last executing test programs:

33.486978059s ago: executing program 2 (id=222):
r0 = inotify_init1(0x80000)
inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021)
read(r0, 0x0, 0x20)

32.680671029s ago: executing program 2 (id=227):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x0, 0x14, 0x2009, 0x2}, 0x8, 0x7, 0x200, 0x0, 0xce2, 0x0, 0x0})
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65)

32.658263001s ago: executing program 2 (id=228):
r0 = socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x400)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0xa7ba)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10)
r5 = semget(0x0, 0x5, 0x6b4)
semop(r5, &(0x7f0000000040)=[{0x4, 0xfffc, 0x1000}, {0x0, 0x7fff, 0x1000}, {0x0, 0x0, 0x1000}], 0x3)
semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000000)=[0x6, 0x101, 0x7, 0x3ff, 0xf])
sendto(r0, &(0x7f0000000080)="120000f96100e7ef007bce4f00000000ff000000a8", 0x15, 0x8000, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4)
recvmmsg(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=""/51, 0xffffffffffffffc5}, 0x8}], 0x1, 0x10002, 0x0)

32.538853863s ago: executing program 2 (id=229):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000020060fc03000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xfce)

32.422561174s ago: executing program 2 (id=233):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0)
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x1)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010"], 0x80}}, 0x4814)
syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fecff6a9250000000000000000000025fe8000000000000000000000000000aa"], 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0)
socket$key(0xf, 0x3, 0x2)
syz_open_dev$tty20(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1100, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x80}, 0x18)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

32.422041484s ago: executing program 2 (id=234):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0xcf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x110, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x26f2e217, 0x4ba}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000280), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = syz_io_uring_setup(0x601d, &(0x7f00000006c0)={0x0, 0x7758, 0x1000, 0x8007, 0x1bf}, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000680)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1})
io_uring_enter(r3, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0)

32.05821282s ago: executing program 0 (id=240):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000280)='sched_switch\x00', r0, 0x0, 0x4}, 0x18)
syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000d80)={[{@noload}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)

31.96186694s ago: executing program 0 (id=241):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001580)={r1, r2, 0x25, 0x2, @val=@netkit}, 0x1c)
syz_emit_ethernet(0xd5, &(0x7f0000000300)=ANY=[], 0x0)

31.936393702s ago: executing program 0 (id=242):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r5}, 0x18)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002a40)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x5, 0xc4e, 0x3, 0x5, 0xfffffffc, 0x0, 0x0, 0xfffffff7, 0x1000, 0x4c10, 0x5, 0x6, 0x8, 0x3, 0x1, 0x4, 0x8001, 0x5, 0x9, 0x7, 0x9, 0x1, 0x80000001, 0x49, 0x836, 0x6, 0x2, 0x4, 0x5, 0x1, 0x1ff, 0x4, 0x9, 0x3, 0x6e89, 0x7, 0x8, 0x6, 0x8, 0x3, 0x3, 0x3, 0x6, 0x5, 0x80000001, 0x4d, 0x202, 0x3, 0x7, 0x40, 0xe, 0x9, 0x9, 0x5, 0xfffffffd, 0xada8, 0x1, 0x7cf816ed, 0x20006, 0x9, 0x1, 0x7f, 0x10001, 0x3ff, 0x8, 0x5, 0x336, 0xc4, 0x5, 0x400, 0xff, 0x1000, 0xfffffff7, 0x7, 0x3, 0x4, 0x1000, 0x4, 0x4, 0xffff, 0x4, 0x9, 0x7, 0xd, 0x8, 0x6, 0x8, 0x1, 0x6, 0xfffff2f9, 0x9, 0x2, 0x2f05, 0x6, 0x800, 0x8, 0x5, 0x5, 0x2, 0x5, 0x80000000, 0x6, 0x4, 0x80000001, 0x4, 0x202e, 0x3, 0xfffffffb, 0xe5a, 0xad03, 0x5, 0x4, 0x6, 0x0, 0x6, 0xcec1, 0xffffffff, 0x6, 0x8, 0x4, 0x1, 0x8, 0x5, 0x5, 0xb8, 0xb28, 0x2, 0x5, 0x7fffffff, 0x0, 0x60, 0x9, 0x6, 0x9, 0x4, 0x9, 0x80000001, 0x9, 0x6, 0x7fff, 0x100, 0x412d, 0x98ad, 0x3, 0x7fff, 0xffffffff, 0x16e5, 0x10000, 0x8, 0x80000000, 0xd, 0x7, 0x4ca7, 0x9, 0x6, 0x1, 0x3, 0x13, 0x2, 0x9, 0x6, 0x6, 0x2, 0x5a5a605, 0xc7f, 0xb9f, 0x8, 0xa, 0x4, 0x0, 0x7fff, 0x80000000, 0x58, 0x5, 0x0, 0x9, 0x0, 0xff, 0x80000000, 0x9, 0x1, 0x7b, 0x0, 0x3, 0xffffe209, 0x7, 0x2000000, 0x9, 0x2, 0x800, 0x7, 0xffff, 0x8, 0xadcd, 0x4, 0x7, 0x2, 0x9, 0x8, 0x4, 0x7, 0x8, 0x6, 0x101, 0x600, 0x5, 0xd, 0x9, 0x1, 0x10000, 0x3cba, 0xc, 0xff, 0xab3, 0xa1f2, 0x800, 0x3, 0x1, 0x4, 0x7fffffff, 0x2, 0x0, 0x80000000, 0x3, 0x3, 0x10000, 0x6, 0x2, 0x4, 0xa2d7038, 0xd, 0x0, 0x0, 0x6, 0x0, 0x5, 0x3, 0x40, 0x8, 0xae4d, 0x3, 0x8, 0xe3, 0x7cc9, 0x8001, 0x800, 0xc, 0x2, 0x0, 0x0, 0x8, 0xff, 0x0, 0xe891, 0xe9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x9, 0x5, 0x9, 0xffffffdb, 0x6, 0x1, 0x9, 0x34f, 0x3, 0x6, 0x7, 0x986b, 0x40, 0x8, 0xeea, 0x3, 0x9, 0x9, 0x9, 0x7fff, 0x3, 0x86, 0x6, 0x5, 0x532c, 0xfffffffb, 0x0, 0xedba, 0x6, 0x2, 0x8, 0x8001, 0xffff, 0xffff7f6f, 0x6, 0x0, 0x8, 0x4, 0x3, 0x1000, 0x9, 0x5, 0x7, 0x5, 0xfffffffb, 0xfff, 0x5, 0x8, 0x7fe703d2, 0x4, 0x8001, 0x55e, 0x3, 0x7, 0x6, 0xe, 0xe2f6, 0x3, 0xfffffc14, 0x4, 0xfffffff1, 0x2, 0x5, 0x6, 0xc5, 0x0, 0xd, 0x8, 0x5, 0xdcc, 0x300000, 0xffff, 0x10001, 0xfffffffd, 0x5a, 0x6, 0x2, 0x1, 0x0, 0x9, 0x1, 0x4, 0xf, 0x800, 0x1b6, 0x7, 0xf, 0x81c5, 0xfffffffa, 0xd, 0x1ff, 0xfffffffd, 0x6, 0x10001, 0x1020000, 0x4, 0x22c5, 0x2, 0x2, 0x0, 0x9aa7, 0x14a476c4, 0xd54, 0x1, 0x39e, 0x2, 0x3ff, 0x0, 0x5d02, 0x8, 0x7, 0xff, 0x2dd8, 0x7, 0x3, 0xff, 0x6, 0x3, 0x6, 0x7, 0x713a, 0x9, 0x400, 0x1, 0x4e, 0x80, 0x9, 0x8, 0x8, 0x80000000, 0x8, 0x6, 0x3, 0x5, 0x2, 0x2, 0x6, 0x7fff, 0x4, 0x2, 0x4, 0x2, 0x8, 0x6, 0x1, 0x4, 0x5, 0x2, 0x10, 0x8, 0x0, 0xfe3, 0x8, 0xee, 0x2, 0x8, 0x0, 0x400, 0x7, 0xe45, 0x5, 0x2, 0x7e, 0x3, 0x398, 0x40, 0x6, 0x2d4, 0x3, 0x7, 0x6, 0x26, 0x200, 0x1bb, 0x1ff, 0x7, 0x800000, 0x502e, 0x3, 0x8, 0x4, 0x7, 0x80000001, 0xce, 0x9, 0x1, 0x9, 0x1000, 0xffff, 0x7, 0x2, 0x2, 0x5, 0x9, 0x10000000, 0xfffffffd, 0xd, 0x3, 0xdf3, 0x1, 0x910, 0x8, 0x9, 0x8, 0x4, 0x1ff, 0x7fff, 0x401, 0x6249d0dd, 0x2e01, 0x1, 0x9, 0x5, 0x7fffffff, 0x361, 0xfffffc01, 0x6, 0x337, 0x24, 0x6, 0x1, 0x6fa, 0x8001, 0x400, 0x0, 0x7, 0xffffffff, 0xfffffff7, 0xfffffff9, 0x7a2, 0x0, 0x8, 0x200, 0xa40, 0x4, 0xfff, 0x1, 0x3, 0x3, 0xf, 0x400, 0x4, 0x4b4, 0x0, 0x7e, 0x5, 0x960, 0x8, 0xff, 0x98e, 0xfffffff9, 0x800, 0x2, 0x9, 0x1a]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x2, 0x4, 0x8, 0xf, {0xd, 0x0, 0x2, 0x4, 0x0, 0x3}, {0x2, 0x2, 0x5, 0x5a, 0x2, 0x9}, 0x23a, 0x7, 0xd000000}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}}, 0x0)
ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000900)={0x0, 0x10, 0x100})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x64, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x21, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x20004084)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

31.870991199s ago: executing program 0 (id=243):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) (fail_nth: 4)

31.677344498s ago: executing program 0 (id=245):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0)
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x1)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010"], 0x80}}, 0x4814)
syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fecff6a9250000000000000000000025fe8000000000000000000000000000aa"], 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0)
socket$key(0xf, 0x3, 0x2)
syz_open_dev$tty20(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1100, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3, 0x0, 0x80}, 0x18)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

31.659728029s ago: executing program 0 (id=246):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
flistxattr(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0x800, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10)
openat$urandom(0xffffffffffffff9c, &(0x7f0000004b00), 0x800, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xc, &(0x7f0000002280)=ANY=[@ANYBLOB="1a0000000000001812000000000400000097de00bb04e144b4964c21084989d887e41109b122e567dc11a05fa36ffd733ef6009708a29acccb139da72d3827f23f6bd24e125a964fe31bbc1d8bc21ec83663f4ed39f04164d0dac90e6b0249f3678018d9e5eca2d6ccd658c31decc39b8ec138661e2e176f55433c9983bee2e0b392b2b7b4ced9d49cc9986c4e22e228d92d4aef9c11a036e373c14e60a06f1331ca4d40d1c6131423964b9e29", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000950000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x82e9ce810ab34d4c, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket(0x1e, 0x4, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2})
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r9}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r10}, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10)

29.903215283s ago: executing program 3 (id=272):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa312, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x289, &(0x7f0000000380)={&(0x7f00000027c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0x1}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010)

29.646723198s ago: executing program 3 (id=273):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0)
mq_getsetattr(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
readv(r2, &(0x7f0000000780)=[{0x0}], 0x1)
vmsplice(r2, &(0x7f0000000380), 0x0, 0x6)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xe6}, 0x18)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x2c, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6, {0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380fe14786bef67be1632f393d8368f4bba5a641bd2bd291f0ea66e1b0d0bf0dd646759bcfe038b9f098eec859a54bb2be70bfafe4d4c6963505d875d5c1c64626bf4524e186b950b863c1d78452ac560ae8cf6961a242163ad27142b0b584cf35c675ab82f5c88f410e3f848af65eeaba48389221a08bf892f4d57867f02997bf82dcd59ceea5a2714dcbce1fddf238899e9fa0f5325596725c0073ff181d5ae309f3153e4923810a60895e38821ab42e4e565c23a2f870e482923bf5b4c9a791634ace689bc0e63"], 0x34}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8, 0x0, 0xffffffffffffffff}, 0x18)
socket$kcm(0x21, 0x2, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000000080)={0x4, 0x3, 0x40000000000000, 0xe, 0x8000, 0x3, 0x200000000, 0x3}, &(0x7f0000000100)={0x1f, 0x5, 0x4, 0x5, 0xfffffffffffffff8, 0x0, 0x4000000000}, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000540)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001)

29.484655904s ago: executing program 3 (id=276):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000035c0)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001580)={r1, r2, 0x25, 0x2, @val=@netkit}, 0x1c)
syz_emit_ethernet(0xd5, &(0x7f0000000300)=ANY=[], 0x0)

29.463747806s ago: executing program 3 (id=277):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000680)={0x17, 0x8, [0x6, 0x1, 0x8, 0xff], &(0x7f0000000400)=[0x0]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c6a00f5"], 0x78)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000500)=[{0x2, 0x1, {0x2, 0xff, 0x1}, {0x2, 0x1, 0x4}, 0xfe, 0x1}, {0x1, 0x3, {0x3, 0x1}, {0x2, 0x1, 0x1}, 0x0, 0xfd}, {0x2, 0x3, {0x2}, {0x0, 0xff, 0x1}, 0xff, 0xfd}, {0x1, 0x1, {0x0, 0xff, 0x2}, {0x0, 0x1}, 0xff, 0xfe}], 0x80)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2a, 0x21dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffffff8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000014}, 0x240c4040)

29.375354694s ago: executing program 3 (id=278):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0)
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x1)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010"], 0x80}}, 0x4814)
syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fecff6a9250000000000000000000025fe8000000000000000000000000000aa"], 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0)
socket$key(0xf, 0x3, 0x2)
syz_open_dev$tty20(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1100, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3, 0x0, 0x80}, 0x18)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

29.329321999s ago: executing program 3 (id=279):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0x601d, &(0x7f00000006c0)={0x0, 0x7758, 0x1000, 0x8007, 0x1bf}, &(0x7f0000000300)=<r3=>0x0, &(0x7f0000000680)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1})
io_uring_enter(r2, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0)

17.210584954s ago: executing program 32 (id=234):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0xcf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x110, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x26f2e217, 0x4ba}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000280), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = syz_io_uring_setup(0x601d, &(0x7f00000006c0)={0x0, 0x7758, 0x1000, 0x8007, 0x1bf}, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000680)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1})
io_uring_enter(r3, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0)

16.561743098s ago: executing program 33 (id=246):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
flistxattr(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0x800, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10)
openat$urandom(0xffffffffffffff9c, &(0x7f0000004b00), 0x800, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xc, &(0x7f0000002280)=ANY=[@ANYBLOB="1a0000000000001812000000000400000097de00bb04e144b4964c21084989d887e41109b122e567dc11a05fa36ffd733ef6009708a29acccb139da72d3827f23f6bd24e125a964fe31bbc1d8bc21ec83663f4ed39f04164d0dac90e6b0249f3678018d9e5eca2d6ccd658c31decc39b8ec138661e2e176f55433c9983bee2e0b392b2b7b4ced9d49cc9986c4e22e228d92d4aef9c11a036e373c14e60a06f1331ca4d40d1c6131423964b9e29", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000950000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x82e9ce810ab34d4c, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket(0x1e, 0x4, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2})
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r9}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r10}, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10)

14.308661629s ago: executing program 34 (id=279):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0x601d, &(0x7f00000006c0)={0x0, 0x7758, 0x1000, 0x8007, 0x1bf}, &(0x7f0000000300)=<r3=>0x0, &(0x7f0000000680)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1})
io_uring_enter(r2, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0)

9.597985024s ago: executing program 4 (id=511):
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf2505"], 0x2a8}, 0x1, 0x0, 0x0, 0x48c05}, 0x2404c140)

9.217187882s ago: executing program 4 (id=517):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r3}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48)

9.182248765s ago: executing program 4 (id=518):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x18)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)='}', 0x1}], 0x1}}], 0x2, 0x2400c042)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32, @ANYBLOB="049c01000750050008001300", @ANYRES32, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x42850)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x3, @private1, 0x200}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000440)="a5929aa57ed713e55ed850a52746bafa536ed42b2d8903c9970a0535ec928a19da65d0e7a057bdb3df2d175c9557a15f7b4b7726956e60dbfd307f5b22a9c055357b24b24c294253b1f7f14b1ac5f1a7377170e27bbb367b97cbbb0aaf90d411908119998f120ab2f6dbda7635869fe0b6aaa2bbf7375f7fa5bb16c2758caf31785f6ebcd253336379b36fc513dcc5e7ebb67492e9d5106c958f8ad7bb6760a5798b3f0a7884ee0bdcba1540394fd5b7c1bc808622f9382303951785e4d575aad6", 0xc1}], 0x1, &(0x7f0000000200)=[@authinfo={0x18, 0x84, 0x6, {0x1}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @init={0x18, 0x84, 0x0, {0x4, 0x3, 0x0, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x60, 0x4}, 0x40000)

9.150643758s ago: executing program 4 (id=519):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, 0x0, 0x40408c0)

9.050912688s ago: executing program 4 (id=520):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0)
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x1)
syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fecff6a9250000000000000000000025fe8000000000000000000000000000aa"], 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3, 0x0, 0x80}, 0x18)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

8.992197024s ago: executing program 4 (id=521):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x758e, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8})
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0)

7.564355304s ago: executing program 7 (id=546):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0)
mq_getsetattr(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
readv(r2, &(0x7f0000000780)=[{0x0}], 0x1)
vmsplice(r2, &(0x7f0000000380), 0x0, 0x6)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xe6}, 0x18)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x2c, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6, {0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8, 0x0, 0xffffffffffffffff}, 0x18)
socket$kcm(0x21, 0x2, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000000080)={0x4, 0x3, 0x40000000000000, 0xe, 0x8000, 0x3, 0x200000000, 0x3}, &(0x7f0000000100)={0x1f, 0x5, 0x4, 0x5, 0xfffffffffffffff8, 0x0, 0x4000000000}, 0x0, 0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000540)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001)

7.368539413s ago: executing program 7 (id=553):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
close(r0)

7.350671555s ago: executing program 7 (id=554):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = gettid()
rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xb0030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)

7.296920191s ago: executing program 7 (id=557):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r2, 0x0)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x18)
msgget$private(0x0, 0x210)
syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6019f14d00383c0020010000000000000000000000000000ff0200000000000000000000000000012c0300"], 0x0)

6.943566575s ago: executing program 7 (id=565):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0)
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x1)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010"], 0x80}}, 0x4814)
syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fecff6a9250000000000000000000025fe8000000000000000000000000000aa"], 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3, 0x0, 0x80}, 0x18)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

