, 0x3, r0, &(0x7f0000000e00)="75f0e23a9fa52ca8c1c2b856bc94d5b0d53ff16600af2ab8a64c19c657f652925f526415796e8542a4c8c1e31921905afb17b36671a1bdd220956ca0765aa9a604c5e4f0fec6587c1b5fc25dabe824f7ab1fc60d8796e333b1f4628f1742c8c6d0bd6389ad00550c45e32ff71e17d7cad4891d01e1c82977c1002fd9a064", 0x7e, 0x7ff, 0x0, 0x3, r1}, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x2, 0x1, r0, &(0x7f0000000ec0)="1a73fbb56faf3a2db15c5850cc026db9a945084d5f2c24e7905f3dad8bbf607aca0853b81f5ef0bea60df25b15c8d5bb0ee64aeab3a0c9541a60443403451c4b2bc9bae09ed8ecc99da7", 0x4a, 0x4, 0x0, 0x3, r1}])
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r6, 0x9361, 0xfffffffffffffffa)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

1.538605986s ago: executing program 4 (id=5033):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x51d174f234a19be9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0002, 0x5, 0x36, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x22, 0x8, 0x2, 0x114b6000, 0xfffffffb, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0xa, 0x3, 0x5, 0x101, 0x5, 0xba44, 0x3, 0x60c, 0x80000000, 0x800008, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xfffffff8, 0x5, 0x6, 0x1a0055ee, 0x1, 0x1, 0xffff4226, 0x6, 0x4, 0x5, 0x101, 0x4, 0x1, 0x2, 0x800, 0xf9, 0x9, 0x9, 0x3587, 0x8, 0x2f, 0xfffffff8, 0x0, 0x101, 0x9, 0x7, 0x0, 0x5, 0x100003ff, 0x0, 0x6, 0x2, 0x5, 0x5, 0x2, 0x9b58, 0x4, 0xb, 0x4be, 0xe, 0xef, 0xa, 0xcaa, 0x9fa7, 0xfffeffff, 0x38, 0x400004, 0x0, 0x9, 0x44d, 0x6, 0x200, 0x8, 0xfffffff5, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x6, 0x19, 0x3, 0x7, 0x4, 0x6, 0x7, 0x8002, 0x7, 0x6, 0x7, 0xc3c, 0x3, 0x28000000, 0x8, 0x9, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xa97, 0x4, 0x422dd3f4, 0x4, 0xa, 0x2, 0x8, 0x10000, 0x8c2, 0x0, 0x45ba, 0x20009, 0x864b, 0x0, 0x7, 0x9, 0x1, 0x0, 0x82, 0x5, 0x800, 0x6, 0xffffff80, 0x41, 0xc22, 0x5, 0x6, 0x9, 0x9, 0x7fffffff, 0x2, 0x1, 0x6, 0xfffffffd, 0x7c1, 0x136, 0x6, 0x5, 0x4, 0x3ff, 0x4, 0xb, 0xfffffffe, 0x10001, 0x0, 0x6, 0x3, 0x404, 0x101, 0x2, 0x1b, 0xd589, 0xffffff7e, 0xffff0001, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd39, 0x0, 0xfffffffe, 0x0, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0x2, 0x8, 0x28a6a55, 0x1ff, 0xb, 0x7fff, 0x809, 0x2e4c20bd, 0xb, 0x4, 0x9, 0x7, 0x4, 0x8, 0x1004, 0x2, 0x8, 0x3, 0x7, 0x4, 0x9, 0x2000008, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff00, 0x894, 0x7, 0xe, 0x6, 0x6, 0x2, 0x6, 0xfffd, 0x9, 0xfffffffd, 0x8000, 0x5d, 0x1000000, 0x7, 0x1, 0x8, 0x7ffffffd, 0x384, 0x6, 0x58a, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0x7, 0x0, 0x6, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xd}, {0xff, 0x1, 0x6, 0x5, 0x5e1d, 0x8}, 0x3ff, 0x101, 0x99}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008840)

1.538295756s ago: executing program 4 (id=5034):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xa3500, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000280)="5d1db419937fc6fc896058865e5c3897482b65700f125ee2cc5472488122eaf123a20794a82f8c87346f3dd5ee7f73ed4dc5509ad4cbab3ff0167d67e502de347dc68336a23ea053080e7e21a48b324019ad44969ef780e131b434dca0c0d34b70f43d4eeb6b2617678faf84dbb9b2aeb411ff9de66f84b63c363e838b80179bc07f5068982cceac49a090", 0x8b}, {&(0x7f0000000340)="33e9748e422970b1d7ea81464aefbf199571a5a9dffe715208f843403ce57b34a4addcfc504fc3ceb8f558f9984b928f8214f1c64f673ecf8f89c6ac5d498c0610cc33c04fc4c9d0", 0x48}, {&(0x7f0000000180)="65b7543ae0fc9c206ef900000010ae31ae1544f884398ffdfa00000000000000", 0x20}, {&(0x7f0000000500)="0d3f2168f606cf6780522d3d8c50df86a127824adefba849c1fbd0350b7c74bca5200a12cd38b49334423d9bd4d4ed0bc0cd38a831523c4134a27bdb066a5fb31e9ea2e1a7374f", 0x47}, {&(0x7f00000008c0)="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", 0x108}], 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x44000)

1.480355157s ago: executing program 4 (id=5035):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@noauto_da_alloc}, {@errors_remount}, {@user_xattr}, {@nojournal_checksum}, {@resuid={'resuid', 0x3d, 0xee00}}, {@bh}, {@grpjquota}, {@minixdf}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000010a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0)

1.384917388s ago: executing program 4 (id=5036):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97')
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
io_setup(0x8, &(0x7f0000004200)=<r3=>0x0)
io_pgetevents(r3, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)

1.212970091s ago: executing program 4 (id=5040):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x4800, &(0x7f0000000600)=ANY=[], 0xf9, 0x1206, &(0x7f0000002100)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioperm(0x0, 0x1, 0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10040, &(0x7f0000000300)={[], [{@appraise_type}]}, 0x1, 0x567, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTX/sp66DMVRECntwMpeurT8m+DAfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EN/13cfhP+BfMdDBkFH0wZfKTW+6dE3atMuaznw+cMM590fOPbn3nHxPTkIC6Fuj2UMh4uWI+CaJOBIRSb5tMPKNo6v7LT+6MZUtSaysfPpXUt8vyzeeq3HcoTzzUkT89lXEqcLGcquLS7Olcjmdz/NjtbmrY9XFpdOX50oz6Ux6ZWJy8uzbkxPvvftO1+r6xoV/vv/k3odnvz6x/N0vD47eSeJcHM63NddjZ4azh5vNa0ZjNH9NhuLcE3uPP11he07S6xNgRwbydj4UWR9wJAbyVg/8/30ZEStAn0rat/9IdvVMgN3ViAMaY/vNx8EvrqWaj32ePfxgdQC0sf6Dq5+NxP762OjgcrJuZJSNd0e6UH5Wxq9/3r2TLdGVzyEAOnPzVkScGRzc2P8lef+3c2dar97fnHmyDP0f7J57WfzzZqv4p7AW/0SL+OdQi7a7E1u3/8KDLhTTVhb/vd8y/l2btBoZyHMv1GO+oeTS5XJ6Jo+GT8bQviy/2XzO2eX7bWPl5vgvW7LyG7Fgfh4PBvetP2a6VCvVP7jrgoe3Il5pGf8ma9c/aXH9s9fjQodlHE/vvtZu29b1f7ZWfop4veX1fzyjlWw+PzlWvx/GGnfFRn/fPv57u/J7Xf/s+h/cvP4jSfN8bXX7Zfy4/9+03bZ19Y/O7//h5LN6ejhfd71Uq82PRwwnH29cP/H42Ea+sX9W/5MnNu//Wt3/ByLi8w7rf/vYz692VP8eXf/pbV3/7Sfuf/TFD+3K76z/e6ueOpmvqfd/W+j0BJ/mtQMAAAAAAIC9phARhyMpFNfShUKxuPr9jmNxsFCuVGunLlUWrkxH/beyIzFUaMx0H2n6PsR4/n3YRn7iifxkRByNiG8HDtTzxalKebrXlQcAAAAAAAAAAAAAAAAAAIA94lCb3/9n/hjo9dkBz5y//Ib+tWX778Y/PQF7kvd/6F/aP/Qv7R/6l/YP/Uv7h/61rv2b9Ie+4v0f+pf2DwAAAAAAAAAAAAAAAAAAAAAAAAAAAF114fz5bFlZfnRjKstPX1tcmK1cOz2dVmeLcwtTxanK/NXiTKUyU06LU5W5rZ6vXKlcHZ+IhetjtbRaG6suLl2cqyxcqV28PFeaSS+mQ7tSKwAAAAAAAAAAAAAAAAAAAHi+VBeXZkvlcjovIbGjxODeOA2JLid63TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGP/BQAA///oaTpO")
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="300000001900010000000000000000001d0100000c000b000000000000000000080009"], 0x30}}, 0x0)
r1 = msgget(0x2, 0x40)
msgsnd(r1, &(0x7f00000001c0)={0x0, "15ed51ffc1055f1a784afb6a9f056e1532dd20e209cb15"}, 0x1f, 0x0)
msgsnd(0x0, 0x0, 0x839, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x512, &(0x7f0000000c40)="$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")
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioprio_set$pid(0x3, 0x0, 0x0)
r2 = open(&(0x7f00000000c0)='./file1\x00', 0x14327e, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendfile(r2, r2, 0x0, 0x100000008)

913.899666ms ago: executing program 8 (id=5044):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
pipe2$watch_queue(&(0x7f0000000040), 0x80) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r0, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) (async)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) (async)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x5, 0x6, 0x6, 0xd4, 0x0, 0x6, 0x8e960, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000002c0), 0x1}, 0x1d2d5cfc66739813, 0x8000000000000001, 0x9, 0x3, 0x2e2feb24, 0x4, 0x6, 0x0, 0x54a, 0x0, 0x9c}, 0x0, 0x1, 0xffffffffffffffff, 0x1) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r5}, 0x11)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4402}, 0x0) (async)
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x200}) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
r8 = socket$packet(0x11, 0x3, 0x300) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'rose0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r12], 0x20}}, 0x0)

890.406227ms ago: executing program 9 (id=5046):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x40000, 0x1, {0x0, 0x0, 0x0, 0x0, 0x30, 0x43410}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x6}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40091}, 0x4004014)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000006880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, r4, 0x1, 0x0, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0)

864.794477ms ago: executing program 4 (id=5047):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"})
r1 = syz_open_pts(r0, 0x109200)
epoll_create(0x19a09a03)
r2 = dup3(r1, r0, 0x0)
r3 = dup(r0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x800714, &(0x7f00000001c0)={[{@grpid}, {@journal_dev={'journal_dev', 0x3d, 0xa}}, {@data_ordered}, {@noinit_itable}, {@barrier}, {@errors_continue}, {@acl}, {@mb_optimize_scan}, {@auto_da_alloc}, {@barrier}, {@stripe={'stripe', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x44f, &(0x7f0000000f80)="$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")
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r4, 0x0, 0x0)
getdents64(r4, 0x0, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=<r7=>r5, @ANYBLOB="01000000000000000000010000002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x81629d5c58203c6d)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xa)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r11=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r9, r11, 0x25, 0x0, @val=@netfilter}, 0x40)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3, <r12=>0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)=r3}, 0x20)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r13}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x15, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000000000000000000fcffff18110000", @ANYRES32, @ANYRES8=r5, @ANYRESDEC=r14, @ANYBLOB="0000000000000000186000000800000000000000090000001800000006000000000000000000080018170000", @ANYRESDEC=r7, @ANYBLOB="000000000000000085200000040000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x9, 0x35, &(0x7f0000000340)=""/53, 0x41100, 0xc, '\x00', r11, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000005c0)=[r3, r3, r2, r12, r2, r2, r10, r2], &(0x7f0000000600)=[{0x5, 0x2, 0x8, 0xb}, {0x0, 0x4, 0xf, 0xc7e9838742240f27}, {0x5, 0x5, 0x4, 0x6}, {0x0, 0x4, 0xa, 0x4}, {0x4, 0x4, 0xd, 0x6}, {0x4, 0x5, 0xa, 0x3}, {0x0, 0x5, 0x806, 0x4}, {0x3, 0x4, 0xe, 0x5}, {0x8, 0x3, 0x0, 0x3}, {0x2, 0x3, 0x9, 0x2}], 0x10, 0x4, @void, @value}, 0x94)

830.765777ms ago: executing program 9 (id=5048):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00', r3, 0x0, 0x4}, 0x18)
r4 = add_key(&(0x7f00000004c0)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, r4)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000140)=0xa84, 0x4)
r8 = signalfd(r3, &(0x7f0000000340)={[0x7fffffffffffffff]}, 0x8)
write$P9_RFSYNC(r8, &(0x7f0000000380)={0x7, 0x33, 0x2}, 0x7)
sendmmsg$inet6(r7, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0)
recvfrom$inet6(r7, 0x0, 0x0, 0x2023, 0x0, 0x0)
syz_io_uring_setup(0x3770, &(0x7f0000000280)={0x0, 0xfcf3, 0x20, 0x0, 0x27e}, &(0x7f0000000200), &(0x7f0000000300))

828.921397ms ago: executing program 1 (id=5049):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x24, &(0x7f0000000000)={0x1, 0x4, 0xfffffffffffffffe})

788.692208ms ago: executing program 8 (id=5050):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x400000000000000, 0x1}, 0x10800b, 0x0, 0x0, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x0, 0x1, 0x7fff, 0x1, 0x4, 0x8, 0xa4, 0x3, 0x3, 0xb69, 0xc1, 0x4, 0x1, 0x20000003, 0x40000005, 0x101, 0x80000000, 0x9, 0x3, 0xa, 0x1, 0xfffffffa, 0x401, 0x6, 0x9, 0x2, 0x4, 0x5, 0x66c, 0x200, 0x3, 0x0, 0xe, 0x5, 0x100, 0x3, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11003, 0x8, 0x7, 0xfffffffd, 0x2, 0x1, 0x7b, 0x3ff, 0xa, 0xfffffffb, 0xf, 0x9, 0xd7, 0x1fa4860a, 0x7, 0xaa, 0xfff, 0x2, 0x180000, 0x7, 0x8b, 0x5, 0x2af, 0xf5, 0xffffffff, 0x2, 0x6, 0x9, 0x4, 0x7, 0x9, 0xba27, 0x4, 0x5, 0x8, 0x752, 0x5, 0x4, 0x0, 0x10001, 0x2, 0xfffffffd, 0x6, 0x9, 0x8, 0x8, 0xffffffff, 0x5, 0x2, 0x80, 0x100, 0x5, 0x5704, 0x81, 0x2000b, 0x5, 0x2, 0x6, 0x24, 0x8, 0x4, 0xd9a, 0x800809, 0x0, 0x3ff, 0x4, 0x2, 0x5, 0x8, 0x0, 0x80000000, 0xb57, 0x0, 0x3, 0x4, 0x40000005, 0x401, 0xd, 0xd0a, 0x402, 0x1, 0x200, 0xc5d, 0xffffffff]}})
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x50, 0x0, 0x20000, 0xfffffffffffffffd, 0x5, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r1, 0x0, 0xb, 0x0, &(0x7f0000001bc0))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
io_setup(0x9, &(0x7f00000000c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}])
socket$nl_route(0x10, 0x3, 0x0)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r3)

787.889848ms ago: executing program 1 (id=5051):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97')
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
io_setup(0x8, &(0x7f0000004200)=<r3=>0x0)
io_pgetevents(r3, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)

