last executing test programs:

3m12.19101065s ago: executing program 4 (id=1019):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0x7800, 0x5, 0x1, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x68, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x26}}}}})
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x2100)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(r1)

3m11.273977555s ago: executing program 4 (id=1041):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x100)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000940)={0x2, 0x3, 0x0, [{0x9, 0xffffffffffffffff, 0xa53, 0x8, 0x1, 0x4e, 0x47}, {0x1, 0x92e2, 0x9, 0x4, 0x5, 0x3, 0x4, '\x00', 0x7}, {0x8396, 0x3, 0x8000000000000000, 0xd, 0x9, 0x0, 0x64, '\x00', 0xb}]})
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid}]}, 0x2, 0x44a, &(0x7f0000000400)="$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")

3m10.918993791s ago: executing program 4 (id=1047):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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")
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
io_setup(0x5ff, &(0x7f0000000040)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) (fail_nth: 4)

3m10.769005713s ago: executing program 4 (id=1053):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0)
io_setup(0x4, &(0x7f0000000100)=<r0=>0x0)
io_getevents(r0, 0x2, 0x5, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x484, &(0x7f0000000480), 0x1, 0xb95, &(0x7f00000017c0)="$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")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
getpid()
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x15, 0x9, 0x3, 0xfffffffe}, {0x60, 0x4, 0xfd}, {}, {0x0, 0x0, 0x0, 0x1000}, {0x6, 0x3}]})
syz_clone(0x2045280, 0x0, 0x0, 0x0, 0x0, 0x0)

3m9.378443746s ago: executing program 4 (id=1075):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x7, 0x7, 0x80, 0x3000000}, 0x14)

3m9.099998951s ago: executing program 4 (id=1084):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000240)=ANY=[@ANYBLOB="0000d6db14eed9b7e49912db467708f6f106295a05f4b23f18"])

3m9.09966573s ago: executing program 32 (id=1084):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000240)=ANY=[@ANYBLOB="0000d6db14eed9b7e49912db467708f6f106295a05f4b23f18"])

3m0.796086055s ago: executing program 2 (id=1225):
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x49}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x81}, 0x18)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0)
syz_read_part_table(0x614, &(0x7f0000000000)="$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")

3m0.284000803s ago: executing program 2 (id=1232):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xcc0984f9ead32b32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x4}, 0x18)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[@ANYBLOB="756e686964652c68696465006e6f726f636b2c73657373696f6e3d3078303030303030013030303030303030312c686964652c63007b6865636b3d7374726963f4416e6f636fd689c91ceb036442a5e8b65659212a2bbc4e30952aa22edafcc01c50d9545f6d70726573534d6e6f726f636b2c6368657f12106458668eb97fd25f742c696f636861727365743d69736f383835392d31332c63727566742c7065726d6928d7997c17d1c8704a54dc34229c72656374696f2c61756469742c004b32b19ac463afda9675ef356e50e2fb3d253ba1480f27afe645fded942f5957f2992896524e7731fa148037452b21c34c9918911ac37dff04099efbbf3c69c8fb9bdcda4683151bb24329a40b273da9bce1145213686d55a96caab752943c330423edc3876e0b859d57cd6d60dc5220aa1367c24de5e66343c128db17391d25b7aa35001e68df726f9ca1e0bfab6993329f0318602f3c51a28ed0858da3e3c47e95de50cbd34e68dd8517f1b4e1eeab0000000000e7b4ea43ef9e4d817aae8e0d2e71215bc0127620b046361adbde0b60bee63e91aa28d93cd8d79802966dbfacceffe6b1d302c5515d7323f7cca3f665a6964cba6cd16ae40bc68e94ac6b40bf96a55dcefd4024a5d7a848d08bdb5d8bb89b4c1968cf6ae0fd7858fa38b738c1ee6822f2cfdb30c3941199251d603d495ab6ce2ddb8e918e72b9171aaa287f2b19755bdc92109150850d5c14ec2ac32dee0122b28fcb3e88d5096d6352799c5f13f597695adfd21e644379e6a400000000000000000000000000fa41c3f14dca4ef03fed7e6466a4e2d4503979398731ee0fc7487e0b09466d841e2d8e64ed9e0d4333e6a79acee454fdb4fff932f123000000", @ANYRES16, @ANYRESOCT], 0x1, 0x67e, &(0x7f0000001600)="$eJzs3V1v29Ydx/Ef5SfFHYJiG4IgSJOTZAUcLFMouXFgZMCqUZTNTRIFUh5sYECRNXYRRE63JAMW3xS+2BPQvYHd9WK72IsYsOu9iu1uA4rtbsBuWPCQsiVbD1btJG3y/QStKPLPc/4kFf7BSDwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQ49Vct+yoEbQ2Ns1oXi0Km2OWZ63N6WY2cXNiv5KT/qdiURezWRe/fbj4Qvq/67qcvbusYvpS1N5bF96+963ZQm/9MQl9GZq2wafP9x7d73a3n5wgdkZTN/8qqXCCoDW/FcRh0Kyu+SaIQ7O6suLeXq/Hph40/Hgr7vhN40V+oRNGZsm7acqrq8vGL22FG621WrXh92be/V7FdVfMjxayAy2pFHvrQaMRtNZsTLo4jblrPv1pFuBXm8bsPOxuL09KMg0qnySoMimo4lYq5XKlUl65s3rnruvOHpvhphz3gI5FnPmHFl8zZ3fyBk6pkNb/fzpSQ0W1tKFNmaF/PNUUKVRzxPJcr/6/e9sf229//e9V+YvSD/LFl2Tr/5Xs3ZVR9X9ELkbGrjBsiTNi/nR/5vJWnuq59vRI99VVV9t6cgZtG5mrp23h12eSxz+SzOiINflqKVCsUIGaqto5Jp9jtKoVrcjVB1pXXbGM6grUkK9YW4rVkW8/UZ4i+aqqo1CRjJbk6aaMylrVqpZl5KukLYXaUEtrqqmq/yVJsqOHdr8vj9kK9YLKIwIW+oMqY1oaVf9/9kn2Oc3rv0v9f1Nln4OF/Cw2Lgb4Ckjy6/8pXX0x2QAAAAAAgBfBsf/67tjv7t+RlKgeNHz3VacFAAAAAADOkKNkQZflyP6kTe/I4fofAAAAAIDXjWPvsXMkLdof9TuHd0Kd5B8BZl5CigAAAAAA4JTsnf9X5qXEDlpxVc5U1/8AAAAAAOBr4Hd9Y+zP9sbYTXpf6xckxe0F56//WVA05+y3N7/j7FbTJdXdPObYLwA69UvO+XygXvsyL8m+8/zLTt5bPgjmwbiDn+9MGuvfiY4kMD/T38CIBJy055XZ/J0+1bVslWv5OPMP9gqyS7JeFutBwy95YeNeWdXq+ULH3+z88vHDX0nRwXbuPOxulz78uPvA5rKfztrfTRv9ZCCdwvCdcZjLMzvegr3nYtgWn1O91+XvW81Fx/br9rZ/RtXdQn9H4w7AYZ+/0fXsmF1fzGIX9w5G3E+3v5huf7lkD9nA1kdzzmEW5aNbPuxAjMiiaLO4kcXcWLqRvfTyS9spOMXvzkiV0vFjMJBFpT+LyfvC+e+xfTEui3xfLKdZ/C1taEQWy9NlceyIAMCrsnNYhewg5sfqbq889E5qX6ruTK7u7w9W92d/TBK7wow0m383MbaXotIz+pJj69C87Il19tKQM7qb15WiRpzR3VNUt7Svvxw+AylP+1gW/0+S5F7Z9vuHI1X1s3SFz0b2GzcqM+kuvP1s9+d2APzUR9sfbT+uVJZX3Pdc905Fc3Yz8pcZHc2U32wCAE7wjJ2JEc57upZFXHvw73ezqYGK982DnxSU9KE+VlcPdKv3CIGrw1td7PsZwq3sqlV9V63mwtv3zklHY8u6NfKqztbSvtjKQeyceqsMVurD2OUXfBQAAHi5rk+ow8Prf3Gg/t/SUhaxdGnodfdgLT/6hOBRseXJyb9/1nsDAIA3gx997ix2futEUdD+oLy6Wq521n0Thd6PTRTU1nwTtDp+5K1XW2u+aUdhJ/TChmlHWghqfmzijXY7jDqmHkamHcbBpn3yu8kf/R77zWqrE3hxu+FXY994YatTnZGpBbFn2hs/bATxuh/ZleO27wX1wKt2grBl4nAj8vySMbHv9wUGNb/VCepBOtky7ShoVqMt85OwsdH0Tc2PvShod8KsQduX1zFBqx5GTdtsScnUDzoEAOB19PT53qP73e72kzET+5ock0/MD2mQ75sBAPiKOSzXU6xUfIEJAQAAAAAAAAAAAAAAAAAAAACAY05y/99UE3PDbhaUDub84vyRtf6kYe04OuvEppkoTLtW75aIvUd/HxN87mBOb/f3x+y/tA381zekt+wcZXNmz76vc3ZvvLwD9/2dbI+OjEkXDl20cHAsZs/+r0M68fjPIxYlSZKMX31hcB/Oj9vAwYlZSU/mT3EIBk4TjJsBvIa+CAAA//9z/kFZ")
open$dir(&(0x7f0000000000)='./file0\x00', 0x40440, 0xe3)

3m0.268569833s ago: executing program 2 (id=1234):
r0 = io_uring_setup(0x7a7a, &(0x7f0000000180)={0x0, 0x3460, 0x2000, 0x103, 0x346})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
setreuid(0xee01, 0x0)
getresuid(&(0x7f0000000300)=<r2=>0x0, &(0x7f00000003c0), &(0x7f0000000400)=<r3=>0x0)
setreuid(r3, r2)
setreuid(0xffffffffffffffff, r2)
ioctl$TIOCSLCKTRMIOS(r1, 0x5457, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYBLOB="72bc5335f25d3f3471c221c1248708f0176d956250af7da979e31f3e53077131595afec7c817d353510ec9b057390ca780942ba072ba6868f3483539411fceb9a8a0414f2ccdcb96bcbe8c6ae0ee74bda6bef32f1475a541ea5fc0f86d4f06f95ac4b663b8c258f5", @ANYRES8=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0)
ioctl$TIOCGRS485(r6, 0x5418, &(0x7f0000000200))
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00')
r11 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r12 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r12, r11, 0x0, 0xd)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r11, 0x111, 0x5, 0x7, 0x4)
writev(r10, &(0x7f0000000000)=[{&(0x7f0000000400)="f6", 0x1}], 0x1)
ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000280)={'lo\x00', @link_local})
recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000, 0x0, 0x0, 0x0)

3m0.171805105s ago: executing program 2 (id=1237):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x45800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000280)='./file1\x00', 0x2818080, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xfd, 0x215, &(0x7f0000000940)="$eJzs3T9rE2EcB/Bf27S5OHUTROXAQQcp6iuoSAUxICgddFJoXBIRkiXpkr4Bd1ffiS/FwRcgnbKUk3iX5o8pJjV/sH4+S35333vufk9CLlny5O3ND/Wjj633369/jiTZiM392I/eRuzGZgycBABwlfSyLH5kuXX3AgCsxgyf/2crbgkAWLJXr988f1ytHrxM0yTi9KR92D7MH/P86bPqwYP0l93hqNN2+3DrPH+YTn536Ofbca3IH+Xj0/F8J+7dyfN+9uRFdSIvx9Fypw4AAAAAAAAAAAAAAAAAAAAAAGtzK9KBqev77O1N5pUiz7dG1geaWL+nFDdKxeZweaCsG/EloruKqQEAAAAAAAAAAAAAAAAAAMA/o9U5rr9rNGrNYVGOiPE98xQbxYkvOXxKEbf750umtdo5rm/FX11ic87hSTG90agUEQuZ6axFxPaiTlhaVc+LKe5njUatUrwGFx+cju/5+u1Td95rlRfR8yXfBTsRsaznsJdl2UwHD+8R5Yl7RmUF9yUAAAAAAAAAAAAAAAAAAPgfjfzM/jfJOhoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDUY/P//3e18u9Zsdc6y/p7mILq46EbEn46pNVvnF6usb54AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcbT8DAAD//7VyJ1o=")
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x120)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r4 = getpid()
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r3, r1, 0x0, 0xffffffffffff8001)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
getresuid(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000080), &(0x7f0000000280)='%pI4   \x00'}, 0x20)
stat(0x0, 0x0)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400060000000000100004000000000020000000000000002f0107151dd77e5891b4cf37897fcc1067abccd1815b13454b4f384936cf679bc53b6fa7cdc195230065bf3ea71fabb95baeb63677eea03b09af8e5f"], 0x24, 0x3)
close(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x2ab}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = getpid()
setreuid(0xee00, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x24020000)
syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r6], 0x1}, 0x58)

2m59.781461431s ago: executing program 2 (id=1243):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x180, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

2m59.353196538s ago: executing program 2 (id=1249):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000300000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x16e, &(0x7f0000000b00)={0x0, 0xfffffffd, 0x1, 0x0, 0x4}, &(0x7f0000001240)=<r4=>0x0, &(0x7f0000001340)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000bc0)='@', 0x1, 0x4000a000})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b000000070000000500"], 0x50)
fcntl$dupfd(r6, 0x0, r6)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004004598f5aa000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4100}, 0x24040000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc4b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r10, &(0x7f00000000c0)=ANY=[], 0x15)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x2)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100"], 0x2c}}, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r11}, 0x10)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r12, &(0x7f0000000180), 0x40010)
r13 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r13, 0x6, 0x0, 0x0, 0x0)

2m59.336388919s ago: executing program 33 (id=1249):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000300000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x16e, &(0x7f0000000b00)={0x0, 0xfffffffd, 0x1, 0x0, 0x4}, &(0x7f0000001240)=<r4=>0x0, &(0x7f0000001340)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000bc0)='@', 0x1, 0x4000a000})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b000000070000000500"], 0x50)
fcntl$dupfd(r6, 0x0, r6)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004004598f5aa000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4100}, 0x24040000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc4b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r10, &(0x7f00000000c0)=ANY=[], 0x15)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x2)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100"], 0x2c}}, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r11}, 0x10)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r12, &(0x7f0000000180), 0x40010)
r13 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r13, 0x6, 0x0, 0x0, 0x0)

2m42.67238056s ago: executing program 6 (id=1545):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r2, 0xffffffffffffffff, 0x0) (fail_nth: 1)

2m42.444947483s ago: executing program 6 (id=1546):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020f000010000000000000000000000003"], 0x80}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x24060400)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x18208e, &(0x7f0000005a00), 0x1, 0x42f, &(0x7f0000000940)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x835, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r1, 0x1}, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000008500"/22], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = add_key(&(0x7f0000000840)='keyring\x00', &(0x7f0000000880)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r4 = add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f00000001c0)="1f", 0x1, r3)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
shmget$private(0x0, 0x1000, 0x800, &(0x7f00002a2000/0x1000)=nil)
mremap(&(0x7f00004c0000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00008a0000/0x2000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000000c0), &(0x7f0000000200)=ANY=[], 0x90f, 0x3)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080))
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{}, &(0x7f00000001c0), &(0x7f0000000200)='%-010d \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
add_key$user(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000580)="afacab88bd63f14118fd12228d460b4556b7df1bf980255ff8c7cae18ea8470156605931a442ad804f45c285f63128ab454b726617d3497d33f39327dd979c6afd5384cf5ce044ccae9c308d8cf2c9a88369ecae044ff408ddcb39a7cc40128196772981cbd203c26de71d8bac9d488ab23690b40fa7926bf6c614b71324d0de9c0d83ec201dfd287d281c2f09dd47e0604efc6b76cac88fddf874061845f0397e1caabe4fad97c62b47238b5ac309424d9838", 0xb3, r4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6, 0x0, 0x101}, 0x18)
setreuid(0x0, 0xee00)

2m42.363840285s ago: executing program 6 (id=1551):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRES64, @ANYRESHEX], 0xfe, 0x667, &(0x7f0000000d40)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
capset(0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20)
creat(&(0x7f0000000340)='./bus\x00', 0x0)

2m42.262294417s ago: executing program 6 (id=1554):
r0 = epoll_create(0x8)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0xfffffffffffffe82, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
r4 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000000c0), 0x4)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x250002)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000680)=ANY=[@ANYRES8, @ANYRESOCT=r0, @ANYBLOB="2e06c06a8f71941243cb45115fb34f92e5fd6efe1c82b77753111d9915f1c8cffaffcc7d5843e5dfa7104a0aaeb9e6ccd7ce23dae2afca73adab85a74cc3ba669768ed9492277679060298ca8e4c9ee90ca32735b334ebe587a0ae2beac6e81d694353429e7962586653d62e", @ANYBLOB="1125e356927126d3e47b69f76d3cf115d5443f6034d8c37cb78c4627744c1fde0a211e3bab21d54032049c9810e6c129eb613bca24e8c974e145c932058cab25a8598acdfc8e3c9cedd3ebf9519a49976a2b71d9f4bab252991ccc3178084feafae195d89e960affb74b942dff22b0bec4dcd410f7ffe9e78ec8631341faf146fdd2302c3952ad854ac31cb035b4b6f5", @ANYRES16=r2, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r6}, 0x10)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r5, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000380)={[{@nobh}, {@bsdgroups}, {@resuid}, {@grpquota}, {@minixdf}, {@nodiscard}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}]}, 0x1, 0x5ec, &(0x7f00000018c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0)
llistxattr(&(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0)

