last executing test programs:

7m49.543240556s ago: executing program 32 (id=672):
r0 = syz_open_dev$loop(0x0, 0x75f, 0x8042)
pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x800004, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
sendfile(r0, r0, 0x0, 0x24002deb)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000005000000010001000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffbfffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff92, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c)
add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r7=>0x0})
connect$can_bcm(r6, &(0x7f0000000040)={0x1d, r7}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r5}, 0x10)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)

7m5.11578581s ago: executing program 33 (id=1703):
socket$key(0xf, 0x3, 0x2)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50)
r2 = socket$inet(0x2, 0x3, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000480)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "51e71cd259c6ed187dac0409e99cce0a58492b8cbfbab2dd3b1761cfc2236565", "69aec473e66807b976eaef253d41fbf3293cec01f86e1c3178763287a678030527491d9d5a2060d4535e076beffdd49e", "6a6a512958482b7b498010113475f8fafbc9c6ddc0ac49b3d7fd382d", {"41ac74f4777623d3ad9e46fa5a9a857f", "e3f215ab1e8e7d0bd6bb293212c47476"}}}}}}}, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e01, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x5c, 0x0, 0xf}]}}}], 0x18}}], 0x2, 0xe000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = timerfd_create(0x0, 0x0)
timerfd_settime(r4, 0x3, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r4, &(0x7f0000000040))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$unix(r5, &(0x7f0000000440)={0x0, 0x35, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x18}, 0x0)
close(r6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18)

6m0.990215207s ago: executing program 34 (id=3014):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0)

5m55.67389087s ago: executing program 35 (id=3107):
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xf0ff, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)

5m23.130123971s ago: executing program 7 (id=3751):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x2}, 0x2017, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="88fe00ebffffff000000000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x6}, 0x18) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000011c0)={0x30, r4, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x804)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (async)
r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10) (async)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r9}, 0x38) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='kfree\x00', r10}, 0x18)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x70, r12, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast2}}, {0x14, 0x2, @in={0x2, 0x0, @rand_addr=0x64010104}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x82}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}]}]}, 0x70}}, 0x800) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000740)='host1x_channel_submitted\x00', r5, 0x0, 0x4000000000000000}, 0x18) (async)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

5m22.987907513s ago: executing program 7 (id=3756):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, &(0x7f0000000200))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x10, &(0x7f0000002e00), 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x2, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {0x0, 0x7, 0x1}, {0x8}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x6, 0xfe}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x9, 0xfffffff7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000004}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f000000e0c0), 0x10010)
ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x6)
sendfile(r3, r7, &(0x7f0000000100)=0x6, 0x100000000010001)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000200)=0x32)
close(r2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

5m22.076998935s ago: executing program 7 (id=3773):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x1}}, {@nolazytime}, {@delalloc}, {@i_version}, {@lazytime}, {@nodiscard}, {@grpjquota}, {@block_validity}, {@errors_remount}]}, 0x1, 0x549, &(0x7f0000000540)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x3200414, 0x0, 0x1, 0x0, &(0x7f0000000480))

5m21.70494973s ago: executing program 7 (id=3777):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@norecovery}, {@usrquota}, {@quota}]}, 0x3, 0x434, &(0x7f0000000d80)="$eJzs28tvG0UYAPBvbaelLxKq8mhaIFAQEY+kSUvpgQsIJA4gIcGhHEMeVajboCZItIogIFSOqBJ3xBGJv4ATXBBwQuIKd1SpQrm0cDJaezexHTvNw4kL/v2kbWd2ZzXzeXfsmZ1sAD1rKP0niTgYEb9HRH8t21hgqPbf7eXFyb+XFyeTqFTe+iuplru1vDiZF83PO5BnShGFz5I41qLe+StXL0yUy9OXs/zowsX3R+evXH1u9uLE+enz05fGz549fWrshTPjz3ckzjSuW4MfzR0/+to719+YPHf93Z+/TfL4m+LokKH1Dj5ZqXS4uu46VJdOSl1sCJtSrHXT6Kv2//4oxurF649XP+1q44AdValUKg+0P7xUAf7Hkuh2C4DuyH/o0/lvvu3S0OOucPOl2gQojft2ttWOlKKQlelrmt920lBEnFv656t0i515DgEA0OD7dPzzbKvxXyHqnwvdm62hDETEfRFxOCLORMSRiLg/olr2wYh4aJP1Ny+SrB3/FG5sKbANSsd/L2ZrW43jv3z0FwPFLHeoGn9fMjNbnj6ZfSbD0bc3zY+tU8cPr/z2Rbtj9eO/dEvrz8eCWTtulPY2njM1sTCxnZjr3fwkYrDUKv5kZSUgiYijETG4xTpmn/7meLtjd45/HR1YZ6p8HfFU7fovRVP8uWT99cnRe6I8fXI0vyvW+uXXa2+2q39b8XdAev33t7z/V+IfSOrXa+c3X8e1Pz5vO6fZ6v2/J3m7Yd+HEwsLl8ci9iSv1xpdv3+8qdz4avk0/uETrfv/4Vj9JI5FRHoTPxwRj0TEo1nbH4uIxyPixDrx//TyE+9tPf6dlcY/tanrv5rYE817WieKF378rqHSgc3En17/09XUcLZnI99/G2nX1u5mAAAA+O8pRMTBSAojK+lCYWSk9jf8R2J/oTw3v/DMzNwHl6Zq7wgMRF8hf9LVX/c8dCyb1uf58ab8qey58ZfFfdX8yORcearbwUOPO9Cm/6f+LHa7dcCO874W9C79H3qX/g+9S/+H3lWaWbNrX1caAuy6Vr//H3ehHcDua+r/lv2gh5j/Q+/S/6F36f/Qk+b3xZ1fkpeQWJOIwl3RDIn2ib3bOb3b30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//27K5tA=")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3b04081, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

5m21.271230186s ago: executing program 7 (id=3786):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1, 0x2, 0x0, 0x0, 0x8000002, 0x1, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x5, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x401, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0)

5m19.949710744s ago: executing program 7 (id=3800):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
clock_gettime(0x6, &(0x7f00000003c0)={0x0, <r1=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000b59e1797bf7d900000000000", @ANYBLOB="676ef0db979c609247662cb222b03a9fde7e076112185103c9c6f1398d05a26ee0aeb1e0c88f79507daab3d6a89aeec3d8dd643e7458b466a5006abbd8f3d30abc1ceb5d10b75cd3cd21666150a789114673be4c66659edd54134cefec99cbef852aac2227e5cb909f23d01c8fee6bff03f8f2cc255c0ca4a1c484422c69a42eb42dd2626935c765e1b7dd882f983318ed23c8be6200bb2e33fc6a1f63037ff59c67d27000959f4e68a49f58", @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="c51300000000060000ab8aa4e35ab7ff5000daa60f1903fd595cf435209e7f84c8ccaff26ad92d100e92f994d481e9625388410d3c70fa3664ecbe270e19fa2eb361468e91a41047e49486d5355391e4fdee80ab7061bb5d5a856f19124ed30cc68a9e22411546e7b7e6617cf0292f24f721b49573a6881c0042c94f6e3907057dda8d053979e52be91c5f5d181e59f1cfebd77af05399352bb8578437e6a918957c40ac07e4fb4b11bcbce1fdba981ae7a10a9b5965b8", @ANYRES32=0x0, @ANYBLOB="08002a0084210000"], 0x24}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f0000000180)={[{@grpquota}, {@inode_readahead_blks}, {@quota}, {@oldalloc}]}, 0x1, 0x504, &(0x7f0000001000)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x14, 0x14, &(0x7f0000001b00)=ANY=[@ANYRES8=r1, @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="160000f614100000001a5a0c602a000000610bcea6721b2f11056cdb3a3d2148cd55a9ec7b224735021e5cc106e26e148f4164ef3a66a6d84e3ed01397e4a7bf1c96d5ece8ec02ab7c350f26f900763de9c8509cbb7ba74796af921b70691eddd8d475ce65860bba7b5032ec156e2d9a56c2c7949badf42265fa4f868d6a0935b938730bf73cb5fa3e4d254924dc414d0a8d8b91e34e94bb", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='dlm_bast\x00', r6}, 0x18)
syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r8 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff})
readv(r10, &(0x7f0000000380)=[{&(0x7f00000008c0)=""/4092, 0xffc}, {&(0x7f00000018c0)=""/187, 0xbb}, {&(0x7f0000000680)=""/77, 0x4d}], 0x3)
splice(r10, 0x0, r9, 0x0, 0x10000008ebc, 0x0)
splice(r0, &(0x7f0000000100)=0x8000, r10, &(0x7f0000000140)=0x1, 0x7f, 0xf)
getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r11, 0x107, 0x7, &(0x7f0000000040)=0x6, 0x4)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="8b3329bd04000000000005000000080003"], 0x1c}}, 0x0)

5m19.875768375s ago: executing program 36 (id=3800):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
clock_gettime(0x6, &(0x7f00000003c0)={0x0, <r1=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000b59e1797bf7d900000000000", @ANYBLOB="676ef0db979c609247662cb222b03a9fde7e076112185103c9c6f1398d05a26ee0aeb1e0c88f79507daab3d6a89aeec3d8dd643e7458b466a5006abbd8f3d30abc1ceb5d10b75cd3cd21666150a789114673be4c66659edd54134cefec99cbef852aac2227e5cb909f23d01c8fee6bff03f8f2cc255c0ca4a1c484422c69a42eb42dd2626935c765e1b7dd882f983318ed23c8be6200bb2e33fc6a1f63037ff59c67d27000959f4e68a49f58", @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="c51300000000060000ab8aa4e35ab7ff5000daa60f1903fd595cf435209e7f84c8ccaff26ad92d100e92f994d481e9625388410d3c70fa3664ecbe270e19fa2eb361468e91a41047e49486d5355391e4fdee80ab7061bb5d5a856f19124ed30cc68a9e22411546e7b7e6617cf0292f24f721b49573a6881c0042c94f6e3907057dda8d053979e52be91c5f5d181e59f1cfebd77af05399352bb8578437e6a918957c40ac07e4fb4b11bcbce1fdba981ae7a10a9b5965b8", @ANYRES32=0x0, @ANYBLOB="08002a0084210000"], 0x24}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f0000000180)={[{@grpquota}, {@inode_readahead_blks}, {@quota}, {@oldalloc}]}, 0x1, 0x504, &(0x7f0000001000)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x14, 0x14, &(0x7f0000001b00)=ANY=[@ANYRES8=r1, @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="160000f614100000001a5a0c602a000000610bcea6721b2f11056cdb3a3d2148cd55a9ec7b224735021e5cc106e26e148f4164ef3a66a6d84e3ed01397e4a7bf1c96d5ece8ec02ab7c350f26f900763de9c8509cbb7ba74796af921b70691eddd8d475ce65860bba7b5032ec156e2d9a56c2c7949badf42265fa4f868d6a0935b938730bf73cb5fa3e4d254924dc414d0a8d8b91e34e94bb", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='dlm_bast\x00', r6}, 0x18)
syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r8 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff})
readv(r10, &(0x7f0000000380)=[{&(0x7f00000008c0)=""/4092, 0xffc}, {&(0x7f00000018c0)=""/187, 0xbb}, {&(0x7f0000000680)=""/77, 0x4d}], 0x3)
splice(r10, 0x0, r9, 0x0, 0x10000008ebc, 0x0)
splice(r0, &(0x7f0000000100)=0x8000, r10, &(0x7f0000000140)=0x1, 0x7f, 0xf)
getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r11, 0x107, 0x7, &(0x7f0000000040)=0x6, 0x4)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="8b3329bd04000000000005000000080003"], 0x1c}}, 0x0)

5m13.337135976s ago: executing program 9 (id=3900):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/86, 0x328000, 0x1000, 0x22e}, 0x1c)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x41, 0x2)

5m13.00038739s ago: executing program 9 (id=3904):
openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r0, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee83", 0x1e)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write(r0, &(0x7f0000000980)="a9", 0x1)

5m12.943120301s ago: executing program 9 (id=3905):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802", @ANYRES32], 0x50)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000"], 0x48)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

5m12.253322151s ago: executing program 9 (id=3911):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x1218088, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2nnAwMpOZndk1xkQ2K7f7+TT72+d5vjPPMxmys0WefPjy7OhuHvcfffFLZFkSvXGM40kSo+hF46s4ZfxNAADPsidFEb8XC5vkkojItjctAGCL1vv732/Lny5kWgDAFt1597239w8Obr2TRRa3Z18fT8r/7Mufi/79+/FxTONevBbDeBpRPSjsRvW0UJa3i6KY9/PSKK7P5seTMjn74HF9/P3fIqr8XgxjVDWdPG1U+bcObu3lC538vJzH8/X5x2X+ZgzjxZPwqfzNJfmYpPHqK53534hh/PxRfBLTuFtNos1/uZfnbxbf/vH5++X0ynwyP54MqnGtYueCXxoAAAAAAAAAAAAAAAAAAAAAAC6xG/XeOYPIr8X1WdlU77+z8zTS8te8MWpTZf+iSpqm7v5ARVHMi/i+s6VgXtQD2/19+vFSv7uxIAAAAAAAAAAAAAAAAAAAAFxdDz/97OhwOr334FyKZjeAfkT8eSfivx5n3Gm5FqsHD+pzHk6nvbo8NeZx2m2JnWZMErFyGuUizumy/Fvx3Nk5N8UPP5YL3OSAWafl9eUL3N3+upq76+gwWX6uQTQtWX2TfJdGtGPSWPNc6T91FbHJ7Zcu7RpuvPb0haqYrxgTyaqJvfHr4srVLcnZVaTVVV0a362LTvzMvbHW6x7ZIv7394qk2q1jsL03IwAAAAAAAAAAAAAAAAAAuOLaT/8u6Xy0MtorfBQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEui/f7/DYp5HV5jcBoPHv7PSwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAK+CsAAP//hipWFQ==")
r1 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xfedd, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000280))
io_uring_register$IORING_REGISTER_PBUF_STATUS(r1, 0x1a, &(0x7f0000000240)={0x2}, 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x108)
write$P9_RSTATu(r2, &(0x7f0000000200)={0x63, 0x7d, 0x1, {{0x0, 0x41, 0x1ff, 0x5, {0x40, 0x0, 0x2}, 0x9ba80000, 0xde, 0x7fff, 0x6, 0x5, 'vfat\x00', 0x5, 'vfat\x00', 0x3, 'o[+', 0x1, '\\'}, 0xd, '^@+^/%$,\xaf..,$'}}, 0x63)
fallocate(r2, 0x1, 0x5, 0x7fff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0], <r3=>0x0, 0x82, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xbf, &(0x7f000000cf3d)=""/191, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80360, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0xb85, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0x1c)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4)
r8 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r8, r4, 0x0, 0x0, 0x0}, 0x30)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r9}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000680))
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x62, 0x5, 0x410, 0x2d0, 0x2d0, 0xffffffff, 0x0, 0x1a8, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, 0x0, {[{{@uncond, 0x0, 0xc8, 0x100, 0x0, {0x22e}, [@common=@inet=@hashlimit1={{0x58}, {'team0\x00', {0x4, 0x80000000, 0x81, 0xc, 0x2, 0x80000000, 0x27e3, 0x0, 0x40}, {0x67a}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x25, {0x3, @local, @broadcast}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @empty, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@addrtype={{0x30}, {0x0, 0x102, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x14}, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @broadcast, @port=0x4e22, @icmp_id=0x67}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0)

5m12.033061214s ago: executing program 9 (id=3916):
prctl$PR_SET_NAME(0xf, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x1}}, {@nolazytime}, {@delalloc}, {@i_version}, {@lazytime}, {@nodiscard}, {@grpjquota}, {@block_validity}, {@errors_remount}]}, 0x1, 0x549, &(0x7f0000000540)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x3200414, 0x0, 0x1, 0x0, &(0x7f0000000480))

5m11.702041088s ago: executing program 9 (id=3921):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000"], 0x48)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000000100)={0x70, 0x4, 0x100000}, 0x20)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

5m11.682784039s ago: executing program 37 (id=3921):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000"], 0x48)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000000100)={0x70, 0x4, 0x100000}, 0x20)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

3m36.611581554s ago: executing program 3 (id=4583):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400))
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xf0, 0x6c, 0x300, 0x0, 0x0, 0x1e8, 0x2e8, 0x2e8, 0x1e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @local, [], [], 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x5}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xb0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@cluster={{0x30}, {0x4, 0x4, 0x183e, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x7, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x40}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0)
getpgrp(0xffffffffffffffff)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})