786.756998ms ago: executing program 9 (id=5052):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
open_by_handle_at(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1)
munlockall()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000002480)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYBLOB="c246421c5924d5ed70b38dd4fe2dd2c674899d1eea394733c8193f23dbbcd09efbe4f26a23faeef32c92928b3e11116061b4fa0d84633fe8570a68a52978cf017f057cc24a86469e2f035ece66e5d2bda42fd710dd39e648669bad35ed9d058057aaa745c6ec30cb19ac3adf1c279014456919cc86368ecde914f27dd3281990e348d06c72de5c1b68c71b4dcda82e53a33ec1dce747f880322f8a0ed2b0a8d68b8771389a122ca3373406", @ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="ca224d5a9c1d79a6bacf4aea91d43b9ceb2d39212f86fd", @ANYBLOB="6b20bfdafc3e59917e24d2ae2f4d83ad774597d9500fcd1c52ea44336e222a02105e4bdb178bb7d5c72db46b5c6e29573fa99d930827b2a40ec30cbf57644aa5feb8802eec3fc70b2aa43038a9169fb9fd78be4e8a9bb2fb3535151e44a137b80127d960ddeb7132094a9e4c62a3986c27e8bc81bf32c5e806bb3446495ccf0faa035186eba392afb4879034d14bf93f9393293d22fed9070b8ceacbd44c107e8861ad2879fa372db8d1195c35a70319e44285990f8581ced95a215b23b0b385336c1648269a56c4bff3ebfe914ac97e24677bc63a51f08a4956f85779c4777842fae7a31cdf07e94d6c6e51c8f1392b4c9f8d51fe72c2b8ad0f49e91fd6e8a6f16c4f3c58f759dbf8361941b1e01e1fcc8329f16ae6ea39278e65a9b153501b61d0232fd4aa6c6576d9fca606c398b8bfebe4598541d60dbbd7af3e614e48f5997cbd66d62a75ec42d7a58d9d9b6b2094c2b3239b615e7f99e0081af87d0b46a2469945266490c3683984b38e0720f6988ac4c48a2ae64cc200358de26bf50c2b2215591b36cc829c7e027f59b2181c4cd371c97b0514137fb66ee60dc1fabdf976afe5bac878a310139fbf3ada5bec27c5557d9c1dfe0e818a6cfd691104874a9ca5a8a2c1e0b7e302d2fc1be43f859bcfd025e4d9b1642c595519ccbba89b318f1de48845de24b221160e33312471021af2a5df96da4d1dc973b66a8e560b891a8227463a3eafc13e39f86bab9a989dd41e613932124eaadb55da9a407171aa5f2978d6548b842159752e53ac64ade62c49854b12ca12cc72647a714f64236757f428e41b1e93df2b51f802c258af0d725ea26dc63f351e5ab38de8f72dea446671e3701e0ed6c531b95829c5995e31e77908675166a022b3149c3e45dce7244df52032b38226f65f933db4940f03cf38e26cbe66dcca3b1dadeebe20bd42c07c0c1be01abf128c3d05f881c0bd2ff30e94f487f1807acaea737caaab0d6437c612b821358a25f63d0c2c302efa0a427fe2ee0471d08aba3588bea0ad93f40c2c04a271de1844f755977817a6c2b4281c5af23098c36685604a90086b5fdd421c77284ce3afbf90a263833bec5d3066aa75a5d8f9bf721bd8875f93c1705a8b89d3afab02b036b625a1902b8acbbbc8a2b7a33c4ecccd7f09fc920e5a96b21a557e1277843d16b25ac362ed34071233b04113ffccc20fff2f67aaef5c9d50e527b30f838ce50cb8484b1d74d2305479aa0f2237c13970a6e8618e03962b0f372e8d7fcc0009258b070d9add145298bed38b566e7ba91ba3b3c56a68298152da75c50c14886476a3ccc74a8a2a40510573a0a77c3f9a58f29457fd758d075f768d54ba5817b5e9b34e9d0184caa1a5eefb8a9ce208814c262bcaef97253b252d57d9fd25d1f36d08bcb5e271b8c9dfc77ef680a885f298fb653ba5391164bb2ad80215baa93cd47a241f846a645887a3979a13454bf2304afda0cc944073a7cc0b521767b8b0a374eed5a344d3460b2a5baeb8895c67dc900b3e6e4bd426fd4be5873fe81b727fef961730c433cb98cc0dfa5ea951d25bdf26102ef1433f902cb6d7874d3e7b844e3928d3558af43a250388ec4195da8fe70e23e55ee644dab4a322e677c2465bc91c17b43b6744113c81b3d8919713d597ef817fe94138b9f0b3fc6f728c0f8946f4abc82cc0d88fc4381833d253be83d0575aaf41b71585b7775711c58b155f8aacec81c30feb3847ef95bb0cbfb8d79cc8ebdc4661b2c6f2e41bbd50642e77acba697f83a7280b5e0fc49764029c2f8ab5aa73022efa8a5cd399d69b67977ed5005ebd66f64157cabecd89063b2306beeea0ca3078c88f4db54fbb48d070e86e5729d0fb8f4ab626aefa578938426bd8fdad7551d7c752372efe2097a2a15e32288356140e884e1aa6d7b8d8ac82f7e03926209c23110eb543354641581163fe42a94b1b4e73a53ba25caf810db0975cd699bc94c6e47fc3f8b334eff2cc90b5899f4e7029a10d7c6c465f34448fc564c6af250fd1195f67ba942a5dcfadc52f5b526eb3f0536b6931c6fb3c349c0fb9ae9e9a24ca10beb678489bbfb86077cc1b74ce81710c8e30c79a8ed2fffbbc48eb3af018ee1f2366d56e62bc15e444deaa62c8f099f971997d3b8a39f980d12a7224d2a804f90380231cd820c87840fb5200359e437f00fefc7b161535c08a122dfed44a6d56b7e51e7926a1bc24d7555cf02595d21db78ad85232c3ca1d97143946c0f536b5780dffac20287da64b278ddf1e2d1ab78fd12eaea6a5893a9cc46ecdbd6879c9b3271cbb92611480fc1bffbe9184f4aab4a54f577b9133895c609e0f3e8b8ef53fb18db9c36832b024863279dd8fdad20edb72b03c9056cf5d9cf4f7ea239627edf304ab2e7aa6c47e5b7cf67359da69e66c61183d7c2f2b8dec3f8943b2f3817f2141b91339b8b9eb48e181f424190535c23f648a3099484886ef01d2b4c54cc03252ad1150185ac5d85f9f75575d005ba41aae00f9cfeb7c3460294b092852e92495edad174882c6c5d63b51928193be3c9857ef2cde4c4997550142ecb3c93777550d40a22b954a36ffafc1e336a69ea77bda85e55994c09f403837864798109ca696a296f241c9517db8ca681d411388d1971022c5ac3101d201e14d28a514626a04490e3d070f9d222c33b4aad09471f4a6c2cd851b3febbccaef094d84f869f50b9f4b021cf7b3896f0acdd6441ceeace542fcaa9d892133a7cab4572d0a3cda9247de31b40285204b0cf8ace54193cbbc84dbfd9ea4b8829d93966ae91f29a1a85a958e922ad0958ba5912599bc217df13b21ea4f16c1e19e15ba0999c92e7573547cfd2afed1253e71fc56d3c92c78b2e256e0ddbf8b8885ae4671bc671638450bd0a7941bd786cfdd3c5d94bc1beb9129e2b4573b756370601ca3404a36843316a88d5618650c2483b4f942f9ff11e4df409de7dd3570efc7af02590d7415dd979bca9d726a020929d07fb9328ed730cf9b17c46c3c754f61ce6221c137a5aab8d99b05a8830107a025cc28a311de811a7fcec71a3d9cf677a10b62b6b3ea1a477ef15c719bdbe15fc127050ed0bc27cf6969993031f94a6441834f521c9bcc0dbfa2f6c5170052d5e56ce6fe38eb8038d019ce797053deb385c25f0c5d4f5d1d995bf9b9a476142287411e8f6f801d3a8e1eeaf3c9dfd4163387654a4adb41596dd10ed6483bbe2df08c17743cdeb203aa4c5bc7f3c90f62082443c6cdd8a72d891a5f393c82fbde89b05828c82f75c13bfc34805b61ca82d0beddb5fed4ffcae29c9f9f1df657957921d902899b0f64b0f1d5dc0866dfd94900b9754cad2335f89b62c03cd5e64724b05efe282216d7668646d1d3944e12512269ddc77b8548171ede894277c7e2e362205d5a8e95d69726e49dfe8444f453ef04a0f91f1e23461518fd19ec5ddaad48aa09318e7000a112b2fcb2d41268a75a37a1b5665ebec2ab33eaade9c3b3828296d724b4abefd36cd4f79718e29ffd8b8148693c358e75d8296c9b9d87925e5657d10003112aa2b59be5766e661e700b3988847a20683caa169d7d38eaa2ed78a454f72f1e3e040b5a300aef0673841e96544ece2691355f4ee1e73ed6080eed65d791895d822a27be17bcd915924972cf81ca71890b4fce260516e6065ca7697aff33ef0f20b431b26180bb0c129e12ea0778fcef8b61daefa70146d8dc2f1cc9e5edff8f7915d55aee48c1842cb9e11775376d2ee77efba11e58a3718b70e6df84c858a568fc6f5953edb3d7e38523ad57e28da43d63ed3e49a92207f8ed96e803b2ddff5fc12ef24e6e08b40ddd07561e1f0e250bca3f851cffbbfde3e7608cc579e635f9d586186f60fd4b9215a344ce7dce6c858ad81457f99fb8086c262e9226ea57b45d3cf266089214299ec00c0abc1b4b8f1bff2637c057ce2745751a0944ac4a8ad1d6db4896c89c2b253ccac0efc43ddee1fad071315cc4ebe06b1cce3fcf07f7aa04d8bf34c5f25bca6df9c326eea7f6de24e1628ed0fb9cd368023f02e7ab182a39c1efe4ebfd3ae30db4c4da75497df1c308fa9d3fe9fd9eb68727e62a009ad8bca1e27111a8e00073e297be952c1993740f967044a00ddc1109e0a4ad2e69e4b27cfc80222541494d9bdd58c72387049b0f764a454951045e2636f2f1f1542e39c946af89fb51f9a70b35b1d512f7fa24ee2f245450d9bd3c057e4035e58b92101159b14dce4f06503e5441fe2e4d18b30f5be727df2ef535019e5d12a503ab6e7612dc3d940cf771c627b1450e9dc9753a0b52656dc17148c93d982c1beca2cefbd80bd3bf75827d17cf70a36b0c3604c189315a7b1fadbc14ee749bb3104ab5f2688a14fcc27661b4860b745e7ccfd370745cbb5850b1213efac637194aab790957d1f4ee6ca80df086ba2350e8c340d73f27cf8deab28761abf3f9b34e884cf412eaa3b26e1b350ad6f50cbb35f9269e89214719b6cd654b73211b185640518ccb7085d6e980ac93d3512eb87e380ab892e3877ecdaac44ccfcd68e8d8b9b7fd90325657e863ef669e33e27d532f1ee0cb8d87652b6dc38df934414e27cc541237f1a88009bad5b13ceb6e1d6486332f69fc22d83e35e5d407ace6672abd7107fd0fbe0b6552a28de32c024f09f0eab72035e33682a3e0757804b0a5cfcbbcc4a91406734ac9c866e84cbe38e62b27eafa9309b7a7d50e4290b6a69d41924e7422867dec90c3f28b92bce0203ee95f0cec08431d69e8a5f3da716229bbb9c139780770e5f610be2cfa1612c73449d2b0caaf9f1c33e1c316353304ad22be9e886d07c4fab3277d48507031d7954859bd266faf8e92d9380349a6fd036539d2e6d24e13a2e424c7287162c911f67a21b41b9b6c21aa5282ec96bbfc46e2b8fafa9d5f88274516e6d99cc1b19acf1b54f69feb164cc9337c5510d10051dc3567659f4f5a4b8f615ae29cdceb827b92b65d1bc3b555e91ad801170230b08c2263228bd1c32dcfd06e6bc6cce85142590f0fc478d980d41d577e42ba3067a930352f29af16264e17a79ff4baece8fd65df3186ce46a71e3249caf73d809c486158bdf81362848ee4f4b5f5a2a95b4a66ace1c5c491e8a462e4ccac5f71e8299d5014daafcda5208000f231f4cd8cde7432573fdafbc52732ff690345aabc9e6f149fb0f89387d89f11e3278027bac882e3a86f3c6bbceb2341224a3bc2483a6c7105f48dbf0ebe0479d338a946428ea764540663c2efa97b13bd708478850f89d8cab74209a6b90be409238f39226c0bcb74ea3c0b7c21f9656f2591d49c3d82896f2ba9c10c598468767bae5a2298f5ec35cbeac37b66a7b79a3429a75b07527c360aae970783a299110ccf9514370aef0ee6d8a19096b7a92722c35c1aa89a4173ff2a170c625171869c2385beee0e5ca2f2b6a84b679d3e74f406f2dd907e6f9a06370b32163c96d0fe26a67dbe219f8da3cd1b0f6af50eb126fc9fb81a55cbfe8453a7bdeaf46bd5b6647fa6cc601ff3f54f28d255c650ccaff69de29351bffb1fa5c247835f182b91ed403ec55516e9adf388492e75e0a3319ba3ae38b412a79aface289d0c612a815627ca8b57d55aabe7683071e7c0339572224eb3739d7412325ed80271b05d8f214e28242cbdb98dce783dab662da3a8acfd41e666bef2f2328d7badf98eaec8e3b7434bcc1563a82ef368095deaa2486280a9353bda11fcf45c2544789d32bce84442c729fcceb9f7445203c985520c066c1300"/4096], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1003}, 0x38)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})
inotify_init1(0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0x0, 0x1}, 0x18208, 0x3, 0x0, 0x0, 0x1000, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
close(0x4)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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")
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

726.525319ms ago: executing program 3 (id=5053):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
timer_delete(r1)
mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x698c, 0x40, 0x2, 0xfffffffe})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
modify_ldt$write(0x1, 0x0, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
creat(0x0, 0xd4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1276, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0)
close_range(r4, 0xffffffffffffffff, 0x200000000000000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)

637.14312ms ago: executing program 8 (id=5054):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) (async)
r2 = syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x0, 'rose0\x00', {0x1}, 0x5}) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000140)={0x0, <r3=>0x0}}, 0x10) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f00000005c0)=@hci={0x1f, 0x4, 0x4}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r4], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18)
close(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r11, 0x0, 0x23, &(0x7f0000000240)={@private=0xa010101, @loopback}, 0x8) (async)
r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYBLOB="31a2a8eb925d89f3c34f4c970c1c9a730b51efce63a23aaf75798b3444fda51429c7d5581d495e2252f212dc3379dae8e9307025a57deb85f8d39df6506853e3274dfa985190a719c243db90478730924a564bab89cbd0fb7e8e5e0651b83a6d2be97511778bdf27694f5386faa06feff9e526ddd93b94c3e90b0207e4df9c0777399d6598d253936f3cacf336bdb74c87b7280dcb65484114f92c3f7f48c5e772f4c2d3e71d874f8a893d13e75c8696f039ede61b526e", @ANYRES64=0x0, @ANYRES16=r1, @ANYRES32], &(0x7f0000000380)='GPL\x00', 0xd, 0xc0, &(0x7f0000000640)=""/192, 0x0, 0x10, '\x00', 0x0, @fallback=0x4e, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff, 0x101}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f00000001c0)) (async)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0f00000004000000040000001200000000007e455947854922eeafe213995f7033f717cb62114fbb9d", @ANYRESDEC=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES16=r2, @ANYRES32=r12, @ANYRES16=r4, @ANYRES32, @ANYBLOB="f12f36f86c58482149c721c518ae8c8858f1a2e52bd3ab539a0767d16ef867f317d958cd840aed2c894da17e5276bb0d3404e3a808207b5f95a6b2cd8863cd34cba3e08c83b95b485f680b14e467422dfb47af2ff32b5b8ffad641c2e11dc8", @ANYRES64=0x0, @ANYBLOB="4e1441a65d260417891ff7adbdff3670ee228de4954ad0804cfcb416c1f8111fdf32a7bd6224a06dce4b0f4b485143a2c11742e2edd6e16a48718897d5d4c11c08bfe345678400e6763fee97a160ea927e146dc70bcf331d06acbf95fb8b7627085f12a0ee78cc80996852e8bac0f88d2f69d70f815b0071e35050fa8bc01ff54702e131ab55101772bcbd41d9d67564b18ce39ad6f05e08", @ANYRESHEX, @ANYRES16=0x0, @ANYRES32, @ANYRESHEX=r9, @ANYRESOCT=r3], 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r13}, &(0x7f0000000000), &(0x7f0000000400)=r5}, 0x20)
recvmsg$unix(r10, &(0x7f0000000440)={0x0, 0x55, &(0x7f0000000100)=[{&(0x7f0000000780)=""/193, 0xc1}], 0x1}, 0x0) (async)
sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002a40)="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", 0x1000}, {&(0x7f0000000280)="a9aef7c175259d0077f9bfcabaabe49a4be6acf62af7c564bb5f", 0x1a}, {&(0x7f00000009c0)="a2dd047c19002303c0368384f32eb81a97681b46209de3619339aa1f490e2d2e833c9096f97cc8b4ac1182b79305df4ad9c725ba0c3e5b77594e9420b77643763cf82abc789ce2b98410ca6ebbdc278c917f90d3d597e744dd8ef651c69fe20d8158e6bbf3bf27f8dffd1b87f5b809c4a42251483504375105b8fd9d56c3bafaa3c074654030518c0d60b12494c9a3", 0x8f}, {&(0x7f0000000d00)="456668ac521abdd783ce42d1a3b0798c245723b9479be6e04f53980e16171031439311a85c434b0131e34f8b0887596fcfc2afc5286aee6910bf80bbcf1359f921ee044dfe38269ae6ffe88ed0d784e83ff1798efbe40072eba754cf9debadc4dc58bc29c2abee9589dbdab2b6d91b6f1d725f58ef83928bb2a414123e0e19c4c85035a4e1fd3f4137d81fbf177c1bbae341798192e49e5ff66e", 0x9a}, {&(0x7f00000004c0)="0f0b275eb39ec73947654a2a6fbbca78bcd3826562551d5a7e3e05b78a4c5e330366cc578874d1138a9984cbb48c4ced98ca301f50b440ccb1e85eca5f9adc4bf78c6fb343cd46df65a450cc0cc0a49e045b", 0x52}, {&(0x7f0000000580)="8d4266aaf80fb260cb0b1f084727d8b318d13c0f", 0x14}], 0x6}, 0x4c084) (async)
r14 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(r14, 0x5, 0x0, 0x0, 0xffffffffffffffff) (async)
capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)) (async)
syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01)

555.770122ms ago: executing program 1 (id=5055):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x7fff, 0x9, 0x2, 0x8}, {0x401, 0x5, 0x7f, 0x5}, {0x2, 0x0, 0x4, 0x8586}, {0x60, 0x2, 0x8, 0x6}, {0x1, 0x9, 0x6, 0x7}, {0x9, 0x7, 0xb, 0x9}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x28000, 0x0)
close_range(r1, r4, 0x200000000000000)

285.092315ms ago: executing program 8 (id=5056):
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=0x0], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x841, 0x141)
mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x68)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00')
r3 = open_tree(r2, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00')
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r6}, 0x10)
unshare(0x6a040000)
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="248444c8", @ANYRES16=r9, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000008000a0000000000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb"], 0x5c}}, 0x0)
pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='./file0\x00')
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x18)
tee(r4, r1, 0x8, 0x1)
r11 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r11, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}, 0x7}], 0x1c)
sendmsg$inet(r11, &(0x7f0000000500)={&(0x7f00000003c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000001140)='\\', 0x1}], 0x1}, 0x8040)

134.551308ms ago: executing program 1 (id=5057):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310)
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netstat\x00')
pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)

129.774968ms ago: executing program 8 (id=5058):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x5000002, 0x80010, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = dup(0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x58, 0x1, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}]}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x500}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x8}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0))
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xfffffffffffff, 0x4)
mmap(&(0x7f0000378000/0x4000)=nil, 0x4000, 0x2, 0x8031, 0xffffffffffffffff, 0xbf069000)
request_key(0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffd, 0x2)

100.095388ms ago: executing program 1 (id=5059):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x40000, 0x1, {0x0, 0x0, 0x0, 0x0, 0x30, 0x43410}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x6}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40091}, 0x4004014)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000006880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, r4, 0x1, 0x0, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0)

70.193809ms ago: executing program 1 (id=5060):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20882, 0x0)
dup3(r3, r2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x2)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_buf(r4, 0x0, 0x30, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000080)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0)
sendto$packet(r6, &(0x7f0000000180)="a6bea8a120e5f8320c30ce508847a5e986f34c10", 0x14, 0x0, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14)