2m41.704026335s ago: executing program 6 (id=1558):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mq_open(0x0, 0x800, 0x1d0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil)
munmap(&(0x7f0000003000/0x4000)=nil, 0x4000)
pipe(&(0x7f0000002480))
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
syz_read_part_table(0x5c3, &(0x7f00000007c0)="$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")
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)="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")
sendmsg$nl_generic(r1, &(0x7f0000001780)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001740)={&(0x7f0000001480)={0x2a0, 0x42, 0x4, 0x70bd28, 0x25dfdbfe, {0x1f}, [@generic="d0aa327ecf7875e624bb0f6acb6a05f77ec71cdc15eac06dd95423706e8be369b89451543a3feca112a241a51bfe90c058ee", @nested={0x90, 0x2a, 0x0, 0x1, [@nested={0x4, 0x70}, @generic="79fec6ff4888ea24cbfa2225ace11e76d776e20920d89501ae5b9c774a935f4cb923ca065e1abb1050675ff3a52688c93fdb3ec7ba5949018932aaab3fa2f1306eefeba4b4f5cac3ae9a7f70d4bbb166e70312139ffa70aa85f3ab7bd0ff282d86d481126904007e8b16b31c7c766940be97af42", @typed={0x14, 0xed, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @generic="f5c8711c7ff30eba037b967cafe4f043b431efcf4e01bfcc50900d3038354e613fa680f0a64981bf66ed2f176d33475c61866b725c445d999c35bb9a3777feec3e28de5c5e406b4efcf28c0ff54657b1159c72a4faf85fae08d26821bd685e9f53211e1914709be875c908f1b038e345579618dd5744b66c03fa1b45360a07ea1b442c01eafff7a7635c215ec211613ee3204c66551af12696f54ea3c656b429b5312137876279153b43472d8ea46629ce497ac3c27371c8960828b8fa0f40b2f0d1c41a2cd0", @generic="b05a52a9c0917c1d5ef5c723c96b2d6dc68f5e9d37deeb4bdd34672ee71fe785abb23f7110b6917f815ed5c81914ef1dd3f9fa389932d2f23dae3a524d83676958900f94bb5af84266f1255c6cba75882e2adced61211146b3daa25e31a58ef6560162d0a92c52032083e7b921fd664bcca6f03cc090c549a9b244306628749862079cd658a2bc30dd859aacb9ce084254c223a7041ebbb55d8185d771a69ce6464f", @typed={0x4, 0xa4}, @nested={0x5c, 0x64, 0x0, 0x1, [@nested={0x4, 0xf2}, @typed={0x14, 0xaf, 0x0, 0x0, @ipv6=@remote}, @typed={0x39, 0x0, 0x0, 0x0, @binary="3b44d9f8f5ced12fb1f7e0514d279ae28a4bca016c8e855bbd3032ccdc233d429c32f9d540fa79bce9e527f2b7c883cfd12a20a29b"}, @typed={0x4, 0x83}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001800), r1)
sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x24, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x9702}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r5 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)="810ca3de10198298f9e7a921686f06f39cf623975432fcd1c1bd670ca2c64b5c6c179e1a68c0ce4e016c98fa6e8f40")
ioctl$PERF_EVENT_IOC_ID(r5, 0x4008240b, &(0x7f00000013c0))
ustat(0x1ff, &(0x7f0000001900))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000000)={0x20, 0x3, 0x9, 0xd, 0x0, 0xfffffffe, 0x0})
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000001940)=ANY=[@ANYBLOB="ac080000a8146dc18a1ea66daa082b47044033420d7264b6c30610883b28234c7b2121f5a6292fbcb716e4f1f2a3a3784b17edea442193c8c61630", @ANYRES16=r2, @ANYBLOB="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"], 0x8ac}, 0x1, 0x0, 0x0, 0x40480c1}, 0x2008040)

2m41.231522323s ago: executing program 6 (id=1567):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='sched_switch\x00', r0}, 0xff77)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e)
gettid()
fadvise64(0xffffffffffffffff, 0x9, 0x280000000000, 0x1)
timer_settime(0x0, 0x0, 0x0, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x2)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f00000007c0)='mm_page_alloc\x00', r0, 0x0, 0x5874}, 0x2d)
set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r6)
getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x1, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0xc, 0x4}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x1, 0x0, {0x0, 0x0, 0x0, r7, {0xffe8, 0x3}, {0x0, 0x2}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0)

2m41.231227053s ago: executing program 34 (id=1567):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='sched_switch\x00', r0}, 0xff77)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e)
gettid()
fadvise64(0xffffffffffffffff, 0x9, 0x280000000000, 0x1)
timer_settime(0x0, 0x0, 0x0, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x2)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f00000007c0)='mm_page_alloc\x00', r0, 0x0, 0x5874}, 0x2d)
set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r6)
getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x1, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0xc, 0x4}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x1, 0x0, {0x0, 0x0, 0x0, r7, {0xffe8, 0x3}, {0x0, 0x2}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0)

2m26.902838446s ago: executing program 7 (id=1802):
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f00000001c0)={0xfffffe00, 0x8, 0x3166000, 0xf5, 0x4})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0xd0, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_SEQADJ_CORRECTION_POS={0x4, 0x1, 0x1, 0x0, 0x46e2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4927}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xb1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xf0000000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7c9}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xd0}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xfffffff4}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xfffffffb}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000090}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_evict_inode\x00', r1, 0x0, 0x40000000000accb}, 0xfffffffffffffffb)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', <r3=>0x0, 0x29, 0x8, 0x9, 0xfffffff9, 0x14, @dev={0xfe, 0x80, '\x00', 0x42}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x8000, 0x8, 0x3}})
r4 = socket$key(0xf, 0x3, 0x2)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1b, &(0x7f00000000c0)=0x7, 0x4)
sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="020e0000180000000000000000000000010005"], 0xc0}}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0)
renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)='.\x02\x00', 0x4)
write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00000005000000020000000600000004500000", @ANYRES32=0x1, @ANYBLOB="06000000000000000000000000000000000000006979e4cecd3d62f15829cffabf7e8e1c92fc27f900000000000000000000f25281a998e9a7a2419760f4285ab301a875c0f7f1535778ced2fe8d8319f825e55130e2d715ff2e958db1f189ff6010c7d3eeeba2acf0b3a8ab312465285723aaeb5db2e0390644736dcc1b34cfa2ec2bff9bb066d0e5dfbda63393b6d4d7e95e005883f79cac6e8f53d9fd8c68790b86447bd9a1229e3ee8d60dc053694527ad1f6becef13ec95973402bfad9bc8c0838445f43fc62b00"/215, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000001000000010000000f00"/28], 0x50)

2m26.845015747s ago: executing program 7 (id=1803):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7ca, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback, @local, [@srh]}}}}}}}, 0x0)

2m26.838217497s ago: executing program 7 (id=1805):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f00000038c0)=[{{&(0x7f0000001cc0)={0xa, 0xfffc, 0x0, @mcast2, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x20}}], 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xa921}, 0x18)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780), 0xa00}, 0x20)

2m26.771142048s ago: executing program 7 (id=1807):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2b93089, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="170000000000000004000000ff000027f5e7bd2462c77a4261bbbf100000000000db075d8648770555ef4e4616a330eec1413d695a2745ad014029f35465857fb97efada2e187c4bd6cb2121ff6c37e71589e2d01a6d394931ad", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000006c0)={'erspan0\x00', <r5=>0x0, 0x20, 0x8000, 0x7, 0x3, {{0x2d, 0x4, 0x1, 0x8, 0xb4, 0x66, 0x0, 0x8, 0x4, 0x0, @loopback, @remote, {[@timestamp={0x44, 0xc, 0x8a, 0x0, 0x4, [0x4, 0x8]}, @timestamp_prespec={0x44, 0x14, 0xbc, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010100, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x86, 0x1, 0xf, [{@empty, 0x5}, {@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x4}, {@private=0xa010100, 0x3}, {@private=0xa010100, 0x400}, {@empty, 0x4}, {@local, 0x8}]}, @rr={0x7, 0x1b, 0x5b, [@empty, @local, @remote, @broadcast, @loopback, @broadcast]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x5b, [@loopback, @remote, @loopback, @loopback, @multicast2, @remote, @broadcast, @multicast1]}]}}}}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="04000000000000000400000000001800000000000000003632753eb2005f2ec05c20ceb90000000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000fade000000000000009500"/25], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x8000000000000000}, 0x18)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c940000", @ANYRES16=r8, @ANYBLOB="010300000000000000000100000018000180140002006d616373656330000000000000000000"], 0x2c}}, 0x4004810)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r3, 0x0, 0x6}, 0x18)

2m26.709754429s ago: executing program 7 (id=1812):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x7, &(0x7f0000000380)={[{@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@auto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x3, 0x435, &(0x7f0000000d80)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000004000000e27f000001000000e5000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2, 0x826f}}}, 0x32)
sendmmsg(r4, &(0x7f0000008080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040804)

2m22.625624805s ago: executing program 7 (id=1889):
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x884, &(0x7f0000000300)={0x0, 0xabf9, 0x8000, 0x1, 0x289, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000380))
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r9}, &(0x7f0000000a00), &(0x7f0000000a40)=r8}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r9}, &(0x7f0000000880), &(0x7f00000008c0)=r8}, 0x20)
sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f00000022c0)={0x2c, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x24000000)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10)
r11 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r11, &(0x7f0000000240)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000027c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x3}]}}}], 0x18}}], 0x1, 0x8044)
r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='cachefiles_read\x00', r4}, 0x18)
syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2, @ANYRES8=r0, @ANYRES32=r12], &(0x7f0000000240)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r14}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
alarm(0xfffffffffffffffc)
close_range(r2, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000500)={0x401, 0x0, &(0x7f0000000400)=[0xffffffffffffffff]}, 0x1)

2m22.571418216s ago: executing program 35 (id=1889):
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x884, &(0x7f0000000300)={0x0, 0xabf9, 0x8000, 0x1, 0x289, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000380))
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r9}, &(0x7f0000000a00), &(0x7f0000000a40)=r8}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r9}, &(0x7f0000000880), &(0x7f00000008c0)=r8}, 0x20)
sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f00000022c0)={0x2c, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x24000000)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10)
r11 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r11, &(0x7f0000000240)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000027c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x3}]}}}], 0x18}}], 0x1, 0x8044)
r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='cachefiles_read\x00', r4}, 0x18)
syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2, @ANYRES8=r0, @ANYRES32=r12], &(0x7f0000000240)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r14}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
alarm(0xfffffffffffffffc)
close_range(r2, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000500)={0x401, 0x0, &(0x7f0000000400)=[0xffffffffffffffff]}, 0x1)

1m10.34895468s ago: executing program 3 (id=3337):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', <r0=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0)

1m10.3074591s ago: executing program 3 (id=3338):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="780100003c000701fcffffff00000003047c000004003680600101"], 0x178}, 0x1, 0x0, 0x0, 0x4c040}, 0xc000)

1m10.30218946s ago: executing program 3 (id=3340):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)

1m10.276820351s ago: executing program 3 (id=3341):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0)
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x40, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f00000010c0)="$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")
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r5}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1m10.010279455s ago: executing program 3 (id=3353):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r4=>r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = eventfd2(0x0, 0x0)
read$eventfd(r6, &(0x7f0000000040), 0x8)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r7, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9, 0x0, 0x2}, 0x18)
sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote, 0x19}, 0x1c, &(0x7f0000000c40)=[{&(0x7f00000001c0)="4bd48e7c9cc05ee68ff2d5594112b8fe14214cc23e1859ef1d3bca97462d97fdcc5bf2f7eb59fef416b76956d8f3b56331725c3216e55bc5c87f0ec06e53756c", 0x40}, {&(0x7f0000000d40)="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", 0x581}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8000001)

1m9.74281964s ago: executing program 3 (id=3361):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28)

1m9.691595s ago: executing program 36 (id=3361):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c6f203cb1276bfdbb4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc2880072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd01008e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d81006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864010067d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff5d16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c602c4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b1da97c971c8c84a427edc3492b97e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb2b5f59dfead7ac6e7fa84746e2e425769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443c3a64c7803760880af23fb3f430a0311fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630e7fa0c2261bc2d5de32ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79a08002c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574b2a31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e63daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca6797590ed13b0bccf71a39e05e877893646d185a77882f866785af6b0149e336c31fb177e3e85f4c60cd4de4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3c067c28e185fe62ce7020f5282cf045b9c790984c6fb65fd3187bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212d000045b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00000000ee2ea723ea2e1accb97a200609c77e0000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699d61acdc8e36010d76093ddd237df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eeb7a9d17000000000096cd8ecf1c511eea07aefa1c5cae1841efa9329d80eafefe00000000000000009111274a44c722ff9f5151aa7cb99ea3e8b2c51eadbd2d0ba1a25b08cc3e67cd186c12ea62a55ff905388bb30d1a63d42593c9aea3a84f5a6fc470d8aaaafeccb373ca26c3685679e6a048af19fca3fc5315a33687"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000fe80000000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad62c67a04402ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedfb9f64d81584a2e85ab4f6ec718b02d78f2ebf04e6b3b94610a21616181629a03c3dc0bf05e0a71f887833b81db7a10bc53259cb80716f6804934a411d424c1db98d454be1adb2776fdbb92b299d3b80af6987a871b4549fdb4c8297ee31ad925c8b0fb1a9d2589b08ed52602cbc26b56df71201bc4ea8621c56f33d251c1d4589af2dcd78fbb4e34bde02cb3920a30cee9489ee72c3e19304c16c2110e1839712d484b80abe77786a7e2ba834874a4e16b93dd07297554a06c2ad2c906f8ebb1db8730df096709184728d48f0a806696bd0d4b12d0064b933d9675353dae77fe8419451f85da63be78b70ca2a84a77f572d9f289d4313e6f6039fe756ac13a5d08838315dff44cda433cc7bc6b77449f8c", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28)

2.181369944s ago: executing program 5 (id=4875):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
socket(0x2b, 0x2, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)=r3}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r5 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5})
mq_getsetattr(r5, &(0x7f0000000300)={0x800, 0x0, 0x1}, 0x0)

2.094422966s ago: executing program 5 (id=4879):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c000280080001400000000009000100"], 0xe4}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r1 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r1, 0x0)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000001c0)='signal_generate\x00', r3}, 0x10)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3)

2.005310837s ago: executing program 5 (id=4883):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0xe)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4d}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="000000835d367dc5570800020000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002580)=[{{&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000740)=""/215, 0xd7}, {&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000000840)=""/158, 0x9e}, {&(0x7f0000000900)=""/93, 0x5d}, {&(0x7f0000000400)=""/58, 0x3a}, {&(0x7f0000000e00)=""/199, 0xc7}], 0x6}, 0x8000}, {{&(0x7f0000000640)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=""/32, 0x20}, 0x7}, {{&(0x7f0000001140)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0}, 0x8001}, {{&(0x7f00000005c0)=@phonet, 0x80, &(0x7f00000024c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, &(0x7f0000002500)=""/114, 0x72}, 0xfffffffc}], 0x5, 0x40010162, &(0x7f00000026c0))
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x270, 0x0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0xff, 0xff000000, 0xffffff00], [0xffff00, 0xff000000, 0xfffe01, 0xff000000], 'syz_tun\x00', 'wg0\x00', {}, {0xff}, 0x1, 0x10, 0x2, 0x8}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
socket(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2, 0x5}]})

1.999820097s ago: executing program 8 (id=4884):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x3, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=ANY=[@ANYBLOB="180000000000bf49000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10)
r2 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x572e, 0x2, 0x2, 0xfffffffe})
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x200000000000000)

1.85921694s ago: executing program 5 (id=4887):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x7, &(0x7f0000000380)={[{@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@auto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x3, 0x435, &(0x7f0000000d80)="$eJzs289vFOUbAPBnZtvyhcK3FfEHBbWKxsYfLS2oHLxoNPGgiYke8FjbQioLNbQmQhqtxuDRkHg3Hk38CzzpxagnE694NyTE9AJ6WjO7M+12u1vasu2i+/kkA+87827e59mZd/edebsBdK3h7J8kYn9EXIuIgVp1bYPh2n+3lhen/lpenEqiUnnrz6Ta7uby4lTRtHhdf14ZSSPSz5I40qTf+UuXz02WyzMX8/rYwvn3x+YvXX529vzk2ZmzMxcmTp06eWL8hecnnmtLnllMN4c+mjt6+LV3rr4xdfrquz9/mxT5N+TRJsMbHXyiUmlzd511oK6c9HQwELakFBE9+di9FgNRitWTNxCvftrR4IAdValUKv2tDy9VgP+wJDodAdAZxRd9dv9bbLs09bgr3HipdgOU5X0r32pHeiLN2/Q23N+203BEnF76+6tsi515DgEAsMb32fznmWbzvzTur2v3/3xtaDAi7omIgxFxb0Qcioj7IqptH4iIB7fYf+Miyfr5T3p9W4ltUjb/ezFf21o7/ytmfzFYymsHqvn3JmdmyzPH8/dkJHr3ZPXxDfr44ZXfvmh1rH7+l21Z/8VcMI/jes+eta+ZnlyYvJOc6934JGKop1n+ycpKQBIRhyNiaJt9zD71zdFWx26f/wbasM5U+Triydr5X4qG/AvJxuuTY/+L8szxseKqWO+XX6+82ar/O8q/DbLzv6/p9b+S/2BSv147v/U+rvz+ect7mu1e/33J29VyX77vw8mFhYvjEX3J67Wg6/dPrL62qBfts/xHjjUf/wdj9Z04EhHZRfxQRDwcEY/ksT8aEY9FxLEN8v/p5cff237+OyvLf3pL53+10BeNe5oXSud+/G5Np4NbyT87/yerpZF8z2Y+/zYT1/auZgAAAPj3SSNifyTp6Eo5TUdHa38vfyj2peW5+YWnz8x9cGG69huBwehNiyddA3XPQ8fz2/qiPtFQP5E/N/6ytLdaH52aK093Onnocv0txn/mj1KnowN2nN9rQfcy/qF7Gf/QvYx/6F5Nxv/eTsQB7L5m3/8fdyAOYPc1jH/LftBF3P9D9zL+oXsZ/9CV5vfG7X8kr6CwrhDpXRGGwg4VOv3JBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0B7/BAAA//+yB+bL")
sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000004000000e27f000001000000e5000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2, 0x826f}}}, 0x32)
sendmmsg(r4, &(0x7f0000008080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040804)
unshare(0x62040200)
ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x2, 0x5002)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0xc}, 0x18)
request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe)
r10 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r10, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)

1.347922908s ago: executing program 9 (id=4893):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c000280080001400000000009000100"], 0xe4}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r1 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r1, 0x0)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000001c0)='signal_generate\x00', r3}, 0x10)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3)