6.884338331s ago: executing program 7 (id=567):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
close(r0)

5.064068271s ago: executing program 5 (id=601):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={0x0}}, 0x40408c0)

4.990979288s ago: executing program 5 (id=602):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x988, &(0x7f0000000140)={[{@barrier_val}, {@discard}, {@block_validity}, {@nobarrier}, {@noblock_validity}, {@nolazytime}]}, 0x1, 0x7a0, &(0x7f0000001400)="$eJzs3c1rXFUbAPDnTpImb9r3bV4QbLtpVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SCbJ5LOZpE1+P7jJOfeem3Ofe3LPPTP3MBPAvtWf/shEHI2ID5OIw/X1SUR0VVOdEUO1cg/m53LpkkSl8vrvSbXM/fm5XDTtkzpYzxyJiO/fjTiZWVlvaWZ2fLhQyE/V8wPliasDpZnZU2MTw6P50fzkuTODg2fPP3v+3PbF+uePs4fufPTK018P/f3Ok7c++CGJoThU39Ycx3bpj/76OelKT+ESL293Zbss2e0DYEvSS7OjdpXH0TgcHdUUALCXpff/CgCwzyTu/wCwzzTeB7g/P5drLLv7jsTOuvtSRPTU4m8836xt6aw/s+upPgftvZ9EZ/2JaGzj867+iPjs2ze/TJdo03NIgFbevhERl/v6V/b/yYo5C5t1egNl+pfl9X+wc75Lxz/PtRr/ZRbGP7Ew/lnU3eLa3Yr+iAPN+ZXXf+Z2yx1f3IbK6+O/F2pz29JAm8Z/C5PW+jrquf+mmeMRMVbIp33b/yLiRHR1Xxkr5M+sUceJe//cW21b8/jvj5tvfZHWn/5eLJG53dm9dJ+R4fLww8Tc7O6NiGOdi3P7Hqzo/3uqY93l7Z+uu7jWHz6+mHz1+fc+XbLt2GIyjT+Nt7GsjL+9Kp9HPBWt429I1pyfOJA2/+naz9Z1fPPzJ72r1d/c/umS1t94LbAT0vbvXTv+vqR5vmZpe+tfP/7W//8Hkjeq6UbncX24XJ46E3EgeW3l+rOL+zbyjfJp/LVIl8efWfP/P30leHmDMXbe+e2rrce/oC1TLNP4RzbV/ptP3How3rH1+NP2H6ymTtTXbKT/2+gBPsy5AwAAAAAAAAAAAAAAAAAAAAAAAICNykTEoUgy2YV0JpPN1r7D+4nozRSKpfLJK8XpyZGofld2X3RlGh91ebiWTxqff9rXlD+7LP9MRPw/Ij7u/k81n80VCyO7HTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1B1c5fv/U7927/bRAQBt07NuiXv5JdlKpVJp4/EAAO23/v0fANhrVr3/Jzt7HADAzvH6HwD2H/d/ANh/3P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABos4sXLqRL5a/5uVyaH7k2Mz1evHZqJF8az05M57K54tTV7GixOFrIZ3PFifX+XqFYvDoYk9PXB8r5UnmgNDN7aaI4PVm+NDYxPJq/lO/akagAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYHNKM7Pjw4VCfmpPJN6PiEfgMNqRSKLlpmSPtWDLxC+nfjqyVpmb65yEoUciiscssds9EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDj4d8AAAD//ytjJOI=")
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x7f}}, './file1\x00'})
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1dc)
ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f00000004c0)={0x8, 0x2, 0x5})

4.879853829s ago: executing program 5 (id=604):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x23568}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x505, 0x347}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8004002)
syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), 0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
pipe(&(0x7f0000000400)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f0800014000000000240005800c007b7a339d796c6f61640014000280080004400000005608000240000000040900010073797a30000000000900020073797a32"], 0xb0}}, 0x0)
recvfrom$inet(r6, &(0x7f0000000500)=""/32, 0x20, 0x140, &(0x7f0000000540)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
r8 = open$dir(&(0x7f0000000040)='./file0\x00', 0x18800, 0x82)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x400600, 0x84)
move_mount(r8, &(0x7f00000002c0)='./file0\x00', r9, &(0x7f0000000380)='./file0\x00', 0x1)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r3}, 0x4)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_io_uring_setup(0x560, &(0x7f00000005c0)={0x0, 0x58db, 0x10, 0x1, 0x3, 0x0, r5}, &(0x7f00000001c0)=<r11=>0x0, &(0x7f0000000580)=<r12=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r11, r12, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
io_uring_enter(r10, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300)

3.818679074s ago: executing program 5 (id=618):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@bridge_delneigh={0x78, 0x1d, 0x200, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x40, 0x98, 0x4}, [@NDA_CACHEINFO={0x14, 0x3, {0x3, 0xfeec, 0x9, 0x5}}, @NDA_PROTOCOL={0x5, 0xc, 0xcb}, @NDA_LLADDR={0xa, 0x2, @remote}, @NDA_DST_MAC={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, @NDA_NH_ID={0x8, 0xd, 0x3}, @NDA_LINK_NETNSID={0x8, 0xa, 0x9}, @NDA_NH_ID={0x8, 0xd, 0xfffffff7}, @NDA_SRC_VNI={0x8, 0xb, 0x6}, @NDA_IFINDEX={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000)

3.818475204s ago: executing program 5 (id=619):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0)
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x1)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010"], 0x80}}, 0x4814)
syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fecff6a9250000000000000000000025fe8000000000000000000000000000aa"], 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2, 0x0, 0x80}, 0x18)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

3.786615417s ago: executing program 5 (id=621):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = socket$inet6(0xa, 0x1, 0x3b8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESDEC=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10)
semctl$GETZCNT(0x0, 0x1, 0xf, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
madvise(&(0x7f0000005000/0x1000)=nil, 0x1000, 0xa)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='veth0_virt_wifi\x00', 0x10)
r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_aout(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/2486], 0x9b9)
r4 = open(0x0, 0x145142, 0x0)
ftruncate(r4, 0x2007ffc)
epoll_pwait2(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000300)=0x9, 0x4)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r6, &(0x7f0000002f40)=""/4098, 0x1002)
ioctl$TIOCMIWAIT(r5, 0x545c, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r7=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)
socket(0x8, 0x3, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)

1.849699788s ago: executing program 1 (id=639):
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000008, 0x3, 0x4, 0x80000001})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000004c0)={0x800100, 0x1, 0x200, 0x8, 0x3ff, 0x6})
shutdown(0xffffffffffffffff, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x100012, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0xd6ee, 0x800, 0x2, 0x20e}, &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000680)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1})
io_uring_enter(r5, 0x5fdd, 0x217, 0xa5, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20004041, 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x2, @private2, 0x5}, 0x1c)
r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f00000000c0)={{0x1, 0x2000000, 0x0, 0xe803}})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
r11 = socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES16=r11, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000480)={0x0, 0xffffffffffffffdb, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)

1.766860786s ago: executing program 1 (id=640):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000001}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10)
pipe(&(0x7f0000005880)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fsetxattr$security_selinux(r5, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0)
syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x100c085, &(0x7f0000000d00)=ANY=[@ANYRES8=0x0, @ANYBLOB="c0da5b74006e9c47add458a1bd748b7ffa5628dc52f84873cbe6a43cfd29e4198255a0610d383b0e46b2b6457282a9f3caef22979e54c145e6a0ce2850a890af7c4e1fa3628453c70aae32270b0042f1532cf08030eccdca96e2c97aae42cf5d9ec5f0afa4fcc53c8f9289677038d09ae2b1bd2271e0a76e6324df3a2b01a9ed0277d7e8d6f7d463ae62692faa55bdb43dc2bea18eea4a635951fd0a220a835fa24d0700c8f8c245d1d7638b2cae5ed3bec0d2f0415ddff7884bb34ab0cb1598e9c7b92a29005e4090ede480b3412f5c33da5e7c8672bda19fd3d989f8336d69d9e70de142973e7e1f53987b2d"], 0x10, 0x7f4, &(0x7f0000000e40)="$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")
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
pwritev(r9, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = gettid()
sendmsg$unix(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r11, @ANYRES32=r10, @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r10, @ANYBLOB="0000000018"], 0xa0}, 0x4004881)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
ftruncate(r0, 0x7)

1.708614061s ago: executing program 1 (id=641):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd, &(0x7f00000002c0)='sched_switch\x00'}, 0x30)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x11, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000b00000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff8f4221063125"]}, 0x108)
close(0x4)
socket(0x23, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000070000000c0007800800124000000c8f0500010006000000050005000200000005000400000000060900020073797a310000000014000300686173683a69702c706f72742c697000"], 0x58}}, 0x20004000)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYBLOB="5447fa6a2b7c215df32a4e4c517b956a72b65a5fba75ab8a0c15a590374e1ff607386e4fdcdba92c1af4dd7741640c5bb0eeff19901b5886bcbce3ec93d8a25c60337cc9e862ec7d4e5a6a798461b865fc0f49f8", @ANYBLOB="25b3fda8436e9ad1e39989b24d83e19e25ddcb3e8e0a3d41a550caf058a1cf23ccabdca0aedcc214559d45b188b187e7527c58aea880ee67eef1ab3d94c0a0b29b39dfe144f3596e25de1843cb75041106aa21ffb8b72d057cfa29e773f73fd362336ed14ca680f6b66e8f8d4d25120b35e5f1f1e7eae5fb7db54ed16ae3d065b3fb6017d488f6817d283632fcac52452b6c64e17f8d40b936566334be24d763945d318700361f3abc051dda5a5d6f289ee579b17e3c89a70d5a90be51"], 0x0, 0x8000000}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRESDEC=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x4010020)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r5, 0x545c, 0x200000000000000)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x4091}, 0x8004)

825.266749ms ago: executing program 1 (id=645):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="98000000020101020000000000000000010000080c00058008000100524153004000068014000500fe80000000000000000000000000003e0c000380060002004e24000014000400fc02000000000000000000000000000008000100000000000c0019"], 0x98}, 0x1, 0x0, 0x0, 0x20000840}, 0x40)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', <r6=>0x0})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r7}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0xa, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8, 0x2, 0x0, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x101, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x0)

726.000478ms ago: executing program 1 (id=646):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0)
mq_getsetattr(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
readv(r2, &(0x7f0000000780)=[{0x0}], 0x1)
vmsplice(r2, &(0x7f0000000380), 0x0, 0x6)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xe6}, 0x18)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x2c, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6, {0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380fe14786bef67be1632f393d8368f4bba5a641bd2bd291f0ea66e1b0d0bf0dd646759bcfe038b9f098eec859a54bb2be70bfafe4d4c6963505d875d5c1c64626bf4524e186b950b863c1d78452ac560ae8cf6961a242163ad27142b0b584cf35c675ab82f5c88f410e3f848af65eeaba48389221a08bf892f4d57867f02997bf82dcd59ceea5a2714dcbce1fddf238899e9fa0f5325596725c0073ff181d5ae309f3153e4923810a60895e38821ab42e4e565c23a2f870e482923bf5b4c9a791634ace689bc0e63"], 0x34}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8, 0x0, 0xffffffffffffffff}, 0x18)
socket$kcm(0x21, 0x2, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000000080)={0x4, 0x3, 0x40000000000000, 0xe, 0x8000, 0x3, 0x200000000, 0x3}, &(0x7f0000000100)={0x1f, 0x5, 0x4, 0x5, 0xfffffffffffffff8, 0x0, 0x4000000000}, 0x0, 0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000540)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001)

587.021542ms ago: executing program 6 (id=647):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001180)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
socket(0xf, 0x2, 0x1)
r2 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4)

519.391139ms ago: executing program 6 (id=648):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r5}, 0x18)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002a40)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x5, 0xc4e, 0x3, 0x5, 0xfffffffc, 0x0, 0x0, 0xfffffff7, 0x1000, 0x4c10, 0x5, 0x6, 0x8, 0x3, 0x1, 0x4, 0x8001, 0x5, 0x9, 0x7, 0x9, 0x1, 0x80000001, 0x49, 0x836, 0x6, 0x2, 0x4, 0x5, 0x1, 0x1ff, 0x4, 0x9, 0x3, 0x6e89, 0x7, 0x8, 0x6, 0x8, 0x3, 0x3, 0x3, 0x6, 0x5, 0x80000001, 0x4d, 0x202, 0x3, 0x7, 0x40, 0xe, 0x9, 0x9, 0x5, 0xfffffffd, 0xada8, 0x1, 0x7cf816ed, 0x20006, 0x9, 0x1, 0x7f, 0x10001, 0x3ff, 0x8, 0x5, 0x336, 0xc4, 0x5, 0x400, 0xff, 0x1000, 0xfffffff7, 0x7, 0x3, 0x4, 0x1000, 0x4, 0x4, 0xffff, 0x4, 0x9, 0x7, 0xd, 0x8, 0x6, 0x8, 0x1, 0x6, 0xfffff2f9, 0x9, 0x2, 0x2f05, 0x6, 0x800, 0x8, 0x5, 0x5, 0x2, 0x5, 0x80000000, 0x6, 0x4, 0x80000001, 0x4, 0x202e, 0x3, 0xfffffffb, 0xe5a, 0xad03, 0x5, 0x4, 0x6, 0x0, 0x6, 0xcec1, 0xffffffff, 0x6, 0x8, 0x4, 0x1, 0x8, 0x5, 0x5, 0xb8, 0xb28, 0x2, 0x5, 0x7fffffff, 0x0, 0x60, 0x9, 0x6, 0x9, 0x4, 0x9, 0x80000001, 0x9, 0x6, 0x7fff, 0x100, 0x412d, 0x98ad, 0x3, 0x7fff, 0xffffffff, 0x16e5, 0x10000, 0x8, 0x80000000, 0xd, 0x7, 0x4ca7, 0x9, 0x6, 0x1, 0x3, 0x13, 0x2, 0x9, 0x6, 0x6, 0x2, 0x5a5a605, 0xc7f, 0xb9f, 0x8, 0xa, 0x4, 0x0, 0x7fff, 0x80000000, 0x58, 0x5, 0x0, 0x9, 0x0, 0xff, 0x80000000, 0x9, 0x1, 0x7b, 0x0, 0x3, 0xffffe209, 0x7, 0x2000000, 0x9, 0x2, 0x800, 0x7, 0xffff, 0x8, 0xadcd, 0x4, 0x7, 0x2, 0x9, 0x8, 0x4, 0x7, 0x8, 0x6, 0x101, 0x600, 0x5, 0xd, 0x9, 0x1, 0x10000, 0x3cba, 0xc, 0xff, 0xab3, 0xa1f2, 0x800, 0x3, 0x1, 0x4, 0x7fffffff, 0x2, 0x0, 0x80000000, 0x3, 0x3, 0x10000, 0x6, 0x2, 0x4, 0xa2d7038, 0xd, 0x0, 0x0, 0x6, 0x0, 0x5, 0x3, 0x40, 0x8, 0xae4d, 0x3, 0x8, 0xe3, 0x7cc9, 0x8001, 0x800, 0xc, 0x2, 0x0, 0x0, 0x8, 0xff, 0x0, 0xe891, 0xe9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x9, 0x5, 0x9, 0xffffffdb, 0x6, 0x1, 0x9, 0x34f, 0x3, 0x6, 0x7, 0x986b, 0x40, 0x8, 0xeea, 0x3, 0x9, 0x9, 0x9, 0x7fff, 0x3, 0x86, 0x6, 0x5, 0x532c, 0xfffffffb, 0x0, 0xedba, 0x6, 0x2, 0x8, 0x8001, 0xffff, 0xffff7f6f, 0x6, 0x0, 0x8, 0x4, 0x3, 0x1000, 0x9, 0x5, 0x7, 0x5, 0xfffffffb, 0xfff, 0x5, 0x8, 0x7fe703d2, 0x4, 0x8001, 0x55e, 0x3, 0x7, 0x6, 0xe, 0xe2f6, 0x3, 0xfffffc14, 0x4, 0xfffffff1, 0x2, 0x5, 0x6, 0xc5, 0x0, 0xd, 0x8, 0x5, 0xdcc, 0x300000, 0xffff, 0x10001, 0xfffffffd, 0x5a, 0x6, 0x2, 0x1, 0x0, 0x9, 0x1, 0x4, 0xf, 0x800, 0x1b6, 0x7, 0xf, 0x81c5, 0xfffffffa, 0xd, 0x1ff, 0xfffffffd, 0x6, 0x10001, 0x1020000, 0x4, 0x22c5, 0x2, 0x2, 0x0, 0x9aa7, 0x14a476c4, 0xd54, 0x1, 0x39e, 0x2, 0x3ff, 0x0, 0x5d02, 0x8, 0x7, 0xff, 0x2dd8, 0x7, 0x3, 0xff, 0x6, 0x3, 0x6, 0x7, 0x713a, 0x9, 0x400, 0x1, 0x4e, 0x80, 0x9, 0x8, 0x8, 0x80000000, 0x8, 0x6, 0x3, 0x5, 0x2, 0x2, 0x6, 0x7fff, 0x4, 0x2, 0x4, 0x2, 0x8, 0x6, 0x1, 0x4, 0x5, 0x2, 0x10, 0x8, 0x0, 0xfe3, 0x8, 0xee, 0x2, 0x8, 0x0, 0x400, 0x7, 0xe45, 0x5, 0x2, 0x7e, 0x3, 0x398, 0x40, 0x6, 0x2d4, 0x3, 0x7, 0x6, 0x26, 0x200, 0x1bb, 0x1ff, 0x7, 0x800000, 0x502e, 0x3, 0x8, 0x4, 0x7, 0x80000001, 0xce, 0x9, 0x1, 0x9, 0x1000, 0xffff, 0x7, 0x2, 0x2, 0x5, 0x9, 0x10000000, 0xfffffffd, 0xd, 0x3, 0xdf3, 0x1, 0x910, 0x8, 0x9, 0x8, 0x4, 0x1ff, 0x7fff, 0x401, 0x6249d0dd, 0x2e01, 0x1, 0x9, 0x5, 0x7fffffff, 0x361, 0xfffffc01, 0x6, 0x337, 0x24, 0x6, 0x1, 0x6fa, 0x8001, 0x400, 0x0, 0x7, 0xffffffff, 0xfffffff7, 0xfffffff9, 0x7a2, 0x0, 0x8, 0x200, 0xa40, 0x4, 0xfff, 0x1, 0x3, 0x3, 0xf, 0x400, 0x4, 0x4b4, 0x0, 0x7e, 0x5, 0x960, 0x8, 0xff, 0x98e, 0xfffffff9, 0x800, 0x2, 0x9, 0x1a]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x2, 0x4, 0x8, 0xf, {0xd, 0x0, 0x2, 0x4, 0x0, 0x3}, {0x2, 0x2, 0x5, 0x5a, 0x2, 0x9}, 0x23a, 0x7, 0xd000000}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}}, 0x0)
ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000900)={0x0, 0x10, 0x100})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x64, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x21, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x20004084)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