3m36.371063917s ago: executing program 3 (id=4588):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8005}, 0x20040004) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x6, [@volatile={0xe, 0x0, 0x0, 0x9, 0x2}, @const={0xc, 0x0, 0x0, 0xa, 0x5}, @ptr={0x8}, @typedef={0xa, 0x0, 0x0, 0x8, 0x4}, @enum64={0x3, 0x4, 0x0, 0x13, 0x1, 0xd, [{0x1, 0x1, 0x5}, {0xf, 0x9, 0xfffffff7}, {0xb, 0x2, 0x7ff}, {0xb, 0xfffffff8, 0x1}]}, @volatile={0x7}, @enum={0x9, 0x3, 0x0, 0x6, 0x4, [{0xc, 0x5}, {0xb, 0x6}, {0x5, 0x1}]}, @struct={0xc, 0x3, 0x0, 0x4, 0x1, 0xc7d, [{0x3, 0x1, 0x1000}, {0x9, 0x5, 0x81}, {0x8, 0x3}]}]}, {0x0, [0x61, 0x30, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/33, 0xea, 0x21, 0x0, 0x1, 0x0, @void, @value}, 0x28) (async)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x0, r0}, 0x18) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xf1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x2, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0x7}], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000440)=[r2, r3], &(0x7f0000000480)=[{0x0, 0x2, 0xb, 0xb}, {0x0, 0x2, 0x7, 0xc}, {0x2, 0x3, 0x8, 0x3}, {0x5, 0x4, 0x1, 0x2}, {0x1, 0x1, 0x9, 0x4}, {0x0, 0x3, 0xb, 0x1}, {0x4, 0x2, 0xa, 0x3}, {0x77d3e00f, 0x4, 0xd, 0x5}], 0x10, 0x10000, @void, @value}, 0x94) (async)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xf0, 0x4, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6e62}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_USERDATA={0x8f, 0xc, "0fa756388f3f07e88e14d440be5e59b8cc4b572a0c1066d54ad602d967aa43d35f4f6438df0ff59b440fd45398043f1d9206d3cce55c1e042a051a7cbb28fc10e3172c820b64b14034b1c9fcf57020b67fa5cbf650fa36b485ec4057bc7caf1a249fcd11bd15ecfdb8a7a9d2cc65e7a661dd78cce3dd73dd816db90559023ba0c5886034e63ffd2c1cd2ba"}]}, 0xf0}, 0x1, 0x0, 0x0, 0xc11a0326f3d4ad77}, 0x0) (async)
timer_settime(0x0, 0x0, &(0x7f0000000780)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000007c0)) (async)
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x198, 0x15, 0x4, 0x70bd2b, 0x25dfdbfd, {0x8, 0xdc}, [@INET_DIAG_REQ_BYTECODE={0x58, 0x1, "02b05925c5117a27c3a9d4ab8e0e28b0e15aff823d87f364716b8e1fb42f05663e47ad6fd4f1f0f03d5b72812f4d15bcc3a8e22f9c1c3dd573fb721981ed6ee92abf2d658c5be28fec4c44eb9061a7d74be88d38"}, @INET_DIAG_REQ_BYTECODE={0x9a, 0x1, "d560ab101d5d64344b7cefbd5d9cbbc548c26f0eff3e0ca4c12488a6fafa69097894734e34bffaf159d2080e9f6e7a1d9c1f941ef7e82d4435e9db46cae70838577e63d75bf654009f96a4d7147212e520946eb798675814223b1028f804979f58bed286b660f7106d38c9eb36432e9ecf1ddf8556bbb0f3acb8045dba11634c1e70540b7f386e60ce06de133650a19a1ff5e3422630"}, @INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "f152209129726c7d1137471fc2c01b0ba5bc5869398ea6b095208597ba114f9dcdd4c8f1a48d19381a60f8321568e17c4c2a1120abca64c3766711f0c08bc32f9c1d5555768ae0acaa8e5cfa0bf9c73843a0251c1f8c6b"}, @INET_DIAG_REQ_BYTECODE={0x34, 0x1, "fa0327ef345fba515f2f781f11e7fe723e0bd27f3ecdb0c75608c7dc61f7eb9dc2925852823825e3bb5b27867ba3a336"}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x20000091) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a80)) (async)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r5, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008880}, 0x40000) (async)
r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000c40)) (async)
r7 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c80)={0x0, <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)=@RTM_NEWNSID={0x2c, 0x58, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NETNSA_FD={0x8, 0x3, r6}, @NETNSA_FD={0x8, 0x3, r7}, @NETNSA_PID={0x8, 0x2, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async)
keyctl$restrict_keyring(0x1d, 0xfffffffffffffffb, &(0x7f0000000dc0)='rxrpc_s\x00', &(0x7f0000000e00)='}\'\'\x00') (async)
ioprio_get$pid(0x3, r8) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
close(r4) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x20002, 0x0) (async)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000001280)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000ec0)={0x344, 0x1, 0x3, 0x0, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_EXP={0x1e0, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0x174, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_MASTER={0x60, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x9c}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, @NFQA_PAYLOAD={0x91, 0xa, "9838daa7a7d357d1a35a979aaf4f1b31b28ea9f292b1f64a0ccf4e857264323576bf1acc8aec484b3239d046e35ca902667840c9ccce697bc0004509f0781c773964328df697b7a08f960071eaf219c466c3b31388b7c92e753ddaf490b0fc96aedfc1a7a41d8434780b8c47f061aadd154d3ba780a251372f782521d9593bafd5cfa1a9ffd7855c460b83c77b"}, @NFQA_VLAN={0x4c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xe0ca}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x614}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xd}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}]}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xffffff92}}, @NFQA_CT={0x14, 0xb, 0x0, 0x1, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xa5c8}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffff1c1}]}, 0x344}, 0x1, 0x0, 0x0, 0x4000004}, 0x81)
mount$bind(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='./file0\x00', &(0x7f0000001340), 0x20a082, 0x0) (async)
getsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000001380), 0x10) (async)
pipe2(&(0x7f00000013c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x80)
sendmsg$kcm(r10, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000002400)="dfe85a488b59ff264706ebd40f63c4959ba4855bee6e8dfafdd702c6d1dea1c56935eeae50aaa62477681ce1c0e3b569aa397418ac9b0e7dec1aa11c775772b03a5930affca9fe9ec348715d5d32f01cb33396ce8f6105460f4021a46832dc0bae012cab5372a0e94e69501e7dbbb600ca5438a021a2002b3d80b54892bb5f4512a69bec7036ad3daf754699567b7a062c3a3ef9cfb8cd384b258b59ae8bcb9681370ecd0f9de2af60f81efef8d0befbffcfbfc04350e10cac19bf717f7b2759bcd54031285c384f0f1bfe6871338596ad", 0xd1}, {&(0x7f0000002500)="4be4cedccd312177fd5ec61d182cbe93d5f85d575748a137f5a599c1933c01925d31ff630d66c3479d9ea360dd", 0x2d}, {&(0x7f0000002540)="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", 0x1000}, {&(0x7f0000003540)="eff1f807b72f98be8797db11c37b3c0e120c68a2308cc77fef9209f34f4de627a707e7f41f89561a75129bd13d5a24ea95019f65eae7be33954dca2a40", 0x3d}, {&(0x7f0000003580)="243fb7247d5e659e3a697a8d8d4e7e2e5aa585a4e303a9dabb29efeedb9c3d6fea00b5a02b328162623f87c93f11c9fc73e35c094dda35eff2cd00ac9a018d4162340e61004af290087d5e0fc5a446ed1b4cf8136d23479e898ec1bdc68bfa25b841852e30540618585d349c52b66c6eeacf170b9f18f1b715833c6f71d6c09b3b12f5a063d797f7867c20a37d4afbd3d6c9acd1d202667761e9e019de51584158155dce772f444e68e9f9d462f9703ac7fa", 0xb2}, {&(0x7f0000003640)="39f8f3bbac20f261d9a8257161e92f3c33dc0482b6e594d370d09a1d4b72cbfb0f50519e01c641033ee312fa0ada52a69be15e0877ccff6336a44fe922bdaa053d847b2096e78e2532a18c68229ec2115546cad45c8b405c795a39cde6cb4a4a932f8f3fdde947d24883b11e6c8f1469c2dbd10562c9d9f69ce6668e99ad82989213dc45d29604a031194c601dc0943f", 0x90}, {&(0x7f0000003700)="e45c6a4344885b2fcd5a713d732ded907cd29c007cc07e3e678512f56186faa967fad083", 0x24}], 0x8, &(0x7f00000037c0)=[{0x70, 0x114, 0x1, "76dc423225fa424be00a3bc71f7786bfd497832d4335fd8419539130eb43124aa9864776af640d3cc0e83a9709a084fbf9f304808f02ffa64db43b73d25bb1cba070784858cf64b0a3164df97cc15a5abe5a33dad7f156ba727fde"}, {0xc8, 0x114, 0x10, "dc5ad9f73f7734ba78ec4fa1b0e1c5b9707ec5101ab6aa99c6060ce1bd93d77b33fd4a483540cf3840bd4cbfdb678e3ebbf85acfea4ffc93d61760f5b7492ac5ee8379e251b6271aeeacc20e5696bd860ec0a13141ca640e561826ddc38d6d758dcc0beead88eee0a3d45fc41baf4eff83aa7cfe29ac72ae86ab7cfc3b806f847fee9bd9cb28faf660294ffbefd9e3ed29f6f90b61b5d356e8ac1f46f0295d3da2d249871a89b37a679b87a53fa608564c98ba3f"}, {0xa0, 0x117, 0x9, "78445f846346213968a2220f4dcc3491fb5d20aae430d820986242c185ee2938d1882dd7a2ba53cb308f4d1e57dde73328e67050bb08050ffffdc9cb941acf15eae6f71d4917d5253295f916513e8a6dd42485af5d406ea06015d3563ea8e208f62287e7ae0a5e82a0a46d29007c1b848d19e3c437423bf0ecef2aa297f4e54dc8776ef82b36d36c05e127a9883090d4"}, {0x100, 0x110, 0x0, "5bf2eba62050a197d8b55b83904a42300eba4fcb2cadb02b1f920a906acd1ed66ec906005083d1edc29500c2c8fe09feefe324d63608663bcfc982ca690b05e33e3272d2ac0d45730193b8d5dc67189c30df4906ad7fc20abf3a655d64605b4a7f07cca1f2a0c4c9eb8c8fd2640f1658bb77e2315492eae981d3b251d69e0b05a29fd0cc0a9c160e528230ded9401b68e54b43c34ab13a789f3490c92e45698b0629618a02e17674c77a8c83277c96bed1604fc25d04136eff4bae7a0219387d3e7f5ec8edef7a11e46ee9f4490f255b0ec75bbe37e5079d703b2321dcb9336b44dea149d5ebe93ebcfa1231be"}, {0xb8, 0x114, 0x8, "82e9edd6caec48c39ee86a601e3b078972f76be1d14169aa2fdaab939b87e60a11169ec575393ae309371a9b0d5e0428e4296ada3fd039065f93bb88e268dec18de51c64ea12c591e0154fd8dc2061ce54bf48acd3819025f4900141c96969945333a3c4faa040756fb556bc0c941af44fd7cb2912e65241ff1edecce750409f4773678bb97fd7bd9d0338741db1c4176ad81dac7e7ad1946c2ff19ac0a5ee8940044c8d"}, {0x100, 0x112, 0x1, "a8efdd4ae9bcab52e1bfd1268dcfa1300b38c30d81bab73d15f4c919a7851453d54972f36391d0b36bbb5a8d8c4c9259e94c9abbc89ec215e171681d93b585f7086e357513f676ed0c49818a9bbb897cfed25a8f77021740befa1412439fa587b7bd9c9f3304acef1fdebcb53aa8eb8b102c0e2155ab5072a17e7e86185376a37e0892f9c4a823f8dade51323797b792ec1d0ca860ad1630bd2931022ab06d30305630851152385718a6b88a9e8068b1b6fe603f5113e1c3397e80e77ba7621a0a016d088f265444e27183290521e8ba444614e2e15b93df0428b0c825df1d6a222d62dd742a53b889d5ad80"}], 0x490}, 0x80) (async)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000003d00)={0x1, &(0x7f0000003cc0)=[{0x37b5, 0x5e, 0xf2, 0x2}]}) (async)
timer_create(0x4, &(0x7f0000003e00)={0x0, 0x10, 0x1, @thr={&(0x7f0000003d40)="a5b4686fbf705ef95d58572f70f79f1deba77802304a57b36057003631800d6905dc24bc57984fabeb25bd6af27299d41cfb2a94d67ccc756205fdaa9a26bde74ead06c527", &(0x7f0000003dc0)="3b130296db0521107c0a49f55f97fd8d46e2d78a5bab1c79ce1ce585dd"}}, &(0x7f0000003e40)=<r11=>0x0)
timer_settime(r11, 0x1, &(0x7f0000003e80)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000003ec0))

3m36.244367448s ago: executing program 3 (id=4590):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000380)={0x4, &(0x7f0000000340)=[{0xa, 0x2, 0x8, 0x4}, {0x9, 0x7, 0x3, 0x10001}, {0x9, 0xfa, 0x49, 0x10}, {0x4, 0x1, 0xc5, 0x7}]})
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000180)=0xc927)

3m35.360849511s ago: executing program 3 (id=4611):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140001002500000c2abd7000fedbdf2505000000984b7b9e9b9a617ea7cd5c8d4c9141e548e25fa366977ede713420f94e6992c702ac417a0f24ac524485576e780422168760163bc6b1f9ec"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 32)
mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b105f, 0x0) (rerun: 32)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x201) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r1, 0x0, 0xee01) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0}) (rerun: 64)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @remote}, 0x10)

3m35.245420463s ago: executing program 3 (id=4615):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x20000261, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
creat(&(0x7f0000000080)='./file0/file1\x00', 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
unlink(&(0x7f0000000100)='./file0/file1\x00')

3m34.831718558s ago: executing program 3 (id=4621):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000380)={0x4, &(0x7f0000000340)=[{0xa, 0x2, 0x8, 0x4}, {0x9, 0x7, 0x3, 0x10001}, {0x9, 0xfa, 0x49, 0x10}, {0x4, 0x1, 0xc5, 0x7}]})
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000180)=0xc927)

3m34.830023318s ago: executing program 38 (id=4621):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000380)={0x4, &(0x7f0000000340)=[{0xa, 0x2, 0x8, 0x4}, {0x9, 0x7, 0x3, 0x10001}, {0x9, 0xfa, 0x49, 0x10}, {0x4, 0x1, 0xc5, 0x7}]})
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000180)=0xc927)

2m7.716070463s ago: executing program 1 (id=5897):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x216, 0xc, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x2000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8}, @exit]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

2m7.522182186s ago: executing program 1 (id=5899):
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x127c, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@barrier}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@abort}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@bh}, {@errors_remount}]}, 0x1, 0x569, &(0x7f0000000700)="$eJzs3c9rHFUcAPDvbH70pzaFUqyIBHqwUrtpEn9U8FCPosWCgse6JNNQsumW7KY0sWB7sBcvUgQRC+Jd73or/gP+FQUtFilBD14is5lt02Q32SabbOp+PjDhvZ2ZvPnuzPftezu7bAA9azj7U4g4FhFfJRGHIiLJ1/VHvnJ4ebvFh9cnsiWJpaWP/krq22X1xv9q7Hcgr7wQEb9+EXGyEDGwqt3q/MJ0qVxOZ/P6SG3mykh1fuHUpZnSVDqVXh4bHz/zxvjY22+92bFYXz3/z7cf3n3vzJfHF7/56f7h20mcjYP5upVxbMGNlZXhGM6fk4E4u2rD0Q40tpsk3T4ANqUvz/MsP4/FoejLsx74//s8IpaAHpXIf+hRjXFAY27foXnwM+PBu8sToLXx9y+/NxJ763Oj/YvJEzOjbL471IH2szZ+/uPO7WyJzr0PAbChGzcj4nR//9r+L8n7v8073cY2q9vQ/8HOuZuNf15rNv4pPBr/RJPxz4EmubsZG+d/4X4HmmkpG/+903T8W2hsMtSX156rj/kGkouXymnWtz0fESdiYE9WX+9+zpnFe0ut1q0c/2VL1n5jLJgfx/3+PU/uM1mqlbYS80oPbka82HT8mzw6/0mT8589H+fbbONoeuflVus2jn97Lf0Q8UrT8//4jlay/v3Jkfr1MNK4Ktb6+9bR31q13+34s/O/f/34h5KV92urT9/G93v/TVuteyL+aP/6H0w+rpcH88eulWq12dGIweSDtY+PPd63UW9sn8V/4vj6/V+z639fRHzaZvy3jvz4Ulvxd+n8Tz7V+X/6wr33P/uuVfvt9X+v10sn8kfa6f/aPcCtPHcAAAAAAACw2xQi4mAkheKjcqFQLC5/vuNI7C+UK9XayYuVucuTUf+u7FAMFBp3ug+t+DzEaP552EZ9bFV9PCIOR8TXffvq9eJEpTzZ7eABAAAAAAAAAAAAAAAAAABglzjQ4vv/md/7un10wLbzk9/QuzbM/0780hOwK3n9h171ifyHHtZO/v+yA8cB7Dyv/9C75D/0LvkPvavd/P9zm48D2Hle/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCjzp87ly1Liw+vT2T1yavzc9OVq6cm0+p0cWZuojhRmb1SnKpUpsppcaIys9H/K1cqV0bHYu7aSC2t1kaq8wsXZipzl2sXLs2UptIL6cCORAUAAAAAAAAAAAAAAAAAAADPlur8wnSpXE5nFRQ2Vejf2u6DEbELolBYXeh2zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj/0XAAD//91pOAY=")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x18)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$eJzs3c9vI1cdAPDvOL+cNG3S0gMgoEspLGi1TuJto6oHWE4IoUqIHkHahsQbRbHjKHZKE/aQ/g9IVOIER/4Azj1x54LgxmU5IPEjAm1W4mA040nWm7U3ZpPYUfz5SKN5b2bs73trzXv21xu/AEbWjYg4iIjJiPgwIuby40m+xd32ll736PDB6tHhg9UkWq0P/plk59Nj0fGY1Ev5cxYj4kffi/hp8mzcxt7+5kq1WtlpV6cXmrXthcbe/u2N2sp6Zb2yVS4vLy0vvnvnnfKF9fWN2mRe+vLDPxx86+dps2bzI539uEjtrk+cxEmNR8QPLiPYEIzl/ZkcdkN4IYWIeC0i3szu/7kYy15NAOA6a7XmojXXWQcArrtClgNLCqU8FzAbhUKp1M7hvR4zhWq90bx1v767tdbOlc3HROH+RrWymOcK52MiSetLWflJvXyqficiXo2IX0xNZ/XSar26Nsw3PgAwwl46Nf//Z6o9/wMA11xx2A0AAAbO/A8Ao8f8DwCjx/wPAKPnyfx/d6jtAAAGx+d/ABg95n8AGCk/fP/9dGsd5b9/vfbR3u5m/aPba5XGZqm2u1pare9sl9br9fXsN3tqZz1ftV7fXno7dj+e//Z2o7nQ2Nu/V6vvbjXvZb/rfa8yMZBeAQDP8+obn/05iYiD96azLTrWcjBXw/VWGHYDgKEZG3YDgKGx2heMrnN8xpcegGuiyxK9TylGxPTpg61Wq3V5TQIu2c0vyP/DqOrI//tfwDBi5P9hdMn/w+hqtZJ+1/yPfi8EAK42OX6gx/f/r+X73+ZfDvxk7fQVn15mqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO17/t5SvBT4bhUKpFPFyRMzHRHJ/o1pZjIhXIuJPUxNTaX1pyG0GAM6r8LckX//r5txbs6fPTiaPp7J9RPzsVx/88uOVZnPnj+nxf50cb36aHy8Po/0AwFmO5+ls3/FB/tHhg9XjbZDt+ft3I6LYjn90OBlHJ/HHYzzbF2MiImb+neT1tqQjd3EeB59ExOe79T+J2SwH0l759HT8NPbLA41feCp+ITvX3qf/Fp+7gLbAqPksHX/udrv/CnEj23e//4vZCHV++fiXPtXqUTYGPol/PP6N9Rj/bvQb4+3ff79dmn723CcRXxyPOI591DH+HMdPesR/q8/4f/nSV97sda7164ib0T1+Z6yFZm17obG3f3ujtrJeWa9slcvLS8uL7955p7yQ5agXes8G/3jv1itZocslaf9nesQvntH/r/fZ/9/898Mff7XHuTT+N7/WLX4hXn9O/HRO/Eaf8VdmflfsdS6Nv9aj/2e9/rf6jP/wr/vPLBsOAAxPY29/c6VarewMsnD8RmKgQRX6K0zlL85Vac9ThSvbsM2V6ncGFWsy/q9HtVovFKvXiHERWTfgKji56SPi8bAbAwAAAAAAAAAAAAAAdHWpf6iUtAvD7iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADX1/8CAAD//8jOyzo=")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001fffffff500000000000000000a20000000000a03000000000000000000070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c0012802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c00014000000000000000010c000180080001006475700008000340000001"], 0xc8}}, 0x20050800)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @loopback, @multicast1}}}})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffa000/0x3000)=nil)
brk(0x20001000)
socket(0x2, 0x6, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10)
getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mq_open(&(0x7f0000000080)='nodiscard', 0x2, 0x1, &(0x7f00000000c0)={0x4, 0x5e26800000000000, 0x4, 0x4})

2m6.588299619s ago: executing program 1 (id=5910):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x437, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40483, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x0)

2m6.339458972s ago: executing program 1 (id=5912):
r0 = syz_io_uring_setup(0x7219, 0x0, &(0x7f0000000040)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x64, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_LINK_TIMEOUT={0xf, 0x78, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x1, 0x20})
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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")
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, <r9=>0x0}, &(0x7f0000001040)=0xc)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r9}]}]}, 0x28}}, 0x0)
r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f28bd421850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xdd)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r11}, 0x10)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000200)={0x3, 0x2, 0x2})
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r12 = syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x2010018, &(0x7f00000002c0)={[], [{@fowner_gt={'fowner>', r9}}, {@subj_role={'subj_role', 0x3d, '\\%#%.+\x91\xe9\xfflH+\x84\x9ft\xefe\x05\x11\x80\xad\xc0[\x9ef\x17\x92\x96\xfb\xeb\f/;)D\xffZ2\x12=5\xf0\xe5^\x03\n\x0e\xba\xbdX\x87\'\xaa`\x8e\x82\xf3\xec[~3\bg*\xeb\xfb\xad\xf2\xfd\x8d\x90K\xdc\x9b*\xe0w5\xa8\x8c\xcb\x8f\x00\r\xc1L\xc9O3\xd95\xb1V\xacr\xe4T\x11\xee\xc0\xd4\xb3V:`\xa9\f\x1d\x9e\xd1\x8c/\xd2\xbe\xd6\xd4%\x96L\x99v\xf2\xbc9VN\xb3\xc3\xc8\x87\x05B\xef\xc5$|Kt}\xa8>\xc1\xcdU\xa6\x8eS7\xfbp\x9c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xeb\x00'}}, {@fowner_eq={'fowner', 0x3d, r9}}, {@smackfshat={'smackfshat', 0x3d, '-\''}}, {@fowner_gt={'fowner>', r9}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ext2\x00'}}, {@flag='rw'}]}, 0xff, 0x53b, &(0x7f0000000b80)="$eJzs3cFvHFcZAPBvNl7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQnCohyj0Ye2NZWXste93GVgXrvwAJIUDiBBcuSPwBSCgSF44IKRKcQSoCIUhBggN00OzO2mY9a2/SjTde/37SZN6b2Znvexu/2Zmdp9kAzq3nI+KNiPggTdOXImImX17Kp2h1pux17z94dymbkkjTt/6WRJIv6+4ryedX8s2mIuJrX4n4ZnI07tbO7p3Fer22mderzbWN6tbO7o3VtcWV2kptfX5+7tWF1xZeWbg5lHZejYjXv/Sn73/np19+/ZeffeePt/5y/VtZWtP5+sPteEgTx63sNL18capng81HDPYkytpT7lYuDbbN3mPMBwCA/rJz/I9ExKci4qWYiQvHn84CAAAAZ1D6hen4TxKRFpvssxwAAAA4Q0rtMbBJqZKPBZiOUqlS6Yzh/VhcLtUbW83P3G5sry93xsrORrl0e7Veu5mPFZ6NcpLV59rlg/rLPfX5iHg6Ir43c6ldryw16suj/vIDAAAAzokrPdf//5zpXP8DAAAAY2Z21AkAAAAAj53rfwAAABh/rv8BAABgrH31zTezKe3+/vXy2zvbdxpv31iubd2prG0vVZYamxuVlUZjpf3MvrWT9ldvNDY+F+vbd6vN2lazenVn99ZaY3u9eWs1pk6lQQAAAMART3/y3u+TiGh9/lJ7ykyOOingVEzsl5J8XtD7//BUZ/7eKSUFnIoLA7zmvYvFy50nwNk20bugT18Hxk951AkAI5ecsL7v4J3fdGalIecDAAAM37VPFN//P/l8vuWUH844nRjOr577/+nMqBIBTl37/v+gA3mcLMBYKQ80AhAYZx/2/v/J0vShEgIAAIZuuj0lpUr+9d50lEqVSsTV9s8ClJPbq/XazYh4KiJ+N1O+mNXn2lsmJ14zAAAAAAAAAAAAAAAAAAAAAAAAAAAdaZpECgAAAIy1iNKfk191nuV/bebF6d7vByaTf7d/EngyIt750Vs/uLvYbG7OZcv/vr+8+cN8+cuj+AYDAAAA6NW9Tm/P/zXqbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYN+8/eHepOw3w8kvDivvXL0bEbFH8iZhqz6eiHBGX/5HExKHtkoi4MIT4rb2I+HhR/CRLaz9kUfxhvAmtvaSVthXGj9n8XSiKf2UI8eE8u5cdf94o6v+leL49L+5/ExH/V39U/Y9/sX/8u9Cn/18dMMYz939e7Rt/L+KZieLjXzd+0if+CwPG/8bXd3f7rUt/HHGt+/nTPuIdjnBQqjbXNqpbO7s3VtcWV2ortfX5+blXF15beGXhZvX2ar2W/1sY47vP/uKD49p/ufDzL8mz6d/+Fwv2V/SZ9N/7dx98tFtpHY1//YWC+L/+Sf6Ko/FLeZxP5+Vs/bVuudUpH/bcz3773HHtXz5of/lh/v+v99tpryMd5dlB/3QAgMdga2f3zmK9Xtsc20J2lf4EpPEohcl4ItIY38K3s8L9Ye0wTdM061MFq+5FxCD7SWLILS0V53NQ6HsEGPWRCQAAGLaDk/5RZwIAAAAAAAAAAAAAAAAAAADn12k8Za035sEjkJNhPEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAo/hcAAP//Yw3Xfw==")
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r12, {0xee00, 0xee00}}, './file0\x00'})
r13 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r13, 0x4b47, &(0x7f0000000280)={0x4, 0x8, 0xde0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')

2m5.885098618s ago: executing program 1 (id=5921):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
utimes(&(0x7f0000000040)='./file0\x00', 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)

2m5.481710204s ago: executing program 1 (id=5926):
r0 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000072fba03e480000000000000000007de61755ab26f119000000cc6cd2608c1a27f6354e53bba6bc044db2ff9557da699de3b0a03a1a8f55286aac0fd1de36096e5eb8a698779c3cd08d2d0ae020c18ca3629af597ac31f33100c6b864e70f6b696dd66582b7a244c06ee7a0e82e9b7ade18a314b847451b256d2cf1d9a5a9dce0f59fdcf31bf9e8525ffe7aaeecdc890648490ded8f9bb9a28e56f2adf04ab7078808424755129f6f0ad17283178e5578c74c0dc017c851f290569c33afedfa668f2b7fcc6a6fe21632a70564fec75735531f52babec2c7a68f1e2ef15c"], 0x48) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000072fba03e480000000000000000007de61755ab26f119000000cc6cd2608c1a27f6354e53bba6bc044db2ff9557da699de3b0a03a1a8f55286aac0fd1de36096e5eb8a698779c3cd08d2d0ae020c18ca3629af597ac31f33100c6b864e70f6b696dd66582b7a244c06ee7a0e82e9b7ade18a314b847451b256d2cf1d9a5a9dce0f59fdcf31bf9e8525ffe7aaeecdc890648490ded8f9bb9a28e56f2adf04ab7078808424755129f6f0ad17283178e5578c74c0dc017c851f290569c33afedfa668f2b7fcc6a6fe21632a70564fec75735531f52babec2c7a68f1e2ef15c"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r0})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006f40)=ANY=[@ANYBLOB="140000005304e4"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006f40)=ANY=[@ANYBLOB="140000005304e4"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast})