1.126624762s ago: executing program 8 (id=4894):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
brk(0x3ff)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r4=>r3, {0x80000000}}, './file0\x00'})
sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x114, 0x14, 0x4, 0x70bd2d, 0x25dfdbfb, {0x2c, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x100, 0x1, "75698b366f7614b5d825ddc1eedfd5b21014c81f7e275553f713d4b497f3b84d08fd9a9a55c4fc83f5633b74313972779e960fea3c334ef5b45cb63794e5f4aa671fd064a46faed3e84f89f415582441ac2b1d139d76a348d0d8fda98e4be83390d453ee4c2999a1aa6ba602b22d110e73f86548cad8b741b5fd64663260303034c1e4cc4941680e4fc94445210ae5f8503658577fa9c933dd37c4ecf0c7a377702ed4d4dcf843a21c89fd41544189330e7b177ea3adb2dc02b6a07d15e93cc20f8df5e7a65839f2f5ca102071e1b546cd2a45eba37fc3f44f069b352541a32d0e98306ef54ab502ef012cb997b58c97e1a9e7d6025d990b651268c2"}]}, 0x114}, 0x1, 0x0, 0x0, 0x20004800}, 0x480c0)
r5 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
chmod(&(0x7f0000000000)='./file0\x00', 0x101)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000300)={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x9, 0xa}})
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/stat\x00')
getdents(r6, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400), 0x2, 0x3)
ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000180)=r1)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1})
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140))
r8 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$SG_IO(r9, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="949374c96ee3", 0x0, 0x0, 0x30, 0x0, 0x0})
ioctl$BLKTRACESETUP(r7, 0x1276, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0)

1.062254693s ago: executing program 1 (id=4895):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8a, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@jqfmt_vfsv0}, {@noload}, {@noblock_validity}, {@grpjquota, 0x22}, {@errors_continue}, {@resuid}, {@i_version}]}, 0xff, 0x464, &(0x7f00000004c0)="$eJzs3MtvG8UfAPCv13H6/iW/Uh4tLQQKouKRNOmDHrgUgcQBJCQ4FHEKSVqVug1qgkSrCgqHckSVuCOOSPwFXCgXBJyQuMIJDgipQr1QOBmtves6je3EtROH+vOR1p3xjDvz3d1pZ2fXDmBgjaUvhYjtEfFzRIzUsksrjNX+uHnj0szfNy7NFKJSee3PQrXeXzcuzeRV889tq2UqlTbtXnkzYrpcnjuf5ScWz74zsXDh4jOnz06fmjs1d27q2LHDh/YNH5060mWExerrjrSve96f37v7pTeuvjJz4upb33+Z9nd7Vqsxjl4Zq+3dph7vdWN9tqMhXRjqY0foSDo60sNVqo7/kSjGlnrZSLz4UV87B6ypSiWpbGpdfLkC3MXSiTowiPL/6NPr33xbp6nHhnD9eNTXMW5mW61kKJKsTim7RloLYxFx4vI/n6VbLF2HSNaoSQBgwF07HhFPN5v/JXFfQ73/ZfeGRiPi/xGxMyLuiYhdEXFvRLXu/RHxQIft336HZPn8szJyR4GtUjr/ey67t7V0/leffo0Ws9yOavylwsnT5bmD2T45EKVNaX6yTRvfvPDTJ63KGud/6Za2n88Fs378MbRkga5x1t696x9G7BlqFn+hPudN58e7I2JPq7/k1/ZtnH7yi72tylaOv40eTMorn0c8UTv+l+O2+HOFlvcnJ589OnVkYnOU5w5O5GfFcj/8eOXVVu13FX8PXL9Wia1Nz/96/KOFzRELFy6eqd6vXei8jSu/fNzymrLz8z9idnpxerjwejU9nL333vTi4vnJiOHCy8vfn7r12Tyf10/P/wP7m4//nXFrTzwYEelJvC8iHoqIh7O+PxIRj0bE/jbxf/f8Y293Hn+bVfkeSuOfXen4R+Px7zxRPPPtV53Hn0uP/+Fq6kD2Tnr8V4prtR3sZt8BAADAf0VSfQa+kIzX00kyPl57hn9XbE3K8wuLT52cf/fcbO1Z+dEoJflK10jDeuhktjac56duyx/K1o0/LW6p5sdn5suz/Q4eBty2FuM/9Xux370D1pzva8HgMv5hcBn/MLjS8f/bsX73AuiDtX3CGtjQms3/P+hDP4D1t8L1/5b16gew/qz/weAy/mFwGf8wkFp+Nz7p6iv/En1KfD3c3W81rD4RyQYJ+a5JlKJp0dCqf8ziDhObmhb1+18mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3vg3AAD//4KU6IQ=")
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

875.772075ms ago: executing program 8 (id=4896):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0x3676, &(0x7f000000a9c0), &(0x7f00000000c0), &(0x7f000000aa80))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x2, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES2(r2, 0x6, &(0x7f0000001480)={0xfd, 0x0, 0x20000000, 0x0, 0x0}, 0x20)

808.538297ms ago: executing program 9 (id=4897):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0xe)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4d}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="000000835d367dc5570800020000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002580)=[{{&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000740)=""/215, 0xd7}, {&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000000840)=""/158, 0x9e}, {&(0x7f0000000900)=""/93, 0x5d}, {&(0x7f0000000400)=""/58, 0x3a}, {&(0x7f0000000e00)=""/199, 0xc7}], 0x6}, 0x8000}, {{&(0x7f0000000640)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=""/32, 0x20}, 0x7}, {{&(0x7f0000001140)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0}, 0x8001}, {{&(0x7f00000005c0)=@phonet, 0x80, &(0x7f00000024c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, &(0x7f0000002500)=""/114, 0x72}, 0xfffffffc}], 0x5, 0x40010162, &(0x7f00000026c0))
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x270, 0x0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0xff, 0xff000000, 0xffffff00], [0xffff00, 0xff000000, 0xfffe01, 0xff000000], 'syz_tun\x00', 'wg0\x00', {}, {0xff}, 0x1, 0x10, 0x2, 0x8}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
socket(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2, 0x5}]})

705.362078ms ago: executing program 8 (id=4898):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18)
sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote, 0x19}, 0x1c, &(0x7f0000000c40)=[{&(0x7f00000001c0)="4bd48e7c9cc05ee68ff2d5594112b8fe14214cc23e1859ef1d3bca97462d97fdcc5bf2f7eb59fef416b76956d8f3b56331725c3216e55bc5c87f0ec06e53756c", 0x40}, {&(0x7f0000000d40)="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", 0x581}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8000001)

681.401139ms ago: executing program 8 (id=4899):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000080000000600000000d6e9ee", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1, <r2=>0xffffffffffffffff}, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x5b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x20000000)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r2}, &(0x7f0000000780), &(0x7f00000007c0)='%-5lx  \x00'}, 0xfffffd75)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x1}, 0x18)
sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={<r9=>0x0, 0x5b, "767e36915f4748f36a89533d08209bc38b0c1d5138c8a5810d2d52a4df81fbcc532e753653b404552c19e3a61c8e04cab5556a03fd7b0ccec765fde38aedf9d57e5533da1ef288b3baca55aa9ddd785f4b05a9ca8a5409467987e5"}, &(0x7f0000000080)=0x63)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={r9, 0x3ff, 0xefd}, 0x8)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r8, 0xf505, 0x0)
shutdown(r0, 0x1)

578.49123ms ago: executing program 0 (id=4900):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b6000000080000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18)
syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')

558.681001ms ago: executing program 0 (id=4901):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
fcntl$setsig(r0, 0xa, 0x16)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=<r2=>0x0)
syz_pidfd_open(r2, 0x0)
pwrite64(r1, &(0x7f0000000040)="5fcb5de8a5e89b7fb139de3f5f8d29c1fc", 0x11, 0x140000000000000)

453.624592ms ago: executing program 0 (id=4902):
gettid()
timer_create(0x0, &(0x7f00000001c0)={0x0, 0x2e, 0x0, @tid=0xffffffffffffffff}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x59, 0x5e, &(0x7f0000000200)="8f64ce2d3f657ebe55ad24b26d20ff020f5fd9c51b0428ec6bebf20a1188fde134198ad58fa0bf6d77027c54a4c177d0449be08c449594ae5379b91e32addc18f5da91598641b7656c5a3498bdda8a7bbad10a09db9b956e1a", &(0x7f0000000080)=""/94, 0x9, 0x0, 0xf5, 0xf3, &(0x7f0000000380)="10608190a77df00c1d917582f100ecbcfc778878c0b8347bca6f6c76d4db1e0f367bb8c175d83acb8cacb0e4a60ebcfc33b52a2b3943a315c8d5fda48faa2b9ea22625f00e2a2a7760267a88079dde05b2394dbeba7252e5c903795a6f73d375f2f6467c86770c6ea155a673bffb8a73dac4bd47d7ec83eaf0f8c8509cd68d0276ad1e98db8aa8f568e55c9cba670f49280d80c2f9cefd64edcbeea3e5a2da7cb7bfee969d6972dd91691d6d25f7b50675bc02346c68f8d347f2ae61ff1b097cf5c52cb56f945481bbf24b1770f772b1554123a756bf61419f2c8dae488614ab9f7a2db5324398276086fc6e9c751b9973214f8e52", &(0x7f0000000480)="a8f27e7b9ac0f75d50730aa3ee0fd03a5cb006e22bf8dfac021676fbe3eeeaa1d50a2998d5a5f7cef1ae6b0e6ef49f5573c8edb8dc8294528cf4c61783ba850e21e663a1a612e72086c5306a16ff2600a191ef5026bd1af818fe8ff3eff24b0f90d158f98ea8a57dc6b7e9ae83dc4ab3cdea00b6a16cb13b9a8711cd2163a99b21ffba28ce31d4e2bc424170c1a195e8fde84d9e08e369f11d7d76a0a602f97769ba999a5ee229ea8ce4c00f27c8fc3cca6c8a44500955479db7c2fef5772e8ee1ba5688581802c68f729d374df63e8874076025637b70ad3e6c957150502099174fa09f902916a55e32591882e718e7825692", 0x1, 0x0, 0x7}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00')
close_range(r3, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x104010, 0xffffffffffffffff, 0x3c41d000)
flock(r2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808)

451.080402ms ago: executing program 9 (id=4903):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000700180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x4}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
inotify_init1(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r2}])
socket(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r5], 0x38}}, 0x0)

444.551753ms ago: executing program 0 (id=4904):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000", @ANYRES32=0x0, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32], 0x48)

401.273363ms ago: executing program 0 (id=4905):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x7}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @empty}}, 0x0, 0xbc, 0x0, 0x0, 0x21, 0x2, 0x81}, 0x9c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000003000000ff"], 0x50)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r4}, 0x10)
syz_io_uring_setup(0x3665, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

400.545843ms ago: executing program 1 (id=4906):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x88011, 0xffffffffffffffff, 0x611b3000)
r0 = socket$inet(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f0200c00e7f4e32f61bcdf1e422000000000100800000000000001000aadc28da3457e792945f64009400050028925aaa000000c600000000000000fe", 0x51}], 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r4, r3, 0x0, 0x3a)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

372.561514ms ago: executing program 9 (id=4907):
gettid()
timer_create(0x0, &(0x7f00000001c0)={0x0, 0x2e, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000006c0))
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1}}, './file0\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xb2, 0x0, &(0x7f0000000200)="8f64ce2d3f657ebe55ad24b26d20ff020f5fd9c51b0428ec6bebf20a1188fde134198ad58fa0bf6d77027c54a4c177d0449be08c449594ae5379b91e32addc18f5da91598641b7656c5a3498bdda8a7bbad10a09db9b956e1ae5aefab30da665268c5176fa3fb1c4821352d8b77dcebb2fc16acdada981f5d916290069b45e8edbaaeb79eb21f7315e260cb84595aaa7807bd73e0cdc904537216b22c1c9efccee3be17f1a2b2db6d705fe32693ffe33162b", 0x0, 0x9, 0x0, 0xf5, 0xf3, &(0x7f0000000380)="10608190a77df00c1d917582f100ecbcfc778878c0b8347bca6f6c76d4db1e0f367bb8c175d83acb8cacb0e4a60ebcfc33b52a2b3943a315c8d5fda48faa2b9ea22625f00e2a2a7760267a88079dde05b2394dbeba7252e5c903795a6f73d375f2f6467c86770c6ea155a673bffb8a73dac4bd47d7ec83eaf0f8c8509cd68d0276ad1e98db8aa8f568e55c9cba670f49280d80c2f9cefd64edcbeea3e5a2da7cb7bfee969d6972dd91691d6d25f7b50675bc02346c68f8d347f2ae61ff1b097cf5c52cb56f945481bbf24b1770f772b1554123a756bf61419f2c8dae488614ab9f7a2db5324398276086fc6e9c751b9973214f8e52", &(0x7f0000000480)="a8f27e7b9ac0f75d50730aa3ee0fd03a5cb006e22bf8dfac021676fbe3eeeaa1d50a2998d5a5f7cef1ae6b0e6ef49f5573c8edb8dc8294528cf4c61783ba850e21e663a1a612e72086c5306a16ff2600a191ef5026bd1af818fe8ff3eff24b0f90d158f98ea8a57dc6b7e9ae83dc4ab3cdea00b6a16cb13b9a8711cd2163a99b21ffba28ce31d4e2bc424170c1a195e8fde84d9e08e369f11d7d76a0a602f97769ba999a5ee229ea8ce4c00f27c8fc3cca6c8a44500955479db7c2fef5772e8ee1ba5688581802c68f729d374df63e8874076025637b70ad3e6c957150502099174fa09f902916a55e32591882e718e7825692", 0x1, 0x0, 0x7}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00')
close_range(r5, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x104010, r0, 0x3c41d000)
flock(r4, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808)
r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301)
ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000180)={0x0, 0x9, 0x92, 0x8, 0x19, 0xffffffff, &(0x7f0000019080)="193ef711cfee07aac687ccbd4c017a4c38d058f8668af43162"})
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000900)={<r8=>0x0, <r9=>0x0})
utimensat(r5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)={{0x0, 0x2710}, {r8, r9/1000+10000}}, 0x0)
r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
readv(r10, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x2, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x0, 0x61, 0x2e]}}, 0x0, 0x2d, 0x0, 0x1, 0xf, 0x0, @void, @value}, 0x28)
write$UHID_CREATE(r6, &(0x7f00000007c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000005c0)=""/165, 0xa5, 0x6, 0xffffb0e9, 0xa, 0x9, 0x90c}}, 0x120)

295.704615ms ago: executing program 5 (id=4908):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0x3676, &(0x7f000000a9c0), &(0x7f00000000c0), &(0x7f000000aa80))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x2, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES2(r2, 0x6, &(0x7f0000001480)={0xfd, 0x0, 0x20000000, 0x0, 0x0}, 0x20)

242.133396ms ago: executing program 1 (id=4909):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09000000040000000356250009000000000000007be4e6f7efbf3de6d1470f4b7239c654e51c51eb438414476fc8db5bc9e219dc3f98c298d645af0be630232355df10a4f8d4b68f05f3ffccf755a2c1a3288d3d3118488b4c5a3827bee8c7a72fc0d4d75bd4c4daeb8f901ef0eb1a233a590ed106733cac96", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x2, 0xffb, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = msgget$private(0x0, 0x0)
msgctl$IPC_RMID(r4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
unshare(0x22020400)
flistxattr(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r5, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/237, 0xed, 0x0, 0x0}, &(0x7f0000000340)=0x40)

237.137206ms ago: executing program 5 (id=4910):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
unshare(0x62040200)

227.312766ms ago: executing program 9 (id=4911):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
socket(0x2b, 0x2, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)=r3}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r5 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5})
mq_getsetattr(r5, &(0x7f0000000300)={0x800, 0x0, 0x1}, 0x0)

168.529567ms ago: executing program 9 (id=4912):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "49258a4bd282e3c1", "b3c97f661ba7d1b2598d741c674b9023499f874df7284d1b46314e964b1fb54f", "579c08c7", "91795560826ee75c"}, 0x38)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)="be", 0x1}], 0x1)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0xa}})
r2 = eventfd2(0x1, 0x80801)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39)
read$eventfd(r2, &(0x7f0000000000), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0xa29, 0x10001})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
io_uring_enter(r3, 0x2711, 0x2fb4, 0x49, &(0x7f0000000040)={[0x3]}, 0x8)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d)
unshare(0x62040200)
close(r0)

140.905437ms ago: executing program 1 (id=4913):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = open(&(0x7f0000000240)='./file1\x00', 0x102, 0x0)
fcntl$notify(r2, 0x402, 0x5)
fcntl$notify(r2, 0x402, 0x8000002d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
socket$inet(0xa, 0x801, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10)
socket$netlink(0x10, 0x3, 0x9)
r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
writev(r4, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
getitimer(0x1, &(0x7f0000000800))

68.961249ms ago: executing program 0 (id=4914):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)

68.340668ms ago: executing program 1 (id=4915):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000", @ANYRES32=0x0, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32], 0x48)

44.370159ms ago: executing program 8 (id=4916):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2, 0x5}]})

0s ago: executing program 1 (id=4917):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4)
sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000100)=@ccm_128={{}, "24eaf7a2ee66e95b", "3055fbfe96bf1afd87dc98fde2ee85b3", '\x00', "4e694600000000e4"}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
r2 = socket(0x1e, 0x80002, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3a}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004)
r4 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000000000000a00000000000000c6cbb773c35fcc7e3f96ef2e5279f47f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x80)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00'}, 0x10)
syz_read_part_table(0x59d, &(0x7f0000000000)="$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")
semctl$IPC_INFO(0x0, 0x0, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ptrace(0x10, 0x0)
syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00')

kernel console output (not intermixed with test programs):