479.357252ms ago: executing program 6 (id=649):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0xa, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8, 0x2, 0x0, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x101, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x0) (fail_nth: 8)

442.183106ms ago: executing program 1 (id=650):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="41ae2590000000006111080000000006061500000000d600f59600b3000000001f477b324c110a1051a7056527fd078f14b8aca45f7fd86b30ca582db3ae0a918dfef1c3793eba7ed255f18be6c688b0401ca9273ddde39fbed70562c39ee14b"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_sock_diag(0x10, 0x3, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9c000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8201000000420000140003006272696467655f736c6176655f30000008000400d4000000600016805c00018010000200f9ffffff"], 0x9c}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000001c0)={0xa, {0x2, 0x4, 0x8}}, 0xa)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128)
io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, r3, 0x0, 0x0, 0x7, 0x0, 0x2}])
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2000)
lchown(&(0x7f00000001c0)='./file1\x00', r4, 0x0)
setreuid(r4, r4)
ioprio_get$uid(0x3, 0xee01)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d6765"], 0x122}}, 0x4008090)

74.972703ms ago: executing program 6 (id=651):
r0 = gettid()
timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc))
r1 = syz_open_procfs(r0, &(0x7f0000000000)='numa_maps\x00')
r2 = inotify_init()
r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r4 = inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x400008bf)
write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69)
inotify_rm_watch(r1, r4)

74.624443ms ago: executing program 6 (id=652):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x4000000, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0xa, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8, 0x2, 0x0, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x101, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x0)

0s ago: executing program 6 (id=653):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3, 0x0, 0x400007}, 0x18)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000ed000000ed000000090000000f0000000000000e0100000000000000060000000000001103000000090000000e0000000000001105000000040000000b0000000000000e02000000020000000300000004000013020000000f000000ff0f000003000000040000000b0000000100000006000000000000000d0000000e00000086070000030000000101f0ffff0000050d0000000000000004000000030000001000000000000000ffffffff000000000100000d000000000b000000000000000a0000000200000f010000000400000000000100040000000400000006000000f9ffffff90000000000100000d00000000000000000300000000000000616130612e303000"], &(0x7f0000000240)=""/28, 0x111, 0x1c, 0x1, 0x6}, 0x28)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$kcm(0x22, 0x2, 0x21)
r6 = socket$kcm(0x22, 0x2, 0x21)
close(r6)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000500)=""/144, 0x90, <r7=>0x0, &(0x7f0000000a00)=""/4096, 0x1000}}, 0x10)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ffffffff000000000100000018110000", @ANYRES8=r8, @ANYBLOB="0000000000000000b7020000000000008500000086000000182900", @ANYRES8=r5, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x7, 0xaa, &(0x7f0000000440)=""/170, 0x41000, 0x24, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, r7, r8, 0x5, 0x0, &(0x7f0000000600)=[{0x2, 0x3, 0x4, 0x8}, {0x4, 0x5, 0xc, 0x3}, {0x4, 0x2, 0xa, 0x3}, {0x5, 0x4, 0xb, 0xa}, {0x3, 0x2, 0xd, 0x5}], 0x10, 0x3ff}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4a}, 0x48)
close(r9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r13, @ANYRES32=r12, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r13}, &(0x7f0000000000), &(0x7f00000002c0)=r9}, 0x20)
sendmsg$inet(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvmsg$unix(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/243, 0xfffffed7}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x17, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xf, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @alu={0x7, 0x1, 0xb, 0x6, 0x3, 0x80, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @cgroup_device, r4, 0x8, &(0x7f0000000340)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x1, 0x6, 0x3}, 0xfffffe55, r7, r3, 0x3, &(0x7f00000005c0)=[r2, r2], &(0x7f0000000600)=[{0x4, 0x4, 0xe}, {0x2, 0x5, 0xd, 0x1}, {0x1, 0x5, 0xf, 0x6}], 0x10, 0x868b}, 0x94)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r14, 0x0, 0x9}, 0x18)
socket$inet(0x2, 0x1, 0x0)

kernel console output (not intermixed with test programs):