59.479579ms ago: executing program 8 (id=5061):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002b40)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000000000000000000000000001811000010280afe3f34cdc020f774564ca78659c1df02e4529ec7b00f11e0a129416c1c95a80442a095925669e674d06a08584aa14549080e2116629dd1538377d226edbc61e9ec36bb0f9280c10e2d9cc7b636904bb472222d544240cb0ad53d87085dbeb7c56446cf360107768bd0db4fc8de727ddfc38888284d7df7fbeb9df0fddf1608cdc0b9cb691302172819be63762e2227240939940f7e4d51eda11a96c7832c1f31a59cfc09f8bbb180e4debcfbc7b5e7c59580", @ANYRES32, @ANYRESDEC=r1, @ANYRESHEX=r2, @ANYBLOB="f461bfe28e91c89be39d5b8551b7d2cafdf8376d8799e8dade6d4e0c077accbbd45d021ae067c506310fe768a21f8185be92426e050607151d9361b03f14c94820368a22efe10f80d81ccfb621a60fa6d4c013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]})
msgsnd(0xffffffffffffffff, 0x0, 0x0, 0x800)
r5 = socket(0x400000000010, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'vlan0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffff7fff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0)
socket$phonet(0x23, 0x2, 0x1)
r8 = inotify_init()
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r10}, 0x10)
r11 = inotify_add_watch(r8, &(0x7f0000000400)='.\x00', 0x40003c0)
r12 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r12, 0x0, 0xd0, 0x0, 0x0)
inotify_rm_watch(r8, r11)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff2, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0xffffffffffffffff, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0)

14.56298ms ago: executing program 9 (id=5062):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x24, &(0x7f0000000000)={0x1, 0x4, 0xfffffffffffffffe})

14.22225ms ago: executing program 9 (id=5063):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808)

0s ago: executing program 9 (id=5064):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc)
splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
r6 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20)

kernel console output (not intermixed with test programs):