2m5.416686255s ago: executing program 39 (id=5926):
r0 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000072fba03e480000000000000000007de61755ab26f119000000cc6cd2608c1a27f6354e53bba6bc044db2ff9557da699de3b0a03a1a8f55286aac0fd1de36096e5eb8a698779c3cd08d2d0ae020c18ca3629af597ac31f33100c6b864e70f6b696dd66582b7a244c06ee7a0e82e9b7ade18a314b847451b256d2cf1d9a5a9dce0f59fdcf31bf9e8525ffe7aaeecdc890648490ded8f9bb9a28e56f2adf04ab7078808424755129f6f0ad17283178e5578c74c0dc017c851f290569c33afedfa668f2b7fcc6a6fe21632a70564fec75735531f52babec2c7a68f1e2ef15c"], 0x48) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000072fba03e480000000000000000007de61755ab26f119000000cc6cd2608c1a27f6354e53bba6bc044db2ff9557da699de3b0a03a1a8f55286aac0fd1de36096e5eb8a698779c3cd08d2d0ae020c18ca3629af597ac31f33100c6b864e70f6b696dd66582b7a244c06ee7a0e82e9b7ade18a314b847451b256d2cf1d9a5a9dce0f59fdcf31bf9e8525ffe7aaeecdc890648490ded8f9bb9a28e56f2adf04ab7078808424755129f6f0ad17283178e5578c74c0dc017c851f290569c33afedfa668f2b7fcc6a6fe21632a70564fec75735531f52babec2c7a68f1e2ef15c"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r0})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006f40)=ANY=[@ANYBLOB="140000005304e4"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006f40)=ANY=[@ANYBLOB="140000005304e4"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast})

1m29.156747856s ago: executing program 4 (id=6333):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x8, &(0x7f0000000080)={0x0, 0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x8082, 0x2)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x18}, 0x18)
r3 = memfd_secret(0x80000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x6, 0x0, r2, 0xd, '\x00', r0, r1, 0x3, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
kexec_load(0x8000000000000001, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000500)="1e77aa9d2a080b362d276c4596b42ee0db848eef01ceb6f57c02", 0x1a, 0x2, 0xf5}, {&(0x7f0000000540)="103d3afa04e4cb74fa00edeada1d7161fa3dab5a667b6a859dd3b191a1badc815fe7be7b425b126e8900cd9032838cece90624b1659b89eac6c1098fc38f3393d46c372b", 0x44, 0x4, 0x6}, {&(0x7f00000005c0)="e085b1df376d53a1ffd525429f1b3d442877a42a2643b2e56acc47bed52c3d9ab5de3e3b491e8a864a8ab84698a989b14b3658484c1fdcc8af352d490fbf61d636d6afbfdcca811415a26a86f349eadde2501745c595ca75123091eceb0d09aee6bdd76e6dbf1ee5c4a415acd18247d29284f29a38d2a8fe30ec1123fb8a211d71051a7129a45a88aeb4002a82473ffef6ea2e48cc69759eb852e1c3d4b13ccd600b517ce0753343eb4c4b11da39b245197b35e0dcb795b30d0c64596ee2001b403e22787a7bde527d987e09c1bd601d", 0xd0, 0x8, 0x5}], 0x320000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x13, 0xb, &(0x7f00000012c0)=ANY=[@ANYBLOB="66ffc1bf922738a73c128a634b8f9258884dc72f7a023940b82f3efa79a578aa4ed227447334241d3be544c167429b4bf2ba263debd0edbe06e632d17c2342021e3307c123c9b2307cabb457b9a37d9d606b263a97a4a86b8503dd562ef550c2f18d8c8e9e145f6dda411ee921450951558fc4b8d06e65d7be16f6338c4316200b5d7ff085f2568b474c5332c5ee9a171149e3470ca1386a339dd193a6e41d7cf4500385f7f0a652364a3e1e3406d0c08e4045de528f9d653397d7ce66cbff77"], &(0x7f00000004c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4)
r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup=r7, 0x33, 0x0, 0x401, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0]}, 0x40)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'})
r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10)
r11 = socket$inet6(0xa, 0x3, 0x8000000003c)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0x10, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000023000000000000000000000000550901000000000095000000000000008518f8ff08000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1")
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000d00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)

1m27.899968554s ago: executing program 4 (id=6345):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x5dc, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x5a0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_ACT={0xd4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0xa0, 0x1b, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x1, 0x512ce089}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x4a4, 0x1, [@m_tunnel_key={0x100, 0x18, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x697, 0x1, 0x4, 0x100}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}]}, {0x71, 0x6, "39a11532c68866bc11f78348e628abc1ad84d1601df6ec416cf625f90a17a99b39a666020afde2a4e1ff54842056996ead43539758b141e01d4feddfa4f2d6608c468e5ca2264f490beef1d6e6cd9490307b7f21c63dbf597bf51d59a885bce4d88f91e5cc855b5137d18436c7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0xc0, 0x7, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xf, 0x7, 0xa, 0x10001}, 0x9e61}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ce, 0xa, 0x0, 0x5, 0x1}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfe1, 0xc0000, 0x1, 0x3, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x28d4483e, 0xa41, 0x20000000, 0x8, 0x14eb}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4a3, 0x6, 0x7, 0x1c05, 0x4}, 0x1000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x80, 0xf, 0x0, 0x0, {{0x9}, {0x4}, {0x51, 0x6, "01f4310969d021b8053bb1aca7e8d7615c1d03580900c583f834dae8ea05e484960378a34a6b952d073cc12d15ce11e941d47c907715c5f99ee7525bcab58cfe612fa780af8ced2963cf55b349"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x18c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x161, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xd4, 0x12, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x226}, @TCA_CT_ZONE={0x6, 0x4, 0x54}, @TCA_CT_PARMS={0x18, 0x1, {0xdb9, 0x5, 0x3, 0x9, 0x7f}}]}, {0x81, 0x6, "459c319de49c160b14e676c3fc211ba38f8597c3689c3978e9e1555e10640d44f6f6b342ed52a7d3527784cc5f468970aa573ce62cd79f937d133c2f1a1567f7c2f8f29feadeb69353614a9753a9a99407bd7d9b74269371f0506731b5da7a11c39b2076e6305230116c9a40450f152503594d0657b2131f5b16c06e00"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6}}}}]}]}}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffeffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10)
geteuid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b100bf800", 0x33fe0}], 0x1}, 0x0)

1m27.665938827s ago: executing program 4 (id=6350):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r2=>r0, {0xee01}}, './file0\x00'})
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r3)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r5=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)="be", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r5], 0x20, 0x6044}, 0x6)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000300)={r5, 0x81, 0x1, 0x5}, &(0x7f0000000340)=0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
listen(0xffffffffffffffff, 0x9)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x10)

1m27.49537576s ago: executing program 4 (id=6356):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014852, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@dioread_lock}, {@dioread_lock}]}, 0x1, 0x4f3, &(0x7f0000000700)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
renameat2(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0x4)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCFLSH(r1, 0x5608, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='task_newtask\x00', r3}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10)
flock(r0, 0x1)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r6], 0xc4}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb0760982d5a6f8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
chmod(&(0x7f0000000340)='./file1\x00', 0x0)

1m26.981809627s ago: executing program 4 (id=6362):
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4008804)
sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="f5d026151a1c52f165bf4e7d7503b7e3", 0x10}], 0x1}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x5c59, 0xffff, 0x0, 0x7, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6(0xa, 0x3, 0x2f)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)={0x60, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
socketpair(0x11, 0xa, 0x0, &(0x7f0000001080))
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
pipe2$9p(0x0, 0x0)
dup(0xffffffffffffffff)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10)

1m26.68383787s ago: executing program 4 (id=6367):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x630, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x5f4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_ACT={0xd4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0xa0, 0x1b, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x1, 0x512ce089}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x4f8, 0x1, [@m_tunnel_key={0x100, 0x18, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x697, 0x1, 0x4, 0x100}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}]}, {0x71, 0x6, "39a11532c68866bc11f78348e628abc1ad84d1601df6ec416cf625f90a17a99b39a666020afde2a4e1ff54842056996ead43539758b141e01d4feddfa4f2d6608c468e5ca2264f490beef1d6e6cd9490307b7f21c63dbf597bf51d59a885bce4d88f91e5cc855b5137d18436c7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x114, 0x7, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xf, 0x7, 0xa, 0x10001}, 0x9e61}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ce, 0xa, 0x0, 0x5, 0x1}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfe1, 0xc0000, 0x1, 0x3, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x28d4483e, 0xa41, 0x20000000, 0x8, 0x14eb}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4a3, 0x6, 0x7, 0x1c05, 0x4}, 0x1000}}]}, {0x55, 0x6, "79bfcd7af533d072a8c29f36e68ab9904831686d6cd3390377cca5e53a8926070630448b3fc4cd7c92ec53371be4232497d515edab99ceda9fe783a4517aa76f458d17bb770e71e0ba14efb8375ac49ead"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x80, 0xf, 0x0, 0x0, {{0x9}, {0x4}, {0x51, 0x6, "01f4310969d021b8053bb1aca7e8d7615c1d03580900c583f834dae8ea05e484960378a34a6b952d073cc12d15ce11e941d47c907715c5f99ee7525bcab58cfe612fa780af8ced2963cf55b349"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x18c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x161, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xd4, 0x12, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x226}, @TCA_CT_ZONE={0x6, 0x4, 0x54}, @TCA_CT_PARMS={0x18, 0x1, {0xdb9, 0x5, 0x3, 0x9, 0x7f}}]}, {0x81, 0x6, "459c319de49c160b14e676c3fc211ba38f8597c3689c3978e9e1555e10640d44f6f6b342ed52a7d3527784cc5f468970aa573ce62cd79f937d133c2f1a1567f7c2f8f29feadeb69353614a9753a9a99407bd7d9b74269371f0506731b5da7a11c39b2076e6305230116c9a40450f152503594d0657b2131f5b16c06e00"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6}}}}]}]}}]}, 0x630}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffeffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10)
geteuid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b100bf800", 0x33fe0}], 0x1}, 0x0)

1m26.677228671s ago: executing program 40 (id=6367):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x630, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x5f4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_ACT={0xd4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0xa0, 0x1b, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x1, 0x512ce089}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x4f8, 0x1, [@m_tunnel_key={0x100, 0x18, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x697, 0x1, 0x4, 0x100}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}]}, {0x71, 0x6, "39a11532c68866bc11f78348e628abc1ad84d1601df6ec416cf625f90a17a99b39a666020afde2a4e1ff54842056996ead43539758b141e01d4feddfa4f2d6608c468e5ca2264f490beef1d6e6cd9490307b7f21c63dbf597bf51d59a885bce4d88f91e5cc855b5137d18436c7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x114, 0x7, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xf, 0x7, 0xa, 0x10001}, 0x9e61}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ce, 0xa, 0x0, 0x5, 0x1}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfe1, 0xc0000, 0x1, 0x3, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x28d4483e, 0xa41, 0x20000000, 0x8, 0x14eb}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4a3, 0x6, 0x7, 0x1c05, 0x4}, 0x1000}}]}, {0x55, 0x6, "79bfcd7af533d072a8c29f36e68ab9904831686d6cd3390377cca5e53a8926070630448b3fc4cd7c92ec53371be4232497d515edab99ceda9fe783a4517aa76f458d17bb770e71e0ba14efb8375ac49ead"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x80, 0xf, 0x0, 0x0, {{0x9}, {0x4}, {0x51, 0x6, "01f4310969d021b8053bb1aca7e8d7615c1d03580900c583f834dae8ea05e484960378a34a6b952d073cc12d15ce11e941d47c907715c5f99ee7525bcab58cfe612fa780af8ced2963cf55b349"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x18c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x161, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xd4, 0x12, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x226}, @TCA_CT_ZONE={0x6, 0x4, 0x54}, @TCA_CT_PARMS={0x18, 0x1, {0xdb9, 0x5, 0x3, 0x9, 0x7f}}]}, {0x81, 0x6, "459c319de49c160b14e676c3fc211ba38f8597c3689c3978e9e1555e10640d44f6f6b342ed52a7d3527784cc5f468970aa573ce62cd79f937d133c2f1a1567f7c2f8f29feadeb69353614a9753a9a99407bd7d9b74269371f0506731b5da7a11c39b2076e6305230116c9a40450f152503594d0657b2131f5b16c06e00"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6}}}}]}]}}]}, 0x630}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffeffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10)
geteuid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b100bf800", 0x33fe0}], 0x1}, 0x0)

4.28150054s ago: executing program 0 (id=7572):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xfe46)
syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6, 0xfffffffffffffffd}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

4.215170121s ago: executing program 0 (id=7574):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
timer_create(0x1, &(0x7f0000001240)={0x0, 0x32, 0x2, @thr={&(0x7f0000001080)="af1d4263fad72171dd077f4b6859aa10bc17b691d499eb0d94ae2ea7af3223b2eb7b7d05af6f1fbf1ec24e82b9fab115f27db6093d888dd143159495e676504ec582fdc349614eea4a24fa17abe79b3837e19e180d6501b42b37071c7b7b28be5e7b69a8d53fad6aa411bac28b4a03907dbed69c5ce9e19c9fb56799bfa6b3a5f47d51f18dc512936f909330bf788d66d7311cf843a7bf23a4a3de07a603beb7a4a87aaf1e0f4d0ed193962344ff5a23639bfa8e2fc610eae243c4b8dfe4bd89cbbeb4d54f9fc118de7f619909c52a2b20dd5fe3ceef63db15ea0fa2087c6fe04dfdcc5577ccbe1fb657a65255dd", &(0x7f0000001180)="08c3a8d5bc9d927ec712771cb16acef9dada258d27d2a9fd93169e1876c20a423de256916e6b4f3ab6127a58a11870708eb1ec688ce74d68317b83893988c6e0a23b28182c41aac7fb6fef56889758bae1982ec0343c66b2e4b13d721dbd9977fc82a89e9a3a931e250661478c53271faa3f66ce9c9f4a0864cbd5d8877744eabd1a37b0c18d0c53040b429311e238efcfe06bf34636dd6c21c59e95b1e360eb335970fdfd3dfc834a0d4f34b3ce4dfc95d4524c2347a05a9725e5a3"}}, &(0x7f0000001280)=<r2=>0x0)
timer_gettime(r2, &(0x7f00000012c0))

4.143324492s ago: executing program 0 (id=7577):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1, 0x0, r3}}, 0x40)

4.012297984s ago: executing program 0 (id=7579):
io_setup(0x5, &(0x7f0000000240)=<r0=>0x0) (async)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000100), 0x120)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x400000, @private2}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0x851)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44c00) (async)
r2 = inotify_init()
io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) (async)
inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1) (async)
readv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)

3.5837781s ago: executing program 0 (id=7583):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x4008840)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r2, 0x7, '\x00', 0x0, r1, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

3.543365261s ago: executing program 0 (id=7584):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$cgroup_subtree(r1, &(0x7f0000001600)=ANY=[@ANYBLOB='-', @ANYRESHEX], 0x7)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r2, 0x5607, 0x4)
rt_sigqueueinfo(r0, 0x38, &(0x7f0000000140)={0x2a, 0xc4, 0xff800002})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6)
sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x3, [@decl_tag={0x6, 0x0, 0x0, 0x11, 0x3, 0x9}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x9}, {0xb, 0x5}, {0x8}, {0x5}, {0xe, 0x2}, {0xc, 0x2}, {0x0, 0x4}, {0xe, 0x1}]}]}, {0x0, [0x30]}}, &(0x7f0000000400)=""/65, 0x77, 0x41, 0x0, 0x2, 0x0, @void, @value}, 0x28)
r8 = openat(r1, &(0x7f0000000480)='./file0\x00', 0x60c00, 0x121)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r3], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xd, r8, 0x8, &(0x7f0000000040)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4, 0x9}, 0x10, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r9 = getpid()
sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x5)
connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0)

2.744204172s ago: executing program 2 (id=7598):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x200, 0x31}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x101}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x54}, 0x4000010)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r4, 0x0, 0x4ab}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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")
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0})

2.470043845s ago: executing program 2 (id=7601):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0x2000007d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x7)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0)

2.383102867s ago: executing program 8 (id=7602):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1, 0x0, r3}}, 0x40)

2.240008968s ago: executing program 8 (id=7603):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206050000000000000000dfff0000030c000300686173683a6970000900020073797a3200000000000001000600000014000780080006400000000008000840000070d5"], 0x58}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xff, 0x0, 0x0, 0x0, 0x1888d07e92b1e73e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r3}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x12, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa853}}, &(0x7f0000000780)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10)
pause()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18)
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x4a0082)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'veth1_to_bridge\x00', 0x100})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3)
bind$unix(r4, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10)
r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r10, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)

1.732300455s ago: executing program 5 (id=7607):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x4008840)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r2, 0x7, '\x00', 0x0, r1, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

1.710921966s ago: executing program 5 (id=7608):
socket(0x11, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x0, 0x0, &(0x7f0000000c80)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = perf_event_open(&(0x7f0000000240)={0x4909ebd8dd314254, 0x80, 0xe, 0x8, 0x7f, 0x7, 0x0, 0x0, 0x84000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x4}, 0x310a, 0x4, 0x1000, 0x0, 0xe2, 0x1000, 0x7, 0x0, 0x74, 0x0, 0x7}, 0x0, 0x9, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x0, r6, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f0, &(0x7f0000000080))
fchdir(r3)
mkdir(&(0x7f0000000040)='./file0\x00', 0x4)
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00')
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFBR(r9, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000600)=""/126, 0x4})
r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42)
sendfile(r10, r10, 0x0, 0x80000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.612401467s ago: executing program 6 (id=7609):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000230000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
execve(0x0, 0x0, 0x0)

1.450826139s ago: executing program 8 (id=7610):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000002380))
truncate(&(0x7f0000000040)='./file0\x00', 0x0)

1.449840219s ago: executing program 2 (id=7611):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x200, 0x31}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x101}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x54}, 0x4000010)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r4, 0x0, 0x4ab}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC")
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0})

1.449447939s ago: executing program 6 (id=7612):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1, 0x0, r3}}, 0x40)

1.358279211s ago: executing program 8 (id=7613):
r0 = socket$inet(0x2, 0x2, 0x0)
getsockopt$inet_opts(r0, 0x0, 0xd, 0xfffffffffffffffe, &(0x7f0000000200))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x10000, 0x7, 0x0, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) (async)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000440)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8000000000000001, 0x8}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x2000a, 0xb, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2) (async)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x81c000, &(0x7f0000000080)={[{@nouid32}], [{@seclabel}]}, 0x1, 0x72b, &(0x7f00000007c0)="$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")

1.357887061s ago: executing program 6 (id=7614):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xfe46)
syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6, 0xfffffffffffffffd}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

1.284876321s ago: executing program 6 (id=7615):
truncate(&(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 2)

1.019750355s ago: executing program 8 (id=7616):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
timer_create(0x1, &(0x7f0000001240)={0x0, 0x32, 0x2, @thr={&(0x7f0000001080)="af1d4263fad72171dd077f4b6859aa10bc17b691d499eb0d94ae2ea7af3223b2eb7b7d05af6f1fbf1ec24e82b9fab115f27db6093d888dd143159495e676504ec582fdc349614eea4a24fa17abe79b3837e19e180d6501b42b37071c7b7b28be5e7b69a8d53fad6aa411bac28b4a03907dbed69c5ce9e19c9fb56799bfa6b3a5f47d51f18dc512936f909330bf788d66d7311cf843a7bf23a4a3de07a603beb7a4a87aaf1e0f4d0ed193962344ff5a23639bfa8e2fc610eae243c4b8dfe4bd89cbbeb4d54f9fc118de7f619909c52a2b20dd5fe3ceef63db15ea0fa2087c6fe04dfdcc5577ccbe1fb657a65255dd", &(0x7f0000001180)="08c3a8d5bc9d927ec712771cb16acef9dada258d27d2a9fd93169e1876c20a423de256916e6b4f3ab6127a58a11870708eb1ec688ce74d68317b83893988c6e0a23b28182c41aac7fb6fef56889758bae1982ec0343c66b2e4b13d721dbd9977fc82a89e9a3a931e250661478c53271faa3f66ce9c9f4a0864cbd5d8877744eabd1a37b0c18d0c53040b429311e238efcfe06bf34636dd6c21c59e95b1e360eb335970fdfd3dfc834a0d4f34b3ce4dfc95d4524c2347a05a9725e5a3"}}, &(0x7f0000001280)=<r2=>0x0)
timer_gettime(r2, &(0x7f00000012c0))

1.011522095s ago: executing program 2 (id=7617):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000230000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x400, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb)
close(r1)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

981.960456ms ago: executing program 6 (id=7618):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x4008840)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r2, 0x7, '\x00', 0x0, r1, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

948.708487ms ago: executing program 8 (id=7619):
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
ppoll(&(0x7f0000000180)=[{r0, 0xa612}], 0x1, 0x0, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001b001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r6, 0x0, 0x8}, 0x18)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r4, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x24}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb0000}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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")
truncate(&(0x7f0000000640)='./file2\x00', 0x74)

927.754807ms ago: executing program 6 (id=7620):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0x2000007d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x7)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0)

926.627687ms ago: executing program 2 (id=7621):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x7}})
accept4(r0, 0x0, &(0x7f0000000100), 0x80000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = gettid()
syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/uts\x00')
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r2, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
write$cgroup_pid(r8, &(0x7f0000000000), 0x12)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_u}]}})
gettid()
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r9}, 0x10)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r12 = openat$cgroup_ro(r5, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x10012, r12, 0x0)
r13 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x2, 0x0)
mq_timedsend(r13, &(0x7f0000000600)="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", 0xfd1, 0x6, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0xae}, 0x18)
r14 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r14, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain)

857.298148ms ago: executing program 5 (id=7622):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000230000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x400, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
execve(0x0, 0x0, 0x0)

738.729939ms ago: executing program 5 (id=7623):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
modify_ldt$write(0x1, &(0x7f0000000040)={0xecc, 0xffffffffffffffff}, 0x10)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21)

512.805653ms ago: executing program 5 (id=7624):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1, 0x0, r3}}, 0x40)