: invalid block
[  234.736621][T14176] EXT4-fs (loop9): Remounting filesystem read-only
[  234.745472][T14176] EXT4-fs (loop9): 1 truncate cleaned up
[  234.751800][T14176] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  234.752987][T13942] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  234.766839][T14176] SELinux: (dev loop9, type ext4) getxattr errno 5
[  234.777946][T14176] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  234.780347][T13942] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  234.797289][T13942] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  234.806794][T13942] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  234.853536][T13942] 8021q: adding VLAN 0 to HW filter on device bond0
[  234.866845][T13942] 8021q: adding VLAN 0 to HW filter on device team0
[  234.880374][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.887511][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state
[  234.901436][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.908540][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state
[  234.977759][T13942] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.013316][ T3574] bridge_slave_1: left allmulticast mode
[  235.019108][ T3574] bridge_slave_1: left promiscuous mode
[  235.024803][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.032308][   T29] kauditd_printk_skb: 118 callbacks suppressed
[  235.032340][   T29] audit: type=1326 audit(235.081:18416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14199 comm="syz.9.4008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced3d75d29 code=0x7ffc0000
[  235.061704][   T29] audit: type=1326 audit(235.081:18417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14199 comm="syz.9.4008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced3d75d29 code=0x7ffc0000
[  235.086131][   T29] audit: type=1326 audit(235.081:18418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14199 comm="syz.9.4008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fced3d75d29 code=0x7ffc0000
[  235.109234][   T29] audit: type=1326 audit(235.081:18419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14199 comm="syz.9.4008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced3d75d29 code=0x7ffc0000
[  235.132465][   T29] audit: type=1326 audit(235.081:18420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14199 comm="syz.9.4008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced3d75d29 code=0x7ffc0000
[  235.154322][T14205] loop9: detected capacity change from 0 to 128
[  235.155585][   T29] audit: type=1326 audit(235.081:18421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14199 comm="syz.9.4008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fced3d75d29 code=0x7ffc0000
[  235.184849][   T29] audit: type=1326 audit(235.081:18422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14199 comm="syz.9.4008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced3d75d29 code=0x7ffc0000
[  235.207876][   T29] audit: type=1326 audit(235.081:18423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14199 comm="syz.9.4008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fced3d75d29 code=0x7ffc0000
[  235.230966][   T29] audit: type=1326 audit(235.081:18424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14199 comm="syz.9.4008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced3d75d29 code=0x7ffc0000
[  235.254075][   T29] audit: type=1326 audit(235.081:18425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14199 comm="syz.9.4008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced3d75d29 code=0x7ffc0000
[  235.277349][ T3574] bridge_slave_0: left promiscuous mode
[  235.283183][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.442811][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  235.455777][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  235.466208][ T3574] bond0 (unregistering): Released all slaves
[  235.584232][ T3574] hsr_slave_0: left promiscuous mode
[  235.593079][ T3574] hsr_slave_1: left promiscuous mode
[  235.604835][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  235.612421][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0
[  235.623386][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  235.630903][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1
[  235.642367][T14230] loop8: detected capacity change from 0 to 512
[  235.649286][ T3574] bridge_slave_0: left allmulticast mode
[  235.649987][T14230] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  235.655024][ T3574] veth1_macvtap: left promiscuous mode
[  235.664997][T14230] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  235.670356][ T3574] veth0_macvtap: left promiscuous mode
[  235.679996][T14230] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (28928!=33349)
[  235.685514][ T3574] veth1_vlan: left promiscuous mode
[  235.700524][ T3574] veth0_vlan: left promiscuous mode
[  235.712716][T14230] EXT4-fs error (device loop8): __ext4_get_inode_loc:4435: comm syz.8.4017: Invalid inode table block 1 in block_group 0
[  235.725706][T14230] EXT4-fs (loop8): get root inode failed
[  235.731420][T14230] EXT4-fs (loop8): mount failed
[  235.753282][ T3574] pimreg (unregistering): left allmulticast mode
[  235.811714][ T3574] team0 (unregistering): Port device team_slave_1 removed
[  235.822074][ T3574] team0 (unregistering): Port device team_slave_0 removed
[  235.871012][T14227] lo speed is unknown, defaulting to 1000
[  235.889113][T13942] veth0_vlan: entered promiscuous mode
[  235.897149][T13942] veth1_vlan: entered promiscuous mode
[  235.934998][T13942] veth0_macvtap: entered promiscuous mode
[  235.941599][T14230] lo speed is unknown, defaulting to 1000
[  235.942594][T13942] veth1_macvtap: entered promiscuous mode
[  235.958065][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.968564][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.978433][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.988895][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.998715][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.009171][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.019072][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.029596][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.039471][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.049917][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.059819][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.070272][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.080166][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.090674][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.100495][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.110996][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.121488][T13942] batman_adv: batadv0: Interface activated: batadv_slave_0
[  236.129019][T14230] lo speed is unknown, defaulting to 1000
[  236.129965][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.145313][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.155278][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.165794][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.175686][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.186129][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.195982][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.206416][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.216248][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.226683][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.236530][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.247023][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.256935][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.267369][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.277233][T13942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.287659][T13942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.300195][T13942] batman_adv: batadv0: Interface activated: batadv_slave_1
[  236.310574][T13942] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.319338][T13942] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.328122][T13942] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.336922][T13942] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.370414][T14227] lo speed is unknown, defaulting to 1000
[  236.410879][T14237] loop9: detected capacity change from 0 to 128
[  236.456394][T14237] syz.9.4018: attempt to access beyond end of device
[  236.456394][T14237] loop9: rw=0, sector=121, nr_sectors = 920 limit=128
[  236.480504][T14241] loop8: detected capacity change from 0 to 2048
[  236.528031][T14241] Alternate GPT is invalid, using primary GPT.
[  236.534386][T14241]  loop8: p1 p2 p3
[  236.628602][T14255] netlink: 'syz.5.4022': attribute type 1 has an invalid length.
[  236.712813][T14270] lo speed is unknown, defaulting to 1000
[  236.724709][T14272] loop8: detected capacity change from 0 to 128
[  236.784051][T14270] lo speed is unknown, defaulting to 1000
[  236.786133][T14272] syz.8.4035: attempt to access beyond end of device
[  236.786133][T14272] loop8: rw=0, sector=121, nr_sectors = 920 limit=128
[  236.882412][T14285] FAULT_INJECTION: forcing a failure.
[  236.882412][T14285] name failslab, interval 1, probability 0, space 0, times 0
[  236.885730][T14287] netlink: 'syz.9.4042': attribute type 1 has an invalid length.
[  236.895106][T14285] CPU: 0 UID: 0 PID: 14285 Comm: syz.0.4041 Not tainted 6.13.0-rc7-syzkaller #0
[  236.911964][T14285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  236.922058][T14285] Call Trace:
[  236.925422][T14285]  <TASK>
[  236.928407][T14285]  dump_stack_lvl+0xf2/0x150
[  236.933126][T14285]  dump_stack+0x15/0x1a
[  236.937385][T14285]  should_fail_ex+0x223/0x230
[  236.942099][T14285]  should_failslab+0x8f/0xb0
[  236.946734][T14285]  kmem_cache_alloc_noprof+0x52/0x320
[  236.952184][T14285]  ? __proc_create+0x254/0x4a0
[  236.957012][T14285]  __proc_create+0x254/0x4a0
[  236.961650][T14285]  ? snprintf+0x87/0xb0
[  236.965840][T14285]  proc_mkdir+0x3d/0xc0
[  236.970026][T14285]  register_handler_proc+0x1b4/0x210
[  236.975386][T14285]  __setup_irq+0x9b2/0x1240
[  236.980026][T14285]  request_threaded_irq+0x235/0x2d0
[  236.985321][T14285]  ? __pfx_serial8250_interrupt+0x10/0x10
[  236.991145][T14285]  univ8250_setup_irq+0x285/0x2e0
[  236.996196][T14285]  serial8250_do_startup+0xc73/0x1ea0
[  237.001599][T14285]  serial8250_startup+0x40/0x50
[  237.006465][T14285]  uart_startup+0x481/0x9b0
[  237.011062][T14285]  uart_ioctl+0xc39/0xe20
[  237.015545][T14285]  ? ioctl_has_perm+0x28d/0x2e0
[  237.020457][T14285]  ? do_vfs_ioctl+0x96e/0x1530
[  237.025312][T14285]  ? tty_jobctrl_ioctl+0x2ab/0x810
[  237.030466][T14285]  tty_ioctl+0x815/0xbe0
[  237.034792][T14285]  ? __pfx_tty_ioctl+0x10/0x10
[  237.039636][T14285]  __se_sys_ioctl+0xc9/0x140
[  237.044332][T14285]  __x64_sys_ioctl+0x43/0x50
[  237.048944][T14285]  x64_sys_call+0x1690/0x2dc0
[  237.053651][T14285]  do_syscall_64+0xc9/0x1c0
[  237.058198][T14285]  ? clear_bhb_loop+0x55/0xb0
[  237.062937][T14285]  ? clear_bhb_loop+0x55/0xb0
[  237.067647][T14285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.073604][T14285] RIP: 0033:0x7f6d3e115d29
[  237.078022][T14285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.097639][T14285] RSP: 002b:00007f6d3c781038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  237.106062][T14285] RAX: ffffffffffffffda RBX: 00007f6d3e305fa0 RCX: 00007f6d3e115d29
[  237.114092][T14285] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000003
[  237.122133][T14285] RBP: 00007f6d3c781090 R08: 0000000000000000 R09: 0000000000000000
[  237.130108][T14285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  237.138164][T14285] R13: 0000000000000000 R14: 00007f6d3e305fa0 R15: 00007ffcaccfd758
[  237.146149][T14285]  </TASK>
[  237.186618][T14295] __nla_validate_parse: 10 callbacks suppressed
[  237.186715][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4046'.
[  237.219521][T14298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4048'.
[  237.310315][T14311] loop9: detected capacity change from 0 to 128
[  237.386105][T14311] syz.9.4054: attempt to access beyond end of device
[  237.386105][T14311] loop9: rw=0, sector=121, nr_sectors = 920 limit=128
[  237.438547][T14319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4053'.
[  237.738396][T14343] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4064'.
[  237.859179][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4078'.
[  237.907794][T14381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4082'.
[  237.974151][ T3373] hid-generic 0002:0007:0006.0003: unknown main item tag 0x0
[  237.982736][ T3373] hid-generic 0002:0007:0006.0003: hidraw0: <UNKNOWN> HID vc.31 Device [syz1] on syz0
[  238.142575][T14408] netlink: 'syz.9.4095': attribute type 1 has an invalid length.
[  238.262022][T14419] loop9: detected capacity change from 0 to 1024
[  238.273199][T14419] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  238.290271][T14419] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4100'.
[  238.313398][T12665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.786001][T14445] lo speed is unknown, defaulting to 1000
[  238.865951][T14445] lo speed is unknown, defaulting to 1000
[  238.905907][T14449] netlink: 'syz.8.4112': attribute type 3 has an invalid length.
[  238.913767][T14449] netlink: 'syz.8.4112': attribute type 3 has an invalid length.
[  238.946615][T14449] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4112'.
[  238.974403][T14449] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4112'.
[  238.994419][T14449] 0ªX¹¦À: renamed from caif0
[  239.003264][T14449] 0ªX¹¦À: entered allmulticast mode
[  239.008552][T14449] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  239.028020][T14452] loop8: detected capacity change from 0 to 164
[  239.036774][T14452] Unable to read rock-ridge attributes
[  239.213551][T14463] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4118'.
[  239.214991][T14461] loop1: detected capacity change from 0 to 512
[  239.229577][T14461] EXT4-fs: Ignoring removed i_version option
[  239.258496][T14461] EXT4-fs error (device loop1): ext4_get_journal_inode:5809: comm syz.1.4117: inode #196608: comm syz.1.4117: iget: illegal inode #
[  239.282503][T14461] EXT4-fs (loop1): no journal found
[  239.287835][T14461] EXT4-fs (loop1): can't get journal size
[  239.343479][T14461] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  239.353983][T14461] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  239.373405][T14461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.443382][T14461] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  239.445000][T14473] lo speed is unknown, defaulting to 1000
[  239.468992][T12110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.531569][T14476] tipc: Started in network mode
[  239.536468][T14476] tipc: Node identity 7, cluster identity 4711
[  239.542677][T14476] tipc: Node number set to 7
[  239.573864][T14476] tipc: Cannot configure node identity twice
[  239.584843][T14475] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.635370][T14473] lo speed is unknown, defaulting to 1000
[  239.655210][T14475] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.656445][T14486] FAULT_INJECTION: forcing a failure.
[  239.656445][T14486] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  239.678667][T14486] CPU: 0 UID: 0 PID: 14486 Comm: syz.1.4125 Not tainted 6.13.0-rc7-syzkaller #0
[  239.687767][T14486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  239.697928][T14486] Call Trace:
[  239.701214][T14486]  <TASK>
[  239.704170][T14486]  dump_stack_lvl+0xf2/0x150
[  239.708798][T14486]  dump_stack+0x15/0x1a
[  239.713031][T14486]  should_fail_ex+0x223/0x230
[  239.717727][T14486]  should_fail+0xb/0x10
[  239.721892][T14486]  should_fail_usercopy+0x1a/0x20
[  239.726996][T14486]  _copy_from_user+0x1e/0xb0
[  239.731649][T14486]  kstrtouint_from_user+0x76/0xe0
[  239.736745][T14486]  ? 0xffffffff81000000
[  239.740903][T14486]  ? selinux_file_permission+0x22a/0x360
[  239.746648][T14486]  proc_fail_nth_write+0x4f/0x150
[  239.751711][T14486]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  239.757364][T14486]  vfs_write+0x281/0x920
[  239.761716][T14486]  ? __fget_files+0x17c/0x1c0
[  239.766477][T14486]  ksys_write+0xe8/0x1b0
[  239.770740][T14486]  __x64_sys_write+0x42/0x50
[  239.775349][T14486]  x64_sys_call+0x287e/0x2dc0
[  239.780088][T14486]  do_syscall_64+0xc9/0x1c0
[  239.784661][T14486]  ? clear_bhb_loop+0x55/0xb0
[  239.789366][T14486]  ? clear_bhb_loop+0x55/0xb0
[  239.794052][T14486]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.799954][T14486] RIP: 0033:0x7f411f7f47df
[  239.804487][T14486] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  239.824115][T14486] RSP: 002b:00007f411de46030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  239.832595][T14486] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f411f7f47df
[  239.840579][T14486] RDX: 0000000000000001 RSI: 00007f411de460a0 RDI: 0000000000000003
[  239.848570][T14486] RBP: 00007f411de46090 R08: 0000000000000000 R09: 0000000000000000
[  239.856558][T14486] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  239.864660][T14486] R13: 0000000000000000 R14: 00007f411f9e6080 R15: 00007ffc851246b8
[  239.872759][T14486]  </TASK>
[  239.911554][T14485] lo speed is unknown, defaulting to 1000
[  239.922433][T14475] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.988732][T14485] lo speed is unknown, defaulting to 1000
[  240.039664][T14475] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.145936][T14475] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.161490][T14475] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.185288][T14475] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.212131][T14475] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.479587][T14515] tipc: Started in network mode
[  240.484532][T14515] tipc: Node identity 7, cluster identity 4711
[  240.490794][T14515] tipc: Node number set to 7
[  240.518574][T14515] tipc: Cannot configure node identity twice
[  240.652941][   T29] kauditd_printk_skb: 335 callbacks suppressed
[  240.652959][   T29] audit: type=1326 audit(240.701:18761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.1.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411f7f5d29 code=0x7ffc0000
[  240.806959][   T29] audit: type=1326 audit(240.741:18762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.1.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411f7f5d29 code=0x7ffc0000
[  240.830013][   T29] audit: type=1326 audit(240.741:18763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.1.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f411f7f5d29 code=0x7ffc0000
[  240.853011][   T29] audit: type=1326 audit(240.741:18764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.1.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411f7f5d29 code=0x7ffc0000
[  240.876138][   T29] audit: type=1326 audit(240.741:18765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.1.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411f7f5d29 code=0x7ffc0000
[  240.899152][   T29] audit: type=1326 audit(240.741:18766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.1.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f411f7f5d29 code=0x7ffc0000
[  240.922187][   T29] audit: type=1326 audit(240.741:18767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.1.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411f7f5d29 code=0x7ffc0000
[  240.945260][   T29] audit: type=1326 audit(240.741:18768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.1.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f411f7f5d29 code=0x7ffc0000
[  240.946291][T14531] loop1: detected capacity change from 0 to 128
[  240.968216][   T29] audit: type=1326 audit(240.741:18769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.1.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411f7f5d29 code=0x7ffc0000
[  240.968568][   T29] audit: type=1326 audit(240.741:18770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.1.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f411f7f5d29 code=0x7ffc0000
[  241.098484][T14520] FAULT_INJECTION: forcing a failure.
[  241.098484][T14520] name failslab, interval 1, probability 0, space 0, times 0
[  241.111352][T14520] CPU: 1 UID: 0 PID: 14520 Comm: syz.8.4139 Not tainted 6.13.0-rc7-syzkaller #0
[  241.120464][T14520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  241.130539][T14520] Call Trace:
[  241.133880][T14520]  <TASK>
[  241.136836][T14520]  dump_stack_lvl+0xf2/0x150
[  241.141469][T14520]  dump_stack+0x15/0x1a
[  241.145677][T14520]  should_fail_ex+0x223/0x230
[  241.150390][T14520]  should_failslab+0x8f/0xb0
[  241.155024][T14520]  kmem_cache_alloc_noprof+0x52/0x320
[  241.160549][T14520]  ? prepare_creds+0x37/0x480
[  241.165263][T14520]  prepare_creds+0x37/0x480
[  241.169802][T14520]  copy_creds+0x90/0x3f0
[  241.174107][T14520]  copy_process+0x64b/0x1f90
[  241.178718][T14520]  ? 0xffffffff81000000
[  241.182947][T14520]  ? selinux_file_permission+0x22a/0x360
[  241.188687][T14520]  ? __rcu_read_unlock+0x4e/0x70
[  241.190729][T14531] syz.1.4145: attempt to access beyond end of device
[  241.190729][T14531] loop1: rw=0, sector=121, nr_sectors = 920 limit=128
[  241.193688][T14520]  kernel_clone+0x167/0x5e0
[  241.211470][T14520]  ? __rcu_read_unlock+0x4e/0x70
[  241.216523][T14520]  __x64_sys_clone+0xe8/0x120
[  241.221326][T14520]  x64_sys_call+0x2d7e/0x2dc0
[  241.226026][T14520]  do_syscall_64+0xc9/0x1c0
[  241.230561][T14520]  ? clear_bhb_loop+0x55/0xb0
[  241.235255][T14520]  ? clear_bhb_loop+0x55/0xb0
[  241.240043][T14520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.246007][T14520] RIP: 0033:0x7ff75bde5d29
[  241.250430][T14520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  241.270146][T14520] RSP: 002b:00007ff75a435fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  241.278705][T14520] RAX: ffffffffffffffda RBX: 00007ff75bfd6080 RCX: 00007ff75bde5d29