t find del_set index 0 as target
[  245.589539][T15920] sch_fq: defrate 0 ignored.
[  245.601568][T15913] IPVS: using max 2112 ests per chain, 105600 per kthread
[  245.653053][T15930] FAULT_INJECTION: forcing a failure.
[  245.653053][T15930] name failslab, interval 1, probability 0, space 0, times 0
[  245.665860][T15930] CPU: 1 UID: 0 PID: 15930 Comm: syz.1.4216 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  245.665891][T15930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  245.665905][T15930] Call Trace:
[  245.665918][T15930]  <TASK>
[  245.665927][T15930]  dump_stack_lvl+0xf6/0x150
[  245.665967][T15930]  dump_stack+0x15/0x1a
[  245.665983][T15930]  should_fail_ex+0x261/0x270
[  245.666011][T15930]  should_failslab+0x8f/0xb0
[  245.666078][T15930]  kmem_cache_alloc_noprof+0x59/0x340
[  245.666105][T15930]  ? skb_clone+0x154/0x1f0
[  245.666195][T15930]  skb_clone+0x154/0x1f0
[  245.666226][T15930]  __netlink_deliver_tap+0x2bd/0x4f0
[  245.666321][T15930]  netlink_unicast+0x69e/0x6c0
[  245.666350][T15930]  netlink_sendmsg+0x609/0x720
[  245.666385][T15930]  ? __pfx_netlink_sendmsg+0x10/0x10
[  245.666415][T15930]  __sock_sendmsg+0x140/0x180
[  245.666564][T15930]  ____sys_sendmsg+0x350/0x4e0
[  245.666597][T15930]  __sys_sendmsg+0x1a0/0x240
[  245.666655][T15930]  __x64_sys_sendmsg+0x46/0x50
[  245.666686][T15930]  x64_sys_call+0x26f3/0x2e10
[  245.666711][T15930]  do_syscall_64+0xc9/0x1c0
[  245.666743][T15930]  ? clear_bhb_loop+0x25/0x80
[  245.666770][T15930]  ? clear_bhb_loop+0x25/0x80
[  245.666848][T15930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.666874][T15930] RIP: 0033:0x7f5f86c6d169
[  245.666891][T15930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  245.666921][T15930] RSP: 002b:00007f5f852d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  245.666944][T15930] RAX: ffffffffffffffda RBX: 00007f5f86e85fa0 RCX: 00007f5f86c6d169
[  245.666989][T15930] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  245.667055][T15930] RBP: 00007f5f852d7090 R08: 0000000000000000 R09: 0000000000000000
[  245.667070][T15930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  245.667157][T15930] R13: 0000000000000000 R14: 00007f5f86e85fa0 R15: 00007ffcb6041f38
[  245.667179][T15930]  </TASK>
[  245.931607][T15938] __nla_validate_parse: 1 callbacks suppressed
[  245.931623][T15938] netlink: 196 bytes leftover after parsing attributes in process `syz.8.4213'.
[  246.136532][T15954] Cannot find del_set index 0 as target
[  246.147260][T15954] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4224'.
[  246.198012][T15964] xt_hashlimit: max too large, truncated to 1048576
[  246.235975][T15964] Cannot find set identified by id 0 to match
[  246.250563][T15959] loop4: detected capacity change from 0 to 128
[  246.379368][T15981] loop4: detected capacity change from 0 to 512
[  246.391988][T15981] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  246.406791][T15981] EXT4-fs (loop4): orphan cleanup on readonly fs
[  246.417683][T15981] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.4235: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[  246.439280][T15981] EXT4-fs error (device loop4): ext4_quota_enable:7129: comm syz.4.4235: Bad quota inode: 3, type: 0
[  246.451463][T15981] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  246.466261][T15981] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  246.602279][T15993] loop8: detected capacity change from 0 to 764
[  246.609848][T15993] rock: directory entry would overflow storage
[  246.616077][T15993] rock: sig=0x4654, size=5, remaining=4
[  246.637932][T15993] Cannot find del_set index 0 as target
[  246.645437][T15993] netlink: 192 bytes leftover after parsing attributes in process `syz.8.4239'.
[  246.683570][T15998] loop8: detected capacity change from 0 to 1024
[  246.690762][T15998] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  246.701779][T15998] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  246.714155][T15999] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  246.716465][T15998] JBD2: no valid journal superblock found
[  246.727961][T15998] EXT4-fs (loop8): Could not load journal inode
[  246.741905][  T411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  246.780728][T15998] loop8: detected capacity change from 0 to 512
[  246.788337][T15998] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  246.835014][T15998] EXT4-fs (loop8): failed to open journal device unknown-block(0,0) -6
[  247.008113][T16021] xt_hashlimit: max too large, truncated to 1048576
[  247.043979][T16021] Cannot find set identified by id 0 to match
[  247.058691][T16023] loop8: detected capacity change from 0 to 1024
[  247.114026][T16023] journal_path: Lookup failure for './file0'
[  247.120102][T16023] EXT4-fs: error: could not find journal device path
[  247.208958][T16031] FAULT_INJECTION: forcing a failure.
[  247.208958][T16031] name failslab, interval 1, probability 0, space 0, times 0
[  247.221920][T16031] CPU: 1 UID: 0 PID: 16031 Comm: syz.1.4252 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  247.221957][T16031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  247.221971][T16031] Call Trace:
[  247.221979][T16031]  <TASK>
[  247.221987][T16031]  dump_stack_lvl+0xf6/0x150
[  247.222013][T16031]  dump_stack+0x15/0x1a
[  247.222032][T16031]  should_fail_ex+0x261/0x270
[  247.222070][T16031]  should_failslab+0x8f/0xb0
[  247.222136][T16031]  __kmalloc_noprof+0xad/0x410
[  247.222160][T16031]  ? io_cache_alloc_new+0x2b/0xa0
[  247.222186][T16031]  io_cache_alloc_new+0x2b/0xa0
[  247.222276][T16031]  io_sqe_buffer_register+0x112/0x12a0
[  247.222362][T16031]  ? __memcg_slab_post_alloc_hook+0x473/0x5a0
[  247.222393][T16031]  ? __kvmalloc_node_noprof+0x39b/0x520
[  247.222415][T16031]  ? io_sqe_buffers_register+0xe5/0x4f0
[  247.222456][T16031]  io_sqe_buffers_register+0x2dd/0x4f0
[  247.222489][T16031]  __se_sys_io_uring_register+0xb04/0x1f50
[  247.222515][T16031]  ? kstrtouint_from_user+0xbf/0x100
[  247.222545][T16031]  ? bpf_ringbuf_discard+0xd4/0xf0
[  247.222571][T16031]  ? 0xffffffff81000000
[  247.222593][T16031]  ? __rcu_read_unlock+0x4e/0x70
[  247.222627][T16031]  ? get_pid_task+0x94/0xd0
[  247.222658][T16031]  ? proc_fail_nth_write+0x12d/0x160
[  247.222698][T16031]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  247.222747][T16031]  ? vfs_write+0x669/0x950
[  247.222779][T16031]  ? putname+0xe1/0x100
[  247.222802][T16031]  ? __fget_files+0x186/0x1c0
[  247.222869][T16031]  ? fput+0x99/0xd0
[  247.222893][T16031]  ? ksys_write+0x180/0x1b0
[  247.222924][T16031]  __x64_sys_io_uring_register+0x55/0x70
[  247.222952][T16031]  x64_sys_call+0xb9d/0x2e10
[  247.222977][T16031]  do_syscall_64+0xc9/0x1c0
[  247.223057][T16031]  ? clear_bhb_loop+0x25/0x80
[  247.223083][T16031]  ? clear_bhb_loop+0x25/0x80
[  247.223123][T16031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.223148][T16031] RIP: 0033:0x7f5f86c6d169
[  247.223166][T16031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.223186][T16031] RSP: 002b:00007f5f852d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  247.223207][T16031] RAX: ffffffffffffffda RBX: 00007f5f86e85fa0 RCX: 00007f5f86c6d169
[  247.223221][T16031] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000006
[  247.223234][T16031] RBP: 00007f5f852d7090 R08: 0000000000000000 R09: 0000000000000000
[  247.223276][T16031] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001
[  247.223289][T16031] R13: 0000000000000000 R14: 00007f5f86e85fa0 R15: 00007ffcb6041f38
[  247.223311][T16031]  </TASK>
[  247.230890][T16027] loop3: detected capacity change from 0 to 764
[  247.394022][T16034] netlink: 'syz.1.4254': attribute type 10 has an invalid length.
[  247.502487][T16034] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4254'.
[  247.515301][T16034] batadv0: entered promiscuous mode
[  247.520796][T16034] batadv0: entered allmulticast mode
[  247.526177][T16027] rock: directory entry would overflow storage
[  247.532476][T16027] rock: sig=0x4654, size=5, remaining=4
[  247.534238][T16034] bridge0: port 3(batadv0) entered blocking state
[  247.544732][T16034] bridge0: port 3(batadv0) entered disabled state
[  247.569494][T16034] bridge0: port 3(batadv0) entered blocking state
[  247.576066][T16034] bridge0: port 3(batadv0) entered forwarding state
[  247.585512][T16037] batman_adv: batadv0: Adding interface: dummy0
[  247.588318][T16027] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4251'.
[  247.591999][T16037] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.645953][T16037] batman_adv: batadv0: Interface activated: dummy0
[  247.661711][T16034] batadv0: mtu less than device minimum
[  247.667838][T16034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  247.678770][T16034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  247.689598][T16034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  247.700340][T16034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  247.711161][T16034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  247.721998][T16034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  247.732966][T16034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  247.743686][T16034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  247.754668][T16034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  247.773528][   T29] kauditd_printk_skb: 165 callbacks suppressed
[  247.773611][   T29] audit: type=1400 audit(1744094424.886:13843): avc:  denied  { write } for  pid=16038 comm="syz.4.4255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  247.824777][T16046] loop9: detected capacity change from 0 to 764
[  247.843333][   T29] audit: type=1400 audit(1744094424.986:13844): avc:  denied  { execute } for  pid=16038 comm="syz.4.4255" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=49915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  247.869817][   T29] audit: type=1326 audit(1744094425.016:13845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16016 comm="syz.8.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe162e4d169 code=0x7fc00000
[  247.893503][   T29] audit: type=1326 audit(1744094425.016:13846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16016 comm="syz.8.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe162e4d169 code=0x7fc00000
[  247.917118][   T29] audit: type=1326 audit(1744094425.016:13847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16016 comm="syz.8.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe162e4d169 code=0x7fc00000
[  247.940831][   T29] audit: type=1326 audit(1744094425.016:13848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16016 comm="syz.8.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe162e4d169 code=0x7fc00000
[  247.964554][   T29] audit: type=1326 audit(1744094425.016:13849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16016 comm="syz.8.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe162e4d169 code=0x7fc00000
[  247.988205][   T29] audit: type=1326 audit(1744094425.016:13850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16016 comm="syz.8.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe162e4d169 code=0x7fc00000
[  248.011831][   T29] audit: type=1326 audit(1744094425.016:13851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16016 comm="syz.8.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe162e4d169 code=0x7fc00000
[  248.035495][   T29] audit: type=1326 audit(1744094425.016:13852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16016 comm="syz.8.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe162e4d169 code=0x7fc00000
[  248.068129][ T3331] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  248.077399][ T3331] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  248.087287][T16046] rock: directory entry would overflow storage
[  248.093523][T16046] rock: sig=0x4654, size=5, remaining=4
[  248.120073][T16046] Cannot find del_set index 0 as target
[  248.129174][T16046] netlink: 192 bytes leftover after parsing attributes in process `syz.9.4266'.
[  248.197817][T16057] xt_hashlimit: max too large, truncated to 1048576
[  248.219161][T16057] Cannot find set identified by id 0 to match
[  248.335946][T16069] xt_hashlimit: max too large, truncated to 1048576
[  248.351325][T16069] Cannot find set identified by id 0 to match
[  248.381357][T16071] 9pnet_fd: Insufficient options for proto=fd
[  248.515118][T16088] netlink: 332 bytes leftover after parsing attributes in process `syz.8.4268'.
[  248.657682][T16098] loop4: detected capacity change from 0 to 512
[  248.779454][T16105] xt_hashlimit: max too large, truncated to 1048576
[  248.795092][T16105] Cannot find set identified by id 0 to match
[  248.850122][T16098] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.4.4280: corrupted xattr block 95: invalid header
[  248.867020][T16098] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4280: bg 0: block 7: invalid block bitmap
[  248.880109][T16098] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  248.893445][T16098] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #11: comm syz.4.4280: corrupted xattr block 95: invalid header
[  248.928754][T16098] EXT4-fs warning (device loop4): ext4_evict_inode:279: xattr delete (err -117)
[  248.939274][T16098] EXT4-fs (loop4): 1 orphan inode deleted
[  248.952827][T16114] loop3: detected capacity change from 0 to 512
[  248.959955][T16114] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  248.975871][T16118] FAULT_INJECTION: forcing a failure.
[  248.975871][T16118] name failslab, interval 1, probability 0, space 0, times 0
[  248.988657][T16118] CPU: 1 UID: 0 PID: 16118 Comm: syz.9.4287 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  248.988696][T16118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  248.988712][T16118] Call Trace:
[  248.988721][T16118]  <TASK>
[  248.988731][T16118]  dump_stack_lvl+0xf6/0x150
[  248.988760][T16118]  dump_stack+0x15/0x1a
[  248.988781][T16118]  should_fail_ex+0x261/0x270
[  248.988809][T16118]  should_failslab+0x8f/0xb0
[  248.988897][T16118]  __kmalloc_node_track_caller_noprof+0xaa/0x410
[  248.988929][T16118]  ? cond_bools_copy+0x30/0x80
[  248.988965][T16118]  kmemdup_noprof+0x2b/0x70
[  248.989112][T16118]  cond_bools_copy+0x30/0x80
[  248.989147][T16118]  hashtab_duplicate+0x132/0x370
[  248.989169][T16118]  ? __pfx_cond_bools_copy+0x10/0x10
[  248.989197][T16118]  ? __pfx_cond_bools_destroy+0x10/0x10
[  248.989314][T16118]  cond_policydb_dup+0xd9/0x500
[  248.989486][T16118]  security_set_bools+0xa8/0x350
[  248.989516][T16118]  sel_commit_bools_write+0x1ed/0x270
[  248.989555][T16118]  vfs_writev+0x3f3/0x880
[  248.989587][T16118]  ? get_pid_task+0x94/0xd0
[  248.989689][T16118]  ? __pfx_sel_commit_bools_write+0x10/0x10
[  248.989745][T16118]  ? mutex_lock+0xd/0x40
[  248.989772][T16118]  do_writev+0xf7/0x230
[  248.989797][T16118]  __x64_sys_writev+0x45/0x50
[  248.989835][T16118]  x64_sys_call+0x1d68/0x2e10
[  248.989917][T16118]  do_syscall_64+0xc9/0x1c0
[  248.989947][T16118]  ? clear_bhb_loop+0x25/0x80
[  248.989971][T16118]  ? clear_bhb_loop+0x25/0x80
[  248.989998][T16118]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.990021][T16118] RIP: 0033:0x7f920de8d169
[  248.990037][T16118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  248.990056][T16118] RSP: 002b:00007f920c4ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  248.990142][T16118] RAX: ffffffffffffffda RBX: 00007f920e0a5fa0 RCX: 00007f920de8d169
[  248.990157][T16118] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000006
[  248.990170][T16118] RBP: 00007f920c4ef090 R08: 0000000000000000 R09: 0000000000000000
[  248.990182][T16118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  248.990209][T16118] R13: 0000000000000000 R14: 00007f920e0a5fa0 R15: 00007fff8a355cb8
[  248.990229][T16118]  </TASK>
[  249.051527][T16114] EXT4-fs (loop3): orphan cleanup on readonly fs
[  249.085776][T16098] netlink: 'syz.4.4280': attribute type 10 has an invalid length.
[  249.087371][T16114] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.4286: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[  249.091646][T16098] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4280'.
[  249.098861][T16114] EXT4-fs error (device loop3): ext4_quota_enable:7129: comm syz.3.4286: Bad quota inode: 3, type: 0
[  249.288366][T16114] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  249.293128][T16098] team0: Port device geneve1 added
[  249.303068][T16114] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  249.427857][T16128] FAULT_INJECTION: forcing a failure.
[  249.427857][T16128] name failslab, interval 1, probability 0, space 0, times 0
[  249.440604][T16128] CPU: 0 UID: 0 PID: 16128 Comm: syz.4.4291 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  249.440636][T16128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  249.440706][T16128] Call Trace:
[  249.440714][T16128]  <TASK>
[  249.440721][T16128]  dump_stack_lvl+0xf6/0x150
[  249.440746][T16128]  dump_stack+0x15/0x1a
[  249.440773][T16128]  should_fail_ex+0x261/0x270
[  249.440838][T16128]  should_failslab+0x8f/0xb0
[  249.440909][T16128]  kmem_cache_alloc_noprof+0x59/0x340
[  249.440936][T16128]  ? alloc_vfsmnt+0x2b/0x340
[  249.440986][T16128]  alloc_vfsmnt+0x2b/0x340
[  249.441022][T16128]  clone_mnt+0x45/0x7a0
[  249.441056][T16128]  copy_tree+0x2ff/0x850
[  249.441090][T16128]  copy_mnt_ns+0x121/0x5e0
[  249.441199][T16128]  ? kmem_cache_alloc_noprof+0x237/0x340
[  249.441232][T16128]  ? create_new_namespaces+0x3c/0x430
[  249.441254][T16128]  create_new_namespaces+0x89/0x430
[  249.441318][T16128]  ? security_capable+0x81/0x90
[  249.441346][T16128]  unshare_nsproxy_namespaces+0xe6/0x120
[  249.441446][T16128]  ksys_unshare+0x3d3/0x700
[  249.441524][T16128]  __x64_sys_unshare+0x1f/0x30
[  249.441560][T16128]  x64_sys_call+0x2c93/0x2e10
[  249.441588][T16128]  do_syscall_64+0xc9/0x1c0
[  249.441643][T16128]  ? clear_bhb_loop+0x25/0x80
[  249.441688][T16128]  ? clear_bhb_loop+0x25/0x80
[  249.441715][T16128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.441763][T16128] RIP: 0033:0x7f4ebac3d169
[  249.441781][T16128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  249.441803][T16128] RSP: 002b:00007f4eb92a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  249.441823][T16128] RAX: ffffffffffffffda RBX: 00007f4ebae55fa0 RCX: 00007f4ebac3d169
[  249.441835][T16128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400
[  249.441847][T16128] RBP: 00007f4eb92a7090 R08: 0000000000000000 R09: 0000000000000000
[  249.441874][T16128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  249.441888][T16128] R13: 0000000000000000 R14: 00007f4ebae55fa0 R15: 00007ffff0625448
[  249.441911][T16128]  </TASK>
[  249.742948][T16136] serio: Serial port ptm0
[  249.773320][T16144] xt_hashlimit: max too large, truncated to 1048576
[  249.780882][T16144] Cannot find set identified by id 0 to match
[  249.847997][T16149] loop8: detected capacity change from 0 to 1024
[  249.855608][T16151] xt_hashlimit: max too large, truncated to 1048576
[  249.881932][T16149] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  249.893339][T16149] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  249.904851][T16149] JBD2: no valid journal superblock found
[  249.910616][T16149] EXT4-fs (loop8): Could not load journal inode
[  249.941741][   T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  250.050198][T16158] loop8: detected capacity change from 0 to 8192
[  250.091252][T16158]  loop8: p2 p4
[  250.094821][T16158] loop8: p2 start 452985600 is beyond EOD, truncated
[  250.101699][T16158] loop8: p4 start 8388607 is beyond EOD, truncated
[  250.174977][T16170] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.182450][T16170] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.190368][T16170] bridge0: entered allmulticast mode
[  250.228310][T16170] 9pnet_fd: Insufficient options for proto=fd
[  250.238172][T16170] bridge_slave_1: left allmulticast mode
[  250.244117][T16170] bridge_slave_1: left promiscuous mode
[  250.249821][T16170] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.259447][T16170] bridge_slave_0: left allmulticast mode
[  250.265185][T16170] bridge_slave_0: left promiscuous mode
[  250.270907][T16170] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.307251][T16172] 9pnet_fd: Insufficient options for proto=fd
[  250.366953][T16174] netlink: 332 bytes leftover after parsing attributes in process `syz.9.4309'.
[  250.478183][T16182] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.504208][T16184] xt_hashlimit: max too large, truncated to 1048576
[  250.511764][T16184] set_match_v0_checkentry: 1 callbacks suppressed
[  250.511780][T16184] Cannot find set identified by id 0 to match
[  250.525964][T16182] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.563369][T16189] loop8: detected capacity change from 0 to 1024
[  250.570429][T16189] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  250.581580][T16189] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  250.596276][T16189] JBD2: no valid journal superblock found
[  250.602118][T16189] EXT4-fs (loop8): Could not load journal inode
[  250.602134][T16185] loop9: detected capacity change from 0 to 8192
[  250.617033][T16182] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.682845][T16182] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.697981][T16201] xt_hashlimit: max too large, truncated to 1048576
[  250.707144][T16198] loop8: detected capacity change from 0 to 764
[  250.715690][T16198] rock: directory entry would overflow storage
[  250.722135][T16198] rock: sig=0x4654, size=5, remaining=4
[  250.736698][T16182] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  250.750741][T16182] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  250.767607][T16182] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  250.785948][T16182] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.795641][T16198] Cannot find del_set index 0 as target
[  250.802558][T16198] netlink: 192 bytes leftover after parsing attributes in process `syz.8.4320'.
[  250.825223][T16205] 9pnet_fd: Insufficient options for proto=fd
[  250.939427][T16220] xt_hashlimit: max too large, truncated to 1048576
[  250.948113][T16220] Cannot find set identified by id 0 to match
[  250.978879][T16224] xt_hashlimit: max too large, truncated to 1048576
[  250.992033][T16224] Cannot find set identified by id 0 to match
[  251.022523][T16219] loop9: detected capacity change from 0 to 128
[  251.076902][T16232] loop3: detected capacity change from 0 to 2048
[  251.096210][T16232] EXT4-fs mount: 10 callbacks suppressed