468.751863ms ago: executing program 5 (id=7625):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c0010800800014000000014080002"], 0x80}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
pipe2(&(0x7f0000001cc0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x800)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xffffffff}}}]}, 0x60}}, 0x0)
r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f0000000840)={'gre0\x00', <r10=>r7, 0x1, 0x10, 0x80, 0x17cd, {{0x2f, 0x4, 0x1, 0x6, 0xbc, 0x66, 0x0, 0xf, 0x29, 0x0, @loopback, @local, {[@lsrr={0x83, 0x7, 0x66, [@multicast1]}, @ssrr={0x89, 0x1b, 0x16, [@multicast1, @loopback, @broadcast, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x33}]}, @lsrr={0x83, 0x1b, 0xcb, [@dev={0xac, 0x14, 0x14, 0x2a}, @multicast2, @loopback, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @timestamp_prespec={0x44, 0x2c, 0x20, 0x3, 0x2, [{@local, 0x10001}, {@remote, 0x33f8d7f8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@local, 0x9}, {@broadcast, 0x7}]}, @timestamp_addr={0x44, 0xc, 0x58, 0x1, 0x2, [{@multicast2, 0xffffffff}]}, @timestamp={0x44, 0x14, 0x17, 0x0, 0x5, [0x80000000, 0x80000000, 0x8, 0x1ff]}, @lsrr={0x83, 0xf, 0xe9, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x522]}, @generic={0x89, 0xd, "952fda9c053110dbf46400"}]}}}}})
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0xa347eaf47b31a1da, 0x0, '\x00', r10, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10)
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYRES16=r7, @ANYRES32, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYRES8=r7], 0x2, 0x23e, &(0x7f0000000bc0)="$eJzs3c9qE1EUB+AzSdqmukgWrkRwQBeuStsnSJEKYldKFupCi21BklCwEGgVQ1c+gU/ic7jxDXwAoTtdFEYmSZsWUm0wf0r9vk0uzP3NOTe5Iau5eX2n1dja3ds5/PA9yuUkCrWoJUcR1ShEbiEAgOvmV5bFUdYzWrJUmFRPAMBkXfL3f3GKLQEAE/bs+Ysnaxsb60/TtBzR+tSuJ9F77V1f24m30YztWI5KHEdkp3rjR4831qOU5qpxv9Vp1/Nk69XX/v3XfkR08ytRierw/Eracybfadfn4ka/fi3Pr0Ylbg3Prw7JR30+Htw70/9SVOLbm9iNZmxFnh3kP66k6cPs88/3L/OO83zSadcXuvMGsuLUPxwAAAAAAAAAAAAAAAAAAAAAAK6tpTRN0yz7kmVZ1jl3/k7xuHt9KT1RPX8+Ty9/0flAnTPn6yznJZLe/EG+FLdLUZrl2gEAAAAAAAAAAAAAAAAAAOCq2Ns/aGw2m9vvxjo4eax//Hf+10EU+601k4gr0E93sJj3M51ad2PEWrURS0Rh/6Bxsrsam0n8JVWe0CbJhmy/4oWp+TFVn7853lUkETF3+mb+aXIh5sb8TQEAAAAAAAAAAAAAAAAAAKZs8NDvkIuHM2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZg8P//Iww6/fAlUzNeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+B3wEAAP//bkR7Lg==")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r12, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x218, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000300)="14719f6fad8084936d0ff8c2cb56d9fb4be499a510e2fd73a6b5cad21c09afddf6e8d7fa0631d9e274512faa42ee7fd3ee8927a2c87d09af7012b63906d679badb94f147c44e88c0897050a54b19ab4e7acf934414d2e3bd7d53561184a4e4e7030c0ad247ef74d3f02e269540097c45283e1557b9515fb3e6dbafef757911c170d279803a62ab257387dbf80f0ef59b4bdffdc477413ad593fc9652737c702cdca1adbd8b019cd8bcb4f2db378176aeb503ae042452a7f6021a4c425db55a89661c46065e5a30c6839804a0c7ef63467460e3008023b082ca95c6d4d31162474f45b07af9398734", 0xe8}, {&(0x7f00000004c0)="62bf0800ee616ab74216b85ff8719fbbac64522aa3ddce32b1e101076ea4f4571f9bc013aed7a4d971781ba4552e9e9ca342ebeb81b57466ae3a6b117d5b3d51b044553875520b623f1dad362f86bfe4d9082477", 0x54}, {&(0x7f0000000540)="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", 0xfd}, {&(0x7f0000000040)="0cc8f6a7d31e286aacf090abf4718f6b61dc237f6e56c796f4d17553eb81a91b3ef81585708b10004f80df447643bfa48a8d292b2970", 0x36}, {&(0x7f0000000180)="a954ef3d85f060d7af7334bc2cfc753d242fc04e39ef62f5e0a088e14d619d5d5713375c7f6037f1633fa1", 0x2b}, {&(0x7f0000000640)="9af129b7ef8c490a2ed62ec23d9b74fb70ac585052bdf37adab8d2a08b0b501c6338ffbd4ebc0db2027935f7864174e31523a86bf1b0a8c486292cdd084500fe9c", 0x41}, {&(0x7f0000000200)="c878c4e0b96659174a8d02af26bcad3d921c46648f0935f7cdb666aea958dd6ff0da2888ba127eca578e7214926a646c9c3ee283918cabec9c5821", 0x3b}], 0x7)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c189da0058d923e8acecb63ce9cab8cdec1aa20ffd81d1bf89329217cb058a396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97bdc355f3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d91906aead5d5aeccc097ef1092ea987c2b000000"])

0s ago: executing program 2 (id=7626):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x200, 0x31}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x101}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x54}, 0x4000010)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r4, 0x0, 0x4ab}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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")
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0})

kernel console output (not intermixed with test programs):