[  241.286730][T14520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040089000
[  241.294731][T14520] RBP: 00007ff75a436090 R08: 0000000000000000 R09: 0000000000000000
[  241.302740][T14520] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  241.310731][T14520] R13: 0000000000000000 R14: 00007ff75bfd6080 R15: 00007fffa8ac07c8
[  241.318721][T14520]  </TASK>
[  241.575217][T14548] lo speed is unknown, defaulting to 1000
[  241.615795][T14548] lo speed is unknown, defaulting to 1000
[  241.664171][T14552] netlink: 'syz.5.4153': attribute type 1 has an invalid length.
[  241.722421][T14561] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.749095][T14563] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.761603][T14565] loop9: detected capacity change from 0 to 128
[  241.790543][T14561] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.819936][T14565] syz.9.4159: attempt to access beyond end of device
[  241.819936][T14565] loop9: rw=0, sector=121, nr_sectors = 920 limit=128
[  241.853027][T14563] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.879828][T14561] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.919395][T14563] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.939463][T14586] netlink: 'syz.9.4167': attribute type 1 has an invalid length.
[  241.975008][T14561] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.003054][T14563] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.084106][T14561] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.105558][T14563] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.119951][T14561] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.140382][T14563] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.153413][T14561] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.162748][T14598] netlink: 'syz.5.4173': attribute type 3 has an invalid length.
[  242.167199][T14563] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.170558][T14598] netlink: 'syz.5.4173': attribute type 3 has an invalid length.
[  242.183873][T14561] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.193304][T14598] __nla_validate_parse: 8 callbacks suppressed
[  242.193323][T14598] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4173'.
[  242.197629][T14563] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.290802][T14604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4175'.
[  242.352794][T14610] Cannot find add_set index 0 as target
[  242.361773][T14614] netlink: 'syz.5.4181': attribute type 1 has an invalid length.
[  242.431611][T14624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4186'.
[  242.441915][T14628] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4188'.
[  242.447207][T14630] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4189'.
[  242.484109][T14634] loop9: detected capacity change from 0 to 128
[  242.494687][T14634] EXT4-fs error (device loop9): __ext4_fill_super:5505: inode #2: comm syz.9.4190: iget: checksum invalid
[  242.506552][T14634] EXT4-fs (loop9): get root inode failed
[  242.512278][T14634] EXT4-fs (loop9): mount failed
[  242.592967][T14639] lo speed is unknown, defaulting to 1000
[  242.607050][T14643] loop9: detected capacity change from 0 to 512
[  242.614829][T14643] EXT4-fs: Ignoring removed i_version option
[  242.626281][T14643] EXT4-fs error (device loop9): ext4_get_journal_inode:5809: comm syz.9.4194: inode #196608: comm syz.9.4194: iget: illegal inode #
[  242.642344][T14643] EXT4-fs (loop9): no journal found
[  242.647639][T14643] EXT4-fs (loop9): can't get journal size
[  242.657075][T14639] lo speed is unknown, defaulting to 1000
[  242.663922][T14643] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended
[  242.682456][T14643] EXT4-fs (loop9): Errors on filesystem, clearing orphan list.
[  242.692916][T14643] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.712566][T14643] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  242.741138][T12665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.750818][T14651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4197'.
[  242.761452][T14653] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4199'.
[  242.781274][T14655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4200'.
[  242.820391][T14661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4202'.
[  242.834915][T14663] random: crng reseeded on system resumption
[  242.953968][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4207'.
[  243.114091][T14696] netlink: 'syz.0.4217': attribute type 1 has an invalid length.
[  243.308478][T14729] FAULT_INJECTION: forcing a failure.
[  243.308478][T14729] name failslab, interval 1, probability 0, space 0, times 0
[  243.321223][T14729] CPU: 0 UID: 0 PID: 14729 Comm: syz.5.4231 Not tainted 6.13.0-rc7-syzkaller #0
[  243.330309][T14729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  243.340459][T14729] Call Trace:
[  243.343742][T14729]  <TASK>
[  243.346676][T14729]  dump_stack_lvl+0xf2/0x150
[  243.351293][T14729]  dump_stack+0x15/0x1a
[  243.355537][T14729]  should_fail_ex+0x223/0x230
[  243.360249][T14729]  ? legacy_init_fs_context+0x31/0x70
[  243.365688][T14729]  should_failslab+0x8f/0xb0
[  243.370375][T14729]  __kmalloc_cache_noprof+0x4e/0x320
[  243.375729][T14729]  legacy_init_fs_context+0x31/0x70
[  243.380984][T14729]  alloc_fs_context+0x3fb/0x4e0
[  243.385875][T14729]  fs_context_for_mount+0x21/0x30
[  243.390916][T14729]  do_new_mount+0xf3/0x690
[  243.395360][T14729]  path_mount+0x49b/0xb30
[  243.399715][T14729]  __se_sys_mount+0x27c/0x2d0
[  243.404485][T14729]  ? __bpf_trace_sys_enter+0x10/0x30
[  243.409844][T14729]  __x64_sys_mount+0x67/0x80
[  243.414457][T14729]  x64_sys_call+0x2c84/0x2dc0
[  243.419151][T14729]  do_syscall_64+0xc9/0x1c0
[  243.423668][T14729]  ? clear_bhb_loop+0x55/0xb0
[  243.428357][T14729]  ? clear_bhb_loop+0x55/0xb0
[  243.433168][T14729]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.439073][T14729] RIP: 0033:0x7fefa0425d29
[  243.443496][T14729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  243.463133][T14729] RSP: 002b:00007fef9ea91038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  243.471557][T14729] RAX: ffffffffffffffda RBX: 00007fefa0615fa0 RCX: 00007fefa0425d29
[  243.479534][T14729] RDX: 0000000020001400 RSI: 0000000020000300 RDI: 0000000020000240
[  243.487546][T14729] RBP: 00007fef9ea91090 R08: 0000000020000140 R09: 0000000000000000
[  243.495625][T14729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  243.503632][T14729] R13: 0000000000000000 R14: 00007fefa0615fa0 R15: 00007fff16336018
[  243.511714][T14729]  </TASK>
[  243.522045][T14731] loop9: detected capacity change from 0 to 512
[  243.531364][T14731] EXT4-fs: Ignoring removed i_version option
[  243.540649][T14731] EXT4-fs error (device loop9): ext4_get_journal_inode:5809: comm syz.9.4234: inode #196608: comm syz.9.4234: iget: illegal inode #
[  243.554701][T14731] EXT4-fs (loop9): no journal found
[  243.560014][T14731] EXT4-fs (loop9): can't get journal size
[  243.579121][T14731] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended
[  243.589346][T14731] EXT4-fs (loop9): Errors on filesystem, clearing orphan list.
[  243.597377][T14731] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.617344][T14731] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  243.642677][T12665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.688686][T14751] netlink: 'syz.1.4244': attribute type 1 has an invalid length.
[  243.977057][T14771] loop9: detected capacity change from 0 to 512
[  244.004720][T14772] pimreg: entered allmulticast mode
[  244.011843][T14772] pimreg: left allmulticast mode
[  244.155852][T14771] EXT4-fs: Ignoring removed i_version option
[  244.204408][T14771] EXT4-fs error (device loop9): ext4_get_journal_inode:5809: comm syz.9.4252: inode #196608: comm syz.9.4252: iget: illegal inode #
[  244.243009][T14771] EXT4-fs (loop9): no journal found
[  244.248366][T14771] EXT4-fs (loop9): can't get journal size
[  244.255480][T14771] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended
[  244.268106][T14771] EXT4-fs (loop9): Errors on filesystem, clearing orphan list.
[  244.276423][T14771] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.378115][T14771] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  244.473505][T14789] lo speed is unknown, defaulting to 1000
[  244.480107][T12665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.516500][T14797] netlink: 'syz.1.4264': attribute type 1 has an invalid length.
[  244.527897][T14789] lo speed is unknown, defaulting to 1000
[  244.750791][T14828] loop1: detected capacity change from 0 to 512
[  244.778456][T14828] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  244.802849][T14832] lo speed is unknown, defaulting to 1000
[  244.818374][T14828] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  244.828104][T14828] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (28928!=33349)
[  244.838442][T14838] loop8: detected capacity change from 0 to 512
[  244.848928][T14838] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  244.861874][T14832] lo speed is unknown, defaulting to 1000
[  244.865922][T14838] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  244.877742][T14838] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (28928!=33349)
[  244.888715][T14828] EXT4-fs error (device loop1): __ext4_get_inode_loc:4435: comm syz.1.4275: Invalid inode table block 1 in block_group 0
[  244.902828][T14840] netlink: 'syz.9.4284': attribute type 4 has an invalid length.
[  244.920666][T14828] EXT4-fs (loop1): get root inode failed
[  244.923180][T14838] EXT4-fs error (device loop8): __ext4_get_inode_loc:4435: comm syz.8.4282: Invalid inode table block 1 in block_group 0
[  244.926403][T14828] EXT4-fs (loop1): mount failed
[  244.956694][T14840] Process accounting resumed
[  244.961958][T14838] EXT4-fs (loop8): get root inode failed
[  244.967638][T14838] EXT4-fs (loop8): mount failed
[  245.232441][T14863] lo speed is unknown, defaulting to 1000
[  245.358554][T14875] rdma_op ffff888100e29180 conn xmit_rdma 0000000000000000
[  245.471405][T14880] netlink: 'syz.0.4298': attribute type 1 has an invalid length.
[  245.528975][T14863] lo speed is unknown, defaulting to 1000
[  245.628722][T14865] lo speed is unknown, defaulting to 1000
[  245.872551][T14865] lo speed is unknown, defaulting to 1000
[  246.296205][   T29] kauditd_printk_skb: 194 callbacks suppressed
[  246.296222][   T29] audit: type=1326 audit(246.341:18965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14908 comm="syz.0.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e115d29 code=0x7ffc0000
[  246.367028][   T29] audit: type=1326 audit(246.381:18966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14908 comm="syz.0.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d3e115d29 code=0x7ffc0000
[  246.390297][   T29] audit: type=1326 audit(246.381:18967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14908 comm="syz.0.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e115d29 code=0x7ffc0000
[  246.413426][   T29] audit: type=1326 audit(246.381:18968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14908 comm="syz.0.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e115d29 code=0x7ffc0000
[  246.436429][   T29] audit: type=1326 audit(246.381:18969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14910 comm="syz.1.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411f7f5d29 code=0x7ffc0000
[  246.459522][   T29] audit: type=1326 audit(246.401:18970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14908 comm="syz.0.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d3e115d29 code=0x7ffc0000
[  246.482572][   T29] audit: type=1326 audit(246.401:18971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14908 comm="syz.0.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e115d29 code=0x7ffc0000
[  246.505643][   T29] audit: type=1326 audit(246.401:18972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14908 comm="syz.0.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e115d29 code=0x7ffc0000
[  246.553931][T14915] loop9: detected capacity change from 0 to 512
[  246.566561][T14915] EXT4-fs: Ignoring removed i_version option
[  246.583431][T14915] EXT4-fs error (device loop9): ext4_get_journal_inode:5809: comm syz.9.4314: inode #196608: comm syz.9.4314: iget: illegal inode #
[  246.588376][   T29] audit: type=1326 audit(246.581:18973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14908 comm="syz.0.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d3e115d29 code=0x7ffc0000
[  246.620029][   T29] audit: type=1326 audit(246.581:18974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14908 comm="syz.0.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e115d29 code=0x7ffc0000
[  246.648416][T14915] EXT4-fs (loop9): no journal found
[  246.653730][T14915] EXT4-fs (loop9): can't get journal size
[  246.680837][T14915] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended
[  246.698374][T14915] EXT4-fs (loop9): Errors on filesystem, clearing orphan list.
[  246.715716][T14915] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.781146][T14915] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  246.885721][T12665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.944275][T14938] IPVS: Error joining to the multicast group
[  247.042164][T14949] FAULT_INJECTION: forcing a failure.
[  247.042164][T14949] name failslab, interval 1, probability 0, space 0, times 0
[  247.054902][T14949] CPU: 1 UID: 0 PID: 14949 Comm: syz.8.4330 Not tainted 6.13.0-rc7-syzkaller #0
[  247.063959][T14949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  247.074041][T14949] Call Trace:
[  247.077336][T14949]  <TASK>
[  247.080282][T14949]  dump_stack_lvl+0xf2/0x150
[  247.084959][T14949]  dump_stack+0x15/0x1a
[  247.089151][T14949]  should_fail_ex+0x223/0x230
[  247.093885][T14949]  should_failslab+0x8f/0xb0
[  247.098510][T14949]  kmem_cache_alloc_noprof+0x52/0x320
[  247.103903][T14949]  ? skb_clone+0x154/0x1f0
[  247.108416][T14949]  skb_clone+0x154/0x1f0
[  247.112706][T14949]  __netlink_deliver_tap+0x2bd/0x4f0
[  247.118053][T14949]  netlink_unicast+0x64a/0x670
[  247.122870][T14949]  netlink_sendmsg+0x5cc/0x6e0
[  247.127683][T14949]  ? __pfx_netlink_sendmsg+0x10/0x10
[  247.132984][T14949]  __sock_sendmsg+0x140/0x180
[  247.137711][T14949]  ____sys_sendmsg+0x312/0x410
[  247.142555][T14949]  __sys_sendmsg+0x19d/0x230
[  247.147262][T14949]  __x64_sys_sendmsg+0x46/0x50
[  247.152101][T14949]  x64_sys_call+0x2734/0x2dc0
[  247.156855][T14949]  do_syscall_64+0xc9/0x1c0
[  247.161438][T14949]  ? clear_bhb_loop+0x55/0xb0
[  247.166212][T14949]  ? clear_bhb_loop+0x55/0xb0
[  247.170954][T14949]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.176864][T14949] RIP: 0033:0x7ff75bde5d29
[  247.181285][T14949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.200950][T14949] RSP: 002b:00007ff75a457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  247.209373][T14949] RAX: ffffffffffffffda RBX: 00007ff75bfd5fa0 RCX: 00007ff75bde5d29
[  247.217352][T14949] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004
[  247.225352][T14949] RBP: 00007ff75a457090 R08: 0000000000000000 R09: 0000000000000000
[  247.233333][T14949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  247.241310][T14949] R13: 0000000000000000 R14: 00007ff75bfd5fa0 R15: 00007fffa8ac07c8
[  247.249297][T14949]  </TASK>
[  247.271164][T14953] lo speed is unknown, defaulting to 1000
[  247.306045][T14951] rdma_op ffff8881048e0d80 conn xmit_rdma 0000000000000000
[  247.407160][T14953] lo speed is unknown, defaulting to 1000
[  247.440337][T14964] loop9: detected capacity change from 0 to 512
[  247.453579][T14964] EXT4-fs: Ignoring removed i_version option
[  247.484407][T14964] EXT4-fs error (device loop9): ext4_get_journal_inode:5809: comm syz.9.4336: inode #196608: comm syz.9.4336: iget: illegal inode #
[  247.520610][T14964] EXT4-fs (loop9): no journal found
[  247.525898][T14964] EXT4-fs (loop9): can't get journal size
[  247.555420][T14964] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended
[  247.577520][T14964] EXT4-fs (loop9): Errors on filesystem, clearing orphan list.
[  247.585638][T14964] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.604467][T14964] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  247.660718][T12665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.710978][T14977] __nla_validate_parse: 24 callbacks suppressed
[  247.710995][T14977] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4341'.
[  248.196222][T14994] netlink: 100 bytes leftover after parsing attributes in process `syz.9.4348'.
[  248.231054][T14996] loop9: detected capacity change from 0 to 128
[  248.271256][T14996] syz.9.4349: attempt to access beyond end of device
[  248.271256][T14996] loop9: rw=0, sector=121, nr_sectors = 920 limit=128
[  248.342928][T15002] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4352'.
[  248.584032][T15021] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.594999][T15024] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4363'.
[  248.596711][T15026] loop1: detected capacity change from 0 to 512
[  248.611807][T15026] EXT4-fs: Ignoring removed i_version option
[  248.686277][T15026] EXT4-fs error (device loop1): ext4_get_journal_inode:5809: comm syz.1.4365: inode #196608: comm syz.1.4365: iget: illegal inode #
[  248.701745][T15021] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.711607][T15026] EXT4-fs (loop1): no journal found
[  248.716837][T15026] EXT4-fs (loop1): can't get journal size
[  248.726998][T15026] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  248.736583][T15026] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  248.745644][T15026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.766814][T15026] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  248.770289][T15046] loop9: detected capacity change from 0 to 512
[  248.781905][T15048] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4373'.
[  248.784751][T15046] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  248.806527][T15021] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.810809][T15046] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  248.818950][T12110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.824578][T15046] System zones: 1-12
[  248.838708][T15046] EXT4-fs (loop9): orphan cleanup on readonly fs
[  248.846241][T15048] pim6reg1: entered promiscuous mode
[  248.851659][T15048] pim6reg1: entered allmulticast mode
[  248.859562][T15046] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4372: bg 0: block 361: padding at end of block bitmap is not set
[  248.881042][T15046] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  248.897977][T15046] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #11: comm syz.9.4372: attempt to clear invalid blocks 33619980 len 1
[  248.912651][T15021] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.914334][T15046] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4372: invalid indirect mapped block 1811939328 (level 0)
[  248.956522][T15046] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4372: invalid indirect mapped block 2 (level 2)
[  248.961842][T15057] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4377'.
[  248.972635][T15046] EXT4-fs (loop9): 1 truncate cleaned up
[  248.986890][T15046] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  249.013573][T15046] EXT4-fs (loop9): ext4_remount: Checksum for group 0 failed (17031!=33349)
[  249.030609][T15021] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.040800][T12665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  249.042100][T15021] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.062070][T15021] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.076183][T15021] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.258451][T15088] loop9: detected capacity change from 0 to 128
[  249.285982][T15090] lo speed is unknown, defaulting to 1000
[  249.326493][T15090] lo speed is unknown, defaulting to 1000
[  249.339514][T15088] syz.9.4391: attempt to access beyond end of device
[  249.339514][T15088] loop9: rw=0, sector=121, nr_sectors = 920 limit=128
[  249.418726][T15096] lo speed is unknown, defaulting to 1000
[  249.471153][T15096] lo speed is unknown, defaulting to 1000
[  249.661147][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4400'.
[  249.784023][T15115] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4403'.
[  249.941317][T15127] SELinux: ebitmap: map size 40 does not match my size 64 (high bit was 0)
[  249.965440][T15127] SELinux: failed to load policy
[  249.990207][T15124] xt_CT: You must specify a L4 protocol and not use inversions on it
[  250.000254][T15129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4409'.
[  250.060439][T15133] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  250.070388][T15133] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.108424][T15139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4414'.
[  250.143589][T15133] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  250.153595][T15133] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.205070][T15133] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  250.215007][T15133] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.283727][T15133] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  250.293671][T15133] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.387617][T15133] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  250.396042][T15133] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  250.413425][T15133] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  250.421763][T15133] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  250.434160][T15133] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  250.442481][T15133] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  250.454034][T15133] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  250.462377][T15133] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.539019][T15166] lo speed is unknown, defaulting to 1000
[  250.697337][T15166] lo speed is unknown, defaulting to 1000
[  251.080707][T15180] FAULT_INJECTION: forcing a failure.
[  251.080707][T15180] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  251.093917][T15180] CPU: 0 UID: 0 PID: 15180 Comm: syz.8.4429 Not tainted 6.13.0-rc7-syzkaller #0
[  251.103039][T15180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  251.113286][T15180] Call Trace:
[  251.116623][T15180]  <TASK>
[  251.119627][T15180]  dump_stack_lvl+0xf2/0x150
[  251.124337][T15180]  dump_stack+0x15/0x1a
[  251.128529][T15180]  should_fail_ex+0x223/0x230
[  251.133284][T15180]  should_fail+0xb/0x10
[  251.137459][T15180]  should_fail_usercopy+0x1a/0x20
[  251.142565][T15180]  _copy_to_iter+0x248/0xd00
[  251.147196][T15180]  ? __virt_addr_valid+0x1ed/0x250
[  251.152372][T15180]  ? __check_object_size+0x364/0x520
[  251.157682][T15180]  __skb_datagram_iter+0x2d9/0x610
[  251.162952][T15180]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  251.168604][T15180]  skb_copy_datagram_iter+0x41/0x130
[  251.173929][T15180]  unix_stream_read_actor+0x44/0x70
[  251.179245][T15180]  unix_stream_read_generic+0x6c7/0x1470
[  251.185031][T15180]  ? __pfx_autoremove_wake_function+0x10/0x10
[  251.191146][T15180]  unix_stream_recvmsg+0xc4/0xf0
[  251.196177][T15180]  ? __pfx_unix_stream_read_actor+0x10/0x10
[  251.202149][T15180]  ? __pfx_unix_stream_recvmsg+0x10/0x10
[  251.207852][T15180]  sock_recvmsg+0x13f/0x170
[  251.212524][T15180]  ____sys_recvmsg+0xf9/0x280
[  251.217326][T15180]  do_recvmmsg+0x2aa/0x6d0
[  251.221846][T15180]  ? __bpf_trace_sys_enter+0x10/0x30
[  251.227217][T15180]  __x64_sys_recvmmsg+0xe2/0x170
[  251.232172][T15180]  x64_sys_call+0x2a9a/0x2dc0
[  251.236873][T15180]  do_syscall_64+0xc9/0x1c0
[  251.241445][T15180]  ? clear_bhb_loop+0x55/0xb0
[  251.246131][T15180]  ? clear_bhb_loop+0x55/0xb0
[  251.250818][T15180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.256736][T15180] RIP: 0033:0x7ff75bde5d29
[  251.261156][T15180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  251.280864][T15180] RSP: 002b:00007ff75a457038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  251.289351][T15180] RAX: ffffffffffffffda RBX: 00007ff75bfd5fa0 RCX: 00007ff75bde5d29
[  251.297441][T15180] RDX: 040000000000013c RSI: 00000000200034c0 RDI: 0000000000000007
[  251.305418][T15180] RBP: 00007ff75a457090 R08: 0000000000000000 R09: 0000000000000000
[  251.313410][T15180] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000001
[  251.321389][T15180] R13: 0000000000000000 R14: 00007ff75bfd5fa0 R15: 00007fffa8ac07c8
[  251.329950][T15180]  </TASK>
[  251.522137][   T29] kauditd_printk_skb: 222 callbacks suppressed
[  251.522155][   T29] audit: type=1326 audit(251.571:19197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.9.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fced3d6cce7 code=0x7ffc0000
[  251.551356][   T29] audit: type=1326 audit(251.571:19198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.9.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fced3d11f29 code=0x7ffc0000
[  251.574257][   T29] audit: type=1326 audit(251.571:19199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.9.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fced3d6cce7 code=0x7ffc0000
[  251.597310][   T29] audit: type=1326 audit(251.571:19200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.9.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fced3d11f29 code=0x7ffc0000
[  251.620230][   T29] audit: type=1326 audit(251.571:19201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.9.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced3d75d29 code=0x7ffc0000
[  251.643277][   T29] audit: type=1326 audit(251.571:19202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.9.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fced3d75d29 code=0x7ffc0000
[  251.666318][   T29] audit: type=1326 audit(251.571:19203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.9.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced3d75d29 code=0x7ffc0000
[  251.689329][   T29] audit: type=1326 audit(251.571:19204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.9.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fced3d75d29 code=0x7ffc0000
[  251.712320][   T29] audit: type=1326 audit(251.571:19205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.9.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fced3d6cce7 code=0x7ffc0000
[  251.735423][   T29] audit: type=1326 audit(251.571:19206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.9.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fced3d11f29 code=0x7ffc0000
[  251.801437][T15192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.830437][T15192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.927026][T15201] lo speed is unknown, defaulting to 1000
[  252.021865][T15201] lo speed is unknown, defaulting to 1000
[  252.184504][T15222] pim6reg1: entered promiscuous mode
[  252.189995][T15222] pim6reg1: entered allmulticast mode
[  252.315486][T15223] loop8: detected capacity change from 0 to 2048
[  252.335055][T15228] loop1: detected capacity change from 0 to 128
[  252.361557][T15230] loop9: detected capacity change from 0 to 512
[  252.375798][T15223] Alternate GPT is invalid, using primary GPT.
[  252.382211][T15223]  loop8: p2 p3 p7
[  252.403553][T15230] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.437297][T12665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.474556][T15238] loop1: detected capacity change from 0 to 2048
[  252.482794][T15238] EXT4-fs: Ignoring removed mblk_io_submit option
[  252.508973][T15239] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  252.537720][T15244] loop9: detected capacity change from 0 to 128
[  252.547190][T15238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.695624][T15244] syz.9.4451: attempt to access beyond end of device
[  252.695624][T15244] loop9: rw=0, sector=121, nr_sectors = 920 limit=128
[  253.515398][T15263] loop8: detected capacity change from 0 to 2048
[  253.600713][T15263] Alternate GPT is invalid, using primary GPT.
[  253.607117][T15263]  loop8: p2 p3 p7
[  253.889405][T15266] __nla_validate_parse: 8 callbacks suppressed
[  253.889425][T15266] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4468'.
[  254.038216][T12110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.166856][T15281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4461'.
[  254.322230][T15295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4471'.
[  254.373146][T15297] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  254.383005][T15297] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.450206][T15297] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  254.460295][T15297] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.529759][T15297] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  254.539609][T15297] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.565833][T15294] serio: Serial port ttyS3
[  254.577593][T15307] lo speed is unknown, defaulting to 1000
[  254.599858][T15297] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  254.609729][T15297] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.615251][T15311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4478'.
[  254.662309][T15307] lo speed is unknown, defaulting to 1000
[  254.795772][T15326] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4485'.
[  254.798811][T15324] loop1: detected capacity change from 0 to 2048
[  254.876482][T15336] loop9: detected capacity change from 0 to 512
[  254.885064][T15336] EXT4-fs: Ignoring removed i_version option
[  254.895495][T15336] EXT4-fs error (device loop9): ext4_get_journal_inode:5809: comm syz.9.4489: inode #196608: comm syz.9.4489: iget: illegal inode #
[  254.911787][T15336] EXT4-fs (loop9): no journal found
[  254.917039][T15336] EXT4-fs (loop9): can't get journal size
[  254.923966][T15336] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended
[  254.925473][T15338] 9pnet_fd: Insufficient options for proto=fd
[  254.940928][T15336] EXT4-fs (loop9): Errors on filesystem, clearing orphan list.
[  254.951517][T15336] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.964947][T15324] Alternate GPT is invalid, using primary GPT.
[  254.971416][T15324]  loop1: p2 p3 p7
[  254.982746][T15336] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  255.012934][T12665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.103015][T15359] FAULT_INJECTION: forcing a failure.
[  255.103015][T15359] name failslab, interval 1, probability 0, space 0, times 0
[  255.115821][T15359] CPU: 1 UID: 0 PID: 15359 Comm: syz.9.4498 Not tainted 6.13.0-rc7-syzkaller #0
[  255.125050][T15359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  255.135124][T15359] Call Trace:
[  255.138422][T15359]  <TASK>
[  255.141378][T15359]  dump_stack_lvl+0xf2/0x150
[  255.146004][T15359]  dump_stack+0x15/0x1a
[  255.150183][T15359]  should_fail_ex+0x223/0x230
[  255.154945][T15359]  should_failslab+0x8f/0xb0
[  255.159638][T15359]  kmem_cache_alloc_noprof+0x52/0x320
[  255.165025][T15359]  ? __anon_vma_prepare+0x73/0x310
[  255.170242][T15359]  ? __alloc_pages_noprof+0x1bc/0x340
[  255.175744][T15359]  __anon_vma_prepare+0x73/0x310
[  255.180778][T15359]  ? do_wp_page+0x100e/0x2340
[  255.185544][T15359]  do_wp_page+0x1016/0x2340
[  255.190135][T15359]  ? __rcu_read_lock+0x36/0x50
[  255.195017][T15359]  handle_mm_fault+0xc63/0x2ac0
[  255.199935][T15359]  exc_page_fault+0x3b9/0x650
[  255.204663][T15359]  asm_exc_page_fault+0x26/0x30
[  255.209524][T15359] RIP: 0033:0x7fced3c38ba3
[  255.213943][T15359] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  255.233561][T15359] RSP: 002b:00007fced23e64a0 EFLAGS: 00010202
[  255.239733][T15359] RAX: 0000000000000400 RBX: 00007fced23e6540 RCX: 00007fcec9fc7000
[  255.247710][T15359] RDX: 00007fced23e66e0 RSI: 0000000000000001 RDI: 00007fced23e65e0
[  255.255700][T15359] RBP: 00000000000000f9 R08: 0000000000000008 R09: 000000000000009d
[  255.263738][T15359] R10: 00000000000000b8 R11: 00007fced23e6540 R12: 0000000000000001
[  255.271718][T15359] R13: 00007fced3e09040 R14: 0000000000000020 R15: 00007fced23e65e0
[  255.279729][T15359]  </TASK>
[  255.283085][T15359] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  255.300007][T15359] loop9: detected capacity change from 0 to 512
[  255.307699][T15359] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002]
[  255.320063][T15359] System zones: 1-12
[  255.324200][T15359] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.4498: Directory hole found for htree index block 0
[  255.340256][T15359] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117
[  255.348766][T15359] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.4498: Directory hole found for htree index block 0
[  255.363183][T15359] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117
[  255.376679][T15359] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.391170][T15367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4502'.
[  255.392473][T15369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4501'.
[  255.421349][T12665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.440345][T15372] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4504'.
[  255.442521][T15297] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  255.457574][T15297] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.473974][T15297] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  255.482333][T15297] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.497046][T15297] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  255.505522][T15297] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.522305][T15297] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  255.530646][T15297] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.671771][T15388] lo speed is unknown, defaulting to 1000
[  255.713480][T15395] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4513'.
[  255.723848][T15388] lo speed is unknown, defaulting to 1000
[  255.747033][T15398] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4514'.
[  255.863706][T15401] lo speed is unknown, defaulting to 1000
[  255.903558][T15401] lo speed is unknown, defaulting to 1000
[  256.049092][T15411] loop9: detected capacity change from 0 to 2048
[  256.108197][T15411] Alternate GPT is invalid, using primary GPT.
[  256.114730][T15411]  loop9: p2 p3 p7
[  256.358219][T15428] lo speed is unknown, defaulting to 1000
[  256.482772][T15428] lo speed is unknown, defaulting to 1000
[  256.676180][   T29] kauditd_printk_skb: 201 callbacks suppressed
[  256.676197][   T29] audit: type=1326 audit(256.721:19408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.0.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d3e10cce7 code=0x7ffc0000
[  256.725990][   T29] audit: type=1326 audit(256.761:19409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.0.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d3e0b1f29 code=0x7ffc0000
[  256.750589][   T29] audit: type=1326 audit(256.761:19410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.0.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d3e10cce7 code=0x7ffc0000
[  256.774983][   T29] audit: type=1326 audit(256.761:19411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.0.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d3e0b1f29 code=0x7ffc0000
[  256.799573][   T29] audit: type=1326 audit(256.761:19412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.0.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e115d29 code=0x7ffc0000
[  256.824065][   T29] audit: type=1326 audit(256.761:19413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.0.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d3e115d29 code=0x7ffc0000
[  256.847571][   T29] audit: type=1326 audit(256.761:19414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.0.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e115d29 code=0x7ffc0000
[  256.872163][   T29] audit: type=1326 audit(256.761:19415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.0.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d3e115d29 code=0x7ffc0000
[  256.874118][T15451] loop9: detected capacity change from 0 to 512
[  256.896863][   T29] audit: type=1326 audit(256.761:19416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.0.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d3e10cce7 code=0x7ffc0000
[  256.927767][   T29] audit: type=1326 audit(256.761:19417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.0.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d3e0b1f29 code=0x7ffc0000
[  257.030119][T15451] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.212338][T12665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.306597][T15454] serio: Serial port ttyS3
[  257.359338][T15483] SELinux:  Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped).
[  258.040288][T15516] loop9: detected capacity change from 0 to 128
[  258.104060][T15516] syz.9.4563: attempt to access beyond end of device
[  258.104060][T15516] loop9: rw=0, sector=121, nr_sectors = 920 limit=128
[  258.236912][T15524] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  258.246766][T15524] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.307267][T15527] lo speed is unknown, defaulting to 1000
[  258.324067][T15524] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  258.333993][T15524] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.394231][T15527] lo speed is unknown, defaulting to 1000
[  258.394311][T15528] serio: Serial port ttyS3
[  258.411047][T15524] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  258.421081][T15524] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.471593][T15524] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  258.483051][T15524] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.633486][T15532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.642435][T15532] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.662540][T15532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.673694][T15532] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.686369][T15532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.696498][T15532] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.707141][T15534] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.771924][T15534] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.860411][T15534] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.887160][T15547] SELinux:  Context @ is not valid (left unmapped).
[  258.950913][T15548] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  258.958572][T15548] batman_adv: batadv0: Removing interface: batadv_slave_0
[  258.966194][T15548] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  258.973739][T15548] batman_adv: batadv0: Removing interface: batadv_slave_1
[  258.986233][T15534] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.078234][T15534] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.093633][T15534] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.106327][T15534] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.120714][T15534] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.285765][T15568] __nla_validate_parse: 8 callbacks suppressed
[  259.285803][T15568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4584'.
[  259.296403][T15569] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4582'.
[  259.313608][T15568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4584'.
[  259.316240][T15569] rdma_rxe: rxe_newlink: failed to add lo
[  259.385398][T15524] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  259.395185][T15524] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.408064][T15524] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  259.417706][T15524] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.430958][T15524] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  259.440818][T15524] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.453501][T15524] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  259.463294][T15524] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.636745][T15593] loop1: detected capacity change from 0 to 128
[  259.670768][T15593] syz.1.4594: attempt to access beyond end of device
[  259.670768][T15593] loop1: rw=0, sector=121, nr_sectors = 920 limit=128
[  259.723300][T15596] lo speed is unknown, defaulting to 1000
[  259.772464][T15596] lo speed is unknown, defaulting to 1000
[  260.545535][T15602] lo speed is unknown, defaulting to 1000
[  260.585695][T15602] lo speed is unknown, defaulting to 1000
[  260.676153][T15604] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4599'.
[  260.706094][T15610] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.793284][T15610] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.849271][T15621] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4606'.
[  260.943911][T15610] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.997572][T15627] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.023129][T15629] loop8: detected capacity change from 0 to 512
[  261.054411][T15629] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  261.073072][T15629] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  261.082917][T15629] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (28928!=33349)
[  261.094018][T15610] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.117642][T15629] EXT4-fs error (device loop8): __ext4_get_inode_loc:4435: comm syz.8.4609: Invalid inode table block 1 in block_group 0
[  261.131733][T15627] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.147414][T15629] EXT4-fs (loop8): get root inode failed
[  261.153180][T15629] EXT4-fs (loop8): mount failed
[  261.202622][T15627] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.251850][T15627] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.319103][T15627] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.351075][T15627] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.382128][T15627] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.405025][T15627] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.489189][T15643] FAULT_INJECTION: forcing a failure.
[  261.489189][T15643] name failslab, interval 1, probability 0, space 0, times 0
[  261.502014][T15643] CPU: 1 UID: 0 PID: 15643 Comm: syz.5.4614 Not tainted 6.13.0-rc7-syzkaller #0
[  261.511081][T15643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  261.521173][T15643] Call Trace:
[  261.524470][T15643]  <TASK>
[  261.527423][T15643]  dump_stack_lvl+0xf2/0x150
[  261.532066][T15643]  dump_stack+0x15/0x1a
[  261.536300][T15643]  should_fail_ex+0x223/0x230
[  261.541052][T15643]  should_failslab+0x8f/0xb0
[  261.545730][T15643]  kmem_cache_alloc_noprof+0x52/0x320
[  261.551148][T15643]  ? getname_flags+0x81/0x3b0
[  261.555872][T15643]  getname_flags+0x81/0x3b0
[  261.560447][T15643]  user_path_at+0x26/0x120
[  261.564901][T15643]  do_faccessat+0x396/0x640
[  261.569496][T15643]  __x64_sys_faccessat+0x43/0x50
[  261.574502][T15643]  x64_sys_call+0x1e6d/0x2dc0
[  261.579297][T15643]  do_syscall_64+0xc9/0x1c0
[  261.583870][T15643]  ? clear_bhb_loop+0x55/0xb0
[  261.588583][T15643]  ? clear_bhb_loop+0x55/0xb0
[  261.593289][T15643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.599214][T15643] RIP: 0033:0x7fefa0425d29
[  261.603677][T15643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  261.623388][T15643] RSP: 002b:00007fef9ea91038 EFLAGS: 00000246 ORIG_RAX: 000000000000010d
[  261.631852][T15643] RAX: ffffffffffffffda RBX: 00007fefa0615fa0 RCX: 00007fefa0425d29
[  261.639856][T15643] RDX: 0000000000000005 RSI: 0000000020000000 RDI: ffffffffffffffff
[  261.647855][T15643] RBP: 00007fef9ea91090 R08: 0000000000000000 R09: 0000000000000000
[  261.655872][T15643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  261.663868][T15643] R13: 0000000000000000 R14: 00007fefa0615fa0 R15: 00007fff16336018
[  261.671877][T15643]  </TASK>
[  261.701790][T15644] lo speed is unknown, defaulting to 1000
[  261.747934][T15646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.768924][T15644] lo speed is unknown, defaulting to 1000
[  261.788088][T15646] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.824022][T15652] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4617'.
[  262.356088][T15665] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4622'.
[  262.393952][T15667] loop8: detected capacity change from 0 to 128
[  262.462730][T15667] syz.8.4623: attempt to access beyond end of device
[  262.462730][T15667] loop8: rw=0, sector=121, nr_sectors = 920 limit=128
[  262.617551][   T29] kauditd_printk_skb: 143 callbacks suppressed
[  262.617569][   T29] audit: type=1326 audit(262.661:19561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.1.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411f7f5d29 code=0x7ffc0000
[  262.668983][   T29] audit: type=1326 audit(262.701:19562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.1.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f411f7f5d29 code=0x7ffc0000
[  262.692176][   T29] audit: type=1326 audit(262.701:19563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.1.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411f7f5d29 code=0x7ffc0000
[  262.715323][   T29] audit: type=1326 audit(262.701:19564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.1.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f411f7f5d29 code=0x7ffc0000
[  262.738476][   T29] audit: type=1326 audit(262.701:19565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.1.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411f7f5d29 code=0x7ffc0000
[  262.761554][   T29] audit: type=1326 audit(262.701:19566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.1.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f411f7f7c47 code=0x7ffc0000
[  262.784590][   T29] audit: type=1326 audit(262.701:19567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.1.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f411f7f7bbc code=0x7ffc0000
[  262.807697][   T29] audit: type=1326 audit(262.701:19568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.1.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f411f7f7af4 code=0x7ffc0000
[  262.830614][   T29] audit: type=1326 audit(262.701:19569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.1.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f411f7f7af4 code=0x7ffc0000
[  262.853691][   T29] audit: type=1326 audit(262.701:19570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.1.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f411f7f498a code=0x7ffc0000
[  262.916647][T15680] loop1: detected capacity change from 0 to 512
[  262.926235][T15678] 9pnet: p9_errstr2errno: server reported unknown error 
[  262.933624][T15680] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  262.953903][T15680] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  262.963674][T15680] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (28928!=33349)
[  262.986353][T15680] EXT4-fs error (device loop1): __ext4_get_inode_loc:4435: comm syz.1.4630: Invalid inode table block 1 in block_group 0
[  263.005739][T15680] EXT4-fs (loop1): get root inode failed
[  263.011494][T15680] EXT4-fs (loop1): mount failed
[  263.017135][T15689] FAULT_INJECTION: forcing a failure.
[  263.017135][T15689] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  263.032055][T15689] CPU: 0 UID: 0 PID: 15689 Comm: syz.8.4633 Not tainted 6.13.0-rc7-syzkaller #0
[  263.041159][T15689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  263.051240][T15689] Call Trace:
[  263.054561][T15689]  <TASK>
[  263.057651][T15689]  dump_stack_lvl+0xf2/0x150
[  263.062392][T15689]  dump_stack+0x15/0x1a
[  263.066625][T15689]  should_fail_ex+0x223/0x230
[  263.071369][T15689]  should_fail+0xb/0x10
[  263.075596][T15689]  should_fail_usercopy+0x1a/0x20
[  263.080659][T15689]  _copy_to_user+0x20/0xa0
[  263.085244][T15689]  __se_sys_move_pages+0x114b/0x14b0
[  263.090581][T15689]  ? proc_fail_nth_write+0x12a/0x150
[  263.096010][T15689]  __x64_sys_move_pages+0x78/0x90
[  263.101085][T15689]  x64_sys_call+0x179b/0x2dc0
[  263.105829][T15689]  do_syscall_64+0xc9/0x1c0
[  263.110353][T15689]  ? clear_bhb_loop+0x55/0xb0
[  263.115063][T15689]  ? clear_bhb_loop+0x55/0xb0
[  263.119778][T15689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.125728][T15689] RIP: 0033:0x7ff75bde5d29
[  263.130241][T15689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.149944][T15689] RSP: 002b:00007ff75a457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[  263.158483][T15689] RAX: ffffffffffffffda RBX: 00007ff75bfd5fa0 RCX: 00007ff75bde5d29
[  263.166483][T15689] RDX: 0000000020000080 RSI: 0000000000001efe RDI: 0000000000000000
[  263.174477][T15689] RBP: 00007ff75a457090 R08: 0000000020000040 R09: 0000000000000000
[  263.182517][T15689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  263.190499][T15689] R13: 0000000000000000 R14: 00007ff75bfd5fa0 R15: 00007fffa8ac07c8
[  263.198485][T15689]  </TASK>
[  263.206498][T15695] loop8: detected capacity change from 0 to 512
[  263.213738][T15695] EXT4-fs: Ignoring removed mblk_io_submit option
[  263.220823][T15695] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  263.239348][T15695] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  263.247713][T15695] EXT4-fs (loop8): orphan cleanup on readonly fs
[  263.280587][T15695] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.4633: Invalid block bitmap block 0 in block_group 0
[  263.304541][T15699] lo speed is unknown, defaulting to 1000
[  263.327901][T15695] EXT4-fs (loop8): Remounting filesystem read-only
[  263.342523][T15695] EXT4-fs (loop8): 1 orphan inode deleted
[  263.360595][T15695] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  263.383863][T15695] SELinux: (dev loop8, type ext4) getxattr errno 5
[  263.397124][T15695] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.427786][T15701] lo speed is unknown, defaulting to 1000
[  263.432744][T15699] lo speed is unknown, defaulting to 1000
[  263.451545][T15704] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4638'.
[  263.492690][T15701] lo speed is unknown, defaulting to 1000
[  263.697898][T15718] loop8: detected capacity change from 0 to 256
[  263.706195][T15718] FAT-fs (loop8): bogus number of FAT sectors
[  263.712421][T15718] FAT-fs (loop8): Can't find a valid FAT filesystem
[  263.835460][T15725] netlink: 352 bytes leftover after parsing attributes in process `syz.1.4647'.
[  263.940321][T15732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4650'.
[  264.182723][T15749] raw_sendmsg: syz.5.4655 forgot to set AF_INET. Fix it!
[  264.241397][T15751] loop1: detected capacity change from 0 to 512
[  264.254089][T15751] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  264.274721][T15751] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  264.284546][T15751] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (28928!=33349)
[  264.327879][T15730] serio: Serial port ttyS3
[  264.335591][T15751] EXT4-fs error (device loop1): __ext4_get_inode_loc:4435: comm syz.1.4657: Invalid inode table block 1 in block_group 0
[  264.352855][T15751] EXT4-fs (loop1): get root inode failed
[  264.360205][T15751] EXT4-fs (loop1): mount failed
[  264.597653][T15759] netlink: 352 bytes leftover after parsing attributes in process `syz.0.4660'.
[  264.696477][T15765] lo speed is unknown, defaulting to 1000
[  264.736888][T15769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4664'.
[  264.752392][T15610] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  264.777922][T15610] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  264.797270][T15610] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  264.808874][T15765] lo speed is unknown, defaulting to 1000
[  264.818141][T15610] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  264.871436][T15776] loop9: detected capacity change from 0 to 512
[  264.885753][T15776] EXT4-fs: Ignoring removed i_version option
[  264.902440][T15776] EXT4-fs error (device loop9): ext4_get_journal_inode:5809: comm syz.9.4666: inode #196608: comm syz.9.4666: iget: illegal inode #
[  264.942397][T15776] EXT4-fs (loop9): no journal found
[  264.947666][T15776] EXT4-fs (loop9): can't get journal size
[  264.968396][T15780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4668'.
[  264.985683][T15776] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended
[  265.017876][T15776] EXT4-fs (loop9): Errors on filesystem, clearing orphan list.
[  265.042163][T15776] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.090267][T15776] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  265.167107][T12665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.365837][T15798] FAULT_INJECTION: forcing a failure.
[  265.365837][T15798] name failslab, interval 1, probability 0, space 0, times 0
[  265.380096][T15798] CPU: 0 UID: 0 PID: 15798 Comm: syz.9.4676 Not tainted 6.13.0-rc7-syzkaller #0
[  265.389278][T15798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  265.399365][T15798] Call Trace:
[  265.402693][T15798]  <TASK>
[  265.405640][T15798]  dump_stack_lvl+0xf2/0x150
[  265.410283][T15798]  dump_stack+0x15/0x1a
[  265.414475][T15798]  should_fail_ex+0x223/0x230
[  265.419188][T15798]  should_failslab+0x8f/0xb0
[  265.423933][T15798]  __kmalloc_noprof+0xab/0x3f0
[  265.428742][T15798]  ? iter_file_splice_write+0x102/0x980
[  265.434369][T15798]  iter_file_splice_write+0x102/0x980
[  265.439826][T15798]  ? copy_splice_read+0x597/0x5d0
[  265.445036][T15798]  ? __pfx_iter_file_splice_write+0x10/0x10
[  265.450990][T15798]  direct_splice_actor+0x160/0x2c0
[  265.456148][T15798]  splice_direct_to_actor+0x302/0x670
[  265.461587][T15798]  ? __pfx_direct_splice_actor+0x10/0x10
[  265.467263][T15798]  do_splice_direct+0xd7/0x150
[  265.472142][T15798]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  265.478102][T15798]  do_sendfile+0x398/0x660
[  265.482556][T15798]  __x64_sys_sendfile64+0x110/0x150
[  265.487831][T15798]  x64_sys_call+0xfbd/0x2dc0
[  265.492462][T15798]  do_syscall_64+0xc9/0x1c0
[  265.496985][T15798]  ? clear_bhb_loop+0x55/0xb0
[  265.501722][T15798]  ? clear_bhb_loop+0x55/0xb0
[  265.506440][T15798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.512414][T15798] RIP: 0033:0x7fced3d75d29
[  265.516937][T15798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  265.536799][T15798] RSP: 002b:00007fced23e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  265.545243][T15798] RAX: ffffffffffffffda RBX: 00007fced3f65fa0 RCX: 00007fced3d75d29
[  265.553239][T15798] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  265.561241][T15798] RBP: 00007fced23e7090 R08: 0000000000000000 R09: 0000000000000000
[  265.569249][T15798] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001
[  265.577285][T15798] R13: 0000000000000000 R14: 00007fced3f65fa0 R15: 00007ffc595ed068
[  265.585402][T15798]  </TASK>
[  265.642353][T15805] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4678'.
[  265.684956][T15807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4679'.
[  265.732380][T15811] loop9: detected capacity change from 0 to 512
[  265.761697][T15811] EXT4-fs: Ignoring removed i_version option
[  265.780751][T15811] EXT4-fs error (device loop9): ext4_get_journal_inode:5809: comm syz.9.4681: inode #196608: comm syz.9.4681: iget: illegal inode #
[  265.812831][T15811] EXT4-fs (loop9): no journal found
[  265.818133][T15811] EXT4-fs (loop9): can't get journal size
[  265.832750][T15811] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended
[  265.849754][T15811] EXT4-fs (loop9): Errors on filesystem, clearing orphan list.
[  265.879186][T15811] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.908178][T15811] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  265.943054][T15824] lo speed is unknown, defaulting to 1000
[  265.951003][T12665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.984648][T15824] lo speed is unknown, defaulting to 1000
[  266.003409][T15831] loop9: detected capacity change from 0 to 512
[  266.010525][T15831] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  266.020799][T15831] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  266.030696][T15831] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (28928!=33349)
[  266.042387][T15831] EXT4-fs error (device loop9): __ext4_get_inode_loc:4435: comm syz.9.4690: Invalid inode table block 1 in block_group 0
[  266.057531][T15831] EXT4-fs (loop9): get root inode failed
[  266.064823][T15831] EXT4-fs (loop9): mount failed
[  266.102210][T15837] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4692'.
[  266.136317][T15839] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4693'.
[  266.177901][T15841] loop8: detected capacity change from 0 to 512
[  266.264590][T15841] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.336701][ T8851] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.413924][T15854] lo speed is unknown, defaulting to 1000
[  266.512840][T15854] lo speed is unknown, defaulting to 1000
[  266.773050][T15866] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4701'.
[  266.885130][T15871] netlink: 100 bytes leftover after parsing attributes in process `syz.8.4702'.
[  267.101268][T15877] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4704'.
[  267.310983][T15896] FAULT_INJECTION: forcing a failure.
[  267.310983][T15896] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  267.325729][T15896] CPU: 0 UID: 0 PID: 15896 Comm: syz.5.4713 Not tainted 6.13.0-rc7-syzkaller #0
[  267.334921][T15896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  267.345058][T15896] Call Trace:
[  267.348363][T15896]  <TASK>
[  267.351359][T15896]  dump_stack_lvl+0xf2/0x150
[  267.356103][T15896]  dump_stack+0x15/0x1a
[  267.360378][T15896]  should_fail_ex+0x223/0x230
[  267.365110][T15896]  should_fail+0xb/0x10
[  267.369322][T15896]  should_fail_usercopy+0x1a/0x20
[  267.374392][T15896]  _copy_from_user+0x1e/0xb0
[  267.379105][T15896]  __sys_bpf+0x14e/0x7a0
[  267.383407][T15896]  __x64_sys_bpf+0x43/0x50
[  267.387878][T15896]  x64_sys_call+0x2914/0x2dc0
[  267.392601][T15896]  do_syscall_64+0xc9/0x1c0
[  267.397152][T15896]  ? clear_bhb_loop+0x55/0xb0
[  267.402093][T15896]  ? clear_bhb_loop+0x55/0xb0
[  267.406823][T15896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.412783][T15896] RIP: 0033:0x7fefa0425d29
[  267.417314][T15896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  267.436958][T15896] RSP: 002b:00007fef9ea91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  267.445443][T15896] RAX: ffffffffffffffda RBX: 00007fefa0615fa0 RCX: 00007fefa0425d29
[  267.453549][T15896] RDX: 000000000000000f RSI: 0000000020000080 RDI: 000000000000000a
[  267.461592][T15896] RBP: 00007fef9ea91090 R08: 0000000000000000 R09: 0000000000000000
[  267.469598][T15896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  267.477588][T15896] R13: 0000000000000000 R14: 00007fefa0615fa0 R15: 00007fff16336018
[  267.485662][T15896]  </TASK>
[  267.515242][T15900] loop9: detected capacity change from 0 to 512
[  267.651472][T15900] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.678017][T15908] loop8: detected capacity change from 0 to 1024
[  267.732753][T15908] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  267.752384][T12665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.860776][   T29] kauditd_printk_skb: 171 callbacks suppressed
[  267.860834][   T29] audit: type=1326 audit(267.911:19740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15920 comm="syz.5.4721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fefa041cce7 code=0x7ffc0000
[  267.902848][   T29] audit: type=1326 audit(267.951:19741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15920 comm="syz.5.4721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fefa03c1f29 code=0x7ffc0000
[  267.927411][   T29] audit: type=1326 audit(267.951:19742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15920 comm="syz.5.4721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fefa041cce7 code=0x7ffc0000
[  267.950376][   T29] audit: type=1326 audit(267.951:19743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15920 comm="syz.5.4721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fefa03c1f29 code=0x7ffc0000
[  267.974998][   T29] audit: type=1326 audit(267.951:19744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15920 comm="syz.5.4721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa0425d29 code=0x7ffc0000
[  267.999762][   T29] audit: type=1326 audit(267.951:19745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15920 comm="syz.5.4721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa0425d29 code=0x7ffc0000
[  268.027231][ T8851] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.053562][T15927] loop9: detected capacity change from 0 to 512
[  268.062529][T15927] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  268.076815][T15927] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  268.088364][T15927] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (28928!=33349)
[  268.098627][T15930] lo speed is unknown, defaulting to 1000
[  268.098654][T15930] lo speed is unknown, defaulting to 1000
[  268.098793][T15930] lo speed is unknown, defaulting to 1000
[  268.099644][T15930] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  268.127873][T15927] EXT4-fs error (device loop9): __ext4_get_inode_loc:4435: comm syz.9.4724: Invalid inode table block 1 in block_group 0
[  268.135089][T15930] lo speed is unknown, defaulting to 1000
[  268.149768][T15930] lo speed is unknown, defaulting to 1000
[  268.153718][T15927] EXT4-fs (loop9): get root inode failed
[  268.155862][T15930] lo speed is unknown, defaulting to 1000
[  268.163452][T15927] EXT4-fs (loop9): mount failed
[  268.170007][T15930] lo speed is unknown, defaulting to 1000
[  268.176010][T15937] loop1: detected capacity change from 0 to 128
[  268.178619][T15930] lo speed is unknown, defaulting to 1000
[  268.191106][T15930] lo speed is unknown, defaulting to 1000
[  268.197208][T15930] lo speed is unknown, defaulting to 1000
[  268.203537][T15930] lo speed is unknown, defaulting to 1000
[  268.209717][T15930] lo speed is unknown, defaulting to 1000
[  268.215833][T15930] lo speed is unknown, defaulting to 1000
[  268.225022][T15937] syz.1.4728: attempt to access beyond end of device
[  268.225022][T15937] loop1: rw=0, sector=121, nr_sectors = 920 limit=128
[  268.297522][   T29] audit: type=1400 audit(268.341:19746): avc:  denied  { read } for  pid=15942 comm="syz.8.4731" name="cgroup.procs" dev="cgroup" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0"
[  268.335530][T15943] batadv0: entered promiscuous mode
[  268.341606][   T29] audit: type=1400 audit(268.341:19747): avc:  denied  { open } for  pid=15942 comm="syz.8.4731" path="/syzcgroup/cpu/syz8/cgroup.procs" dev="cgroup" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0"
[  268.372333][T15943] batadv0: left promiscuous mode
[  268.431783][   T29] audit: type=1326 audit(268.471:19748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15946 comm="syz.0.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e115d29 code=0x7ffc0000
[  268.431994][T15943] batadv0: entered promiscuous mode
[  268.456628][   T29] audit: type=1326 audit(268.471:19749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15946 comm="syz.0.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e115d29 code=0x7ffc0000
[  268.516478][T15943] batadv0: left promiscuous mode
[  268.733350][T15960] lo speed is unknown, defaulting to 1000
[  268.742222][T15962] loop1: detected capacity change from 0 to 2048
[  268.796969][T15962] Alternate GPT is invalid, using primary GPT.
[  268.803416][T15962]  loop1: p2 p3 p7
[  268.946255][T15960] lo speed is unknown, defaulting to 1000
[  269.062439][T15960] lo speed is unknown, defaulting to 1000
[  269.082033][T15974] team0 (unregistering): Port device team_slave_0 removed
[  269.125429][T15974] team0 (unregistering): Port device team_slave_1 removed
[  269.533733][T15990] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.593265][T15990] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.608852][T15996] __nla_validate_parse: 11 callbacks suppressed
[  269.608870][T15996] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4749'.
[  269.636061][T15990] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.693801][T15990] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.738852][T16007] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4754'.
[  269.761911][T15990] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.775788][T15990] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.779520][T15990] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.809007][T15990] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.942918][T16019] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.010183][T16019] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.082991][T16019] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.213739][T16019] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.536060][T16040] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.545970][T16040] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.641412][T16040] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.651329][T16040] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.743036][T16040] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.753031][T16040] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.782479][T16047] lo speed is unknown, defaulting to 1000
[  270.799880][T16040] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.809709][T16040] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.864088][T16047] lo speed is unknown, defaulting to 1000
[  270.872621][T16040] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  270.880938][T16040] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.895100][T16045] lo speed is unknown, defaulting to 1000
[  270.895106][T16047] lo speed is unknown, defaulting to 1000
[  270.921409][T16040] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  270.929724][T16040] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  270.951640][T16040] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  270.959994][T16040] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  270.979902][T16040] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  270.988209][T16040] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.011094][T16045] lo speed is unknown, defaulting to 1000
[  271.053385][T16045] lo speed is unknown, defaulting to 1000
[  271.100832][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x1
[  271.108479][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.116112][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.123666][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.131252][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.154713][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.162259][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x2
[  271.169750][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.177158][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.184606][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.192102][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.199545][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x4
[  271.207052][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.214506][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.221951][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x2
[  271.229436][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.236878][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.244318][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.251874][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.259310][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.265372][T16060] serio: Serial port ttyS3
[  271.266745][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.278715][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.286232][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.293694][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.301117][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.308551][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.315968][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.323412][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.330889][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.338383][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.345838][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.353311][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.360770][   T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  271.371073][   T35] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  271.584821][T16068] loop8: detected capacity change from 0 to 2048
[  271.646464][T16068] Alternate GPT is invalid, using primary GPT.
[  271.654597][T16068]  loop8: p2 p3 p7
[  271.722592][T16072] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4778'.
[  271.751646][T16070] loop9: detected capacity change from 0 to 2048
[  271.794732][T16070] Alternate GPT is invalid, using primary GPT.
[  271.802706][T16070]  loop9: p2 p3 p7
[  271.954327][T16089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4785'.
[  271.965118][T16092] loop9: detected capacity change from 0 to 512
[  271.965407][T16092] EXT4-fs: Ignoring removed i_version option
[  271.966082][T16092] EXT4-fs error (device loop9): ext4_get_journal_inode:5809: comm syz.9.4787: inode #196608: comm syz.9.4787: iget: illegal inode #
[  271.992009][T16092] EXT4-fs (loop9): no journal found
[  271.997252][T16092] EXT4-fs (loop9): can't get journal size
[  272.009373][T16092] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended
[  272.023497][T16092] EXT4-fs (loop9): Errors on filesystem, clearing orphan list.
[  272.031551][T16092] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.047993][T16092] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  272.091862][T12665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.233289][T16100] netlink: 100 bytes leftover after parsing attributes in process `syz.9.4789'.
[  272.302271][T16103] loop9: detected capacity change from 0 to 512
[  272.320526][T16104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4791'.
[  272.339118][T16103] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  272.359087][T16103] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  272.368868][T16103] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (28928!=33349)
[  272.408911][T16103] EXT4-fs error (device loop9): __ext4_get_inode_loc:4435: comm syz.9.4790: Invalid inode table block 1 in block_group 0
[  272.462567][T16099] serio: Serial port ttyS3
[  272.468414][T16103] EXT4-fs (loop9): get root inode failed
[  272.474105][T16103] EXT4-fs (loop9): mount failed
[  272.632233][T16118] 9pnet_fd: Insufficient options for proto=fd
[  272.710963][T16121] lo speed is unknown, defaulting to 1000
[  272.749185][T16121] lo speed is unknown, defaulting to 1000
[  272.755332][T16121] lo speed is unknown, defaulting to 1000
[  273.004164][T16127] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4798'.
[  273.046535][T16131] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4800'.
[  273.246317][T16144] loop9: detected capacity change from 0 to 512
[  273.258405][T16144] EXT4-fs: Ignoring removed i_version option
[  273.265298][T16144] EXT4-fs error (device loop9): ext4_get_journal_inode:5809: comm syz.9.4805: inode #196608: comm syz.9.4805: iget: illegal inode #
[  273.282104][T16148] 9pnet_fd: Insufficient options for proto=fd
[  273.290088][T16144] EXT4-fs (loop9): no journal found
[  273.295410][T16144] EXT4-fs (loop9): can't get journal size
[  273.323705][T16144] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended
[  273.343530][T16144] EXT4-fs (loop9): Errors on filesystem, clearing orphan list.
[  273.366355][T16144] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.387342][T16144] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  273.464510][T12665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.498105][   T29] kauditd_printk_skb: 77 callbacks suppressed
[  273.498123][   T29] audit: type=1400 audit(273.541:19827): avc:  denied  { read } for  pid=16156 comm="syz.9.4809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  273.577792][T16163] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4811'.
[  273.583541][T16159] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4809'.
[  273.612792][T16151] serio: Serial port ttyS3
[  273.616590][T16159] validate_nla: 1 callbacks suppressed
[  273.616608][T16159] netlink: 'syz.9.4809': attribute type 29 has an invalid length.
[  273.632662][T16166] IPv6: Can't replace route, no match found
[  273.666661][T16170] loop9: detected capacity change from 0 to 512
[  273.681588][T16170] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.721483][T12665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.772892][   T29] audit: type=1326 audit(273.821:19828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16180 comm="syz.5.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa0425d29 code=0x7ffc0000
[  273.805265][T16181] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  273.815099][T16181] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  273.825747][T16181] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  273.835645][T16181] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  273.847755][   T29] audit: type=1326 audit(273.851:19829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16180 comm="syz.5.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefa0425d29 code=0x7ffc0000
[  273.848369][T16181] vxlan0: entered promiscuous mode
[  273.873445][   T29] audit: type=1326 audit(273.851:19830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16180 comm="syz.5.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa0425d29 code=0x7ffc0000
[  273.876000][T16181] vxlan0: entered allmulticast mode
[  273.901661][   T29] audit: type=1326 audit(273.851:19831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16180 comm="syz.5.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefa0425d29 code=0x7ffc0000
[  273.929623][   T29] audit: type=1326 audit(273.851:19832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16180 comm="syz.5.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa0425d29 code=0x7ffc0000
[  273.954059][   T29] audit: type=1326 audit(273.851:19833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16180 comm="syz.5.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefa0425d29 code=0x7ffc0000
[  273.979340][   T29] audit: type=1326 audit(273.851:19834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16180 comm="syz.5.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa0425d29 code=0x7ffc0000
[  274.004022][   T29] audit: type=1326 audit(273.851:19835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16180 comm="syz.5.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fefa0425d29 code=0x7ffc0000
[  274.029216][   T29] audit: type=1326 audit(273.851:19836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16180 comm="syz.5.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa0425d29 code=0x7ffc0000
[  274.054184][T16181] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  274.062871][T16181] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  274.071417][T16181] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  274.080022][T16181] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  274.094911][T16191] lo speed is unknown, defaulting to 1000
[  274.139347][T16191] lo speed is unknown, defaulting to 1000
[  274.151637][T16191] lo speed is unknown, defaulting to 1000
[  274.152107][T16195] IPv6: Can't replace route, no match found
[  274.216338][T16019] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.234233][T16019] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.263629][T16019] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.306540][T16019] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.413631][T16226] loop8: detected capacity change from 0 to 764
[  274.423254][T16230] can0: slcan on ttyS3.
[  274.501399][T16228] can0 (unregistered): slcan off ttyS3.
[  274.641739][T16257] __nla_validate_parse: 4 callbacks suppressed
[  274.641754][T16257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4849'.
[  274.693956][T16262] netlink: 'syz.8.4851': attribute type 39 has an invalid length.
[  274.740274][T16265] loop1: detected capacity change from 0 to 512
[  274.781324][T16265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.834916][T16265] Process accounting resumed
[  274.845767][T16265] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  274.976691][T12110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.034158][T16279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4857'.
[  275.106005][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4859'.
[  275.170422][T16285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4858'.
[  275.181196][T16285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4858'.
[  275.191505][T16287] loop8: detected capacity change from 0 to 512
[  275.213716][T16287] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.363417][T16296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4863'.
[  275.476730][T16307] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4869'.
[  275.558813][T16309] 9pnet_fd: Insufficient options for proto=fd
[  275.573216][ T8851] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.582284][T16311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4871'.
[  275.582324][T16311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4871'.
[  275.604287][T16313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4867'.
[  275.628732][T16317] loop8: detected capacity change from 0 to 512
[  275.635483][T16317] EXT4-fs: Ignoring removed i_version option
[  275.642453][T16317] EXT4-fs error (device loop8): ext4_get_journal_inode:5809: comm syz.8.4868: inode #196608: comm syz.8.4868: iget: illegal inode #
[  275.667288][T16317] EXT4-fs (loop8): no journal found
[  275.672628][T16317] EXT4-fs (loop8): can't get journal size
[  275.684231][T16319] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.698073][T16317] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended
[  275.730559][T16317] EXT4-fs (loop8): Errors on filesystem, clearing orphan list.
[  275.741455][T16319] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.754311][T16317] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.778128][T16317] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  275.814989][T16319] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.831420][ T8851] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.871063][T16319] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.927841][T16319] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.950459][T16319] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.976610][T16319] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.992617][T16319] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  276.275372][T16365] lo speed is unknown, defaulting to 1000
[  276.293503][T16363] loop9: detected capacity change from 0 to 512
[  276.315828][T16363] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  276.357786][T16363] EXT4-fs (loop9): can't mount with journal_checksum, fs mounted w/o journal
[  276.494071][T16369] loop9: detected capacity change from 0 to 512
[  276.542934][T16365] lo speed is unknown, defaulting to 1000
[  276.589855][T16365] lo speed is unknown, defaulting to 1000
[  276.822195][T16369] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.890894][T16378] loop1: detected capacity change from 0 to 512
[  276.897621][T16378] EXT4-fs: Ignoring removed i_version option
[  276.952620][T16378] EXT4-fs error (device loop1): ext4_get_journal_inode:5809: comm syz.1.4895: inode #196608: comm syz.1.4895: iget: illegal inode #
[  277.024415][T12665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.068947][T16378] EXT4-fs (loop1): no journal found
[  277.074196][T16378] EXT4-fs (loop1): can't get journal size
[  277.154372][T16384] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  277.164274][T16384] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.177424][T16378] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  277.188044][T16378] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  277.322546][T16378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.349602][T16384] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  277.359538][T16384] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.370721][T16378] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  277.423641][T16384] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  277.433530][T16384] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.444481][T12110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.479740][T16384] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  277.489664][T16384] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.513081][T16406] netlink: 'syz.1.4906': attribute type 4 has an invalid length.
[  277.564445][T16384] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  277.572852][T16384] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  277.596537][T16384] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  277.604848][T16384] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  277.620659][T16384] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  277.628998][T16384] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  277.644669][T16415] lo speed is unknown, defaulting to 1000
[  277.656589][T16384] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  277.664949][T16384] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  277.707485][T16415] lo speed is unknown, defaulting to 1000
[  277.713707][T16415] lo speed is unknown, defaulting to 1000
[  277.779033][T16420] lo speed is unknown, defaulting to 1000
[  277.866502][T16420] lo speed is unknown, defaulting to 1000
[  277.876803][T16420] lo speed is unknown, defaulting to 1000
[  278.671835][   T29] kauditd_printk_skb: 942 callbacks suppressed
[  278.671850][   T29] audit: type=1400 audit(278.724:20779): avc:  denied  { read write } for  pid=12110 comm="syz-executor" name="loop1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0
[  279.268968][   T29] audit: type=1400 audit(279.324:20780): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.163 src=30030 daddr=10.128.0.2 dest=60062 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  279.331812][   T29] audit: type=1400 audit(279.384:20781): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.163 src=30030 daddr=10.128.0.2 dest=60062 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  279.356956][   T29] audit: type=1400 audit(279.414:20782): avc:  denied  { egress } for  pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0
[  281.028933][   T29] audit: type=1400 audit(281.084:20783): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.163 src=30030 daddr=10.128.0.2 dest=60062 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  281.091439][   T29] audit: type=1400 audit(281.144:20784): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.163 src=30030 daddr=10.128.0.2 dest=60062 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  284.470825][   T29] audit: type=1400 audit(284.524:20785): avc:  denied  { recv } for  pid=3505 comm="kworker/u8:15" saddr=10.128.0.163 src=30030 daddr=10.128.0.2 dest=60062 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  284.771304][   T29] audit: type=1400 audit(284.824:20786): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.163 src=30030 daddr=10.128.0.2 dest=60062 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  285.109307][   T29] audit: type=1400 audit(285.164:20787): avc:  denied  { egress } for  pid=23 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0
[  291.510563][   T29] audit: type=1400 audit(291.564:20788): avc:  denied  { recv } for  pid=3560 comm="kworker/u8:39" saddr=10.128.0.163 src=30030 daddr=10.128.0.2 dest=60062 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  291.939962][   T29] audit: type=1400 audit(291.994:20789): avc:  denied  { recv } for  pid=3937 comm="kworker/u8:61" saddr=10.128.0.163 src=30030 daddr=10.128.0.2 dest=60062 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  295.352422][   T29] audit: type=1400 audit(295.404:20790): avc:  denied  { egress } for  pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0
[  295.376886][   T29] audit: type=1400 audit(295.404:20791): avc:  denied  { egress } for  pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0
[  299.829357][   T29] audit: type=1400 audit(299.884:20792): avc:  denied  { egress } for  pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0
[  301.108663][   T29] audit: type=1400 audit(301.164:20793): avc:  denied  { egress } for  pid=23 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0
[  305.590970][   T29] audit: type=1400 audit(305.644:20794): avc:  denied  { egress } for  pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0
[  305.614001][   T29] audit: type=1400 audit(305.644:20795): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.163 src=30030 daddr=10.128.0.2 dest=60062 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  306.017330][   T29] audit: type=1400 audit(306.064:20796): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.163 src=30030 daddr=10.128.0.2 dest=60062 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  307.249875][    C0] ==================================================================
[  307.258003][    C0] BUG: KCSAN: data-race in __tmigr_cpu_activate / tmigr_handle_remote
[  307.266199][    C0] 
[  307.268526][    C0] write to 0xffff888237d205dc of 1 bytes by task 0 on cpu 1:
[  307.275977][    C0]  __tmigr_cpu_activate+0x55/0x200
[  307.281111][    C0]  tmigr_cpu_activate+0x8a/0xc0
[  307.285976][    C0]  timer_clear_idle+0x28/0x100
[  307.290748][    C0]  tick_nohz_restart_sched_tick+0x22/0x110
[  307.296600][    C0]  tick_nohz_idle_exit+0xfe/0x1d0
[  307.301641][    C0]  do_idle+0x1eb/0x230
[  307.302510][   T29] audit: type=1400 audit(307.304:20797): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.163 src=30030 daddr=10.128.0.2 dest=60062 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  307.305714][    C0]  cpu_startup_entry+0x25/0x30
[  307.334793][    C0]  start_secondary+0x96/0xa0
[  307.339398][    C0]  common_startup_64+0x12c/0x137
[  307.344347][    C0] 
[  307.346666][    C0] read to 0xffff888237d205dc of 1 bytes by interrupt on cpu 0:
[  307.354298][    C0]  tmigr_handle_remote+0x26e/0x940
[  307.359427][    C0]  run_timer_softirq+0x5f/0x70
[  307.364213][    C0]  handle_softirqs+0xbf/0x280
[  307.368908][    C0]  __irq_exit_rcu+0x3a/0xc0
[  307.373427][    C0]  sysvec_apic_timer_interrupt+0x73/0x80
[  307.379077][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  307.385063][    C0]  acpi_safe_halt+0x21/0x30
[  307.389571][    C0]  acpi_idle_do_entry+0x1d/0x30
[  307.394423][    C0]  acpi_idle_enter+0x96/0xb0
[  307.399015][    C0]  cpuidle_enter_state+0xc5/0x260
[  307.404038][    C0]  cpuidle_enter+0x40/0x70
[  307.408465][    C0]  do_idle+0x192/0x230
[  307.412541][    C0]  cpu_startup_entry+0x25/0x30
[  307.417312][    C0]  rest_init+0xef/0xf0
[  307.421382][    C0]  start_kernel+0x586/0x5e0
[  307.425967][    C0]  x86_64_start_reservations+0x2a/0x30
[  307.431449][    C0]  x86_64_start_kernel+0x9a/0xa0
[  307.436412][    C0]  common_startup_64+0x12c/0x137
[  307.441362][    C0] 
[  307.443683][    C0] value changed: 0x00 -> 0x01
[  307.448377][    C0] 
[  307.450699][    C0] Reported by Kernel Concurrency Sanitizer on:
[  307.456848][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.13.0-rc7-syzkaller #0
[  307.465450][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  307.475508][    C0] ==================================================================
[  315.831481][   T29] audit: type=1400 audit(315.884:20798): avc:  denied  { egress } for  pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0
[  315.854988][   T29] audit: type=1400 audit(315.884:20799): avc:  denied  { egress } for  pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0