[  251.096229][T16232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.150164][T11733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.205376][T16243] loop9: detected capacity change from 0 to 8192
[  251.218713][T16243] syz.9.4346: attempt to access beyond end of device
[  251.218713][T16243] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  251.244463][T16249] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  251.360407][T16255] dummy0 speed is unknown, defaulting to 1000
[  251.446677][T16261] __nla_validate_parse: 2 callbacks suppressed
[  251.446695][T16261] netlink: 332 bytes leftover after parsing attributes in process `syz.9.4343'.
[  251.513611][T16272] loop3: detected capacity change from 0 to 1024
[  251.520313][T16272] EXT4-fs: Ignoring removed i_version option
[  251.529736][T16272] EXT4-fs: Ignoring removed orlov option
[  251.535579][T16272] EXT4-fs: Ignoring removed nomblk_io_submit option
[  251.546039][T16272] EXT4-fs: Invalid want_extra_isize 256
[  251.592855][T16276] xt_hashlimit: max too large, truncated to 1048576
[  251.618299][T16280] FAULT_INJECTION: forcing a failure.
[  251.618299][T16280] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  251.631663][T16280] CPU: 0 UID: 0 PID: 16280 Comm: syz.9.4353 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  251.631693][T16280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  251.631709][T16280] Call Trace:
[  251.631717][T16280]  <TASK>
[  251.631762][T16280]  dump_stack_lvl+0xf6/0x150
[  251.631792][T16280]  dump_stack+0x15/0x1a
[  251.631813][T16280]  should_fail_ex+0x261/0x270
[  251.631846][T16280]  should_fail+0xb/0x10
[  251.631945][T16280]  should_fail_usercopy+0x1a/0x20
[  251.631979][T16280]  _copy_from_user+0x1c/0xa0
[  251.632019][T16280]  do_sock_getsockopt+0xde/0x290
[  251.632085][T16280]  __x64_sys_getsockopt+0x191/0x210
[  251.632124][T16280]  x64_sys_call+0x128f/0x2e10
[  251.632179][T16280]  do_syscall_64+0xc9/0x1c0
[  251.632214][T16280]  ? clear_bhb_loop+0x25/0x80
[  251.632239][T16280]  ? clear_bhb_loop+0x25/0x80
[  251.632264][T16280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.632314][T16280] RIP: 0033:0x7f920de8d169
[  251.632332][T16280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  251.632353][T16280] RSP: 002b:00007f920c4ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  251.632375][T16280] RAX: ffffffffffffffda RBX: 00007f920e0a5fa0 RCX: 00007f920de8d169
[  251.632389][T16280] RDX: 000000000000000b RSI: 000000000000010d RDI: 0000000000000003
[  251.632459][T16280] RBP: 00007f920c4ef090 R08: 0000200000000080 R09: 0000000000000000
[  251.632475][T16280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  251.632490][T16280] R13: 0000000000000000 R14: 00007f920e0a5fa0 R15: 00007fff8a355cb8
[  251.632523][T16280]  </TASK>
[  251.832230][T16287] netlink: 332 bytes leftover after parsing attributes in process `syz.9.4356'.
[  251.908530][T16297] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4360'.
[  251.938690][T16298] loop3: detected capacity change from 0 to 2048
[  251.966707][T16298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.988179][T16308] loop9: detected capacity change from 0 to 128
[  252.058165][T16315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4366'.
[  252.092438][T11733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.258024][T16322] loop3: detected capacity change from 0 to 764
[  252.284352][T16322] rock: directory entry would overflow storage
[  252.290617][T16322] rock: sig=0x4654, size=5, remaining=4
[  252.301384][T16335] netlink: 332 bytes leftover after parsing attributes in process `syz.4.4372'.
[  252.330266][T16322] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4365'.
[  252.425587][T16347] loop9: detected capacity change from 0 to 764
[  252.436483][T16347] rock: directory entry would overflow storage
[  252.442753][T16347] rock: sig=0x4654, size=5, remaining=4
[  252.460377][T16347] Cannot find del_set index 0 as target
[  252.471828][T16347] netlink: 192 bytes leftover after parsing attributes in process `syz.9.4389'.
[  252.502005][T16346] xt_hashlimit: max too large, truncated to 1048576
[  252.512720][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  252.524500][T16346] loop3: detected capacity change from 0 to 128
[  252.546007][T16354] netlink: 508 bytes leftover after parsing attributes in process `syz.4.4382'.
[  252.565051][T16362] 9pnet_fd: Insufficient options for proto=fd
[  252.588409][T16365] xt_hashlimit: max too large, truncated to 1048576
[  252.606973][T16365] Cannot find set identified by id 0 to match
[  252.623024][T16358] loop9: detected capacity change from 0 to 128
[  252.648237][T16369] netlink: 332 bytes leftover after parsing attributes in process `syz.1.4386'.
[  252.702200][T16373] loop4: detected capacity change from 0 to 2048
[  252.740479][T16373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.804624][T16386] xt_hashlimit: size too large, truncated to 1048576
[  252.812549][T16384] loop3: detected capacity change from 0 to 8192
[  252.841841][T16384]  loop3: p2 p4
[  252.845484][T16384] loop3: p2 start 452985600 is beyond EOD, truncated
[  252.852299][T16384] loop3: p4 start 8388607 is beyond EOD, truncated
[  252.882187][T15395] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.899818][T16388] dummy0 speed is unknown, defaulting to 1000
[  252.937266][   T29] kauditd_printk_skb: 280 callbacks suppressed
[  252.937281][   T29] audit: type=1400 audit(1744094430.146:14133): avc:  denied  { read } for  pid=16385 comm="syz.1.4397" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  252.966997][   T29] audit: type=1400 audit(1744094430.146:14134): avc:  denied  { open } for  pid=16385 comm="syz.1.4397" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  253.038687][T16396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4399'.
[  253.048172][T16394] loop4: detected capacity change from 0 to 1764
[  253.071696][T16394] iso9660: Corrupted directory entry in block 2 of inode 1920
[  253.152501][T16403] loop3: detected capacity change from 0 to 512
[  253.171650][T16405] loop4: detected capacity change from 0 to 512
[  253.178573][T16405] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  253.186570][T16403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.187646][T16405] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  253.200360][T16403] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  253.220136][T16411] xt_hashlimit: max too large, truncated to 1048576
[  253.233363][T16405] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[  253.235662][T16411] Cannot find set identified by id 0 to match
[  253.242279][T16403] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.4402: corrupted xattr block 32: invalid header
[  253.261811][T16405] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  253.265091][T16386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.269820][T16405] System zones: 0-2, 18-18, 34-34
[  253.270029][   T29] audit: type=1400 audit(1744094430.476:14135): avc:  denied  { ioctl } for  pid=16385 comm="syz.1.4397" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  253.278529][T16386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.317032][T16405] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  253.332225][T16405] EXT4-fs (loop4): 1 truncate cleaned up
[  253.335295][T16403] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  253.338418][T16405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.354723][T16403] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.4402: corrupted xattr block 32: invalid header
[  253.367031][T16405] EXT4-fs error (device loop4): ext4_generic_delete_entry:2670: inode #2: block 3: comm syz.4.4403: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[  253.372345][   T29] audit: type=1400 audit(1744094430.576:14136): avc:  denied  { remove_name } for  pid=16404 comm="syz.4.4403" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  253.395822][T16405] EXT4-fs error (device loop4) in ext4_delete_entry:2741: Corrupt filesystem
[  253.414016][   T29] audit: type=1400 audit(1744094430.576:14137): avc:  denied  { rename } for  pid=16404 comm="syz.4.4403" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  253.426913][T16405] EXT4-fs warning (device loop4): ext4_rename_delete:3728: inode #2: comm syz.4.4403: Deleting old file: nlink 4, error=-117
[  253.445306][   T29] audit: type=1400 audit(1744094430.576:14138): avc:  denied  { unlink } for  pid=16404 comm="syz.4.4403" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  253.464947][T16403] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  253.490410][   T29] audit: type=1400 audit(1744094430.706:14139): avc:  denied  { setattr } for  pid=16401 comm="syz.3.4402" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  253.531836][   T29] audit: type=1400 audit(1744094430.746:14140): avc:  denied  { relabelto } for  pid=16404 comm="syz.4.4403" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:agp_device_t:s0"
[  253.560648][T16403] EXT4-fs error (device loop3): ext4_xattr_block_find:1869: inode #15: comm syz.3.4402: corrupted xattr block 32: invalid header
[  253.587596][T15395] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.610480][T11733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.635751][   T29] audit: type=1326 audit(1744094430.846:14141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16421 comm="syz.3.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3709d169 code=0x7ffc0000
[  253.659984][   T29] audit: type=1326 audit(1744094430.846:14142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16421 comm="syz.3.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3709d169 code=0x7ffc0000
[  253.735087][T16431] loop4: detected capacity change from 0 to 512
[  253.745050][T16431] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  253.759198][T16435] SELinux:  Context system_u:object_r:man_t:s0 is not valid (left unmapped).
[  253.760256][T16436] Cannot find set identified by id 0 to match
[  253.778301][T16431] EXT4-fs (loop4): 1 truncate cleaned up
[  253.787128][T16431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.816234][T15395] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.885333][T13882] block device autoloading is deprecated and will be removed.
[  254.100370][T16481] loop9: detected capacity change from 0 to 2048
[  254.138996][T16481] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.202089][T16489] dvmrp5: entered allmulticast mode
[  254.208446][T16489] dvmrp5: left allmulticast mode
[  254.214351][T13483] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.265435][T16498] binfmt_misc: register: failed to install interpreter file ./file2
[  254.327640][T16504] loop3: detected capacity change from 0 to 1024
[  254.357684][T16504] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  254.368742][T16504] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  254.433424][T16504] JBD2: no valid journal superblock found
[  254.439198][T16504] EXT4-fs (loop3): Could not load journal inode
[  254.484988][T16517] loop9: detected capacity change from 0 to 2048
[  254.510797][T16506] dummy0 speed is unknown, defaulting to 1000
[  254.533043][T16517] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.548402][T16521] net_ratelimit: 10 callbacks suppressed
[  254.548500][T16521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  254.616098][T16532] ip6t_rpfilter: unknown options
[  254.622728][T13483] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.663608][T16532] netlink: 'syz.1.4453': attribute type 2 has an invalid length.
[  254.804391][T16560] FAULT_INJECTION: forcing a failure.
[  254.804391][T16560] name failslab, interval 1, probability 0, space 0, times 0
[  254.817077][T16560] CPU: 0 UID: 0 PID: 16560 Comm: syz.4.4465 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  254.817234][T16560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  254.817247][T16560] Call Trace:
[  254.817253][T16560]  <TASK>
[  254.817261][T16560]  dump_stack_lvl+0xf6/0x150
[  254.817295][T16560]  dump_stack+0x15/0x1a
[  254.817354][T16560]  should_fail_ex+0x261/0x270
[  254.817387][T16560]  should_failslab+0x8f/0xb0
[  254.817425][T16560]  kmem_cache_alloc_node_noprof+0x5c/0x340
[  254.817456][T16560]  ? __alloc_skb+0x10d/0x320
[  254.817478][T16560]  ? try_charge_memcg+0x1c4/0x820
[  254.817559][T16560]  __alloc_skb+0x10d/0x320
[  254.817587][T16560]  alloc_skb_with_frags+0x80/0x460
[  254.817618][T16560]  ? refill_obj_stock+0x160/0x230
[  254.817644][T16560]  ? mod_objcg_state+0x3f9/0x530
[  254.817666][T16560]  ? ref_tracker_alloc+0x1ff/0x310
[  254.817707][T16560]  sock_alloc_send_pskb+0x437/0x500
[  254.817794][T16560]  ? __rcu_read_unlock+0x4e/0x70
[  254.817830][T16560]  packet_sendmsg+0x245e/0x3690
[  254.817864][T16560]  ? avc_has_perm_noaudit+0x1cc/0x210
[  254.817900][T16560]  ? avc_has_perm+0xd6/0x150
[  254.817973][T16560]  ? selinux_socket_sendmsg+0x18a/0x1c0
[  254.818013][T16560]  ? __pfx_packet_sendmsg+0x10/0x10
[  254.818039][T16560]  __sock_sendmsg+0x140/0x180
[  254.818079][T16560]  ____sys_sendmsg+0x350/0x4e0
[  254.818175][T16560]  __sys_sendmsg+0x1a0/0x240
[  254.818221][T16560]  __x64_sys_sendmsg+0x46/0x50
[  254.818253][T16560]  x64_sys_call+0x26f3/0x2e10
[  254.818287][T16560]  do_syscall_64+0xc9/0x1c0
[  254.818327][T16560]  ? clear_bhb_loop+0x25/0x80
[  254.818354][T16560]  ? clear_bhb_loop+0x25/0x80
[  254.818377][T16560]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.818457][T16560] RIP: 0033:0x7f4ebac3d169
[  254.818542][T16560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.818566][T16560] RSP: 002b:00007f4eb92a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  254.818605][T16560] RAX: ffffffffffffffda RBX: 00007f4ebae55fa0 RCX: 00007f4ebac3d169
[  254.818666][T16560] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  254.818677][T16560] RBP: 00007f4eb92a7090 R08: 0000000000000000 R09: 0000000000000000
[  254.818689][T16560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  254.818701][T16560] R13: 0000000000000000 R14: 00007f4ebae55fa0 R15: 00007ffff0625448
[  254.818774][T16560]  </TASK>
[  254.909636][T16557] dummy0 speed is unknown, defaulting to 1000
[  255.246252][T16578] loop8: detected capacity change from 0 to 2048
[  255.265879][T16578] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  255.280554][T16583] hashlimit_mt_check_common: 3 callbacks suppressed
[  255.280569][T16583] xt_hashlimit: max too large, truncated to 1048576
[  255.294860][T16583] Cannot find set identified by id 0 to match
[  255.303311][T16578] EXT4-fs error (device loop8): ext4_find_extent:938: inode #2: comm syz.8.4473: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  255.325743][T16581] loop4: detected capacity change from 0 to 1024
[  255.332761][T16578] EXT4-fs error (device loop8): ext4_find_extent:938: inode #2: comm syz.8.4473: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  255.356099][T16581] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  255.367086][T16581] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  255.410636][T11917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.430359][T16581] JBD2: no valid journal superblock found
[  255.436199][T16581] EXT4-fs (loop4): Could not load journal inode
[  255.447242][T16595] loop9: detected capacity change from 0 to 128
[  255.468176][T16595] FAULT_INJECTION: forcing a failure.
[  255.468176][T16595] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  255.481315][T16595] CPU: 0 UID: 0 PID: 16595 Comm: syz.9.4481 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  255.481386][T16595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  255.481401][T16595] Call Trace:
[  255.481410][T16595]  <TASK>
[  255.481419][T16595]  dump_stack_lvl+0xf6/0x150
[  255.481446][T16595]  dump_stack+0x15/0x1a
[  255.481464][T16595]  should_fail_ex+0x261/0x270
[  255.481496][T16595]  should_fail+0xb/0x10
[  255.481542][T16595]  should_fail_usercopy+0x1a/0x20
[  255.481571][T16595]  _copy_from_user+0x1c/0xa0
[  255.481662][T16595]  io_submit_one+0x56/0x1230
[  255.481691][T16595]  ? __rcu_read_unlock+0x4e/0x70
[  255.481775][T16595]  __se_sys_io_submit+0xf7/0x280
[  255.481866][T16595]  __x64_sys_io_submit+0x43/0x50
[  255.482021][T16595]  x64_sys_call+0xa8b/0x2e10
[  255.482094][T16595]  do_syscall_64+0xc9/0x1c0
[  255.482129][T16595]  ? clear_bhb_loop+0x25/0x80
[  255.482191][T16595]  ? clear_bhb_loop+0x25/0x80
[  255.482216][T16595]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.482237][T16595] RIP: 0033:0x7f920de8d169
[  255.482251][T16595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  255.482338][T16595] RSP: 002b:00007f920c4ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  255.482360][T16595] RAX: ffffffffffffffda RBX: 00007f920e0a5fa0 RCX: 00007f920de8d169
[  255.482375][T16595] RDX: 0000200000001d00 RSI: 0000000000000002 RDI: 00007f920c4cd000
[  255.482390][T16595] RBP: 00007f920c4ef090 R08: 0000000000000000 R09: 0000000000000000
[  255.482404][T16595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  255.482416][T16595] R13: 0000000000000000 R14: 00007f920e0a5fa0 R15: 00007fff8a355cb8
[  255.482451][T16595]  </TASK>
[  255.692793][T16591] dummy0 speed is unknown, defaulting to 1000
[  255.772129][T16612] xt_hashlimit: max too large, truncated to 1048576
[  255.772834][T16612] Cannot find set identified by id 0 to match
[  255.785218][   T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  255.906452][T16622] loop3: detected capacity change from 0 to 1024
[  255.937957][T16622] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  255.948999][T16622] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  256.014408][T16622] JBD2: no valid journal superblock found
[  256.020190][T16622] EXT4-fs (loop3): Could not load journal inode
[  256.132910][T16640] 9pnet_fd: p9_fd_create_tcp (16640): problem connecting socket to 127.0.0.1
[  256.160029][T16643] netlink: 'syz.4.4502': attribute type 4 has an invalid length.
[  256.198270][T16640] netlink: 'syz.4.4502': attribute type 4 has an invalid length.
[  256.217739][T16640] netlink: 'syz.4.4502': attribute type 4 has an invalid length.
[  256.233743][T16662] loop8: detected capacity change from 0 to 512
[  256.243817][T16662] EXT4-fs error (device loop8): ext4_iget_extra_inode:4692: inode #15: comm syz.8.4511: corrupted in-inode xattr: invalid ea_ino
[  256.244978][T16640] netlink: 'syz.4.4502': attribute type 4 has an invalid length.
[  256.269020][T16640] netlink: 'syz.4.4502': attribute type 4 has an invalid length.
[  256.277170][T16640] netlink: 'syz.4.4502': attribute type 4 has an invalid length.
[  256.285035][T16640] netlink: 'syz.4.4502': attribute type 4 has an invalid length.
[  256.293129][T16640] netlink: 'syz.4.4502': attribute type 4 has an invalid length.
[  256.301125][T16640] netlink: 'syz.4.4502': attribute type 4 has an invalid length.
[  256.317818][T16662] EXT4-fs error (device loop8): ext4_orphan_get:1395: comm syz.8.4511: couldn't read orphan inode 15 (err -117)
[  256.342000][T16662] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.367690][T11917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.438069][T16678] loop4: detected capacity change from 0 to 1024
[  256.455837][T16678] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  256.466940][T16678] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  256.481599][T16678] JBD2: no valid journal superblock found
[  256.487375][T16678] EXT4-fs (loop4): Could not load journal inode
[  256.512195][T16685] loop9: detected capacity change from 0 to 512
[  256.520120][T16685] EXT4-fs error (device loop9): ext4_iget_extra_inode:4692: inode #15: comm syz.9.4519: corrupted in-inode xattr: invalid ea_ino
[  256.525021][T16688] FAULT_INJECTION: forcing a failure.
[  256.525021][T16688] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  256.546763][T16688] CPU: 1 UID: 0 PID: 16688 Comm: syz.8.4520 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  256.546793][T16688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  256.546808][T16688] Call Trace:
[  256.546815][T16688]  <TASK>
[  256.546824][T16688]  dump_stack_lvl+0xf6/0x150
[  256.546859][T16688]  dump_stack+0x15/0x1a
[  256.546879][T16688]  should_fail_ex+0x261/0x270
[  256.546911][T16688]  should_fail_alloc_page+0xfd/0x110
[  256.546950][T16688]  __alloc_frozen_pages_noprof+0x11d/0x360
[  256.546987][T16688]  alloc_pages_mpol+0xb6/0x260
[  256.547017][T16688]  alloc_pages_noprof+0xe8/0x130
[  256.547045][T16688]  __pud_alloc+0x4d/0x450
[  256.547080][T16688]  ? should_fail_ex+0xd7/0x270
[  256.547112][T16688]  copy_page_range+0x37f4/0x3a20
[  256.547144][T16688]  ? kmem_cache_alloc_bulk_noprof+0x263/0x4a0
[  256.547174][T16688]  ? mod_objcg_state+0x3f9/0x530
[  256.547201][T16688]  ? mas_wr_store_type+0x6da/0xb50
[  256.547236][T16688]  ? mas_store+0x546/0x740
[  256.547272][T16688]  copy_mm+0xabc/0x1360
[  256.547313][T16688]  copy_process+0xcfc/0x1f60
[  256.547347][T16688]  kernel_clone+0x168/0x5d0
[  256.547378][T16688]  __x64_sys_clone+0xe9/0x120
[  256.547419][T16688]  x64_sys_call+0x2dc9/0x2e10
[  256.547445][T16688]  do_syscall_64+0xc9/0x1c0
[  256.547473][T16688]  ? clear_bhb_loop+0x25/0x80
[  256.547494][T16688]  ? clear_bhb_loop+0x25/0x80
[  256.547517][T16688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.547542][T16688] RIP: 0033:0x7fe162e4d169
[  256.547560][T16688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  256.547581][T16688] RSP: 002b:00007fe1614b6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  256.547604][T16688] RAX: ffffffffffffffda RBX: 00007fe163065fa0 RCX: 00007fe162e4d169
[  256.547618][T16688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000126400
[  256.547630][T16688] RBP: 00007fe1614b7090 R08: 0000000000000000 R09: 0000000000000000
[  256.547642][T16688] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002
[  256.547656][T16688] R13: 0000000000000001 R14: 00007fe163065fa0 R15: 00007ffed53a1118
[  256.547675][T16688]  </TASK>
[  256.766977][T16685] EXT4-fs error (device loop9): ext4_orphan_get:1395: comm syz.9.4519: couldn't read orphan inode 15 (err -117)
[  256.800949][T16685] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.908054][T16693] __nla_validate_parse: 6 callbacks suppressed
[  256.908072][T16693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4523'.
[  256.955317][T13483] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.997194][T16704] 9pnet_fd: Insufficient options for proto=fd
[  257.013086][T16699] loop4: detected capacity change from 0 to 8192
[  257.132057][T16725] xt_hashlimit: max too large, truncated to 1048576
[  257.171640][T16730] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4538'.
[  257.180736][T16730] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4538'.