038928][ T3704] EXT4-fs: Ignoring removed bh option
[   35.066736][ T3704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.146450][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.162657][ T3718] SELinux: failed to load policy
[   35.206313][ T3726] SELinux: failed to load policy
[   35.402222][   T29] kauditd_printk_skb: 592 callbacks suppressed
[   35.402238][   T29] audit: type=1326 audit(1760323944.908:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f720783eec9 code=0x7ffc0000
[   35.432217][ T3744] netlink: 'syz.1.95': attribute type 1 has an invalid length.
[   35.451162][   T29] audit: type=1326 audit(1760323944.938:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720783eec9 code=0x7ffc0000
[   35.474805][   T29] audit: type=1326 audit(1760323944.948:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720783eec9 code=0x7ffc0000
[   35.499996][ T3744] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.510683][   T29] audit: type=1326 audit(1760323945.008:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f720783eec9 code=0x7ffc0000
[   35.534162][   T29] audit: type=1326 audit(1760323945.008:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720783eec9 code=0x7ffc0000
[   35.557611][   T29] audit: type=1326 audit(1760323945.008:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720783eec9 code=0x7ffc0000
[   35.580764][   T29] audit: type=1326 audit(1760323945.008:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f720783eec9 code=0x7ffc0000
[   35.605589][ T3744] bridge_slave_0 (unregistering): left allmulticast mode
[   35.612657][ T3744] bridge_slave_0 (unregistering): left promiscuous mode
[   35.619681][ T3744] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.695301][   T29] audit: type=1326 audit(1760323945.198:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720783eec9 code=0x7ffc0000
[   35.718546][   T29] audit: type=1326 audit(1760323945.198:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720783eec9 code=0x7ffc0000
[   35.747416][   T29] audit: type=1326 audit(1760323945.248:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f720783eec9 code=0x7ffc0000
[   35.788174][ T3749] SELinux: failed to load policy
[   35.942098][ T3758] SELinux: failed to load policy
[   36.041619][ T3761] __nla_validate_parse: 17 callbacks suppressed
[   36.041635][ T3761] netlink: 660 bytes leftover after parsing attributes in process `syz.4.100'.
[   36.399134][ T3769] SELinux: failed to load policy
[   36.465339][ T3773] netlink: 'syz.0.108': attribute type 1 has an invalid length.
[   36.490950][ T3777] SELinux: failed to load policy
[   36.497289][ T3773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.108'.
[   36.537816][ T3781] SELinux: failed to load policy
[   36.606881][ T3789] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   36.801415][ T3809] SELinux: failed to load policy
[   36.810686][ T3807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'.
[   36.837978][ T3807] loop0: detected capacity change from 0 to 1024
[   36.852557][ T3813] SELinux: failed to load policy
[   36.860445][ T3807] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   36.898328][ T3815] netlink: 'syz.3.126': attribute type 14 has an invalid length.
[   36.921372][ T3817] netlink: 'syz.4.127': attribute type 1 has an invalid length.
[   36.957157][ T3817] 8021q: adding VLAN 0 to HW filter on device bond1
[   36.973136][ T3817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.127'.
[   36.990743][ T3820] Zero length message leads to an empty skb
[   37.020403][ T3524] printk: udevd: 2 output lines suppressed due to ratelimiting
[   37.044876][ T3817] bond1 (unregistering): Released all slaves
[   37.139048][ T3839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3839 comm=syz.3.134
[   37.166656][ T3835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.134'.
[   37.178206][ T3839] IPv6: NLM_F_CREATE should be specified when creating new route
[   37.229310][ T3847] netlink: 660 bytes leftover after parsing attributes in process `syz.2.131'.
[   37.295130][ T3848] loop4: detected capacity change from 0 to 2048
[   37.371912][ T3848]  loop4: p1 < > p4
[   37.385673][ T3852] FAULT_INJECTION: forcing a failure.
[   37.385673][ T3852] name failslab, interval 1, probability 0, space 0, times 0
[   37.398436][ T3852] CPU: 0 UID: 0 PID: 3852 Comm: syz.1.140 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   37.398465][ T3852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   37.398478][ T3852] Call Trace:
[   37.398485][ T3852]  <TASK>
[   37.398561][ T3852]  __dump_stack+0x1d/0x30
[   37.398584][ T3852]  dump_stack_lvl+0xe8/0x140
[   37.398607][ T3852]  dump_stack+0x15/0x1b
[   37.398627][ T3852]  should_fail_ex+0x265/0x280
[   37.398669][ T3852]  should_failslab+0x8c/0xb0
[   37.398751][ T3852]  kmem_cache_alloc_noprof+0x50/0x480
[   37.398845][ T3852]  ? alloc_empty_file+0x76/0x200
[   37.398885][ T3852]  alloc_empty_file+0x76/0x200
[   37.398919][ T3852]  alloc_file_pseudo+0xc6/0x160
[   37.398953][ T3852]  anon_inode_getfile+0xa0/0x120
[   37.399016][ T3852]  bpf_link_prime+0xfc/0x1d0
[   37.399050][ T3852]  tcx_link_attach+0xf9/0x5e0
[   37.399071][ T3852]  link_create+0x546/0x6e0
[   37.399151][ T3852]  __sys_bpf+0x628/0x7c0
[   37.399189][ T3852]  __x64_sys_bpf+0x41/0x50
[   37.399219][ T3852]  x64_sys_call+0x2aee/0x3000
[   37.399244][ T3852]  do_syscall_64+0xd2/0x200
[   37.399334][ T3852]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   37.399436][ T3852]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   37.399463][ T3852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   37.399550][ T3852] RIP: 0033:0x7f720783eec9
[   37.399568][ T3852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   37.399586][ T3852] RSP: 002b:00007f72062a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   37.399607][ T3852] RAX: ffffffffffffffda RBX: 00007f7207a95fa0 RCX: 00007f720783eec9
[   37.399642][ T3852] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 000000000000001c
[   37.399656][ T3852] RBP: 00007f72062a7090 R08: 0000000000000000 R09: 0000000000000000
[   37.399671][ T3852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   37.399686][ T3852] R13: 00007f7207a96038 R14: 00007f7207a95fa0 R15: 00007ffc5584efc8
[   37.399706][ T3852]  </TASK>
[   37.509372][ T3848] loop4: p4 size 8388608 extends beyond EOD, truncated
[   37.635370][ T3855] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[   37.673145][ T3859] loop4: detected capacity change from 0 to 512
[   37.680367][ T3859] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   37.693856][ T3859] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   37.726695][ T3869] netlink: 'syz.3.146': attribute type 1 has an invalid length.
[   37.737662][ T3869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.146'.
[   37.746988][ T3859] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   37.762271][ T3859] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   37.775536][ T3859] EXT4-fs (loop4): 1 truncate cleaned up
[   37.781557][ T3859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.824260][ T3878] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   37.858286][ T3880] SELinux: failed to load policy
[   37.925356][ T3887] loop3: detected capacity change from 0 to 2048
[   37.971584][ T3887]  loop3: p1 < > p4
[   37.976032][ T3887] loop3: p4 size 8388608 extends beyond EOD, truncated
[   38.023820][ T3894] FAULT_INJECTION: forcing a failure.
[   38.023820][ T3894] name failslab, interval 1, probability 0, space 0, times 0
[   38.036567][ T3894] CPU: 1 UID: 0 PID: 3894 Comm: syz.3.155 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   38.036669][ T3894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   38.036684][ T3894] Call Trace:
[   38.036691][ T3894]  <TASK>
[   38.036699][ T3894]  __dump_stack+0x1d/0x30
[   38.036722][ T3894]  dump_stack_lvl+0xe8/0x140
[   38.036740][ T3894]  dump_stack+0x15/0x1b
[   38.036756][ T3894]  should_fail_ex+0x265/0x280
[   38.036868][ T3894]  should_failslab+0x8c/0xb0
[   38.036932][ T3894]  kmem_cache_alloc_noprof+0x50/0x480
[   38.036959][ T3894]  ? skb_clone+0x151/0x1f0
[   38.037017][ T3894]  skb_clone+0x151/0x1f0
[   38.037046][ T3894]  packet_rcv+0x3c4/0xab0
[   38.037072][ T3894]  packet_rcv_fanout+0x2a7/0x2d0
[   38.037178][ T3894]  ? __pfx_packet_rcv_fanout+0x10/0x10
[   38.037207][ T3894]  __netif_receive_skb_core+0x1c3c/0x2550
[   38.037269][ T3894]  ? __skb_flow_dissect+0x3d26/0x4210
[   38.037306][ T3894]  ? tun_rx_batched+0xc7/0x430
[   38.037338][ T3894]  __netif_receive_skb+0x59/0x270
[   38.037401][ T3894]  ? tun_rx_batched+0xc7/0x430
[   38.037430][ T3894]  netif_receive_skb+0x4b/0x2e0
[   38.037516][ T3894]  ? tun_rx_batched+0xc7/0x430
[   38.037542][ T3894]  tun_rx_batched+0xfc/0x430
[   38.037573][ T3894]  tun_get_user+0x1f35/0x26e0
[   38.037633][ T3894]  ? ref_tracker_alloc+0x1f2/0x2f0
[   38.037688][ T3894]  ? selinux_file_permission+0x1e4/0x320
[   38.037717][ T3894]  tun_chr_write_iter+0x15e/0x210
[   38.037744][ T3894]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   38.037771][ T3894]  vfs_write+0x52a/0x960
[   38.037820][ T3894]  ksys_write+0xda/0x1a0
[   38.037846][ T3894]  __x64_sys_write+0x40/0x50
[   38.037868][ T3894]  x64_sys_call+0x2802/0x3000
[   38.037890][ T3894]  do_syscall_64+0xd2/0x200
[   38.037964][ T3894]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   38.037992][ T3894]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   38.038017][ T3894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   38.038042][ T3894] RIP: 0033:0x7ff30284eec9
[   38.038104][ T3894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   38.038125][ T3894] RSP: 002b:00007ff3012b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   38.038147][ T3894] RAX: ffffffffffffffda RBX: 00007ff302aa5fa0 RCX: 00007ff30284eec9
[   38.038161][ T3894] RDX: 0000000000000fce RSI: 0000200000001240 RDI: 0000000000000004
[   38.038173][ T3894] RBP: 00007ff3012b7090 R08: 0000000000000000 R09: 0000000000000000
[   38.038240][ T3894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   38.038255][ T3894] R13: 00007ff302aa6038 R14: 00007ff302aa5fa0 R15: 00007ffcb2e2f418
[   38.038274][ T3894]  </TASK>
[   38.338480][ T3900] loop2: detected capacity change from 0 to 1024
[   38.346181][ T3900] EXT4-fs: Ignoring removed nobh option
[   38.351784][ T3900] EXT4-fs: Ignoring removed bh option
[   38.366801][ T3900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.404838][ T3906] loop1: detected capacity change from 0 to 256
[   38.412476][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.412846][ T3906] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   38.446094][ T3908] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   38.500103][ T3911] Illegal XDP return value 4294967274 on prog  (id 119) dev syz_tun, expect packet loss!
[   38.519249][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.535607][ T3917] SELinux: failed to load policy
[   38.542112][ T3913] FAULT_INJECTION: forcing a failure.
[   38.542112][ T3913] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   38.555253][ T3913] CPU: 1 UID: 0 PID: 3913 Comm: syz.3.164 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   38.555281][ T3913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   38.555360][ T3913] Call Trace:
[   38.555368][ T3913]  <TASK>
[   38.555377][ T3913]  __dump_stack+0x1d/0x30
[   38.555402][ T3913]  dump_stack_lvl+0xe8/0x140
[   38.555426][ T3913]  dump_stack+0x15/0x1b
[   38.555446][ T3913]  should_fail_ex+0x265/0x280
[   38.555567][ T3913]  should_fail+0xb/0x20
[   38.555602][ T3913]  should_fail_usercopy+0x1a/0x20
[   38.555626][ T3913]  _copy_from_user+0x1c/0xb0
[   38.555715][ T3913]  autofs_dev_ioctl+0xdd/0x6a0
[   38.555754][ T3913]  ? __pfx_autofs_dev_ioctl+0x10/0x10
[   38.555856][ T3913]  __se_sys_ioctl+0xce/0x140
[   38.555876][ T3913]  __x64_sys_ioctl+0x43/0x50
[   38.555894][ T3913]  x64_sys_call+0x1816/0x3000
[   38.555917][ T3913]  do_syscall_64+0xd2/0x200
[   38.555942][ T3913]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   38.556027][ T3913]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   38.556049][ T3913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   38.556073][ T3913] RIP: 0033:0x7ff30284eec9
[   38.556130][ T3913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   38.556150][ T3913] RSP: 002b:00007ff3012b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   38.556173][ T3913] RAX: ffffffffffffffda RBX: 00007ff302aa5fa0 RCX: 00007ff30284eec9
[   38.556188][ T3913] RDX: 0000200000000200 RSI: 00000000c018937e RDI: 0000000000000008
[   38.556203][ T3913] RBP: 00007ff3012b7090 R08: 0000000000000000 R09: 0000000000000000
[   38.556217][ T3913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   38.556231][ T3913] R13: 00007ff302aa6038 R14: 00007ff302aa5fa0 R15: 00007ffcb2e2f418
[   38.556301][ T3913]  </TASK>
[   38.786606][ T3928] loop2: detected capacity change from 0 to 1024
[   38.794463][ T3928] EXT4-fs: Ignoring removed nobh option
[   38.800093][ T3928] EXT4-fs: Ignoring removed bh option
[   38.819517][ T3928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.844800][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.869359][ T3936] netlink: 40 bytes leftover after parsing attributes in process `syz.2.172'.
[   38.875706][ T3937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.170'.
[   38.878433][ T3936] netlink: 40 bytes leftover after parsing attributes in process `syz.2.172'.
[   38.896315][ T3937] loop3: detected capacity change from 0 to 1024
[   38.903905][ T3937] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   38.926948][ T3939] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   39.359505][ T3953] SELinux: failed to load policy
[   40.732539][ T3987] SELinux: failed to load policy
[   40.787896][ T3994] netlink: 'syz.2.194': attribute type 21 has an invalid length.
[   40.835609][   T29] kauditd_printk_skb: 298 callbacks suppressed
[   40.835625][   T29] audit: type=1400 audit(1760323950.338:991): avc:  denied  { write } for  pid=3999 comm="syz.2.197" path="socket:[5945]" dev="sockfs" ino=5945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   40.873891][ T4001] loop0: detected capacity change from 0 to 1024
[   40.886087][ T4001] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   41.031958][ T4013] SELinux: failed to load policy
[   41.337685][   T29] audit: type=1326 audit(1760323950.838:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720783eec9 code=0x7ffc0000
[   41.360999][   T29] audit: type=1326 audit(1760323950.838:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720783eec9 code=0x7ffc0000
[   41.385065][   T29] audit: type=1326 audit(1760323950.888:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f720783eec9 code=0x7ffc0000
[   41.408448][   T29] audit: type=1326 audit(1760323950.888:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720783eec9 code=0x7ffc0000
[   41.431925][   T29] audit: type=1326 audit(1760323950.888:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720783eec9 code=0x7ffc0000
[   41.455416][   T29] audit: type=1326 audit(1760323950.888:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f720783eec9 code=0x7ffc0000
[   41.481450][   T29] audit: type=1326 audit(1760323950.988:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720783eec9 code=0x7ffc0000
[   41.503693][ T4028] FAULT_INJECTION: forcing a failure.
[   41.503693][ T4028] name failslab, interval 1, probability 0, space 0, times 0
[   41.504707][   T29] audit: type=1326 audit(1760323950.988:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720783eec9 code=0x7ffc0000
[   41.517258][ T4028] CPU: 0 UID: 0 PID: 4028 Comm: syz.1.208 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   41.517285][ T4028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   41.517306][ T4028] Call Trace:
[   41.517314][ T4028]  <TASK>
[   41.517322][ T4028]  __dump_stack+0x1d/0x30
[   41.517417][ T4028]  dump_stack_lvl+0xe8/0x140
[   41.517438][ T4028]  dump_stack+0x15/0x1b
[   41.517456][ T4028]  should_fail_ex+0x265/0x280
[   41.517495][ T4028]  should_failslab+0x8c/0xb0
[   41.517571][ T4028]  __kmalloc_node_track_caller_noprof+0xa5/0x580
[   41.517642][ T4028]  ? sidtab_sid2str_get+0xa0/0x130
[   41.517716][ T4028]  kmemdup_noprof+0x2b/0x70
[   41.517744][ T4028]  sidtab_sid2str_get+0xa0/0x130
[   41.517776][ T4028]  security_sid_to_context_core+0x1eb/0x2e0
[   41.517808][ T4028]  security_sid_to_context+0x27/0x40
[   41.517917][ T4028]  selinux_lsmprop_to_secctx+0x67/0xf0
[   41.517971][ T4028]  security_lsmprop_to_secctx+0x1a3/0x1c0
[   41.518012][ T4028]  audit_log_subj_ctx+0xa4/0x3e0
[   41.518035][ T4028]  ? skb_put+0xa9/0xf0
[   41.518123][ T4028]  audit_log_task_context+0x48/0x70
[   41.518196][ T4028]  audit_log_task+0xf4/0x250
[   41.518231][ T4028]  ? kstrtouint+0x76/0xc0
[   41.518273][ T4028]  audit_seccomp+0x61/0x100
[   41.518312][ T4028]  ? __seccomp_filter+0x82d/0x1250
[   41.518341][ T4028]  __seccomp_filter+0x83e/0x1250
[   41.518370][ T4028]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   41.518465][ T4028]  ? vfs_write+0x7e8/0x960
[   41.518490][ T4028]  ? __rcu_read_unlock+0x4f/0x70
[   41.518518][ T4028]  ? __fget_files+0x184/0x1c0
[   41.518549][ T4028]  __secure_computing+0x82/0x150
[   41.518629][ T4028]  syscall_trace_enter+0xcf/0x1e0
[   41.518659][ T4028]  do_syscall_64+0xac/0x200
[   41.518686][ T4028]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   41.518725][ T4028]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   41.518749][ T4028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.518774][ T4028] RIP: 0033:0x7f720783eec9
[   41.518792][ T4028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   41.518828][ T4028] RSP: 002b:00007f72062a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000094
[   41.518849][ T4028] RAX: ffffffffffffffda RBX: 00007f7207a95fa0 RCX: 00007f720783eec9
[   41.518863][ T4028] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000000
[   41.518876][ T4028] RBP: 00007f72062a7090 R08: 0000000000000000 R09: 0000000000000000
[   41.518890][ T4028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   41.518904][ T4028] R13: 00007f7207a96038 R14: 00007f7207a95fa0 R15: 00007ffc5584efc8
[   41.518944][ T4028]  </TASK>
[   41.518955][ T4028] audit: error in audit_log_subj_ctx
[   42.433112][ T4049] SELinux: failed to load policy
[   42.774949][ T4067] loop3: detected capacity change from 0 to 128
[   42.783347][ T4067] FAT-fs (loop3): error, corrupted directory (invalid entries)
[   42.791001][ T4067] FAT-fs (loop3): Filesystem has been set read-only
[   42.799475][ T4067] __nla_validate_parse: 4 callbacks suppressed
[   42.799489][ T4067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.224'.
[   42.893793][ T4074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.225'.
[   42.902828][ T4074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'.
[   43.020008][ T4046] syz.1.215 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[   43.034162][ T4046] CPU: 1 UID: 0 PID: 4046 Comm: syz.1.215 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   43.034195][ T4046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   43.034208][ T4046] Call Trace:
[   43.034215][ T4046]  <TASK>
[   43.034223][ T4046]  __dump_stack+0x1d/0x30
[   43.034321][ T4046]  dump_stack_lvl+0xe8/0x140
[   43.034343][ T4046]  dump_stack+0x15/0x1b
[   43.034400][ T4046]  dump_header+0x81/0x220
[   43.034440][ T4046]  oom_kill_process+0x342/0x400
[   43.034475][ T4046]  out_of_memory+0x979/0xb80
[   43.034576][ T4046]  try_charge_memcg+0x610/0xa10
[   43.034614][ T4046]  obj_cgroup_charge_pages+0xa6/0x150
[   43.034650][ T4046]  __memcg_kmem_charge_page+0x9f/0x170
[   43.034732][ T4046]  __alloc_frozen_pages_noprof+0x188/0x360
[   43.034851][ T4046]  alloc_pages_mpol+0xb3/0x260
[   43.034873][ T4046]  ? alloc_pages_noprof+0x61/0x130
[   43.034960][ T4046]  alloc_pages_noprof+0x90/0x130
[   43.034979][ T4046]  __vmalloc_node_range_noprof+0x7a5/0xed0
[   43.035027][ T4046]  __kvmalloc_node_noprof+0x483/0x670
[   43.035059][ T4046]  ? ip_set_alloc+0x24/0x30
[   43.035128][ T4046]  ? ip_set_alloc+0x24/0x30
[   43.035156][ T4046]  ? __kmalloc_cache_noprof+0x249/0x4a0
[   43.035188][ T4046]  ip_set_alloc+0x24/0x30
[   43.035279][ T4046]  hash_netiface_create+0x282/0x740
[   43.035367][ T4046]  ? __pfx_hash_netiface_create+0x10/0x10
[   43.035408][ T4046]  ip_set_create+0x3cc/0x970
[   43.035454][ T4046]  ? __nla_parse+0x40/0x60
[   43.035524][ T4046]  nfnetlink_rcv_msg+0x4c6/0x590
[   43.035572][ T4046]  netlink_rcv_skb+0x123/0x220
[   43.035605][ T4046]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   43.035650][ T4046]  nfnetlink_rcv+0x167/0x16c0
[   43.035671][ T4046]  ? kmem_cache_free+0xe4/0x3d0
[   43.035707][ T4046]  ? __kfree_skb+0x109/0x150
[   43.035760][ T4046]  ? nlmon_xmit+0x4f/0x60
[   43.035784][ T4046]  ? consume_skb+0x49/0x150
[   43.035809][ T4046]  ? nlmon_xmit+0x4f/0x60
[   43.035911][ T4046]  ? dev_hard_start_xmit+0x3b0/0x3e0
[   43.035945][ T4046]  ? __dev_queue_xmit+0x1200/0x2000
[   43.035975][ T4046]  ? __dev_queue_xmit+0x182/0x2000
[   43.036005][ T4046]  ? ref_tracker_free+0x37d/0x3e0
[   43.036183][ T4046]  ? __netlink_deliver_tap+0x4dc/0x500
[   43.036222][ T4046]  netlink_unicast+0x5c0/0x690
[   43.036322][ T4046]  netlink_sendmsg+0x58b/0x6b0
[   43.036353][ T4046]  ? __pfx_netlink_sendmsg+0x10/0x10
[   43.036462][ T4046]  __sock_sendmsg+0x145/0x180
[   43.036514][ T4046]  ____sys_sendmsg+0x31e/0x4e0
[   43.036548][ T4046]  ___sys_sendmsg+0x17b/0x1d0
[   43.036597][ T4046]  __x64_sys_sendmsg+0xd4/0x160
[   43.036634][ T4046]  x64_sys_call+0x191e/0x3000
[   43.036730][ T4046]  do_syscall_64+0xd2/0x200
[   43.036830][ T4046]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   43.036864][ T4046]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   43.036915][ T4046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.036941][ T4046] RIP: 0033:0x7f720783eec9
[   43.037005][ T4046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.037060][ T4046] RSP: 002b:00007f72062a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   43.037079][ T4046] RAX: ffffffffffffffda RBX: 00007f7207a95fa0 RCX: 00007f720783eec9
[   43.037092][ T4046] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005
[   43.037106][ T4046] RBP: 00007f72078c1f91 R08: 0000000000000000 R09: 0000000000000000
[   43.037121][ T4046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   43.037136][ T4046] R13: 00007f7207a96038 R14: 00007f7207a95fa0 R15: 00007ffc5584efc8
[   43.037157][ T4046]  </TASK>
[   43.037165][ T4046] memory: usage 307200kB, limit 307200kB, failcnt 304
[   43.388893][ T4046] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0
[   43.396872][ T4046] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[   43.404223][ T4046] Memory cgroup stats for /syz1:
[   43.404507][ T4046] cache 4096
[   43.412664][ T4046] rss 4096
[   43.415685][ T4046] shmem 0
[   43.418614][ T4046] mapped_file 4096
[   43.422505][ T4046] dirty 0
[   43.425441][ T4046] writeback 0
[   43.428789][ T4046] workingset_refault_anon 11
[   43.433398][ T4046] workingset_refault_file 130
[   43.438052][ T4046] swap 204800
[   43.441358][ T4046] swapcached 4096
[   43.444979][ T4046] pgpgin 12498
[   43.448332][ T4046] pgpgout 12496
[   43.451811][ T4046] pgfault 14532
[   43.455257][ T4046] pgmajfault 12
[   43.458691][ T4046] inactive_anon 0
[   43.462399][ T4046] active_anon 4096
[   43.466098][ T4046] inactive_file 0
[   43.469714][ T4046] active_file 0
[   43.473241][ T4046] unevictable 0
[   43.476812][ T4046] hierarchical_memory_limit 314572800
[   43.482212][ T4046] hierarchical_memsw_limit 9223372036854771712
[   43.487584][ T4079] SELinux: failed to load policy
[   43.488378][ T4046] total_cache 4096
[   43.488388][ T4046] total_rss 4096
[   43.488396][ T4046] total_shmem 0
[   43.504066][ T4046] total_mapped_file 4096
[   43.508307][ T4046] total_dirty 0
[   43.511823][ T4046] total_writeback 0
[   43.515635][ T4046] total_workingset_refault_anon 11
[   43.520740][ T4046] total_workingset_refault_file 130
[   43.525966][ T4046] total_swap 204800
[   43.529765][ T4046] total_swapcached 4096
[   43.533965][ T4046] total_pgpgin 12498
[   43.537856][ T4046] total_pgpgout 12496
[   43.541847][ T4046] total_pgfault 14532
[   43.545820][ T4046] total_pgmajfault 12
[   43.549777][ T4046] total_inactive_anon 0
[   43.553983][ T4046] total_active_anon 4096
[   43.558214][ T4046] total_inactive_file 0
[   43.562368][ T4046] total_active_file 0
[   43.566377][ T4046] total_unevictable 0
[   43.570374][ T4046] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.215,pid=4045,uid=0
[   43.585005][ T4046] Memory cgroup out of memory: Killed process 4045 (syz.1.215) total-vm:93956kB, anon-rss:1264kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[   43.602478][ T4045] syz.1.215 (4045) used greatest stack depth: 10088 bytes left
[   43.736817][ T4091] loop3: detected capacity change from 0 to 2048
[   43.761647][ T4046] syz.1.215 (4046) used greatest stack depth: 7496 bytes left
[   44.119470][ T4111] loop0: detected capacity change from 0 to 1024
[   44.126873][ T4111] EXT4-fs: Ignoring removed nobh option
[   44.132576][ T4111] EXT4-fs: Ignoring removed bh option
[   44.171441][ T4111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.199942][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.248273][ T4120] FAULT_INJECTION: forcing a failure.
[   44.248273][ T4120] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   44.261483][ T4120] CPU: 1 UID: 0 PID: 4120 Comm: syz.0.243 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   44.261576][ T4120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   44.261587][ T4120] Call Trace:
[   44.261593][ T4120]  <TASK>
[   44.261600][ T4120]  __dump_stack+0x1d/0x30
[   44.261623][ T4120]  dump_stack_lvl+0xe8/0x140
[   44.261644][ T4120]  dump_stack+0x15/0x1b
[   44.261662][ T4120]  should_fail_ex+0x265/0x280
[   44.261698][ T4120]  should_fail+0xb/0x20
[   44.261810][ T4120]  should_fail_usercopy+0x1a/0x20
[   44.261832][ T4120]  _copy_to_user+0x20/0xa0
[   44.261857][ T4120]  simple_read_from_buffer+0xb5/0x130
[   44.261880][ T4120]  proc_fail_nth_read+0x10e/0x150
[   44.261994][ T4120]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   44.262031][ T4120]  vfs_read+0x1a8/0x770
[   44.262052][ T4120]  ? __rcu_read_unlock+0x4f/0x70
[   44.262133][ T4120]  ? fdget_pos+0xed/0x1d0
[   44.262160][ T4120]  ksys_read+0xda/0x1a0
[   44.262252][ T4120]  __x64_sys_read+0x40/0x50
[   44.262275][ T4120]  x64_sys_call+0x27c0/0x3000
[   44.262297][ T4120]  do_syscall_64+0xd2/0x200
[   44.262340][ T4120]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   44.262368][ T4120]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   44.262422][ T4120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.262444][ T4120] RIP: 0033:0x7f6f3e3bd8dc
[   44.262459][ T4120] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   44.262477][ T4120] RSP: 002b:00007f6f3ce1f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   44.262574][ T4120] RAX: ffffffffffffffda RBX: 00007f6f3e615fa0 RCX: 00007f6f3e3bd8dc
[   44.262587][ T4120] RDX: 000000000000000f RSI: 00007f6f3ce1f0a0 RDI: 0000000000000004
[   44.262599][ T4120] RBP: 00007f6f3ce1f090 R08: 0000000000000000 R09: 0000000000000000
[   44.262612][ T4120] R10: 0000200000000840 R11: 0000000000000246 R12: 0000000000000001
[   44.262624][ T4120] R13: 00007f6f3e616038 R14: 00007f6f3e615fa0 R15: 00007ffff9fda1f8
[   44.262670][ T4120]  </TASK>
[   44.632172][ T4128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'.
[   44.681901][ T4128] hsr_slave_1 (unregistering): left promiscuous mode
[   44.871400][ T4143] FAULT_INJECTION: forcing a failure.
[   44.871400][ T4143] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   44.884746][ T4143] CPU: 1 UID: 0 PID: 4143 Comm: syz.3.254 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   44.884779][ T4143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   44.884793][ T4143] Call Trace:
[   44.884802][ T4143]  <TASK>
[   44.884870][ T4143]  __dump_stack+0x1d/0x30
[   44.884894][ T4143]  dump_stack_lvl+0xe8/0x140
[   44.884917][ T4143]  dump_stack+0x15/0x1b
[   44.884937][ T4143]  should_fail_ex+0x265/0x280
[   44.885000][ T4143]  should_fail_alloc_page+0xf2/0x100
[   44.885029][ T4143]  __alloc_frozen_pages_noprof+0xff/0x360
[   44.885072][ T4143]  alloc_pages_mpol+0xb3/0x260
[   44.885165][ T4143]  alloc_migration_target_by_mpol+0x11b/0x280
[   44.885197][ T4143]  migrate_pages_batch+0x349/0x1b60
[   44.885232][ T4143]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[   44.885407][ T4143]  ? __folio_put+0x5e/0x150
[   44.885509][ T4143]  ? hugetlb_cgroup_migrate+0x190/0x1b0
[   44.885615][ T4143]  migrate_pages+0xf55/0x1760
[   44.885678][ T4143]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[   44.885716][ T4143]  __se_sys_mbind+0x975/0xac0
[   44.885766][ T4143]  __x64_sys_mbind+0x78/0x90
[   44.885845][ T4143]  x64_sys_call+0x2936/0x3000
[   44.885871][ T4143]  do_syscall_64+0xd2/0x200
[   44.885938][ T4143]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   44.886050][ T4143]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   44.886077][ T4143]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.886100][ T4143] RIP: 0033:0x7ff30284eec9
[   44.886114][ T4143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   44.886185][ T4143] RSP: 002b:00007ff3012b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[   44.886273][ T4143] RAX: ffffffffffffffda RBX: 00007ff302aa5fa0 RCX: 00007ff30284eec9
[   44.886286][ T4143] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000
[   44.886298][ T4143] RBP: 00007ff3012b7090 R08: 0000000000000000 R09: 0000000000000002
[   44.886313][ T4143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   44.886328][ T4143] R13: 00007ff302aa6038 R14: 00007ff302aa5fa0 R15: 00007ffcb2e2f418
[   44.886393][ T4143]  </TASK>
[   44.886753][ T4142] netlink: 'syz.4.255': attribute type 1 has an invalid length.
[   44.941354][ T4146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.255'.
[   44.986669][ T4142] 8021q: adding VLAN 0 to HW filter on device bond1
[   45.168960][ T4146] bond1 (unregistering): Released all slaves
[   45.230226][ T4156] loop3: detected capacity change from 0 to 1024
[   45.237562][ T4151] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   45.274679][ T4156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.326961][ T4161] netlink: 'syz.1.261': attribute type 21 has an invalid length.
[   45.351216][ T4161] netlink: 156 bytes leftover after parsing attributes in process `syz.1.261'.
[   45.360222][ T4161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'.
[   45.439243][ T4166] loop1: detected capacity change from 0 to 1024
[   45.452579][ T4167] loop4: detected capacity change from 0 to 512
[   45.461307][ T4167] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   45.461853][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.502930][ T4166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.516056][ T4167] EXT4-fs (loop4): 1 truncate cleaned up
[   45.526852][ T4172] usb usb1: check_ctrlrecip: process 4172 (syz.3.264) requesting ep 01 but needs 81
[   45.536379][ T4172] usb usb1: usbfs: process 4172 (syz.3.264) did not claim interface 0 before use
[   45.551742][ T4166] FAULT_INJECTION: forcing a failure.
[   45.551742][ T4166] name failslab, interval 1, probability 0, space 0, times 0
[   45.551742][ T4167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.561717][ T4167] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.564406][ T4166] CPU: 0 UID: 0 PID: 4166 Comm: syz.1.263 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   45.564438][ T4166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   45.564452][ T4166] Call Trace:
[   45.564460][ T4166]  <TASK>
[   45.564496][ T4166]  __dump_stack+0x1d/0x30
[   45.564518][ T4166]  dump_stack_lvl+0xe8/0x140
[   45.564539][ T4166]  dump_stack+0x15/0x1b
[   45.564576][ T4166]  should_fail_ex+0x265/0x280
[   45.564615][ T4166]  should_failslab+0x8c/0xb0
[   45.564654][ T4166]  __kmalloc_noprof+0xa5/0x570
[   45.564685][ T4166]  ? copy_splice_read+0xc2/0x660
[   45.564708][ T4166]  copy_splice_read+0xc2/0x660
[   45.564734][ T4166]  ? __pfx_ext4_file_splice_read+0x10/0x10
[   45.564821][ T4166]  splice_direct_to_actor+0x290/0x680
[   45.564898][ T4166]  ? __pfx_direct_splice_actor+0x10/0x10
[   45.564925][ T4166]  do_splice_direct+0xda/0x150
[   45.564948][ T4166]  ? __pfx_direct_file_splice_eof+0x10/0x10
[   45.564989][ T4166]  do_sendfile+0x380/0x650
[   45.565024][ T4166]  __x64_sys_sendfile64+0x105/0x150
[   45.565123][ T4166]  x64_sys_call+0x2bb4/0x3000
[   45.565153][ T4166]  do_syscall_64+0xd2/0x200
[   45.565237][ T4166]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   45.565363][ T4166]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   45.565388][ T4166]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.565469][ T4166] RIP: 0033:0x7f720783eec9
[   45.565587][ T4166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   45.565681][ T4166] RSP: 002b:00007f72062a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   45.565700][ T4166] RAX: ffffffffffffffda RBX: 00007f7207a95fa0 RCX: 00007f720783eec9
[   45.565713][ T4166] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009
[   45.565728][ T4166] RBP: 00007f72062a7090 R08: 0000000000000000 R09: 0000000000000000
[   45.565741][ T4166] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001
[   45.565755][ T4166] R13: 00007f7207a96038 R14: 00007f7207a95fa0 R15: 00007ffc5584efc8
[   45.565814][ T4166]  </TASK>
[   45.797316][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.834510][ T4174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'.
[   45.874091][ T4174] hsr_slave_1 (unregistering): left promiscuous mode
[   45.883186][ T4167] sch_tbf: peakrate 4 is lower than or equals to rate 9 !
[   45.983716][   T29] kauditd_printk_skb: 176 callbacks suppressed
[   45.983732][   T29] audit: type=1400 audit(1760323955.488:1176): avc:  denied  { watch } for  pid=4181 comm="syz.1.267" path="/proc/134/task/135" dev="proc" ino=7132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   46.022143][ T4184] process 'syz.1.267' launched '/dev/fd/8' with NULL argv: empty string added
[   46.051211][   T29] audit: type=1400 audit(1760323955.538:1177): avc:  denied  { execute_no_trans } for  pid=4181 comm="syz.1.267" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   46.202448][   T29] audit: type=1400 audit(1760323955.708:1178): avc:  denied  { ioctl } for  pid=4186 comm="syz.1.269" path="socket:[7348]" dev="sockfs" ino=7348 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   46.228903][ T4187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'.
[   46.262180][   T29] audit: type=1326 audit(1760323955.758:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4190 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   46.271316][ T4187] team0: Port device team_slave_1 removed
[   46.285704][   T29] audit: type=1326 audit(1760323955.758:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4190 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   46.314793][   T29] audit: type=1326 audit(1760323955.758:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4190 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   46.338381][   T29] audit: type=1326 audit(1760323955.758:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4190 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   46.361699][   T29] audit: type=1326 audit(1760323955.758:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4190 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   46.385331][   T29] audit: type=1326 audit(1760323955.758:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4190 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   46.409816][   T29] audit: type=1326 audit(1760323955.758:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4190 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   46.450389][ T4191] 9pnet_fd: Insufficient options for proto=fd
[   46.491811][ T4198] netlink: 'syz.3.273': attribute type 1 has an invalid length.
[   46.514316][ T4198] 8021q: adding VLAN 0 to HW filter on device bond2
[   46.525065][ T4198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.273'.
[   46.543271][ T4198] bond2 (unregistering): Released all slaves
[   46.566344][ T4200] netlink: 'syz.1.274': attribute type 21 has an invalid length.
[   46.610366][ T4205] loop1: detected capacity change from 0 to 512
[   46.621978][ T4205] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   46.632961][ T4205] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   46.647891][ T4205] EXT4-fs (loop1): 1 truncate cleaned up
[   46.655847][ T4205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.222051][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.433073][ T4223] FAULT_INJECTION: forcing a failure.
[   47.433073][ T4223] name failslab, interval 1, probability 0, space 0, times 0
[   47.445845][ T4223] CPU: 0 UID: 0 PID: 4223 Comm: syz.1.283 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   47.445876][ T4223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   47.445891][ T4223] Call Trace:
[   47.445949][ T4223]  <TASK>
[   47.445957][ T4223]  __dump_stack+0x1d/0x30
[   47.445980][ T4223]  dump_stack_lvl+0xe8/0x140
[   47.446003][ T4223]  dump_stack+0x15/0x1b
[   47.446079][ T4223]  should_fail_ex+0x265/0x280
[   47.446117][ T4223]  should_failslab+0x8c/0xb0
[   47.446150][ T4223]  __kvmalloc_node_noprof+0x12e/0x670
[   47.446238][ T4223]  ? bpf_test_run_xdp_live+0x11e/0x1050
[   47.446269][ T4223]  bpf_test_run_xdp_live+0x11e/0x1050
[   47.446302][ T4223]  ? __pfx_autoremove_wake_function+0x10/0x10
[   47.446329][ T4223]  ? 0xffffffffa0205240
[   47.446404][ T4223]  ? 0xffffffffa0205240
[   47.446416][ T4223]  ? 0xffffffffa0205240
[   47.446431][ T4223]  ? bpf_dispatcher_change_prog+0x6ec/0x7f0
[   47.446460][ T4223]  ? 0xffffffffa0205240
[   47.446482][ T4223]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[   47.446519][ T4223]  bpf_prog_test_run_xdp+0x59a/0x970
[   47.446590][ T4223]  ? __rcu_read_unlock+0x4f/0x70
[   47.446623][ T4223]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   47.446733][ T4223]  bpf_prog_test_run+0x22a/0x390
[   47.446754][ T4223]  __sys_bpf+0x4c0/0x7c0
[   47.446794][ T4223]  __x64_sys_bpf+0x41/0x50
[   47.446828][ T4223]  x64_sys_call+0x2aee/0x3000
[   47.446850][ T4223]  do_syscall_64+0xd2/0x200
[   47.446877][ T4223]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   47.446910][ T4223]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   47.447056][ T4223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.447150][ T4223] RIP: 0033:0x7f720783eec9
[   47.447167][ T4223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   47.447188][ T4223] RSP: 002b:00007f72062a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   47.447207][ T4223] RAX: ffffffffffffffda RBX: 00007f7207a95fa0 RCX: 00007f720783eec9
[   47.447219][ T4223] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[   47.447292][ T4223] RBP: 00007f72062a7090 R08: 0000000000000000 R09: 0000000000000000
[   47.447307][ T4223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.447320][ T4223] R13: 00007f7207a96038 R14: 00007f7207a95fa0 R15: 00007ffc5584efc8
[   47.447338][ T4223]  </TASK>
[   47.703940][ T4226] netlink: 'syz.4.284': attribute type 10 has an invalid length.
[   47.904649][ T4229] loop4: detected capacity change from 0 to 136
[   47.941135][ T4229] Attempt to read inode for relocated directory
[   47.949132][ T4229] __nla_validate_parse: 3 callbacks suppressed
[   47.949149][ T4229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.284'.
[   48.001841][ T4233] netlink: 'syz.1.287': attribute type 1 has an invalid length.
[   48.052527][ T4236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.287'.
[   48.056239][ T4233] 8021q: adding VLAN 0 to HW filter on device bond1
[   48.082324][ T4236] bond1 (unregistering): Released all slaves
[   48.743830][ T4248] netlink: 32 bytes leftover after parsing attributes in process `syz.1.290'.
[   48.795490][ T4249] loop4: detected capacity change from 0 to 1024
[   48.861658][ T4249] EXT4-fs: Ignoring removed nobh option
[   48.972156][ T4249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.174487][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.214047][ T4254] netlink: 72 bytes leftover after parsing attributes in process `syz.4.292'.
[   49.222997][ T4254] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   49.476206][ T4257] netlink: 660 bytes leftover after parsing attributes in process `syz.1.293'.
[   49.712009][ T4264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   49.744395][ T4265] netlink: 132 bytes leftover after parsing attributes in process `syz.1.296'.
[   50.256395][ T4277] loop1: detected capacity change from 0 to 512
[   50.373549][ T4277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.441043][ T4277] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.081187][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.132642][ T4308] loop1: detected capacity change from 0 to 128
[   51.140713][   T29] kauditd_printk_skb: 210 callbacks suppressed
[   51.140728][   T29] audit: type=1400 audit(1760323960.638:1396): avc:  denied  { mount } for  pid=4307 comm="syz.1.310" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   51.210166][   T29] audit: type=1400 audit(1760323960.678:1397): avc:  denied  { unmount } for  pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   51.239006][   T29] audit: type=1400 audit(1760323960.738:1398): avc:  denied  { relabelfrom } for  pid=4313 comm="syz.1.313" name="" dev="pipefs" ino=8376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   51.413723][ T4319] FAULT_INJECTION: forcing a failure.
[   51.413723][ T4319] name failslab, interval 1, probability 0, space 0, times 0
[   51.426438][ T4319] CPU: 1 UID: 0 PID: 4319 Comm: syz.4.315 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   51.426467][ T4319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   51.426482][ T4319] Call Trace:
[   51.426489][ T4319]  <TASK>
[   51.426497][ T4319]  __dump_stack+0x1d/0x30
[   51.426551][ T4319]  dump_stack_lvl+0xe8/0x140
[   51.426575][ T4319]  dump_stack+0x15/0x1b
[   51.426595][ T4319]  should_fail_ex+0x265/0x280
[   51.426688][ T4319]  should_failslab+0x8c/0xb0
[   51.426743][ T4319]  __kvmalloc_node_noprof+0x12e/0x670
[   51.426776][ T4319]  ? traverse+0xa2/0x3a0
[   51.426813][ T4319]  traverse+0xa2/0x3a0
[   51.426846][ T4319]  ? terminate_walk+0x27f/0x2a0
[   51.426881][ T4319]  seq_read_iter+0x85f/0x950
[   51.426980][ T4319]  ? _parse_integer_limit+0x170/0x190
[   51.427097][ T4319]  seq_read+0x270/0x2b0
[   51.427137][ T4319]  ? __pfx_seq_read+0x10/0x10
[   51.427204][ T4319]  proc_reg_read+0x128/0x1c0
[   51.427286][ T4319]  ? __pfx_proc_reg_read+0x10/0x10
[   51.427334][ T4319]  vfs_readv+0x3fb/0x690
[   51.427374][ T4319]  __x64_sys_preadv+0xfd/0x1c0
[   51.427407][ T4319]  x64_sys_call+0x282e/0x3000
[   51.427433][ T4319]  do_syscall_64+0xd2/0x200
[   51.427486][ T4319]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   51.427519][ T4319]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   51.427600][ T4319]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.427626][ T4319] RIP: 0033:0x7f8b4490eec9
[   51.427644][ T4319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   51.427669][ T4319] RSP: 002b:00007f8b4336f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[   51.427691][ T4319] RAX: ffffffffffffffda RBX: 00007f8b44b65fa0 RCX: 00007f8b4490eec9
[   51.427707][ T4319] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000007
[   51.427739][ T4319] RBP: 00007f8b4336f090 R08: 0000000000000000 R09: 0000000000000000
[   51.427751][ T4319] R10: 000000000000003b R11: 0000000000000246 R12: 0000000000000001
[   51.427763][ T4319] R13: 00007f8b44b66038 R14: 00007f8b44b65fa0 R15: 00007fff1b8ed618
[   51.427781][ T4319]  </TASK>
[   51.427920][   T29] audit: type=1400 audit(1760323960.918:1399): avc:  denied  { write } for  pid=4318 comm="syz.4.315" name="netstat" dev="proc" ino=4026532422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   51.728011][   T29] audit: type=1400 audit(1760323961.228:1400): avc:  denied  { create } for  pid=4321 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   51.747623][   T29] audit: type=1400 audit(1760323961.228:1401): avc:  denied  { bind } for  pid=4321 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   51.772698][ T4324] loop4: detected capacity change from 0 to 512
[   51.809516][   T29] audit: type=1400 audit(1760323961.278:1402): avc:  denied  { listen } for  pid=4321 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   51.829122][   T29] audit: type=1400 audit(1760323961.278:1403): avc:  denied  { setopt } for  pid=4321 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   51.848670][   T29] audit: type=1400 audit(1760323961.278:1404): avc:  denied  { connect } for  pid=4321 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   51.868321][   T29] audit: type=1400 audit(1760323961.278:1405): avc:  denied  { write } for  pid=4321 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   51.894357][ T4326] netlink: 660 bytes leftover after parsing attributes in process `syz.1.318'.
[   51.901470][ T4324] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   51.969808][ T4329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'.
[   52.003965][ T3311] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   52.039278][ T4330] bridge0: entered promiscuous mode
[   52.044900][ T4330] macvtap1: entered allmulticast mode
[   52.050467][ T4330] bridge0: entered allmulticast mode
[   52.072497][ T4330] bridge0: port 1(macvtap1) entered blocking state
[   52.079099][ T4330] bridge0: port 1(macvtap1) entered disabled state
[   52.114622][ T4330] bridge0: left allmulticast mode
[   52.120151][ T4330] bridge0: left promiscuous mode
[   52.172495][ T4333] tipc: Started in network mode
[   52.177411][ T4333] tipc: Node identity 5aef9f38435d, cluster identity 4711
[   52.184667][ T4333] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   52.208382][ T4332] tipc: Disabling bearer <eth:syzkaller0>
[   52.382451][ T4344] FAULT_INJECTION: forcing a failure.
[   52.382451][ T4344] name failslab, interval 1, probability 0, space 0, times 0
[   52.395148][ T4344] CPU: 1 UID: 0 PID: 4344 Comm: syz.4.326 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   52.395176][ T4344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   52.395192][ T4344] Call Trace:
[   52.395206][ T4344]  <TASK>
[   52.395281][ T4344]  __dump_stack+0x1d/0x30
[   52.395302][ T4344]  dump_stack_lvl+0xe8/0x140
[   52.395324][ T4344]  dump_stack+0x15/0x1b
[   52.395344][ T4344]  should_fail_ex+0x265/0x280
[   52.395385][ T4344]  should_failslab+0x8c/0xb0
[   52.395498][ T4344]  __kmalloc_noprof+0xa5/0x570
[   52.395527][ T4344]  ? security_bpf_prog_load+0x60/0x140
[   52.395632][ T4344]  ? strncpy_from_user+0x13a/0x230
[   52.395661][ T4344]  security_bpf_prog_load+0x60/0x140
[   52.395705][ T4344]  bpf_prog_load+0xef8/0x1100
[   52.395808][ T4344]  ? security_bpf+0x2b/0x90
[   52.395832][ T4344]  __sys_bpf+0x469/0x7c0
[   52.395875][ T4344]  __x64_sys_bpf+0x41/0x50
[   52.395950][ T4344]  x64_sys_call+0x2aee/0x3000
[   52.395973][ T4344]  do_syscall_64+0xd2/0x200
[   52.396070][ T4344]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   52.396105][ T4344]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   52.396127][ T4344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.396185][ T4344] RIP: 0033:0x7f8b4490eec9
[   52.396209][ T4344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   52.396230][ T4344] RSP: 002b:00007f8b4336f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   52.396253][ T4344] RAX: ffffffffffffffda RBX: 00007f8b44b65fa0 RCX: 00007f8b4490eec9
[   52.396299][ T4344] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005
[   52.396312][ T4344] RBP: 00007f8b4336f090 R08: 0000000000000000 R09: 0000000000000000
[   52.396327][ T4344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   52.396341][ T4344] R13: 00007f8b44b66038 R14: 00007f8b44b65fa0 R15: 00007fff1b8ed618
[   52.396362][ T4344]  </TASK>
[   53.205239][ T4360] netlink: 'syz.1.331': attribute type 1 has an invalid length.
[   53.218972][ T4360] 8021q: adding VLAN 0 to HW filter on device bond1
[   53.228772][ T4360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.331'.
[   53.272346][ T4360] bond1 (unregistering): Released all slaves
[   53.349485][ T4356] loop4: detected capacity change from 0 to 512
[   53.439103][ T4356] kernel read not supported for file /!selinuxwk1�m�9ɞ*T����#j����Y��mV�vm(p�-QZ#�{�� (pid: 4356 comm: syz.4.330)
[   53.587841][ T4372] loop1: detected capacity change from 0 to 512
[   53.598098][ T4372] ALSA: seq fatal error: cannot create timer (-22)
[   53.654811][ T4377] loop4: detected capacity change from 0 to 2048
[   53.678610][ T4375] loop1: detected capacity change from 0 to 2048
[   53.695282][ T4377]  loop4: p2 p3 p7
[   53.755327][ T4375]  loop1: p2 p3 p7
[   54.257665][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'.
[   54.271735][ T4391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'.
[   54.425786][ T4401] loop1: detected capacity change from 0 to 512
[   54.441810][ T4401] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   54.466784][ T4401] EXT4-fs (loop1): 1 truncate cleaned up
[   54.474132][ T4401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.699444][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.755444][ T4417] loop1: detected capacity change from 0 to 512
[   54.762680][ T4417] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   54.773686][ T4417] EXT4-fs (loop1): 1 truncate cleaned up
[   54.780577][ T4417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.952776][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.125981][ T4432] loop1: detected capacity change from 0 to 512
[   55.186299][ T4436] af_packet: tpacket_rcv: packet too big, clamped from 65075 to 3944. macoff=96
[   55.277945][ T4438] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.624495][ T4454] FAULT_INJECTION: forcing a failure.
[   55.624495][ T4454] name failslab, interval 1, probability 0, space 0, times 0
[   55.637213][ T4454] CPU: 0 UID: 0 PID: 4454 Comm: syz.1.362 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   55.637247][ T4454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   55.637263][ T4454] Call Trace:
[   55.637271][ T4454]  <TASK>
[   55.637281][ T4454]  __dump_stack+0x1d/0x30
[   55.637306][ T4454]  dump_stack_lvl+0xe8/0x140
[   55.637329][ T4454]  dump_stack+0x15/0x1b
[   55.637377][ T4454]  should_fail_ex+0x265/0x280
[   55.637418][ T4454]  should_failslab+0x8c/0xb0
[   55.637448][ T4454]  kmem_cache_alloc_noprof+0x50/0x480
[   55.637509][ T4454]  ? copy_mm+0xc6/0x370
[   55.637568][ T4454]  copy_mm+0xc6/0x370
[   55.637599][ T4454]  copy_process+0xd08/0x2000
[   55.637707][ T4454]  kernel_clone+0x16c/0x5c0
[   55.637741][ T4454]  __x64_sys_clone+0xe6/0x120
[   55.637822][ T4454]  x64_sys_call+0x119c/0x3000
[   55.637844][ T4454]  do_syscall_64+0xd2/0x200
[   55.637872][ T4454]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   55.637906][ T4454]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   55.637966][ T4454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.637989][ T4454] RIP: 0033:0x7f720783eec9
[   55.638007][ T4454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   55.638027][ T4454] RSP: 002b:00007f7206264fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[   55.638051][ T4454] RAX: ffffffffffffffda RBX: 00007f7207a96180 RCX: 00007f720783eec9
[   55.638131][ T4454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[   55.638145][ T4454] RBP: 00007f7206265090 R08: 0000000000000000 R09: 0000000000000000
[   55.638160][ T4454] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
[   55.638175][ T4454] R13: 00007f7207a96218 R14: 00007f7207a96180 R15: 00007ffc5584efc8
[   55.638277][ T4454]  </TASK>
[   55.970317][ T4458] x_tables: ip_tables: icmp match: only valid for protocol 1
[   55.987258][ T4458] netlink: 536 bytes leftover after parsing attributes in process `syz.4.365'.
[   56.007757][ T4458] netlink: 32 bytes leftover after parsing attributes in process `syz.4.365'.
[   56.325497][   T29] kauditd_printk_skb: 181 callbacks suppressed
[   56.325512][   T29] audit: type=1326 audit(1760323965.828:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   56.366151][   T29] audit: type=1326 audit(1760323965.868:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   56.389655][   T29] audit: type=1326 audit(1760323965.868:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   56.413095][   T29] audit: type=1326 audit(1760323965.868:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   56.436557][   T29] audit: type=1326 audit(1760323965.868:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   56.459977][   T29] audit: type=1326 audit(1760323965.868:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   56.483303][   T29] audit: type=1326 audit(1760323965.868:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   56.506965][   T29] audit: type=1326 audit(1760323965.868:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   56.530329][   T29] audit: type=1326 audit(1760323965.868:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   56.553694][   T29] audit: type=1326 audit(1760323965.868:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   56.632432][ T4473] netlink: 16 bytes leftover after parsing attributes in process `syz.1.370'.
[   56.949494][ T4485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.374'.
[   57.079753][ T4490] netlink: 4 bytes leftover after parsing attributes in process `'.
[   57.271976][ T4502] FAULT_INJECTION: forcing a failure.
[   57.271976][ T4502] name failslab, interval 1, probability 0, space 0, times 0
[   57.284976][ T4502] CPU: 1 UID: 0 PID: 4502 Comm: syz.1.380 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   57.285008][ T4502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   57.285034][ T4502] Call Trace:
[   57.285040][ T4502]  <TASK>
[   57.285049][ T4502]  __dump_stack+0x1d/0x30
[   57.285095][ T4502]  dump_stack_lvl+0xe8/0x140
[   57.285119][ T4502]  dump_stack+0x15/0x1b
[   57.285138][ T4502]  should_fail_ex+0x265/0x280
[   57.285177][ T4502]  should_failslab+0x8c/0xb0
[   57.285204][ T4502]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[   57.285308][ T4502]  ? __alloc_skb+0x101/0x320
[   57.285375][ T4502]  __alloc_skb+0x101/0x320
[   57.285399][ T4502]  rtmsg_ifinfo_build_skb+0x5f/0x1b0
[   57.285547][ T4502]  ? rtnetlink_event+0x1b/0x200
[   57.285585][ T4502]  ? __pfx_rtnetlink_event+0x10/0x10
[   57.285667][ T4502]  rtnetlink_event+0x18c/0x200
[   57.285706][ T4502]  raw_notifier_call_chain+0x6f/0x1b0
[   57.285762][ T4502]  ? call_netdevice_notifiers_info+0x9c/0x100
[   57.285785][ T4502]  call_netdevice_notifiers_info+0xae/0x100
[   57.285806][ T4502]  netif_change_tx_queue_len+0xba/0x170
[   57.285909][ T4502]  dev_change_tx_queue_len+0xc0/0x170
[   57.285938][ T4502]  dev_ifsioc+0x1a1/0xaa0
[   57.285988][ T4502]  ? __rcu_read_unlock+0x4f/0x70
[   57.286019][ T4502]  dev_ioctl+0x70a/0x960
[   57.286060][ T4502]  sock_do_ioctl+0x197/0x220
[   57.286083][ T4502]  sock_ioctl+0x41b/0x610
[   57.286186][ T4502]  ? __pfx_sock_ioctl+0x10/0x10
[   57.286239][ T4502]  __se_sys_ioctl+0xce/0x140
[   57.286258][ T4502]  __x64_sys_ioctl+0x43/0x50
[   57.286330][ T4502]  x64_sys_call+0x1816/0x3000
[   57.286352][ T4502]  do_syscall_64+0xd2/0x200
[   57.286377][ T4502]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   57.286425][ T4502]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   57.286451][ T4502]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.286505][ T4502] RIP: 0033:0x7f720783eec9
[   57.286520][ T4502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   57.286538][ T4502] RSP: 002b:00007f72062a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   57.286556][ T4502] RAX: ffffffffffffffda RBX: 00007f7207a95fa0 RCX: 00007f720783eec9
[   57.286571][ T4502] RDX: 0000200000000100 RSI: 0000000000008943 RDI: 0000000000000008
[   57.286586][ T4502] RBP: 00007f72062a7090 R08: 0000000000000000 R09: 0000000000000000
[   57.286601][ T4502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   57.286660][ T4502] R13: 00007f7207a96038 R14: 00007f7207a95fa0 R15: 00007ffc5584efc8
[   57.286680][ T4502]  </TASK>
[   57.544335][ T4502] macvtap0: refused to change device tx_queue_len
[   57.612077][ T4508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.382'.
[   57.703476][ T4511] kernel read not supported for file /!selinuxwk1�m�9ɞ*T����#j����Y��mV�vm(p�-QZ#�{�� (pid: 4511 comm: syz.1.383)
[   58.582943][ T4532] sg_write: data in/out 8156/14 bytes for SCSI command 0x0-- guessing data in;
[   58.582943][ T4532]    program syz.4.393 not setting count and/or reply_len properly
[   58.627814][ T4536] kernel read not supported for file /!selinuxwk1�m�9ɞ*T����#j����Y��mV�vm(p�-QZ#�{�� (pid: 4536 comm: syz.4.394)
[   58.699884][ T4538] FAULT_INJECTION: forcing a failure.
[   58.699884][ T4538] name failslab, interval 1, probability 0, space 0, times 0
[   58.712620][ T4538] CPU: 1 UID: 0 PID: 4538 Comm: syz.1.395 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   58.712699][ T4538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   58.712711][ T4538] Call Trace:
[   58.712718][ T4538]  <TASK>
[   58.712726][ T4538]  __dump_stack+0x1d/0x30
[   58.712748][ T4538]  dump_stack_lvl+0xe8/0x140
[   58.712768][ T4538]  dump_stack+0x15/0x1b
[   58.712865][ T4538]  should_fail_ex+0x265/0x280
[   58.712976][ T4538]  should_failslab+0x8c/0xb0
[   58.713003][ T4538]  kmem_cache_alloc_noprof+0x50/0x480
[   58.713031][ T4538]  ? getname_flags+0x80/0x3b0
[   58.713061][ T4538]  getname_flags+0x80/0x3b0
[   58.713131][ T4538]  __x64_sys_link+0x33/0x70
[   58.713155][ T4538]  x64_sys_call+0x12a7/0x3000
[   58.713218][ T4538]  do_syscall_64+0xd2/0x200
[   58.713243][ T4538]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   58.713271][ T4538]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   58.713293][ T4538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.713386][ T4538] RIP: 0033:0x7f720783eec9
[   58.713402][ T4538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.713420][ T4538] RSP: 002b:00007f72062a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056
[   58.713440][ T4538] RAX: ffffffffffffffda RBX: 00007f7207a95fa0 RCX: 00007f720783eec9
[   58.713453][ T4538] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000680
[   58.713486][ T4538] RBP: 00007f72062a7090 R08: 0000000000000000 R09: 0000000000000000
[   58.713499][ T4538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.713512][ T4538] R13: 00007f7207a96038 R14: 00007f7207a95fa0 R15: 00007ffc5584efc8
[   58.713530][ T4538]  </TASK>
[   59.023630][ T4549] loop4: detected capacity change from 0 to 128
[   59.050496][ T4548] syz.4.400: attempt to access beyond end of device
[   59.050496][ T4548] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128
[   59.087450][ T4548] syz.4.400: attempt to access beyond end of device
[   59.087450][ T4548] loop4: rw=2049, sector=146, nr_sectors = 6 limit=128
[   59.115055][ T4548] syz.4.400: attempt to access beyond end of device
[   59.115055][ T4548] loop4: rw=2049, sector=150, nr_sectors = 2 limit=128
[   59.128498][ T4548] Buffer I/O error on dev loop4, logical block 75, lost async page write
[   59.161184][ T4548] syz.4.400: attempt to access beyond end of device
[   59.161184][ T4548] loop4: rw=2049, sector=152, nr_sectors = 2 limit=128
[   59.174557][ T4548] Buffer I/O error on dev loop4, logical block 76, lost async page write
[   59.210483][ T4548] syz.4.400: attempt to access beyond end of device
[   59.210483][ T4548] loop4: rw=2049, sector=170, nr_sectors = 6 limit=128
[   59.235905][ T4548] syz.4.400: attempt to access beyond end of device
[   59.235905][ T4548] loop4: rw=2049, sector=174, nr_sectors = 2 limit=128
[   59.249298][ T4548] Buffer I/O error on dev loop4, logical block 87, lost async page write
[   59.261132][ T4548] syz.4.400: attempt to access beyond end of device
[   59.261132][ T4548] loop4: rw=2049, sector=176, nr_sectors = 2 limit=128
[   59.274538][ T4548] Buffer I/O error on dev loop4, logical block 88, lost async page write
[   59.298145][ T4548] syz.4.400: attempt to access beyond end of device
[   59.298145][ T4548] loop4: rw=2049, sector=178, nr_sectors = 6 limit=128
[   59.312093][ T4548] syz.4.400: attempt to access beyond end of device
[   59.312093][ T4548] loop4: rw=2049, sector=182, nr_sectors = 2 limit=128
[   59.325491][ T4548] Buffer I/O error on dev loop4, logical block 91, lost async page write
[   59.351142][ T4548] syz.4.400: attempt to access beyond end of device
[   59.351142][ T4548] loop4: rw=2049, sector=184, nr_sectors = 2 limit=128
[   59.364559][ T4548] Buffer I/O error on dev loop4, logical block 92, lost async page write
[   59.374510][ T4548] Buffer I/O error on dev loop4, logical block 103, lost async page write
[   59.384807][ T4548] Buffer I/O error on dev loop4, logical block 104, lost async page write
[   59.397007][ T1693] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.408777][ T4548] Buffer I/O error on dev loop4, logical block 107, lost async page write
[   59.417463][ T4548] Buffer I/O error on dev loop4, logical block 108, lost async page write
[   59.490903][ T1693] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.546620][ T4550] chnl_net:caif_netlink_parms(): no params data found
[   59.582827][ T1693] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.692240][ T1693] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.762408][ T4550] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.769591][ T4550] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.778216][ T4550] bridge_slave_0: entered allmulticast mode
[   59.785183][ T4550] bridge_slave_0: entered promiscuous mode
[   59.792442][ T4550] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.799529][ T4550] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.814209][ T4550] bridge_slave_1: entered allmulticast mode
[   59.828895][ T4550] bridge_slave_1: entered promiscuous mode
[   59.866240][ T4581] syzkaller0: entered promiscuous mode
[   59.871788][ T4581] syzkaller0: entered allmulticast mode
[   59.919268][ T4550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.947678][ T4550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.003479][ T4550] team0: Port device team_slave_0 added
[   60.013405][ T4550] team0: Port device team_slave_1 added
[   60.064455][ T1693] bridge_slave_1: left allmulticast mode
[   60.070201][ T1693] bridge_slave_1: left promiscuous mode
[   60.075920][ T1693] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.091727][ T1693] bridge_slave_0: left allmulticast mode
[   60.097511][ T1693] bridge_slave_0: left promiscuous mode
[   60.103404][ T1693] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.241644][ T1693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   60.252050][ T1693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   60.261593][ T1693] bond0 (unregistering): Released all slaves
[   60.270154][ T4550] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.277246][ T4550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.303420][ T4550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.334405][ T4550] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.341457][ T4550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.367413][ T4550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.393931][ T1693] hsr_slave_0: left promiscuous mode
[   60.399836][ T1693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.407292][ T1693] batman_adv: batadv0: Removing interface: batadv_slave_0
[   60.421457][ T1693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.428926][ T1693] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.449174][ T1693] veth1_macvtap: left promiscuous mode
[   60.461161][ T1693] veth0_macvtap: left promiscuous mode
[   60.466677][ T1693] veth1_vlan: left promiscuous mode
[   60.482162][ T1693] veth0_vlan: left promiscuous mode
[   60.589787][ T1693] team0 (unregistering): Port device team_slave_1 removed
[   60.607299][ T1693] team0 (unregistering): Port device team_slave_0 removed
[   60.678743][ T4612] netlink: 32 bytes leftover after parsing attributes in process `syz.4.415'.
[   60.718425][ T4550] hsr_slave_0: entered promiscuous mode
[   60.724859][ T4550] hsr_slave_1: entered promiscuous mode
[   60.730709][ T4550] debugfs: 'hsr0' already exists in 'hsr'
[   60.736503][ T4550] Cannot create hsr debugfs directory
[   60.751377][ T4564] chnl_net:caif_netlink_parms(): no params data found
[   60.889627][ T4564] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.896796][ T4564] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.904162][ T4564] bridge_slave_0: entered allmulticast mode
[   60.919183][ T4564] bridge_slave_0: entered promiscuous mode
[   60.932025][ T4564] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.939153][ T4564] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.961982][ T4564] bridge_slave_1: entered allmulticast mode
[   60.981379][ T4564] bridge_slave_1: entered promiscuous mode
[   61.122985][ T4564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.152182][ T4564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.229394][ T1693] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.272208][ T4564] team0: Port device team_slave_0 added
[   61.278945][ T4564] team0: Port device team_slave_1 added
[   61.295554][ T4550] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   61.314580][ T4550] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   61.325116][ T1693] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.376971][ T4639] xt_TPROXY: Can be used only with -p tcp or -p udp
[   61.389982][   T29] kauditd_printk_skb: 294 callbacks suppressed
[   61.390069][   T29] audit: type=1326 audit(1760323970.888:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4636 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   61.419692][   T29] audit: type=1326 audit(1760323970.888:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4636 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   61.444482][ T4550] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   61.474165][ T1693] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.486654][ T4550] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   61.495964][ T4564] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.503108][ T4564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.529056][ T4564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.540480][ T4564] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.547491][ T4564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.573530][ T4564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.601454][ T1693] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.648619][ T4564] hsr_slave_0: entered promiscuous mode
[   61.655942][ T4564] hsr_slave_1: entered promiscuous mode
[   61.662004][ T4564] debugfs: 'hsr0' already exists in 'hsr'
[   61.667901][ T4564] Cannot create hsr debugfs directory
[   61.719644][ T4550] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.754562][ T1693] bridge_slave_1: left allmulticast mode
[   61.760292][ T1693] bridge_slave_1: left promiscuous mode
[   61.766662][ T1693] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.775177][ T1693] bridge_slave_0: left allmulticast mode
[   61.780842][ T1693] bridge_slave_0: left promiscuous mode
[   61.786572][ T1693] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.883961][ T1693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   61.896538][ T1693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   61.908382][ T1693] bond0 (unregistering): Released all slaves
[   61.937918][ T4550] 8021q: adding VLAN 0 to HW filter on device team0
[   61.954400][  T137] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.961512][  T137] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.980900][ T1693] hsr_slave_0: left promiscuous mode
[   61.986802][ T1693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.994259][ T1693] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.003769][ T1693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.011318][ T1693] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.021960][ T1693] veth1_macvtap: left promiscuous mode
[   62.027542][ T1693] veth0_macvtap: left promiscuous mode
[   62.033215][ T1693] veth1_vlan: left promiscuous mode
[   62.038504][ T1693] veth0_vlan: left promiscuous mode
[   62.091587][ T1693] team0 (unregistering): Port device team_slave_1 removed
[   62.100645][ T1693] team0 (unregistering): Port device team_slave_0 removed
[   62.139071][  T137] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.146178][  T137] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.227110][ T4564] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   62.245580][ T4564] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   62.252570][ T4676] capability: warning: `syz.4.431' uses 32-bit capabilities (legacy support in use)
[   62.264245][   T29] audit: type=1400 audit(1760323971.768:1893): avc:  denied  { create } for  pid=4675 comm="syz.4.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   62.284857][ T4564] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   62.299961][   T29] audit: type=1326 audit(1760323971.798:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   62.323467][   T29] audit: type=1326 audit(1760323971.798:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   62.346830][   T29] audit: type=1326 audit(1760323971.798:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   62.378779][ T4564] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   62.393730][   T29] audit: type=1326 audit(1760323971.798:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   62.417720][   T29] audit: type=1326 audit(1760323971.798:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   62.417752][   T29] audit: type=1326 audit(1760323971.798:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   62.417845][   T29] audit: type=1326 audit(1760323971.798:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4490eec9 code=0x7ffc0000
[   62.448361][ T4655] chnl_net:caif_netlink_parms(): no params data found
[   62.467092][ T4684] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.532880][ T4564] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.545918][ T4564] 8021q: adding VLAN 0 to HW filter on device team0
[   62.570417][ T4550] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.580765][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.587889][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.656478][ T4699] usb usb1: check_ctrlrecip: process 4699 (syz.1.436) requesting ep 01 but needs 81
[   62.665991][ T4699] usb usb1: usbfs: process 4699 (syz.1.436) did not claim interface 0 before use
[   62.677544][ T4564] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   62.687942][ T4564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.708857][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.715971][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.760037][ T1693] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.778874][ T4655] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.786479][ T4655] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.794611][ T4655] bridge_slave_0: entered allmulticast mode
[   62.801334][ T4655] bridge_slave_0: entered promiscuous mode
[   62.808991][ T4655] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.816354][ T4655] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.823647][ T4655] bridge_slave_1: entered allmulticast mode
[   62.830154][ T4655] bridge_slave_1: entered promiscuous mode
[   62.872517][ T1693] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.895508][ T4655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.914096][ T4723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.440'.
[   62.927495][ T1693] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.927636][ T4717] loop4: detected capacity change from 0 to 512
[   62.947756][ T4564] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.954987][ T4717] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[   62.973320][ T4655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.977191][ T4744] loop1: detected capacity change from 0 to 2048
[   62.992519][ T1693] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.992856][ T4744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.045850][ T4655] team0: Port device team_slave_0 added
[   63.049040][ T4744] EXT4-fs error (device loop1): ext4_ext_precache:649: inode #2: comm syz.1.445: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   63.069346][ T4655] team0: Port device team_slave_1 added
[   63.106442][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.112495][ T4655] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.122513][ T4655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.148645][ T4655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.172264][ T4655] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.179310][ T4655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.205648][ T4655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.240165][ T4550] veth0_vlan: entered promiscuous mode
[   63.257306][ T4655] hsr_slave_0: entered promiscuous mode
[   63.258428][ T4769] netlink: 24 bytes leftover after parsing attributes in process `syz.4.450'.
[   63.272822][ T4655] hsr_slave_1: entered promiscuous mode
[   63.278955][ T4655] debugfs: 'hsr0' already exists in 'hsr'
[   63.284788][ T4655] Cannot create hsr debugfs directory
[   63.297582][ T4550] veth1_vlan: entered promiscuous mode
[   63.318336][ T4550] veth0_macvtap: entered promiscuous mode
[   63.347679][ T4777] SELinux:  policydb version 280 does not match my version range 15-35
[   63.359878][ T4777] SELinux: failed to load policy
[   63.387154][ T4550] veth1_macvtap: entered promiscuous mode
[   63.400068][ T1693] bridge_slave_1: left allmulticast mode
[   63.406241][ T1693] bridge_slave_1: left promiscuous mode
[   63.412164][ T1693] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.421891][ T1693] bridge_slave_0: left allmulticast mode
[   63.427565][ T1693] bridge_slave_0: left promiscuous mode
[   63.433803][ T1693] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.545349][ T1693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   63.555998][ T1693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   63.565790][ T1693] bond0 (unregistering): Released all slaves
[   63.575696][ T1693] bond1 (unregistering): Released all slaves
[   63.610611][ T4564] veth0_vlan: entered promiscuous mode
[   63.620768][ T4797] loop4: detected capacity change from 0 to 512
[   63.635152][ T4550] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.645108][ T4797] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   63.660769][ T4797] EXT4-fs (loop4): 1 truncate cleaned up
[   63.666651][ T1693] hsr_slave_0: left promiscuous mode
[   63.672959][ T1693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.680466][ T1693] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.688305][ T4797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.703329][ T1693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.710742][ T1693] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.722450][ T1693] veth1_macvtap: left promiscuous mode
[   63.728247][ T1693] veth0_macvtap: left promiscuous mode
[   63.734236][ T1693] veth1_vlan: left promiscuous mode
[   63.735272][ T4797] netlink: 492 bytes leftover after parsing attributes in process `syz.4.459'.
[   63.739502][ T1693] veth0_vlan: left promiscuous mode
[   63.810830][ T1693] team0 (unregistering): Port device team_slave_1 removed
[   63.821647][ T1693] team0 (unregistering): Port device team_slave_0 removed
[   63.857352][ T4550] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.878243][ T4564] veth1_vlan: entered promiscuous mode
[   63.890059][  T137] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.899490][  T137] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.932758][  T137] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.952003][ T4564] veth0_macvtap: entered promiscuous mode
[   63.959579][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.971600][  T137] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.990462][ T4564] veth1_macvtap: entered promiscuous mode
[   64.002920][ T4655] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   64.013593][ T4655] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   64.026048][ T4655] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   64.039857][ T4564] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.048262][ T4803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'.
[   64.049746][ T4564] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.057093][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'.
[   64.064526][ T4655] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   64.092533][ T4803] wireguard0: entered promiscuous mode
[   64.098010][ T4803] wireguard0: entered allmulticast mode
[   64.127478][   T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.157473][   T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.186766][   T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.196884][   T50] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.218713][ T4815] loop5: detected capacity change from 0 to 164
[   64.259542][ T4807] infiniband !yz!: set active
[   64.264312][ T4807] infiniband !yz!: added team_slave_0
[   64.265532][ T4655] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.293654][ T4815] netlink: 156 bytes leftover after parsing attributes in process `syz.5.461'.
[   64.306427][ T4655] 8021q: adding VLAN 0 to HW filter on device team0
[   64.309221][ T4821] FAULT_INJECTION: forcing a failure.
[   64.309221][ T4821] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   64.326304][ T4821] CPU: 1 UID: 0 PID: 4821 Comm: syz.6.462 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   64.326343][ T4821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   64.326359][ T4821] Call Trace:
[   64.326366][ T4821]  <TASK>
[   64.326375][ T4821]  __dump_stack+0x1d/0x30
[   64.326405][ T4821]  dump_stack_lvl+0xe8/0x140
[   64.326424][ T4821]  dump_stack+0x15/0x1b
[   64.326441][ T4821]  should_fail_ex+0x265/0x280
[   64.326555][ T4821]  should_fail+0xb/0x20
[   64.326589][ T4821]  should_fail_usercopy+0x1a/0x20
[   64.326677][ T4821]  _copy_from_user+0x1c/0xb0
[   64.326709][ T4821]  btf_new_fd+0x20f/0x790
[   64.326784][ T4821]  bpf_btf_load+0x112/0x130
[   64.326806][ T4821]  __sys_bpf+0x357/0x7c0
[   64.326850][ T4821]  __x64_sys_bpf+0x41/0x50
[   64.326884][ T4821]  x64_sys_call+0x2aee/0x3000
[   64.326922][ T4821]  do_syscall_64+0xd2/0x200
[   64.326946][ T4821]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   64.327018][ T4821]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   64.327039][ T4821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.327066][ T4821] RIP: 0033:0x7fd8ee81eec9
[   64.327084][ T4821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   64.327104][ T4821] RSP: 002b:00007fd8ed27f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   64.327203][ T4821] RAX: ffffffffffffffda RBX: 00007fd8eea75fa0 RCX: 00007fd8ee81eec9
[   64.327216][ T4821] RDX: 0000000000000028 RSI: 0000200000000200 RDI: 0000000000000012
[   64.327228][ T4821] RBP: 00007fd8ed27f090 R08: 0000000000000000 R09: 0000000000000000
[   64.327242][ T4821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   64.327262][ T4821] R13: 00007fd8eea76038 R14: 00007fd8eea75fa0 R15: 00007fff50fb60c8
[   64.327319][ T4821]  </TASK>
[   64.334368][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.351249][ T4807] RDS/IB: !yz!: added
[   64.354230][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.432182][ T4828] loop5: detected capacity change from 0 to 128
[   64.436892][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.506631][ T4831] netlink: 'syz.5.465': attribute type 8 has an invalid length.
[   64.508804][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.519642][ T4655] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   64.566103][ T4655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.660548][ T4655] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.703654][ T4845] sctp: [Deprecated]: syz.6.470 (pid 4845) Use of struct sctp_assoc_value in delayed_ack socket option.
[   64.703654][ T4845] Use struct sctp_sack_info instead
[   64.746568][ T4853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.472'.
[   64.901379][ T4870] netlink: 660 bytes leftover after parsing attributes in process `syz.1.477'.
[   64.936572][ T4655] veth0_vlan: entered promiscuous mode
[   64.965811][ T4655] veth1_vlan: entered promiscuous mode
[   65.005718][ T4655] veth0_macvtap: entered promiscuous mode
[   65.013736][ T4655] veth1_macvtap: entered promiscuous mode
[   65.026265][ T4655] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.036485][ T4880] netlink: 'syz.6.480': attribute type 1 has an invalid length.
[   65.039844][ T4655] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.061966][ T3452] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.072162][ T3452] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.072517][ T4880] netlink: 12 bytes leftover after parsing attributes in process `syz.6.480'.
[   65.115203][ T3452] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.161370][ T3452] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.355631][ T4900] loop7: detected capacity change from 0 to 2048
[   65.374416][ T4900] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.399837][ T4655] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.691440][ T4919] SELinux: failed to load policy
[   65.789452][ T4926] FAULT_INJECTION: forcing a failure.
[   65.789452][ T4926] name failslab, interval 1, probability 0, space 0, times 0
[   65.802116][ T4926] CPU: 1 UID: 0 PID: 4926 Comm: syz.7.496 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   65.802181][ T4926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   65.802193][ T4926] Call Trace:
[   65.802200][ T4926]  <TASK>
[   65.802276][ T4926]  __dump_stack+0x1d/0x30
[   65.802301][ T4926]  dump_stack_lvl+0xe8/0x140
[   65.802324][ T4926]  dump_stack+0x15/0x1b
[   65.802340][ T4926]  should_fail_ex+0x265/0x280
[   65.802409][ T4926]  should_failslab+0x8c/0xb0
[   65.802441][ T4926]  __kmalloc_node_track_caller_noprof+0xa5/0x580
[   65.802542][ T4926]  ? sidtab_sid2str_get+0xa0/0x130
[   65.802578][ T4926]  kmemdup_noprof+0x2b/0x70
[   65.802652][ T4926]  sidtab_sid2str_get+0xa0/0x130
[   65.802682][ T4926]  security_sid_to_context_core+0x1eb/0x2e0
[   65.802711][ T4926]  security_sid_to_context+0x27/0x40
[   65.802738][ T4926]  selinux_lsmprop_to_secctx+0x67/0xf0
[   65.802874][ T4926]  security_lsmprop_to_secctx+0x1a3/0x1c0
[   65.802914][ T4926]  audit_log_subj_ctx+0xa4/0x3e0
[   65.802988][ T4926]  ? skb_put+0xa9/0xf0
[   65.803018][ T4926]  audit_log_task_context+0x48/0x70
[   65.803042][ T4926]  audit_log_task+0xf4/0x250
[   65.803075][ T4926]  audit_seccomp+0x61/0x100
[   65.803160][ T4926]  ? __seccomp_filter+0x82d/0x1250
[   65.803192][ T4926]  __seccomp_filter+0x83e/0x1250
[   65.803222][ T4926]  ? should_fail_ex+0xdb/0x280
[   65.803336][ T4926]  ? __rcu_read_unlock+0x4f/0x70
[   65.803380][ T4926]  ? kmem_cache_free+0xe4/0x3d0
[   65.803412][ T4926]  __secure_computing+0x82/0x150
[   65.803437][ T4926]  syscall_trace_enter+0xcf/0x1e0
[   65.803468][ T4926]  do_syscall_64+0xac/0x200
[   65.803570][ T4926]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   65.803658][ T4926]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   65.803684][ T4926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.803711][ T4926] RIP: 0033:0x7f5038b2d8dc
[   65.803730][ T4926] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   65.803790][ T4926] RSP: 002b:00007f503756e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   65.803808][ T4926] RAX: ffffffffffffffda RBX: 00007f5038d86090 RCX: 00007f5038b2d8dc
[   65.803878][ T4926] RDX: 000000000000000f RSI: 00007f503756e0a0 RDI: 0000000000000003
[   65.803894][ T4926] RBP: 00007f503756e090 R08: 0000000000000000 R09: 0000000000000000
[   65.803908][ T4926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   65.803923][ T4926] R13: 00007f5038d86128 R14: 00007f5038d86090 R15: 00007ffd19ffe398
[   65.803945][ T4926]  </TASK>
[   65.838956][ T4923] __nla_validate_parse: 1 callbacks suppressed
[   65.838980][ T4923] netlink: 660 bytes leftover after parsing attributes in process `syz.4.494'.
[   66.255245][ T4954] FAULT_INJECTION: forcing a failure.
[   66.255245][ T4954] name failslab, interval 1, probability 0, space 0, times 0
[   66.267931][ T4954] CPU: 1 UID: 0 PID: 4954 Comm: syz.1.507 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   66.267958][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   66.268031][ T4954] Call Trace:
[   66.268038][ T4954]  <TASK>
[   66.268118][ T4954]  __dump_stack+0x1d/0x30
[   66.268140][ T4954]  dump_stack_lvl+0xe8/0x140
[   66.268198][ T4954]  dump_stack+0x15/0x1b
[   66.268218][ T4954]  should_fail_ex+0x265/0x280
[   66.268309][ T4954]  should_failslab+0x8c/0xb0
[   66.268390][ T4954]  __kvmalloc_node_noprof+0x12e/0x670
[   66.268427][ T4954]  ? bpf_test_run_xdp_live+0xf2/0x1050
[   66.268461][ T4954]  ? obj_cgroup_charge_account+0x122/0x1a0
[   66.268565][ T4954]  bpf_test_run_xdp_live+0xf2/0x1050
[   66.268630][ T4954]  ? avc_has_perm_noaudit+0x1b1/0x200
[   66.268715][ T4954]  ? avc_has_perm+0xf7/0x180
[   66.268753][ T4954]  ? selinux_file_open+0x2df/0x330
[   66.268793][ T4954]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[   66.268909][ T4954]  ? _copy_from_user+0x89/0xb0
[   66.268938][ T4954]  ? bpf_test_init+0xf4/0x140
[   66.268988][ T4954]  bpf_prog_test_run_xdp+0x59a/0x970
[   66.269018][ T4954]  ? __rcu_read_unlock+0x4f/0x70
[   66.269120][ T4954]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   66.269148][ T4954]  bpf_prog_test_run+0x22a/0x390
[   66.269170][ T4954]  __sys_bpf+0x4c0/0x7c0
[   66.269215][ T4954]  __x64_sys_bpf+0x41/0x50
[   66.269249][ T4954]  x64_sys_call+0x2aee/0x3000
[   66.269271][ T4954]  do_syscall_64+0xd2/0x200
[   66.269300][ T4954]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   66.269396][ T4954]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   66.269419][ T4954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.269444][ T4954] RIP: 0033:0x7f720783eec9
[   66.269461][ T4954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   66.269482][ T4954] RSP: 002b:00007f72062a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   66.269566][ T4954] RAX: ffffffffffffffda RBX: 00007f7207a95fa0 RCX: 00007f720783eec9
[   66.269578][ T4954] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a
[   66.269593][ T4954] RBP: 00007f72062a7090 R08: 0000000000000000 R09: 0000000000000000
[   66.269608][ T4954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   66.269623][ T4954] R13: 00007f7207a96038 R14: 00007f7207a95fa0 R15: 00007ffc5584efc8
[   66.269641][ T4954]  </TASK>
[   66.612424][ T4968] audit_log_lost: 318 callbacks suppressed
[   66.612440][ T4968] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[   66.625940][ T4968] audit: out of memory in audit_log_start
[   66.636164][ T4968] 9pnet_fd: Insufficient options for proto=fd
[   66.676100][   T29] audit: type=1400 audit(1760323976.178:2218): avc:  denied  { getopt } for  pid=4969 comm="syz.6.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   66.699023][ T4966] netlink: 660 bytes leftover after parsing attributes in process `syz.4.511'.
[   66.713924][   T29] audit: type=1400 audit(1760323976.178:2219): avc:  denied  { setopt } for  pid=4969 comm="syz.6.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   66.744650][ T4970] SELinux:  Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped).
[   66.760113][   T29] audit: type=1400 audit(1760323976.258:2220): avc:  denied  { relabelto } for  pid=4963 comm="syz.7.510" name="NETLINK" dev="sockfs" ino=11572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0"
[   66.789117][   T29] audit: type=1326 audit(1760323976.258:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.6.515" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8ee81eec9 code=0x0
[   66.811918][   T29] audit: type=1326 audit(1760323976.258:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720783eec9 code=0x7ffc0000
[   66.835305][   T29] audit: type=1326 audit(1760323976.258:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720783eec9 code=0x7ffc0000
[   66.858631][   T29] audit: type=1326 audit(1760323976.258:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f720783eec9 code=0x7ffc0000
[   66.881871][   T29] audit: type=1326 audit(1760323976.258:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720783eec9 code=0x7ffc0000
[   66.885577][ T4976] netlink: 'syz.1.514': attribute type 1 has an invalid length.
[   66.966489][ T4986] loop7: detected capacity change from 0 to 1024
[   66.984440][ T4986] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   67.011747][ T4989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.514'.
[   67.026243][ T4976] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.114937][ T4989] bond1 (unregistering): Released all slaves
[   67.227634][ T4986] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #11: comm syz.7.510: iget: bogus i_mode (1)
[   67.246411][ T4986] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.510: couldn't read orphan inode 11 (err -117)
[   67.285397][ T4986] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.529101][ T4970] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.565901][ T5003] veth0_to_team: entered promiscuous mode
[   67.638264][ T5006] netlink: 8 bytes leftover after parsing attributes in process `syz.6.525'.
[   67.982991][ T5020] netlink: 72 bytes leftover after parsing attributes in process `syz.5.530'.
[   67.991932][ T5020] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   68.039611][ T5025] loop6: detected capacity change from 0 to 2048
[   68.057491][ T5027] netlink: 'syz.1.533': attribute type 1 has an invalid length.
[   68.087338][ T5027] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.103027][ T5025] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.111721][ T5027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.533'.
[   68.136511][ T5027] bond1 (unregistering): Released all slaves
[   68.162800][ T4564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.180879][ T4964] syz.7.510 (4964) used greatest stack depth: 7240 bytes left
[   68.243091][ T5038] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   68.261336][ T5038] SELinux: failed to load policy
[   68.345656][ T5020] netlink: 116 bytes leftover after parsing attributes in process `syz.5.530'.
[   68.373367][ T5048] IPv6: NLM_F_CREATE should be specified when creating new route
[   68.381431][ T5048] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   68.388649][ T5048] IPv6: NLM_F_CREATE should be set when creating new route
[   68.434181][ T5048] loop7: detected capacity change from 0 to 512
[   68.567330][ T5074] loop6: detected capacity change from 0 to 2048
[   68.590919][ T5077] netlink: 'syz.7.546': attribute type 1 has an invalid length.
[   68.605403][ T5077] netlink: 12 bytes leftover after parsing attributes in process `syz.7.546'.
[   68.615392][ T5077] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.630809][ T5077] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.643060][ T5074] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.658637][ T5084] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   68.660816][ T5074] EXT4-fs error (device loop6): ext4_ext_precache:649: inode #2: comm syz.6.545: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   68.683639][ T5084] SELinux: failed to load policy
[   68.764625][ T4564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.944103][ T5110] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   68.952698][ T5110] SELinux: failed to load policy
[   68.978636][ T5113] netlink: 72 bytes leftover after parsing attributes in process `syz.5.561'.
[   68.987676][ T5113] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   69.047814][ T5115] loop6: detected capacity change from 0 to 2048
[   69.091441][ T5115] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.120594][ T5115] EXT4-fs error (device loop6): ext4_ext_precache:649: inode #2: comm syz.6.562: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   69.223582][ T4564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.233967][ T5124] netlink: 'syz.1.564': attribute type 1 has an invalid length.
[   69.262783][ T5124] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.295174][ T5124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.564'.
[   69.307203][ T5124] bond1 (unregistering): Released all slaves
[   69.434825][ T5134] FAULT_INJECTION: forcing a failure.
[   69.434825][ T5134] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   69.448106][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: syz.6.569 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   69.448209][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   69.448222][ T5134] Call Trace:
[   69.448228][ T5134]  <TASK>
[   69.448234][ T5134]  __dump_stack+0x1d/0x30
[   69.448273][ T5134]  dump_stack_lvl+0xe8/0x140
[   69.448293][ T5134]  dump_stack+0x15/0x1b
[   69.448310][ T5134]  should_fail_ex+0x265/0x280
[   69.448381][ T5134]  should_fail+0xb/0x20
[   69.448414][ T5134]  should_fail_usercopy+0x1a/0x20
[   69.448450][ T5134]  _copy_to_user+0x20/0xa0
[   69.448487][ T5134]  simple_read_from_buffer+0xb5/0x130
[   69.448516][ T5134]  proc_fail_nth_read+0x10e/0x150
[   69.448562][ T5134]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   69.448668][ T5134]  vfs_read+0x1a8/0x770
[   69.448690][ T5134]  ? __rcu_read_unlock+0x4f/0x70
[   69.448716][ T5134]  ? __fget_files+0x184/0x1c0
[   69.448747][ T5134]  ksys_read+0xda/0x1a0
[   69.448828][ T5134]  __x64_sys_read+0x40/0x50
[   69.448856][ T5134]  x64_sys_call+0x27c0/0x3000
[   69.448934][ T5134]  do_syscall_64+0xd2/0x200
[   69.448995][ T5134]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   69.449055][ T5134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.449081][ T5134] RIP: 0033:0x7fd8ee81d8dc
[   69.449098][ T5134] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   69.449129][ T5134] RSP: 002b:00007fd8ed27f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   69.449148][ T5134] RAX: ffffffffffffffda RBX: 00007fd8eea75fa0 RCX: 00007fd8ee81d8dc
[   69.449160][ T5134] RDX: 000000000000000f RSI: 00007fd8ed27f0a0 RDI: 0000000000000003
[   69.449235][ T5134] RBP: 00007fd8ed27f090 R08: 0000000000000000 R09: 0000000000000000
[   69.449247][ T5134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   69.449259][ T5134] R13: 00007fd8eea76038 R14: 00007fd8eea75fa0 R15: 00007fff50fb60c8
[   69.449276][ T5134]  </TASK>
[   69.778312][ T5143] SELinux:  policydb table sizes (0,7) do not match mine (8,7)
[   69.789312][ T5141] netlink: 'syz.1.573': attribute type 6 has an invalid length.
[   69.821416][ T5143] SELinux: failed to load policy
[   69.896302][ T5149] cgroup: Invalid name
[   70.012301][ T5157] netlink: 'syz.1.580': attribute type 1 has an invalid length.
[   70.037884][ T5163] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   70.057338][ T5157] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.086887][ T5165] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   70.114997][ T5169] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[   70.121551][ T5169] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   70.129361][ T5169] vhci_hcd vhci_hcd.0: Device attached
[   70.139597][ T5167] bond1 (unregistering): Released all slaves
[   70.235568][ T5176] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   70.310819][ T5179] SELinux:  policydb table sizes (0,7) do not match mine (8,7)
[   70.340213][ T5179] SELinux: failed to load policy
[   70.371995][ T5170] vhci_hcd: connection closed
[   70.372243][ T1693] vhci_hcd: stop threads
[   70.381306][ T1693] vhci_hcd: release socket
[   70.385754][ T1693] vhci_hcd: disconnect device
[   70.411931][ T1062] usb 12-1: enqueue for inactive port 0
[   70.580734][ T5194] netlink: 'syz.1.592': attribute type 10 has an invalid length.
[   70.639385][ T1062] usb 12-1: enqueue for inactive port 0
[   70.705584][ T5198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5198 comm=syz.1.593
[   70.812237][ T5202] cgroup: Invalid name
[   70.859722][ T5204] loop6: detected capacity change from 0 to 136
[   70.892371][ T5204] Attempt to read inode for relocated directory
[   70.912639][ T5207] SELinux:  policydb table sizes (0,7) do not match mine (8,7)
[   70.920410][ T5207] SELinux: failed to load policy
[   70.971803][ T5209] netlink: 'syz.5.598': attribute type 1 has an invalid length.
[   70.994964][ T5209] __nla_validate_parse: 5 callbacks suppressed
[   70.995060][ T5209] netlink: 12 bytes leftover after parsing attributes in process `syz.5.598'.
[   71.023913][ T5209] veth1_macvtap: left promiscuous mode
[   71.111215][ T5215] nfs4: Unknown parameter '
dev/net/tun'
[   71.163936][ T5220] loop5: detected capacity change from 0 to 2048
[   71.203078][ T5220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.235650][ T5220] EXT4-fs error (device loop5): ext4_ext_precache:649: inode #2: comm syz.5.602: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   71.254263][ T5222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.603'.
[   71.282263][ T4550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.568183][ T5237] loop6: detected capacity change from 0 to 512
[   71.575286][ T5237] EXT4-fs: Ignoring removed nobh option
[   71.596335][ T5237] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.608: iget: bad i_size value: 38620345925642
[   71.611296][ T5237] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.608: couldn't read orphan inode 15 (err -117)
[   71.634952][ T5237] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.654614][   T29] kauditd_printk_skb: 386 callbacks suppressed
[   71.654628][   T29] audit: type=1400 audit(1760323981.158:2612): avc:  denied  { append } for  pid=5236 comm="syz.6.608" path="/42/file1/cgroup.controllers" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   71.705565][   T29] audit: type=1400 audit(1760323981.208:2613): avc:  denied  { map } for  pid=5236 comm="syz.6.608" path="/42/file1/cgroup.controllers" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   71.765618][ T5240] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.608: bg 0: block 5: invalid block bitmap
[   71.804069][ T1062] usb usb12-port1: attempt power cycle
[   71.857094][ T5240] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28
[   71.869486][ T5240] EXT4-fs (loop6): This should not happen!! Data will be lost
[   71.869486][ T5240] 
[   71.879140][ T5240] EXT4-fs (loop6): Total free blocks count 0
[   71.885146][ T5240] EXT4-fs (loop6): Free/Dirty block details
[   71.891046][ T5240] EXT4-fs (loop6): free_blocks=0
[   71.896017][ T5240] EXT4-fs (loop6): dirty_blocks=844
[   71.901242][ T5240] EXT4-fs (loop6): Block reservation details
[   71.907314][ T5240] EXT4-fs (loop6): i_reserved_data_blocks=844
[   71.928983][ T1693] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 16 with max blocks 824 with error 28
[   72.016100][   T29] audit: type=1326 audit(1760323981.518:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5252 comm="syz.6.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ee81eec9 code=0x7ffc0000
[   72.063557][   T29] audit: type=1326 audit(1760323981.548:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5252 comm="syz.6.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd8ee81eec9 code=0x7ffc0000
[   72.086948][   T29] audit: type=1326 audit(1760323981.548:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5252 comm="syz.6.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ee81eec9 code=0x7ffc0000
[   72.110284][   T29] audit: type=1326 audit(1760323981.548:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5252 comm="syz.6.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ee81eec9 code=0x7ffc0000
[   72.133659][   T29] audit: type=1326 audit(1760323981.548:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5252 comm="syz.6.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd8ee81eec9 code=0x7ffc0000
[   72.157108][   T29] audit: type=1326 audit(1760323981.548:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5252 comm="syz.6.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ee81eec9 code=0x7ffc0000
[   72.180647][   T29] audit: type=1326 audit(1760323981.548:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5252 comm="syz.6.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ee81eec9 code=0x7ffc0000
[   72.204075][   T29] audit: type=1326 audit(1760323981.548:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5252 comm="syz.6.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd8ee81eec9 code=0x7ffc0000
[   72.314204][ T5263] netlink: 20 bytes leftover after parsing attributes in process `syz.6.617'.
[   72.396580][ T5269] loop6: detected capacity change from 0 to 1024
[   72.436123][ T5269] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.501253][ T5269] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.622: bg 0: block 88: padding at end of block bitmap is not set
[   72.577184][ T5269] netlink: 132 bytes leftover after parsing attributes in process `syz.6.622'.
[   72.648420][ T5278] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.655891][ T4564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.673206][ T5278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=5278 comm=syz.1.625
[   72.973052][ T5286] geneve2: entered promiscuous mode
[   72.978363][ T5286] geneve2: entered allmulticast mode
[   73.022683][ T3452] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   73.033382][ T3452] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   73.062773][ T3452] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   73.091419][ T3452] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   73.167003][ T5290] loop1: detected capacity change from 0 to 512
[   73.202889][ T5290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.232148][ T5290] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.255138][ T5290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.629'.
[   73.277492][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.779331][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz.6.633'.
[   73.791501][ T1062] usb usb12-port1: unable to enumerate USB device
[   73.894757][ T5304] netlink: 660 bytes leftover after parsing attributes in process `syz.1.634'.
[   74.375895][ T5319] loop1: detected capacity change from 0 to 764
[   74.391931][ T5319] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   74.602045][ T5323] loop6: detected capacity change from 0 to 128
[   74.611352][ T5323] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   74.677818][ T5325] FAULT_INJECTION: forcing a failure.
[   74.677818][ T5325] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   74.691152][ T5325] CPU: 1 UID: 0 PID: 5325 Comm: syz.6.643 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   74.691182][ T5325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   74.691345][ T5325] Call Trace:
[   74.691350][ T5325]  <TASK>
[   74.691357][ T5325]  __dump_stack+0x1d/0x30
[   74.691378][ T5325]  dump_stack_lvl+0xe8/0x140
[   74.691397][ T5325]  dump_stack+0x15/0x1b
[   74.691433][ T5325]  should_fail_ex+0x265/0x280
[   74.691513][ T5325]  should_fail_alloc_page+0xf2/0x100
[   74.691626][ T5325]  __alloc_frozen_pages_noprof+0xff/0x360
[   74.691673][ T5325]  alloc_pages_mpol+0xb3/0x260
[   74.691697][ T5325]  vma_alloc_folio_noprof+0x1aa/0x300
[   74.691851][ T5325]  handle_mm_fault+0xbfe/0x2be0
[   74.691879][ T5325]  ? check_vma_flags+0x315/0x340
[   74.691967][ T5325]  __get_user_pages+0x102a/0x1ed0
[   74.692001][ T5325]  __mm_populate+0x243/0x3a0
[   74.692028][ T5325]  vm_mmap_pgoff+0x232/0x2e0
[   74.692062][ T5325]  ksys_mmap_pgoff+0x268/0x310
[   74.692166][ T5325]  x64_sys_call+0x14a3/0x3000
[   74.692188][ T5325]  do_syscall_64+0xd2/0x200
[   74.692213][ T5325]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   74.692265][ T5325]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   74.692291][ T5325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.692316][ T5325] RIP: 0033:0x7fd8ee81eec9
[   74.692334][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.692355][ T5325] RSP: 002b:00007fd8ed27f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   74.692440][ T5325] RAX: ffffffffffffffda RBX: 00007fd8eea75fa0 RCX: 00007fd8ee81eec9
[   74.692452][ T5325] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000
[   74.692465][ T5325] RBP: 00007fd8ed27f090 R08: 0000000000000005 R09: 0000000000000000
[   74.692479][ T5325] R10: 0000000000022052 R11: 0000000000000246 R12: 0000000000000001
[   74.692492][ T5325] R13: 00007fd8eea76038 R14: 00007fd8eea75fa0 R15: 00007fff50fb60c8
[   74.692549][ T5325]  </TASK>
[   75.196309][ T5328] netlink: 'syz.6.644': attribute type 1 has an invalid length.
[   75.211922][ T5328] loop6: detected capacity change from 0 to 1024
[   75.219196][ T5328] EXT4-fs: Ignoring removed nobh option
[   75.224813][ T5328] EXT4-fs: Ignoring removed bh option
[   75.260289][ T5328] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.333142][ T5328] netlink: 14463 bytes leftover after parsing attributes in process `syz.6.644'.
[   75.346838][ T5328] Q�6��\b��Y�4��: renamed from lo (while UP)
[   75.453402][ T5336] netlink: 'syz.1.646': attribute type 1 has an invalid length.
[   75.522231][ T5338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.646'.
[   75.522660][ T5336] 8021q: adding VLAN 0 to HW filter on device bond2
[   75.546676][ T5338] bond2 (unregistering): Released all slaves
[   75.554866][ T4564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.747303][ T5344] FAULT_INJECTION: forcing a failure.
[   75.747303][ T5344] name failslab, interval 1, probability 0, space 0, times 0
[   75.760044][ T5344] CPU: 1 UID: 0 PID: 5344 Comm: syz.6.649 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   75.760103][ T5344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   75.760116][ T5344] Call Trace:
[   75.760122][ T5344]  <TASK>
[   75.760128][ T5344]  __dump_stack+0x1d/0x30
[   75.760226][ T5344]  dump_stack_lvl+0xe8/0x140
[   75.760248][ T5344]  dump_stack+0x15/0x1b
[   75.760264][ T5344]  should_fail_ex+0x265/0x280
[   75.760302][ T5344]  should_failslab+0x8c/0xb0
[   75.760402][ T5344]  kmem_cache_alloc_noprof+0x50/0x480
[   75.760433][ T5344]  ? skb_clone+0x151/0x1f0
[   75.760468][ T5344]  skb_clone+0x151/0x1f0
[   75.760549][ T5344]  __netlink_deliver_tap+0x2c9/0x500
[   75.760653][ T5344]  ? netlink_attachskb+0x2cc/0x650
[   75.760712][ T5344]  netlink_sendskb+0x126/0x150
[   75.760742][ T5344]  netlink_unicast+0x2a2/0x690
[   75.760770][ T5344]  netlink_ack+0x4c8/0x500
[   75.760799][ T5344]  netlink_rcv_skb+0x192/0x220
[   75.760840][ T5344]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   75.760879][ T5344]  rtnetlink_rcv+0x1c/0x30
[   75.760916][ T5344]  netlink_unicast+0x5c0/0x690
[   75.761025][ T5344]  netlink_sendmsg+0x58b/0x6b0
[   75.761063][ T5344]  ? __pfx_netlink_sendmsg+0x10/0x10
[   75.761102][ T5344]  __sock_sendmsg+0x145/0x180
[   75.761169][ T5344]  ____sys_sendmsg+0x31e/0x4e0
[   75.761203][ T5344]  ___sys_sendmsg+0x17b/0x1d0
[   75.761345][ T5344]  __x64_sys_sendmsg+0xd4/0x160
[   75.761451][ T5344]  x64_sys_call+0x191e/0x3000
[   75.761494][ T5344]  do_syscall_64+0xd2/0x200
[   75.761523][ T5344]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   75.761557][ T5344]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   75.761630][ T5344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.761652][ T5344] RIP: 0033:0x7fd8ee81eec9
[   75.761670][ T5344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.761691][ T5344] RSP: 002b:00007fd8ed27f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   75.761713][ T5344] RAX: ffffffffffffffda RBX: 00007fd8eea75fa0 RCX: 00007fd8ee81eec9
[   75.761728][ T5344] RDX: 0000000000000000 RSI: 0000200000001f80 RDI: 0000000000000003
[   75.761820][ T5344] RBP: 00007fd8ed27f090 R08: 0000000000000000 R09: 0000000000000000
[   75.761835][ T5344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   75.761848][ T5344] R13: 00007fd8eea76038 R14: 00007fd8eea75fa0 R15: 00007fff50fb60c8
[   75.761869][ T5344]  </TASK>
[   76.292388][ T5359] delete_channel: no stack
[   76.461898][ T5349] netlink: 88 bytes leftover after parsing attributes in process `syz.1.650'.
[   77.007733][ T5356] delete_channel: no stack
[   77.021571][ T5358] ==================================================================
[   77.029704][ T5358] BUG: KCSAN: data-race in do_sendfile / do_sendfile
[   77.036412][ T5358] 
[   77.038771][ T5358] write to 0xffff888128a33730 of 8 bytes by task 5357 on cpu 1:
[   77.046400][ T5358]  do_sendfile+0x408/0x650
[   77.050830][ T5358]  __x64_sys_sendfile64+0x105/0x150
[   77.056034][ T5358]  x64_sys_call+0x2bb4/0x3000
[   77.060707][ T5358]  do_syscall_64+0xd2/0x200
[   77.065208][ T5358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.071094][ T5358] 
[   77.073409][ T5358] write to 0xffff888128a33730 of 8 bytes by task 5358 on cpu 0:
[   77.081024][ T5358]  do_sendfile+0x408/0x650
[   77.085445][ T5358]  __x64_sys_sendfile64+0x105/0x150
[   77.090652][ T5358]  x64_sys_call+0x2bb4/0x3000
[   77.095323][ T5358]  do_syscall_64+0xd2/0x200
[   77.099823][ T5358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.105714][ T5358] 
[   77.108022][ T5358] value changed: 0x0000000000000001 -> 0x000000000000324d
[   77.115116][ T5358] 
[   77.117424][ T5358] Reported by Kernel Concurrency Sanitizer on:
[   77.123560][ T5358] CPU: 0 UID: 0 PID: 5358 Comm: syz.6.653 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   77.133189][ T5358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   77.143246][ T5358] ==================================================================