 option
[  507.829645][T31162] EXT4-fs (loop5): orphan cleanup on readonly fs
[  507.870678][T31162] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6824: bg 0: block 131: padding at end of block bitmap is not set
[  507.896405][T31162] EXT4-fs (loop5): Remounting filesystem read-only
[  507.914373][T31162] EXT4-fs (loop5): 1 truncate cleaned up
[  508.070206][T31162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  508.140612][T15629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.302884][ T6658] usb 11-1: enqueue for inactive port 0
[  508.308564][ T6658] usb 11-1: enqueue for inactive port 0
[  508.373028][T31187] netlink: 208360 bytes leftover after parsing attributes in process `syz.8.6832'.
[  508.386083][ T6658] vhci_hcd: vhci_device speed not set
[  508.396107][T31185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6827'.
[  508.428612][T31189] SELinux:  policydb magic number 0x40 does not match expected magic number 0xf97cff8c
[  508.438560][T31189] SELinux: failed to load policy
[  508.486837][T31192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31192 comm=syz.8.6834
[  508.581114][T31196] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  508.615698][T31196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6835'.
[  508.652138][T31202] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  508.675828][T31202] batadv_slave_0: entered promiscuous mode
[  508.720521][T31206] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6839'.
[  508.829022][T31216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31216 comm=syz.2.6841
[  508.956549][T31227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31227 comm=syz.5.6847
[  509.215380][T31244] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6853'.
[  509.313497][T31245] hsr_slave_0: left promiscuous mode
[  509.328375][T31245] hsr_slave_1: left promiscuous mode
[  509.751572][T31277] loop6: detected capacity change from 0 to 1024
[  509.788452][T31277] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  509.880845][T28609] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  509.906559][T31290] FAULT_INJECTION: forcing a failure.
[  509.906559][T31290] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  509.919893][T31290] CPU: 1 UID: 0 PID: 31290 Comm: syz.5.6868 Tainted: G        W           6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) 
[  509.920013][T31290] Tainted: [W]=WARN
[  509.920021][T31290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  509.920036][T31290] Call Trace:
[  509.920050][T31290]  <TASK>
[  509.920060][T31290]  __dump_stack+0x1d/0x30
[  509.920085][T31290]  dump_stack_lvl+0xe8/0x140
[  509.920142][T31290]  dump_stack+0x15/0x1b
[  509.920159][T31290]  should_fail_ex+0x265/0x280
[  509.920195][T31290]  should_fail+0xb/0x20
[  509.920228][T31290]  should_fail_usercopy+0x1a/0x20
[  509.920340][T31290]  _copy_from_user+0x1c/0xb0
[  509.920365][T31290]  ucma_write+0xd9/0x250
[  509.920385][T31290]  ? __pfx_ucma_write+0x10/0x10
[  509.920404][T31290]  vfs_write+0x269/0x8e0
[  509.920504][T31290]  ? __rcu_read_unlock+0x4f/0x70
[  509.920526][T31290]  ? __fget_files+0x184/0x1c0
[  509.920550][T31290]  ksys_write+0xda/0x1a0
[  509.920573][T31290]  __x64_sys_write+0x40/0x50
[  509.920595][T31290]  x64_sys_call+0x2cdd/0x2fb0
[  509.920652][T31290]  do_syscall_64+0xd2/0x200
[  509.920670][T31290]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  509.920701][T31290]  ? clear_bhb_loop+0x40/0x90
[  509.920789][T31290]  ? clear_bhb_loop+0x40/0x90
[  509.920812][T31290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.920832][T31290] RIP: 0033:0x7f654fa1e929
[  509.920927][T31290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  509.920948][T31290] RSP: 002b:00007f654e087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  509.920998][T31290] RAX: ffffffffffffffda RBX: 00007f654fc45fa0 RCX: 00007f654fa1e929
[  509.921013][T31290] RDX: 0000000000000018 RSI: 0000200000000380 RDI: 0000000000000005
[  509.921027][T31290] RBP: 00007f654e087090 R08: 0000000000000000 R09: 0000000000000000
[  509.921051][T31290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  509.921067][T31290] R13: 0000000000000000 R14: 00007f654fc45fa0 R15: 00007ffd7be2fa48
[  509.921087][T31290]  </TASK>
[  509.922493][T31291] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  509.922493][T31291] The task syz.0.6866 (31291) triggered the difference, watch for misbehavior.
[  509.990352][T31298] FAULT_INJECTION: forcing a failure.
[  509.990352][T31298] name failslab, interval 1, probability 0, space 0, times 0
[  509.990390][T31298] CPU: 1 UID: 0 PID: 31298 Comm: syz.5.6871 Tainted: G        W           6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) 
[  509.990481][T31298] Tainted: [W]=WARN
[  509.990490][T31298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  509.990502][T31298] Call Trace:
[  509.990509][T31298]  <TASK>
[  509.990559][T31298]  __dump_stack+0x1d/0x30
[  509.990585][T31298]  dump_stack_lvl+0xe8/0x140
[  509.990610][T31298]  dump_stack+0x15/0x1b
[  509.990628][T31298]  should_fail_ex+0x265/0x280
[  509.990876][T31298]  should_failslab+0x8c/0xb0
[  509.990905][T31298]  kmem_cache_alloc_noprof+0x50/0x310
[  509.990988][T31298]  ? skb_clone+0x151/0x1f0
[  509.991019][T31298]  skb_clone+0x151/0x1f0
[  509.991053][T31298]  __netlink_deliver_tap+0x2c9/0x500
[  509.991116][T31298]  netlink_unicast+0x64c/0x670
[  509.991159][T31298]  netlink_sendmsg+0x58b/0x6b0
[  509.991234][T31298]  ? __pfx_netlink_sendmsg+0x10/0x10
[  509.991312][T31298]  __sock_sendmsg+0x142/0x180
[  509.991348][T31298]  ____sys_sendmsg+0x31e/0x4e0
[  509.991422][T31298]  ___sys_sendmsg+0x17b/0x1d0
[  509.991516][T31298]  __x64_sys_sendmsg+0xd4/0x160
[  509.991635][T31298]  x64_sys_call+0x2999/0x2fb0
[  509.991664][T31298]  do_syscall_64+0xd2/0x200
[  509.991689][T31298]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  509.991726][T31298]  ? clear_bhb_loop+0x40/0x90
[  509.991754][T31298]  ? clear_bhb_loop+0x40/0x90
[  509.991829][T31298]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.991857][T31298] RIP: 0033:0x7f654fa1e929
[  509.991895][T31298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  509.991921][T31298] RSP: 002b:00007f654e087038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  509.991948][T31298] RAX: ffffffffffffffda RBX: 00007f654fc45fa0 RCX: 00007f654fa1e929
[  509.991964][T31298] RDX: 0000000020040050 RSI: 0000200000001000 RDI: 0000000000000008
[  509.991982][T31298] RBP: 00007f654e087090 R08: 0000000000000000 R09: 0000000000000000
[  509.991999][T31298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  509.992016][T31298] R13: 0000000000000000 R14: 00007f654fc45fa0 R15: 00007ffd7be2fa48
[  509.992048][T31298]  </TASK>
[  510.424474][   T29] kauditd_printk_skb: 987 callbacks suppressed
[  510.424493][   T29] audit: type=1400 audit(2000001124.054:81324): avc:  denied  { read write } for  pid=28609 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  510.455423][   T29] audit: type=1400 audit(2000001124.054:81325): avc:  denied  { read write open } for  pid=28609 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  510.495886][   T29] audit: type=1400 audit(2000001124.119:81326): avc:  denied  { ioctl } for  pid=30156 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  510.544071][   T29] audit: type=1326 audit(2000001124.162:81327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31284 comm="syz.2.6862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda744e58e7 code=0x7ffc0000
[  510.568141][   T29] audit: type=1326 audit(2000001124.162:81328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31284 comm="syz.2.6862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda7448ab19 code=0x7ffc0000
[  510.591870][   T29] audit: type=1326 audit(2000001124.162:81329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31284 comm="syz.2.6862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda744ee929 code=0x7ffc0000
[  510.615928][   T29] audit: type=1326 audit(2000001124.162:81330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31284 comm="syz.2.6862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda744ee929 code=0x7ffc0000
[  510.639722][   T29] audit: type=1326 audit(2000001124.172:81331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31284 comm="syz.2.6862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda744e58e7 code=0x7ffc0000
[  510.663475][   T29] audit: type=1326 audit(2000001124.172:81332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31284 comm="syz.2.6862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda7448ab19 code=0x7ffc0000
[  510.687272][   T29] audit: type=1326 audit(2000001124.172:81333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31284 comm="syz.2.6862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda744ee929 code=0x7ffc0000
[  510.787083][T31319] loop5: detected capacity change from 0 to 128
[  510.800610][T31319] vfat: Unknown parameter 'Õ'
[  510.860109][T31331] loop6: detected capacity change from 0 to 1024
[  510.870037][T31331] EXT4-fs: Ignoring removed nobh option
[  510.877504][T31331] EXT4-fs: Ignoring removed bh option
[  510.882970][T31331] ext3: Unknown parameter 'fowner>00000000000000000000'
[  510.956985][T31343] loop5: detected capacity change from 0 to 1024
[  510.965539][T31344] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.979539][T31343] EXT4-fs: Ignoring removed i_version option
[  510.993156][T31343] EXT4-fs: Ignoring removed nobh option
[  511.021166][T31343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  511.048320][T31344] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.115530][T15629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  511.138584][T31344] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.149418][T31365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31365 comm=syz.2.6888
[  511.231608][T31344] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.311090][T31388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  511.359394][T31344] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  511.378156][T31388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  511.416943][T31344] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  511.446048][T31344] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  511.465648][T31344] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  511.544616][T31413] SELinux:  policydb magic number 0x40 does not match expected magic number 0xf97cff8c
[  511.570981][T31413] SELinux: failed to load policy
[  511.610078][T31414] __nla_validate_parse: 4 callbacks suppressed
[  511.610097][T31414] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6897'.
[  511.674059][T31420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31420 comm=syz.8.6901
[  511.851637][T31433] loop8: detected capacity change from 0 to 1024
[  511.871310][T31437] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  511.886561][T31416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6899'.
[  511.908289][T31433] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  511.990718][T31448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6909'.
[  512.001073][T31448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6909'.
[  512.017984][T30156] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  512.033689][T31449] netlink: 208380 bytes leftover after parsing attributes in process `syz.6.6910'.
[  512.045762][T31449] net_ratelimit: 264 callbacks suppressed
[  512.045780][T31449] netlink: zone id is out of range
[  512.058086][T31449] netlink: zone id is out of range
[  512.063216][T31449] netlink: zone id is out of range
[  512.068667][T31449] netlink: zone id is out of range
[  512.073906][T31449] netlink: zone id is out of range
[  512.079180][T31449] netlink: zone id is out of range
[  512.084369][T31449] netlink: zone id is out of range
[  512.090656][T31449] netlink: zone id is out of range
[  512.096943][T31449] netlink: zone id is out of range
[  512.102102][T31449] netlink: zone id is out of range
[  512.148437][T31460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31460 comm=syz.2.6914
[  512.212066][T31462] netlink: 'syz.6.6915': attribute type 12 has an invalid length.
[  512.247705][T31475] Cannot find del_set index 0 as target
[  512.351095][T31478] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6919'.
[  512.414042][T31490] loop8: detected capacity change from 0 to 128
[  512.425456][T31490] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  512.440912][T31490] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  512.458041][T31492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6924'.
[  512.467080][T31492] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6924'.
[  512.478387][T31490] ext2 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  512.497456][T31492] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  512.506356][T31492] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  512.515216][T31492] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  512.524093][T31492] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  512.907547][T31510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6929'.
[  513.166115][T30156] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  513.323432][T31523] loop8: detected capacity change from 0 to 128
[  513.337106][T31523] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  513.364175][T31523] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  513.415606][T30156] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  513.560636][T31534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  513.562658][T31531] loop8: detected capacity change from 0 to 1024
[  513.582354][T31534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  513.593814][T31531] EXT4-fs: Ignoring removed nomblk_io_submit option
[  513.631500][T31531] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  513.779422][T30156] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  513.804975][T31559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31559 comm=syz.6.6946
[  513.815437][T31557] netlink: 'syz.0.6942': attribute type 12 has an invalid length.
[  513.856554][T31563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  513.870269][T31563] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  513.946108][T31569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31569 comm=syz.0.6948
[  513.951768][T31566] loop8: detected capacity change from 0 to 8192
[  514.095202][T31578] loop6: detected capacity change from 0 to 128
[  514.121875][T31578] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  514.170828][T31578] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  514.429976][T31593] netem: change failed
[  514.992157][T31611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31611 comm=syz.2.6957
[  515.088806][   T29] kauditd_printk_skb: 1511 callbacks suppressed
[  515.088824][   T29] audit: type=1400 audit(2000001129.054:82845): avc:  denied  { map_create } for  pid=31620 comm="syz.8.6961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  515.114756][   T29] audit: type=1400 audit(2000001129.054:82846): avc:  denied  { bpf } for  pid=31620 comm="syz.8.6961" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  515.150385][   T29] audit: type=1400 audit(2000001129.054:82847): avc:  denied  { map_read map_write } for  pid=31620 comm="syz.8.6961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  515.171985][   T29] audit: type=1400 audit(2000001129.054:82848): avc:  denied  { prog_load } for  pid=31620 comm="syz.8.6961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  515.192528][   T29] audit: type=1400 audit(2000001129.054:82849): avc:  denied  { perfmon } for  pid=31620 comm="syz.8.6961" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  515.208148][T31626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  515.214878][   T29] audit: type=1400 audit(2000001129.054:82850): avc:  denied  { prog_run } for  pid=31620 comm="syz.8.6961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  515.224378][T31626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  515.243653][   T29] audit: type=1400 audit(2000001129.108:82851): avc:  denied  { read write } for  pid=31616 comm="+}[@" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  515.275465][   T29] audit: type=1400 audit(2000001129.108:82852): avc:  denied  { open } for  pid=31616 comm="+}[@" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  515.299786][   T29] audit: type=1400 audit(2000001129.118:82853): avc:  denied  { create } for  pid=31620 comm="syz.8.6961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  515.321494][   T29] audit: type=1400 audit(2000001129.118:82854): avc:  denied  { write } for  pid=31620 comm="syz.8.6961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  515.498099][T31641] netlink: 'syz.5.6965': attribute type 27 has an invalid length.
[  515.506126][T31641] netlink: 'syz.5.6965': attribute type 3 has an invalid length.
[  515.531348][T31641] loop5: detected capacity change from 0 to 256
[  515.895930][T31662] netlink: 'syz.6.6968': attribute type 1 has an invalid length.
[  515.930873][T31662] 8021q: adding VLAN 0 to HW filter on device bond1
[  515.975935][T31655] 8021q: adding VLAN 0 to HW filter on device bond1
[  515.985103][T31655] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  515.988510][T31702] loop8: detected capacity change from 0 to 128
[  516.010044][T31655] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  516.016949][T31702] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  516.031734][T31702] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  516.064477][T30156] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  516.107693][T31716] SELinux:  policydb magic number 0x40 does not match expected magic number 0xf97cff8c
[  516.122289][T31716] SELinux: failed to load policy
[  516.214063][T31727] loop6: detected capacity change from 0 to 1024
[  516.310985][T31736] netlink: 'syz.5.6978': attribute type 1 has an invalid length.
[  516.312950][T31727] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  517.346605][T31742] __nla_validate_parse: 4 callbacks suppressed
[  517.346625][T31742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6979'.
[  517.362986][T31742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6979'.
[  517.375475][T28609] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.378482][T31744] loop8: detected capacity change from 0 to 128
[  517.397103][T31744] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  517.432555][T31744] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  517.480721][T31753] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6981'.
[  517.504262][T30156] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  517.548886][T31760] batadv_slave_1: entered promiscuous mode
[  517.559405][T31758] batadv_slave_1: left promiscuous mode
[  517.623058][T31773] SELinux:  policydb magic number 0x40 does not match expected magic number 0xf97cff8c
[  517.644708][ T3395] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  517.645334][T31773] SELinux: failed to load policy
[  517.657957][ T3395] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  517.685726][T31771] loop6: detected capacity change from 0 to 1024
[  517.691784][T31779] siw: device registration error -23
[  517.702324][T31771] EXT4-fs: Ignoring removed nomblk_io_submit option
[  517.712264][T31771] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  517.736768][T31771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  517.766220][T31787] SELinux:  policydb magic number 0x40 does not match expected magic number 0xf97cff8c
[  517.778302][T31771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.803377][T31787] SELinux: failed to load policy
[  517.912772][T31802] loop8: detected capacity change from 0 to 128
[  517.952366][T31802] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  517.977685][T31802] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  518.049935][T30156] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  518.066383][T31815] loop6: detected capacity change from 0 to 512
[  518.088010][T31815] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  518.123273][T31814] bond1: entered promiscuous mode
[  518.123343][T31815] EXT4-fs (loop6): mount failed
[  518.129626][T31814] bond1: entered allmulticast mode
[  518.147371][T31814] 8021q: adding VLAN 0 to HW filter on device bond1
[  518.158924][T31814] bond1 (unregistering): Released all slaves
[  518.201382][T31859] loop5: detected capacity change from 0 to 1024
[  518.298719][T31814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  518.323760][T31814] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  518.480594][T31920] loop8: detected capacity change from 0 to 8192
[  518.768515][T31936] netlink: 'syz.6.7017': attribute type 21 has an invalid length.
[  518.960375][T31947] sit0: entered allmulticast mode
[  519.012242][T31948] loop6: detected capacity change from 0 to 1024
[  519.019895][T31948] EXT4-fs: Ignoring removed orlov option
[  519.055989][T31948] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  519.082004][T31954] netlink: 208380 bytes leftover after parsing attributes in process `syz.2.7023'.
[  519.117426][T31954] net_ratelimit: 80 callbacks suppressed
[  519.117446][T31954] netlink: zone id is out of range
[  519.129631][T31954] netlink: zone id is out of range
[  519.135831][T31954] netlink: zone id is out of range
[  519.141042][T31954] netlink: zone id is out of range
[  519.147375][T31954] netlink: zone id is out of range
[  519.153651][T31954] netlink: zone id is out of range
[  519.158856][T31954] netlink: zone id is out of range
[  519.165313][T31954] netlink: zone id is out of range
[  519.171655][T31954] netlink: zone id is out of range
[  519.177367][T31954] netlink: zone id is out of range
[  519.222537][T28609] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.285383][T31962] loop6: detected capacity change from 0 to 512
[  519.295488][T31962] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  519.348815][T31962] EXT4-fs (loop6): 1 truncate cleaned up
[  519.368252][T31962] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  519.386150][T31962] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.467185][T31978] FAULT_INJECTION: forcing a failure.
[  519.467185][T31978] name failslab, interval 1, probability 0, space 0, times 0
[  519.480990][T31978] CPU: 0 UID: 0 PID: 31978 Comm: syz.2.7030 Tainted: G        W           6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) 
[  519.481034][T31978] Tainted: [W]=WARN
[  519.481043][T31978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  519.481060][T31978] Call Trace:
[  519.481082][T31978]  <TASK>
[  519.481090][T31978]  __dump_stack+0x1d/0x30
[  519.481112][T31978]  dump_stack_lvl+0xe8/0x140
[  519.481136][T31978]  dump_stack+0x15/0x1b
[  519.481155][T31978]  should_fail_ex+0x265/0x280
[  519.481196][T31978]  should_failslab+0x8c/0xb0
[  519.481219][T31978]  kmem_cache_alloc_noprof+0x50/0x310
[  519.481306][T31978]  ? getname_flags+0x80/0x3b0
[  519.481336][T31978]  getname_flags+0x80/0x3b0
[  519.481367][T31978]  getname_uflags+0x21/0x30
[  519.481450][T31978]  __x64_sys_execveat+0x5d/0x90
[  519.481485][T31978]  x64_sys_call+0x2dae/0x2fb0
[  519.481507][T31978]  do_syscall_64+0xd2/0x200
[  519.481530][T31978]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  519.481571][T31978]  ? clear_bhb_loop+0x40/0x90
[  519.481594][T31978]  ? clear_bhb_loop+0x40/0x90
[  519.481616][T31978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.481662][T31978] RIP: 0033:0x7fda744ee929
[  519.481683][T31978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  519.481705][T31978] RSP: 002b:00007fda72b57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  519.481727][T31978] RAX: ffffffffffffffda RBX: 00007fda74715fa0 RCX: 00007fda744ee929
[  519.481739][T31978] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  519.481828][T31978] RBP: 00007fda72b57090 R08: 0000000000000000 R09: 0000000000000000
[  519.481844][T31978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  519.481860][T31978] R13: 0000000000000000 R14: 00007fda74715fa0 R15: 00007ffca67a11d8
[  519.481885][T31978]  </TASK>
[  519.686492][T31975] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7029'.
[  519.731780][T31980] loop6: detected capacity change from 0 to 1024
[  519.745570][T31988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7034'.
[  519.754649][T31988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7034'.
[  519.763632][   T29] kauditd_printk_skb: 1490 callbacks suppressed
[  519.763645][   T29] audit: type=1400 audit(2000002158.072:84344): avc:  denied  { prog_load } for  pid=31985 comm="syz.0.7033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  519.781678][T31980] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  519.789298][   T29] audit: type=1400 audit(2000002158.072:84345): avc:  denied  { bpf } for  pid=31985 comm="syz.0.7033" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  519.789335][   T29] audit: type=1400 audit(2000002158.072:84346): avc:  denied  { perfmon } for  pid=31985 comm="syz.0.7033" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  519.789361][   T29] audit: type=1400 audit(2000002158.072:84347): avc:  denied  { prog_run } for  pid=31985 comm="syz.0.7033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  519.789395][   T29] audit: type=1400 audit(2000002158.072:84348): avc:  denied  { create } for  pid=31985 comm="syz.0.7033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  519.809347][   T29] audit: type=1400 audit(2000002158.082:84349): avc:  denied  { mounton } for  pid=31979 comm="syz.6.7032" path="/151/file1" dev="tmpfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  519.825733][T31980] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  519.846080][   T29] audit: type=1400 audit(2000002158.104:84350): avc:  denied  { read write } for  pid=30156 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  519.846117][   T29] audit: type=1400 audit(2000002158.104:84351): avc:  denied  { read write open } for  pid=30156 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  519.846206][   T29] audit: type=1400 audit(2000002158.104:84352): avc:  denied  { ioctl } for  pid=30156 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  519.947847][   T29] audit: type=1400 audit(2000002158.136:84353): avc:  denied  { mount } for  pid=31979 comm="syz.6.7032" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  520.016201][T31993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31993 comm=syz.8.7035
[  520.049099][T31980] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7032: bg 0: block 393: padding at end of block bitmap is not set
[  520.066815][T31980] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117
[  520.080684][T31980] EXT4-fs (loop6): This should not happen!! Data will be lost
[  520.080684][T31980] 
[  520.096668][T31980] netlink: 'syz.6.7032': attribute type 10 has an invalid length.
[  520.152124][T31980] team0 (unregistering): Port device team_slave_0 removed
[  520.173950][T31980] team0 (unregistering): Port device team_slave_1 removed
[  520.266014][T32039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32039 comm=syz.8.7040
[  520.296327][T28609] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.397029][T32051] loop8: detected capacity change from 0 to 2048
[  520.430686][T32062] netlink: 404 bytes leftover after parsing attributes in process `syz.6.7041'.
[  520.440987][T32060] loop5: detected capacity change from 0 to 1024
[  520.460495][T32060] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  520.486392][T32061] tmpfs: Unknown parameter 'sizeNe'
[  520.491740][T32061] tmpfs: Unknown parameter 'sizeNe'
[  520.593041][T32070] netem: change failed
[  520.601546][T15629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.609639][T32076] SELinux:  policydb magic number 0x40 does not match expected magic number 0xf97cff8c
[  520.620489][T32076] SELinux: failed to load policy
[  520.795425][T32086] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7053'.
[  520.804523][T32086] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7053'.
[  520.929992][T32094] batman_adv: batadv0: Removing interface: batadv_slave_0
[  520.952950][T32094] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  520.960795][T32094] batman_adv: batadv0: Removing interface: batadv_slave_1
[  521.442002][T32148] batadv_slave_1: entered promiscuous mode
[  521.524537][T32138] netlink: 'syz.6.7062': attribute type 13 has an invalid length.
[  521.534887][T32089] chnl_net:caif_netlink_parms(): no params data found
[  521.577479][T32144] batadv_slave_1: left promiscuous mode
[  521.587185][T32242] Cannot find add_set index 0 as target
[  522.085143][T32138] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.092493][T32138] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.423983][T32261] __nla_validate_parse: 2 callbacks suppressed
[  522.424004][T32261] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7070'.
[  522.585956][T32138] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  522.595103][T32138] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  522.604867][T32138] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  522.613878][T32138] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  522.645277][T32138] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  522.655825][T32138] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  522.664789][T32138] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  522.674994][T32138] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  522.716424][T32253] dvmrp1: entered allmulticast mode
[  522.724380][T32254] dvmrp1: left allmulticast mode
[  522.735414][T32258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7069'.
[  522.878062][T32322] netlink: 'syz.2.7073': attribute type 7 has an invalid length.
[  522.878579][T32089] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.886056][T32322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7073'.
[  522.893452][T32089] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.917172][T32326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  522.931478][T32326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  522.941822][T32089] bridge_slave_0: entered allmulticast mode
[  522.970808][T32089] bridge_slave_0: entered promiscuous mode
[  522.996452][T32089] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.003792][T32089] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.032173][T32089] bridge_slave_1: entered allmulticast mode
[  523.056860][T32089] bridge_slave_1: entered promiscuous mode
[  523.068472][T32340] netlink: 'syz.6.7078': attribute type 1 has an invalid length.
[  523.110115][T32089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  523.146492][T32089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  523.234300][T32089] team0: Port device team_slave_0 added
[  523.244042][T32089] team0: Port device team_slave_1 added
[  523.265827][T32380] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7080'.
[  523.290521][T32089] batman_adv: batadv0: Adding interface: batadv_slave_0
[  523.297689][T32089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  523.323987][T32089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  523.341085][T32089] batman_adv: batadv0: Adding interface: batadv_slave_1
[  523.348164][T32089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  523.356005][T32419] loop6: detected capacity change from 0 to 1024
[  523.374485][T32089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  523.405349][T32419] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  523.409346][T32089] hsr_slave_0: entered promiscuous mode
[  523.426164][T32089] hsr_slave_1: entered promiscuous mode
[  523.433835][T32089] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  523.441767][T32089] Cannot create hsr debugfs directory
[  523.518306][T28609] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.613668][T32514] loop6: detected capacity change from 0 to 8192
[  523.754690][T32089] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  523.781735][T32089] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  523.814725][T32089] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  523.838853][T32089] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  523.993551][T32089] 8021q: adding VLAN 0 to HW filter on device bond0
[  524.009316][T32089] 8021q: adding VLAN 0 to HW filter on device team0
[  524.019970][T32555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7090'.
[  524.035845][T18879] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.043104][T18879] bridge0: port 1(bridge_slave_0) entered forwarding state
[  524.082474][T18879] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.089682][T18879] bridge0: port 2(bridge_slave_1) entered forwarding state
[  524.458353][   T29] kauditd_printk_skb: 1036 callbacks suppressed
[  524.458385][   T29] audit: type=1326 audit(2000002163.114:85390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32563 comm="syz.8.7094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb67c8e929 code=0x7ffc0000
[  524.498576][   T29] audit: type=1326 audit(2000002163.135:85391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32563 comm="syz.8.7094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb67c8e929 code=0x7ffc0000
[  524.560158][T32089] 8021q: adding VLAN 0 to HW filter on device batadv0
[  524.570266][   T29] audit: type=1400 audit(2000002163.232:85392): avc:  denied  { module_request } for  pid=32089 comm="syz-executor" kmod="netdev-netdevsim5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  524.599593][   T29] audit: type=1400 audit(2000002163.232:85393): avc:  denied  { read write } for  pid=30156 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  524.625594][   T29] audit: type=1400 audit(2000002163.232:85394): avc:  denied  { open } for  pid=30156 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  524.651077][   T29] audit: type=1400 audit(2000002163.232:85395): avc:  denied  { ioctl } for  pid=30156 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  524.964345][   T29] audit: type=1400 audit(2000002163.350:85396): avc:  denied  { map_create } for  pid=32572 comm="syz.2.7095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  524.984088][   T29] audit: type=1400 audit(2000002163.350:85397): avc:  denied  { prog_load } for  pid=32572 comm="syz.2.7095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  525.003471][   T29] audit: type=1400 audit(2000002163.350:85398): avc:  denied  { bpf } for  pid=32572 comm="syz.2.7095" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  525.024350][   T29] audit: type=1400 audit(2000002163.350:85399): avc:  denied  { perfmon } for  pid=32572 comm="syz.2.7095" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  525.046261][T32578] netlink: 116 bytes leftover after parsing attributes in process `syz.2.7095'.
[  525.300480][T32623] netlink: 'syz.6.7097': attribute type 13 has an invalid length.
[  525.446350][T32639] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7100'.
[  525.534062][T32089] veth0_vlan: entered promiscuous mode
[  525.537754][T32645] loop8: detected capacity change from 0 to 256
[  525.546841][T32089] veth1_vlan: entered promiscuous mode
[  525.553566][T32643] netlink: 208360 bytes leftover after parsing attributes in process `syz.2.7101'.
[  525.566140][T32643] net_ratelimit: 75 callbacks suppressed
[  525.566161][T32643] netlink: zone id is out of range
[  525.570557][T32089] veth0_macvtap: entered promiscuous mode
[  525.571837][T32643] netlink: zone id is out of range
[  525.571847][T32643] netlink: zone id is out of range
[  525.577146][T32643] netlink: zone id is out of range
[  525.577155][T32643] netlink: zone id is out of range
[  525.589157][T32089] veth1_macvtap: entered promiscuous mode
[  525.589684][T32643] netlink: zone id is out of range
[  525.608140][T32089] batman_adv: batadv0: Interface activated: batadv_slave_0
[  525.614349][T32643] netlink: zone id is out of range
[  525.629528][T32089] batman_adv: batadv0: Interface activated: batadv_slave_1
[  525.633136][T32643] netlink: zone id is out of range
[  525.645484][T32643] netlink: zone id is out of range
[  525.645477][T32089] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  525.651960][T32643] netlink: zone id is out of range
[  525.659539][T32089] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  525.659645][T32089] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  525.659681][T32089] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  525.709214][T32645] FAT-fs (loop8): error, corrupted directory (invalid entries)
[  525.717975][T32645] FAT-fs (loop8): Filesystem has been set read-only
[  525.787188][T32652] loop8: detected capacity change from 0 to 128
[  525.820667][T32652] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  525.845413][T32657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32657 comm=syz.0.7106
[  525.860898][T32652] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  525.969792][T30156] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  526.054414][T32682] loop5: detected capacity change from 0 to 256
[  526.093057][T32680] netlink: 208360 bytes leftover after parsing attributes in process `syz.0.7113'.
[  526.117610][T32682] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  526.126736][T32682] FAT-fs (loop5): Filesystem has been set read-only
[  526.297431][T32703] syzkaller1: entered promiscuous mode
[  526.303122][T32703] syzkaller1: entered allmulticast mode
[  526.400089][T32715] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7119'.
[  527.240673][T32733] FAULT_INJECTION: forcing a failure.
[  527.240673][T32733] name failslab, interval 1, probability 0, space 0, times 0
[  527.253479][T32733] CPU: 0 UID: 0 PID: 32733 Comm: syz.2.7131 Tainted: G        W           6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) 
[  527.253518][T32733] Tainted: [W]=WARN
[  527.253524][T32733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  527.253586][T32733] Call Trace:
[  527.253595][T32733]  <TASK>
[  527.253606][T32733]  __dump_stack+0x1d/0x30
[  527.253630][T32733]  dump_stack_lvl+0xe8/0x140
[  527.253648][T32733]  dump_stack+0x15/0x1b
[  527.253676][T32733]  should_fail_ex+0x265/0x280
[  527.253716][T32733]  should_failslab+0x8c/0xb0
[  527.253746][T32733]  kmem_cache_alloc_noprof+0x50/0x310
[  527.253780][T32733]  ? skb_clone+0x151/0x1f0
[  527.253812][T32733]  skb_clone+0x151/0x1f0
[  527.253828][T32733]  ? __pfx_llc_conn_handler+0x10/0x10
[  527.253855][T32733]  ? __pfx_stp_pdu_rcv+0x10/0x10
[  527.253959][T32733]  llc_rcv+0x41a/0x790
[  527.253988][T32733]  ? __pfx_llc_rcv+0x10/0x10
[  527.254081][T32733]  __netif_receive_skb_list_core+0x480/0x500
[  527.254237][T32733]  netif_receive_skb_list_internal+0x487/0x600
[  527.254271][T32733]  netif_receive_skb_list+0x31/0x200
[  527.254299][T32733]  bpf_test_run_xdp_live+0xdcb/0xfe0
[  527.254372][T32733]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  527.254398][T32733]  ? cpus_read_unlock+0x6e/0xc0
[  527.254454][T32733]  ? synchronize_rcu+0x45/0x320
[  527.254494][T32733]  ? 0xffffffffa02057c0
[  527.254512][T32733]  ? bpf_test_run_xdp_live+0x29d/0xfe0
[  527.254649][T32733]  bpf_prog_test_run_xdp+0x4f5/0x910
[  527.254683][T32733]  ? __rcu_read_unlock+0x4f/0x70
[  527.254790][T32733]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  527.254884][T32733]  bpf_prog_test_run+0x22a/0x390
[  527.254910][T32733]  __sys_bpf+0x3dc/0x790
[  527.255007][T32733]  __x64_sys_bpf+0x41/0x50
[  527.255062][T32733]  x64_sys_call+0x2478/0x2fb0
[  527.255125][T32733]  do_syscall_64+0xd2/0x200
[  527.255147][T32733]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  527.255210][T32733]  ? clear_bhb_loop+0x40/0x90
[  527.255312][T32733]  ? clear_bhb_loop+0x40/0x90
[  527.255338][T32733]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.255427][T32733] RIP: 0033:0x7fda744ee929
[  527.255445][T32733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  527.255571][T32733] RSP: 002b:00007fda72b57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  527.255596][T32733] RAX: ffffffffffffffda RBX: 00007fda74715fa0 RCX: 00007fda744ee929
[  527.255613][T32733] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  527.255636][T32733] RBP: 00007fda72b57090 R08: 0000000000000000 R09: 0000000000000000
[  527.255649][T32733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  527.255665][T32733] R13: 0000000000000000 R14: 00007fda74715fa0 R15: 00007ffca67a11d8
[  527.255688][T32733]  </TASK>
[  527.812685][T32751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  527.825835][T32696] syz.6.7119 (32696) used greatest stack depth: 5984 bytes left
[  527.846353][T32751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  527.878137][T32758] FAULT_INJECTION: forcing a failure.
[  527.878137][T32758] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  527.892598][T32758] CPU: 0 UID: 0 PID: 32758 Comm: syz.5.7139 Tainted: G        W           6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) 
[  527.892658][T32758] Tainted: [W]=WARN
[  527.892667][T32758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  527.892681][T32758] Call Trace:
[  527.892689][T32758]  <TASK>
[  527.892697][T32758]  __dump_stack+0x1d/0x30
[  527.892784][T32758]  dump_stack_lvl+0xe8/0x140
[  527.892808][T32758]  dump_stack+0x15/0x1b
[  527.892826][T32758]  should_fail_ex+0x265/0x280
[  527.892857][T32758]  should_fail_alloc_page+0xf2/0x100
[  527.892964][T32758]  __alloc_frozen_pages_noprof+0xff/0x360
[  527.893082][T32758]  alloc_pages_mpol+0xb3/0x250
[  527.893116][T32758]  folio_alloc_mpol_noprof+0x39/0x80
[  527.893146][T32758]  shmem_get_folio_gfp+0x3cf/0xd60
[  527.893263][T32758]  shmem_fallocate+0x57c/0x840
[  527.893325][T32758]  vfs_fallocate+0x413/0x450
[  527.893353][T32758]  __x64_sys_fallocate+0x7a/0xd0
[  527.893441][T32758]  x64_sys_call+0x2b88/0x2fb0
[  527.893468][T32758]  do_syscall_64+0xd2/0x200
[  527.893489][T32758]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  527.893514][T32758]  ? clear_bhb_loop+0x40/0x90
[  527.893539][T32758]  ? clear_bhb_loop+0x40/0x90
[  527.893643][T32758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.893663][T32758] RIP: 0033:0x7f21738fe929
[  527.893681][T32758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  527.893703][T32758] RSP: 002b:00007f2171f46038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[  527.893725][T32758] RAX: ffffffffffffffda RBX: 00007f2173b26080 RCX: 00007f21738fe929
[  527.893755][T32758] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000005
[  527.893768][T32758] RBP: 00007f2171f46090 R08: 0000000000000000 R09: 0000000000000000
[  527.893783][T32758] R10: 0000000002000402 R11: 0000000000000246 R12: 0000000000000001
[  527.893799][T32758] R13: 0000000000000000 R14: 00007f2173b26080 R15: 00007ffd56405cf8
[  527.893822][T32758]  </TASK>
[  528.908891][  T321] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7153'.
[  528.940562][  T307] random: crng reseeded on system resumption
[  529.129379][   T29] kauditd_printk_skb: 836 callbacks suppressed
[  529.129396][   T29] audit: type=1400 audit(2000002168.113:86236): avc:  denied  { prog_load } for  pid=344 comm="syz.5.7160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  529.161915][  T347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7159'.
[  529.169352][   T29] audit: type=1400 audit(2000002168.113:86237): avc:  denied  { bpf } for  pid=344 comm="syz.5.7160" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  529.194133][   T29] audit: type=1400 audit(2000002168.113:86238): avc:  denied  { perfmon } for  pid=344 comm="syz.5.7160" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  529.216276][   T29] audit: type=1400 audit(2000002168.113:86239): avc:  denied  { bpf } for  pid=344 comm="syz.5.7160" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  529.237119][   T29] audit: type=1400 audit(2000002168.113:86240): avc:  denied  { prog_run } for  pid=344 comm="syz.5.7160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  529.257533][   T29] audit: type=1400 audit(2000002168.156:86241): avc:  denied  { sys_module } for  pid=342 comm="syz.2.7159" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  529.278909][   T29] audit: type=1400 audit(2000002168.156:86242): avc:  denied  { module_request } for  pid=342 comm="syz.2.7159" kmod="batadv0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  529.300614][   T29] audit: type=1400 audit(2000002168.156:86243): avc:  denied  { read write } for  pid=30156 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  529.326419][   T29] audit: type=1400 audit(2000002168.156:86244): avc:  denied  { open } for  pid=30156 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  529.351932][   T29] audit: type=1400 audit(2000002168.156:86245): avc:  denied  { ioctl } for  pid=30156 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  529.411068][  T357] netlink: 'syz.8.7162': attribute type 1 has an invalid length.
[  530.516960][  T367] loop5: detected capacity change from 0 to 1024
[  530.683825][  T367] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  530.699519][  T386] netlink: 208356 bytes leftover after parsing attributes in process `syz.8.7171'.
[  530.779091][  T386] net_ratelimit: 170 callbacks suppressed
[  530.779114][  T386] netlink: zone id is out of range
[  530.790076][  T386] netlink: zone id is out of range
[  530.795302][  T386] netlink: zone id is out of range
[  530.814330][  T386] netlink: zone id is out of range
[  530.819539][  T386] netlink: zone id is out of range
[  530.826024][  T386] netlink: zone id is out of range
[  530.832340][  T386] netlink: zone id is out of range
[  530.837502][  T386] netlink: zone id is out of range
[  530.843884][  T386] netlink: zone id is out of range
[  530.849033][  T386] netlink: zone id is out of range
[  530.871739][T32089] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.990933][  T410] SELinux:  policydb magic number 0x40 does not match expected magic number 0xf97cff8c
[  531.001835][  T410] SELinux: failed to load policy
[  531.044272][  T414] loop5: detected capacity change from 0 to 1024
[  531.077227][  T414] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  531.095295][  T422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7182'.
[  531.201483][  T436] loop2: detected capacity change from 0 to 1024
[  531.234643][  T436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  531.349545][  T450] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  531.356014][  T449] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  531.374194][T27496] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.387653][  T453] loop6: detected capacity change from 0 to 512
[  531.425061][  T453] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.7189: Parent and EA inode have the same ino 15
[  531.439916][  T453] EXT4-fs (loop6): Remounting filesystem read-only
[  531.453603][  T453] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  531.465008][  T453] EXT4-fs (loop6): 1 orphan inode deleted
[  531.471433][  T464] SELinux:  policydb magic number 0x40 does not match expected magic number 0xf97cff8c
[  531.471579][  T453] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  531.486966][  T464] SELinux: failed to load policy
[  531.520374][  T453] netlink: 830 bytes leftover after parsing attributes in process `syz.6.7189'.
[  531.570751][T28609] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.616281][  T471] tmpfs: Bad value for 'defcontext'
[  531.635294][  T475] netlink: 'syz.6.7196': attribute type 1 has an invalid length.
[  531.803142][  T489] loop2: detected capacity change from 0 to 1024
[  531.876365][  T508] loop8: detected capacity change from 0 to 1024
[  531.889557][T32089] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.047342][  T508] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  532.067539][  T520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=520 comm=syz.0.7213
[  532.184167][  T525] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.246355][  T532] 9pnet: p9_errstr2errno: server reported unknown error 
[  532.269463][  T525] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.342964][  T525] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.416805][  T525] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.496923][  T525] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  532.512287][  T525] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  532.550126][  T525] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  532.570443][  T525] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  532.589157][  T562] netlink: 'syz.5.7209': attribute type 1 has an invalid length.
[  532.870576][  T588] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (59648)
[  533.004678][  T606] FAULT_INJECTION: forcing a failure.
[  533.004678][  T606] name failslab, interval 1, probability 0, space 0, times 0
[  533.018541][  T606] CPU: 0 UID: 0 PID: 606 Comm: syz.8.7233 Tainted: G        W           6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) 
[  533.018606][  T606] Tainted: [W]=WARN
[  533.018614][  T606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  533.018706][  T606] Call Trace:
[  533.018765][  T606]  <TASK>
[  533.018773][  T606]  __dump_stack+0x1d/0x30
[  533.018797][  T606]  dump_stack_lvl+0xe8/0x140
[  533.018821][  T606]  dump_stack+0x15/0x1b
[  533.018898][  T606]  should_fail_ex+0x265/0x280
[  533.018928][  T606]  ? ethnl_tsinfo_start+0x80/0x1a0
[  533.019027][  T606]  should_failslab+0x8c/0xb0
[  533.019052][  T606]  __kmalloc_cache_noprof+0x4c/0x320
[  533.019117][  T606]  ethnl_tsinfo_start+0x80/0x1a0
[  533.019183][  T606]  ? __pfx_ethnl_tsinfo_start+0x10/0x10
[  533.019213][  T606]  genl_start+0x2e3/0x390
[  533.019241][  T606]  __netlink_dump_start+0x331/0x520
[  533.019302][  T606]  genl_family_rcv_msg_dumpit+0x115/0x180
[  533.019334][  T606]  ? __pfx_genl_start+0x10/0x10
[  533.019361][  T606]  ? __pfx_genl_dumpit+0x10/0x10
[  533.019434][  T606]  ? __pfx_genl_done+0x10/0x10
[  533.019461][  T606]  genl_rcv_msg+0x3f0/0x460
[  533.019492][  T606]  ? __pfx_ethnl_tsinfo_start+0x10/0x10
[  533.019610][  T606]  ? __pfx_ethnl_tsinfo_dumpit+0x10/0x10
[  533.019650][  T606]  ? __pfx_ethnl_tsinfo_done+0x10/0x10
[  533.019736][  T606]  netlink_rcv_skb+0x120/0x220
[  533.019795][  T606]  ? __pfx_genl_rcv_msg+0x10/0x10
[  533.019836][  T606]  genl_rcv+0x28/0x40
[  533.019863][  T606]  netlink_unicast+0x59e/0x670
[  533.019957][  T606]  netlink_sendmsg+0x58b/0x6b0
[  533.019983][  T606]  ? __pfx_netlink_sendmsg+0x10/0x10
[  533.020008][  T606]  __sock_sendmsg+0x142/0x180
[  533.020037][  T606]  ____sys_sendmsg+0x31e/0x4e0
[  533.020127][  T606]  ___sys_sendmsg+0x17b/0x1d0
[  533.020224][  T606]  __x64_sys_sendmsg+0xd4/0x160
[  533.020273][  T606]  x64_sys_call+0x2999/0x2fb0
[  533.020299][  T606]  do_syscall_64+0xd2/0x200
[  533.020316][  T606]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  533.020411][  T606]  ? clear_bhb_loop+0x40/0x90
[  533.020489][  T606]  ? clear_bhb_loop+0x40/0x90
[  533.020578][  T606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.020605][  T606] RIP: 0033:0x7feb67c8e929
[  533.020625][  T606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  533.020643][  T606] RSP: 002b:00007feb662f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  533.020666][  T606] RAX: ffffffffffffffda RBX: 00007feb67eb5fa0 RCX: 00007feb67c8e929
[  533.020680][  T606] RDX: 0000000000004886 RSI: 0000200000000240 RDI: 0000000000000006
[  533.020744][  T606] RBP: 00007feb662f7090 R08: 0000000000000000 R09: 0000000000000000
[  533.020755][  T606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  533.020768][  T606] R13: 0000000000000000 R14: 00007feb67eb5fa0 R15: 00007fff3eefdb78
[  533.020791][  T606]  </TASK>
[  533.377478][  T625] loop6: detected capacity change from 0 to 512
[  533.399551][  T625] EXT4-fs: Ignoring removed orlov option
[  533.409232][  T625] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  533.488686][  T625] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  533.500622][  T635] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7238'.
[  533.505237][  T613] netlink: 'syz.0.7234': attribute type 1 has an invalid length.
[  533.537066][  T625] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.7235: corrupted in-inode xattr: e_value size too large
[  533.574274][  T625] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.7235: couldn't read orphan inode 15 (err -117)
[  533.626164][  T625] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  533.720512][  T638] loop8: detected capacity change from 0 to 8192
[  533.741778][  T645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7240'.
[  533.774747][T28609] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.795275][   T29] kauditd_printk_skb: 1047 callbacks suppressed
[  533.795292][   T29] audit: type=1400 audit(2000002173.123:87293): avc:  denied  { sys_module } for  pid=641 comm="syz.0.7240" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  533.824274][   T29] audit: type=1400 audit(2000002173.133:87294): avc:  denied  { module_request } for  pid=641 comm="syz.0.7240" kmod="batadv0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  533.855680][   T29] audit: type=1400 audit(2000002173.155:87295): avc:  denied  { prog_load } for  pid=600 comm="syz.2.7232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  533.876194][   T29] audit: type=1400 audit(2000002173.155:87296): avc:  denied  { bpf } for  pid=600 comm="syz.2.7232" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  533.898148][   T29] audit: type=1400 audit(2000002173.155:87297): avc:  denied  { perfmon } for  pid=600 comm="syz.2.7232" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  533.920158][   T29] audit: type=1400 audit(2000002173.155:87298): avc:  denied  { prog_run } for  pid=600 comm="syz.2.7232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  533.940376][   T29] audit: type=1400 audit(2000002173.155:87299): avc:  denied  { write } for  pid=634 comm="syz.5.7238" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  533.965170][   T29] audit: type=1400 audit(2000002173.155:87300): avc:  denied  { open } for  pid=634 comm="syz.5.7238" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  533.990261][   T29] audit: type=1400 audit(2000002173.155:87301): avc:  denied  { create } for  pid=641 comm="syz.0.7240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  534.012005][   T29] audit: type=1400 audit(2000002173.187:87302): avc:  denied  { execmem } for  pid=637 comm="syz.8.7239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  534.224091][  T658] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7243'.
[  534.337857][  T667] SELinux:  policydb magic number 0x40 does not match expected magic number 0xf97cff8c
[  534.349205][  T667] SELinux: failed to load policy
[  534.434579][  T673] netlink: 208360 bytes leftover after parsing attributes in process `syz.2.7249'.
[  534.555904][  T674] loop6: detected capacity change from 0 to 8192
[  534.893059][  T695] loop8: detected capacity change from 0 to 512
[  534.925591][  T695] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.7255: bg 0: block 5: invalid block bitmap
[  534.980606][  T695] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  535.031933][  T695] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.7255: invalid indirect mapped block 3 (level 2)
[  535.065451][  T695] EXT4-fs (loop8): 2 truncates cleaned up
[  535.072655][  T695] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  535.087454][  T695] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  535.169429][  T712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=712 comm=syz.5.7258
[  535.244461][  T715] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7260'.
[  535.292806][  T719] loop2: detected capacity change from 0 to 1024
[  535.316521][  T719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  535.384991][T27496] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  535.430591][  T733] netlink: 'syz.6.7264': attribute type 10 has an invalid length.
[  535.495619][  T745] SELinux:  policydb magic number 0x40 does not match expected magic number 0xf97cff8c
[  535.506886][  T745] SELinux: failed to load policy
[  535.700498][  T763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  535.712708][  T763] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  535.742259][  T761] loop2: detected capacity change from 0 to 8192
[  536.388722][  T802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7287'.
[  536.532869][  T807] netlink: 208364 bytes leftover after parsing attributes in process `syz.5.7289'.
[  536.550977][  T812] netlink: 'syz.0.7292': attribute type 1 has an invalid length.
[  536.561034][  T807] net_ratelimit: 165 callbacks suppressed
[  536.561055][  T807] netlink: zone id is out of range
[  536.572147][  T807] netlink: zone id is out of range
[  536.577283][  T807] netlink: zone id is out of range
[  536.577377][  T814] netlink: 'syz.8.7291': attribute type 27 has an invalid length.
[  536.584841][  T807] netlink: zone id is out of range
[  536.592661][  T814] netlink: 'syz.8.7291': attribute type 3 has an invalid length.
[  536.605707][  T814] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7291'.
[  536.606101][  T807] netlink: zone id is out of range
[  536.625180][  T807] netlink: zone id is out of range
[  536.630627][  T807] netlink: zone id is out of range
[  536.635795][  T807] netlink: zone id is out of range
[  536.640984][  T807] netlink: zone id is out of range
[  536.646212][  T807] netlink: zone id is out of range
[  536.692743][  T814] loop8: detected capacity change from 0 to 256
[  536.770949][  T829] netlink: 268 bytes leftover after parsing attributes in process `syz.0.7296'.
[  536.774028][  T830] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7298'.
[  536.850834][  T834] SELinux:  policydb magic number 0x40 does not match expected magic number 0xf97cff8c
[  536.872389][  T834] SELinux: failed to load policy
[  536.994759][  T840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7294'.
[  537.022229][  T840] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  537.032232][  T840] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  537.042422][  T840] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  537.052312][  T840] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  537.068806][  T840] vxlan0: entered promiscuous mode
[  537.156613][  T854] sg_write: data in/out 768/55 bytes for SCSI command 0x0-- guessing data in;
[  537.156613][  T854]    program syz.2.7305 not setting count and/or reply_len properly
[  537.348206][  T865] loop6: detected capacity change from 0 to 128
[  537.360928][  T865] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  537.375099][  T865] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  537.450581][T28609] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  537.518365][  T883] netlink: 'syz.6.7314': attribute type 1 has an invalid length.
[  537.526782][  T881] netlink: 'syz.8.7313': attribute type 1 has an invalid length.
[  538.080596][  T931] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  538.161053][  T931] bond1: entered allmulticast mode
[  538.175124][  T931] 8021q: adding VLAN 0 to HW filter on device bond1
[  538.266833][  T942] SELinux:  policydb magic number 0x40 does not match expected magic number 0xf97cff8c
[  538.318129][  T942] SELinux: failed to load policy
[  538.416431][  T982] loop6: detected capacity change from 0 to 128
[  538.464507][   T29] kauditd_printk_skb: 1603 callbacks suppressed
[  538.464522][   T29] audit: type=1400 audit(2000002434.123:88904): avc:  denied  { prog_load } for  pid=983 comm="syz.2.7338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  538.548253][   T29] audit: type=1400 audit(2000002434.134:88905): avc:  denied  { bpf } for  pid=983 comm="syz.2.7338" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  538.568876][   T29] audit: type=1400 audit(2000002434.134:88906): avc:  denied  { mounton } for  pid=981 comm="syz.6.7339" path="/206/file0" dev="tmpfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  538.591696][   T29] audit: type=1400 audit(2000002434.134:88907): avc:  denied  { perfmon } for  pid=983 comm="syz.2.7338" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  538.612893][   T29] audit: type=1400 audit(2000002434.134:88908): avc:  denied  { prog_run } for  pid=983 comm="syz.2.7338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  538.631986][   T29] audit: type=1400 audit(2000002434.134:88909): avc:  denied  { allowed } for  pid=983 comm="syz.2.7338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  538.633796][ T1006] __nla_validate_parse: 4 callbacks suppressed
[  538.633815][ T1006] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7345'.
[  538.651601][   T29] audit: type=1400 audit(2000002434.176:88910): avc:  denied  { map_create } for  pid=996 comm="syz.8.7341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  538.651701][   T29] audit: type=1400 audit(2000002434.176:88911): avc:  denied  { bpf } for  pid=996 comm="syz.8.7341" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  538.651730][   T29] audit: type=1400 audit(2000002434.176:88912): avc:  denied  { map_read map_write } for  pid=996 comm="syz.8.7341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  538.651760][   T29] audit: type=1400 audit(2000002434.176:88913): avc:  denied  { read write } for  pid=28609 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  538.664402][ T1002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7342'.
[  538.777059][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  538.785749][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_0
[  538.795348][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  538.804209][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_1
[  538.834699][ T1019] SELinux:  policydb magic number 0x40 does not match expected magic number 0xf97cff8c
[  538.844705][ T1019] SELinux: failed to load policy
[  538.985348][ T1052] loop2: detected capacity change from 0 to 512
[  538.999139][ T1052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  539.013613][ T1052] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  539.026456][ T1058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1058 comm=syz.5.7355
[  539.055609][T27496] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  539.209954][ T1076] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7359'.
[  539.356079][ T1091] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7362'.
[  539.456499][ T1099] netlink: 'syz.5.7366': attribute type 27 has an invalid length.
[  539.465718][ T1099] netlink: 'syz.5.7366': attribute type 3 has an invalid length.
[  539.474530][ T1099] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7366'.
[  539.636456][ T1109] netlink: 'syz.2.7370': attribute type 27 has an invalid length.
[  539.700112][ T1099] loop5: detected capacity change from 0 to 256
[  539.741405][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.748715][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.906022][ T1116] FAULT_INJECTION: forcing a failure.
[  539.906022][ T1116] name failslab, interval 1, probability 0, space 0, times 0
[  539.919377][ T1116] CPU: 1 UID: 0 PID: 1116 Comm: syz.8.7371 Tainted: G        W           6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) 
[  539.919410][ T1116] Tainted: [W]=WARN
[  539.919419][ T1116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  539.919505][ T1116] Call Trace:
[  539.919513][ T1116]  <TASK>
[  539.919522][ T1116]  __dump_stack+0x1d/0x30
[  539.919548][ T1116]  dump_stack_lvl+0xe8/0x140
[  539.919569][ T1116]  dump_stack+0x15/0x1b
[  539.919650][ T1116]  should_fail_ex+0x265/0x280
[  539.919691][ T1116]  should_failslab+0x8c/0xb0
[  539.919750][ T1116]  __kmalloc_cache_node_noprof+0x54/0x320
[  539.919789][ T1116]  ? __get_vm_area_node+0x106/0x1d0
[  539.919829][ T1116]  __get_vm_area_node+0x106/0x1d0
[  539.919884][ T1116]  __vmalloc_node_range_noprof+0x273/0xe00
[  539.919925][ T1116]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  539.920014][ T1116]  ? mntput_no_expire+0x6f/0x3c0
[  539.920041][ T1116]  ? __rcu_read_unlock+0x4f/0x70
[  539.920075][ T1116]  ? selinux_capable+0x1f9/0x270
[  539.920183][ T1116]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  539.920214][ T1116]  __vmalloc_noprof+0x83/0xc0
[  539.920244][ T1116]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  539.920339][ T1116]  bpf_prog_alloc_no_stats+0x47/0x390
[  539.920372][ T1116]  ? bpf_prog_alloc+0x2a/0x150
[  539.920411][ T1116]  bpf_prog_alloc+0x3c/0x150
[  539.920514][ T1116]  bpf_prog_load+0x514/0x1070
[  539.920568][ T1116]  ? security_bpf+0x2b/0x90
[  539.920594][ T1116]  __sys_bpf+0x51d/0x790
[  539.920714][ T1116]  __x64_sys_bpf+0x41/0x50
[  539.920749][ T1116]  x64_sys_call+0x2478/0x2fb0
[  539.920777][ T1116]  do_syscall_64+0xd2/0x200
[  539.920799][ T1116]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  539.920873][ T1116]  ? clear_bhb_loop+0x40/0x90
[  539.920900][ T1116]  ? clear_bhb_loop+0x40/0x90
[  539.920930][ T1116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.920950][ T1116] RIP: 0033:0x7feb67c8e929
[  539.920965][ T1116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  539.920985][ T1116] RSP: 002b:00007feb662f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  539.921009][ T1116] RAX: ffffffffffffffda RBX: 00007feb67eb5fa0 RCX: 00007feb67c8e929
[  539.921025][ T1116] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000005
[  539.921081][ T1116] RBP: 00007feb662f7090 R08: 0000000000000000 R09: 0000000000000000
[  539.921098][ T1116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  539.921113][ T1116] R13: 0000000000000000 R14: 00007feb67eb5fa0 R15: 00007fff3eefdb78
[  539.921133][ T1116]  </TASK>
[  539.921204][ T1116] syz.8.7371: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0
[  540.193340][ T1116] CPU: 1 UID: 0 PID: 1116 Comm: syz.8.7371 Tainted: G        W           6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) 
[  540.193383][ T1116] Tainted: [W]=WARN
[  540.193392][ T1116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  540.193466][ T1116] Call Trace:
[  540.193474][ T1116]  <TASK>
[  540.193483][ T1116]  __dump_stack+0x1d/0x30
[  540.193510][ T1116]  dump_stack_lvl+0xe8/0x140
[  540.193536][ T1116]  dump_stack+0x15/0x1b
[  540.193558][ T1116]  warn_alloc+0x12b/0x1a0
[  540.193648][ T1116]  __vmalloc_node_range_noprof+0x297/0xe00
[  540.193727][ T1116]  ? mntput_no_expire+0x6f/0x3c0
[  540.193754][ T1116]  ? __rcu_read_unlock+0x4f/0x70
[  540.193781][ T1116]  ? selinux_capable+0x1f9/0x270
[  540.193838][ T1116]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  540.193907][ T1116]  __vmalloc_noprof+0x83/0xc0
[  540.193940][ T1116]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  540.194003][ T1116]  bpf_prog_alloc_no_stats+0x47/0x390
[  540.194071][ T1116]  ? bpf_prog_alloc+0x2a/0x150
[  540.194110][ T1116]  bpf_prog_alloc+0x3c/0x150
[  540.194222][ T1116]  bpf_prog_load+0x514/0x1070
[  540.194396][ T1116]  ? security_bpf+0x2b/0x90
[  540.194423][ T1116]  __sys_bpf+0x51d/0x790
[  540.194463][ T1116]  __x64_sys_bpf+0x41/0x50
[  540.194567][ T1116]  x64_sys_call+0x2478/0x2fb0
[  540.194670][ T1116]  do_syscall_64+0xd2/0x200
[  540.194694][ T1116]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  540.194722][ T1116]  ? clear_bhb_loop+0x40/0x90
[  540.194743][ T1116]  ? clear_bhb_loop+0x40/0x90
[  540.194805][ T1116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.194827][ T1116] RIP: 0033:0x7feb67c8e929
[  540.194847][ T1116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  540.194934][ T1116] RSP: 002b:00007feb662f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  540.195021][ T1116] RAX: ffffffffffffffda RBX: 00007feb67eb5fa0 RCX: 00007feb67c8e929
[  540.195038][ T1116] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000005
[  540.195053][ T1116] RBP: 00007feb662f7090 R08: 0000000000000000 R09: 0000000000000000
[  540.195065][ T1116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  540.195077][ T1116] R13: 0000000000000000 R14: 00007feb67eb5fa0 R15: 00007fff3eefdb78
[  540.195101][ T1116]  </TASK>
[  540.195108][ T1116] Mem-Info:
[  540.428946][ T1116] active_anon:9315 inactive_anon:11 isolated_anon:0
[  540.428946][ T1116]  active_file:14830 inactive_file:12095 isolated_file:0
[  540.428946][ T1116]  unevictable:0 dirty:688 writeback:0
[  540.428946][ T1116]  slab_reclaimable:4261 slab_unreclaimable:143378
[  540.428946][ T1116]  mapped:36942 shmem:6174 pagetables:1405
[  540.428946][ T1116]  sec_pagetables:0 bounce:0
[  540.428946][ T1116]  kernel_misc_reclaimable:0
[  540.428946][ T1116]  free:1692498 free_pcp:50348 free_cma:0
[  540.474311][ T1116] Node 0 active_anon:37260kB inactive_anon:44kB active_file:59320kB inactive_file:48380kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:147884kB dirty:2752kB writeback:0kB shmem:24696kB writeback_tmp:0kB kernel_stack:6880kB pagetables:5736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  540.503654][ T1116] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  540.532535][ T1116] lowmem_reserve[]: 0 2882 7860 7860
[  540.538135][ T1116] Node 0 DMA32 free:2947836kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951364kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB
[  540.568495][ T1116] lowmem_reserve[]: 0 0 4978 4978
[  540.573571][ T1116] Node 0 Normal free:3806796kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37260kB inactive_anon:44kB active_file:59320kB inactive_file:48380kB unevictable:0kB writepending:2752kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:197684kB local_pcp:91504kB free_cma:0kB
[  540.605842][ T1116] lowmem_reserve[]: 0 0 0 0
[  540.610471][ T1116] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  540.623312][ T1116] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 5*16kB (M) 2*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947836kB
[  540.639605][ T1116] Node 0 Normal: 302*4kB (UME) 249*8kB (UE) 1410*16kB (UME) 1158*32kB (UME) 840*64kB (UME) 354*128kB (UME) 196*256kB (UM) 51*512kB (UME) 89*1024kB (UM) 78*2048kB (UME) 810*4096kB (UM) = 3806816kB
[  540.659358][ T1116] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  540.668830][ T1116] 33096 total pagecache pages
[  540.673568][ T1116] 11 pages in swap cache
[  540.677827][ T1116] Free swap  = 124604kB
[  540.681988][ T1116] Total swap = 124996kB
[  540.686314][ T1116] 2097051 pages RAM
[  540.690170][ T1116] 0 pages HighMem/MovableOnly
[  540.694915][ T1116] 80810 pages reserved
[  540.731994][ T1109] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.741116][ T1109] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.751208][ T1109] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.761394][ T1109] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.849147][ T1130] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7374'.
[  540.893541][ T1113] syz_tun: entered allmulticast mode
[  540.901694][ T1131] loop5: detected capacity change from 0 to 1024
[  540.913973][ T1133] SELinux:  policydb magic number 0x40 does not match expected magic number 0xf97cff8c
[  540.923877][ T1133] SELinux: failed to load policy
[  540.939297][ T1131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  540.952397][ T1131] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  541.134872][ T1149] SELinux:  Context system_u:object_r:sshd_key_t:s0 is not valid (left unmapped).
[  541.193375][T32089] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  541.213610][ T1150] loop6: detected capacity change from 0 to 128
[  541.286602][ T1150] syz.6.7378: attempt to access beyond end of device
[  541.286602][ T1150] loop6: rw=4096, sector=2, nr_sectors = 2 limit=0
[  541.387369][ T1150] EXT4-fs (loop6): unable to read superblock
[  541.569554][ T1164] loop5: detected capacity change from 0 to 512
[  541.622194][ T1164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  541.649043][ T1164] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  541.693885][ T1175] loop6: detected capacity change from 0 to 128
[  541.732178][ T1177] SELinux:  policydb magic number 0x40 does not match expected magic number 0xf97cff8c
[  541.732347][ T1175] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  541.756252][ T1177] SELinux: failed to load policy
[  541.781250][ T1175] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  541.828879][ T1182] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7387'.
[  541.910547][T28609] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  542.032717][ T1164] EXT4-fs error (device loop5): ext4_empty_dir:3078: inode #12: comm syz.5.7381: Directory hole found for htree leaf block 0
[  542.061084][ T1164] EXT4-fs (loop5): Remounting filesystem read-only
[  542.070410][ T1122] syz_tun: left allmulticast mode
[  542.107755][ T1200] FAULT_INJECTION: forcing a failure.
[  542.107755][ T1200] name failslab, interval 1, probability 0, space 0, times 0
[  542.120559][ T1200] CPU: 1 UID: 0 PID: 1200 Comm: syz.2.7393 Tainted: G        W           6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) 
[  542.120617][ T1200] Tainted: [W]=WARN
[  542.120624][ T1200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  542.120700][ T1200] Call Trace:
[  542.120708][ T1200]  <TASK>
[  542.120716][ T1200]  __dump_stack+0x1d/0x30
[  542.120737][ T1200]  dump_stack_lvl+0xe8/0x140
[  542.120762][ T1200]  dump_stack+0x15/0x1b
[  542.120781][ T1200]  should_fail_ex+0x265/0x280
[  542.120817][ T1200]  should_failslab+0x8c/0xb0
[  542.120845][ T1200]  __kvmalloc_node_noprof+0x123/0x4e0
[  542.120943][ T1200]  ? traverse+0x9d/0x3a0
[  542.120970][ T1200]  ? __rcu_read_unlock+0x4f/0x70
[  542.121033][ T1200]  traverse+0x9d/0x3a0
[  542.121069][ T1200]  seq_lseek+0xb5/0x170
[  542.121101][ T1200]  __x64_sys_lseek+0xe5/0x160
[  542.121140][ T1200]  x64_sys_call+0x2d2a/0x2fb0
[  542.121228][ T1200]  do_syscall_64+0xd2/0x200
[  542.121246][ T1200]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  542.121280][ T1200]  ? clear_bhb_loop+0x40/0x90
[  542.121307][ T1200]  ? clear_bhb_loop+0x40/0x90
[  542.121369][ T1200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.121390][ T1200] RIP: 0033:0x7fda744ee929
[  542.121430][ T1200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  542.121451][ T1200] RSP: 002b:00007fda72b57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008
[  542.121469][ T1200] RAX: ffffffffffffffda RBX: 00007fda74715fa0 RCX: 00007fda744ee929
[  542.121481][ T1200] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000000000006
[  542.121492][ T1200] RBP: 00007fda72b57090 R08: 0000000000000000 R09: 0000000000000000
[  542.121506][ T1200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  542.121521][ T1200] R13: 0000000000000000 R14: 00007fda74715fa0 R15: 00007ffca67a11d8
[  542.121556][ T1200]  </TASK>
[  542.773328][ T1208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1208 comm=syz.0.7396
[  542.848276][ T1213] netlink: 108 bytes leftover after parsing attributes in process `syz.6.7397'.
[  542.959854][ T1218] SELinux:  policydb magic number 0x40 does not match expected magic number 0xf97cff8c
[  543.053145][ T1218] SELinux: failed to load policy
[  543.133511][T32089] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  543.194425][   T29] kauditd_printk_skb: 728 callbacks suppressed
[  543.194446][   T29] audit: type=1400 audit(2000002695.204:89642): avc:  denied  { read write } for  pid=30156 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  543.225458][   T29] audit: type=1400 audit(2000002695.204:89643): avc:  denied  { open } for  pid=30156 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  543.251613][ T3447] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  543.262291][ T3447] Quota error (device loop5): write_blk: dquota write failed
[  543.269766][ T3447] Quota error (device loop5): free_dqentry: Can't write quota data block 5
[  543.355519][   T29] audit: type=1400 audit(2000002695.247:89644): avc:  denied  { prog_load } for  pid=1221 comm="syz.0.7400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  543.374898][   T29] audit: type=1400 audit(2000002695.247:89645): avc:  denied  { bpf } for  pid=1221 comm="syz.0.7400" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  543.395909][   T29] audit: type=1400 audit(2000002695.247:89646): avc:  denied  { perfmon } for  pid=1221 comm="syz.0.7400" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  543.417236][   T29] audit: type=1400 audit(2000002695.258:89647): avc:  denied  { prog_load } for  pid=1221 comm="syz.0.7400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  543.436948][   T29] audit: type=1400 audit(2000002695.258:89648): avc:  denied  { bpf } for  pid=1221 comm="syz.0.7400" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  543.458103][   T29] audit: type=1400 audit(2000002695.258:89649): avc:  denied  { prog_run } for  pid=1221 comm="syz.0.7400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  543.465183][ T1234] FAULT_INJECTION: forcing a failure.
[  543.465183][ T1234] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  543.492804][ T1234] CPU: 0 UID: 0 PID: 1234 Comm: syz.2.7404 Tainted: G        W           6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) 
[  543.492846][ T1234] Tainted: [W]=WARN
[  543.492854][ T1234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  543.492916][ T1234] Call Trace:
[  543.492923][ T1234]  <TASK>
[  543.492933][ T1234]  __dump_stack+0x1d/0x30
[  543.492959][ T1234]  dump_stack_lvl+0xe8/0x140
[  543.492979][ T1234]  dump_stack+0x15/0x1b
[  543.492995][ T1234]  should_fail_ex+0x265/0x280
[  543.493037][ T1234]  should_fail_alloc_page+0xf2/0x100
[  543.493092][ T1234]  __alloc_frozen_pages_noprof+0xff/0x360
[  543.493136][ T1234]  alloc_pages_mpol+0xb3/0x250
[  543.493173][ T1234]  vma_alloc_folio_noprof+0x1aa/0x300
[  543.493289][ T1234]  do_wp_page+0x673/0x2400
[  543.493335][ T1234]  ? __rcu_read_lock+0x37/0x50
[  543.493366][ T1234]  handle_mm_fault+0x77d/0x2be0
[  543.493398][ T1234]  ? mas_walk+0xf2/0x120
[  543.493504][ T1234]  do_user_addr_fault+0x636/0x1090
[  543.493543][ T1234]  ? fpregs_assert_state_consistent+0xb4/0xe0
[  543.493581][ T1234]  exc_page_fault+0x62/0xa0
[  543.493660][ T1234]  asm_exc_page_fault+0x26/0x30
[  543.493685][ T1234] RIP: 0033:0x7fda743b0d50
[  543.493705][ T1234] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41
[  543.493726][ T1234] RSP: 002b:00007fda72b144a0 EFLAGS: 00010202
[  543.493746][ T1234] RAX: 0000000000011005 RBX: 00007fda72b14540 RCX: 0000000000000101
[  543.493814][ T1234] RDX: 00000000000001ff RSI: 0000000000000800 RDI: 00007fda72b145e0
[  543.493826][ T1234] RBP: 0000000000000102 R08: 00007fda6a6f5000 R09: 0000000000000008
[  543.493838][ T1234] R10: 0000200000000f42 R11: 000000000000071a R12: 0000000000000601
[  543.493850][ T1234] R13: 00007fda7458c120 R14: 0000000000000015 R15: 00007fda72b145e0
[  543.493872][ T1234]  </TASK>
[  543.493885][ T1234] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  543.672530][ T1238] netlink: 'syz.8.7405': attribute type 27 has an invalid length.
[  543.702248][ T1243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  543.706391][ T1238] netlink: 'syz.8.7405': attribute type 3 has an invalid length.
[  543.706410][ T1238] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7405'.
[  543.757686][ T1243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  543.771524][ T1238] loop8: detected capacity change from 0 to 256
[  543.935297][ T1255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7410'.
[  543.998358][T32264] hid-generic 0004:0006:020A.000E: unknown main item tag 0x4
[  544.006106][T32264] hid-generic 0004:0006:020A.000E: item fetching failed at offset 5/6
[  544.025632][T32264] hid-generic 0004:0006:020A.000E: probe with driver hid-generic failed with error -22
[  544.200775][ T1278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1278 comm=syz.2.7417
[  544.377055][ T1294] netlink: 'syz.8.7419': attribute type 27 has an invalid length.
[  544.386045][ T1294] netlink: 'syz.8.7419': attribute type 3 has an invalid length.
[  544.394888][ T1294] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7419'.
[  544.436035][ T1296] SELinux:  policydb magic number 0x40 does not match expected magic number 0xf97cff8c
[  544.471782][ T1296] SELinux: failed to load policy
[  544.517064][ T1297] loop8: detected capacity change from 0 to 256
[  544.683602][ T1299] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10)
[  544.690270][ T1299] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  544.693893][ T1307] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7424'.
[  544.699623][ T1299] vhci_hcd vhci_hcd.0: Device attached
[  544.946685][ T1310] netlink: 136 bytes leftover after parsing attributes in process `syz.5.7425'.
[  544.971593][ T1324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1324 comm=syz.0.7430
[  544.989683][T32259] usb 13-1: new low-speed USB device number 3 using vhci_hcd
[  545.085607][ T1329] netlink: 'syz.2.7432': attribute type 4 has an invalid length.
[  545.115976][ T1331] SELinux:  Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped).
[  545.161948][ T1339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7437'.
[  545.207378][ T1344] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7435'.
[  545.263914][ T1305] vhci_hcd: connection reset by peer
[  545.271081][T30837] vhci_hcd: stop threads
[  545.275380][T30837] vhci_hcd: release socket
[  545.279912][T30837] vhci_hcd: disconnect device
[  545.518663][ T1384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1384 comm=syz.5.7444
[  545.635060][ T1390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7448'.
[  546.069366][ T1435] loop8: detected capacity change from 0 to 128
[  546.179101][ T1435] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  546.198301][ T1436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7452'.
[  546.208733][ T1435] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  546.395861][T30156] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  546.416496][ T1447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1447 comm=syz.2.7458
[  546.496399][ T1480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  546.496472][ T1475] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7460'.
[  546.509770][ T1480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  546.748838][ T1448] dvmrp1: entered allmulticast mode
[  546.757219][ T1448] dvmrp1: left allmulticast mode
[  546.972477][ T1503] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  547.001709][ T1503] SELinux: failed to load policy
[  547.120028][ T1508] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  547.131382][ T1508] SELinux: failed to load policy
[  547.277452][ T1454] wireguard0: entered promiscuous mode
[  547.284331][ T1454] wireguard0: entered allmulticast mode
[  547.293684][ T1513] netlink: 'syz.5.7470': attribute type 27 has an invalid length.
[  547.301577][ T1513] netlink: 'syz.5.7470': attribute type 3 has an invalid length.
[  547.331414][ T1513] loop5: detected capacity change from 0 to 256
[  547.466419][ T1519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1519 comm=syz.8.7472
[  547.552881][ T6679] Process accounting resumed
[  547.723334][ T1565] loop8: detected capacity change from 0 to 128
[  547.744128][ T1565] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  547.759484][ T1565] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  547.835151][T30156] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  547.867729][   T29] kauditd_printk_skb: 933 callbacks suppressed
[  547.867744][   T29] audit: type=1400 audit(2000003981.215:90583): avc:  denied  { read write } for  pid=1578 comm="syz.8.7481" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  547.897616][   T29] audit: type=1400 audit(2000003981.215:90584): avc:  denied  { open } for  pid=1578 comm="syz.8.7481" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  547.924458][ T1585] netlink: 'syz.6.7482': attribute type 27 has an invalid length.
[  547.932548][ T1585] netlink: 'syz.6.7482': attribute type 3 has an invalid length.
[  547.940454][   T29] audit: type=1400 audit(2000003981.237:90585): avc:  denied  { create } for  pid=1582 comm="syz.2.7483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  547.961151][   T29] audit: type=1400 audit(2000003981.237:90586): avc:  denied  { write } for  pid=1582 comm="syz.2.7483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  547.981690][   T29] audit: type=1400 audit(2000003981.237:90587): avc:  denied  { read } for  pid=1582 comm="syz.2.7483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  548.002194][   T29] audit: type=1400 audit(2000003981.247:90588): avc:  denied  { create } for  pid=1582 comm="syz.2.7483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  548.022115][   T29] audit: type=1400 audit(2000003981.247:90589): avc:  denied  { setopt } for  pid=1582 comm="syz.2.7483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  548.041998][   T29] audit: type=1400 audit(2000003981.247:90590): avc:  denied  { map_create } for  pid=1578 comm="syz.8.7481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  548.061819][   T29] audit: type=1400 audit(2000004237.313:90591): avc:  denied  { prog_load } for  pid=1578 comm="syz.8.7481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  548.081158][   T29] audit: type=1400 audit(2000004237.313:90592): avc:  denied  { bpf } for  pid=1578 comm="syz.8.7481" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  548.133417][ T1585] loop6: detected capacity change from 0 to 256
[  548.790598][ T1600] sch_fq: defrate 4294967295 ignored.
[  548.890551][ T1605] __nla_validate_parse: 8 callbacks suppressed
[  548.890566][ T1605] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7488'.