[  257.189889][T16730] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4538'.
[  257.217883][T16730] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4538'.
[  257.226986][T16730] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4538'.
[  257.235997][T16730] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4538'.
[  257.249773][T16737] program syz.3.4540 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  257.286454][T16730] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4538'.
[  257.295537][T16730] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4538'.
[  257.304535][T16730] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4538'.
[  257.357942][T16749] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  257.618121][T16769] can0: slcan on ttyS3.
[  257.651170][T16769] can0 (unregistered): slcan off ttyS3.
[  257.657804][T16771] 9pnet_fd: Insufficient options for proto=fd
[  257.869699][T16785] xt_hashlimit: max too large, truncated to 1048576
[  257.888744][T16785] Cannot find set identified by id 0 to match
[  257.945254][T16789] loop3: detected capacity change from 0 to 2048
[  257.990533][T16789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.034057][T16800] 9pnet_fd: Insufficient options for proto=fd
[  258.040699][T16803] xt_hashlimit: max too large, truncated to 1048576
[  258.059003][T16803] Cannot find set identified by id 0 to match
[  258.079411][T16805] loop8: detected capacity change from 0 to 1764
[  258.113252][T11733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.127221][T16805] iso9660: Corrupted directory entry in block 2 of inode 1920
[  258.261687][   T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  258.337076][T16829] xt_hashlimit: max too large, truncated to 1048576
[  258.358672][T16829] Cannot find set identified by id 0 to match
[  258.530942][T16834] dummy0 speed is unknown, defaulting to 1000
[  258.747145][T16840] syz_tun: refused to change device tx_queue_len
[  259.093323][T16859] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  259.110357][T16859] wireguard0: entered promiscuous mode
[  259.116023][T16859] wireguard0: entered allmulticast mode
[  259.131918][T16857] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  259.143743][T16862] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  259.152061][T16862] syzkaller0: MTU too low for tipc bearer
[  259.157876][T16862] tipc: Disabling bearer <eth:syzkaller0>
[  259.211430][T16870] xt_hashlimit: max too large, truncated to 1048576
[  259.225326][T16870] Cannot find set identified by id 0 to match
[  259.341644][   T29] kauditd_printk_skb: 215 callbacks suppressed
[  259.341661][   T29] audit: type=1326 audit(1744094436.556:14358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz.3.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3709d169 code=0x7ffc0000
[  259.395815][   T29] audit: type=1326 audit(1744094436.586:14359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz.3.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb3709d169 code=0x7ffc0000
[  259.419521][   T29] audit: type=1326 audit(1744094436.586:14360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz.3.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3709d169 code=0x7ffc0000
[  259.443176][   T29] audit: type=1326 audit(1744094436.586:14361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz.3.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3709d169 code=0x7ffc0000
[  259.466814][   T29] audit: type=1326 audit(1744094436.586:14362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz.3.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb3709d169 code=0x7ffc0000
[  259.490430][   T29] audit: type=1326 audit(1744094436.586:14363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz.3.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3709d169 code=0x7ffc0000
[  259.514035][   T29] audit: type=1326 audit(1744094436.586:14364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz.3.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3709d169 code=0x7ffc0000
[  259.537673][   T29] audit: type=1326 audit(1744094436.586:14365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz.3.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7ffb3709d169 code=0x7ffc0000
[  259.561360][   T29] audit: type=1326 audit(1744094436.586:14366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz.3.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3709d169 code=0x7ffc0000
[  259.585279][   T29] audit: type=1326 audit(1744094436.586:14367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz.3.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3709d169 code=0x7ffc0000
[  259.670231][T16910] sock: sock_set_timeout: `syz.9.4614' (pid 16910) tries to set negative timeout
[  259.772576][T16929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  259.786449][T16932] xt_hashlimit: max too large, truncated to 1048576
[  259.819366][T16934] loop4: detected capacity change from 0 to 764
[  259.832195][T16934] rock: directory entry would overflow storage
[  259.838407][T16934] rock: sig=0x4654, size=5, remaining=4
[  259.856718][T16934] Cannot find del_set index 0 as target
[  259.914268][T16949] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  259.957906][T16957] loop3: detected capacity change from 0 to 512
[  259.958134][T16957] EXT4-fs: Ignoring removed mblk_io_submit option
[  259.980659][T16957] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  259.986953][T16957] EXT4-fs (loop3): 1 truncate cleaned up
[  259.987337][T16957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.073879][T16968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  260.110649][T11733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.135745][T16977] xt_hashlimit: max too large, truncated to 1048576
[  260.244223][T16984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.244338][T16984] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.364233][T17000] loop3: detected capacity change from 0 to 512
[  260.570621][T17026] xt_hashlimit: max too large, truncated to 1048576
[  260.573475][T17026] Cannot find set identified by id 0 to match
[  260.701738][T17034] FAULT_INJECTION: forcing a failure.
[  260.701738][T17034] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  260.715201][T17034] CPU: 1 UID: 0 PID: 17034 Comm: syz.8.4668 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  260.715233][T17034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  260.715264][T17034] Call Trace:
[  260.715272][T17034]  <TASK>
[  260.715281][T17034]  dump_stack_lvl+0xf6/0x150
[  260.715310][T17034]  dump_stack+0x15/0x1a
[  260.715332][T17034]  should_fail_ex+0x261/0x270
[  260.715472][T17034]  should_fail_alloc_page+0xfd/0x110
[  260.715508][T17034]  __alloc_frozen_pages_noprof+0x11d/0x360
[  260.715566][T17034]  alloc_pages_mpol+0xb6/0x260
[  260.715595][T17034]  folio_alloc_mpol_noprof+0x36/0x80
[  260.715620][T17034]  shmem_get_folio_gfp+0x3c1/0xd30
[  260.715661][T17034]  shmem_write_begin+0xa7/0x190
[  260.715707][T17034]  generic_perform_write+0x189/0x4b0
[  260.715739][T17034]  shmem_file_write_iter+0xc2/0xe0
[  260.715765][T17034]  vfs_write+0x79b/0x950
[  260.715794][T17034]  ? perf_trace_run_bpf_submit+0xb0/0x110
[  260.715823][T17034]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  260.715857][T17034]  ksys_write+0xeb/0x1b0
[  260.715924][T17034]  __x64_sys_write+0x42/0x50
[  260.716035][T17034]  x64_sys_call+0x2a45/0x2e10
[  260.716059][T17034]  do_syscall_64+0xc9/0x1c0
[  260.716092][T17034]  ? clear_bhb_loop+0x25/0x80
[  260.716149][T17034]  ? clear_bhb_loop+0x25/0x80
[  260.716187][T17034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.716210][T17034] RIP: 0033:0x7fe162e4bc1f
[  260.716286][T17034] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  260.716306][T17034] RSP: 002b:00007fe1614b6df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  260.716325][T17034] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007fe162e4bc1f
[  260.716340][T17034] RDX: 0000000000040000 RSI: 00007fe159097000 RDI: 0000000000000005
[  260.716353][T17034] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000480
[  260.716364][T17034] R10: 0000200000001042 R11: 0000000000000293 R12: 0000000000000005
[  260.716448][T17034] R13: 00007fe1614b6ef0 R14: 00007fe1614b6eb0 R15: 00007fe159097000
[  260.716474][T17034]  </TASK>
[  261.000501][T17048] FAULT_INJECTION: forcing a failure.
[  261.000501][T17048] name failslab, interval 1, probability 0, space 0, times 0
[  261.013260][T17048] CPU: 1 UID: 0 PID: 17048 Comm: syz.8.4675 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  261.013289][T17048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  261.013301][T17048] Call Trace:
[  261.013309][T17048]  <TASK>
[  261.013318][T17048]  dump_stack_lvl+0xf6/0x150
[  261.013346][T17048]  dump_stack+0x15/0x1a
[  261.013423][T17048]  should_fail_ex+0x261/0x270
[  261.013457][T17048]  should_failslab+0x8f/0xb0
[  261.013495][T17048]  kmem_cache_alloc_noprof+0x59/0x340
[  261.013522][T17048]  ? skb_clone+0x154/0x1f0
[  261.013553][T17048]  skb_clone+0x154/0x1f0
[  261.013580][T17048]  __netlink_deliver_tap+0x2bd/0x4f0
[  261.013615][T17048]  netlink_unicast+0x69e/0x6c0
[  261.013637][T17048]  netlink_sendmsg+0x609/0x720
[  261.013739][T17048]  ? __pfx_netlink_sendmsg+0x10/0x10
[  261.013767][T17048]  __sock_sendmsg+0x140/0x180
[  261.013830][T17048]  __sys_sendto+0x1aa/0x230
[  261.013866][T17048]  __x64_sys_sendto+0x78/0x90
[  261.013909][T17048]  x64_sys_call+0x2bcb/0x2e10
[  261.013931][T17048]  do_syscall_64+0xc9/0x1c0
[  261.013990][T17048]  ? clear_bhb_loop+0x25/0x80
[  261.014011][T17048]  ? clear_bhb_loop+0x25/0x80
[  261.014033][T17048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.014059][T17048] RIP: 0033:0x7fe162e4d169
[  261.014075][T17048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  261.014141][T17048] RSP: 002b:00007fe1614b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  261.014159][T17048] RAX: ffffffffffffffda RBX: 00007fe163065fa0 RCX: 00007fe162e4d169
[  261.014171][T17048] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000003
[  261.014185][T17048] RBP: 00007fe1614b7090 R08: 0000000000000000 R09: 0000000000000000
[  261.014199][T17048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  261.014213][T17048] R13: 0000000000000000 R14: 00007fe163065fa0 R15: 00007ffed53a1118
[  261.014235][T17048]  </TASK>
[  261.290900][T17063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  261.383384][T17074] SELinux:  policydb magic number 0x40 does not match expected magic number 0xf97cff8c
[  261.393233][T17074] SELinux: failed to load policy
[  261.400605][T17074] loop9: detected capacity change from 0 to 512
[  261.407552][T17074] EXT4-fs: Ignoring removed orlov option
[  261.418897][T17079] validate_nla: 25 callbacks suppressed
[  261.418914][T17079] netlink: 'syz.4.4690': attribute type 31 has an invalid length.
[  261.439393][T17074] EXT4-fs error (device loop9): ext4_orphan_get:1390: inode #15: comm syz.9.4686: casefold flag without casefold feature
[  261.462900][T17074] EXT4-fs error (device loop9): ext4_orphan_get:1395: comm syz.9.4686: couldn't read orphan inode 15 (err -117)
[  261.478318][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  261.505511][T17074] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  261.560178][T13483] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.582831][T17089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  261.616536][T17091] xt_hashlimit: size too large, truncated to 1048576
[  261.724718][T17101] loop3: detected capacity change from 0 to 512
[  261.734181][T17101] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  261.789121][T17101] EXT4-fs (loop3): 1 truncate cleaned up
[  261.795577][T17101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  261.848734][T11733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.932916][T17126] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  261.954392][T17091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.963975][T17125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  261.966035][T17091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.995821][T17091] __nla_validate_parse: 10 callbacks suppressed
[  261.995839][T17091] netlink: 596 bytes leftover after parsing attributes in process `syz.8.4696'.
[  262.055498][T17134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4714'.
[  262.098476][T17134] loop3: detected capacity change from 0 to 128
[  262.107930][T17147] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4720'.
[  262.109322][T17133] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  262.124908][T17133] FAT-fs (loop3): Filesystem has been set read-only
[  262.131598][T17133] syz.3.4714: attempt to access beyond end of device
[  262.131598][T17133] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  262.145426][T17133] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  262.153317][T17133] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  262.157387][T17150] xt_hashlimit: max too large, truncated to 1048576
[  262.172481][T17150] Cannot find set identified by id 0 to match
[  262.172508][T17134] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  262.190776][T17134] syz.3.4714: attempt to access beyond end of device
[  262.190776][T17134] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  262.206415][T17134] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  262.214366][T17134] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  262.245642][T17134] syz.3.4714: attempt to access beyond end of device
[  262.245642][T17134] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  262.284433][T17134] syz.3.4714: attempt to access beyond end of device
[  262.284433][T17134] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  262.300934][T17161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  262.324693][T17134] syz.3.4714: attempt to access beyond end of device
[  262.324693][T17134] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  262.338609][T17134] syz.3.4714: attempt to access beyond end of device
[  262.338609][T17134] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  262.384213][T17169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17169 comm=syz.1.4728
[  262.461977][T17183] loop9: detected capacity change from 0 to 128
[  262.469849][T17183] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  262.482990][T17183] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  262.594428][T17195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  262.638088][T17199] bridge0: port 1(netdevsim3) entered blocking state
[  262.644887][T17199] bridge0: port 1(netdevsim3) entered disabled state
[  262.656309][T17199] netdevsim netdevsim3 netdevsim3: entered allmulticast mode
[  262.664874][T17199] netdevsim netdevsim3 netdevsim3: entered promiscuous mode
[  262.677004][T17199] bridge0: port 1(netdevsim3) entered blocking state
[  262.683765][T17199] bridge0: port 1(netdevsim3) entered forwarding state
[  262.691375][T17203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=17203 comm=syz.8.4741
[  262.749878][T17215] xt_hashlimit: size too large, truncated to 1048576
[  262.878415][T17228] loop8: detected capacity change from 0 to 128
[  262.960163][T13483] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  263.019458][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4756'.
[  263.058736][T17249] loop9: detected capacity change from 0 to 1024
[  263.093869][T17215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.102729][T17215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.120384][T17249] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.214615][T17262] xt_hashlimit: max too large, truncated to 1048576
[  263.222888][T17262] Cannot find set identified by id 0 to match
[  263.446086][T13483] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.662298][T17282] loop3: detected capacity change from 0 to 512
[  263.693551][T17284] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  263.918969][T17282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  263.975252][T17282] ext4 filesystem being mounted at /422/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  264.026280][T16665] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  264.084326][T17282] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  264.359686][T17300] loop4: detected capacity change from 0 to 512
[  264.380734][T17300] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  264.403660][T17300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  264.434293][T17300] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  264.485097][T17300] FAULT_INJECTION: forcing a failure.
[  264.485097][T17300] name failslab, interval 1, probability 0, space 0, times 0
[  264.497858][T17300] CPU: 1 UID: 0 PID: 17300 Comm: syz.4.4776 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  264.497893][T17300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  264.497909][T17300] Call Trace:
[  264.497916][T17300]  <TASK>
[  264.497925][T17300]  dump_stack_lvl+0xf6/0x150
[  264.497995][T17300]  dump_stack+0x15/0x1a
[  264.498016][T17300]  should_fail_ex+0x261/0x270
[  264.498049][T17300]  should_failslab+0x8f/0xb0
[  264.498134][T17300]  kmem_cache_alloc_noprof+0x59/0x340
[  264.498162][T17300]  ? ext4_mb_new_blocks+0x2f7/0x2020
[  264.498183][T17300]  ? __mark_inode_dirty+0x1b7/0x7e0
[  264.498204][T17300]  ext4_mb_new_blocks+0x2f7/0x2020
[  264.498226][T17300]  ? ext4_find_extent+0x796/0x7e0
[  264.498325][T17300]  ? ext4_ext_search_right+0x248/0x4e0
[  264.498366][T17300]  ? ext4_ext_check_overlap+0x288/0x310
[  264.498402][T17300]  ext4_ext_map_blocks+0x106c/0x36a0
[  264.498455][T17300]  ? __submit_bio+0x2fd/0x510
[  264.498478][T17300]  ? ext4_es_lookup_extent+0x35b/0x520
[  264.498504][T17300]  ext4_map_blocks+0x5f8/0xdf0
[  264.498606][T17300]  ext4_iomap_begin+0x497/0x5c0
[  264.498761][T17300]  ? __pfx_ext4_iomap_begin+0x10/0x10
[  264.498782][T17300]  iomap_iter+0x32e/0x770
[  264.498810][T17300]  ? __pfx_ext4_iomap_end+0x10/0x10
[  264.498838][T17300]  __iomap_dio_rw+0xd5e/0x12a0
[  264.498904][T17300]  ? ext4_xattr_security_get+0x32/0x40
[  264.498950][T17300]  ? ext4_journal_check_start+0x122/0x1b0
[  264.498981][T17300]  iomap_dio_rw+0x40/0x90
[  264.499060][T17300]  ext4_file_write_iter+0xba9/0xf80
[  264.499090][T17300]  do_iter_readv_writev+0x40d/0x4b0
[  264.499126][T17300]  vfs_writev+0x2da/0x880
[  264.499145][T17300]  ? get_pid_task+0x94/0xd0
[  264.499217][T17300]  __se_sys_pwritev2+0x103/0x1d0
[  264.499261][T17300]  __x64_sys_pwritev2+0x78/0x90
[  264.499298][T17300]  x64_sys_call+0x1c86/0x2e10
[  264.499337][T17300]  do_syscall_64+0xc9/0x1c0
[  264.499370][T17300]  ? clear_bhb_loop+0x25/0x80
[  264.499392][T17300]  ? clear_bhb_loop+0x25/0x80
[  264.499413][T17300]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.499434][T17300] RIP: 0033:0x7f4ebac3d169
[  264.499473][T17300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  264.499491][T17300] RSP: 002b:00007f4eb92a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[  264.499570][T17300] RAX: ffffffffffffffda RBX: 00007f4ebae55fa0 RCX: 00007f4ebac3d169
[  264.499583][T17300] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004
[  264.499595][T17300] RBP: 00007f4eb92a7090 R08: 0000000000000000 R09: 0000000000000020
[  264.499606][T17300] R10: 0000000000007a00 R11: 0000000000000246 R12: 0000000000000002
[  264.499727][T17300] R13: 0000000000000000 R14: 00007f4ebae55fa0 R15: 00007ffff0625448
[  264.499761][T17300]  </TASK>
[  264.799299][   T29] kauditd_printk_skb: 301 callbacks suppressed
[  264.799324][   T29] audit: type=1326 audit(1744094442.006:14669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.3.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb3709bad0 code=0x7ffc0000
[  264.829322][   T29] audit: type=1326 audit(1744094442.006:14670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.3.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffb3709cd6b code=0x7ffc0000
[  264.852841][   T29] audit: type=1326 audit(1744094442.006:14671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.3.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffb3709bdca code=0x7ffc0000
[  264.876317][   T29] audit: type=1326 audit(1744094442.006:14672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.3.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3709d169 code=0x7ffc0000
[  264.900053][   T29] audit: type=1326 audit(1744094442.006:14673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.3.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3709d169 code=0x7ffc0000
[  264.906124][T17296] loop8: detected capacity change from 0 to 512
[  264.931053][T15395] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  264.942561][   T29] audit: type=1326 audit(1744094442.006:14674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17303 comm="syz.9.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920de8d169 code=0x7ffc0000
[  264.966315][   T29] audit: type=1326 audit(1744094442.006:14675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17303 comm="syz.9.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f920de8d169 code=0x7ffc0000
[  264.990070][   T29] audit: type=1326 audit(1744094442.006:14676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17303 comm="syz.9.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920de8d169 code=0x7ffc0000
[  265.013958][   T29] audit: type=1326 audit(1744094442.006:14677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17303 comm="syz.9.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f920de8d169 code=0x7ffc0000
[  265.037749][   T29] audit: type=1326 audit(1744094442.006:14678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17303 comm="syz.9.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920de8d169 code=0x7ffc0000
[  265.066808][T17296] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  265.102462][T17296] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.118165][T17296] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  265.154616][T17296] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4774: bg 0: block 304: padding at end of block bitmap is not set
[  265.169249][T17296] EXT4-fs (loop8): Remounting filesystem read-only
[  265.272847][T11917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.273728][T17333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4787'.
[  265.326100][T17329] loop3: detected capacity change from 0 to 8192
[  265.336183][T17329] syz.3.4783: attempt to access beyond end of device
[  265.336183][T17329] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  265.350778][T17329] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[  265.358768][T17329] FAT-fs (loop3): Filesystem has been set read-only
