last executing test programs:

2m28.38512582s ago: executing program 32 (id=1543):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1b)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
uname(&(0x7f0000000040)=""/100)
socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
migrate_pages(0x0, 0x10, 0x0, 0x0)
epoll_create1(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x78)
r2 = gettid()
timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r2}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_gettime(r3, 0x0)
timer_gettime(r3, &(0x7f00000000c0))
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1m52.939685679s ago: executing program 33 (id=2318):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, 0x0, 0x0)

1m46.987991152s ago: executing program 34 (id=2412):
kexec_load(0x0, 0x0, 0x0, 0x0)

1m40.428063546s ago: executing program 7 (id=2516):
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000010)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, 0x0)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0)
accept4(r0, 0x0, 0x0, 0x400000000000000) (fail_nth: 1)

1m40.158407701s ago: executing program 7 (id=2518):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=@newtaction={0x898, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x401]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
memfd_create(0x0, 0x3)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r5, 0x5408, &(0x7f00000002c0)={0x7f, 0x0, 0x0, 0xb9ff, 0xa})
write$binfmt_aout(r5, &(0x7f0000000180)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0))
r6 = syz_open_pts(r5, 0x101000)
r7 = dup3(r6, r5, 0x0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x17)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0x10000}, 0x18)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r3, 0x1, 0x6, @multicast}, 0x10)
socket$packet(0x11, 0x3, 0x300)
r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x10)
setgroups(0x0, 0x0)

1m39.24289326s ago: executing program 7 (id=2536):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x7, {0x0, @dev, @loopback}}}], 0x20}, 0x0)

1m39.217830631s ago: executing program 7 (id=2537):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x262, &(0x7f0000000780)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x88000, 0x54)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000ac0), 0x801, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r4=>r0, {0x87b98}}, './file0\x00'})
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r7=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$poke(0x4, r8, 0x0, 0xfffffffffffffffe)
wait4(r8, 0x0, 0x80000000, &(0x7f0000000b00))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r10}, 0x10)
bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0x20, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xb, 0x5}, {0x9, 0x1}, {0x8, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0xcf5}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
sendmsg$qrtr(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x2a, 0x3, 0xfffffffe}, 0xc, &(0x7f0000000300)=[{&(0x7f0000000240)="82bc2b54809e3ef301139f2e25bad156b58c21c220f9fd1fc3c9ad964afdf64f645d5052196a8740e801b4f9cbc4e47ce87bea4595d292f0ee239dea33cb4071f19fd9fbc77a720b273342b83463c34d75238f5a1a93865ec6f327fd9bdd092bd4aff0071ab797d5e5fb19e650f480a10beeb7c73566d64ad999a0256ce19186e9e47a3a5cdb", 0x86}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x148, 0x20000800}, 0x38)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x2, 0x6ddc, 0xb})

1m39.143389053s ago: executing program 7 (id=2538):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x53, 0x4)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (fail_nth: 4)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)

1m37.423567738s ago: executing program 3 (id=2581):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {0xdd86}}}}}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x4010}, 0x18)

1m37.120035414s ago: executing program 3 (id=2584):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0x0, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=<r3=>r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40)

1m37.119698654s ago: executing program 3 (id=2586):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x9}, 0x8)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000240)=ANY=[], 0xfdef)
sendmmsg$inet_sctp(r2, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="0342", 0x2}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000001c0)=@in6={0xa, 0x4e22, 0x8, @mcast2}, 0x1c, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359c", 0x2}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c", @ANYRES32=0x0], 0x30}], 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_read_part_table(0x611, &(0x7f00000007c0)="$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")
r6 = socket(0x2c, 0x3, 0x0)
pipe(&(0x7f00000000c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000ff0000000000003100", @ANYBLOB="861085e8e3fca9f2b65a0cea0a5d05", @ANYBLOB="d100"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
syz_usbip_server_init(0x1)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0xfffffffc}, 0x8)
pivot_root(&(0x7f0000000380)='./file0\x00', 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000200)=0x8)
pwritev(r7, &(0x7f0000000040)=[{&(0x7f0000000140)="4ef31f1e2b02f0d7", 0x8}], 0x1, 0x73a, 0x1)

1m36.543652706s ago: executing program 7 (id=2594):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r0, 0x0, 0xfffffffffffffff4}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000020601020000000a00000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000708001240fffffffa0c000300686173683a697000050004"], 0x58}}, 0x0)

1m36.543543056s ago: executing program 35 (id=2594):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r0, 0x0, 0xfffffffffffffff4}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000020601020000000a00000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000708001240fffffffa0c000300686173683a697000050004"], 0x58}}, 0x0)

1m36.207185303s ago: executing program 3 (id=2597):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x262, &(0x7f0000000780)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x88000, 0x54)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000ac0), 0x801, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r4=>r0, {0x87b98}}, './file0\x00'})
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r7=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$poke(0x4, r8, 0x0, 0xfffffffffffffffe)
wait4(r8, 0x0, 0x80000000, &(0x7f0000000b00))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0x20, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xb, 0x5}, {0x9, 0x1}, {0x8, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0xcf5}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
sendmsg$qrtr(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x2a, 0x3, 0xfffffffe}, 0xc, &(0x7f0000000300)=[{&(0x7f0000000240)="82bc2b54809e3ef301139f2e25bad156b58c21c220f9fd1fc3c9ad964afdf64f645d5052196a8740e801b4f9cbc4e47ce87bea4595d292f0ee239dea33cb4071f19fd9fbc77a720b273342b83463c34d75238f5a1a93865ec6f327fd9bdd092bd4aff0071ab797d5e5fb19e650f480a10beeb7c73566d64ad999a0256ce19186e9e47a3a5cdb", 0x86}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="300000000000000002010000080000003b3777d00c25a38e6c5bbb5e0ba05451f0907b8bd4cfe4fa61dca295744c4f4330000000000000003a00000000000000c19b1d7ece337a8e882fa0b88bf32c95289413da2e20396ad171cca1a9ccb0b830000000000000007f00000006000000b35f5fb7e8ad7c16760cd4587a12caa766982563e1ac841c6c54e5c40000000020000000000000000301000009000000a02a821f5c356fe0ef0000000000000098000000000000000201000040000000b643c127905cd0770db992d20d1795fd04ad069e566dd4120d9c4f968116ec03023fb91bd1f5143e1d71ec9193833d01cb4e89f9a331190334ef66cf3bd1ddae949c49c5f76cf1b9d95148ff2e0a13432327a31aa2c1ca3f875947972c8c0b3e44cf4694545f49dcd21024902abb5d6c9389b0bd4f000000000000"], 0x148, 0x20000800}, 0x38)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x2, 0x6ddc, 0xb})

1m36.001790967s ago: executing program 3 (id=2598):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r3, 0x114, 0x2710, &(0x7f0000019440)=""/102400, &(0x7f00000000c0)=0x19000)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r4}, 0x10)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmmsg$inet6(r5, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="7649c95d77eaae6b", 0x8}], 0x1}}], 0x1, 0x4001)
syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000000), 0x0, 0x478, &(0x7f0000000880)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
unlink(&(0x7f0000000380)='./file2\x00')
setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xffffffff7ffffffc})

1m35.84407949s ago: executing program 3 (id=2601):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
statfs(&(0x7f0000000580)='./file1\x00', 0x0)

1m35.84392164s ago: executing program 36 (id=2601):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
statfs(&(0x7f0000000580)='./file1\x00', 0x0)

1m29.07283838s ago: executing program 8 (id=2724):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x3}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0)

1m29.03267351s ago: executing program 8 (id=2725):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a)
listen(r0, 0x20)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r4}, 0x10)
r5 = socket(0x10, 0x3, 0x9)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x7fffffffffffffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
chmod(&(0x7f0000000440)='.\x00', 0x35e)
mkdir(&(0x7f0000000000)='./file0\x00', 0x11)
r7 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0)
setuid(0xee01)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180)
renameat(0xffffffffffffff9c, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r7, &(0x7f0000000240)='./file0\x00')
poll(&(0x7f0000000240)=[{r0}], 0x1, 0x11ff)
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f0000000700)={[{@journal_dev={'journal_dev', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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")
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x2})
socket$rds(0x15, 0x5, 0x0)
quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000100)=@nullb, 0x0, 0x0)
shutdown(r0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x10, @val=@tcx}, 0x1c)

1m28.104120649s ago: executing program 8 (id=2738):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0)

1m28.089031119s ago: executing program 8 (id=2739):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x262, &(0x7f0000000780)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x88000, 0x54)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000ac0), 0x801, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r4=>r0, {0x87b98}}, './file0\x00'})
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r7=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$poke(0x4, r8, 0x0, 0xfffffffffffffffe)
wait4(r8, 0x0, 0x80000000, &(0x7f0000000b00))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0x20, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xb, 0x5}, {0x9, 0x1}, {0x8, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0xcf5}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
sendmsg$qrtr(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x2a, 0x3, 0xfffffffe}, 0xc, &(0x7f0000000300)=[{&(0x7f0000000240)="82bc2b54809e3ef301139f2e25bad156b58c21c220f9fd1fc3c9ad964afdf64f645d5052196a8740e801b4f9cbc4e47ce87bea4595d292f0ee239dea33cb4071f19fd9fbc77a720b273342b83463c34d75238f5a1a93865ec6f327fd9bdd092bd4aff0071ab797d5e5fb19e650f480a10beeb7c73566d64ad999a0256ce19186e9e47a3a5cdb", 0x86}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x148, 0x20000800}, 0x38)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x2, 0x6ddc, 0xb})

1m27.887056414s ago: executing program 8 (id=2742):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x262, &(0x7f0000000780)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x88000, 0x54)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000ac0), 0x801, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r4=>r0, {0x87b98}}, './file0\x00'})
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r7=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$poke(0x4, r8, 0x0, 0xfffffffffffffffe)
wait4(r8, 0x0, 0x80000000, &(0x7f0000000b00))
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0x20, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xb, 0x5}, {0x9, 0x1}, {0x8, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0xcf5}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
sendmsg$qrtr(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x2a, 0x3, 0xfffffffe}, 0xc, &(0x7f0000000300)=[{&(0x7f0000000240)="82bc2b54809e3ef301139f2e25bad156b58c21c220f9fd1fc3c9ad964afdf64f645d5052196a8740e801b4f9cbc4e47ce87bea4595d292f0ee239dea33cb4071f19fd9fbc77a720b273342b83463c34d75238f5a1a93865ec6f327fd9bdd092bd4aff0071ab797d5e5fb19e650f480a10beeb7c73566d64ad999a0256ce19186e9e47a3a5cdb", 0x86}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x148, 0x20000800}, 0x38)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x2, 0x6ddc, 0xb})

1m27.642538679s ago: executing program 8 (id=2746):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000020601020000000a00000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000708001240fffffffa0c000300686173683a697000050004"], 0x58}}, 0x0)

1m27.562975271s ago: executing program 37 (id=2746):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000020601020000000a00000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000708001240fffffffa0c000300686173683a697000050004"], 0x58}}, 0x0)

57.957887849s ago: executing program 4 (id=3244):
r0 = memfd_secret(0x80000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
arch_prctl$ARCH_GET_CPUID(0x1011)
fcntl$setlease(r0, 0x400, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000080)={0x2, 0x3, 0x0, 0xfffff3a4, 0x800, 0x6})
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x4, 0x4}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)

57.91333519s ago: executing program 4 (id=3245):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = epoll_create1(0x80000)
fcntl$dupfd(r2, 0x406, r3)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext, 0x3, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0xa000200)
semget$private(0x0, 0x4000, 0x0)

57.865897781s ago: executing program 4 (id=3246):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='ext4_es_shrink\x00', r2, 0x0, 0x6211}, 0x18)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58)

57.654838665s ago: executing program 4 (id=3248):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x2c, r1, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$eJzs3c9vG1kdAPDvOHFIdlOSBQ7LSuxGiFV3BbWTDbuNOLRFQnCqBJR7CIkTRXHiKHbaJqpQKs4ICSFAcIETFyT+ACTUPwEhVYJ7hRCogrYcOBSMxh63wdhJqtpx6nw+0uu8efPj+32uPPabmXgCOLdmIuJaRIxExPsRMZW157ISB82Srvf40Z3ltCRRr9/4exJJ1tbaV5JNX882G4+Ib34t4jtJ0mw4pLq3v7FULpd2svlibXO7WN3bv7S+ubRWWittzc/PfbRweeHDhdme9fXKV/7y4x/86qtXfveFWw8W//bed9N8J7Nlh/vRS83XJN94LVpGI2KnH8EGYCTrT/4kKyf9zwcAgKOl3/E/ERGfjYgnPxt0NgAAAEA/1K9OxtMkog4AAAAMrVzjHtgkV8juBZiMXK5QaN7D+6m4GuVKtfb51cru1krzXtnpyOdW18ul2exe4enIJ+n8XKP+fP6Dtvn5iHgjIn40NdGYLyxXyiuDPvkBAAAA50Q6zp/MNevp5J9TzfE/AAAAMGSmB50AAAAA0HfG/wAAADD8/n/8P9OcJKOnnwwAAADQa1+/fj0t9dbzr1du7u1uVG5eWilVNwqbu8uF5crOdmGtUllr/Gbf5nH7K1cq21+Mrd3bxVqpWitW9/YXNyu7W7XFxnO9F0snek40AAAA0FNvvHPvT0lEHHxpolFSY9kyY3UYbrkXWz3pVx7A6RsZdALAwLjBF84v73/guIH9+CnlAQAA9M/FTz+7/j8Rh67/X3jg+j8Muxe8/g8MEdf/4fxqu/73ixNt9LTen2SAU2WMDxx3HqDr9f/f9z4XAACgPyYbJckVsjHAZORyhULEhcZjAfLJ6nq5NBsRH4+IP07lP5bOzw06aQAAAAAAAAAAAAAAAAAAAAAAAAB4xdTrSdQBAACAoRaR+2sSEUmMR0x9brL9/MBY8q+pxjQibv38xk9uL9VqO3Np+z+etdd+mrV/MIgzGAAAAEC71ji9NY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF56/OjOcqscan6333EffjkipjvFH43xxnQ88hHx2pMkRg9tl0TESA/iH9yNiDc7xU/StGI6y6I9fi4iJgYc//UexIfz7F56/LnW6f2Xi5nGtPP7bzQrL+vhTLfjX+7Z8W+ky/HvwjH7Hsumb93/TbFr/LsRb412Pv604o+95PH329/a3++2rP7LiIsdP3+S/4lVrG1uF6t7+5fWN5fWSmulrfn5uY8WLi98uDBbXF0vl7J/O8b44Wd++5+j+v9al/jTWf+T9v4nzZzq9c77fKdt/t/3bz/6ZKcVk4iH38/qHf7/3+wWP3vt380+B9LlF1v1g2b9sLd//Ye3j+r/Spf+jx8RP217r9tO27z/je/9uVnLn3ALAKCfqnv7G0vlcmnnVa+knTkDafSwMnM20hj2SmsUdVbyOSuVwR6XAACA3nv+pX/QmQAAAAAAAAAAAAAAAAAAAMD51fr7/9ZvOffj58QOxxtvVZLk1PsKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCU/wYAAP//VsvQDw==")
r4 = gettid()
kcmp(r4, r4, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)
r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x61b0531d5a57ac96}, 0x0, 0x10000, 0x0, 0x1, 0x5, 0x20005, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
r7 = socket$unix(0x1, 0x1, 0x0)
getsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, 0x0, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000180)={0x37, @time={0x65757100, 0x4}})
write$binfmt_register(r5, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x105001, 0x0)

57.566417127s ago: executing program 4 (id=3252):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0xff9e, {0x2, 0x4c20, @multicast2}}, 0x24)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
stat(&(0x7f0000000f40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="600100001000130429bd7000ffdbdf25e0000002000000000000000000000000ac1414aa000000000000000000000000000000004e2400000a00202000000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="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"], 0x160}}, 0x4000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
io_setup(0x7, &(0x7f0000000280)=<r8=>0x0)
r9 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0)
io_submit(r8, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f0000000000), 0xfffffc98}])
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801400021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup=r11, 0x20, 0x0, 0xfff, &(0x7f0000000340)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x0, <r12=>0x0}, 0x40)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x25, 0xd, @val=@netfilter={0x2, 0x1, 0x2}}, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x0, <r13=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32=r10, @ANYRES32=r10, @ANYBLOB="170000003c20000000000000", @ANYRES32=r13, @ANYBLOB="31895062f4d63c490d296e8f126646fbc553d5e7b7da259f384c46095d39c26487bb485995f1a9e8230e36dc10f6441af7e3ce5c225f55eaaa13edcf6a47fbc1420ab57e6e015d72548385ca9244ab108b6a3cec6f14af108ba0d14d680c8ae238dd68b63cd2158bdff7e46839d91a71f1f4244da4819146c899ecb20731a7c70ea402aa94c67956f720028f3201bc7f4091235f0d3d", @ANYRES64=r12], 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@fallback=r1, r9, 0x29, 0x4, 0x0, @void, @value=r0, @void, @void, r12}, 0x20)

57.392062491s ago: executing program 4 (id=3255):
r0 = memfd_secret(0x80000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
arch_prctl$ARCH_GET_CPUID(0x1011)
fcntl$setlease(r0, 0x400, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000080)={0x2, 0x3, 0x0, 0xfffff3a4, 0x800, 0x6})
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x4, 0x4}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)

57.391828421s ago: executing program 38 (id=3255):
r0 = memfd_secret(0x80000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
arch_prctl$ARCH_GET_CPUID(0x1011)
fcntl$setlease(r0, 0x400, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000080)={0x2, 0x3, 0x0, 0xfffff3a4, 0x800, 0x6})
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x4, 0x4}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)

15.907075613s ago: executing program 2 (id=4019):
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@test_dummy_encryption_v1}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x100000000000000}}, {@dioread_nolock}, {@nobarrier}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@norecovery}, {@noinit_itable}, {@noacl}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@noacl}]}, 0xfe, 0x591, &(0x7f0000001140)="$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")
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
getgroups(0x2, &(0x7f00000001c0)=[0xee01, <r1=>0x0])
setgroups(0x0, 0x0)
keyctl$chown(0x4, r0, 0xee01, r1)
keyctl$setperm(0x5, r0, 0x30925)
keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0)

15.884161374s ago: executing program 2 (id=4021):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10)
write(r2, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40fe00000e", 0x24)

15.862094804s ago: executing program 2 (id=4022):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800)

15.843571894s ago: executing program 2 (id=4024):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
unshare(0x2a020400)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x81101)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

15.784144505s ago: executing program 2 (id=4025):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='sys_enter\x00', r0, 0x0, 0x91}, 0x18)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
pidfd_send_signal(r2, 0x1c, 0x0, 0x0)

15.638783858s ago: executing program 2 (id=4028):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_SCRNMAP(r1, 0x4b41, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='percpu_alloc_percpu_fail\x00', r3, 0x0, 0xa}, 0x18)
fsync(0xffffffffffffffff) (async)
fsync(0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x10, 0x0, 0x3, 0x0, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfe6, 0x5}, 0x100100, 0xc8, 0x2, 0x7, 0x0, 0x10003, 0xa, 0x0, 0x3}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fe08000e40000200875a65969ff57b00"/50], 0xfdef)
socket(0x400000000010, 0x3, 0x0) (async)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0xffe0}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2c0408c0}, 0x2008c014)

15.638551938s ago: executing program 39 (id=4028):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_SCRNMAP(r1, 0x4b41, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='percpu_alloc_percpu_fail\x00', r3, 0x0, 0xa}, 0x18)
fsync(0xffffffffffffffff) (async)
fsync(0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x10, 0x0, 0x3, 0x0, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfe6, 0x5}, 0x100100, 0xc8, 0x2, 0x7, 0x0, 0x10003, 0xa, 0x0, 0x3}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fe08000e40000200875a65969ff57b00"/50], 0xfdef)
socket(0x400000000010, 0x3, 0x0) (async)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0xffe0}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2c0408c0}, 0x2008c014)

7.82608002s ago: executing program 1 (id=4145):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f})
r2 = syz_io_uring_setup(0x17dc, &(0x7f0000000240)={0x0, 0x5bc4, 0x100, 0x80000ffc, 0x5cc}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1})
io_uring_enter(r2, 0x3035, 0x1558, 0x20, 0x0, 0x0)

7.724185171s ago: executing program 1 (id=4148):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
socket$inet6(0xa, 0x80002, 0x0)
socket$igmp(0x2, 0x3, 0x2)
prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170)
unshare(0x26020480)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(0xffffffffffffffff, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)=' ', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000009000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x20000080}}], 0x1, 0xc001)
fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="c80000000002010400000000000000000a00000034000180060003400000000014000180080001006401010208000200ac1e00011400018008000100ac14140d08000200ffffffff440003800c00028005000100000000000104000014000300fc00000000000000000000000000000414000400fe8000000000000000000000000000bb06000340000200003c0002800c00028005000100000000002c00018014000300fe80000000000000000000000000003114000400fe8000000000000000000000000000aa"], 0xc8}, 0x1, 0x0, 0x0, 0x4890}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
cachestat(r5, &(0x7f0000000000)={0x6, 0x5}, &(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)

7.699952872s ago: executing program 1 (id=4149):
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@test_dummy_encryption_v1}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x100000000000000}}, {@dioread_nolock}, {@nobarrier}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@norecovery}, {@noinit_itable}, {@noacl}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@noacl}]}, 0xfe, 0x591, &(0x7f0000001140)="$eJzs3U1rG9caAOB35I98OPfagRDuvVyKIZuUNnJs9yOFLtJlaUMD7aarVNiqCZajYMkhdgNJFs2mmxIKpTTQVXftvsuQP9BfEWhDQwmmXXTjMvJIlSMplmPFcqLnAZlzZkZzzjsz5+gczwgFMLAm0z+5iP9GxJdJxHhEJNm64chWTm5ut/7o2lz6SmJj48Pfk9p2ab6+r/r7xrLMfyLi3ucRr+Ray62sri0WSqXicpafqi5dnqqsrp26uFRYKC4UL83Mzp55fXbmrTff6FmsL5//85sP7r575osT61//+ODo7STOxpFsXXMcu3CjOTMZk9kxGYmzj2043YPC9pOk3xXgqQxl7Xwk0j5gPIayVg+8+K5HxAYwoBLtHwZUfRxQn9v3aB783Hj4zuYEqDX+4c3/jcTB2tzo8HqyZWaUzncnelB+WsZPv965nb6id/+HANjWjZsRcXp4uLX/S7L+7+md7mKbydi43pzX/8HeuZuOf15tN/7JNcY/0Wb8M1a/d7RLj++jtf3nHvSgmI7S8d/bbce/jZtWE0NZ7l+1Md9I8unFUjHt2/4dESdj5ECaf9L9nDPr9zc6rWse/6WvtPz6WDCrx4PhA1vfM1+oFnYTc7OHNyP+13b8mzTOf9Lm/KfH4/zWXR0c61DG8eKdl9quGO8m/merMRFqE39d8uT7k1O162GqflW0+uPW8Z87ld8a/2jsZfzp+T/c9vpvxD+RNN+vrey8jO8O/lXstG5L/NH99T+afFRLj2bLrhaq1eXpiNHk/dblM/+8t56vb5/Gf/LEk/u/dtf/oYj4pMv4bx374f9dxd+H6z+Nf35H53/nifvvffZtp/K76/9eq6VOZku66f+6reBujh0AAAAAAADsN7mIOBJJLt9I53L5/ObzHcficK40sfn8R8xH7buyEzGSq9/pHm96HmI6ex62np95LD8bEUcj4quhQ7V8fq5cmu938AAAAAAAAAAAAAAAAAAAALBPjHX4/n/ql6F+1w545vzkNwyubdt/L37pCdiXfP7D4BrebqLf8ecLgeedz38YXNo/DK6m9n+gn/UA9p7Pfxhc2j8Mrh20/3vPsh4AAAAAAAAAAAAAAAAAAAAAAAAAAADwgjh/7lz62lh/dG0uzc9fWV1ZLF85NV+sLOaXVubyc+Xly/mFcnmhVMzPlZe221+pXL48PRMrV6eqxUp1qrK6dmGpvHKpeuHiUmGheKE4sidRAQAAAAAAAAAAAAAAAAAAwPOlsrq2WCiVissSA5D4eGjzrPdyz8P7IK5GIg2uacn1ftdneaTzqt++3w9HrGOizx0TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADT5OwAA//++9jix")
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
getgroups(0x2, &(0x7f00000001c0)=[0xee01, <r1=>0x0])
keyctl$chown(0x4, r0, 0xee01, r1)
keyctl$setperm(0x5, r0, 0x30925)
keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0)

7.601061654s ago: executing program 1 (id=4150):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0)

7.471898677s ago: executing program 1 (id=4155):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r0], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="00000000000000b70300e2ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
getpid()
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0)
r6 = dup(0xffffffffffffffff)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x19)
write$binfmt_aout(r6, 0x0, 0x808)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000c9500000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r8, 0x402, 0x8000001f)
r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x60)
fcntl$notify(r9, 0x402, 0x8000003d)
close_range(r8, r9, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

3.90297964s ago: executing program 1 (id=4212):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r0], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="00000000000000b70300e2ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
getpid()
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0)
r5 = dup(0xffffffffffffffff)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)=0x19)
write$binfmt_aout(r5, 0x0, 0x808)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000c9500000000"], &(0x7f0000000300)='GPL\x00'}, 0x94)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r9, 0x402, 0x8000001f)
r10 = open(&(0x7f0000000000)='.\x00', 0x0, 0x60)
fcntl$notify(r10, 0x402, 0x8000003d)
close_range(r9, r10, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)

1.740469745s ago: executing program 6 (id=4247):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x7c8e57edab868d16, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_clone3(&(0x7f00000006c0)={0x104800000, &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000300), {0x2d}, &(0x7f0000000600)=""/168, 0xa8, &(0x7f0000000e00)=""/4096, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, r4)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x20000000)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf2504"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="02002dbd7000fedbdf25060000002c000180080006e122155c00080006001f000000080006000a000000080006001600000008000600100000001800018014000400fe8000000000000000000000000000aa05000500070000000800030006000000"], 0x68}, 0x1, 0x0, 0x0, 0x40084}, 0x4840)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800)

1.693372656s ago: executing program 6 (id=4250):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r2)

1.537956178s ago: executing program 9 (id=4256):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)

1.515324809s ago: executing program 9 (id=4257):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000ffffffffffff17110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
madvise(&(0x7f0000c9d000/0x4000)=nil, 0x4000, 0x16)
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f5a000/0x2000)=nil, 0x1, 0x0, 0x0, 0xdff, 0x38, 0x0, 0x8, 0x4})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e23, 0x295, @private0, 0x7}}, [0xffffffffffffffff, 0xfffffffffffffffc, 0x400, 0xb2, 0x6, 0x3, 0xfffffffffffffcd1, 0x4, 0x800, 0xfffffffffffffff9, 0x3, 0x200000004, 0x7, 0xfffffffffffffff6]}, &(0x7f0000000000)=0x100)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)

1.304810963s ago: executing program 5 (id=4260):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)

1.248029004s ago: executing program 5 (id=4261):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
gettid()
fcntl$setpipe(0xffffffffffffffff, 0x4, 0xfffffffffffff000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[], &(0x7f0000000380)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0xffffffff, 0x800}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)

1.061809938s ago: executing program 0 (id=4262):
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0)

1.045676828s ago: executing program 0 (id=4263):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0)

996.18581ms ago: executing program 0 (id=4264):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4   \x00'}, 0x2a)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, 0xf8110, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7cf9, 0x6}, 0x0, 0x10004, 0x10, 0x3, 0x7, 0x20005, 0xe, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x53)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r1], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r5}, 0x10)
getpid()
r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x5)
fchdir(r7)
r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)

995.854919ms ago: executing program 0 (id=4265):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x9, <r1=>0x0}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94)
r3 = socket(0x2, 0x80805, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000240)=ANY=[], 0xfdef)
sendmmsg$inet_sctp(r3, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="0342", 0x2}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000001c0)=@in6={0xa, 0x4e22, 0x8, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c", @ANYRES32=0x0], 0x30}], 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
syz_read_part_table(0x611, &(0x7f00000007c0)="$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")
r7 = socket(0x2c, 0x3, 0x0)
pipe(&(0x7f00000000c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000ff0000000000003100", @ANYBLOB="861085e8e3fca9f2b65a0cea0a5d05", @ANYBLOB="d100"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
syz_usbip_server_init(0x1)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0xfffffffc}, 0x8)
pivot_root(&(0x7f0000000380)='./file0\x00', 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000200)=0x8)
pwritev(r8, &(0x7f0000000040)=[{&(0x7f0000000140)="4ef31f1e2b02f0d7", 0x8}], 0x1, 0x73a, 0x1)

919.222581ms ago: executing program 6 (id=4266):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = socket$inet(0x2, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={0x0, 0x0, 0x4018}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB], 0x14}}, 0x4000054)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(0x0, r2)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0)
close(r5)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r6}, 0x38)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

892.192102ms ago: executing program 6 (id=4267):
socket(0x10, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000"], 0x48)
r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x2)
cachestat(0xffffffffffffffff, 0x0, 0x0, 0xee)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000", @ANYBLOB="8dfb798c602d6c1cf7a5035bf2c36daa09004dc01d31b8985708bc5447b48298c44655f02bd34db3fe52615aaa6daeb99e297cc7ace6779382f39b9c2e64cba1e5bca81ebcbd6f1862a5374f37a7ad116e5b888741fd73608f6e2f514ae065c2093d005b492a3079b518eb7aef73e53b3a9bfb723e77e7de9ac34ecdac0090470b093a9de94fc1eef96e14aa86483917fd52234c8e722ca9b40436480056cdeb3be068c84629c213a2d5280481ca27ec87aabb6c8b03f38ed6871b477177c1091e", @ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

848.300383ms ago: executing program 6 (id=4268):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100))
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, 0x0, 0x0)
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
read$qrtrtun(r2, 0x0, 0xeffd)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000577a30240003008000"/28], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001000)='tcp_probe\x00', r4, 0x0, 0x1}, 0x18)
socket(0x2c, 0x3, 0x0)
keyctl$chown(0x4, 0x0, 0xee01, 0xee00)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0xfc, 0x2, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x6, 0x1}, 0x2012, 0x10000, 0x8, 0x1, 0x8, 0x20008, 0xb, 0x0, 0x8, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, r4, 0x2)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)
r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)

667.910886ms ago: executing program 9 (id=4269):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757814"], 0x65)

639.203617ms ago: executing program 9 (id=4270):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x24, 0x24, 0x20, 0xfffffff1, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0xffff, 0xffff}, {0x9, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x803}, 0x20004004)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0})

624.797757ms ago: executing program 9 (id=4271):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
socket$inet6(0xa, 0x80002, 0x0)
socket$igmp(0x2, 0x3, 0x2)
prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170)
unshare(0x26020480)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(0xffffffffffffffff, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)=' ', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000009000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x20000080}}], 0x1, 0xc001)
fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000)={0x1000000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x13, &(0x7f0000000e40)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="c80000000002010400000000000000000a00000034000180060003400000000014000180080001006401010208000200ac1e00011400018008000100ac14140d08000200ffffffff440003800c00028005000100000000000104000014000300fc00000000000000000000000000000414000400fe8000000000000000000000000000bb06000340000200003c0002800c00028005000100000000002c00018014000300fe80000000000000000000000000003114000400fe8000000000000000000000000000aa"], 0xc8}, 0x1, 0x0, 0x0, 0x4890}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
cachestat(r5, &(0x7f0000000000)={0x6, 0x5}, &(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)

594.029538ms ago: executing program 9 (id=4272):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000140)}, 0x20)
r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x3, 0x20081)
bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0xb, &(0x7f0000000300)=@raw=[@call={0x85, 0x0, 0x0, 0x88}, @call={0x85, 0x0, 0x0, 0xa5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xf}, @alu={0x7, 0x0, 0x5, 0x6, 0x9, 0x10, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x72)
prlimit64(0x0, 0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
clock_nanosleep(0x4, 0x1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
preadv(r4, &(0x7f0000000380)=[{&(0x7f0000000240)=""/106, 0x6a}], 0x1, 0x81, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50)
r5 = syz_open_dev$loop(&(0x7f0000005800), 0x81, 0x2002)
ioctl$BLKPG(r5, 0x1269, &(0x7f0000005900)={0x2, 0x0, 0x98, &(0x7f0000005840)={0x8, 0x7}})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000010000007000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff59}, 0x94)
r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x2141)
ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000180)='rxrpc_improper_term\x00', r6, 0x0, 0x100000007d}, 0x18)
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x3d, 0x800000000004, @thr={&(0x7f0000000600)="74d2bf6aed316a78502b8daba45583830eb9f717c0eef3d0edb5225634fcbe487e92610523cfd57a3540515e443116e1878187af7f8d66acac0fc61bbb8618726c4cdec4d174d785e12064898eec28fbed81854dfb30e57de407143500dfc61ba3cb9577fe89b0f611b4e8317762340763ac964a086a5d05656907710a33221806109c4c67bc6d276a7f03c8eff1a33eedc80948ede742658f20c7eca201e981658ba5d78f92350df4f715034ec10b0ca146ba420110b5233e08f76cf65cd7439b1d37bc53032d7be9d12c2c5126fc41430ec900c0b051be86ccf5", &(0x7f00000004c0)="ab8c21719591d90dbb6bc4ef2b1c6fd3e8df5a9026ccb17f6781d46b7aaa0c077ec3f6435ca08f2b6e906e537496e69ec2f552dc6ea6bdd104c72b62670150642a0c5c62da773f0c98d3a2a42397fd0332f2917954fbc263757c9a"}}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r8 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fcntl$setlease(r8, 0x400, 0x0)

442.599331ms ago: executing program 5 (id=4273):
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0)

425.802232ms ago: executing program 5 (id=4274):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757814"], 0x65)

398.584112ms ago: executing program 5 (id=4275):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0)

354.022823ms ago: executing program 5 (id=4276):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r2)

353.297463ms ago: executing program 0 (id=4277):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = socket$inet(0x2, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={0x0, 0x0, 0x4018}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB], 0x14}}, 0x4000054)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(0x0, r2)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0)
close(r5)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r6}, 0x38)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

328.257213ms ago: executing program 0 (id=4278):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r2)

0s ago: executing program 6 (id=4279):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0)
write$cgroup_int(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000040000000c00000000", @ANYBLOB], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
dup(r1)
request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000000440)='R\brus(\xe8Bm\xbej\x90*\x98\x00\x00\xec\xff\xff\xff:D0', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r6}, 0x40)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
unshare(0x2c020600)
r8 = socket$rxrpc(0x21, 0x2, 0xa)
r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
read(r9, 0x0, 0x0)
bind$rxrpc(r8, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x2, {0x2, 0x4e20, @empty}}, 0x24)
setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000003000)=ANY=[@ANYBLOB="ffffffffffff00004500001c00640000002990787f000001e00000010500"/42], 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x18)
r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r11, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r11, 0x54a0)
readv(r11, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0xe)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0)
getdents(r12, &(0x7f0000001fc0)=""/184, 0xb8)

kernel console output (not intermixed with test programs):

sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb600f7eba9 code=0x7ffc0000
[  212.780224][   T29] audit: type=1326 audit(212.552:107301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12996 comm="syz.6.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb600f7eba9 code=0x7ffc0000
[  212.803617][   T29] audit: type=1326 audit(212.552:107302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12996 comm="syz.6.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb600f7d510 code=0x7ffc0000
[  212.826748][   T29] audit: type=1326 audit(212.552:107303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12996 comm="syz.6.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb600f803d7 code=0x7ffc0000
[  212.866185][T12993] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.894610][T13007] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3360'.
[  212.939414][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3363'.
[  212.996971][T12993] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.020555][T13021] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.069688][T13024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.078493][T13024] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.292310][T13026] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3362'.
[  213.575094][T13021] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.648767][  T389] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.662436][  T389] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.678858][  T389] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.687243][  T389] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.699340][T13021] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.795505][T13021] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.816211][T13036] loop6: detected capacity change from 0 to 128
[  213.852413][T13036] syz.6.3369: attempt to access beyond end of device
[  213.852413][T13036] loop6: rw=0, sector=121, nr_sectors = 920 limit=128
[  213.920966][  T173] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.940887][  T173] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.964853][  T173] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.999397][  T173] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.009673][T13044] IPVS: stopping master sync thread 11079 ...
[  214.034133][T13046] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3374'.
[  214.088970][T13054] netlink: 'syz.6.3377': attribute type 3 has an invalid length.
[  214.096899][T13054] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.3377'.
[  214.245630][T13065] IPVS: stopping master sync thread 12795 ...
[  214.323626][T13075] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3386'.
[  214.451618][T13091] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3393'.
[  214.571813][T13101] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  214.584253][T13096] loop5: detected capacity change from 0 to 8192
[  214.597280][T13097] IPVS: stopping master sync thread 13101 ...
[  214.670345][T13111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3400'.
[  214.721026][T13122] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3405'.
[  214.784298][T13124] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.834525][T13133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.843134][T13133] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  214.929056][T13136] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  214.941467][T13124] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.959586][T13135] IPVS: stopping master sync thread 13136 ...
[  215.005497][T13124] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.043353][T13148] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  215.073432][T13124] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.084304][T13145] IPVS: stopping master sync thread 13148 ...
[  216.006386][T13182] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  216.029349][T13179] IPVS: stopping master sync thread 13182 ...
[  216.079091][    T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  216.092343][    T9] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  216.163918][T13203] netlink: 'syz.6.3434': attribute type 4 has an invalid length.
[  216.197130][T13205] loop6: detected capacity change from 0 to 128
[  216.249401][T13205] syz.6.3435: attempt to access beyond end of device
[  216.249401][T13205] loop6: rw=0, sector=121, nr_sectors = 920 limit=128
[  216.275419][T13208] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.323637][T13208] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.337332][T13211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.346117][T13211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.356972][ T3408] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  216.383739][T13208] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.395931][ T3408] hid-generic 0000:0000:0000.000D: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  216.433760][T13208] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.603648][T13224] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  216.622085][T13223] IPVS: stopping master sync thread 13224 ...
[  216.732772][T13234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=13234 comm=syz.6.3445
[  217.056720][T13250] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  217.080715][T13249] IPVS: stopping master sync thread 13250 ...
[  217.427695][  T173] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.439490][  T173] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.451057][  T173] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.463174][  T173] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.537284][  T173] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.548909][  T173] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.560034][  T173] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.571995][ T6975] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.630603][T13260] loop6: detected capacity change from 0 to 2048
[  217.665769][   T29] kauditd_printk_skb: 3787 callbacks suppressed
[  217.665787][   T29] audit: type=1326 audit(217.632:111091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13261 comm="syz.2.3457" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c84f6eba9 code=0x0
[  217.672801][T13260]  loop6: p1 < > p4
[  217.699044][T13260] loop6: p4 size 8388608 extends beyond EOD, truncated
[  217.715318][T13260] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11)
[  217.722042][T13260] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  217.729665][T13260] vhci_hcd vhci_hcd.0: Device attached
[  217.732122][T13265] netlink: '+}[@': attribute type 21 has an invalid length.
[  217.743516][T13265] __nla_validate_parse: 4 callbacks suppressed
[  217.743538][T13265] netlink: 156 bytes leftover after parsing attributes in process `+}[@'.
[  217.747395][T13263] vhci_hcd: connection closed
[  217.749765][T13265] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  217.772114][  T173] vhci_hcd: stop threads
[  217.776400][  T173] vhci_hcd: release socket
[  217.780832][  T173] vhci_hcd: disconnect device
[  218.069741][T13270] syzkaller0: entered allmulticast mode
[  218.075753][T13270] syzkaller0: entered promiscuous mode
[  218.084552][   T29] audit: type=1326 audit(218.052:111092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089e90eba9 code=0x7ffc0000
[  218.107775][   T29] audit: type=1326 audit(218.052:111093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f089e90eba9 code=0x7ffc0000
[  218.130922][   T29] audit: type=1326 audit(218.052:111094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089e90eba9 code=0x7ffc0000
[  218.154051][   T29] audit: type=1326 audit(218.052:111095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f089e90eba9 code=0x7ffc0000
[  218.177308][   T29] audit: type=1326 audit(218.052:111096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089e90eba9 code=0x7ffc0000
[  218.200491][   T29] audit: type=1326 audit(218.052:111097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089e90eba9 code=0x7ffc0000
[  218.234928][T13274] loop5: detected capacity change from 0 to 128
[  218.262484][T13274] syz.5.3461: attempt to access beyond end of device
[  218.262484][T13274] loop5: rw=0, sector=121, nr_sectors = 920 limit=128
[  218.279671][   T29] audit: type=1326 audit(218.252:111098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.9.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58a54eba9 code=0x7ffc0000
[  218.302936][   T29] audit: type=1326 audit(218.262:111099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.9.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb58a54eba9 code=0x7ffc0000
[  218.326200][   T29] audit: type=1326 audit(218.262:111100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.9.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58a54eba9 code=0x7ffc0000
[  218.349586][T13266] syzkaller0: left promiscuous mode
[  218.355073][T13266] syzkaller0: left allmulticast mode
[  218.465021][T13282] loop6: detected capacity change from 0 to 128
[  218.473676][T13283] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  218.497965][T13280] IPVS: stopping master sync thread 13283 ...
[  218.513903][T13282] syz.6.3464: attempt to access beyond end of device
[  218.513903][T13282] loop6: rw=0, sector=121, nr_sectors = 920 limit=128
[  218.547744][T13286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3465'.
[  218.745921][T13309] syzkaller0: entered promiscuous mode
[  218.751556][T13309] syzkaller0: entered allmulticast mode
[  218.762633][T13306] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.780356][T13309] netlink: 'syz.2.3474': attribute type 4 has an invalid length.
[  218.814764][T13312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.825486][T13312] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.851567][T13306] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.925388][T13306] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.947705][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3477'.
[  218.979446][T13327] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  218.995931][T13306] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.996741][T13326] IPVS: stopping master sync thread 13327 ...
[  219.086238][T13334] FAULT_INJECTION: forcing a failure.
[  219.086238][T13334] name failslab, interval 1, probability 0, space 0, times 0
[  219.099235][T13334] CPU: 1 UID: 0 PID: 13334 Comm: syz.0.3480 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  219.099305][T13334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  219.099322][T13334] Call Trace:
[  219.099331][T13334]  <TASK>
[  219.099342][T13334]  __dump_stack+0x1d/0x30
[  219.099403][T13334]  dump_stack_lvl+0xe8/0x140
[  219.099431][T13334]  dump_stack+0x15/0x1b
[  219.099459][T13334]  should_fail_ex+0x265/0x280
[  219.099485][T13334]  should_failslab+0x8c/0xb0
[  219.099518][T13334]  kmem_cache_alloc_noprof+0x50/0x310
[  219.099600][T13334]  ? security_inode_alloc+0x37/0x100
[  219.099660][T13334]  security_inode_alloc+0x37/0x100
[  219.099697][T13334]  inode_init_always_gfp+0x4b7/0x500
[  219.099771][T13334]  ? __pfx_sock_alloc_inode+0x10/0x10
[  219.099805][T13334]  alloc_inode+0x58/0x170
[  219.099827][T13334]  __sock_create+0x122/0x5b0
[  219.099849][T13334]  __sys_socket+0xb0/0x180
[  219.099927][T13334]  __x64_sys_socket+0x3f/0x50
[  219.099956][T13334]  x64_sys_call+0x1147/0x2ff0
[  219.099981][T13334]  do_syscall_64+0xd2/0x200
[  219.100040][T13334]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  219.100073][T13334]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  219.100107][T13334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.100133][T13334] RIP: 0033:0x7f089e910ac7
[  219.100166][T13334] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  219.100217][T13334] RSP: 002b:00007f089d34cfa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  219.100240][T13334] RAX: ffffffffffffffda RBX: 00007f089eb56090 RCX: 00007f089e910ac7
[  219.100256][T13334] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  219.100272][T13334] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  219.100288][T13334] R10: 00002000000001c0 R11: 0000000000000286 R12: 0000000000000001
[  219.100304][T13334] R13: 00007f089eb56128 R14: 00007f089eb56090 R15: 00007fff45e06758
[  219.100324][T13334]  </TASK>
[  219.100337][T13334] socket: no more sockets
[  219.310483][  T173] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.330193][  T173] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.338990][  T173] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.347580][  T173] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.506823][T13349] syzkaller0: entered promiscuous mode
[  219.512604][T13349] syzkaller0: entered allmulticast mode
[  219.525722][T13349] netlink: 'syz.5.3487': attribute type 4 has an invalid length.
[  219.599568][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3490'.
[  219.642863][T13362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3492'.
[  219.651958][T13362] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3492'.
[  220.170507][T13398] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  220.180189][T13398] SELinux: failed to load policy
[  220.202670][T13400] netlink: '+}[@': attribute type 21 has an invalid length.
[  220.210093][T13400] netlink: 156 bytes leftover after parsing attributes in process `+}[@'.
[  220.218734][T13400] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  220.238383][T13404] IPVS: stopping master sync thread 12740 ...
[  220.266943][T13411] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  220.280470][T13411] SELinux: failed to load policy
[  220.525649][T13435] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  220.541078][T13434] IPVS: stopping master sync thread 13435 ...
[  220.585390][T13438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3524'.
[  220.617130][T13442] netlink: 'syz.2.3526': attribute type 21 has an invalid length.
[  220.640348][T13446] FAULT_INJECTION: forcing a failure.
[  220.640348][T13446] name failslab, interval 1, probability 0, space 0, times 0
[  220.653120][T13446] CPU: 0 UID: 0 PID: 13446 Comm: syz.0.3528 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  220.653153][T13446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  220.653222][T13446] Call Trace:
[  220.653229][T13446]  <TASK>
[  220.653239][T13446]  __dump_stack+0x1d/0x30
[  220.653266][T13446]  dump_stack_lvl+0xe8/0x140
[  220.653364][T13446]  dump_stack+0x15/0x1b
[  220.653454][T13446]  should_fail_ex+0x265/0x280
[  220.653483][T13446]  should_failslab+0x8c/0xb0
[  220.653515][T13446]  __kmalloc_node_noprof+0xa9/0x410
[  220.653578][T13446]  ? __vmalloc_node_range_noprof+0x3f9/0xe00
[  220.653620][T13446]  __vmalloc_node_range_noprof+0x3f9/0xe00
[  220.653696][T13446]  ? sel_write_load+0x158/0x380
[  220.653730][T13446]  vmalloc_noprof+0x82/0xc0
[  220.653849][T13446]  ? sel_write_load+0x158/0x380
[  220.653876][T13446]  sel_write_load+0x158/0x380
[  220.653954][T13446]  ? __pfx_sel_write_load+0x10/0x10
[  220.653980][T13446]  vfs_write+0x266/0x960
[  220.654116][T13446]  ? __rcu_read_unlock+0x4f/0x70
[  220.654156][T13446]  ? __fget_files+0x184/0x1c0
[  220.654186][T13446]  ksys_write+0xda/0x1a0
[  220.654211][T13446]  __x64_sys_write+0x40/0x50
[  220.654235][T13446]  x64_sys_call+0x27fe/0x2ff0
[  220.654374][T13446]  do_syscall_64+0xd2/0x200
[  220.654408][T13446]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  220.654433][T13446]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  220.654465][T13446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.654491][T13446] RIP: 0033:0x7f089e90eba9
[  220.654508][T13446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.654528][T13446] RSP: 002b:00007f089d36f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  220.654547][T13446] RAX: ffffffffffffffda RBX: 00007f089eb55fa0 RCX: 00007f089e90eba9
[  220.654560][T13446] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000005
[  220.654582][T13446] RBP: 00007f089d36f090 R08: 0000000000000000 R09: 0000000000000000
[  220.654610][T13446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  220.654687][T13446] R13: 00007f089eb56038 R14: 00007f089eb55fa0 R15: 00007fff45e06758
[  220.654708][T13446]  </TASK>
[  220.654726][T13446] syz.0.3528: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0
[  220.886957][T13446] CPU: 0 UID: 0 PID: 13446 Comm: syz.0.3528 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  220.886982][T13446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  220.886993][T13446] Call Trace:
[  220.886999][T13446]  <TASK>
[  220.887007][T13446]  __dump_stack+0x1d/0x30
[  220.887087][T13446]  dump_stack_lvl+0xe8/0x140
[  220.887104][T13446]  dump_stack+0x15/0x1b
[  220.887118][T13446]  warn_alloc+0x12b/0x1a0
[  220.887152][T13446]  __vmalloc_node_range_noprof+0x497/0xe00
[  220.887243][T13446]  ? sel_write_load+0x158/0x380
[  220.887265][T13446]  vmalloc_noprof+0x82/0xc0
[  220.887362][T13446]  ? sel_write_load+0x158/0x380
[  220.887386][T13446]  sel_write_load+0x158/0x380
[  220.887409][T13446]  ? __pfx_sel_write_load+0x10/0x10
[  220.887431][T13446]  vfs_write+0x266/0x960
[  220.887533][T13446]  ? __rcu_read_unlock+0x4f/0x70
[  220.887552][T13446]  ? __fget_files+0x184/0x1c0
[  220.887615][T13446]  ksys_write+0xda/0x1a0
[  220.887648][T13446]  __x64_sys_write+0x40/0x50
[  220.887669][T13446]  x64_sys_call+0x27fe/0x2ff0
[  220.887688][T13446]  do_syscall_64+0xd2/0x200
[  220.887717][T13446]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  220.887764][T13446]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  220.887869][T13446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.887888][T13446] RIP: 0033:0x7f089e90eba9
[  220.887902][T13446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.887920][T13446] RSP: 002b:00007f089d36f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  220.887958][T13446] RAX: ffffffffffffffda RBX: 00007f089eb55fa0 RCX: 00007f089e90eba9
[  220.887969][T13446] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000005
[  220.887980][T13446] RBP: 00007f089d36f090 R08: 0000000000000000 R09: 0000000000000000
[  220.887993][T13446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  220.888004][T13446] R13: 00007f089eb56038 R14: 00007f089eb55fa0 R15: 00007fff45e06758
[  220.888022][T13446]  </TASK>
[  220.888112][T13446] Mem-Info:
[  221.090413][T13446] active_anon:3824 inactive_anon:0 isolated_anon:0
[  221.090413][T13446]  active_file:21173 inactive_file:2513 isolated_file:0
[  221.090413][T13446]  unevictable:0 dirty:354 writeback:0
[  221.090413][T13446]  slab_reclaimable:3676 slab_unreclaimable:27995
[  221.090413][T13446]  mapped:29919 shmem:563 pagetables:1148
[  221.090413][T13446]  sec_pagetables:0 bounce:0
[  221.090413][T13446]  kernel_misc_reclaimable:0
[  221.090413][T13446]  free:1860681 free_pcp:13158 free_cma:0
[  221.135680][T13446] Node 0 active_anon:15296kB inactive_anon:0kB active_file:84692kB inactive_file:10052kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119676kB dirty:1416kB writeback:0kB shmem:2252kB kernel_stack:3904kB pagetables:4592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  221.163297][T13446] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  221.192431][T13446] lowmem_reserve[]: 0 2883 7862 7862
[  221.197840][T13446] Node 0 DMA32 free:2949192kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952824kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB
[  221.228885][T13446] lowmem_reserve[]: 0 0 4978 4978
[  221.234093][T13446] Node 0 Normal free:4478172kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15296kB inactive_anon:0kB active_file:84692kB inactive_file:10052kB unevictable:0kB writepending:1412kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:48708kB local_pcp:33136kB free_cma:0kB
[  221.266548][T13446] lowmem_reserve[]: 0 0 0 0
[  221.272041][T13446] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  221.285441][T13446] Node 0 DMA32: 4*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949192kB
[  221.301759][T13446] Node 0 Normal: 899*4kB (UME) 1068*8kB (UM) 689*16kB (UME) 393*32kB (UME) 257*64kB (UME) 188*128kB (UME) 125*256kB (UME) 43*512kB (UM) 124*1024kB (UM) 45*2048kB (UM) 1008*4096kB (UM) = 4478172kB
[  221.321532][T13446] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  221.331486][T13446] 24222 total pagecache pages
[  221.336227][T13446] 6 pages in swap cache
[  221.340486][T13446] Free swap  = 124968kB
[  221.344693][T13446] Total swap = 124996kB
[  221.348904][T13446] 2097051 pages RAM
[  221.352746][T13446] 0 pages HighMem/MovableOnly
[  221.357436][T13446] 80445 pages reserved
[  221.780568][T13485] loop5: detected capacity change from 0 to 2048
[  221.814669][T13485]  loop5: p1 < > p4
[  221.820666][T13485] loop5: p4 size 8388608 extends beyond EOD, truncated
[  221.828248][T13488] FAULT_INJECTION: forcing a failure.
[  221.828248][T13488] name failslab, interval 1, probability 0, space 0, times 0
[  221.841046][T13488] CPU: 0 UID: 0 PID: 13488 Comm: syz.6.3543 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  221.841079][T13488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  221.841095][T13488] Call Trace:
[  221.841155][T13488]  <TASK>
[  221.841163][T13488]  __dump_stack+0x1d/0x30
[  221.841185][T13488]  dump_stack_lvl+0xe8/0x140
[  221.841205][T13488]  dump_stack+0x15/0x1b
[  221.841225][T13488]  should_fail_ex+0x265/0x280
[  221.841254][T13488]  should_failslab+0x8c/0xb0
[  221.841294][T13488]  __kvmalloc_node_noprof+0x123/0x4e0
[  221.841329][T13488]  ? simple_xattr_set+0x6e/0x2b0
[  221.841368][T13488]  simple_xattr_set+0x6e/0x2b0
[  221.841404][T13488]  ? strlen+0x19/0x40
[  221.841426][T13488]  pidfs_xattr_set+0xf7/0x150
[  221.841512][T13488]  ? __pfx_pidfs_xattr_set+0x10/0x10
[  221.841592][T13488]  __vfs_setxattr+0x2e6/0x310
[  221.841629][T13488]  __vfs_setxattr_noperm+0xe8/0x410
[  221.841669][T13488]  __vfs_setxattr_locked+0x1af/0x1d0
[  221.841779][T13488]  vfs_setxattr+0x132/0x270
[  221.841812][T13488]  file_setxattr+0x139/0x1b0
[  221.841840][T13488]  path_setxattrat+0x290/0x310
[  221.841912][T13488]  __x64_sys_fsetxattr+0x6b/0x80
[  221.841946][T13488]  x64_sys_call+0x1ced/0x2ff0
[  221.841974][T13488]  do_syscall_64+0xd2/0x200
[  221.842015][T13488]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  221.842062][T13488]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  221.842229][T13488]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.842257][T13488] RIP: 0033:0x7fb600f7eba9
[  221.842275][T13488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.842295][T13488] RSP: 002b:00007fb5ff9e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[  221.842319][T13488] RAX: ffffffffffffffda RBX: 00007fb6011c5fa0 RCX: 00007fb600f7eba9
[  221.842377][T13488] RDX: 0000000000000000 RSI: 00002000000018c0 RDI: 0000000000000003
[  221.842389][T13488] RBP: 00007fb5ff9e7090 R08: 0000000000000003 R09: 0000000000000000
[  221.842403][T13488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  221.842414][T13488] R13: 00007fb6011c6038 R14: 00007fb6011c5fa0 R15: 00007ffeafa60ac8
[  221.842512][T13488]  </TASK>
[  222.064369][T13490] loop9: detected capacity change from 0 to 128
[  222.071511][T13485] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11)
[  222.078147][T13485] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  222.085992][T13485] vhci_hcd vhci_hcd.0: Device attached
[  222.107256][T13491] vhci_hcd: connection closed
[  222.107423][ T8784] vhci_hcd: stop threads
[  222.116652][ T8784] vhci_hcd: release socket
[  222.121270][ T8784] vhci_hcd: disconnect device
[  222.130541][T13490] syz.9.3544: attempt to access beyond end of device
[  222.130541][T13490] loop9: rw=0, sector=121, nr_sectors = 920 limit=128
[  222.474848][T13518] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.524708][T13518] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.539970][T13521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.548572][T13521] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.574907][T13518] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.603349][T13518] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.770335][T13534] loop5: detected capacity change from 0 to 128
[  222.821760][T13534] syz.5.3560: attempt to access beyond end of device
[  222.821760][T13534] loop5: rw=0, sector=121, nr_sectors = 920 limit=128
[  222.900479][T13541] __nla_validate_parse: 3 callbacks suppressed
[  222.900500][T13541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3563'.
[  223.106597][T13554] loop9: detected capacity change from 0 to 512
[  223.131160][T13554] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.212566][T13560] sd 0:0:1:0: device reset
[  223.212570][   T29] kauditd_printk_skb: 3610 callbacks suppressed
[  223.212617][   T29] audit: type=1400 audit(223.182:114711): avc:  denied  { ioctl } for  pid=13553 comm="syz.9.3569" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  223.284815][   T29] audit: type=1400 audit(223.252:114712): avc:  denied  { create } for  pid=13565 comm="syz.5.3571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  223.304970][   T29] audit: type=1400 audit(223.272:114713): avc:  denied  { bind } for  pid=13565 comm="syz.5.3571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  223.324134][   T29] audit: type=1400 audit(223.272:114714): avc:  denied  { write } for  pid=13565 comm="syz.5.3571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  223.350927][   T29] audit: type=1326 audit(223.312:114715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13563 comm="syz.2.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  223.374136][   T29] audit: type=1326 audit(223.312:114716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13563 comm="syz.2.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  223.397376][   T29] audit: type=1326 audit(223.312:114717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13563 comm="syz.2.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  223.420650][   T29] audit: type=1326 audit(223.312:114718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13563 comm="syz.2.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  223.443739][   T29] audit: type=1326 audit(223.312:114719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13563 comm="syz.2.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  223.467059][   T29] audit: type=1326 audit(223.312:114720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13563 comm="syz.2.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  223.516627][T10791] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.525841][T13569] loop5: detected capacity change from 0 to 1024
[  223.555852][T13569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.570275][T13569] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.3573: Allocating blocks 497-513 which overlap fs metadata
[  223.585263][T13569] EXT4-fs (loop5): pa ffff888107299150: logic 256, phys. 369, len 9
[  223.593409][T13569] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  223.607899][T13569] FAULT_INJECTION: forcing a failure.
[  223.607899][T13569] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  223.621162][T13569] CPU: 0 UID: 0 PID: 13569 Comm: syz.5.3573 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  223.621189][T13569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  223.621210][T13569] Call Trace:
[  223.621217][T13569]  <TASK>
[  223.621225][T13569]  __dump_stack+0x1d/0x30
[  223.621254][T13569]  dump_stack_lvl+0xe8/0x140
[  223.621278][T13569]  dump_stack+0x15/0x1b
[  223.621377][T13569]  should_fail_ex+0x265/0x280
[  223.621404][T13569]  should_fail+0xb/0x20
[  223.621504][T13569]  should_fail_usercopy+0x1a/0x20
[  223.621532][T13569]  strncpy_from_user+0x25/0x230
[  223.621596][T13569]  ? kmem_cache_alloc_noprof+0x186/0x310
[  223.621637][T13569]  ? getname_flags+0x80/0x3b0
[  223.621672][T13569]  getname_flags+0xae/0x3b0
[  223.621721][T13569]  user_path_at+0x28/0x130
[  223.621754][T13569]  user_statfs+0x4d/0x110
[  223.621839][T13569]  __x64_sys_statfs+0x65/0xf0
[  223.621872][T13569]  ? fput+0x8f/0xc0
[  223.621906][T13569]  ? ksys_write+0x192/0x1a0
[  223.621931][T13569]  x64_sys_call+0x2a03/0x2ff0
[  223.622017][T13569]  do_syscall_64+0xd2/0x200
[  223.622134][T13569]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  223.622158][T13569]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  223.622195][T13569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.622234][T13569] RIP: 0033:0x7f1fecb2eba9
[  223.622251][T13569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  223.622312][T13569] RSP: 002b:00007f1feb58f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089
[  223.622345][T13569] RAX: ffffffffffffffda RBX: 00007f1fecd75fa0 RCX: 00007f1fecb2eba9
[  223.622360][T13569] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000200000000340
[  223.622372][T13569] RBP: 00007f1feb58f090 R08: 0000000000000000 R09: 0000000000000000
[  223.622385][T13569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  223.622400][T13569] R13: 00007f1fecd76038 R14: 00007f1fecd75fa0 R15: 00007ffe76010098
[  223.622423][T13569]  </TASK>
[  223.833804][T12669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.897204][T13586] loop5: detected capacity change from 0 to 128
[  223.905990][T13586] SELinux:  policydb version 65556 does not match my version range 15-35
[  223.914831][T13586] SELinux: failed to load policy
[  223.970789][T13589] syzkaller0: entered promiscuous mode
[  223.972383][T13588] infiniband syz2: set active
[  223.981136][T13588] infiniband syz2: added bond0
[  223.994366][T13588] RDS/IB: syz2: added
[  223.999018][T13588] smc: adding ib device syz2 with port count 1
[  224.005415][T13588] smc:    ib device syz2 port 1 has pnetid 
[  224.038256][  T389] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.055728][  T389] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.083746][  T389] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.101979][  T389] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.185164][T13583] syzkaller0: left promiscuous mode
[  224.331754][T13604] loop5: detected capacity change from 0 to 2048
[  224.343280][T13604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.440729][T13613] loop9: detected capacity change from 0 to 128
[  224.472774][T13613] syz.9.3588: attempt to access beyond end of device
[  224.472774][T13613] loop9: rw=0, sector=121, nr_sectors = 920 limit=128
[  224.518878][T12669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.172832][T13639] binfmt_misc: register: failed to install interpreter file ./file2
[  225.818493][T13658] loop9: detected capacity change from 0 to 128
[  225.893076][T13658] syz.9.3602: attempt to access beyond end of device
[  225.893076][T13658] loop9: rw=0, sector=121, nr_sectors = 920 limit=128
[  225.967405][T13668] netlink: 'syz.5.3607': attribute type 6 has an invalid length.
[  226.030576][T13673] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3609'.
[  226.247517][T13685] IPv6: sit1: Disabled Multicast RS
[  226.254175][T13685] sit1: entered allmulticast mode
[  226.591730][T13705] syzkaller0: entered promiscuous mode
[  226.748874][T13697] syzkaller0: left promiscuous mode
[  226.893782][T13719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3627'.
[  227.172694][T13733] loop9: detected capacity change from 0 to 128
[  227.199015][T13733] syz.9.3632: attempt to access beyond end of device
[  227.199015][T13733] loop9: rw=0, sector=121, nr_sectors = 920 limit=128
[  227.629530][T13740] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3635'.
[  228.244898][   T29] kauditd_printk_skb: 4754 callbacks suppressed
[  228.244919][   T29] audit: type=1400 audit(228.212:119475): avc:  denied  { remount } for  pid=13769 comm="syz.2.3647" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  228.252179][T13770] netlink: 'syz.2.3647': attribute type 21 has an invalid length.
[  228.278798][T13770] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3647'.
[  228.287965][T13770] netlink: 'syz.2.3647': attribute type 1 has an invalid length.
[  228.320594][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3648'.
[  228.349074][   T29] audit: type=1400 audit(228.312:119476): avc:  denied  { mounton } for  pid=13775 comm="syz.2.3649" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  228.374031][   T29] audit: type=1400 audit(228.312:119477): avc:  denied  { create } for  pid=13775 comm="syz.2.3649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  228.465185][   T29] audit: type=1326 audit(228.432:119478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.2.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  228.488530][   T29] audit: type=1326 audit(228.432:119479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.2.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  228.523077][   T29] audit: type=1326 audit(228.482:119480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.2.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  228.546370][   T29] audit: type=1326 audit(228.482:119481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.2.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  228.569940][   T29] audit: type=1326 audit(228.482:119482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.2.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  228.593016][   T29] audit: type=1326 audit(228.482:119483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.2.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  228.616645][   T29] audit: type=1326 audit(228.482:119484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.2.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  228.738831][T13804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3659'.
[  228.766683][T13807] binfmt_misc: register: failed to install interpreter file ./file2
[  228.792706][T13809] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3661'.
[  229.044884][T13819] FAULT_INJECTION: forcing a failure.
[  229.044884][T13819] name failslab, interval 1, probability 0, space 0, times 0
[  229.057640][T13819] CPU: 0 UID: 0 PID: 13819 Comm: syz.9.3664 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  229.057675][T13819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  229.057697][T13819] Call Trace:
[  229.057704][T13819]  <TASK>
[  229.057712][T13819]  __dump_stack+0x1d/0x30
[  229.057738][T13819]  dump_stack_lvl+0xe8/0x140
[  229.057851][T13819]  dump_stack+0x15/0x1b
[  229.057865][T13819]  should_fail_ex+0x265/0x280
[  229.057942][T13819]  should_failslab+0x8c/0xb0
[  229.057965][T13819]  kmem_cache_alloc_node_noprof+0x57/0x320
[  229.057992][T13819]  ? __alloc_skb+0x101/0x320
[  229.058081][T13819]  ? ida_alloc_range+0x68f/0x6c0
[  229.058181][T13819]  __alloc_skb+0x101/0x320
[  229.058201][T13819]  create_monitor_ctrl_open+0x107/0x4a0
[  229.058228][T13819]  hci_sock_bind+0x722/0x990
[  229.058308][T13819]  __sys_bind+0x1ce/0x2a0
[  229.058410][T13819]  __x64_sys_bind+0x3f/0x50
[  229.058427][T13819]  x64_sys_call+0x2b6e/0x2ff0
[  229.058447][T13819]  do_syscall_64+0xd2/0x200
[  229.058475][T13819]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  229.058593][T13819]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  229.058620][T13819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.058706][T13819] RIP: 0033:0x7fb58a54eba9
[  229.058720][T13819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  229.058788][T13819] RSP: 002b:00007fb588fb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  229.058856][T13819] RAX: ffffffffffffffda RBX: 00007fb58a795fa0 RCX: 00007fb58a54eba9
[  229.058868][T13819] RDX: 0000000000000006 RSI: 0000200000000280 RDI: 0000000000000004
[  229.058879][T13819] RBP: 00007fb588fb7090 R08: 0000000000000000 R09: 0000000000000000
[  229.058890][T13819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  229.058901][T13819] R13: 00007fb58a796038 R14: 00007fb58a795fa0 R15: 00007ffd177a3d58
[  229.058943][T13819]  </TASK>
[  229.504400][T13829] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3668'.
[  229.550123][T13834] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3670'.
[  229.981123][T13854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3675'.
[  230.060311][T13858] netlink: '+}[@': attribute type 21 has an invalid length.
[  230.069325][T13858] netlink: 156 bytes leftover after parsing attributes in process `+}[@'.
[  230.077987][T13858] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  230.324829][T13868] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3680'.
[  230.546555][T13880] netlink: 'syz.5.3686': attribute type 6 has an invalid length.
[  230.631696][T13887] netlink: 'syz.6.3689': attribute type 6 has an invalid length.
[  230.990931][T13920] netlink: 'syz.9.3702': attribute type 6 has an invalid length.
[  231.069886][T13925] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  231.089334][T13924] IPVS: stopping master sync thread 13925 ...
[  231.735260][T13976] loop6: detected capacity change from 0 to 128
[  231.772704][T13976] syz.6.3726: attempt to access beyond end of device
[  231.772704][T13976] loop6: rw=0, sector=121, nr_sectors = 920 limit=128
[  231.864682][T13980] loop9: detected capacity change from 0 to 512
[  231.871960][T13980] EXT4-fs: Ignoring removed nobh option
[  231.878927][T13980] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117
[  231.888465][T13980] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3728: invalid indirect mapped block 256 (level 1)
[  231.903454][T13980] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3728: invalid indirect mapped block 2683928664 (level 1)
[  231.921765][T13980] EXT4-fs (loop9): 1 truncate cleaned up
[  231.928012][T13980] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.974420][T13991] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  231.994980][T13990] IPVS: stopping master sync thread 13991 ...
[  232.572088][T14012] IPv6: sit1: Disabled Multicast RS
[  232.579262][T14012] sit1: entered allmulticast mode
[  232.751926][T14019] bridge_slave_0: left allmulticast mode
[  232.757669][T14019] bridge_slave_0: left promiscuous mode
[  232.763406][T14019] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.772623][T14019] bridge_slave_1: left allmulticast mode
[  232.778336][T14019] bridge_slave_1: left promiscuous mode
[  232.784462][T14019] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.795597][T14019] bond0: (slave bond_slave_0): Releasing backup interface
[  232.805755][T14019] bond0: (slave bond_slave_1): Releasing backup interface
[  232.819105][T14019] team0: Port device team_slave_0 removed
[  232.828520][T14019] team0: Port device team_slave_1 removed
[  232.828887][T10791] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.835469][T14019] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.850801][T14019] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.859990][T14019] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.867455][T14019] batman_adv: batadv0: Removing interface: batadv_slave_1
[  232.901713][T14024] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  232.972225][T14023] IPVS: stopping master sync thread 14024 ...
[  233.261537][   T29] kauditd_printk_skb: 531 callbacks suppressed
[  233.261552][   T29] audit: type=1326 audit(233.222:120016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14045 comm="syz.2.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  233.290991][   T29] audit: type=1326 audit(233.222:120017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14045 comm="syz.2.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  233.314129][   T29] audit: type=1326 audit(233.222:120018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14045 comm="syz.2.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  233.340032][   T29] audit: type=1326 audit(233.232:120019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14045 comm="syz.2.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  233.363275][   T29] audit: type=1326 audit(233.232:120020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14045 comm="syz.2.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  233.386600][   T29] audit: type=1326 audit(233.232:120021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14045 comm="syz.2.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  233.409852][   T29] audit: type=1326 audit(233.232:120022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14045 comm="syz.2.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  233.433250][   T29] audit: type=1326 audit(233.232:120023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14045 comm="syz.2.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c84f6d510 code=0x7ffc0000
[  233.453446][T14053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.456387][   T29] audit: type=1326 audit(233.232:120024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14045 comm="syz.2.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7c84f703d7 code=0x7ffc0000
[  233.465390][T14053] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.487847][   T29] audit: type=1326 audit(233.232:120025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14045 comm="syz.2.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  233.521347][T14050] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.563468][T14050] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.613312][T14050] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.653891][T14050] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.708128][  T173] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.719651][  T173] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.730539][  T173] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.743954][ T6975] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.825245][T14057] syzkaller0: entered promiscuous mode
[  233.830809][T14057] syzkaller0: entered allmulticast mode
[  233.840315][T14057] netlink: 'syz.5.3754': attribute type 4 has an invalid length.
[  233.876550][T14061] __nla_validate_parse: 4 callbacks suppressed
[  233.876569][T14061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3755'.
[  233.921342][T14065] IPv6: sit1: Disabled Multicast RS
[  233.927603][T14065] sit1: entered allmulticast mode
[  234.536993][T14087] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11)
[  234.543829][T14087] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  234.551586][T14087] vhci_hcd vhci_hcd.0: Device attached
[  234.561493][T14091] vhci_hcd: connection closed
[  234.562085][  T173] vhci_hcd: stop threads
[  234.571421][  T173] vhci_hcd: release socket
[  234.575901][  T173] vhci_hcd: disconnect device
[  234.620826][T14094] netlink: 'syz.2.3767': attribute type 4 has an invalid length.
[  234.662544][    T9] IPVS: starting estimator thread 0...
[  234.671791][T14098] IPVS: set_ctl: invalid protocol: 255 172.30.0.3:19999
[  234.781708][T14100] IPVS: using max 2352 ests per chain, 117600 per kthread
[  234.826263][T14114] loop6: detected capacity change from 0 to 128
[  234.856938][T14114] syz.6.3774: attempt to access beyond end of device
[  234.856938][T14114] loop6: rw=0, sector=121, nr_sectors = 920 limit=128
[  234.907170][T14120] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3777'.
[  234.962711][T14124] netlink: 'syz.2.3778': attribute type 4 has an invalid length.
[  235.212702][T14136] syzkaller0: entered allmulticast mode
[  235.218623][T14136] syzkaller0: entered promiscuous mode
[  235.568396][T14139] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  235.593576][T14138] IPVS: stopping master sync thread 14139 ...
[  235.647703][T14146] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3786'.
[  235.701979][T14153] loop5: detected capacity change from 0 to 128
[  235.735372][T14153] syz.5.3789: attempt to access beyond end of device
[  235.735372][T14153] loop5: rw=0, sector=121, nr_sectors = 920 limit=128
[  235.753608][T14155] netlink: 'syz.9.3790': attribute type 4 has an invalid length.
[  235.885370][T14171] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  235.902835][T14170] IPVS: stopping master sync thread 14171 ...
[  235.973531][T14183] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3799'.
[  235.993106][T14134] syzkaller0: left promiscuous mode
[  235.998671][T14134] syzkaller0: left allmulticast mode
[  236.124978][T14192] loop5: detected capacity change from 0 to 128
[  236.151606][T14190] syzkaller0: entered promiscuous mode
[  236.157321][T14190] syzkaller0: entered allmulticast mode
[  236.168252][T14190] netlink: 'syz.0.3802': attribute type 4 has an invalid length.
[  236.259397][T14200] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  236.280368][T14199] IPVS: stopping master sync thread 14200 ...
[  236.321174][T14209] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3810'.
[  236.650130][T14236] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  236.668659][T14234] IPVS: stopping master sync thread 14236 ...
[  236.724215][T14243] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3821'.
[  236.839336][T14255] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.883491][T14255] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.897289][T14267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.906000][T14267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.914896][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  236.922991][ T3408] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  236.934216][T14255] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.983360][T14255] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.028558][ T8777] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.040845][ T8784] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.055347][ T8784] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.069930][ T8784] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.255355][T14278] FAULT_INJECTION: forcing a failure.
[  237.255355][T14278] name failslab, interval 1, probability 0, space 0, times 0
[  237.268130][T14278] CPU: 0 UID: 0 PID: 14278 Comm: syz.6.3835 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  237.268166][T14278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  237.268179][T14278] Call Trace:
[  237.268188][T14278]  <TASK>
[  237.268198][T14278]  __dump_stack+0x1d/0x30
[  237.268303][T14278]  dump_stack_lvl+0xe8/0x140
[  237.268321][T14278]  dump_stack+0x15/0x1b
[  237.268382][T14278]  should_fail_ex+0x265/0x280
[  237.268404][T14278]  should_failslab+0x8c/0xb0
[  237.268480][T14278]  __kmalloc_noprof+0xa5/0x3e0
[  237.268565][T14278]  ? genl_family_rcv_msg_attrs_parse+0x75/0x190
[  237.268600][T14278]  genl_family_rcv_msg_attrs_parse+0x75/0x190
[  237.268682][T14278]  genl_family_rcv_msg_doit+0x48/0x1b0
[  237.268710][T14278]  ? selinux_capable+0x31/0x40
[  237.268736][T14278]  ? security_capable+0x83/0x90
[  237.268758][T14278]  ? ns_capable+0x7d/0xb0
[  237.268785][T14278]  genl_rcv_msg+0x422/0x460
[  237.268842][T14278]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  237.268903][T14278]  netlink_rcv_skb+0x123/0x220
[  237.268924][T14278]  ? __pfx_genl_rcv_msg+0x10/0x10
[  237.268958][T14278]  genl_rcv+0x28/0x40
[  237.268983][T14278]  netlink_unicast+0x5bd/0x690
[  237.269014][T14278]  netlink_sendmsg+0x58b/0x6b0
[  237.269039][T14278]  ? __pfx_netlink_sendmsg+0x10/0x10
[  237.269063][T14278]  __sock_sendmsg+0x145/0x180
[  237.269176][T14278]  ____sys_sendmsg+0x31e/0x4e0
[  237.269281][T14278]  ___sys_sendmsg+0x17b/0x1d0
[  237.269338][T14278]  __x64_sys_sendmsg+0xd4/0x160
[  237.269379][T14278]  x64_sys_call+0x191e/0x2ff0
[  237.269442][T14278]  do_syscall_64+0xd2/0x200
[  237.269503][T14278]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  237.269525][T14278]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  237.269592][T14278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.269610][T14278] RIP: 0033:0x7fb600f7eba9
[  237.269625][T14278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.269702][T14278] RSP: 002b:00007fb5ff9e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  237.269719][T14278] RAX: ffffffffffffffda RBX: 00007fb6011c5fa0 RCX: 00007fb600f7eba9
[  237.269797][T14278] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  237.269808][T14278] RBP: 00007fb5ff9e7090 R08: 0000000000000000 R09: 0000000000000000
[  237.269819][T14278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  237.269830][T14278] R13: 00007fb6011c6038 R14: 00007fb6011c5fa0 R15: 00007ffeafa60ac8
[  237.269848][T14278]  </TASK>
[  237.550756][T14280] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3836'.
[  237.656860][T14296] FAULT_INJECTION: forcing a failure.
[  237.656860][T14296] name failslab, interval 1, probability 0, space 0, times 0
[  237.669701][T14296] CPU: 0 UID: 0 PID: 14296 Comm: syz.6.3844 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  237.669734][T14296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  237.669799][T14296] Call Trace:
[  237.669807][T14296]  <TASK>
[  237.669817][T14296]  __dump_stack+0x1d/0x30
[  237.669844][T14296]  dump_stack_lvl+0xe8/0x140
[  237.669869][T14296]  dump_stack+0x15/0x1b
[  237.669944][T14296]  should_fail_ex+0x265/0x280
[  237.669975][T14296]  should_failslab+0x8c/0xb0
[  237.670008][T14296]  kmem_cache_alloc_noprof+0x50/0x310
[  237.670044][T14296]  ? getname_flags+0x80/0x3b0
[  237.670191][T14296]  getname_flags+0x80/0x3b0
[  237.670277][T14296]  __x64_sys_renameat+0x5d/0x80
[  237.670310][T14296]  x64_sys_call+0x25e2/0x2ff0
[  237.670331][T14296]  do_syscall_64+0xd2/0x200
[  237.670435][T14296]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  237.670465][T14296]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  237.670502][T14296]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.670548][T14296] RIP: 0033:0x7fb600f7eba9
[  237.670568][T14296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.670592][T14296] RSP: 002b:00007fb5ff9e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000108
[  237.670615][T14296] RAX: ffffffffffffffda RBX: 00007fb6011c5fa0 RCX: 00007fb600f7eba9
[  237.670631][T14296] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffff9c
[  237.670646][T14296] RBP: 00007fb5ff9e7090 R08: 0000000000000000 R09: 0000000000000000
[  237.670663][T14296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  237.670750][T14296] R13: 00007fb6011c6038 R14: 00007fb6011c5fa0 R15: 00007ffeafa60ac8
[  237.670770][T14296]  </TASK>
[  237.887321][T14301] netlink: 'syz.5.3846': attribute type 6 has an invalid length.
[  237.901355][T14306] program syz.6.3847 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  237.914307][T14304] loop6: detected capacity change from 0 to 512
[  237.929419][T14304] ext4: Unknown parameter 'kmem_cache_free'
[  237.937881][T14307] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3848'.
[  238.033914][T14315] netlink: 'syz.5.3852': attribute type 4 has an invalid length.
[  238.055960][T14323] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.108319][T14338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.118424][T14338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.128030][ T3408] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  238.137578][ T3408] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  238.150450][T14323] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.194738][T14344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3861'.
[  238.244827][T14323] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.256760][T14344] loop5: detected capacity change from 0 to 164
[  238.303960][T14323] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.569687][ T8784] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.588332][ T8784] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.597560][ T8784] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.605954][ T8784] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.670461][   T29] kauditd_printk_skb: 426 callbacks suppressed
[  238.670478][   T29] audit: type=1326 audit(238.632:120452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.9.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58a54eba9 code=0x7ffc0000
[  238.705220][   T29] audit: type=1326 audit(238.642:120453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.9.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58a54eba9 code=0x7ffc0000
[  238.728624][   T29] audit: type=1326 audit(238.642:120454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.9.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb58a54eba9 code=0x7ffc0000
[  238.751871][   T29] audit: type=1326 audit(238.642:120455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.9.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58a54eba9 code=0x7ffc0000
[  238.775040][   T29] audit: type=1326 audit(238.642:120456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.9.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb58a54eba9 code=0x7ffc0000
[  238.798365][   T29] audit: type=1326 audit(238.642:120457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.9.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58a54eba9 code=0x7ffc0000
[  238.821648][   T29] audit: type=1326 audit(238.642:120458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.9.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb58a54eba9 code=0x7ffc0000
[  238.845051][   T29] audit: type=1326 audit(238.642:120459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.9.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58a54eba9 code=0x7ffc0000
[  238.868253][   T29] audit: type=1326 audit(238.642:120460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.9.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb58a54eba9 code=0x7ffc0000
[  238.891406][   T29] audit: type=1326 audit(238.642:120461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.9.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58a54eba9 code=0x7ffc0000
[  238.918531][T14370] netlink: 'syz.5.3869': attribute type 4 has an invalid length.
[  238.945842][T14373] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3870'.
[  239.112937][T14385] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3876'.
[  239.199165][T14400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3883'.
[  239.209947][T14400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3883'.
[  239.236231][T14400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3883'.
[  239.353549][T14410] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  239.371929][T14409] IPVS: stopping master sync thread 14410 ...
[  239.477807][T14424] netlink: 'syz.0.3891': attribute type 4 has an invalid length.
[  239.506169][T14427] netlink: 'syz.0.3894': attribute type 6 has an invalid length.
[  239.552302][T14429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3895'.
[  239.562735][T14429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3895'.
[  239.647117][T14437] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  239.650043][T14438] netlink: 'syz.0.3898': attribute type 10 has an invalid length.
[  239.665982][T14438] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3898'.
[  239.675656][T14438] dummy0: entered promiscuous mode
[  239.681546][T14438] bridge0: port 1(dummy0) entered blocking state
[  239.687987][T14438] bridge0: port 1(dummy0) entered disabled state
[  239.694911][T14438] dummy0: entered allmulticast mode
[  239.701288][T14438] bridge0: port 1(dummy0) entered blocking state
[  239.707735][T14438] bridge0: port 1(dummy0) entered forwarding state
[  239.716979][T14435] IPVS: stopping master sync thread 14437 ...
[  239.782156][T14449] FAULT_INJECTION: forcing a failure.
[  239.782156][T14449] name failslab, interval 1, probability 0, space 0, times 0
[  239.795001][T14449] CPU: 1 UID: 0 PID: 14449 Comm: syz.2.3903 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  239.795036][T14449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  239.795051][T14449] Call Trace:
[  239.795060][T14449]  <TASK>
[  239.795076][T14449]  __dump_stack+0x1d/0x30
[  239.795161][T14449]  dump_stack_lvl+0xe8/0x140
[  239.795185][T14449]  dump_stack+0x15/0x1b
[  239.795202][T14449]  should_fail_ex+0x265/0x280
[  239.795230][T14449]  should_failslab+0x8c/0xb0
[  239.795257][T14449]  kmem_cache_alloc_noprof+0x50/0x310
[  239.795289][T14449]  ? skb_clone+0x151/0x1f0
[  239.795332][T14449]  skb_clone+0x151/0x1f0
[  239.795362][T14449]  __netlink_deliver_tap+0x2c9/0x500
[  239.795486][T14449]  netlink_unicast+0x66b/0x690
[  239.795511][T14449]  netlink_sendmsg+0x58b/0x6b0
[  239.795542][T14449]  ? __pfx_netlink_sendmsg+0x10/0x10
[  239.795582][T14449]  __sock_sendmsg+0x145/0x180
[  239.795623][T14449]  ____sys_sendmsg+0x31e/0x4e0
[  239.795700][T14449]  ___sys_sendmsg+0x17b/0x1d0
[  239.795766][T14449]  __x64_sys_sendmsg+0xd4/0x160
[  239.795855][T14449]  x64_sys_call+0x191e/0x2ff0
[  239.795876][T14449]  do_syscall_64+0xd2/0x200
[  239.795912][T14449]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  239.795940][T14449]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  239.796054][T14449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.796081][T14449] RIP: 0033:0x7f7c84f6eba9
[  239.796096][T14449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  239.796138][T14449] RSP: 002b:00007f7c839d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  239.796160][T14449] RAX: ffffffffffffffda RBX: 00007f7c851b5fa0 RCX: 00007f7c84f6eba9
[  239.796172][T14449] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  239.796184][T14449] RBP: 00007f7c839d7090 R08: 0000000000000000 R09: 0000000000000000
[  239.796206][T14449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  239.796218][T14449] R13: 00007f7c851b6038 R14: 00007f7c851b5fa0 R15: 00007ffc88b49938
[  239.796270][T14449]  </TASK>
[  240.059064][T14455] netlink: 'syz.0.3905': attribute type 4 has an invalid length.
[  240.121378][T14466] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3910'.
[  240.135564][T14472] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  240.152912][T14466] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3910'.
[  240.153223][T14464] IPVS: stopping master sync thread 14472 ...
[  240.268979][T14494] FAULT_INJECTION: forcing a failure.
[  240.268979][T14494] name failslab, interval 1, probability 0, space 0, times 0
[  240.282268][T14494] CPU: 1 UID: 0 PID: 14494 Comm: syz.0.3920 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  240.282302][T14494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  240.282318][T14494] Call Trace:
[  240.282327][T14494]  <TASK>
[  240.282335][T14494]  __dump_stack+0x1d/0x30
[  240.282368][T14494]  dump_stack_lvl+0xe8/0x140
[  240.282388][T14494]  dump_stack+0x15/0x1b
[  240.282405][T14494]  should_fail_ex+0x265/0x280
[  240.282511][T14494]  ? v9fs_mount+0x51/0x5c0
[  240.282545][T14494]  should_failslab+0x8c/0xb0
[  240.282572][T14494]  __kmalloc_cache_noprof+0x4c/0x320
[  240.282607][T14494]  v9fs_mount+0x51/0x5c0
[  240.282645][T14494]  ? selinux_capable+0x31/0x40
[  240.282693][T14494]  ? __pfx_v9fs_mount+0x10/0x10
[  240.282722][T14494]  legacy_get_tree+0x78/0xd0
[  240.282747][T14494]  vfs_get_tree+0x57/0x1d0
[  240.282795][T14494]  do_new_mount+0x207/0x5e0
[  240.282819][T14494]  ? security_capable+0x83/0x90
[  240.282877][T14494]  path_mount+0x4a4/0xb20
[  240.282952][T14494]  ? user_path_at+0x109/0x130
[  240.283069][T14494]  __se_sys_mount+0x28f/0x2e0
[  240.283109][T14494]  ? fput+0x8f/0xc0
[  240.283164][T14494]  __x64_sys_mount+0x67/0x80
[  240.283189][T14494]  x64_sys_call+0x2b4d/0x2ff0
[  240.283224][T14494]  do_syscall_64+0xd2/0x200
[  240.283259][T14494]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  240.283285][T14494]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  240.283359][T14494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.283437][T14494] RIP: 0033:0x7f089e90eba9
[  240.283514][T14494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  240.283533][T14494] RSP: 002b:00007f089d36f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  240.283553][T14494] RAX: ffffffffffffffda RBX: 00007f089eb55fa0 RCX: 00007f089e90eba9
[  240.283566][T14494] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000
[  240.283578][T14494] RBP: 00007f089d36f090 R08: 0000200000000080 R09: 0000000000000000
[  240.283591][T14494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  240.283670][T14494] R13: 00007f089eb56038 R14: 00007f089eb55fa0 R15: 00007fff45e06758
[  240.283757][T14494]  </TASK>
[  240.570094][T14499] netlink: 'syz.6.3923': attribute type 4 has an invalid length.
[  240.778146][T14515] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  240.826061][T14514] IPVS: stopping master sync thread 14515 ...
[  241.056943][T14537] loop9: detected capacity change from 0 to 128
[  241.063801][T14537] /dev/loop9: Can't open blockdev
[  241.166258][T14547] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  241.185220][T14546] IPVS: stopping master sync thread 14547 ...
[  241.809491][T14565] loop5: detected capacity change from 0 to 128
[  242.058165][T14580] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  242.075941][T14579] IPVS: stopping master sync thread 14580 ...
[  242.136991][T14583] netlink: 'syz.9.3951': attribute type 13 has an invalid length.
[  242.284791][  T173] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.302216][  T173] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.310768][  T173] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.325000][  T173] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.861993][   T23] usb usb6-port1: attempt power cycle
[  243.248247][T14635] loop9: detected capacity change from 0 to 512
[  243.254945][T14635] EXT4-fs: Ignoring removed mblk_io_submit option
[  243.261517][T14635] ext4: Unknown parameter 'smackfshat'
[  243.677628][T14649] IPVS: Error connecting to the multicast addr
[  243.753744][T14656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.762415][T14660] loop9: detected capacity change from 0 to 2048
[  243.762730][T14656] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.792201][T14660]  loop9: p1 < > p4
[  243.797259][T14660] loop9: p4 size 8388608 extends beyond EOD, truncated
[  243.806780][T14660] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11)
[  243.813436][T14660] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  243.821004][T14660] vhci_hcd vhci_hcd.0: Device attached
[  243.828312][T14661] vhci_hcd: connection closed
[  243.828401][  T396] vhci_hcd: stop threads
[  243.837421][  T396] vhci_hcd: release socket
[  243.841970][  T396] vhci_hcd: disconnect device
[  244.386939][T14670] netlink: 'syz.2.3983': attribute type 6 has an invalid length.
[  244.648257][   T29] kauditd_printk_skb: 357 callbacks suppressed
[  244.648276][   T29] audit: type=1326 audit(244.432:120817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.2.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  244.677644][   T29] audit: type=1326 audit(244.432:120818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.2.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  244.700757][   T29] audit: type=1326 audit(244.432:120819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.2.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  244.724152][   T29] audit: type=1326 audit(244.432:120820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.2.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  244.747213][   T29] audit: type=1326 audit(244.432:120821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.2.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  244.770556][   T29] audit: type=1326 audit(244.432:120822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.2.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  244.793830][   T29] audit: type=1326 audit(244.432:120823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.2.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  244.817003][   T29] audit: type=1326 audit(244.432:120824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.2.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  244.840129][   T29] audit: type=1326 audit(244.432:120825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.2.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  244.863383][   T29] audit: type=1326 audit(244.432:120826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.2.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c84f6eba9 code=0x7ffc0000
[  244.887176][   T23] usb usb6-port1: unable to enumerate USB device
[  244.997653][T14680] __nla_validate_parse: 12 callbacks suppressed
[  244.997674][T14680] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3986'.
[  245.087342][T14689] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  245.109951][T14688] IPVS: stopping master sync thread 14689 ...
[  245.230079][T14702] loop5: detected capacity change from 0 to 1024
[  245.236930][T14702] EXT4-fs: test_dummy_encryption option not supported
[  245.308702][T14708] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3997'.
[  245.470134][T14736] netlink: 'syz.2.4009': attribute type 4 has an invalid length.
[  245.492353][T14737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4008'.
[  245.604691][T14748] FAULT_INJECTION: forcing a failure.
[  245.604691][T14748] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  245.617835][T14748] CPU: 1 UID: 0 PID: 14748 Comm: syz.2.4014 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  245.617873][T14748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  245.617897][T14748] Call Trace:
[  245.617906][T14748]  <TASK>
[  245.617915][T14748]  __dump_stack+0x1d/0x30
[  245.617942][T14748]  dump_stack_lvl+0xe8/0x140
[  245.617968][T14748]  dump_stack+0x15/0x1b
[  245.617999][T14748]  should_fail_ex+0x265/0x280
[  245.618065][T14748]  should_fail+0xb/0x20
[  245.618092][T14748]  should_fail_usercopy+0x1a/0x20
[  245.618125][T14748]  _copy_from_user+0x1c/0xb0
[  245.618186][T14748]  __sys_sendto+0x19e/0x330
[  245.618220][T14748]  __x64_sys_sendto+0x76/0x90
[  245.618247][T14748]  x64_sys_call+0x2d05/0x2ff0
[  245.618276][T14748]  do_syscall_64+0xd2/0x200
[  245.618330][T14748]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  245.618408][T14748]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  245.618444][T14748]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.618471][T14748] RIP: 0033:0x7f7c84f6eba9
[  245.618491][T14748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  245.618515][T14748] RSP: 002b:00007f7c839d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  245.618625][T14748] RAX: ffffffffffffffda RBX: 00007f7c851b5fa0 RCX: 00007f7c84f6eba9
[  245.618712][T14748] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000005
[  245.618728][T14748] RBP: 00007f7c839d7090 R08: 0000200000000140 R09: 000000000000001c
[  245.618755][T14748] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001
[  245.618771][T14748] R13: 00007f7c851b6038 R14: 00007f7c851b5fa0 R15: 00007ffc88b49938
[  245.618795][T14748]  </TASK>
[  245.835228][T14752] vlan2: entered allmulticast mode
[  245.840554][T14752] bond0: entered allmulticast mode
[  245.912401][T14760] netlink: 'syz.5.4020': attribute type 4 has an invalid length.
[  246.073727][T14770] loop9: detected capacity change from 0 to 256
[  246.080828][T14770] FAT-fs (loop9): Directory bread(block 1285) failed
[  246.089970][T14770] FAT-fs (loop9): Directory bread(block 1285) failed
[  246.119526][  T389] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.164655][  T389] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.194218][  T389] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.214424][T14778] loop6: detected capacity change from 0 to 1024
[  246.214785][T14778] EXT4-fs: test_dummy_encryption option not supported
[  246.243752][  T389] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.489998][T14796] loop6: detected capacity change from 0 to 8192
[  246.490409][T14796] msdos: Unknown parameter 'A'
[  246.627997][  T389] bond0 (unregistering): Released all slaves
[  246.632357][  T389] bond1 (unregistering): Released all slaves
[  246.643496][  T389] bond2 (unregistering): Released all slaves
[  246.646287][  T389] bond3 (unregistering): Released all slaves
[  246.659886][  T389] bond4 (unregistering): Released all slaves
[  246.662846][  T389] bond5 (unregistering): Released all slaves
[  246.677447][  T389] bond6 (unregistering): Released all slaves
[  246.680433][  T389] bond7 (unregistering): Released all slaves
[  246.762435][ T3385] usb usb6-port1: attempt power cycle
[  246.863615][  T389] hsr_slave_0: left promiscuous mode
[  246.864010][  T389] hsr_slave_1: left promiscuous mode
[  246.875539][  T389] veth1_macvtap: left promiscuous mode
[  246.875649][  T389] veth0_macvtap: left promiscuous mode
[  246.875693][  T389] veth1_vlan: left promiscuous mode
[  246.875723][  T389] veth0_vlan: left promiscuous mode
[  247.003258][T14805] futex_wake_op: syz.9.4037 tries to shift op by -1; fix this program
[  247.079501][T14807] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4038'.
[  247.150907][T14779] chnl_net:caif_netlink_parms(): no params data found
[  247.200449][T14815] loop9: detected capacity change from 0 to 1024
[  247.209153][T14815] EXT4-fs: test_dummy_encryption option not supported
[  247.250391][T14779] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.257654][T14779] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.265196][T14779] bridge_slave_0: entered allmulticast mode
[  247.271968][T14779] bridge_slave_0: entered promiscuous mode
[  247.278950][T14779] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.286091][T14779] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.293635][T14779] bridge_slave_1: entered allmulticast mode
[  247.300313][T14779] bridge_slave_1: entered promiscuous mode
[  247.302524][T14820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.307494][T14822] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4043'.
[  247.316231][T14820] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.332403][  T389] IPVS: stop unused estimator thread 0...
[  247.352952][    T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  247.360636][T14779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  247.361204][    T9] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  247.382910][T14779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.404288][T14779] team0: Port device team_slave_0 added
[  247.419174][T14779] team0: Port device team_slave_1 added
[  247.435769][T14779] batman_adv: batadv0: Adding interface: batadv_slave_0
[  247.443011][T14779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.469203][T14779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  247.480602][T14779] batman_adv: batadv0: Adding interface: batadv_slave_1
[  247.487790][T14779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.513799][T14779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.549586][T14779] hsr_slave_0: entered promiscuous mode
[  247.555677][T14779] hsr_slave_1: entered promiscuous mode
[  247.561604][T14779] debugfs: 'hsr0' already exists in 'hsr'
[  247.567686][T14779] Cannot create hsr debugfs directory
[  247.578436][T14830] netlink: 52 bytes leftover after parsing attributes in process `,&#^%'.
[  247.612241][T14833] netlink: 'syz.5.4047': attribute type 6 has an invalid length.
[  247.660750][T14838] netlink: 'syz.5.4049': attribute type 3 has an invalid length.
[  247.702085][T14844] loop5: detected capacity change from 0 to 1024
[  247.708888][T14844] EXT4-fs: test_dummy_encryption option not supported
[  247.733185][T14846] SELinux:  policydb version -1152368876 does not match my version range 15-35
[  247.742504][T14846] SELinux: failed to load policy
[  247.904347][T14779] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  247.915650][T14779] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  247.925500][T14779] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  247.935189][T14779] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  247.942083][T14851] loop9: detected capacity change from 0 to 2048
[  247.976983][T14779] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.984491][T14851]  loop9: p1 < > p4
[  247.989639][T14851] loop9: p4 size 8388608 extends beyond EOD, truncated
[  247.990405][T14779] 8021q: adding VLAN 0 to HW filter on device team0
[  248.006372][T14851] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11)
[  248.013083][T14851] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  248.018929][T14779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  248.020792][T14851] vhci_hcd vhci_hcd.0: Device attached
[  248.030928][T14779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  248.039530][T14858] vhci_hcd: connection closed
[  248.047359][ T8784] vhci_hcd: stop threads
[  248.055409][ T8777] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.056378][ T8784] vhci_hcd: release socket
[  248.063548][ T8777] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.065379][ T8777] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.067993][ T8784] vhci_hcd: disconnect device
[  248.087008][ T8777] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.150616][T14779] 8021q: adding VLAN 0 to HW filter on device batadv0
[  248.216665][T14779] veth0_vlan: entered promiscuous mode
[  248.224893][T14779] veth1_vlan: entered promiscuous mode
[  248.239785][T14779] veth0_macvtap: entered promiscuous mode
[  248.247423][T14779] veth1_macvtap: entered promiscuous mode
[  248.258599][T14779] batman_adv: batadv0: Interface activated: batadv_slave_0
[  248.269887][T14779] batman_adv: batadv0: Interface activated: batadv_slave_1
[  248.280978][ T6975] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.290216][ T6975] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  248.306744][ T8777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.315949][ T8777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  248.591826][ T3385] usb usb6-port1: unable to enumerate USB device
[  248.642122][T14882] netlink: 52 bytes leftover after parsing attributes in process `,&#^%'.
[  248.690348][T14886] netlink: 'syz.5.4058': attribute type 6 has an invalid length.
[  248.759705][T14890] loop5: detected capacity change from 0 to 1024
[  248.766557][T14890] EXT4-fs: test_dummy_encryption option not supported
[  248.796642][T14892] SELinux:  policydb version -1152368876 does not match my version range 15-35
[  248.796679][T14892] SELinux: failed to load policy
[  249.016995][T14910] netlink: 52 bytes leftover after parsing attributes in process `,&#^%'.
[  249.206734][T14901] chnl_net:caif_netlink_parms(): no params data found
[  249.291735][T14901] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.299172][T14901] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.307025][T14901] bridge_slave_0: entered allmulticast mode
[  249.314121][T14901] bridge_slave_0: entered promiscuous mode
[  249.463389][ T6975] $Hÿ (unregistering): Released all slaves
[  249.480352][ T6975] bond0 (unregistering): Released all slaves
[  249.498286][ T6975] bond1 (unregistering): Released all slaves
[  249.511670][ T6975] bond2 (unregistering): Released all slaves
[  249.520193][ T6975] bond3 (unregistering): Released all slaves
[  249.529069][ T6975] bond4 (unregistering): Released all slaves
[  249.537788][ T6975] bond5 (unregistering): Released all slaves
[  249.546764][T14901] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.553938][T14901] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.561348][T14901] bridge_slave_1: entered allmulticast mode
[  249.568411][T14901] bridge_slave_1: entered promiscuous mode
[  249.575351][T14930] syzkaller0: entered allmulticast mode
[  249.581022][T14931] syzkaller0: entered promiscuous mode
[  249.610310][ T6975] tipc: Left network mode
[  249.616872][T14901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  249.628636][ T6975] IPVS: stopping backup sync thread 11929 ...
[  249.638296][T14901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.657042][T14928] syzkaller0: left promiscuous mode
[  249.662554][T14928] syzkaller0: left allmulticast mode
[  249.694029][   T29] kauditd_printk_skb: 313 callbacks suppressed
[  249.694048][   T29] audit: type=1326 audit(249.662:121140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.5.4074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fecb2eba9 code=0x7ffc0000
[  249.727816][   T29] audit: type=1326 audit(249.662:121141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.5.4074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fecb2eba9 code=0x7ffc0000
[  249.751117][   T29] audit: type=1326 audit(249.692:121142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.5.4074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fecb2eba9 code=0x7ffc0000
[  249.776401][   T29] audit: type=1326 audit(249.692:121143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.5.4074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fecb2eba9 code=0x7ffc0000
[  249.799694][   T29] audit: type=1326 audit(249.692:121144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.5.4074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fecb2eba9 code=0x7ffc0000
[  249.823260][   T29] audit: type=1326 audit(249.742:121145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.5.4074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1fecb2d510 code=0x7ffc0000
[  249.825417][T14940] FAULT_INJECTION: forcing a failure.
[  249.825417][T14940] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  249.846505][   T29] audit: type=1326 audit(249.742:121146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.5.4074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1fecb2d510 code=0x7ffc0000
[  249.859785][T14940] CPU: 0 UID: 0 PID: 14940 Comm: syz.1.4075 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  249.859891][T14940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  249.859909][T14940] Call Trace:
[  249.859918][T14940]  <TASK>
[  249.859930][T14940]  __dump_stack+0x1d/0x30
[  249.859960][T14940]  dump_stack_lvl+0xe8/0x140
[  249.859988][T14940]  dump_stack+0x15/0x1b
[  249.860011][T14940]  should_fail_ex+0x265/0x280
[  249.860080][T14940]  should_fail+0xb/0x20
[  249.860109][T14940]  should_fail_usercopy+0x1a/0x20
[  249.860144][T14940]  _copy_from_user+0x1c/0xb0
[  249.860267][T14940]  __sys_bpf+0x178/0x7b0
[  249.860315][T14940]  __x64_sys_bpf+0x41/0x50
[  249.860360][T14940]  x64_sys_call+0x2aea/0x2ff0
[  249.860392][T14940]  do_syscall_64+0xd2/0x200
[  249.860450][T14940]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  249.860485][T14940]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  249.860585][T14940]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.860617][T14940] RIP: 0033:0x7f05e0c8eba9
[  249.860639][T14940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  249.860665][T14940] RSP: 002b:00007f05df6d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  249.860691][T14940] RAX: ffffffffffffffda RBX: 00007f05e0ed6090 RCX: 00007f05e0c8eba9
[  249.860709][T14940] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000009
[  249.860727][T14940] RBP: 00007f05df6d6090 R08: 0000000000000000 R09: 0000000000000000
[  249.860793][T14940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  249.860810][T14940] R13: 00007f05e0ed6128 R14: 00007f05e0ed6090 R15: 00007ffdb2eacc08
[  249.860835][T14940]  </TASK>
[  250.053562][   T29] audit: type=1326 audit(249.742:121147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.5.4074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fecb2eba9 code=0x7ffc0000
[  250.076725][   T29] audit: type=1326 audit(249.742:121148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.5.4074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f1fecb2eba9 code=0x7ffc0000
[  250.099731][   T29] audit: type=1326 audit(249.742:121149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.5.4074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fecb2eba9 code=0x7ffc0000
[  250.132913][T14943] loop6: detected capacity change from 0 to 128
[  250.144279][T14901] team0: Port device team_slave_0 added
[  250.166439][T14945] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  250.178146][T14901] team0: Port device team_slave_1 added
[  250.190860][T14947] loop1: detected capacity change from 0 to 1024
[  250.198321][T14947] EXT4-fs: test_dummy_encryption option not supported
[  250.201159][T14944] IPVS: stopping master sync thread 14945 ...
[  250.232430][T14901] batman_adv: batadv0: Adding interface: batadv_slave_0
[  250.239519][T14901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.244144][T14950] netlink: 52 bytes leftover after parsing attributes in process `,&#^%'.
[  250.265781][T14901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  250.272345][T14901] batman_adv: batadv0: Adding interface: batadv_slave_1
[  250.292027][T14901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.318118][T14901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  250.363130][T14901] hsr_slave_0: entered promiscuous mode
[  250.369399][T14901] hsr_slave_1: entered promiscuous mode
[  250.380962][T14901] debugfs: 'hsr0' already exists in 'hsr'
[  250.386803][T14901] Cannot create hsr debugfs directory
[  250.523408][T14978] FAULT_INJECTION: forcing a failure.
[  250.523408][T14978] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  250.536944][T14978] CPU: 1 UID: 0 PID: 14978 Comm: syz.0.4087 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  250.536976][T14978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  250.536994][T14978] Call Trace:
[  250.537003][T14978]  <TASK>
[  250.537013][T14978]  __dump_stack+0x1d/0x30
[  250.537039][T14978]  dump_stack_lvl+0xe8/0x140
[  250.537065][T14978]  dump_stack+0x15/0x1b
[  250.537087][T14978]  should_fail_ex+0x265/0x280
[  250.537119][T14978]  should_fail+0xb/0x20
[  250.537211][T14978]  should_fail_usercopy+0x1a/0x20
[  250.537260][T14978]  _copy_to_user+0x20/0xa0
[  250.537311][T14978]  simple_read_from_buffer+0xb5/0x130
[  250.537338][T14978]  proc_fail_nth_read+0x10e/0x150
[  250.537419][T14978]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  250.537457][T14978]  vfs_read+0x1a5/0x770
[  250.537484][T14978]  ? __rcu_read_unlock+0x4f/0x70
[  250.537574][T14978]  ? __fget_files+0x184/0x1c0
[  250.537610][T14978]  ksys_read+0xda/0x1a0
[  250.537642][T14978]  __x64_sys_read+0x40/0x50
[  250.537725][T14978]  x64_sys_call+0x27bc/0x2ff0
[  250.537750][T14978]  do_syscall_64+0xd2/0x200
[  250.537792][T14978]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  250.537880][T14978]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  250.537989][T14978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.538017][T14978] RIP: 0033:0x7f089e90d5bc
[  250.538037][T14978] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  250.538060][T14978] RSP: 002b:00007f089d36f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  250.538121][T14978] RAX: ffffffffffffffda RBX: 00007f089eb55fa0 RCX: 00007f089e90d5bc
[  250.538136][T14978] RDX: 000000000000000f RSI: 00007f089d36f0a0 RDI: 0000000000000007
[  250.538152][T14978] RBP: 00007f089d36f090 R08: 0000000000000000 R09: 0000000000000000
[  250.538168][T14978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  250.538184][T14978] R13: 00007f089eb56038 R14: 00007f089eb55fa0 R15: 00007fff45e06758
[  250.538210][T14978]  </TASK>
[  250.778854][T14975] netlink: 'syz.5.4086': attribute type 4 has an invalid length.
[  251.017768][T14985] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.044397][T14987] netlink: 52 bytes leftover after parsing attributes in process `,&#^%'.
[  251.070177][T14988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.081791][T14988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.103991][T14985] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.183241][T14985] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.208846][T14992] loop6: detected capacity change from 0 to 128
[  251.283370][T14985] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.372395][T14901] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  251.396759][T14901] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  251.430049][T14901] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  251.454790][T14901] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  251.471774][T14997] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4095'.
[  251.485422][  T173] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.531744][  T173] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.552311][  T173] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.593182][T15012] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4099'.
[  251.602425][  T173] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.665761][T14901] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.704839][T14901] 8021q: adding VLAN 0 to HW filter on device team0
[  251.724116][T15015] syzkaller0: entered allmulticast mode
[  251.738485][ T8774] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.745801][ T8774] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.770292][T15020] netlink: 52 bytes leftover after parsing attributes in process `,&#^%'.
[  251.774589][ T8774] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.785922][ T8774] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.817659][T15015] syzkaller0: entered promiscuous mode
[  251.855296][T14901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  251.959745][T14901] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.088866][T15037] SELinux:  policydb version -1152368876 does not match my version range 15-35
[  252.100691][T15037] SELinux: failed to load policy
[  252.143951][T15030] SELinux: failed to load policy
[  252.208724][T15054] FAULT_INJECTION: forcing a failure.
[  252.208724][T15054] name failslab, interval 1, probability 0, space 0, times 0
[  252.221457][T15054] CPU: 1 UID: 0 PID: 15054 Comm: syz.6.4109 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  252.221487][T15054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  252.221504][T15054] Call Trace:
[  252.221512][T15054]  <TASK>
[  252.221597][T15054]  __dump_stack+0x1d/0x30
[  252.221624][T15054]  dump_stack_lvl+0xe8/0x140
[  252.221649][T15054]  dump_stack+0x15/0x1b
[  252.221667][T15054]  should_fail_ex+0x265/0x280
[  252.221704][T15054]  should_failslab+0x8c/0xb0
[  252.221785][T15054]  kmem_cache_alloc_noprof+0x50/0x310
[  252.221858][T15054]  ? getname_flags+0x80/0x3b0
[  252.221901][T15054]  getname_flags+0x80/0x3b0
[  252.221933][T15054]  do_sys_openat2+0x60/0x110
[  252.221967][T15054]  __x64_sys_openat+0xf2/0x120
[  252.222007][T15054]  x64_sys_call+0x2e9c/0x2ff0
[  252.222106][T15054]  do_syscall_64+0xd2/0x200
[  252.222138][T15054]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  252.222171][T15054]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  252.222318][T15054]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.222339][T15054] RIP: 0033:0x7fb600f7d510
[  252.222355][T15054] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  252.222373][T15054] RSP: 002b:00007fb5ff9e6b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  252.222438][T15054] RAX: ffffffffffffffda RBX: 0000000000141341 RCX: 00007fb600f7d510
[  252.222455][T15054] RDX: 0000000000141341 RSI: 00007fb5ff9e6c10 RDI: 00000000ffffff9c
[  252.222471][T15054] RBP: 00007fb5ff9e6c10 R08: 0000000000000000 R09: 0000000000000000
[  252.222487][T15054] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd
[  252.222500][T15054] R13: 00007fb6011c6038 R14: 00007fb6011c5fa0 R15: 00007ffeafa60ac8
[  252.222519][T15054]  </TASK>
[  252.418119][T15009] syzkaller0: left promiscuous mode
[  252.420996][T15057] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4110'.
[  252.423487][T15009] syzkaller0: left allmulticast mode
[  252.471547][T15059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4111'.
[  252.518109][T15067] netlink: 52 bytes leftover after parsing attributes in process `,&#^%'.
[  252.545710][T14901] veth0_vlan: entered promiscuous mode
[  252.574406][T15070] dummy0: left allmulticast mode
[  252.579535][T15070] bridge0: port 1(dummy0) entered disabled state
[  252.610224][T15073] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.639758][T14901] veth1_vlan: entered promiscuous mode
[  252.649974][T15076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.656295][T14901] veth0_macvtap: entered promiscuous mode
[  252.666095][T14901] veth1_macvtap: entered promiscuous mode
[  252.684422][T14901] batman_adv: batadv0: Interface activated: batadv_slave_0
[  252.692287][T15076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.696447][T14901] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.713661][  T396] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.724292][  T396] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.736048][  T396] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.747970][  T396] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.849371][T15083] bridge_slave_0: left allmulticast mode
[  252.855242][T15083] bridge_slave_0: left promiscuous mode
[  252.860981][T15083] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.865540][T15086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.876821][T15086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.885969][T15083] bridge_slave_1: left allmulticast mode
[  252.887582][ T3385] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  252.891873][T15083] bridge_slave_1: left promiscuous mode
[  252.904833][T15083] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.907084][ T3385] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  252.923983][T15083] bond0: (slave bond_slave_0): Releasing backup interface
[  252.935030][T15083] bond0: (slave bond_slave_1): Releasing backup interface
[  252.946982][T15083] team0: Port device team_slave_0 removed
[  252.956064][T15083] team0: Port device team_slave_1 removed
[  252.963124][T15083] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  252.970613][T15083] batman_adv: batadv0: Removing interface: batadv_slave_0
[  252.978862][T15083] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  252.986390][T15083] batman_adv: batadv0: Removing interface: batadv_slave_1
[  253.051397][T15093] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4122'.
[  253.086853][T15099] netlink: 52 bytes leftover after parsing attributes in process `,&#^%'.
[  253.218976][T15073] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.293983][T15073] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.346051][T15073] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.411289][ T8784] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  253.428811][ T8784] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  253.448602][ T8784] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.467438][ T8784] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.590658][T15134] netlink: 'syz.6.4141': attribute type 4 has an invalid length.
[  254.097296][T15154] loop1: detected capacity change from 0 to 1024
[  254.104924][T15154] EXT4-fs: test_dummy_encryption option not supported
[  254.122534][T15155] syzkaller0: entered allmulticast mode
[  254.131926][T15155] syzkaller0: entered promiscuous mode
[  254.253753][T15164] netlink: 'syz.5.4153': attribute type 4 has an invalid length.
[  254.336443][T15170] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.364627][T15149] syzkaller0: left promiscuous mode
[  254.370105][T15149] syzkaller0: left allmulticast mode
[  254.397050][T15175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.400502][T15170] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.419463][T15175] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.444326][T15170] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.455354][T15182] loop5: detected capacity change from 0 to 1024
[  254.462262][T15182] EXT4-fs: test_dummy_encryption option not supported
[  254.503537][T15170] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.504619][T15185] loop6: detected capacity change from 0 to 1024
[  254.539680][T15185] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.645133][T15199] netlink: 'syz.9.4165': attribute type 4 has an invalid length.
[  254.706037][T15185] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  254.740040][   T29] kauditd_printk_skb: 334 callbacks suppressed
[  254.740135][   T29] audit: type=1326 audit(254.702:121484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.9.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6b3beba9 code=0x7ffc0000
[  254.769536][   T29] audit: type=1326 audit(254.702:121485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.9.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6b3beba9 code=0x7ffc0000
[  254.794578][ T9920] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.807099][   T29] audit: type=1326 audit(254.742:121486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.9.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fbc6b3beba9 code=0x7ffc0000
[  254.830259][   T29] audit: type=1326 audit(254.742:121487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.9.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6b3beba9 code=0x7ffc0000
[  254.853631][   T29] audit: type=1326 audit(254.742:121488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.9.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6b3beba9 code=0x7ffc0000
[  254.876973][   T29] audit: type=1326 audit(254.742:121489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.9.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fbc6b3beba9 code=0x7ffc0000
[  254.900054][   T29] audit: type=1326 audit(254.742:121490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.9.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6b3beba9 code=0x7ffc0000
[  254.923235][   T29] audit: type=1326 audit(254.742:121491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.9.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6b3beba9 code=0x7ffc0000
[  254.946305][   T29] audit: type=1326 audit(254.742:121492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.9.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fbc6b3beba9 code=0x7ffc0000
[  254.969231][   T29] audit: type=1326 audit(254.742:121493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.9.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6b3beba9 code=0x7ffc0000
[  254.994115][T15211] FAULT_INJECTION: forcing a failure.
[  254.994115][T15211] name failslab, interval 1, probability 0, space 0, times 0
[  255.006796][T15211] CPU: 0 UID: 0 PID: 15211 Comm: syz.9.4171 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  255.006831][T15211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  255.006885][T15211] Call Trace:
[  255.006923][T15211]  <TASK>
[  255.006934][T15211]  __dump_stack+0x1d/0x30
[  255.006960][T15211]  dump_stack_lvl+0xe8/0x140
[  255.006983][T15211]  dump_stack+0x15/0x1b
[  255.007003][T15211]  should_fail_ex+0x265/0x280
[  255.007129][T15211]  should_failslab+0x8c/0xb0
[  255.007162][T15211]  kmem_cache_alloc_node_noprof+0x57/0x320
[  255.007192][T15211]  ? __alloc_skb+0x101/0x320
[  255.007217][T15211]  __alloc_skb+0x101/0x320
[  255.007326][T15211]  alloc_skb_with_frags+0x7d/0x470
[  255.007360][T15211]  ? selinux_file_open+0x2df/0x330
[  255.007413][T15211]  sock_alloc_send_pskb+0x43a/0x4f0
[  255.007455][T15211]  ? mntput+0x4b/0x80
[  255.007505][T15211]  tun_get_user+0x9b3/0x2680
[  255.007586][T15211]  ? ref_tracker_alloc+0x1f2/0x2f0
[  255.007621][T15211]  ? selinux_file_permission+0x1e4/0x320
[  255.007653][T15211]  tun_chr_write_iter+0x15e/0x210
[  255.007686][T15211]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  255.007710][T15211]  vfs_write+0x527/0x960
[  255.007742][T15211]  ksys_write+0xda/0x1a0
[  255.007766][T15211]  __x64_sys_write+0x40/0x50
[  255.007795][T15211]  x64_sys_call+0x27fe/0x2ff0
[  255.007854][T15211]  do_syscall_64+0xd2/0x200
[  255.007893][T15211]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  255.007975][T15211]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  255.008137][T15211]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.008174][T15211] RIP: 0033:0x7fbc6b3bd65f
[  255.008230][T15211] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  255.008265][T15211] RSP: 002b:00007fbc69e27000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  255.008290][T15211] RAX: ffffffffffffffda RBX: 00007fbc6b605fa0 RCX: 00007fbc6b3bd65f
[  255.008307][T15211] RDX: 0000000000001011 RSI: 0000200000000a00 RDI: 00000000000000c8
[  255.008323][T15211] RBP: 00007fbc69e27090 R08: 0000000000000000 R09: 0000000000000000
[  255.008389][T15211] R10: 0000000000001011 R11: 0000000000000293 R12: 0000000000000001
[  255.008406][T15211] R13: 00007fbc6b606038 R14: 00007fbc6b605fa0 R15: 00007ffddce2fb78
[  255.008428][T15211]  </TASK>
[  255.300941][T15220] __nla_validate_parse: 8 callbacks suppressed
[  255.300960][T15220] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4174'.
[  255.349217][T15225] futex_wake_op: syz.9.4177 tries to shift op by -1; fix this program
[  255.402147][T15228] loop9: detected capacity change from 0 to 2048
[  255.452612][T15228]  loop9: p1 < > p4
[  255.457011][T15228] loop9: p4 size 8388608 extends beyond EOD, truncated
[  255.470760][T15228] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11)
[  255.477412][T15228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  255.484986][T15228] vhci_hcd vhci_hcd.0: Device attached
[  255.495349][T15230] vhci_hcd: connection closed
[  255.495891][ T8777] vhci_hcd: stop threads
[  255.504987][ T8777] vhci_hcd: release socket
[  255.509526][ T8777] vhci_hcd: disconnect device
[  255.582264][T15241] netlink: 52 bytes leftover after parsing attributes in process `,&#^%'.
[  255.651997][T15249] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4186'.
[  256.337483][T15258] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  256.374689][T15260] netlink: 'syz.0.4189': attribute type 4 has an invalid length.
[  256.471518][T15265] syzkaller0: entered allmulticast mode
[  256.477488][T15265] syzkaller0: entered promiscuous mode
[  256.573687][T15273] netlink: 52 bytes leftover after parsing attributes in process `,&#^%'.
[  256.613049][T15278] loop6: detected capacity change from 0 to 1024
[  256.619849][T15278] EXT4-fs: Ignoring removed bh option
[  256.627822][T15278] EXT4-fs: inline encryption not supported
[  256.641344][T15278] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  256.662886][T15278] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000]
[  256.680444][T15278] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.4197: lblock 2 mapped to illegal pblock 2 (length 1)
[  256.713024][T15278] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.4197: lblock 0 mapped to illegal pblock 48 (length 1)
[  256.729462][T15284] FAULT_INJECTION: forcing a failure.
[  256.729462][T15284] name failslab, interval 1, probability 0, space 0, times 0
[  256.742233][T15284] CPU: 1 UID: 0 PID: 15284 Comm: syz.0.4199 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  256.742268][T15284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  256.742303][T15284] Call Trace:
[  256.742312][T15284]  <TASK>
[  256.742323][T15284]  __dump_stack+0x1d/0x30
[  256.742351][T15284]  dump_stack_lvl+0xe8/0x140
[  256.742372][T15284]  dump_stack+0x15/0x1b
[  256.742388][T15284]  should_fail_ex+0x265/0x280
[  256.742413][T15284]  should_failslab+0x8c/0xb0
[  256.742513][T15284]  kmem_cache_alloc_noprof+0x50/0x310
[  256.742575][T15284]  ? audit_log_start+0x365/0x6c0
[  256.742617][T15284]  audit_log_start+0x365/0x6c0
[  256.742662][T15284]  audit_seccomp+0x48/0x100
[  256.742746][T15284]  ? __seccomp_filter+0x68c/0x10d0
[  256.742776][T15284]  __seccomp_filter+0x69d/0x10d0
[  256.742800][T15284]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  256.742828][T15284]  ? vfs_write+0x7e8/0x960
[  256.742864][T15284]  ? __rcu_read_unlock+0x4f/0x70
[  256.742887][T15284]  ? __fget_files+0x184/0x1c0
[  256.742915][T15284]  __secure_computing+0x82/0x150
[  256.742941][T15284]  syscall_trace_enter+0xcf/0x1e0
[  256.743034][T15284]  do_syscall_64+0xac/0x200
[  256.743068][T15284]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  256.743092][T15284]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  256.743149][T15284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.743251][T15284] RIP: 0033:0x7f089e90eba9
[  256.743267][T15284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  256.743285][T15284] RSP: 002b:00007f089d36f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075
[  256.743307][T15284] RAX: ffffffffffffffda RBX: 00007f089eb55fa0 RCX: 00007f089e90eba9
[  256.743324][T15284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  256.743341][T15284] RBP: 00007f089d36f090 R08: 0000000000000000 R09: 0000000000000000
[  256.743423][T15284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  256.743440][T15284] R13: 00007f089eb56038 R14: 00007f089eb55fa0 R15: 00007fff45e06758
[  256.743460][T15284]  </TASK>
[  256.744529][T15278] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.4197: Failed to acquire dquot type 0
[  256.911949][T15287] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11)
[  256.969506][T15287] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  256.977409][T15287] vhci_hcd vhci_hcd.0: Device attached
[  256.984046][T15278] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  256.994302][T15278] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.4197: mark_inode_dirty error
[  257.006256][T15278] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  257.017128][T15278] EXT4-fs (loop6): 1 orphan inode deleted
[  257.023166][T15288] vhci_hcd: connection closed
[  257.023374][ T8784] vhci_hcd: stop threads
[  257.023682][T15278] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.028093][ T8784] vhci_hcd: release socket
[  257.028105][ T8784] vhci_hcd: disconnect device
[  257.053877][ T8777] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1)
[  257.079859][T15278] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 16: comm syz.6.4197: lblock 0 mapped to illegal pblock 16 (length 1)
[  257.095539][ T8777] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:13: Failed to release dquot type 0
[  257.119869][ T9920] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.130469][ T9920] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  257.145343][ T9920] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  257.154891][ T9920] EXT4-fs error (device loop6): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error
[  257.237885][T15263] syzkaller0: left promiscuous mode
[  257.243259][T15263] syzkaller0: left allmulticast mode
[  257.286712][T15298] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4204'.
[  257.726969][T15304] loop9: detected capacity change from 0 to 8192
[  257.794965][T15316] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649
[  257.796511][ T8777] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.813652][T15305] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649
[  257.831993][ T8784] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  257.850595][ T8784] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  257.863448][ T8784] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  257.896854][T15320] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.944282][T15320] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.947127][T15324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.964242][T15324] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  257.977940][   T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  257.985998][   T23] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  258.004334][T15329] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4215'.
[  258.023293][T15320] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.084459][T15320] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.624694][T15347] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.663367][T15347] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.676877][T15348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.685619][T15348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.710321][T15350] netlink: 'syz.0.4223': attribute type 6 has an invalid length.
[  258.723219][T15347] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.773534][T15347] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.823763][  T396] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.841693][T15358] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  258.856510][  T396] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.875519][  T396] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.884054][  T396] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.896602][T15357] IPVS: stopping master sync thread 15358 ...
[  259.072034][T15361] SELinux:  policydb version -1152368876 does not match my version range 15-35
[  259.081179][T15361] SELinux: failed to load policy
[  259.121648][T15365] netlink: 'syz.6.4229': attribute type 6 has an invalid length.
[  259.163606][T15368] netlink: 52 bytes leftover after parsing attributes in process `,&#^%'.
[  259.249857][T15374] syzkaller0: entered promiscuous mode
[  259.403059][T15377] netlink: 'syz.5.4234': attribute type 6 has an invalid length.
[  259.444243][T15380] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=15380 comm=syz.5.4235
[  259.457205][T15379] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=15379 comm=syz.5.4235
[  259.532217][T15387] SELinux:  policydb version -1152368876 does not match my version range 15-35
[  259.541656][T15387] SELinux: failed to load policy
[  259.813146][T15398] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  259.838222][T15400] SELinux:  policydb version -1152368876 does not match my version range 15-35
[  259.847309][T15400] SELinux: failed to load policy
[  259.940956][   T29] kauditd_printk_skb: 407 callbacks suppressed
[  259.940975][   T29] audit: type=1400 audit(259.902:121896): avc:  denied  { write } for  pid=15403 comm="syz.0.4246" name="usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  259.970361][   T29] audit: type=1400 audit(259.902:121897): avc:  denied  { open } for  pid=15403 comm="syz.0.4246" path="/dev/usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  259.993886][   T29] audit: type=1400 audit(259.902:121898): avc:  denied  { ioctl } for  pid=15403 comm="syz.0.4246" path="/dev/usbmon5" dev="devtmpfs" ino=157 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  260.023142][T15370] syzkaller0: left promiscuous mode
[  260.071411][T15414] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4247'.
[  260.100832][   T29] audit: type=1400 audit(260.062:121899): avc:  denied  { read } for  pid=15417 comm="syz.6.4250" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  260.102585][T15416] SELinux: failed to load policy
[  260.215620][T15429] netlink: 16 bytes leftover after parsing attributes in process `gtp'.
[  260.254160][T15433] netlink: 'syz.9.4256': attribute type 6 has an invalid length.
[  260.448473][T15438] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4258'.
[  260.503620][   T29] audit: type=1326 audit(260.472:121900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15443 comm="syz.5.4261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fecb2eba9 code=0x7ffc0000
[  260.526858][   T29] audit: type=1326 audit(260.472:121901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15443 comm="syz.5.4261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fecb2eba9 code=0x7ffc0000
[  260.550352][   T29] audit: type=1326 audit(260.472:121902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15443 comm="syz.5.4261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f1fecb2eba9 code=0x7ffc0000
[  260.573782][   T29] audit: type=1326 audit(260.472:121903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15443 comm="syz.5.4261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fecb2eba9 code=0x7ffc0000
[  260.596894][   T29] audit: type=1326 audit(260.472:121904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15443 comm="syz.5.4261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1fecb2eba9 code=0x7ffc0000
[  260.619911][   T29] audit: type=1326 audit(260.472:121905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15443 comm="syz.5.4261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fecb2eba9 code=0x7ffc0000
[  260.822384][T15452] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11)
[  260.829109][T15452] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  260.836827][T15452] vhci_hcd vhci_hcd.0: Device attached
[  260.843751][T15453] vhci_hcd: connection closed
[  260.843968][ T8777] vhci_hcd: stop threads
[  260.853066][ T8777] vhci_hcd: release socket
[  260.857502][ T8777] vhci_hcd: disconnect device
[  260.875731][T15456] netlink: 'syz.6.4266': attribute type 4 has an invalid length.
[  261.124292][T15463] SELinux:  policydb version -1152368876 does not match my version range 15-35
[  261.133439][T15463] SELinux: failed to load policy
[  261.170718][T15467] netlink: 52 bytes leftover after parsing attributes in process `,&#^%'.
[  261.366690][T15479] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  261.374449][T15479] SELinux: failed to load policy
[  261.441173][T15485] netlink: 'syz.0.4277': attribute type 4 has an invalid length.
[  261.812026][ T3385] ==================================================================
[  261.820248][ T3385] BUG: KCSAN: data-race in kick_pool / wq_worker_running
[  261.827273][ T3385] 
[  261.829605][ T3385] read-write to 0xffff888237d29d64 of 4 bytes by task 36 on cpu 1:
[  261.837521][ T3385]  wq_worker_running+0x95/0x120
[  261.842374][ T3385]  schedule_timeout+0xb7/0x170
[  261.847140][ T3385]  msleep+0x50/0x90
[  261.850953][ T3385]  nsim_fib_event_work+0x1ebc/0x21a0
[  261.856246][ T3385]  process_scheduled_works+0x4cb/0x9d0
[  261.861723][ T3385]  worker_thread+0x582/0x770
[  261.866320][ T3385]  kthread+0x489/0x510
[  261.870433][ T3385]  ret_from_fork+0x11f/0x1b0
[  261.875022][ T3385]  ret_from_fork_asm+0x1a/0x30
[  261.879793][ T3385] 
[  261.882117][ T3385] read to 0xffff888237d29d64 of 4 bytes by task 3385 on cpu 0:
[  261.889661][ T3385]  kick_pool+0x49/0x2d0
[  261.893834][ T3385]  __queue_work+0x8cb/0xb50
[  261.898421][ T3385]  queue_work_on+0xd1/0x160
[  261.902935][ T3385]  wg_queue_enqueue_per_peer_tx+0x119/0x270
[  261.908826][ T3385]  wg_packet_encrypt_worker+0x9e1/0xb80
[  261.914370][ T3385]  process_scheduled_works+0x4cb/0x9d0
[  261.919832][ T3385]  worker_thread+0x582/0x770
[  261.924495][ T3385]  kthread+0x489/0x510
[  261.928575][ T3385]  ret_from_fork+0x11f/0x1b0
[  261.933265][ T3385]  ret_from_fork_asm+0x1a/0x30
[  261.938045][ T3385] 
[  261.940375][ T3385] value changed: 0x00000000 -> 0x00000001
[  261.946087][ T3385] 
[  261.948405][ T3385] Reported by Kernel Concurrency Sanitizer on:
[  261.954566][ T3385] CPU: 0 UID: 0 PID: 3385 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  261.964412][ T3385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  261.974469][ T3385] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker
[  261.980980][ T3385] ==================================================================
[  262.017758][ T8777] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  262.029540][ T8777] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  262.042804][  T173] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  262.054903][  T173] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0