[  548.929255][ T1611] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7490'.
[  549.038799][ T1615] loop6: detected capacity change from 0 to 512
[  549.055561][ T1615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  549.084706][ T1615] ext4 filesystem being mounted at /231/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  549.161094][T28609] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  549.210138][ T1626] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7498'.
[  549.227881][ T1626] hsr_slave_0: left promiscuous mode
[  549.240692][ T1626] hsr_slave_1: left promiscuous mode
[  549.251820][ T1630] FAULT_INJECTION: forcing a failure.
[  549.251820][ T1630] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  549.266094][ T1630] CPU: 0 UID: 0 PID: 1630 Comm: syz.6.7497 Tainted: G        W           6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) 
[  549.266139][ T1630] Tainted: [W]=WARN
[  549.266207][ T1630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  549.266231][ T1630] Call Trace:
[  549.266240][ T1630]  <TASK>
[  549.266252][ T1630]  __dump_stack+0x1d/0x30
[  549.266279][ T1630]  dump_stack_lvl+0xe8/0x140
[  549.266304][ T1630]  dump_stack+0x15/0x1b
[  549.266326][ T1630]  should_fail_ex+0x265/0x280
[  549.266364][ T1630]  should_fail+0xb/0x20
[  549.266420][ T1630]  should_fail_usercopy+0x1a/0x20
[  549.266451][ T1630]  strncpy_from_user+0x25/0x230
[  549.266532][ T1630]  ? perf_event_read_local+0x4af/0x4f0
[  549.266568][ T1630]  strncpy_from_user_nofault+0x68/0xf0
[  549.266628][ T1630]  bpf_probe_read_user_str+0x2a/0x70
[  549.266705][ T1630]  bpf_prog_6fb7ada547f278f2+0x3e/0x44
[  549.266728][ T1630]  bpf_trace_run2+0x104/0x1c0
[  549.266766][ T1630]  ? kobject_uevent_env+0x28d/0x570
[  549.266832][ T1630]  ? __wake_up+0x88/0xb0
[  549.266883][ T1630]  ? kobject_uevent_env+0x28d/0x570
[  549.266908][ T1630]  __traceiter_kfree+0x2b/0x50
[  549.266932][ T1630]  ? kobject_uevent_env+0x28d/0x570
[  549.267007][ T1630]  kfree+0x27b/0x320
[  549.267041][ T1630]  kobject_uevent_env+0x28d/0x570
[  549.267075][ T1630]  ? device_pm_check_callbacks+0x683/0x6a0
[  549.267173][ T1630]  kobject_uevent+0x1d/0x30
[  549.267206][ T1630]  device_del+0x710/0x790
[  549.267241][ T1630]  device_unregister+0x15/0x40
[  549.267293][ T1630]  bdi_unregister+0x307/0x3a0
[  549.267320][ T1630]  __del_gendisk+0x2c3/0x570
[  549.267348][ T1630]  del_gendisk+0xac/0xf0
[  549.267395][ T1630]  loop_remove+0x26/0x80
[  549.267428][ T1630]  loop_control_ioctl+0x3b3/0x3f0
[  549.267512][ T1630]  ? __pfx_loop_control_ioctl+0x10/0x10
[  549.267548][ T1630]  __se_sys_ioctl+0xce/0x140
[  549.267637][ T1630]  __x64_sys_ioctl+0x43/0x50
[  549.267688][ T1630]  x64_sys_call+0x19a8/0x2fb0
[  549.267744][ T1630]  do_syscall_64+0xd2/0x200
[  549.267767][ T1630]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  549.267822][ T1630]  ? clear_bhb_loop+0x40/0x90
[  549.267900][ T1630]  ? clear_bhb_loop+0x40/0x90
[  549.267976][ T1630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.267999][ T1630] RIP: 0033:0x7fe391cde929
[  549.268019][ T1630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  549.268039][ T1630] RSP: 002b:00007fe390347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  549.268061][ T1630] RAX: ffffffffffffffda RBX: 00007fe391f05fa0 RCX: 00007fe391cde929
[  549.268073][ T1630] RDX: 0000000000000003 RSI: 0000000000004c81 RDI: 000000000000000b
[  549.268151][ T1630] RBP: 00007fe390347090 R08: 0000000000000000 R09: 0000000000000000
[  549.268163][ T1630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  549.268176][ T1630] R13: 0000000000000000 R14: 00007fe391f05fa0 R15: 00007ffef7135fe8
[  549.268196][ T1630]  </TASK>
[  549.578655][ T1633] loop8: detected capacity change from 0 to 2048
[  549.596933][ T1633] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  549.621547][ T1642] netlink: 'syz.2.7496': attribute type 27 has an invalid length.
[  549.629595][ T1642] netlink: 'syz.2.7496': attribute type 3 has an invalid length.
[  549.637362][ T1642] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7496'.
[  549.688952][T32259] usb 13-1: enqueue for inactive port 0
[  549.716481][T32259] usb 13-1: enqueue for inactive port 0
[  549.790901][T32259] vhci_hcd: vhci_device speed not set
[  549.840098][ T1654] netlink: 'syz.8.7499': attribute type 4 has an invalid length.
[  549.903885][ T1660] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7503'.
[  550.103590][ T1663] loop6: detected capacity change from 0 to 128
[  550.644615][ T1681] loop5: detected capacity change from 0 to 128
[  550.701299][ T1681] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  550.745243][ T1692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7511'.
[  550.759423][ T1681] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  550.863022][T32089] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  550.888584][ T1693] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7512'.
[  550.985271][ T1710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7514'.
[  550.986354][T30156] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  551.058466][ T1721] netlink: 'syz.2.7517': attribute type 27 has an invalid length.
[  551.067504][ T1721] netlink: 'syz.2.7517': attribute type 3 has an invalid length.
[  551.075270][ T1721] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7517'.
[  551.162727][ T1732] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7524'.
[  551.242107][ T1737] loop6: detected capacity change from 0 to 128
[  551.273429][ T1737] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  551.287446][ T1738] loop5: detected capacity change from 0 to 164
[  551.300692][ T1737] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  551.315459][ T1743] loop8: detected capacity change from 0 to 128
[  551.330646][ T1743] FAT-fs (loop8): Directory bread(block 32) failed
[  551.337360][ T1743] FAT-fs (loop8): Directory bread(block 33) failed
[  551.344113][ T1743] FAT-fs (loop8): Directory bread(block 34) failed
[  551.352815][ T1743] FAT-fs (loop8): Directory bread(block 35) failed
[  551.359969][ T1743] FAT-fs (loop8): Directory bread(block 36) failed
[  551.360874][T28609] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  551.366981][ T1743] FAT-fs (loop8): Directory bread(block 37) failed
[  551.367021][ T1743] FAT-fs (loop8): Directory bread(block 38) failed
[  551.367038][ T1743] FAT-fs (loop8): Directory bread(block 39) failed
[  551.367118][ T1743] FAT-fs (loop8): Directory bread(block 40) failed
[  551.367138][ T1743] FAT-fs (loop8): Directory bread(block 41) failed
[  551.427954][ T1743] syz.8.7528: attempt to access beyond end of device
[  551.427954][ T1743] loop8: rw=0, sector=4108, nr_sectors = 4 limit=128
[  551.452517][ T1743] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 196)
[  551.461918][ T1743] FAT-fs (loop8): Filesystem has been set read-only
[  551.534245][ T1752] sit0: left allmulticast mode
[  551.547791][ T1752] wireguard0: left promiscuous mode
[  551.553130][ T1752] wireguard0: left allmulticast mode
[  551.714332][ T1776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  551.735215][ T1776] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  551.850755][ T1784] geneve0: entered allmulticast mode
[  552.045517][ T1800] net_ratelimit: 77 callbacks suppressed
[  552.045531][ T1800] openvswitch: netlink: Message has 6 unknown bytes.
[  552.338515][ T1826] netlink: 'syz.6.7554': attribute type 27 has an invalid length.
[  552.347088][ T1826] netlink: 'syz.6.7554': attribute type 3 has an invalid length.
[  552.372850][ T1826] loop6: detected capacity change from 0 to 256
[  552.533563][   T29] kauditd_printk_skb: 1091 callbacks suppressed
[  552.533618][   T29] audit: type=1400 audit(2000005010.199:91682): avc:  denied  { read } for  pid=1834 comm="syz.5.7558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  552.587383][   T29] audit: type=1400 audit(2000005010.285:91683): avc:  denied  { map_create } for  pid=1834 comm="syz.5.7558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  552.606861][   T29] audit: type=1400 audit(2000005010.285:91684): avc:  denied  { bpf } for  pid=1834 comm="syz.5.7558" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  552.663457][   T29] audit: type=1400 audit(2000005010.317:91685): avc:  denied  { read } for  pid=1834 comm="syz.5.7558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  552.684031][   T29] audit: type=1400 audit(2000005010.339:91686): avc:  denied  { map_read map_write } for  pid=1834 comm="syz.5.7558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  552.704063][   T29] audit: type=1400 audit(2000005010.339:91687): avc:  denied  { prog_load } for  pid=1834 comm="syz.5.7558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  552.723424][   T29] audit: type=1400 audit(2000005010.339:91688): avc:  denied  { bpf } for  pid=1834 comm="syz.5.7558" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  552.744465][   T29] audit: type=1400 audit(2000005010.339:91689): avc:  denied  { perfmon } for  pid=1834 comm="syz.5.7558" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  552.766052][   T29] audit: type=1400 audit(2000005010.339:91690): avc:  denied  { write } for  pid=1834 comm="syz.5.7558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  552.786785][   T29] audit: type=1400 audit(2000005010.339:91691): avc:  denied  { map_create } for  pid=1834 comm="syz.5.7558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  552.817191][ T1840] loop5: detected capacity change from 0 to 8192
[  552.877246][ T1840] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  553.070886][ T1861] wireguard0: entered promiscuous mode
[  553.076541][ T1861] wireguard0: entered allmulticast mode
[  553.091331][ T1860] netlink: 'syz.8.7566': attribute type 1 has an invalid length.
[  553.537055][ T1908] netlink: 'syz.6.7578': attribute type 27 has an invalid length.
[  553.545202][ T1908] netlink: 'syz.6.7578': attribute type 3 has an invalid length.
[  553.621827][ T1916] FAULT_INJECTION: forcing a failure.
[  553.621827][ T1916] name failslab, interval 1, probability 0, space 0, times 0
[  553.634633][ T1916] CPU: 1 UID: 0 PID: 1916 Comm: syz.8.7580 Tainted: G        W           6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) 
[  553.634673][ T1916] Tainted: [W]=WARN
[  553.634681][ T1916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  553.634696][ T1916] Call Trace:
[  553.634704][ T1916]  <TASK>
[  553.634713][ T1916]  __dump_stack+0x1d/0x30
[  553.634770][ T1916]  dump_stack_lvl+0xe8/0x140
[  553.634820][ T1916]  dump_stack+0x15/0x1b
[  553.634836][ T1916]  should_fail_ex+0x265/0x280
[  553.634870][ T1916]  ? genl_start+0x117/0x390
[  553.634893][ T1916]  should_failslab+0x8c/0xb0
[  553.634916][ T1916]  __kmalloc_cache_noprof+0x4c/0x320
[  553.634997][ T1916]  genl_start+0x117/0x390
[  553.635024][ T1916]  __netlink_dump_start+0x331/0x520
[  553.635066][ T1916]  genl_family_rcv_msg_dumpit+0x115/0x180
[  553.635099][ T1916]  ? __pfx_genl_start+0x10/0x10
[  553.635129][ T1916]  ? __pfx_genl_dumpit+0x10/0x10
[  553.635231][ T1916]  ? __pfx_genl_done+0x10/0x10
[  553.635267][ T1916]  genl_rcv_msg+0x3f0/0x460
[  553.635293][ T1916]  ? __pfx_nl80211_dump_mpath+0x10/0x10
[  553.635464][ T1916]  netlink_rcv_skb+0x120/0x220
[  553.635501][ T1916]  ? __pfx_genl_rcv_msg+0x10/0x10
[  553.635532][ T1916]  genl_rcv+0x28/0x40
[  553.635619][ T1916]  netlink_unicast+0x59e/0x670
[  553.635651][ T1916]  netlink_sendmsg+0x58b/0x6b0
[  553.635673][ T1916]  ? __pfx_netlink_sendmsg+0x10/0x10
[  553.635692][ T1916]  __sock_sendmsg+0x142/0x180
[  553.635753][ T1916]  ____sys_sendmsg+0x31e/0x4e0
[  553.635867][ T1916]  ___sys_sendmsg+0x17b/0x1d0
[  553.635997][ T1916]  __x64_sys_sendmsg+0xd4/0x160
[  553.636124][ T1916]  x64_sys_call+0x2999/0x2fb0
[  553.636146][ T1916]  do_syscall_64+0xd2/0x200
[  553.636164][ T1916]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  553.636191][ T1916]  ? clear_bhb_loop+0x40/0x90
[  553.636212][ T1916]  ? clear_bhb_loop+0x40/0x90
[  553.636299][ T1916]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.636320][ T1916] RIP: 0033:0x7feb67c8e929
[  553.636336][ T1916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  553.636354][ T1916] RSP: 002b:00007feb662f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  553.636373][ T1916] RAX: ffffffffffffffda RBX: 00007feb67eb5fa0 RCX: 00007feb67c8e929
[  553.636432][ T1916] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004
[  553.636444][ T1916] RBP: 00007feb662f7090 R08: 0000000000000000 R09: 0000000000000000
[  553.636491][ T1916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  553.636503][ T1916] R13: 0000000000000000 R14: 00007feb67eb5fa0 R15: 00007fff3eefdb78
[  553.636525][ T1916]  </TASK>
[  553.940826][ T1908] loop6: detected capacity change from 0 to 256
[  554.000667][ T1921] loop8: detected capacity change from 0 to 2048
[  554.031248][ T1921] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  554.142769][T30156] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  554.464802][ T1950] loop6: detected capacity change from 0 to 1024
[  554.489210][ T1950] EXT4-fs: Ignoring removed nobh option
[  554.494866][ T1950] EXT4-fs: Ignoring removed bh option
[  554.506638][ T1958] __nla_validate_parse: 8 callbacks suppressed
[  554.506660][ T1958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7590'.
[  554.538695][ T1950] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  554.582759][ T1962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7592'.
[  554.718763][ T1966] loop5: detected capacity change from 0 to 164
[  554.820629][ T1945] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.7588: Allocating blocks 497-513 which overlap fs metadata
[  554.828499][ T1966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  554.868289][ T1966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  554.947590][ T1977] loop8: detected capacity change from 0 to 512
[  554.956897][ T1950] EXT4-fs (loop6): pa ffff888106e9e460: logic 496, phys. 241, len 17
[  554.965071][ T1950] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  555.108617][T28609] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  555.246862][ T2010] netlink: 'syz.6.7600': attribute type 27 has an invalid length.
[  555.254881][ T2010] netlink: 'syz.6.7600': attribute type 3 has an invalid length.
[  555.263770][ T2010] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7600'.
[  555.303174][ T2010] loop6: detected capacity change from 0 to 256
[  555.321897][ T2016] netlink: 44 bytes leftover after parsing attributes in process `syz.8.7603'.
[  555.659370][ T2129] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7605'.
[  555.670943][ T2003] chnl_net:caif_netlink_parms(): no params data found
[  555.781739][ T2003] bridge0: port 1(bridge_slave_0) entered blocking state
[  555.789064][ T2003] bridge0: port 1(bridge_slave_0) entered disabled state
[  555.807275][ T2003] bridge_slave_0: entered allmulticast mode
[  555.815670][ T2003] bridge_slave_0: entered promiscuous mode
[  555.825127][ T2003] bridge0: port 2(bridge_slave_1) entered blocking state
[  555.833487][ T2003] bridge0: port 2(bridge_slave_1) entered disabled state
[  555.842084][ T2003] bridge_slave_1: entered allmulticast mode
[  555.850149][ T2003] bridge_slave_1: entered promiscuous mode
[  555.878266][ T2003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  555.891583][ T2003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  555.927926][ T2003] team0: Port device team_slave_0 added
[  555.947864][ T2003] team0: Port device team_slave_1 added
[  556.003568][ T2003] batman_adv: batadv0: Adding interface: batadv_slave_0
[  556.011753][ T2003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  556.038351][ T2003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  556.056533][ T2003] batman_adv: batadv0: Adding interface: batadv_slave_1
[  556.064690][ T2003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  556.091025][ T2003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  556.170468][ T2003] hsr_slave_0: entered promiscuous mode
[  556.178386][ T2003] hsr_slave_1: entered promiscuous mode
[  556.193785][ T2003] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  556.205090][ T2003] Cannot create hsr debugfs directory
[  556.253304][ T2322] netlink: 'syz.8.7613': attribute type 4 has an invalid length.
[  556.253309][ T2324] netlink: 'syz.8.7613': attribute type 4 has an invalid length.
[  556.352061][ T2347] FAULT_INJECTION: forcing a failure.
[  556.352061][ T2347] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  556.365306][ T2347] CPU: 1 UID: 0 PID: 2347 Comm: syz.6.7615 Tainted: G        W           6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) 
[  556.365341][ T2347] Tainted: [W]=WARN
[  556.365348][ T2347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  556.365361][ T2347] Call Trace:
[  556.365366][ T2347]  <TASK>
[  556.365374][ T2347]  __dump_stack+0x1d/0x30
[  556.365396][ T2347]  dump_stack_lvl+0xe8/0x140
[  556.365474][ T2347]  dump_stack+0x15/0x1b
[  556.365490][ T2347]  should_fail_ex+0x265/0x280
[  556.365531][ T2347]  should_fail+0xb/0x20
[  556.365565][ T2347]  should_fail_usercopy+0x1a/0x20
[  556.365653][ T2347]  strncpy_from_user+0x25/0x230
[  556.365684][ T2347]  ? kmem_cache_alloc_noprof+0x186/0x310
[  556.365714][ T2347]  ? getname_flags+0x80/0x3b0
[  556.365781][ T2347]  getname_flags+0xae/0x3b0
[  556.365809][ T2347]  user_path_at+0x28/0x130
[  556.365843][ T2347]  do_sys_truncate+0x5c/0x130
[  556.365864][ T2347]  __x64_sys_truncate+0x31/0x40
[  556.365914][ T2347]  x64_sys_call+0x2920/0x2fb0
[  556.365939][ T2347]  do_syscall_64+0xd2/0x200
[  556.365961][ T2347]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  556.365994][ T2347]  ? clear_bhb_loop+0x40/0x90
[  556.366018][ T2347]  ? clear_bhb_loop+0x40/0x90
[  556.366115][ T2347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.366141][ T2347] RIP: 0033:0x7fe391cde929
[  556.366158][ T2347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  556.366253][ T2347] RSP: 002b:00007fe390347038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  556.366271][ T2347] RAX: ffffffffffffffda RBX: 00007fe391f05fa0 RCX: 00007fe391cde929
[  556.366283][ T2347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040
[  556.366295][ T2347] RBP: 00007fe390347090 R08: 0000000000000000 R09: 0000000000000000
[  556.366306][ T2347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  556.366322][ T2347] R13: 0000000000000001 R14: 00007fe391f05fa0 R15: 00007ffef7135fe8
[  556.366347][ T2347]  </TASK>
[  556.719485][ T2386] netlink: 'syz.8.7619': attribute type 27 has an invalid length.
[  556.728559][ T2386] netlink: 'syz.8.7619': attribute type 3 has an invalid length.
[  556.737365][ T2386] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7619'.
[  556.791179][ T2386] loop8: detected capacity change from 0 to 256
[  556.839802][ T2395] FAULT_INJECTION: forcing a failure.
[  556.839802][ T2395] name failslab, interval 1, probability 0, space 0, times 0
[  556.852636][ T2395] CPU: 1 UID: 0 PID: 2395 Comm: syz.5.7623 Tainted: G        W           6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) 
[  556.852672][ T2395] Tainted: [W]=WARN
[  556.852678][ T2395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  556.852691][ T2395] Call Trace:
[  556.852698][ T2395]  <TASK>
[  556.852708][ T2395]  __dump_stack+0x1d/0x30
[  556.852735][ T2395]  dump_stack_lvl+0xe8/0x140
[  556.852761][ T2395]  dump_stack+0x15/0x1b
[  556.852782][ T2395]  should_fail_ex+0x265/0x280
[  556.852819][ T2395]  should_failslab+0x8c/0xb0
[  556.852849][ T2395]  kmem_cache_alloc_noprof+0x50/0x310
[  556.852879][ T2395]  ? vm_area_dup+0x33/0x2c0
[  556.852909][ T2395]  vm_area_dup+0x33/0x2c0
[  556.852940][ T2395]  dup_mmap+0x501/0xf20
[  556.852974][ T2395]  copy_mm+0x11a/0x370
[  556.853001][ T2395]  copy_process+0xcf1/0x1fe0
[  556.853039][ T2395]  kernel_clone+0x16c/0x5b0
[  556.853071][ T2395]  __x64_sys_clone+0xe6/0x120
[  556.853109][ T2395]  x64_sys_call+0x2c59/0x2fb0
[  556.853146][ T2395]  do_syscall_64+0xd2/0x200
[  556.853169][ T2395]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  556.853203][ T2395]  ? clear_bhb_loop+0x40/0x90
[  556.853229][ T2395]  ? clear_bhb_loop+0x40/0x90
[  556.853253][ T2395]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.853278][ T2395] RIP: 0033:0x7f21738fe929
[  556.853297][ T2395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  556.853321][ T2395] RSP: 002b:00007f2171f66fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  556.853345][ T2395] RAX: ffffffffffffffda RBX: 00007f2173b25fa0 RCX: 00007f21738fe929
[  556.853361][ T2395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026801000
[  556.853376][ T2395] RBP: 00007f2171f67090 R08: 0000000000000000 R09: 0000000000000000
[  556.853389][ T2395] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002
[  556.853400][ T2395] R13: 0000000000000000 R14: 00007f2173b25fa0 R15: 00007ffd56405cf8
[  556.853419][ T2395]  </TASK>
[  557.154854][ T2410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7625'.
[  557.170444][ T2003] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  557.193564][ T2003] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  557.203632][   T29] kauditd_printk_skb: 1000 callbacks suppressed
[  557.203649][   T29] audit: type=1400 audit(2000005783.232:92692): avc:  denied  { read write } for  pid=2409 comm="syz.5.7625" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  557.234509][   T29] audit: type=1400 audit(2000005783.232:92693): avc:  denied  { open } for  pid=2409 comm="syz.5.7625" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  557.259459][ T2410] loop5: detected capacity change from 0 to 256
[  557.276674][ T2410] FAT-fs (loop5): bogus number of FAT sectors
[  557.282864][ T2410] FAT-fs (loop5): Can't find a valid FAT filesystem
[  557.295619][ T2003] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  557.306112][ T2003] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  557.342499][   T29] audit: type=1400 audit(2000005783.297:92694): avc:  denied  { ioctl } for  pid=2409 comm="syz.5.7625" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  557.368226][   T29] audit: type=1400 audit(2000005783.318:92695): avc:  denied  { mounton } for  pid=2409 comm="syz.5.7625" path="/104/file0" dev="tmpfs" ino=571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  557.391128][   T29] audit: type=1400 audit(2000005783.329:92696): avc:  denied  { read write } for  pid=2409 comm="syz.5.7625" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  557.415503][   T29] audit: type=1400 audit(2000005783.329:92697): avc:  denied  { open } for  pid=2409 comm="syz.5.7625" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  557.439645][   T29] audit: type=1400 audit(2000005783.329:92698): avc:  denied  { ioctl } for  pid=2409 comm="syz.5.7625" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  557.465451][   T29] audit: type=1400 audit(2000005783.361:92699): avc:  denied  { setopt } for  pid=2409 comm="syz.5.7625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  557.485340][   T29] audit: type=1400 audit(2000005783.382:92700): avc:  denied  { create } for  pid=2003 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  557.506162][   T29] audit: type=1400 audit(2000005783.382:92701): avc:  denied  { write } for  pid=2003 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  557.592449][    C1] ==================================================================
[  557.600596][    C1] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_disable_cb
[  557.608873][    C1] 
[  557.611215][    C1] read to 0xffff88810270c578 of 2 bytes by interrupt on cpu 0:
[  557.618774][    C1]  virtqueue_disable_cb+0x58/0x150
[  557.623925][    C1]  skb_xmit_done+0x65/0x140
[  557.628443][    C1]  vring_interrupt+0x155/0x180
[  557.633231][    C1]  __handle_irq_event_percpu+0x90/0x440
[  557.638791][    C1]  handle_irq_event+0x64/0xf0
[  557.643522][    C1]  handle_edge_irq+0x188/0x4f0
[  557.648310][    C1]  __common_interrupt+0x60/0x100
[  557.653295][    C1]  common_interrupt+0x7e/0x90
[  557.657990][    C1]  asm_common_interrupt+0x26/0x40
[  557.663067][    C1]  security_file_permission+0x3e/0x80
[  557.668449][    C1]  vfs_write+0x135/0x8e0
[  557.672737][    C1]  ksys_write+0xda/0x1a0
[  557.677089][    C1]  __x64_sys_write+0x40/0x50
[  557.681695][    C1]  x64_sys_call+0x2cdd/0x2fb0
[  557.686385][    C1]  do_syscall_64+0xd2/0x200
[  557.690924][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.696826][    C1] 
[  557.699154][    C1] write to 0xffff88810270c578 of 2 bytes by interrupt on cpu 1:
[  557.706787][    C1]  virtqueue_disable_cb+0x7a/0x150
[  557.712164][    C1]  start_xmit+0x102/0x12c0
[  557.716604][    C1]  dev_hard_start_xmit+0x122/0x3e0
[  557.721735][    C1]  sch_direct_xmit+0x192/0x550
[  557.726529][    C1]  __dev_queue_xmit+0xe4f/0x1fb0
[  557.731487][    C1]  ip_finish_output2+0x77f/0x8b0
[  557.736474][    C1]  ip_finish_output+0x112/0x290
[  557.741339][    C1]  ip_output+0xad/0x170
[  557.745514][    C1]  __ip_queue_xmit+0xb25/0xb40
[  557.750292][    C1]  ip_queue_xmit+0x39/0x50
[  557.754756][    C1]  __tcp_transmit_skb+0x1641/0x1a60
[  557.760038][    C1]  tcp_write_xmit+0x1210/0x2fd0
[  557.764924][    C1]  __tcp_push_pending_frames+0x6d/0x1b0
[  557.770494][    C1]  tcp_rcv_established+0x9af/0xef0
[  557.775634][    C1]  tcp_v4_do_rcv+0x672/0x740
[  557.780239][    C1]  tcp_v4_rcv+0x1bd7/0x1f60
[  557.784755][    C1]  ip_protocol_deliver_rcu+0x397/0x780
[  557.790230][    C1]  ip_local_deliver_finish+0x184/0x220
[  557.795713][    C1]  ip_local_deliver+0xe8/0x1c0
[  557.800528][    C1]  ip_sublist_rcv+0x56b/0x650
[  557.805259][    C1]  ip_list_rcv+0x261/0x290
[  557.809795][    C1]  __netif_receive_skb_list_core+0x4dc/0x500
[  557.815875][    C1]  netif_receive_skb_list_internal+0x487/0x600
[  557.822046][    C1]  napi_complete_done+0x1a3/0x410
[  557.827084][    C1]  virtnet_poll+0x189f/0x1d10
[  557.831875][    C1]  __napi_poll+0x66/0x3a0
[  557.836214][    C1]  net_rx_action+0x391/0x830
[  557.840813][    C1]  handle_softirqs+0xba/0x290
[  557.845495][    C1]  __irq_exit_rcu+0x3a/0xc0
[  557.850008][    C1]  common_interrupt+0x83/0x90
[  557.854700][    C1]  asm_common_interrupt+0x26/0x40
[  557.859821][    C1]  kcsan_setup_watchpoint+0x415/0x430
[  557.865206][    C1]  __unix_dgram_recvmsg+0x473/0x840
[  557.870445][    C1]  unix_dgram_recvmsg+0x81/0x90
[  557.875319][    C1]  sock_recvmsg_nosec+0x104/0x130
[  557.880360][    C1]  ____sys_recvmsg+0x26f/0x280
[  557.885157][    C1]  ___sys_recvmsg+0x11f/0x370
[  557.889846][    C1]  do_recvmmsg+0x1ef/0x540
[  557.894297][    C1]  __x64_sys_recvmmsg+0xe5/0x170
[  557.899268][    C1]  x64_sys_call+0x1c6a/0x2fb0
[  557.903976][    C1]  do_syscall_64+0xd2/0x200
[  557.908504][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.914511][    C1] 
[  557.916942][    C1] value changed: 0x0000 -> 0x0001
[  557.921976][    C1] 
[  557.924318][    C1] Reported by Kernel Concurrency Sanitizer on:
[  557.930485][    C1] CPU: 1 UID: 0 PID: 2384 Comm: syz.6.7620 Tainted: G        W           6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) 
[  557.944662][    C1] Tainted: [W]=WARN
[  557.948570][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  557.958634][    C1] ==================================================================
[  557.994471][ T2003] 8021q: adding VLAN 0 to HW filter on device bond0
[  558.008691][ T2003] 8021q: adding VLAN 0 to HW filter on device team0
[  558.033571][ T2003] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  558.044176][ T2003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  558.078325][T18921] bridge0: port 1(bridge_slave_0) entered blocking state
[  558.085532][T18921] bridge0: port 1(bridge_slave_0) entered forwarding state
[  558.109630][ T6679] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  558.123989][ T2432] loop8: detected capacity change from 0 to 1024
[  558.131747][ T2432] EXT4-fs: Ignoring removed nomblk_io_submit option
[  558.132824][T18921] bridge0: port 2(bridge_slave_1) entered blocking state
[  558.138782][ T6679] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
SYZFAIL: failed to send rpc
fd=3 want=672 sent=0 n=-1 (errno 32: Broken pipe)
[  558.145447][T18921] bridge0: port 2(bridge_slave_1) entered forwarding state
[  558.193363][ T2432] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  558.297130][ T2432] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  558.297172][ T2432] EXT4-fs: failed to create workqueue
[  558.312290][ T2432] EXT4-fs (loop8): mount failed