[  265.369180][T17329] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[  265.377552][T17329] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[  265.513833][T17355] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.604193][T17355] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.643639][T17355] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.714244][T17355] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.768516][T17355] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.779760][T17355] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.792271][T17355] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.804014][T17355] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.847353][T17360] FAULT_INJECTION: forcing a failure.
[  265.847353][T17360] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  265.860616][T17360] CPU: 1 UID: 0 PID: 17360 Comm: syz.8.4798 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  265.860696][T17360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  265.860711][T17360] Call Trace:
[  265.860719][T17360]  <TASK>
[  265.860728][T17360]  dump_stack_lvl+0xf6/0x150
[  265.860756][T17360]  dump_stack+0x15/0x1a
[  265.860772][T17360]  should_fail_ex+0x261/0x270
[  265.860885][T17360]  should_fail+0xb/0x10
[  265.860913][T17360]  should_fail_usercopy+0x1a/0x20
[  265.860941][T17360]  _copy_from_iter+0xd8/0xd10
[  265.860971][T17360]  ? kmalloc_reserve+0x16e/0x190
[  265.861028][T17360]  ? __build_skb_around+0x199/0x1f0
[  265.861057][T17360]  ? __alloc_skb+0x227/0x320
[  265.861082][T17360]  ? __virt_addr_valid+0x1ed/0x250
[  265.861105][T17360]  ? __check_object_size+0x367/0x510
[  265.861192][T17360]  netlink_sendmsg+0x492/0x720
[  265.861235][T17360]  ? __pfx_netlink_sendmsg+0x10/0x10
[  265.861265][T17360]  __sock_sendmsg+0x140/0x180
[  265.861307][T17360]  ____sys_sendmsg+0x350/0x4e0
[  265.861340][T17360]  __sys_sendmsg+0x1a0/0x240
[  265.861419][T17360]  __x64_sys_sendmsg+0x46/0x50
[  265.861452][T17360]  x64_sys_call+0x26f3/0x2e10
[  265.861480][T17360]  do_syscall_64+0xc9/0x1c0
[  265.861554][T17360]  ? clear_bhb_loop+0x25/0x80
[  265.861579][T17360]  ? clear_bhb_loop+0x25/0x80
[  265.861606][T17360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.861631][T17360] RIP: 0033:0x7fe162e4d169
[  265.861649][T17360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  265.861677][T17360] RSP: 002b:00007fe1614b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  265.861695][T17360] RAX: ffffffffffffffda RBX: 00007fe163065fa0 RCX: 00007fe162e4d169
[  265.861707][T17360] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003
[  265.861719][T17360] RBP: 00007fe1614b7090 R08: 0000000000000000 R09: 0000000000000000
[  265.861731][T17360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  265.861746][T17360] R13: 0000000000000000 R14: 00007fe163065fa0 R15: 00007ffed53a1118
[  265.861767][T17360]  </TASK>
[  266.107458][T17362] loop4: detected capacity change from 0 to 512
[  266.135181][T17362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.148817][T17362] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  266.211643][T17372] netlink: 55631 bytes leftover after parsing attributes in process `syz.8.4803'.
[  266.236048][T17379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4807'.
[  266.245209][T17379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4807'.
[  266.259928][T17379] loop3: detected capacity change from 0 to 128
[  266.278133][T15395] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.348252][T17398] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4811'.
[  266.374608][T17379] Falling back ldisc for ttyS3.
[  266.456417][T17415] netlink: 'syz.1.4819': attribute type 4 has an invalid length.
[  266.470919][T17415] netlink: 'syz.1.4819': attribute type 4 has an invalid length.
[  266.495520][T17417] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4820'.
[  266.495752][T17415] netlink: 'syz.1.4819': attribute type 3 has an invalid length.
[  266.548707][T17417] sctp: [Deprecated]: syz.9.4820 (pid 17417) Use of struct sctp_assoc_value in delayed_ack socket option.
[  266.548707][T17417] Use struct sctp_sack_info instead
[  266.635118][T17433] FAULT_INJECTION: forcing a failure.
[  266.635118][T17433] name failslab, interval 1, probability 0, space 0, times 0
[  266.654849][T17433] CPU: 1 UID: 0 PID: 17433 Comm: syz.1.4825 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  266.654889][T17433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  266.654905][T17433] Call Trace:
[  266.654913][T17433]  <TASK>
[  266.654921][T17433]  dump_stack_lvl+0xf6/0x150
[  266.654950][T17433]  dump_stack+0x15/0x1a
[  266.655048][T17433]  should_fail_ex+0x261/0x270
[  266.655079][T17433]  should_failslab+0x8f/0xb0
[  266.655129][T17433]  __kmalloc_cache_noprof+0x55/0x320
[  266.655158][T17433]  ? tipc_group_create+0x63/0x2b0
[  266.655181][T17433]  tipc_group_create+0x63/0x2b0
[  266.655221][T17433]  tipc_sk_join+0x13f/0x2f0
[  266.655263][T17433]  tipc_setsockopt+0x641/0x6c0
[  266.655308][T17433]  ? __pfx_tipc_setsockopt+0x10/0x10
[  266.655367][T17433]  __sys_setsockopt+0x187/0x200
[  266.655401][T17433]  __x64_sys_setsockopt+0x66/0x80
[  266.655433][T17433]  x64_sys_call+0x2a09/0x2e10
[  266.655459][T17433]  do_syscall_64+0xc9/0x1c0
[  266.655538][T17433]  ? clear_bhb_loop+0x25/0x80
[  266.655563][T17433]  ? clear_bhb_loop+0x25/0x80
[  266.655590][T17433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.655619][T17433] RIP: 0033:0x7f5f86c6d169
[  266.655637][T17433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  266.655660][T17433] RSP: 002b:00007f5f852d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  266.655683][T17433] RAX: ffffffffffffffda RBX: 00007f5f86e85fa0 RCX: 00007f5f86c6d169
[  266.655699][T17433] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005
[  266.655712][T17433] RBP: 00007f5f852d7090 R08: 0000000000000010 R09: 0000000000000000
[  266.655791][T17433] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  266.655821][T17433] R13: 0000000000000000 R14: 00007f5f86e85fa0 R15: 00007ffcb6041f38
[  266.655844][T17433]  </TASK>
[  266.871537][T17434] xt_hashlimit: max too large, truncated to 1048576
[  266.889502][T17434] Cannot find set identified by id 0 to match
[  266.924155][T17443] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125
[  266.934390][T10007] kernel write not supported for file /726/attr/exec (pid: 10007 comm: kworker/0:7)
[  267.026076][T17456] __nla_validate_parse: 8 callbacks suppressed
[  267.026096][T17456] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4833'.
[  267.044277][T17456] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4833'.
[  267.066210][T17456] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4833'.
[  267.078175][T17456] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4833'.
[  267.112909][T17456] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4833'.
[  267.116714][T17460] IPVS: Unknown mcast interface: pimreg
[  267.124972][T17456] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4833'.
[  267.146783][T17466] xt_hashlimit: max too large, truncated to 1048576
[  267.154418][T17466] Cannot find set identified by id 0 to match
[  267.221548][ T3331] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  267.284639][T17477] loop9: detected capacity change from 0 to 1024
[  267.291531][T17477] EXT4-fs: Ignoring removed orlov option
[  267.297526][T17477] EXT4-fs: Ignoring removed nomblk_io_submit option
[  267.326284][T17476] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  267.354480][T17493] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4848'.
[  267.364132][T17493] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4848'.
[  267.373533][T17477] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  267.395405][T17477] netlink: '+}[@': attribute type 13 has an invalid length.
[  267.402785][T17477] netlink: 84 bytes leftover after parsing attributes in process `+}[@'.
[  267.495646][T13483] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.510093][T17510] FAULT_INJECTION: forcing a failure.
[  267.510093][T17510] name failslab, interval 1, probability 0, space 0, times 0
[  267.522910][T17510] CPU: 1 UID: 0 PID: 17510 Comm: syz.1.4857 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  267.523035][T17510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  267.523051][T17510] Call Trace:
[  267.523059][T17510]  <TASK>
[  267.523066][T17510]  dump_stack_lvl+0xf6/0x150
[  267.523091][T17510]  dump_stack+0x15/0x1a
[  267.523109][T17510]  should_fail_ex+0x261/0x270
[  267.523142][T17510]  should_failslab+0x8f/0xb0
[  267.523227][T17510]  __kmalloc_node_track_caller_noprof+0xaa/0x410
[  267.523255][T17510]  ? sidtab_sid2str_get+0xb8/0x140
[  267.523284][T17510]  ? vsnprintf+0x84d/0x8a0
[  267.523310][T17510]  kmemdup_noprof+0x2b/0x70
[  267.523345][T17510]  sidtab_sid2str_get+0xb8/0x140
[  267.523368][T17510]  security_sid_to_context_core+0x1eb/0x2f0
[  267.523392][T17510]  security_sid_to_context+0x27/0x30
[  267.523477][T17510]  selinux_lsmprop_to_secctx+0x6c/0xf0
[  267.523505][T17510]  security_lsmprop_to_secctx+0x40/0x80
[  267.523535][T17510]  audit_log_task_context+0x7a/0x180
[  267.523562][T17510]  audit_log_task+0xfb/0x250
[  267.523587][T17510]  audit_seccomp+0x68/0x130
[  267.523615][T17510]  __seccomp_filter+0x694/0x10e0
[  267.523652][T17510]  ? kernelmode_fixup_or_oops+0x58/0xb0
[  267.523724][T17510]  __secure_computing+0x7e/0x160
[  267.523759][T17510]  syscall_trace_enter+0xcf/0x1f0
[  267.523838][T17510]  do_syscall_64+0xaa/0x1c0
[  267.523872][T17510]  ? clear_bhb_loop+0x25/0x80
[  267.523899][T17510]  ? clear_bhb_loop+0x25/0x80
[  267.523921][T17510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.523947][T17510] RIP: 0033:0x7f5f86c6bb7c
[  267.523962][T17510] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  267.523980][T17510] RSP: 002b:00007f5f852d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  267.524003][T17510] RAX: ffffffffffffffda RBX: 00007f5f86e85fa0 RCX: 00007f5f86c6bb7c
[  267.524017][T17510] RDX: 000000000000000f RSI: 00007f5f852d70a0 RDI: 0000000000000006
[  267.524058][T17510] RBP: 00007f5f852d7090 R08: 0000000000000000 R09: 0000000000000000
[  267.524070][T17510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  267.524081][T17510] R13: 0000000000000000 R14: 00007f5f86e85fa0 R15: 00007ffcb6041f38
[  267.524100][T17510]  </TASK>
[  267.800758][T17520] xt_hashlimit: size too large, truncated to 1048576
[  267.843277][T17528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4865'.
[  267.946639][T17536] loop9: detected capacity change from 0 to 512
[  267.986031][T17536] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.4866: Failed to acquire dquot type 1
[  268.002927][T17536] EXT4-fs (loop9): 1 truncate cleaned up
[  268.011180][T17536] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.013335][T17543] program syz.1.4868 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  268.023915][T17536] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.044714][T17536] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.108789][T17520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.129236][T17520] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.280447][T17572] xt_hashlimit: max too large, truncated to 1048576
[  268.288072][T17572] Cannot find set identified by id 0 to match
[  268.384481][T17576] loop9: detected capacity change from 0 to 8192
[  268.394887][T17576] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  268.702338][T17609] FAULT_INJECTION: forcing a failure.
[  268.702338][T17609] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  268.715765][T17609] CPU: 1 UID: 0 PID: 17609 Comm: syz.3.4894 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  268.715852][T17609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  268.715868][T17609] Call Trace:
[  268.715875][T17609]  <TASK>
[  268.715884][T17609]  dump_stack_lvl+0xf6/0x150
[  268.715913][T17609]  dump_stack+0x15/0x1a
[  268.715934][T17609]  should_fail_ex+0x261/0x270
[  268.715994][T17609]  should_fail_alloc_page+0xfd/0x110
[  268.716101][T17609]  __alloc_frozen_pages_noprof+0x11d/0x360
[  268.716140][T17609]  alloc_pages_mpol+0xb6/0x260
[  268.716252][T17609]  vma_alloc_folio_noprof+0x19c/0x300
[  268.716285][T17609]  do_wp_page+0x64f/0x24e0
[  268.716358][T17609]  ? __rcu_read_lock+0x36/0x50
[  268.716396][T17609]  handle_mm_fault+0xc6c/0x2e80
[  268.716436][T17609]  ? mas_walk+0x204/0x320
[  268.716545][T17609]  ? __rcu_read_unlock+0x4e/0x70
[  268.716644][T17609]  exc_page_fault+0x3b9/0x6a0
[  268.716734][T17609]  asm_exc_page_fault+0x26/0x30
[  268.716758][T17609] RIP: 0033:0x7ffb36f5fc90
[  268.716776][T17609] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41
[  268.716797][T17609] RSP: 002b:00007ffb357064a0 EFLAGS: 00010202
[  268.716811][T17609] RAX: 0000000000006005 RBX: 00007ffb35706540 RCX: 000000000000000c
[  268.716824][T17609] RDX: 0000000000003fff RSI: 0000000000001000 RDI: 00007ffb357065e0
[  268.716907][T17609] RBP: 000000000000000d R08: 00007ffb2d2e7000 R09: 0000000000000010
[  268.716922][T17609] R10: 0000200000001402 R11: 00000000000004df R12: 0000000000000c01
[  268.716937][T17609] R13: 00007ffb371393e0 R14: 0000000000000017 R15: 00007ffb357065e0
[  268.716960][T17609]  </TASK>
[  268.716987][T17609] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  268.721369][T17614] xt_hashlimit: max too large, truncated to 1048576
[  268.738154][T17609] loop3: detected capacity change from 0 to 512
[  268.760136][T17614] Cannot find set identified by id 0 to match
[  268.769175][T17609] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  268.943045][T17620] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  268.945205][T17609] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.4894: Failed to acquire dquot type 0
[  268.979742][T17622] loop8: detected capacity change from 0 to 512
[  268.986470][T17622] EXT4-fs: Ignoring removed oldalloc option
[  268.988139][T17609] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  269.007574][T17609] EXT4-fs (loop3): 1 truncate cleaned up
[  269.010199][T17622] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  269.013688][T17609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  269.048227][T17622] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002]
[  269.048699][T11733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.056610][T17622] System zones: 1-12
[  269.066108][   T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  269.079951][T17622] EXT4-fs (loop8): 1 truncate cleaned up
[  269.086317][T17622] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  269.103340][T17625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  269.107929][T17622] FAULT_INJECTION: forcing a failure.
[  269.107929][T17622] name failslab, interval 1, probability 0, space 0, times 0
[  269.108003][T17622] CPU: 0 UID: 0 PID: 17622 Comm: syz.8.4899 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  269.108068][T17622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  269.108082][T17622] Call Trace:
[  269.108089][T17622]  <TASK>
[  269.108097][T17622]  dump_stack_lvl+0xf6/0x150
[  269.108124][T17622]  dump_stack+0x15/0x1a
[  269.108144][T17622]  should_fail_ex+0x261/0x270
[  269.108202][T17622]  should_failslab+0x8f/0xb0
[  269.108232][T17622]  kmem_cache_alloc_noprof+0x59/0x340
[  269.108257][T17622]  ? ext4_mb_new_blocks+0x2f7/0x2020
[  269.108279][T17622]  ? __mark_inode_dirty+0x1b7/0x7e0
[  269.108306][T17622]  ext4_mb_new_blocks+0x2f7/0x2020
[  269.108377][T17622]  ? should_fail_ex+0xd7/0x270
[  269.108425][T17622]  ? ext4_get_branch+0x323/0x3a0
[  269.108459][T17622]  ? ext4_ind_map_blocks+0x822/0x14d0
[  269.108556][T17622]  ext4_ind_map_blocks+0xb51/0x14d0
[  269.108608][T17622]  ext4_map_blocks+0x5a0/0xdf0
[  269.108644][T17622]  ? workingset_update_node+0x108/0x140
[  269.108676][T17622]  _ext4_get_block+0x10d/0x380
[  269.108696][T17622]  ext4_get_block+0x39/0x50
[  269.108715][T17622]  ext4_block_write_begin+0x350/0x9d0
[  269.108746][T17622]  ? __pfx_ext4_get_block+0x10/0x10
[  269.108796][T17622]  ? folio_mapping+0xb8/0x120
[  269.108847][T17622]  ext4_write_begin+0x468/0xc30
[  269.108941][T17622]  ? balance_dirty_pages_ratelimited_flags+0x546/0x840
[  269.109051][T17622]  generic_perform_write+0x189/0x4b0
[  269.109083][T17622]  ext4_buffered_write_iter+0x1ed/0x3c0
[  269.109110][T17622]  ext4_file_write_iter+0x3b2/0xf80
[  269.109143][T17622]  ? kstrtouint_from_user+0xbf/0x100
[  269.109228][T17622]  ? avc_policy_seqno+0x15/0x20
[  269.109258][T17622]  ? selinux_file_permission+0x22d/0x360
[  269.109290][T17622]  vfs_write+0x79b/0x950
[  269.109323][T17622]  ? __pfx_ext4_file_write_iter+0x10/0x10
[  269.109355][T17622]  ksys_write+0xeb/0x1b0
[  269.109465][T17622]  __x64_sys_write+0x42/0x50
[  269.109515][T17622]  x64_sys_call+0x2a45/0x2e10
[  269.109541][T17622]  do_syscall_64+0xc9/0x1c0
[  269.109576][T17622]  ? clear_bhb_loop+0x25/0x80
[  269.109620][T17622]  ? clear_bhb_loop+0x25/0x80
[  269.109656][T17622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.109681][T17622] RIP: 0033:0x7fe162e4d169
[  269.109698][T17622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  269.109719][T17622] RSP: 002b:00007fe1614b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  269.109740][T17622] RAX: ffffffffffffffda RBX: 00007fe163065fa0 RCX: 00007fe162e4d169
[  269.109755][T17622] RDX: 000000000208e24b RSI: 0000200000000100 RDI: 0000000000000005
[  269.109787][T17622] RBP: 00007fe1614b7090 R08: 0000000000000000 R09: 0000000000000000
[  269.109801][T17622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  269.109894][T17622] R13: 0000000000000000 R14: 00007fe163065fa0 R15: 00007ffed53a1118
[  269.109914][T17622]  </TASK>
[  269.147615][    C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b
[  269.167529][T11917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.480845][T17636] serio: Serial port ptm0
[  269.576789][T17654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  269.606964][T17656] 9pnet_fd: Insufficient options for proto=fd
[  269.769069][T17671] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  270.192403][T17676] SELinux:  policydb string SE q��<U does not match my string SE Linux
[  270.200863][T17676] SELinux: failed to load policy
[  270.421535][    C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c
[  270.484603][T17657] syz.4.4915 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  270.485522][T17678] netlink: 'syz.3.4921': attribute type 4 has an invalid length.
[  270.495697][T17657] CPU: 1 UID: 0 PID: 17657 Comm: syz.4.4915 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  270.495764][T17657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  270.495781][T17657] Call Trace:
[  270.495788][T17657]  <TASK>
[  270.495796][T17657]  dump_stack_lvl+0xf6/0x150
[  270.495908][T17657]  dump_stack+0x15/0x1a
[  270.495931][T17657]  dump_header+0x83/0x2d0
[  270.495970][T17657]  oom_kill_process+0x341/0x4c0
[  270.496010][T17657]  out_of_memory+0x9d1/0xc20
[  270.496065][T17657]  mem_cgroup_out_of_memory+0x13f/0x190
[  270.496166][T17657]  try_charge_memcg+0x59f/0x820
[  270.496206][T17657]  charge_memcg+0x50/0xc0
[  270.496265][T17657]  mem_cgroup_swapin_charge_folio+0xd0/0x150
[  270.496302][T17657]  __read_swap_cache_async+0x207/0x3b0
[  270.496342][T17657]  swap_cluster_readahead+0x27f/0x400
[  270.496383][T17657]  swapin_readahead+0xe6/0x6f0
[  270.496487][T17657]  ? swap_cache_get_folio+0x77/0x210
[  270.496522][T17657]  do_swap_page+0x31c/0x2510
[  270.496622][T17657]  ? __rcu_read_lock+0x36/0x50
[  270.496656][T17657]  ? __pfx_default_wake_function+0x10/0x10
[  270.496698][T17657]  handle_mm_fault+0x8ed/0x2e80
[  270.496822][T17657]  ? mas_walk+0x204/0x320
[  270.496857][T17657]  ? __rcu_read_unlock+0x4e/0x70
[  270.496902][T17657]  exc_page_fault+0x3b9/0x6a0
[  270.496936][T17657]  asm_exc_page_fault+0x26/0x30
[  270.496970][T17657] RIP: 0033:0x7f4ebab0d740
[  270.496990][T17657] Code: 31 c0 e8 63 07 ff ff 48 8d 35 fd 0d 1b 00 48 8b 94 24 c8 03 00 00 48 8d 3d f3 1e 1b 00 31 c0 e8 46 07 ff ff 66 0f 1f 44 00 00 <0f> b6 05 9d 7f e7 00 84 c0 74 0b 0f b6 05 81 7f e7 00 84 c0 74 0a
[  270.497013][T17657] RSP: 002b:00007ffff06255a8 EFLAGS: 00010202
[  270.497033][T17657] RAX: 000000000004206d RBX: 00007f4ebae55fa0 RCX: 0000000000041eb0
[  270.497049][T17657] RDX: 00000000000001bd RSI: 00007ffff0625590 RDI: 0000000000000001
[  270.497065][T17657] RBP: 00007f4ebae57ba0 R08: 00007f4ebae55fa0 R09: 7fffffffffffffff
[  270.497081][T17657] R10: 00007f4ebb994038 R11: 0000000000000010 R12: 000000000004206b
[  270.497097][T17657] R13: 00007f4ebae56080 R14: ffffffffffffffff R15: 00007ffff06256c0
[  270.497121][T17657]  </TASK>
[  270.497191][T17657] memory: usage 307200kB, limit 307200kB, failcnt 109
[  270.656013][T17688] loop3: detected capacity change from 0 to 1024
[  270.658010][T17657] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0
[  270.714227][T17689] loop9: detected capacity change from 0 to 8192
[  270.720135][T17657] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[  270.720153][T17657] Memory cgroup stats for /syz4:
[  270.720372][T17657] cache 0
[  270.735625][T17689] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  270.741772][T17657] rss 4096
[  270.741788][T17657] shmem 0
[  270.741797][T17657] mapped_file 0
[  270.741805][T17657] dirty 0
[  270.741813][T17657] writeback 8192
[  270.741821][T17657] workingset_refault_anon 1592
[  270.741830][T17657] workingset_refault_file 0
[  270.741837][T17657] swap 192512
[  270.741845][T17657] swapcached 8192
[  270.741853][T17657] pgpgin 218073
[  270.741861][T17657] pgpgout 218070
[  270.741870][T17657] pgfault 193433
[  270.789725][T17688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.792361][T17657] pgmajfault 225
[  270.792373][T17657] inactive_anon 8192
[  270.792382][T17657] active_anon 0
[  270.792391][T17657] inactive_file 4096
[  270.792400][T17657] active_file 0
[  270.792409][T17657] unevictable 0
[  270.797088][T17688] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  270.799377][T17657] hierarchical_memory_limit 314572800
[  270.799391][T17657] hierarchical_memsw_limit 9223372036854771712
[  270.799402][T17657] total_cache 0
[  270.799411][T17657] total_rss 4096
[  270.813660][   T29] kauditd_printk_skb: 437 callbacks suppressed
[  270.813723][   T29] audit: type=1400 audit(1744094448.026:15109): avc:  denied  { ioctl } for  pid=17687 comm="syz.3.4926" path="/445/file1/file1" dev="loop3" ino=15 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  270.814947][T17657] total_shmem 0
[  270.819209][T17688] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4926: bg 0: block 393: padding at end of block bitmap is not set
[  270.822372][T17657] total_mapped_file 0
[  270.822383][T17657] total_dirty 0
[  270.822392][T17657] total_writeback 8192
[  270.822401][T17657] total_workingset_refault_anon 1592
[  270.822411][T17657] total_workingset_refault_file 0
[  270.822421][T17657] total_swap 192512
[  270.822430][T17657] total_swapcached 8192
[  270.822439][T17657] total_pgpgin 218073
[  270.829037][T17688] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117
[  270.829761][T17657] total_pgpgout 218070
[  270.829778][T17657] total_pgfault 193433
[  270.833275][T17688] EXT4-fs (loop3): This should not happen!! Data will be lost
[  270.833275][T17688] 
[  270.836714][T17657] total_pgmajfault 225
[  270.836726][T17657] total_inactive_anon 8192
[  270.836736][T17657] total_active_anon 0
[  270.991207][T17657] total_inactive_file 4096
[  270.995641][T17657] total_active_file 0
[  270.999627][T17657] total_unevictable 0
[  271.003761][T17657] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4915,pid=17657,uid=0
[  271.018463][T17657] Memory cgroup out of memory: Killed process 17657 (syz.4.4915) total-vm:93720kB, anon-rss:916kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000
[  271.061279][    C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c
[  271.099351][T11733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.120933][   T29] audit: type=1400 audit(1744094448.316:15110): avc:  denied  { wake_alarm } for  pid=17694 comm="syz.1.4928" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  271.144779][T17696] bridge_slave_0: left allmulticast mode
[  271.150460][T17696] bridge_slave_0: left promiscuous mode
[  271.156324][T17696] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.187627][   T29] audit: type=1326 audit(1744094448.396:15111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17699 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3709d169 code=0x7ffc0000
[  271.211526][   T29] audit: type=1326 audit(1744094448.396:15112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17699 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3709d169 code=0x7ffc0000
[  271.244449][   T29] audit: type=1326 audit(1744094448.396:15113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17699 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb3709d169 code=0x7ffc0000
[  271.268211][   T29] audit: type=1326 audit(1744094448.396:15114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17699 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3709d169 code=0x7ffc0000
[  271.291837][   T29] audit: type=1326 audit(1744094448.396:15115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17699 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3709d169 code=0x7ffc0000
[  271.315489][   T29] audit: type=1326 audit(1744094448.396:15116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17699 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb3709d169 code=0x7ffc0000
[  271.339174][   T29] audit: type=1326 audit(1744094448.396:15117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17699 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3709d169 code=0x7ffc0000
[  271.362855][   T29] audit: type=1326 audit(1744094448.396:15118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17699 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3709d169 code=0x7ffc0000
[  271.501983][T17712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  271.585135][T17724] FAULT_INJECTION: forcing a failure.
[  271.585135][T17724] name failslab, interval 1, probability 0, space 0, times 0
[  271.597897][T17724] CPU: 1 UID: 0 PID: 17724 Comm: syz.9.4938 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  271.597930][T17724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  271.597995][T17724] Call Trace:
[  271.598002][T17724]  <TASK>
[  271.598009][T17724]  dump_stack_lvl+0xf6/0x150
[  271.598033][T17724]  dump_stack+0x15/0x1a
[  271.598098][T17724]  should_fail_ex+0x261/0x270
[  271.598192][T17724]  should_failslab+0x8f/0xb0
[  271.598229][T17724]  __kmalloc_cache_noprof+0x55/0x320
[  271.598252][T17724]  ? bpf_prog_alloc_no_stats+0xc3/0x390
[  271.598350][T17724]  ? bpf_prog_alloc_no_stats+0x49/0x390
[  271.598373][T17724]  bpf_prog_alloc_no_stats+0xc3/0x390
[  271.598527][T17724]  bpf_prog_alloc+0x3a/0x150
[  271.598552][T17724]  bpf_prog_load+0x532/0x10e0
[  271.598593][T17724]  __sys_bpf+0x533/0x800
[  271.598628][T17724]  __x64_sys_bpf+0x43/0x50
[  271.598719][T17724]  x64_sys_call+0x23da/0x2e10
[  271.598743][T17724]  do_syscall_64+0xc9/0x1c0
[  271.598772][T17724]  ? clear_bhb_loop+0x25/0x80
[  271.598793][T17724]  ? clear_bhb_loop+0x25/0x80
[  271.598853][T17724]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.598877][T17724] RIP: 0033:0x7f920de8d169
[  271.598892][T17724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.598909][T17724] RSP: 002b:00007f920c4ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  271.598994][T17724] RAX: ffffffffffffffda RBX: 00007f920e0a5fa0 RCX: 00007f920de8d169
[  271.599009][T17724] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  271.599023][T17724] RBP: 00007f920c4ef090 R08: 0000000000000000 R09: 0000000000000000
[  271.599037][T17724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  271.599130][T17724] R13: 0000000000000000 R14: 00007f920e0a5fa0 R15: 00007fff8a355cb8
[  271.599153][T17724]  </TASK>
[  271.610621][T17722] loop4: detected capacity change from 0 to 8192
[  271.794857][T17722] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  271.953696][T17740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  272.035242][T17751] xt_hashlimit: size too large, truncated to 1048576
[  272.084352][T17761] FAULT_INJECTION: forcing a failure.
[  272.084352][T17761] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  272.097765][T17761] CPU: 0 UID: 0 PID: 17761 Comm: syz.9.4955 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  272.097794][T17761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  272.097806][T17761] Call Trace:
[  272.097812][T17761]  <TASK>
[  272.097821][T17761]  dump_stack_lvl+0xf6/0x150
[  272.097847][T17761]  dump_stack+0x15/0x1a
[  272.097888][T17761]  should_fail_ex+0x261/0x270
[  272.097918][T17761]  should_fail_alloc_page+0xfd/0x110
[  272.098044][T17761]  __alloc_frozen_pages_noprof+0x11d/0x360
[  272.098082][T17761]  alloc_pages_mpol+0xb6/0x260
[  272.098112][T17761]  alloc_pages_noprof+0xe8/0x130
[  272.098175][T17761]  get_zeroed_page_noprof+0x17/0x40
[  272.098209][T17761]  machine_kexec_prepare+0x46e/0x7b0
[  272.098341][T17761]  ? __pfx_alloc_pgt_page+0x10/0x10
[  272.098378][T17761]  do_kexec_load+0x3d7/0x510
[  272.098409][T17761]  __se_sys_kexec_load+0x12b/0x160
[  272.098467][T17761]  __x64_sys_kexec_load+0x55/0x70
[  272.098496][T17761]  x64_sys_call+0xded/0x2e10
[  272.098546][T17761]  do_syscall_64+0xc9/0x1c0
[  272.098580][T17761]  ? clear_bhb_loop+0x25/0x80
[  272.098602][T17761]  ? clear_bhb_loop+0x25/0x80
[  272.098623][T17761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.098655][T17761] RIP: 0033:0x7f920de8d169
[  272.098728][T17761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.098803][T17761] RSP: 002b:00007f920c4ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6
[  272.098823][T17761] RAX: ffffffffffffffda RBX: 00007f920e0a5fa0 RCX: 00007f920de8d169
[  272.098835][T17761] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 0000000000000000
[  272.098848][T17761] RBP: 00007f920c4ef090 R08: 0000000000000000 R09: 0000000000000000
[  272.098862][T17761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  272.098877][T17761] R13: 0000000000000000 R14: 00007f920e0a5fa0 R15: 00007fff8a355cb8
[  272.098897][T17761]  </TASK>
[  272.341895][T17436] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  272.463557][T17771] __nla_validate_parse: 13 callbacks suppressed
[  272.463573][T17771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4958'.
[  272.479015][T17771] FAULT_INJECTION: forcing a failure.
[  272.479015][T17771] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  272.492133][T17771] CPU: 0 UID: 0 PID: 17771 Comm: syz.3.4958 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  272.492164][T17771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  272.492189][T17771] Call Trace:
[  272.492197][T17771]  <TASK>
[  272.492205][T17771]  dump_stack_lvl+0xf6/0x150
[  272.492229][T17771]  dump_stack+0x15/0x1a
[  272.492248][T17771]  should_fail_ex+0x261/0x270
[  272.492274][T17768] loop9: detected capacity change from 0 to 512
[  272.492281][T17771]  should_fail+0xb/0x10
[  272.492311][T17771]  should_fail_usercopy+0x1a/0x20
[  272.492457][T17771]  _copy_to_user+0x20/0xa0
[  272.492498][T17771]  simple_read_from_buffer+0xb2/0x130
[  272.492539][T17771]  proc_fail_nth_read+0x103/0x140
[  272.492654][T17771]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  272.492698][T17771]  vfs_read+0x1b2/0x710
[  272.492779][T17771]  ? __rcu_read_unlock+0x4e/0x70
[  272.492864][T17771]  ? __fget_files+0x186/0x1c0
[  272.492890][T17771]  ksys_read+0xeb/0x1b0
[  272.492925][T17771]  __x64_sys_read+0x42/0x50
[  272.493021][T17771]  x64_sys_call+0x2a3b/0x2e10
[  272.493049][T17771]  do_syscall_64+0xc9/0x1c0
[  272.493130][T17771]  ? clear_bhb_loop+0x25/0x80
[  272.493158][T17771]  ? clear_bhb_loop+0x25/0x80
[  272.493185][T17771]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.493236][T17771] RIP: 0033:0x7ffb3709bb7c
[  272.493255][T17771] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  272.493277][T17771] RSP: 002b:00007ffb35707030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  272.493322][T17771] RAX: ffffffffffffffda RBX: 00007ffb372b5fa0 RCX: 00007ffb3709bb7c
[  272.493338][T17771] RDX: 000000000000000f RSI: 00007ffb357070a0 RDI: 0000000000000007
[  272.493371][T17771] RBP: 00007ffb35707090 R08: 0000000000000000 R09: 0000000000000000
[  272.493443][T17771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  272.493459][T17771] R13: 0000000000000000 R14: 00007ffb372b5fa0 R15: 00007ffe8739b888
[  272.493483][T17771]  </TASK>
[  272.517656][T17773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  272.527146][T17768] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  272.565535][T17777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4961'.
[  272.574877][T17751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.592092][T17768] EXT4-fs (loop9): invalid journal inode
[  272.595562][T17751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.601760][T17768] EXT4-fs (loop9): can't get journal size
[  272.673106][T17751] netlink: 596 bytes leftover after parsing attributes in process `syz.4.4950'.
[  272.702703][T17768] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[  272.735549][T17782] loop3: detected capacity change from 0 to 512
[  272.746436][T17768] System zones: 1-12, 13-13
[  272.789296][T17782] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  272.803926][T17768] EXT4-fs (loop9): 1 truncate cleaned up
[  272.810113][T17768] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.847980][T17782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.860637][T17782] ext4 filesystem being mounted at /451/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  272.906333][T11733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.293495][T17825] loop8: detected capacity change from 0 to 8192
[  273.314350][T17825] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  273.338036][T17824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4981'.
[  273.367786][T17825] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4980'.
[  273.457535][T17843] loop4: detected capacity change from 0 to 2048
[  273.493532][T17843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.555804][T15395] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.666570][T13483] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.669362][T17867] xt_hashlimit: max too large, truncated to 1048576
[  273.735765][T17869] loop9: detected capacity change from 0 to 512
[  273.756346][T17872] netlink: 'syz.8.5000': attribute type 3 has an invalid length.
[  273.818151][T17869] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.4999: Failed to acquire dquot type 1
[  273.833906][T17869] EXT4-fs (loop9): 1 truncate cleaned up
[  273.840109][T17869] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.856077][T17869] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  274.234349][T13483] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.306585][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5015'.
[  274.364552][T17913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5017'.
[  274.373857][T17914] xt_hashlimit: max too large, truncated to 1048576
[  274.435454][T17927] loop3: detected capacity change from 0 to 512
[  274.464931][T17927] EXT4-fs: Ignoring removed orlov option
[  274.484652][T17927] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a81ee098, mo2=0002]
[  274.499164][T17927] System zones: 1-12
[  274.519716][T17927] EXT4-fs error (device loop3): ext4_iget_extra_inode:4692: inode #15: comm syz.3.5021: corrupted in-inode xattr: invalid ea_ino
[  274.548875][T17927] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.5021: couldn't read orphan inode 15 (err -117)
[  274.561492][T17927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.585844][T17927] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5021: invalid indirect mapped block 234881024 (level 0)
[  274.637934][T17945] bond1: entered promiscuous mode
[  274.643055][T17945] bond1: entered allmulticast mode
[  274.648407][T17945] 8021q: adding VLAN 0 to HW filter on device bond1
[  274.659432][T17945] bond1 (unregistering): Released all slaves
[  274.825950][T17955] loop8: detected capacity change from 0 to 512
[  274.833973][T17955] EXT4-fs (loop8): 1 truncate cleaned up
[  274.840102][T17955] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  274.853485][T17959] sch_tbf: peakrate 8 is lower than or equals to rate 13 !
[  274.904063][ T3331] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  274.945828][T17964] loop4: detected capacity change from 0 to 512
[  274.952685][T17964] EXT4-fs: Ignoring removed bh option
[  274.959024][T17964] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  274.968533][T17964] EXT4-fs (loop4): orphan cleanup on readonly fs
[  274.976207][T17964] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5035: bg 0: block 248: padding at end of block bitmap is not set
[  274.990805][T17964] EXT4-fs (loop4): Remounting filesystem read-only
[  274.997542][T17964] EXT4-fs (loop4): 1 truncate cleaned up
[  275.004669][T17964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  275.032288][T15395] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.105391][T17974] xt_hashlimit: max too large, truncated to 1048576
[  275.113741][T17974] Cannot find set identified by id 0 to match
[  275.155834][T17976] loop8: detected capacity change from 0 to 8192
[  275.163442][T17976] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  275.181042][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5039'.
[  275.242232][T17978] loop4: detected capacity change from 0 to 8192
[  275.249666][T17978] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  275.272014][T17980] FAULT_INJECTION: forcing a failure.
[  275.272014][T17980] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  275.285185][T17980] CPU: 1 UID: 0 PID: 17980 Comm: syz.8.5041 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  275.285267][T17980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  275.285281][T17980] Call Trace:
[  275.285289][T17980]  <TASK>
[  275.285298][T17980]  dump_stack_lvl+0xf6/0x150
[  275.285322][T17980]  dump_stack+0x15/0x1a
[  275.285343][T17980]  should_fail_ex+0x261/0x270
[  275.285397][T17980]  should_fail+0xb/0x10
[  275.285479][T17980]  should_fail_usercopy+0x1a/0x20
[  275.285509][T17980]  fpu__restore_sig+0x124/0xaa0
[  275.285555][T17980]  restore_sigcontext+0x1ba/0x230
[  275.285589][T17980]  __do_sys_rt_sigreturn+0x112/0x180
[  275.285779][T17980]  x64_sys_call+0x2b49/0x2e10
[  275.285806][T17980]  do_syscall_64+0xc9/0x1c0
[  275.285890][T17980]  ? clear_bhb_loop+0x25/0x80
[  275.285915][T17980]  ? clear_bhb_loop+0x25/0x80
[  275.285942][T17980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.286002][T17980] RIP: 0033:0x7fe162e4d167
[  275.286017][T17980] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  275.286035][T17980] RSP: 002b:00007fe1614b7038 EFLAGS: 00000246
[  275.286051][T17980] RAX: 0000000000000001 RBX: 00007fe163065fa0 RCX: 00007fe162e4d169
[  275.286066][T17980] RDX: 0000000000000008 RSI: 0000200000000040 RDI: 0000000000000009
[  275.286080][T17980] RBP: 00007fe1614b7090 R08: 0000000000000000 R09: 0000000000000000
[  275.286095][T17980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  275.286110][T17980] R13: 0000000000000000 R14: 00007fe163065fa0 R15: 00007ffed53a1118
[  275.286133][T17980]  </TASK>
[  275.504175][T17978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5040'.
[  275.532140][T17994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  275.648661][T18008] loop4: detected capacity change from 0 to 512
[  275.676215][T18008] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  275.692171][T18008] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5047'.
[  275.694392][T18011] xt_hashlimit: max too large, truncated to 1048576
[  275.705714][T18007] loop9: detected capacity change from 0 to 8192
[  275.716291][T18007] vfat: Unknown parameter '0000000000000000000000300000000000000000004�FBY$��p����-��t���9G3�?#ۼО���j#���'
[  275.716698][T18011] Cannot find set identified by id 0 to match
[  275.765415][T18008] hsr_slave_1 (unregistering): left promiscuous mode
[  275.825459][   T29] kauditd_printk_skb: 342 callbacks suppressed
[  275.825483][   T29] audit: type=1326 audit(1744094453.026:15457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.9.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f920de8d169 code=0x7ffc0000
[  275.865129][   T29] audit: type=1326 audit(1744094453.076:15458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.9.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920de8d169 code=0x7ffc0000
[  275.889460][   T29] audit: type=1326 audit(1744094453.076:15459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.9.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920de8d169 code=0x7ffc0000
[  275.925412][   T29] audit: type=1326 audit(1744094453.076:15460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.9.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f920de8d169 code=0x7ffc0000
[  275.949082][   T29] audit: type=1326 audit(1744094453.126:15461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.9.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f920de8d1a3 code=0x7ffc0000
[  275.952889][T18007] loop9: detected capacity change from 0 to 128
[  275.973401][   T29] audit: type=1326 audit(1744094453.136:15462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.9.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f920de8bc1f code=0x7ffc0000
[  275.987484][T18016] dummy0 speed is unknown, defaulting to 1000
[  275.997758][T18007] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  276.018192][   T29] audit: type=1326 audit(1744094453.136:15463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.9.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f920de8d1f7 code=0x7ffc0000
[  276.018267][   T29] audit: type=1326 audit(1744094453.156:15464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.9.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f920de8bad0 code=0x7ffc0000
[  276.018312][   T29] audit: type=1326 audit(1744094453.156:15465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.9.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f920de8cd6b code=0x7ffc0000
[  276.018439][   T29] audit: type=1326 audit(1744094453.196:15466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.9.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f920de8bdca code=0x7ffc0000
[  276.175030][T18027] dummy0 speed is unknown, defaulting to 1000
[  276.208841][T18007] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  276.310082][T18034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  276.360972][  T411] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  276.424901][T17436] ==================================================================
[  276.433046][T17436] BUG: KCSAN: data-race in n_tty_flush_buffer / n_tty_lookahead_flow_ctrl
[  276.441579][T17436] 
[  276.443902][T17436] write to 0xffffc90001fb7270 of 8 bytes by task 17999 on cpu 1:
[  276.451616][T17436]  n_tty_flush_buffer+0xaa/0x190
[  276.456567][T17436]  tty_ldisc_hangup+0x72/0x370
[  276.461339][T17436]  __tty_hangup+0x3b1/0x530
[  276.465841][T17436]  tty_vhangup+0x17/0x20
[  276.470089][T17436]  pty_close+0x260/0x280
[  276.474349][T17436]  tty_release+0x204/0x940
[  276.478772][T17436]  __fput+0x2ac/0x640
[  276.482757][T17436]  ____fput+0x1c/0x30
[  276.486743][T17436]  task_work_run+0x13c/0x1b0
[  276.491344][T17436]  get_signal+0xee2/0x1080
[  276.495775][T17436]  arch_do_signal_or_restart+0x9a/0x4b0
[  276.501337][T17436]  syscall_exit_to_user_mode+0x62/0x120
[  276.506892][T17436]  do_syscall_64+0xd6/0x1c0
[  276.511406][T17436]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.517309][T17436] 
[  276.519630][T17436] read-write to 0xffffc90001fb7270 of 8 bytes by task 17436 on cpu 0:
[  276.527783][T17436]  n_tty_lookahead_flow_ctrl+0x48/0x130
[  276.533347][T17436]  tty_port_default_lookahead_buf+0x8a/0xc0
[  276.539253][T17436]  flush_to_ldisc+0x322/0x410
[  276.544024][T17436]  process_scheduled_works+0x4de/0xa20
[  276.549503][T17436]  worker_thread+0x52c/0x710
[  276.554095][T17436]  kthread+0x4b7/0x540
[  276.558168][T17436]  ret_from_fork+0x4b/0x60
[  276.562588][T17436]  ret_from_fork_asm+0x1a/0x30
[  276.567357][T17436] 
[  276.569679][T17436] value changed: 0x0000000000000200 -> 0x0000000000000000
[  276.576780][T17436] 
[  276.579101][T17436] Reported by Kernel Concurrency Sanitizer on:
[  276.585249][T17436] CPU: 0 UID: 0 PID: 17436 Comm: kworker/u8:9 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  276.596274][T17436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  276.606337][T17436] Workqueue: events_unbound flush_to_ldisc
[  276.612157][T17436] ==================================================================
[  277.461666][T17436] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  280.661273][T16665] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  282.581386][T16665] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration