last executing test programs:

2m4.635101913s ago: executing program 32 (id=71):
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (fail_nth: 3)

1m48.455838873s ago: executing program 33 (id=260):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115000200fe80000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000700), 0x8)
r1 = dup(0xffffffffffffffff)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r1, 0x20, &(0x7f0000000280)={0x0, 0x0, <r2=>0x0, &(0x7f00000004c0)=""/155, 0x9b}}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x9, 0xc0, &(0x7f0000000800)=""/192, 0x41000, 0x10, '\x00', 0x0, @fallback=0x1a, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x5, 0x9, 0x343, 0x10000}, 0x10, r2, r1, 0x0, &(0x7f0000000940), 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x8, &(0x7f0000000700)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x5e26, 0x800, 0x1, 0x2})
syz_open_dev$evdev(&(0x7f00000039c0), 0x3, 0x8800)
r5 = socket$kcm(0x21, 0x2, 0x2)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
close_range(r4, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x13)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8004}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='tick_stop\x00'}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB], 0x48)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)

1m32.30537967s ago: executing program 34 (id=423):
bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r0}, 0x18)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100)
syz_mount_image$ext4(&(0x7f00000026c0)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000400), 0x0, 0x55f, &(0x7f0000000580)="$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")
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x1380a000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x2}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000700)='kfree\x00', r2}, 0x18)
r3 = socket(0x1e, 0x5, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000240)={0x3, 'veth1_macvtap\x00', {0x6}, 0x101})
connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/190, 0xbe}], 0x1, &(0x7f0000000c80)=""/67, 0x43}, 0x100cce1}], 0x1, 0x20, 0x0)
sendmmsg$inet(r3, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001440)="ff", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="14078c822ddee44f8805a7bc", 0xc}], 0x1}}], 0x2, 0x40480dc)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{0xb32, 0x9, 0xa, 0x62e}, {0x963, 0x4, 0x2d, 0x9}, {0x4, 0x3, 0xc, 0x3}, {0x3ff, 0x2, 0xe, 0x3}, {0x8, 0x40, 0xe, 0x3}, {0x1, 0x6, 0x1, 0x51a7}]})
pipe2(&(0x7f00000006c0), 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
fchmod(r5, 0x7)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)

1m23.612867658s ago: executing program 7 (id=510):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000007000000e27f000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b706000000000000850000000300000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
munmap(&(0x7f0000004000/0x3000)=nil, 0x3000)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x1, @remote}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)

1m23.612301398s ago: executing program 7 (id=511):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x10, &(0x7f0000001680)=ANY=[@ANYRES32=r0, @ANYBLOB="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", @ANYRES16=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10)
copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0x9, 0x0) (async)
capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x3f5d}) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) (async, rerun: 64)
setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000000180)=0x80000001, 0x4) (async, rerun: 64)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64)
syz_emit_ethernet(0x2e, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 64)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00', r5, 0x0, 0x2}, 0x18)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) (async)
write$snapshot(0xffffffffffffffff, 0x0, 0x0) (async)
pipe(&(0x7f0000000300)={<r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x401)
syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$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") (async, rerun: 32)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x154}}, 0x20004808)

1m23.548082574s ago: executing program 7 (id=512):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='kvm_vcpu_wakeup\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
r1 = fsopen(&(0x7f0000000180)='nfsd\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2502000900400000001cdc0dca1d9f6884030006000000000002004e22ac1414bb00000000000000000200010000000000000a000c01000000030005000000000002004e21ac1e0101000000000000000002001300"], 0x70}, 0x1, 0x7}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18)
syz_clone(0x800211, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x300)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400))
timer_settime(0x0, 0x0, &(0x7f0000000840)={{}, {0x0, 0x989680}}, &(0x7f0000000880))
fsmount(r1, 0x0, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00'})
clock_gettime(0x0, &(0x7f0000000440)={<r6=>0x0, <r7=>0x0})
io_getevents(0x0, 0x4, 0x3, &(0x7f00000003c0)=[{}, {}, {}], &(0x7f00000004c0)={r6, r7+10000000})
openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18)

1m23.432778425s ago: executing program 7 (id=516):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0)
read(r0, &(0x7f0000000040)=""/223, 0xdf)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x80002000})
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000180))
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = socket$netlink(0x10, 0x3, 0x14)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1)
sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000001540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001500)={&(0x7f0000000240)={0x12b0, r2, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}, @TIPC_NLA_NODE={0x1008, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x636}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x69e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec43}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @private1, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @loopback, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @mcast2, 0xd}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x40, @loopback, 0x10001}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x12b0}, 0x1, 0x0, 0x0, 0x4000083}, 0x900)
r3 = socket$kcm(0x29, 0x7, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x1a, &(0x7f0000001580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @map_fd={0x18, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x726}}, @alu={0x7, 0x0, 0x7, 0x5, 0xa, 0x10}]}, &(0x7f0000001680)='GPL\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000016c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001700)={0x4, 0xe, 0xb, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001740)=[0x1, 0x1, 0x1, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001780)=[{0x5, 0x2, 0x8, 0x7}, {0x2, 0x1, 0xe}, {0x1, 0x5, 0xd, 0x5}, {0x1, 0x4, 0x1, 0x7}, {0x5, 0x2, 0xc}], 0x10, 0xc}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000018c0)={r1, r4})
io_setup(0x1ff, &(0x7f0000001900)=<r5=>0x0)
r6 = syz_open_dev$vcsn(&(0x7f0000001a00), 0xffffffffffffffff, 0x30203)
io_submit(r5, 0x1, &(0x7f0000001a80)=[&(0x7f0000001a40)={0x0, 0x0, 0x0, 0x5, 0x1ff, r0, &(0x7f0000001940)="969e68b54666d37721630fff47eeda8f245297c80443758d679120ded7b8661fe967df9ff83cd8f4febda9660fd0eae50cf4478d365d05525fbd796498759894d51b0fa1d48d55603451f666459e2ae6ab3940962b81e894040a84464e5db2a3505d13ae5c7acf9d22afa3ba3a2b68e4c48bfa81214e5aff1126c5b9f0ee379fd46ffb350019cbfd54d23eb41db940cba73e", 0x92, 0x5c, 0x0, 0x0, r6}])
r7 = socket(0x6, 0x2, 0x6)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b40)={r6, 0x58, &(0x7f0000001ac0)}, 0x10)
write$cgroup_int(r6, &(0x7f0000001b80)=0x9, 0x12)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000002200)={&(0x7f0000001bc0)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001c40)="a060f2401009edc7ff2389371d53c535fbeadb66a6b23d7585fa3a32a292dfa3aa7a438dc00dd53ba118f9584ac9a7bba2f1a845821ed68b98742c8435f809a88b2a849a1df7f4991e1b4db85f23f6dfc67ae6642ce9cd1e801cef82d1521771ec5770cc", 0x64}, {&(0x7f0000001cc0)="1c575aad7149600ce142453e40114fae9e85c9d2a8c4b965bcd8fa1dcda1ce511f480840dfa863741a40", 0x2a}, {&(0x7f0000001d00)="806658eebccc8600915a9bfe94ddb3ba49b0096952d39c93d74d2607ec579333cd315d22222ef10836b3ba3015dd1061453ccfddd30040148c1521b365f2b89f415c03fec9bc7046d09e222ff0c69acf947947f88bf5e82eb2a8d48a5b9f4b836e9be5e880f69a55110c8c7f9fb676a955ea45b7e50dd10e2143aefe41d4c2caabbaf6249e68ef3a13379fa6863fc922e64d8e6292b7920fa5d425764113308af49485f79fb01740472558cb0e3abaad89f7ac3d", 0xb4}, {&(0x7f0000001dc0)="043d9b17f20f6bc97dd6f5ecf256c7815c89490803d40d071cc2313b2cdbf98188f76ae7ec8cfbf8445980ad5f6e4dc1f30f7447b81a83db69c1f9e4b3a90a102105765db51aeba87947706b73cfecc37a0b10", 0x53}], 0x4, &(0x7f0000001e80)=[{0x100, 0x113, 0x5, "c9fa706d8f13b4d414ad5d3b9088b94c1819ce452495802f542a26ec84d194927bfa68dfcefdbd43b00e886b1ab71652266c4c9726fff5cf823287b2052347ededc718cd5aa82c4084bf2f58e83fc95e7efb7541fd3ac1faa7daad787bc0389893e64c29ccbc8d683f286bfd43560ad8163f82a970e3a9dd57013dc7bd8ebcf69747d5b06814ee3d6823a94f5120beb813cd1f72e1561828c94e6b99a55d33b2a652c6b0e59a1518862915508e326f2f5400b85202abd986c3bdeb16dfff9faf4e7f04edb074aecfffa7c127162c241ad60d9267d089b9512fbc4e7767a60bbcb62fe9aac3c95e8897847d28d58e"}, {0x80, 0x10e, 0x6, "3b0a8a8e1ca5239e01ef0eb38c9f00f3d0f9e787040458c9063ae6c7de5c3f01ff3105b7e901d11a59f95b138464a6cfdef3b0f0bf2c964ef837d262fc9b9e8c94cf5691acfa6079c740ad9f7fdb7f5c2871ef533805b4a289eb5bf58115f2dd49ed1103f47b17168486e8cdd43008f3"}, {0xd8, 0x112, 0x3, "fc2a3a2e02ca381cfb6b3d58e31ffac9a47562102505e056cafa38045f5a18c7379b4b37a8678461af9f3880d3678c9d29bfbd65c5b40eb1ce6134fa6f403e25f17d278ff0005e3e0f22219c54b3dd52418c15cc56947de85b54061a13d74ff50544b6d25afc5e623978b925d1f83f4c4ea5975a7d4dd7275bff8fa8ed3015823d236470525534d5a1367bdacce131012e53a91c5cbc5d2e615210782e6da605c41bbba961322efdd5e1088cfcc2b0f3c7e2c022b6bfae5e9f5278dc1045621113dfef"}, {0xf8, 0x102, 0x40, "0ff8089e4354260670c200e6e87388de5ac3928671daaff47e9cf959eb0936e9078aa628a18baec82f2f52cb0c6354605c1d7fb780adfd1672e6bca3ca27f871b2d8c188162354ab098c4661cb7458e0a7386708d01d80f14c223194924477782d26b4ba98de01de516301de26f97f606d8fbc2a49226c9302268b4fbe39b5f82f28c93b53792b756af25ffcb270beaaad95bbaf19e2c211aa1e24a66e58a50fc22007b28a9878dde5c55fbf30fcb083479c42c0015dc25a9482dc3223be7a89d87f4a252f69eb0920e1ea5431ff83a2207948454051af287decabf274906a7861d9f0"}], 0x350}, 0x20000014)
setsockopt$inet6_tcp_int(r6, 0x6, 0x3f, &(0x7f0000002240), 0x4)
ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000002280))
fallocate(r0, 0x30, 0x10, 0xfffffffffffffffc)
timerfd_create(0x1, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000022c0)={<r9=>0x0, 0x81, 0x30}, &(0x7f0000002300)=0xc)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000002340)={r9, 0x8ca, 0x1, [0x7]}, &(0x7f0000002380)=0xa)
openat(0xffffffffffffffff, &(0x7f00000023c0)='./file0\x00', 0x143000, 0x107)
fcntl$setlease(r7, 0x400, 0x1)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000002400)={r7})
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0xf8719347c16b22cd}, 0xc, &(0x7f0000002500)={&(0x7f0000002480)={0x48, 0x1404, 0x20, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c004}, 0xc000)

1m20.225624355s ago: executing program 35 (id=395):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095", @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x4, 0x1, 0xb, 0x1, 0x0, 0x6, 0x70020, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000180), 0x1}, 0x20, 0x8, 0x6, 0x9, 0x3, 0x995, 0x6, 0x0, 0x7f, 0x0, 0x3}, 0xffffffffffffffff, 0x2, r1, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x5c, 0x0, &(0x7f00000009c0)="6870ec00fc9221c86e0becbfdd4a99004c91bfa55bbf05e12728663897312df27009b12e92b50500000000000000d4aa6e669407a0e3ac56dc3c91b060a46c592d6069043903e884cbb2778c8dce60930664b614a881c6184f2d7c4d", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x5, 0x0, 0x0, 0x157, 0x8, 0xfff, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040))
r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES64=r4, @ANYRESOCT=0x0], 0x835, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r5}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_io_uring_setup(0x5f4b, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=<r7=>0x0, &(0x7f00000000c0)=<r8=>0x0)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r9, &(0x7f0000000d40), 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}})
io_uring_enter(r6, 0x29ab, 0xd480, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
set_mempolicy(0x4, 0x0, 0x5)
sync()
execve(&(0x7f0000000dc0)='./file0/file0\x00', 0x0, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r10}, 0x10)

1m9.709074319s ago: executing program 36 (id=501):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x13, 0x4f, 0x1, 0x0, 0x25dfdbff, {0x2}}, 0x14}}, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000000)={0xffff, 0x0, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x800, 0x46)
io_uring_setup(0x3234, &(0x7f0000000400)={0x0, 0x4019, 0x8000, 0xb, 0x323, 0x0, r2})
listen(r0, 0x8)

1m8.331896312s ago: executing program 37 (id=516):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0)
read(r0, &(0x7f0000000040)=""/223, 0xdf)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x80002000})
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000180))
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = socket$netlink(0x10, 0x3, 0x14)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1)
sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000001540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001500)={&(0x7f0000000240)={0x12b0, r2, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}, @TIPC_NLA_NODE={0x1008, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x636}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x69e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec43}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @private1, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @loopback, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @mcast2, 0xd}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x40, @loopback, 0x10001}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x12b0}, 0x1, 0x0, 0x0, 0x4000083}, 0x900)
r3 = socket$kcm(0x29, 0x7, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x1a, &(0x7f0000001580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @map_fd={0x18, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x726}}, @alu={0x7, 0x0, 0x7, 0x5, 0xa, 0x10}]}, &(0x7f0000001680)='GPL\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000016c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001700)={0x4, 0xe, 0xb, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001740)=[0x1, 0x1, 0x1, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001780)=[{0x5, 0x2, 0x8, 0x7}, {0x2, 0x1, 0xe}, {0x1, 0x5, 0xd, 0x5}, {0x1, 0x4, 0x1, 0x7}, {0x5, 0x2, 0xc}], 0x10, 0xc}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000018c0)={r1, r4})
io_setup(0x1ff, &(0x7f0000001900)=<r5=>0x0)
r6 = syz_open_dev$vcsn(&(0x7f0000001a00), 0xffffffffffffffff, 0x30203)
io_submit(r5, 0x1, &(0x7f0000001a80)=[&(0x7f0000001a40)={0x0, 0x0, 0x0, 0x5, 0x1ff, r0, &(0x7f0000001940)="969e68b54666d37721630fff47eeda8f245297c80443758d679120ded7b8661fe967df9ff83cd8f4febda9660fd0eae50cf4478d365d05525fbd796498759894d51b0fa1d48d55603451f666459e2ae6ab3940962b81e894040a84464e5db2a3505d13ae5c7acf9d22afa3ba3a2b68e4c48bfa81214e5aff1126c5b9f0ee379fd46ffb350019cbfd54d23eb41db940cba73e", 0x92, 0x5c, 0x0, 0x0, r6}])
r7 = socket(0x6, 0x2, 0x6)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b40)={r6, 0x58, &(0x7f0000001ac0)}, 0x10)
write$cgroup_int(r6, &(0x7f0000001b80)=0x9, 0x12)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000002200)={&(0x7f0000001bc0)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001c40)="a060f2401009edc7ff2389371d53c535fbeadb66a6b23d7585fa3a32a292dfa3aa7a438dc00dd53ba118f9584ac9a7bba2f1a845821ed68b98742c8435f809a88b2a849a1df7f4991e1b4db85f23f6dfc67ae6642ce9cd1e801cef82d1521771ec5770cc", 0x64}, {&(0x7f0000001cc0)="1c575aad7149600ce142453e40114fae9e85c9d2a8c4b965bcd8fa1dcda1ce511f480840dfa863741a40", 0x2a}, {&(0x7f0000001d00)="806658eebccc8600915a9bfe94ddb3ba49b0096952d39c93d74d2607ec579333cd315d22222ef10836b3ba3015dd1061453ccfddd30040148c1521b365f2b89f415c03fec9bc7046d09e222ff0c69acf947947f88bf5e82eb2a8d48a5b9f4b836e9be5e880f69a55110c8c7f9fb676a955ea45b7e50dd10e2143aefe41d4c2caabbaf6249e68ef3a13379fa6863fc922e64d8e6292b7920fa5d425764113308af49485f79fb01740472558cb0e3abaad89f7ac3d", 0xb4}, {&(0x7f0000001dc0)="043d9b17f20f6bc97dd6f5ecf256c7815c89490803d40d071cc2313b2cdbf98188f76ae7ec8cfbf8445980ad5f6e4dc1f30f7447b81a83db69c1f9e4b3a90a102105765db51aeba87947706b73cfecc37a0b10", 0x53}], 0x4, &(0x7f0000001e80)=[{0x100, 0x113, 0x5, "c9fa706d8f13b4d414ad5d3b9088b94c1819ce452495802f542a26ec84d194927bfa68dfcefdbd43b00e886b1ab71652266c4c9726fff5cf823287b2052347ededc718cd5aa82c4084bf2f58e83fc95e7efb7541fd3ac1faa7daad787bc0389893e64c29ccbc8d683f286bfd43560ad8163f82a970e3a9dd57013dc7bd8ebcf69747d5b06814ee3d6823a94f5120beb813cd1f72e1561828c94e6b99a55d33b2a652c6b0e59a1518862915508e326f2f5400b85202abd986c3bdeb16dfff9faf4e7f04edb074aecfffa7c127162c241ad60d9267d089b9512fbc4e7767a60bbcb62fe9aac3c95e8897847d28d58e"}, {0x80, 0x10e, 0x6, "3b0a8a8e1ca5239e01ef0eb38c9f00f3d0f9e787040458c9063ae6c7de5c3f01ff3105b7e901d11a59f95b138464a6cfdef3b0f0bf2c964ef837d262fc9b9e8c94cf5691acfa6079c740ad9f7fdb7f5c2871ef533805b4a289eb5bf58115f2dd49ed1103f47b17168486e8cdd43008f3"}, {0xd8, 0x112, 0x3, "fc2a3a2e02ca381cfb6b3d58e31ffac9a47562102505e056cafa38045f5a18c7379b4b37a8678461af9f3880d3678c9d29bfbd65c5b40eb1ce6134fa6f403e25f17d278ff0005e3e0f22219c54b3dd52418c15cc56947de85b54061a13d74ff50544b6d25afc5e623978b925d1f83f4c4ea5975a7d4dd7275bff8fa8ed3015823d236470525534d5a1367bdacce131012e53a91c5cbc5d2e615210782e6da605c41bbba961322efdd5e1088cfcc2b0f3c7e2c022b6bfae5e9f5278dc1045621113dfef"}, {0xf8, 0x102, 0x40, "0ff8089e4354260670c200e6e87388de5ac3928671daaff47e9cf959eb0936e9078aa628a18baec82f2f52cb0c6354605c1d7fb780adfd1672e6bca3ca27f871b2d8c188162354ab098c4661cb7458e0a7386708d01d80f14c223194924477782d26b4ba98de01de516301de26f97f606d8fbc2a49226c9302268b4fbe39b5f82f28c93b53792b756af25ffcb270beaaad95bbaf19e2c211aa1e24a66e58a50fc22007b28a9878dde5c55fbf30fcb083479c42c0015dc25a9482dc3223be7a89d87f4a252f69eb0920e1ea5431ff83a2207948454051af287decabf274906a7861d9f0"}], 0x350}, 0x20000014)
setsockopt$inet6_tcp_int(r6, 0x6, 0x3f, &(0x7f0000002240), 0x4)
ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000002280))
fallocate(r0, 0x30, 0x10, 0xfffffffffffffffc)
timerfd_create(0x1, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000022c0)={<r9=>0x0, 0x81, 0x30}, &(0x7f0000002300)=0xc)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000002340)={r9, 0x8ca, 0x1, [0x7]}, &(0x7f0000002380)=0xa)
openat(0xffffffffffffffff, &(0x7f00000023c0)='./file0\x00', 0x143000, 0x107)
fcntl$setlease(r7, 0x400, 0x1)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000002400)={r7})
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0xf8719347c16b22cd}, 0xc, &(0x7f0000002500)={&(0x7f0000002480)={0x48, 0x1404, 0x20, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c004}, 0xc000)

1m5.318099232s ago: executing program 38 (id=529):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
setresuid(0x0, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @private}, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000740)=0xe8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, <r1=>0xee01}}, './file0\x00'})
getresgid(&(0x7f00000007c0), &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
r3 = getegid()
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
r5 = msgget(0x2, 0x100)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@private, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000000500)=0xe8)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000004c0)=@nullb, r8, &(0x7f00000005c0)='./file1/file0\x00')
sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x20, 0x84, 0x0, r8}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0)
r9 = getegid()
r10 = getuid()
getresgid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000440)=<r11=>0x0)
msgctl$IPC_SET(r5, 0x1, &(0x7f0000000480)={{0x1, r8, r9, r10, r11, 0x82, 0x401}, 0x0, 0x0, 0x40, 0x3, 0x10000, 0x40, 0xffffffffffff34c7, 0xfffa, 0xd7b, 0x7ff, r4, r4})
newfstatat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}, 0x100)
lsetxattr$system_posix_acl(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='system.posix_acl_default\x00', &(0x7f0000000980)={{}, {0x1, 0xb}, [{0x2, 0x1}, {0x2, 0x1, r0}, {0x2, 0x2, 0xee00}], {0x4, 0x1}, [{0x8, 0x2, r1}, {0x8, 0x4, r2}, {0x8, 0x4, r3}, {0x8, 0x7, r11}, {0x8, 0x6, r12}, {0x8, 0x6}], {0x10, 0x4}}, 0x6c, 0x3)

1m2.047889187s ago: executing program 39 (id=540):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setitimer(0x2, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be040207fe056406040c5c0009003f0006160a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (fail_nth: 2)

52.816073577s ago: executing program 2 (id=671):
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0xfffffffffffffff4}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket(0x11, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'gre0\x00', <r9=>0x0})
bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9}, 0x14)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f000114000000010600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x20, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x870, 0x67, &(0x7f0000000180)=""/103, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x8, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x4, 0xb}, {0x5, 0x3, 0x8, 0x3}, {0x0, 0x3, 0xb, 0x4}, {0x4, 0xc29, 0xa, 0x1}, {0x5, 0x1, 0x5, 0x7}, {0x5, 0x3, 0x7, 0x7}], 0x10, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='ext4_ext_convert_to_initialized_fastpath\x00', r10, 0x0, 0x3}, 0x18)
write$selinux_access(r0, &(0x7f0000001a80)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56)

52.815730447s ago: executing program 2 (id=672):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x80000000000000}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r5}, 0x18)
socket$inet6_tcp(0xa, 0x1, 0x0)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r6, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r6, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v")
r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x133)
ioctl$EXT4_IOC_MOVE_EXT(r8, 0x8004587d, &(0x7f0000002c00)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x2, 0xcb, 0x5})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x4)
fsetxattr$system_posix_acl(r9, &(0x7f00000000c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240))

52.713719897s ago: executing program 2 (id=674):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x3}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af03000600000000000200010000000000000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e010100000000000000000200130003"], 0x78}, 0x1, 0x7}, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x5, 0x10000000000001, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x2a020400)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r6 = io_uring_setup(0x767f, &(0x7f0000000080)={0x0, 0xec1e, 0x4000, 0x2, 0x229})
r7 = io_uring_setup(0x10e3, &(0x7f0000000000)={0x0, 0xa516, 0x20, 0xffffffff, 0x11c, 0x0, r6})
io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20)

52.543592394s ago: executing program 2 (id=678):
r0 = socket$kcm(0x21, 0x2, 0x2)
socket$inet6(0xa, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', <r1=>0x0})
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x6bc8}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000000580)=""/104, 0x68}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0)
sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}], 0x20}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x1, 0x141482)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r7)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa014000}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r9=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)='F', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r9}}], 0x20, 0x2400e044}, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000440)={r9, @in={{0x2, 0x4e24, @remote}}, [0x320, 0x4b, 0xc1, 0x9, 0x6, 0x4, 0x6, 0xfffffffffffffff7, 0x47800000, 0x5, 0x7f7, 0xffffffffffffffff, 0x2, 0x618, 0x2]}, &(0x7f0000000540)=0x100)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x62200, 0x24)
ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000180)={0x3})
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x45e001, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r11, 0x89e4, &(0x7f0000000380)={0xe, "901aa8c0115dd7cd62dc9ad77b6715c2d69fc7cca239d9c4a6ae52896f7bb365fe274ed72867ac713e183e81a568818adaf53c0a13c3da715f873e8ac5a7bb8d8cb5a13e12874e886e12656597f2cd08c7caccf9e5a09244f59179f4611106369cac5a7e66a6bf1b2757464e0c1ff35aef795523f1244cdec6874054aa0be9a9"})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r10}, 0x10)
getpriority(0x2, 0x0)

52.286358238s ago: executing program 2 (id=682):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='kvm_vcpu_wakeup\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
r1 = fsopen(&(0x7f0000000180)='nfsd\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2502000900400000001cdc0dca1d9f6884030006000000000002004e22ac1414bb00000000000000000200010000000000000a000c01000000030005000000000002004e21ac1e0101000000000000000002001300"], 0x70}, 0x1, 0x7}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18)
syz_clone(0x800211, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18)

52.102837116s ago: executing program 2 (id=684):
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
pidfd_send_signal(r0, 0x7, &(0x7f0000000040)={0x8, 0x3, 0x6}, 0x0)
r1 = pidfd_getfd(r0, r0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xd}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x401}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008810}, 0x20000000)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={<r4=>0x0}, &(0x7f0000000240)=0xc)
r5 = syz_open_procfs(r4, &(0x7f0000000280)='cmdline\x00')
socket$packet(0x11, 0x3, 0x300)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
memfd_create(&(0x7f0000000300)='\xfa\x00', 0x1)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000006, 0x8010, r2, 0xd6326000)
syz_emit_ethernet(0x56, &(0x7f0000000340)={@empty, @empty, @void, {@canfd={0xd, {{0x3, 0x0, 0x1}, 0x40, 0x0, 0x0, 0x0, "c9a9eb4e185eba81c63d09f2f7584423302e6a950c845dc84e159cb2725fdb31054dd1fd17f73db4fd3058d1633726631db99c06e037b7bb8c4922b92e8051f1"}}}}, &(0x7f00000003c0)={0x0, 0x4, [0xec0, 0x637a99a3, 0x1f5, 0xd90]})
socket$rds(0x15, 0x5, 0x0)
set_mempolicy(0x3, &(0x7f0000000400)=0x8, 0x8)
ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000440)=0xfffffffffffffc01)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1)
sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x118102}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r6, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f00000005c0))
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/fscaps', 0x10000, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r7, 0x0, 0x83, &(0x7f0000000780)={'nat\x00', 0x0, 0x3, 0xd9, [0x400, 0x6, 0x1000, 0x5, 0x7ff, 0x2], 0x3, &(0x7f0000000640)=[{}, {}, {}], &(0x7f0000000680)=""/217}, &(0x7f0000000800)=0x78)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan1\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan1\x00', <r11=>0x0})
r12 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x50, r9, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r12}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x20000081)
setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000a40)=0x800, 0x4)
connect$rxrpc(r7, &(0x7f0000000a80)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0xeeb1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, 0x24)

51.768310478s ago: executing program 4 (id=688):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="8510000001000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000128850000007600000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x1200414, &(0x7f0000000040)={[{@dmode={'dmode', 0x3d, 0xf}}, {@showassoc}, {@hide}, {@uid}, {@map_acorn}, {@overriderock}]}, 0x5, 0x56b, &(0x7f0000000a80)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18)
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write$selinux_attr(r2, &(0x7f0000000200)='system_u:object_r:pinentry_exec_t:s0\x00', 0x25)

51.655561579s ago: executing program 4 (id=689):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
get_robust_list(0x0, &(0x7f0000000340)=&(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000380)=0x18)

51.584182886s ago: executing program 4 (id=692):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x5fef, 0x4)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={<r2=>0x0}, &(0x7f0000000280)=0xc)
r3 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r4, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8)
dup2(r4, r5)
fcntl$setown(r4, 0x8, r3)
tkill(r3, 0x13)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x2, 0x1ff, 0x5, 0x2, 0x1, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0xc5, &(0x7f0000000240)={0x20, 0x31, 0x5, 0x8, 0x9}, 0x8, 0x0, 0xfffffffa, 0x0, 0x8001, 0x10, &(0x7f00000005c0)="f650b6ad27c6d255dc471b1991229e348994586111b7bed0e55328d5b758259e2c418cbcedb14d6c322a589e8272be4ce4fbb1299e7257b0e71a66b8c9f91253929abc8af33be4bb082d268c4bb82d929ccff7765bc5c96ffe8f5725de76c80042b6e8c81b275fee0c672adc0fa278dd046780194ece2a482101123128648d7d0986cf1b7797bcb4a9a2a8d07a4b5b4a0331948671b579d1"})
syz_clone3(&(0x7f0000000380)={0x200028880, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0xb}, &(0x7f00000001c0)=""/8, 0x8, &(0x7f0000000200)=""/40, &(0x7f0000000340)=[r2, r3, r6], 0x3, {r7}}, 0x58)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r10}, 0x10)
r11 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r11, &(0x7f0000000300)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0xa96}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)='#', 0x1}], 0x1, &(0x7f0000001f80)=[{0x10, 0x1, 0x80000001}, {0x10, 0x84, 0x8}], 0x20}, 0x20000041)
unshare(0x22020400)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f0000000340)={0x5, {{0xa, 0xf, 0x6, @mcast1, 0x1ff}}, {{0xa, 0x4e23, 0xae, @mcast2, 0x6}}}, 0x108)

51.401304344s ago: executing program 4 (id=696):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r2, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x132c1d195b3331a8, 0x0)

50.907473371s ago: executing program 4 (id=710):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='kvm_vcpu_wakeup\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
r1 = fsopen(&(0x7f0000000180)='nfsd\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2502000900400000001cdc0dca1d9f6884030006000000000002004e22ac1414bb00000000000000000200010000000000000a000c01000000030005000000000002004e21ac1e0101000000000000000002001300"], 0x70}, 0x1, 0x7}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18)
syz_clone(0x800211, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18)

50.684543273s ago: executing program 4 (id=707):
sendmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1c}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

49.510850356s ago: executing program 0 (id=718):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff000000f8ffffffb702000008000000b7030000000000008500000010afe3395e3d000000950000000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18)
pipe2(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r2)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10002cbd70000900000000000000080001002f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000a00000034000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r5}, 0x18)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x1, 0x1)
fchdir(r8)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x33)
close_range(r6, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x48)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000480)=ANY=[@ANYRESOCT=r3], 0x1, 0x248, &(0x7f00000008c0)="$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")
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/227, 0x3e, 0xe3, 0x1}, 0x28)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000008000000010000000b"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10)
r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TIOCVHANGUP(r11, 0x5437, 0x0)
socket(0xa, 0x3, 0x3a)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0xfffffffffffffed7)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc, 0x4}, 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

49.443106153s ago: executing program 0 (id=720):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)

49.280126768s ago: executing program 0 (id=725):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1ff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES64=r0], 0x0, 0xff, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, &(0x7f0000000180)={0xa, 0x0, 0x404000, @loopback, 0x7cfd1f0f}, 0x20)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r4, &(0x7f0000000180)={0xa, 0x0, 0x404000, @loopback, 0x7cfd1f0f}, 0x20)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x8, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "fd8d28239b7bece7", "db3fbbe606db2e0ee89a516b623a6b00", "b41b280e", "6a60d9e058f6c36f"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='rxrpc_skb\x00', 0xffffffffffffffff, 0x0, 0x40000004000a0}, 0x18)
unshare(0x8000000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000001900010100000000fedbdf251cf97f570001fd01001a0000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x28000804)

47.947822727s ago: executing program 0 (id=731):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x9}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

47.024360056s ago: executing program 0 (id=737):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='kvm_vcpu_wakeup\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
r1 = fsopen(&(0x7f0000000180)='nfsd\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2502000900400000001cdc0dca1d9f6884030006000000000002004e22ac1414bb00000000000000000200010000000000000a000c01000000030005000000000002004e21ac1e0101000000000000000002001300"], 0x70}, 0x1, 0x7}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18)
syz_clone(0x800211, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18)

46.485865317s ago: executing program 0 (id=740):
r0 = socket$inet6(0xa, 0x3, 0xff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085", @ANYRES64=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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")
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
getdents64(r2, &(0x7f0000000100)=""/134, 0x86)
r3 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0)
ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0x6e, 0x29, 0x7fff8000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

42.291067172s ago: executing program 8 (id=767):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+\xb0\xe7@\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x3, 0x5000000, 0x8000c62)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x8d03223a02b8422a, 0x0, '\x00', 0x0, @fallback, r0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000)
syz_open_procfs(0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x465f, 0x8, 0x3, 0x389}, &(0x7f00000004c0)=<r5=>0x0, &(0x7f0000000180)=<r6=>0x0)
r7 = socket(0xa, 0x1, 0x0)
ioctl(r7, 0x8916, &(0x7f0000000000))
ioctl(r7, 0x8936, &(0x7f0000000000))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000d40000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r4, 0x349b, 0x96a, 0xffff000000000000, 0x0, 0x0)
dup3(r4, r2, 0x80000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r8 = socket(0x1, 0x5, 0x0)
r9 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000500)={0xe000200c})
epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f00000001c0)={0x80000002})

42.087993341s ago: executing program 8 (id=768):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000000100)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") (async)
r0 = socket$netlink(0x10, 0x3, 0x9)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) (async)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async)
r1 = accept4$x25(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000640)=0x12, 0x800)
ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000680)) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]})
rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) (async)
r2 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) (async)
sendmmsg(0xffffffffffffffff, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000200)="8d9a8a479af595e21c3ec427bb0d13fa0a52966aceac079fe6c513e892a4b3e22b6f079ec204b5473656", 0x2a}, {&(0x7f00000002c0)="497244872847a610bf39e4dbfb27e977e4d7336fa9db3cefed237ccb4a28219c4440838f", 0x24}, {&(0x7f0000000300)="f0e3d779e4a8c9363cf023a9c7d78f305c63975e133a6ad53d44903a210657cb472952cdb23821e96d1c6d46a3a3d878ce4e0824c7cab1e79a592811ce6e6a6bc616b5acd63ca15689bd9679649bfddc9ba5ee648343ccdc13", 0x59}, {&(0x7f0000000400)="c6667754ecf3a956a6cf387958b8647b168310a43c7e7ee08007f69aada2872188724da20767f751d5", 0x29}, {&(0x7f00000004c0)="3d5385ca810be27a8ef44bba83a8c7d0cf8109fbb75b4c674a31430adbcd12fd5316935a1f9a9c74a8c68b091f2345cf62ecc9acaff06c401aebc1cfecb430711148e8ed5ceb21c1dc9b0af89b9d94fc8564b7", 0x53}, {&(0x7f0000000780)="c0975cb5a1b3a7117c2a09ad5b3f41feeb0b2b96f679ca3304b03d3e73f40e2fc1e4e4686068ed600f5b133812e6c76ab8daa4c525fa93f1db5125a54d6224ebde555276ef2b003d7ed13a3b191572d5189eb2e11c2a1bfee4fc1ea67a7386325a652f50cbc1003ee50f92c6db928256f642dbe2a056466925c24c3e75e9ad3565e212959938e09b961e371a4e8ddb5ec47cd596a7c1cfcb56061acf9f676190293b380c", 0xa4}, {&(0x7f0000000580)="0436754000489efa6143bfaf70a3e369288880162015f6238974ed5d58a4ce98a6e762f3451005b6f8f7318ecf", 0x2d}, {&(0x7f0000000840)="b3da4fb5263b5e88965ad86ae0ef7acbb51f99715042307a0faa1d2874337b3fbf214bff73600e3d4a0583dfcb0c890971519500dd52c1be435216c9031d32c8afb5f73e6c0974c88983afd738918e724cbb60b14169018e98775bd97a4b7ca7b187ca6926331c395ed58686ab640cc0a7d96df5d98778d12c89a05a08bd2681ecdba31aad80a13db97b295eebc5f72543e85be0f6d9e91d626f4a5352cc970b29608253d2496b4537afe626b35c85ff10a062b270e73cc13d65c245aaf3ac734a71d463c8546f93332a0ca528635afaf0b5c4228715430b3a09f78a403170c4dfebd1cf6811170c64cd0ad5651d7a200a7f113dac997a912165", 0xfa}, {&(0x7f0000000d80)="bd28116582fa45876ed66c2d4de3243826ac7f332d32081aa152e2993b9657e8c07081c14fcd3bf971caa2c8b1b28520c608d1a5125f9e853ee2191fc494772b858f32d141201609d9091d", 0x4b}], 0x9, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x560}}, {{&(0x7f00000016c0)=@ethernet={0x1, @broadcast}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001740)="d77d262a4387c3be33bdb46a922104ea8658f2b640df67ca73ab8735b7dce9ec1f80c2e6ab1fa238757857e4cbf30c4e4297ada6b5172199a3c9698b0dab058238e2d2540264717e2b9d484ca65da4f1a2f52efb246899967d1f8523f1b6c9f5e1fe83f6811a9cd549aaa0a115d98d0f797d924deb5a9f9dd07c04f36c99891fc097516275a0426d47dc3aa32c6280abf2c1c3ee4279a273b2caab4e7785ce3ce265376fe7ea5d3da5125592c801e3d7040cb6f2eeb830a5807c0e1ededcb8a96b37417be731f2ba3cae2255085a8568", 0xd0}, {&(0x7f0000001840)="ebf611cd38cf355b49379008cbcd7f3202b41d3d03fe78b5e4f0ff559a2ab2d9f154705edfd2d27461fc6cd3f19574cc9242e46df84f9c896c23bf41ce7299df55a641b5c68569fbdafbd71f2cb9c473fdcac7975ace36907ef48747c6910ab0031999153549f016e9", 0x69}, {&(0x7f00000006c0)="5ca1a3074d528808466030dad4ae29cd7c89126a7cf50fa3bd29eeb9c772bc60575ced2e91a7da6fe53dae5018c910e402ad12a23070adbef4fa820d203b36b09c490dbc8862aafd95873ccc4155599eb1a8fd946f67e3ae952f5fca5bd556df7827ac91f95561d21337ce3ca288f941accc73346a88957761ada567caa598245f50496cea6c3e2f45671190f54d4abf219367cc5b4becad13affc4f29abb87ba4ff88863168fc21978b8580503da02f1c81", 0xb2}, {&(0x7f0000001980)="73b14f7f0d8b612e45beeb61e09b554225b959df5011946dd1be700612462d", 0x1f}, {&(0x7f00000019c0)="8fce5d92e9f08b44a5d7aa31f9dee525daea6cf8a1c003b8e14d100974d749ef0255c21f87afc9651cfaa4faaf3cad03b8ced77bde584be976a7e6b04ea46f700fa5e290c4e407f4b3fd048270f94e5013e5", 0x52}], 0x5, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"/1416], 0x588}}, {{&(0x7f0000002080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0xd}}, 0x0, 0x0, 0x4, 0x4}}, 0x80, &(0x7f0000002640)=[{&(0x7f0000002100)="7e340e131c000933c06ae3f6ea334cc65f923ad6e41b261c208563db857ca19dd277f47747e8c53a8bc9188dd65209c61e5e3194c77f3b9fe1d49bed5fbfe7f5f402813d1f727a8e68780caa1106e10ce0d083ee92fe03b02f97219fc14d0973670ff29068a2e231eac1d5900a05104cec21feed0c285828ebebd1a516fb0ccdb760249dd05b982ab245851ae8ff9aaf270fe1fbe4d207c9a2382cf9e88c28193aab09d29c04472ab7d5b3ab67be24f7509ced57090b46e61473ac3940ff5692319eea65217685e242945224b7632645b972e87a07fa7767def4593fdbb2c9d0566abeeb6c24", 0xe6}, {&(0x7f0000002200)="2fda12e296beef9c9e12fc95e5961e3b6f1cb90bee8f97b446544f23c492cd37cb562f1dab6b53ad0e0c4c444872c3724a18ffd5f12a504a6cb3bc864300b0c43e5d75a83b8b9c019a02d1e65185823cdf17cbf2a7b0afeb15ce8c4f1c2d50edca87fb57efac13d5764b47032749ae51a1f9fb3f6445042810258d66db7d9295238f41bcbc98cdd6d96310c280d91f77f92c8befb61ad4ca0220eea08995d192a017e7e7cb6ccaef2ad6c9912209f62f738c39f2729de6fbdf2945f6a22350a2d29a9bc42d8c32588228f67ab4729ba9bb48caa32f94bb559c", 0xd9}, {&(0x7f0000002300)="f0d7daa2f9c94b9344a277c63e167a2b11d7bff65b00e20decc1643a404e152b7939866c10814768c02240d082445a48b48e8277a85c9183a4a6e88533c253d9bd04d0192e8b3b9c89cdd8c0a4dbfe67269b9bcad6474b86173aa371b48ca92a7aeb4522ec092b856c23199c34", 0x6d}, {&(0x7f0000002480)="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", 0xfd}, {&(0x7f0000002580)="a2e2c9397c2be4de4f3c7a835b1f3283e974795b38dd2388179e7afff4ce162f2c6f75e05f48d09ccb3c788ed63e5f8e432db9daf111343f9b098239542fceb0bad0cd5430336ed659dc75104a1f6c4daa3ebcdd756fa75049fa5b05479b37fc7e0bf644015b78ab8ea8674f0088e6049a2d17412c29e46652e296d718b86b1d85ba021468385d0384d7a78fdc0c3497c18ce87677052e18819b76cda55bd610727c5d", 0xa3}], 0x5}}], 0x3, 0x14) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x80000) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000027c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc", @ANYRES16=r4, @ANYBLOB="119834646f5b0ddd284edabbc494a5008f0dfcc8b568e6116beb22b8ca61c72eff23aec248a7d433fc88a46c9ae55a6aa3fd1d6ad5a68529dff790213c974b7a3f7b37c5fd59499bfff3ba5d5cb9daf97279aad6a91c0beed69b871d67c7562eaadc2d8691308836ef4e8508af971d6f"], 0x40}}, 0x0) (async)
fcntl$getown(r6, 0x9) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
getpid() (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000002880)=ANY=[@ANYBLOB="18001900e7ffffff000000000000000018110000", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)

42.087653012s ago: executing program 8 (id=769):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000007000000e27f000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b706000000000000850000000300000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
munmap(&(0x7f0000004000/0x3000)=nil, 0x3000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x1, @remote}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc397", 0x9d, 0xc001, 0x0, 0x0)

42.043700746s ago: executing program 8 (id=770):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
r0 = open(&(0x7f0000000000)='./file1\x00', 0x14b142, 0x80)
ftruncate(r0, 0x2007ffb)
sendfile(r0, r0, 0x0, 0x1000000201005)
r1 = getpgrp(0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000005900000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
r3 = syz_pidfd_open(r1, 0x0)
fsetxattr$trusted_overlay_nlink(r3, &(0x7f00000018c0), 0x0, 0x0, 0x1)
fremovexattr(r3, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00')

41.627609556s ago: executing program 8 (id=771):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='kvm_vcpu_wakeup\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
r1 = fsopen(&(0x7f0000000180)='nfsd\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18)

41.506457998s ago: executing program 8 (id=772):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x4a}, {0x5, 0x0, 0xb187}], 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x42, 0x5c})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000feffffffffffffff000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7a7}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x97}, 0x18)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r7, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)
setsockopt$llc_int(r5, 0x10c, 0x9, &(0x7f0000000000)=0x1003, 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9}, 0x4)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r10, 0x0, 0x4}, 0x18)
sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1819800000e2c6f9ad19c4794b28bb073f7db018e154829c427c8ea3198412b70330c250170e2b3a00"/54], 0x18}, 0x1, 0x0, 0x0, 0x4008010}, 0x20008010)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000069a0fcff0000000095000000000007f4"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb}, 0x94)

36.739837017s ago: executing program 40 (id=684):
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
pidfd_send_signal(r0, 0x7, &(0x7f0000000040)={0x8, 0x3, 0x6}, 0x0)
r1 = pidfd_getfd(r0, r0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xd}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x401}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008810}, 0x20000000)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={<r4=>0x0}, &(0x7f0000000240)=0xc)
r5 = syz_open_procfs(r4, &(0x7f0000000280)='cmdline\x00')
socket$packet(0x11, 0x3, 0x300)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
memfd_create(&(0x7f0000000300)='\xfa\x00', 0x1)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000006, 0x8010, r2, 0xd6326000)
syz_emit_ethernet(0x56, &(0x7f0000000340)={@empty, @empty, @void, {@canfd={0xd, {{0x3, 0x0, 0x1}, 0x40, 0x0, 0x0, 0x0, "c9a9eb4e185eba81c63d09f2f7584423302e6a950c845dc84e159cb2725fdb31054dd1fd17f73db4fd3058d1633726631db99c06e037b7bb8c4922b92e8051f1"}}}}, &(0x7f00000003c0)={0x0, 0x4, [0xec0, 0x637a99a3, 0x1f5, 0xd90]})
socket$rds(0x15, 0x5, 0x0)
set_mempolicy(0x3, &(0x7f0000000400)=0x8, 0x8)
ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000440)=0xfffffffffffffc01)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1)
sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x118102}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r6, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f00000005c0))
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/fscaps', 0x10000, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r7, 0x0, 0x83, &(0x7f0000000780)={'nat\x00', 0x0, 0x3, 0xd9, [0x400, 0x6, 0x1000, 0x5, 0x7ff, 0x2], 0x3, &(0x7f0000000640)=[{}, {}, {}], &(0x7f0000000680)=""/217}, &(0x7f0000000800)=0x78)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan1\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan1\x00', <r11=>0x0})
r12 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x50, r9, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r12}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x20000081)
setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000a40)=0x800, 0x4)
connect$rxrpc(r7, &(0x7f0000000a80)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0xeeb1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, 0x24)

35.617306605s ago: executing program 41 (id=707):
sendmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1c}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

30.928020898s ago: executing program 42 (id=740):
r0 = socket$inet6(0xa, 0x3, 0xff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085", @ANYRES64=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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")
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
getdents64(r2, &(0x7f0000000100)=""/134, 0x86)
r3 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0)
ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0x6e, 0x29, 0x7fff8000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

27.681418501s ago: executing program 7 (id=803):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='kvm_vcpu_wakeup\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
fsopen(&(0x7f0000000180)='nfsd\x00', 0x1)
socket$key(0xf, 0x3, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18)

27.623402596s ago: executing program 7 (id=831):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x7f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff6, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast2}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) (async)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000140)="a5c2f900a48f98956dbaa6b4ca1b647c1c467fecf113f4", 0x7, 0xffffffffffffffff, 0x4}, 0x38) (async)
lstat(0x0, 0x0) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="c35b809d5800fbc31541aa035e45b1fcd354f1da200869f0570fe87f81ceed3168643c00fcb7bf81619eaeb1d63d042888975ead84da68bcc3aeb17b370a678813d809fea21cad88dd27f37da01c5c3fd3965349c76443652d1bb5b7f37d18c1e7d17a48e184597ce6ccd69826a2c7cb367a17c4b88590e7bb736d8fffae6a47bab0a093e6840ef66ee976e7dc3237d925290d6d5447f612c94d221194650adb3239ba2900fc654f4c1291cbaf3209ea733fef64fa46eb4f6b74fdd2f51351"], 0x318c) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xf, "0040001e1d113c812e5d6000"})
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
setpgid(r5, r5) (async, rerun: 32)
waitid(0x2, r5, 0x0, 0x4, 0x0) (async, rerun: 64)
wait4(0x0, 0x0, 0x80000000, &(0x7f0000000100)) (async, rerun: 64)
ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x6, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) (async, rerun: 32)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x8}, 0x18)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32)
r7 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=<r8=>0x0, &(0x7f0000000580)=<r9=>0x0) (rerun: 32)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) (async, rerun: 32)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
sendmsg$nl_xfrm(r10, 0x0, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) (async)
io_uring_enter(r7, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)

26.33494351s ago: executing program 43 (id=772):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x4a}, {0x5, 0x0, 0xb187}], 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x42, 0x5c})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000feffffffffffffff000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7a7}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x97}, 0x18)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r7, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)
setsockopt$llc_int(r5, 0x10c, 0x9, &(0x7f0000000000)=0x1003, 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9}, 0x4)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r10, 0x0, 0x4}, 0x18)
sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1819800000e2c6f9ad19c4794b28bb073f7db018e154829c427c8ea3198412b70330c250170e2b3a00"/54], 0x18}, 0x1, 0x0, 0x0, 0x4008010}, 0x20008010)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000069a0fcff0000000095000000000007f4"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb}, 0x94)

12.474512007s ago: executing program 44 (id=831):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x7f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff6, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast2}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) (async)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000140)="a5c2f900a48f98956dbaa6b4ca1b647c1c467fecf113f4", 0x7, 0xffffffffffffffff, 0x4}, 0x38) (async)
lstat(0x0, 0x0) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="c35b809d5800fbc31541aa035e45b1fcd354f1da200869f0570fe87f81ceed3168643c00fcb7bf81619eaeb1d63d042888975ead84da68bcc3aeb17b370a678813d809fea21cad88dd27f37da01c5c3fd3965349c76443652d1bb5b7f37d18c1e7d17a48e184597ce6ccd69826a2c7cb367a17c4b88590e7bb736d8fffae6a47bab0a093e6840ef66ee976e7dc3237d925290d6d5447f612c94d221194650adb3239ba2900fc654f4c1291cbaf3209ea733fef64fa46eb4f6b74fdd2f51351"], 0x318c) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xf, "0040001e1d113c812e5d6000"})
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
setpgid(r5, r5) (async, rerun: 32)
waitid(0x2, r5, 0x0, 0x4, 0x0) (async, rerun: 64)
wait4(0x0, 0x0, 0x80000000, &(0x7f0000000100)) (async, rerun: 64)
ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x6, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) (async, rerun: 32)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x8}, 0x18)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32)
r7 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=<r8=>0x0, &(0x7f0000000580)=<r9=>0x0) (rerun: 32)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) (async, rerun: 32)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
sendmsg$nl_xfrm(r10, 0x0, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) (async)
io_uring_enter(r7, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)

3.964210627s ago: executing program 5 (id=1084):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x120, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'nr0\x00', 'batadv0\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)

3.946242189s ago: executing program 5 (id=1086):
rt_sigprocmask(0x1, &(0x7f0000000180)={[0x4]}, 0x0, 0x62)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1803000040000000000000000a0000001811f900", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b5020000140000008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r3)
sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000226bd7000fbdbdf250100000008000200010000000c000300030000000000000008000200010000000800080001000000080005000a01010214000b0000000000000000000000ffffac1e0001080002000000000014000b00ff020000000000000000000000000001"], 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r6, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0)
sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x2}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000140)="14ec", 0x2}], 0x1, 0x0, 0x0, 0x20010080}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_rdma(0x10, 0x3, 0x14)
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0)
setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
connect$netlink(r10, 0x0, 0x0)
setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x3, 0x6, @random="cea0300a1672"}, 0x10)
r11 = dup2(0xffffffffffffffff, r8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7, 0x0, 0xffff}, 0x18)
ioctl$TCSETSW2(r11, 0x402c542c, &(0x7f0000000080)={0x8001, 0x67, 0x7, 0x3, 0x7, "7dcfa297bc2bea6ce02ba0112e4caffef40e74", 0x400, 0x40000000})

3.899059884s ago: executing program 5 (id=1088):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
r2 = syz_pidfd_open(0x0, 0x0)
pidfd_send_signal(r2, 0x29, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)

3.898503054s ago: executing program 5 (id=1090):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x4000}, 0x4004000)

3.843099819s ago: executing program 5 (id=1091):
socket$key(0xf, 0x3, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18)

3.800120923s ago: executing program 9 (id=1092):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000004280)='mm_page_free\x00', r0}, 0x18)
r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000600)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@noacl}, {}, {@errors_remount}, {@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x109}}, {@debug}]}, 0x5, 0x504, &(0x7f0000002580)="$eJzs3c9rXFsdAPDvzCR5SZtn33uKvFfBFirUHzSTH0gTFcSVuiiIBTcKNSbTWDPphMykNqFgqrsuXIiiIC7c+xe4sStLQVwrbl1Ji9YIVSpcmTtz00kyk041mfHlfj4wnXvnTOd7ziTfkzPnnjs3gNy62PynEDEZEb+PiHOt3f1PuNi62312b6l5K0SSXP9rIX1ecz97avb/zkbETkSMR8RXvxjxrcLhuPWt7dXFarWy0d4vN9bWy/Wt7Su31hZXKiuV2zPzVxcW5qfnZheOra0PfvidB9d+/eWxXz3/wZNHP/rtb5rVmmyXdbbjOLWaPhpvdzw2EhGfO4lgQ1Bqt2di2BXhv9L8+X0wIi6l+X8uSulPsz8vTrRmwElLkiT5d/JGr+KdBDi1iukYuFCciojWdrE4NdUaw38ozhSrtXrjUzdrm7eXW2Plt2K0ePNWtTLd/qzwVowWmvsz6fbL/dkD+3MR6Rj4x6WJdH9qqVZdHmxXBxxw9kD+/6PUyn8gJ/r/yA+cNvIf8kv+Q37Jf8gv+Q/5Jf8hv+Q/5Jf8h/yS/5Bfnfmfncj15pDqAgzWUX//xwZYD2CgvnLtWvOWZOe/L9/Z2lyt3bmyXKmvTq1tLk0t1TbWp1ZqtZX0nJ21V71etVZbn/l0bN4tNyr1Rrm+tX1jrbZ5u3EjPa//RmV0IK0C+vH2hYd/LETEzmcm0lt0/MmXq3C6JUkhhn0OMjAcpWF3QMDQOPQH+fUan/F7fkkY8P7W5St694yf7Vn0+Vg/keoAA1A8qvDF48FVBBi4y+85/gd5Zf4f8sv8P+TXK8b4hgeQA0fN/0f7Wn5d9Tv///z16gOcvCPn/4FTbbLL9b+SJPnemx3X7pqOiA9ExB9Ko29k1/oCToPiXwrt8f/lcx+bPFg6VvhnOgcwFhHf/fn1n95dbDQ2ZpqP/23v8cbP2o/PDqP+QG/7Z/iyPM3yGADIr91n95ay2yDjPv1CaxHC4fgj7bnJ8XQEc2a3sG+tQuGY1i7s3I+Id7vFL7Svd9468nFmt3Qo/jvt+0LrJdL6jqTXTR9M/Pc64n+0I/75//ldgXx42Ox/prvlXzHN6djLv/39z+QxrY/O+r9szXVn/Kz/K/Xo/y70GePbv/h+t8O76WLvp/cjznftf7N442msg/GbdbvcZ/wn3/jah3uVJb9svU63+JnmVrmxtl6ub21fuZXVYv7qwsL89NzsQjmdoy5nM9WHffbd3z3qFb/Z/rYe7f/TofZPtOv0iT7b/6+PPP76xSPif/xS99+/d9L7A+9/kuzV4ZN9xv/77J+/2ausGX+5x/tf7BY/stKIuT7j13/yJecOA8D/kfrW9upitVrZ6LIx2rvIhg0bg94YiQEGfVXPsTOYDgo4MS+Tftg1AQAAAAAAAAAAAPrVa/Xvw2NcTjzsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnAb/CQAA//9AntRF")
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x18)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r4 = signalfd4(r2, 0x0, 0x0, 0x800)
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000340)={'ip6gretap0\x00', @remote})
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
r5 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
write(r5, &(0x7f0000000040)="0600", 0x2)
sendfile(r5, r5, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000))
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)

3.799505133s ago: executing program 5 (id=1093):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0)
mbind(&(0x7f0000cf7000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000b80)=0x3, 0xef7, 0x5)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)=r0)
close(r1) (fail_nth: 7)

2.831855286s ago: executing program 9 (id=1101):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x290002, 0xd7a0101cb55bdbf6)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.316738046s ago: executing program 9 (id=1105):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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")
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r4, 0x0, 0x4}, 0x18)
r5 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000018c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000009000000070000000000000700000000070000000000001201000000000000000000000d02000000003000003000005f"], 0x0, 0x45}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
writev(r0, &(0x7f0000000480)=[{&(0x7f0000001980)="1c", 0x1}], 0x1)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff})

2.201074287s ago: executing program 6 (id=1106):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000010000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0x2, &(0x7f0000000040)={0x9, 0xffffffffffffffff}, 0x0)
brk(0x5d555ede6000)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x20000, 0x0, 0x11}, 0x18)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000010140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010010000000000000000c00"], 0x58}}, 0x0)

2.041410892s ago: executing program 6 (id=1108):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x58, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x3, 0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/82, 0x52}], 0x1}, 0x40000004)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket(0x2, 0x80805, 0x0) (async)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x58, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x3, 0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) (async)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/82, 0x52}], 0x1}, 0x40000004) (async)
shutdown(r0, 0x1) (async)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) (async)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) (async)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20) (async)

1.696863356s ago: executing program 6 (id=1110):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r1}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1fa6dd60d1337aee, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x3e, &(0x7f0000000740)=ANY=[@ANYBLOB="180027cce7805e0000000000000000001092f4a0c570e9e9440800000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24000000)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a6c000000060a0b0400000000000000000200000038000480340001800a0001006d617463680000002400028008000240000000000900010098636370000000000c000300ebae551382395afa0900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x54, r8, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x922}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14}]}, 0x54}}, 0x1)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000000)=0xffff, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000010140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010010000000000000000200"], 0x58}}, 0x0)

1.65642332s ago: executing program 9 (id=1112):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = memfd_create(&(0x7f0000000100)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,U\xb1]*\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xa4T\xc8\f\xe5\x89\xbf3S\xefq\xfd\x12\xbc:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13}\x8f\xe2^Z\xef\xa3\xe1c\xc5\xe6,\x94\x19\\3\xf8\xe9\xcf\"S\xfe\xe9\x8ai{\x96\xaeA$@\xf0\xc8\x90\x98.+{\x924\x98\x19$\xe0\\P\xd9\xff\x94Q\x0e1z6/\x1d\xc2\xdbQq\xe6\xf3\xcfzX`\xf3.\xe9l\xa9Qb\xeeH\xbf\xf6@o\x10\x85M\x86\xf0~\xc5\xe3\xe4\xfe\x88\x12\xf4\x82\xeb1\x19L\x84\xf1\xbd[~\"\xdeR\xb5\xdc\xf0\nGR\x83\xeew\xa1\xa3h\xcd\xe6', 0x2)
write$bt_hci(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0)
ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0, 0x9, 0x2})
sendmmsg$inet(r4, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r4, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0)

1.597102805s ago: executing program 6 (id=1113):
r0 = getpgrp(0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000005900000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x18)
r3 = syz_pidfd_open(r0, 0x0)
fsetxattr$trusted_overlay_nlink(r3, &(0x7f00000018c0), 0x0, 0x0, 0x1)
fremovexattr(r3, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00')

1.596622025s ago: executing program 6 (id=1114):
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
r4 = open(0x0, 0x60840, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r5 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f80)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xf}}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x44001)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
lstat(&(0x7f00000022c0)='./file0\x00', 0x0)
statx(0xffffffffffffff9c, 0x0, 0x400, 0x4, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0)
sendmmsg$unix(r4, 0x0, 0x0, 0x41)
io_uring_enter(r4, 0x7098, 0xebd8, 0x40, &(0x7f0000000000)={[0x8a]}, 0x8)

1.539374061s ago: executing program 9 (id=1117):
socket$key(0xf, 0x3, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18)

1.526950062s ago: executing program 9 (id=1118):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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")
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r4, 0x0, 0x4}, 0x18)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000018c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000009000000070000000000000700000000070000000000001201000000000000000000000d02000000003000003000005f"], 0x0, 0x45}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
writev(r0, &(0x7f0000000480)=[{&(0x7f0000001980)="1c", 0x1}], 0x1)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff})

1.514499533s ago: executing program 3 (id=1119):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000002000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x2c, r2, 0xa03, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10)
r3 = socket(0x40000000015, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfc, 0xfffff02c}, {0x6}]}, 0x10)
io_uring_enter(r4, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
kexec_load(0x100000001, 0x0, 0x0, 0x2a0000)
r5 = gettid()
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x0, 0x4e21, 0x4, 0x2, 0xa0, 0x80, 0x16}, {0xff, 0x3, 0x8, 0x4, 0xffffffffffffff89, 0x100000000, 0xe5, 0x7}, {0x4, 0x8, 0x400, 0x8}, 0x80000000, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@empty, 0x4d6, 0x3c}, 0x2, @in=@private=0xa010102, 0x3501, 0x1, 0x0, 0xdd, 0x9, 0x2, 0x6}}, 0xe8)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x94)
fsmount(0xffffffffffffffff, 0x0, 0x1)
r7 = syz_io_uring_setup(0x4e0, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x18)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$inet_tcp(0x2, 0x1, 0x0)

1.414642043s ago: executing program 1 (id=1120):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100b850a63f0f966dfe00000100400100000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESOCT=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRESHEX=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3', @TCF_META_TYPE_VAR]}]}}]}]}]}}]}, 0x78}}, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'ip6erspan0\x00', &(0x7f0000000240)=@ethtool_stats={0x1d, 0x7, [0x4a14e634, 0x7, 0x3, 0xaf10, 0x6, 0x8, 0x8001]}})
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r12, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r13, 0x10e, 0x1, &(0x7f00000000c0)=0x1, 0x4)
bind$netlink(r13, &(0x7f0000514ff4), 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0)

1.393113215s ago: executing program 3 (id=1121):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10)
r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r3})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x30, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r5, 0x12a06, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @IFLA_VF_PORTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r6 = creat(&(0x7f0000000140)='./bus\x00', 0xc)
write$cgroup_int(r6, &(0x7f0000000540), 0xfffffdd8)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)

1.173060026s ago: executing program 1 (id=1122):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYRES8=r0, @ANYRESOCT=r1, @ANYBLOB="ddfffffdff0000ceda5d260c557ba300497369646765"], 0x34}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380))
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2098b543c76caec2e4000c0000020000ff000200"/29, @ANYBLOB="4a4f8f5e1c595e42d21f574c3072c6ed3855df7d2b3916961a72725007fcec7fb47185eddb0f4f6ad18762481c3c145cdf15c7c3285f46e014d624a760a241ac152754ae4ed548d579228b67d828c4d2c64af3361bfd746f37acc2a2dea55840336a7f29b4a8312d43deed093fef235f70dce3667b36eeaa9472e54ca5791f8c04dd1df0bf3337be1a4f901183377ba9734be0492143d54c85af68a9e91c271074d30783a0eb10d3aa133637bc0e63c9f9a9721a46cb5a6b11fdd9732e024be67602b68bfc7bd3159422d9d082193b77c3a011821f5697ed2295038f14b0b8e07e41dcee69227a490de12403018f2d10bf38042a648e032f", @ANYBLOB="08000200ac1414aa"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$inet(0x2, 0x3, 0x2)
semget(0x3, 0x1, 0x44)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x18)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xb}, {0x9}}}, 0x24}}, 0x0)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000300)=<r8=>0x0, &(0x7f0000000340)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0xc13a, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94)
r9 = syz_open_procfs(0x0, &(0x7f0000000040))
sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3f8, 0x2, 0x70bd2d, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x22000010)
name_to_handle_at(r9, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="280000004e000000010000000000000005080000000000003108000000ffff00"/48], &(0x7f0000000100), 0x600)
futex(&(0x7f0000000040)=0x1, 0x5, 0x2, 0x0, &(0x7f00000002c0)=0x2, 0x40000001)
unshare(0x22020400)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRESOCT=r2], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11, 0x0, 0x97}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r10, <r12=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r12, 0x0, &(0x7f0000001780)=""/4096}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

984.153005ms ago: executing program 1 (id=1123):
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x3}, 0x100, 0x4, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xa)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
prctl$PR_SVE_GET_VL(0x33, 0xf02c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r4, 0x0, 0xf}, 0x18)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x8, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

860.039537ms ago: executing program 1 (id=1124):
r0 = getpgrp(0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000005900000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x18)
r3 = syz_pidfd_open(r0, 0x0)
fsetxattr$trusted_overlay_nlink(r3, &(0x7f00000018c0), 0x0, 0x0, 0x1)
fremovexattr(r3, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00')

812.276311ms ago: executing program 1 (id=1125):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000000))
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000240)=""/253, 0xfd, <r2=>0x0, &(0x7f0000000340)=""/183, 0xb7}}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095", @ANYRESOCT=r1, @ANYRES16=r1, @ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
kexec_load(0x8, 0x1, &(0x7f0000000500)=[{&(0x7f0000000480)="a3", 0x1, 0x0, 0x10000}], 0x3e0000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10)
symlink(0x0, 0x0)

459.587015ms ago: executing program 3 (id=1126):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1, 0x0, 0xffff}, 0x18)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000030000006102000002"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="180000200000000000000000c603000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000250000009500000000000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x13f, 0x8}}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', <r5=>0x0})
r6 = dup(r4)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1703, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
write$nci(r6, &(0x7f0000000080)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x1, 0x2, 0x5, 0x3}, 0x4)
close(r2)

212.265129ms ago: executing program 1 (id=1127):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94)

211.920219ms ago: executing program 3 (id=1128):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="40d174b2a3f781c274386d178550", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendfile(r4, r3, 0x0, 0x100000002)

151.124385ms ago: executing program 3 (id=1129):
r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x101}, 0x18)
sendmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r2, r3]}}], 0x18, 0x40000}, 0x4000)
r6 = io_uring_setup(0x2586, &(0x7f0000000240)={0x0, 0xf8a4, 0x40, 0x0, 0x2e8})
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f00000002c0)=[r7, r1, r2, r5, r5, r5, r0, r0], 0x8)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu==-!|!')
socketpair(0x18, 0x4, 0x7fffffff, &(0x7f0000000040))

107.508549ms ago: executing program 3 (id=1130):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xfe1e, 0x0, 0x1, 0xb5}, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffff9, 0x0, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0}, 0x94)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000001080)='kfree\x00', r6}, 0x18)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080))
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0)
set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)

0s ago: executing program 6 (id=1131):
ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044800}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./bus\x00', 0x32003e, &(0x7f00000004c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_abort}, {@data_err_ignore}, {@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@quota}, {@minixdf}, {@init_itable_val={'init_itable', 0x3d, 0xf}}]}, 0x1, 0x559, &(0x7f0000001100)="$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")
r0 = syz_open_dev$loop(&(0x7f0000000180), 0x4e, 0x101240)
fadvise64(0xffffffffffffffff, 0x8000000000000000, 0x9, 0x6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r2}, 0x18)
r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x95824, &(0x7f0000000580)={[], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@fsmagic}, {@smackfshat={'smackfshat', 0x3d, 'syzkaller\x00'}}, {@seclabel}]}, 0x5, 0x540, &(0x7f0000001bc0)="$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")
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0)
fsetxattr$security_capability(r3, &(0x7f0000000000), 0x0, 0xc86ff2992186e62e, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
fgetxattr(r5, &(0x7f0000000000)=ANY=[], 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r4, @ANYRES16=r0], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x1d, &(0x7f00000003c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x4)

kernel console output (not intermixed with test programs):

it: type=1326 audit(1766200793.715:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.9.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b21ebf749 code=0x7ffc0000
[  128.467891][ T6595] loop8: detected capacity change from 0 to 512
[  128.474700][ T6595] EXT4-fs: dax option not supported
[  128.621205][ T6609] loop9: detected capacity change from 0 to 4096
[  128.630611][ T6609] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.761612][ T6616] loop8: detected capacity change from 0 to 512
[  128.868063][ T6623] loop8: detected capacity change from 0 to 1024
[  128.901839][ T6623] EXT4-fs: inline encryption not supported
[  128.922623][ T6623] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.038804][ T6623] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.770: Allocating blocks 497-513 which overlap fs metadata
[  129.083547][ T6623] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.770: Allocating blocks 497-513 which overlap fs metadata
[  129.181040][ T6622] EXT4-fs (loop8): pa ffff8881079bb850: logic 48, phys. 177, len 21
[  129.189110][ T6622] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1
[  129.255052][ T5614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.541608][ T5725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.598535][ T6631] loop9: detected capacity change from 0 to 1024
[  129.611879][ T6631] EXT4-fs: inline encryption not supported
[  129.663348][ T6631] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.769055][ T6631] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.773: Allocating blocks 497-513 which overlap fs metadata
[  129.803760][ T6631] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.773: Allocating blocks 497-513 which overlap fs metadata
[  129.865932][ T6630] EXT4-fs (loop9): pa ffff8881079bb8c0: logic 48, phys. 177, len 21
[  129.874101][ T6630] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1
[  130.011987][ T5725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.040447][ T6636] FAULT_INJECTION: forcing a failure.
[  130.040447][ T6636] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  130.053793][ T6636] CPU: 0 UID: 0 PID: 6636 Comm: syz.9.774 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  130.053837][ T6636] Tainted: [W]=WARN
[  130.053847][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  130.053865][ T6636] Call Trace:
[  130.053874][ T6636]  <TASK>
[  130.053953][ T6636]  __dump_stack+0x1d/0x30
[  130.053984][ T6636]  dump_stack_lvl+0xe8/0x140
[  130.054016][ T6636]  dump_stack+0x15/0x1b
[  130.054085][ T6636]  should_fail_ex+0x265/0x280
[  130.054112][ T6636]  should_fail_alloc_page+0xf2/0x100
[  130.054180][ T6636]  __alloc_frozen_pages_noprof+0x109/0x360
[  130.054226][ T6636]  alloc_pages_mpol+0xb3/0x260
[  130.054266][ T6636]  ? css_rstat_updated+0xbb/0x280
[  130.054319][ T6636]  vma_alloc_folio_noprof+0x1aa/0x300
[  130.054366][ T6636]  handle_mm_fault+0xef5/0x2c60
[  130.054419][ T6636]  do_user_addr_fault+0x630/0x1080
[  130.054522][ T6636]  ? ksys_mmap_pgoff+0xc2/0x310
[  130.054586][ T6636]  exc_page_fault+0x62/0xa0
[  130.054643][ T6636]  asm_exc_page_fault+0x26/0x30
[  130.054671][ T6636] RIP: 0033:0x7f1b21d80943
[  130.054738][ T6636] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  130.054764][ T6636] RSP: 002b:00007f1b209264a0 EFLAGS: 00010202
[  130.054786][ T6636] RAX: 000000000000c000 RBX: 00007f1b20926540 RCX: 00007f1b18507000
[  130.054805][ T6636] RDX: 00007f1b209266e0 RSI: 0000000000000011 RDI: 00007f1b209265e0
[  130.054821][ T6636] RBP: 00000000000000b4 R08: 0000000000000007 R09: 0000000000000044
[  130.054834][ T6636] R10: 0000000000000052 R11: 00007f1b20926540 R12: 0000000000000001
[  130.054917][ T6636] R13: 00007f1b21f5fc40 R14: 0000000000000002 R15: 00007f1b209265e0
[  130.054937][ T6636]  </TASK>
[  130.054947][ T6636] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  130.271454][ T6636] loop9: detected capacity change from 0 to 1024
[  130.281529][ T6636] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  130.292464][ T6636] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  130.332178][ T6636] JBD2: no valid journal superblock found
[  130.337925][ T6636] EXT4-fs (loop9): Could not load journal inode
[  130.443094][ T6639] loop9: detected capacity change from 0 to 4096
[  130.473030][ T6639] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  130.551680][ T5725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.701827][ T6644] wg1 speed is unknown, defaulting to 1000
[  130.964203][ T6644] loop9: detected capacity change from 0 to 512
[  130.970838][ T6644] EXT4-fs: dax option not supported
[  131.464652][ T6655] netlink: 'syz.9.781': attribute type 7 has an invalid length.
[  132.538157][ T6663] loop9: detected capacity change from 0 to 1024
[  132.601742][ T6663] EXT4-fs: inline encryption not supported
[  132.652834][ T6663] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.772616][ T6663] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.784: Allocating blocks 497-513 which overlap fs metadata
[  132.791691][ T6663] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.784: Allocating blocks 497-513 which overlap fs metadata
[  132.810357][ T6662] EXT4-fs (loop9): pa ffff8881079bb930: logic 48, phys. 177, len 21
[  132.818466][ T6662] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1
[  132.843352][ T5725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.883840][ T6671] FAULT_INJECTION: forcing a failure.
[  132.883840][ T6671] name failslab, interval 1, probability 0, space 0, times 0
[  132.896632][ T6671] CPU: 1 UID: 0 PID: 6671 Comm: syz.9.786 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  132.896736][ T6671] Tainted: [W]=WARN
[  132.896745][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  132.896761][ T6671] Call Trace:
[  132.896768][ T6671]  <TASK>
[  132.896777][ T6671]  __dump_stack+0x1d/0x30
[  132.896811][ T6671]  dump_stack_lvl+0xe8/0x140
[  132.896845][ T6671]  dump_stack+0x15/0x1b
[  132.896866][ T6671]  should_fail_ex+0x265/0x280
[  132.896978][ T6671]  should_failslab+0x8c/0xb0
[  132.897006][ T6671]  __kmalloc_noprof+0xb9/0x5a0
[  132.897034][ T6671]  ? offload_action_alloc+0x2b/0x180
[  132.897113][ T6671]  offload_action_alloc+0x2b/0x180
[  132.897152][ T6671]  tcf_action_offload_add_ex+0x11f/0x3c0
[  132.897201][ T6671]  tcf_action_init+0x333/0x6d0
[  132.897306][ T6671]  tc_ctl_action+0x291/0x830
[  132.897348][ T6671]  ? __pfx_tc_ctl_action+0x10/0x10
[  132.897370][ T6671]  rtnetlink_rcv_msg+0x65a/0x6d0
[  132.897395][ T6671]  netlink_rcv_skb+0x123/0x220
[  132.897477][ T6671]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  132.897561][ T6671]  rtnetlink_rcv+0x1c/0x30
[  132.897597][ T6671]  netlink_unicast+0x5c0/0x690
[  132.897637][ T6671]  netlink_sendmsg+0x58b/0x6b0
[  132.897673][ T6671]  ? __pfx_netlink_sendmsg+0x10/0x10
[  132.897725][ T6671]  __sock_sendmsg+0x145/0x180
[  132.897750][ T6671]  ____sys_sendmsg+0x31e/0x4a0
[  132.897885][ T6671]  ___sys_sendmsg+0x17b/0x1d0
[  132.897977][ T6671]  __x64_sys_sendmsg+0xd4/0x160
[  132.898023][ T6671]  x64_sys_call+0x17ba/0x3000
[  132.898073][ T6671]  do_syscall_64+0xd8/0x2c0
[  132.898190][ T6671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.898233][ T6671] RIP: 0033:0x7f1b21ebf749
[  132.898253][ T6671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.898283][ T6671] RSP: 002b:00007f1b20927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  132.898310][ T6671] RAX: ffffffffffffffda RBX: 00007f1b22115fa0 RCX: 00007f1b21ebf749
[  132.898401][ T6671] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005
[  132.898419][ T6671] RBP: 00007f1b20927090 R08: 0000000000000000 R09: 0000000000000000
[  132.898436][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  132.898453][ T6671] R13: 00007f1b22116038 R14: 00007f1b22115fa0 R15: 00007fff30f28b28
[  132.898502][ T6671]  </TASK>
[  133.382557][   T29] kauditd_printk_skb: 167 callbacks suppressed
[  133.382572][   T29] audit: type=1400 audit(1766200798.815:4107): avc:  denied  { read } for  pid=6672 comm="syz.9.787" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  133.412058][   T29] audit: type=1400 audit(1766200798.815:4108): avc:  denied  { open } for  pid=6672 comm="syz.9.787" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  133.531754][   T29] audit: type=1400 audit(1766200798.865:4109): avc:  denied  { ioctl } for  pid=6672 comm="syz.9.787" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  133.593729][ T6676] wg1 speed is unknown, defaulting to 1000
[  133.847257][ T6676] loop9: detected capacity change from 0 to 512
[  133.881778][ T6676] EXT4-fs: dax option not supported
[  133.907994][   T29] audit: type=1326 audit(1766200799.335:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.9.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b21ebf749 code=0x7ffc0000
[  133.985417][   T29] audit: type=1326 audit(1766200799.365:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.9.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b21ebf749 code=0x7ffc0000
[  134.008838][   T29] audit: type=1326 audit(1766200799.365:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.9.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b21ebf749 code=0x7ffc0000
[  134.032235][   T29] audit: type=1326 audit(1766200799.365:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.9.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b21ebf749 code=0x7ffc0000
[  134.055660][   T29] audit: type=1326 audit(1766200799.365:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.9.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b21ebf749 code=0x7ffc0000
[  134.079094][   T29] audit: type=1326 audit(1766200799.375:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.9.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b21ebf749 code=0x7ffc0000
[  134.102496][   T29] audit: type=1326 audit(1766200799.375:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.9.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b21ebf749 code=0x7ffc0000
[  134.171624][ T6680] loop9: detected capacity change from 0 to 512
[  134.202234][ T6680] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  134.245366][ T6680] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.301887][ T6680] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  134.415311][ T5807] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.445171][ T6682] wg1 speed is unknown, defaulting to 1000
[  134.464159][ T5725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.487186][ T5807] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.555831][ T5807] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.666438][ T5807] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.830622][ T5807] bridge_slave_1: left allmulticast mode
[  134.836426][ T5807] bridge_slave_1: left promiscuous mode
[  134.842229][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.892301][ T5807] bridge_slave_0: left allmulticast mode
[  134.897997][ T5807] bridge_slave_0: left promiscuous mode
[  134.903704][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.191592][ T5807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  135.215537][ T6703] netlink: 28 bytes leftover after parsing attributes in process `syz.9.792'.
[  135.224589][ T6703] netlink: 'syz.9.792': attribute type 7 has an invalid length.
[  135.232280][ T6703] netlink: 'syz.9.792': attribute type 8 has an invalid length.
[  135.239934][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.9.792'.
[  135.251288][ T5807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  135.282610][ T5807] bond0 (unregistering): Released all slaves
[  135.311606][ T6682] chnl_net:caif_netlink_parms(): no params data found
[  135.344238][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.9.792'.
[  135.378594][ T5807] hsr_slave_0: left promiscuous mode
[  135.397860][ T5807] hsr_slave_1: left promiscuous mode
[  135.414648][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.422095][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.449871][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.457356][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.475421][ T5807] veth1_macvtap: left promiscuous mode
[  135.480931][ T5807] veth0_macvtap: left promiscuous mode
[  135.501477][ T5807] veth1_vlan: left promiscuous mode
[  135.516942][ T5807] veth0_vlan: left promiscuous mode
[  135.812462][ T5807] team0 (unregistering): Port device team_slave_1 removed
[  135.834326][ T5807] team0 (unregistering): Port device team_slave_0 removed
[  135.978855][ T6705] team0: Port device team_slave_1 removed
[  136.083596][ T6682] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.090712][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.111996][ T6682] bridge_slave_0: entered allmulticast mode
[  136.141824][ T6682] bridge_slave_0: entered promiscuous mode
[  136.157359][ T6706] wg1 speed is unknown, defaulting to 1000
[  136.163511][ T6682] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.170684][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.201666][ T6682] bridge_slave_1: entered allmulticast mode
[  136.208380][ T6682] bridge_slave_1: entered promiscuous mode
[  136.267029][ T6682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.304745][ T6682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.334123][ T5807] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.484789][ T6682] team0: Port device team_slave_0 added
[  136.504958][ T5807] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.528152][ T6682] team0: Port device team_slave_1 added
[  136.536553][ T6706] chnl_net:caif_netlink_parms(): no params data found
[  136.616179][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.623192][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  136.649259][ T6682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.668485][ T5807] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.691942][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.698933][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  136.725265][ T6682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.789149][ T5807] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.890783][ T6706] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.898088][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.920897][ T6706] bridge_slave_0: entered allmulticast mode
[  136.934599][ T6706] bridge_slave_0: entered promiscuous mode
[  136.950004][ T6682] hsr_slave_0: entered promiscuous mode
[  136.961893][ T6682] hsr_slave_1: entered promiscuous mode
[  136.978326][ T6706] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.985568][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.008596][ T6706] bridge_slave_1: entered allmulticast mode
[  137.022534][ T6706] bridge_slave_1: entered promiscuous mode
[  137.106330][ T6706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.133528][ T5807] bridge_slave_1: left allmulticast mode
[  137.139209][ T5807] bridge_slave_1: left promiscuous mode
[  137.144880][ T6729] loop9: detected capacity change from 0 to 1024
[  137.144933][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.179194][ T6729] EXT4-fs: inline encryption not supported
[  137.189326][ T5807] bridge_slave_0: left allmulticast mode
[  137.195110][ T5807] bridge_slave_0: left promiscuous mode
[  137.200779][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.219390][ T6729] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.308270][ T6729] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.796: Allocating blocks 497-513 which overlap fs metadata
[  137.325151][ T6729] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.796: Allocating blocks 497-513 which overlap fs metadata
[  137.343950][ T6728] EXT4-fs (loop9): pa ffff8881079bb9a0: logic 48, phys. 177, len 21
[  137.352318][ T6728] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1
[  137.388776][ T5725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.455104][ T5807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.465096][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.9.797'.
[  137.482496][ T5807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.492324][ T5807] bond0 (unregistering): Released all slaves
[  137.522045][ T6737] loop9: detected capacity change from 0 to 1024
[  137.528755][ T6737] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  137.540359][ T6706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.679393][ T5807] hsr_slave_0: left promiscuous mode
[  137.685286][ T5807] hsr_slave_1: left promiscuous mode
[  137.694389][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.701845][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.719434][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.726909][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.763198][ T5807] veth1_macvtap: left promiscuous mode
[  137.768766][ T5807] veth0_macvtap: left promiscuous mode
[  137.781538][ T5807] veth1_vlan: left promiscuous mode
[  137.786807][ T5807] veth0_vlan: left promiscuous mode
[  137.965455][ T5807] team0 (unregistering): Port device team_slave_1 removed
[  137.977684][ T5807] team0 (unregistering): Port device team_slave_0 removed
[  138.066437][ T6706] team0: Port device team_slave_0 added
[  138.075221][ T6735] wg1 speed is unknown, defaulting to 1000
[  138.093140][ T6706] team0: Port device team_slave_1 added
[  138.155890][ T6706] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.163049][ T6706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  138.189036][ T6706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.206566][ T6706] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.213700][ T6706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  138.239726][ T6706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.346190][ T6706] hsr_slave_0: entered promiscuous mode
[  138.352321][ T6706] hsr_slave_1: entered promiscuous mode
[  138.358514][ T6706] debugfs: 'hsr0' already exists in 'hsr'
[  138.364300][ T6706] Cannot create hsr debugfs directory
[  138.496487][   T29] kauditd_printk_skb: 44 callbacks suppressed
[  138.496506][   T29] audit: type=1400 audit(1766200803.925:4161): avc:  denied  { ioctl } for  pid=6740 comm="syz.9.798" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19661 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  138.683596][ T6746] loop9: detected capacity change from 0 to 512
[  138.703477][ T6746] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  138.753978][ T6746] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.766704][ T6746] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  138.826878][ T5725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.832314][ T6682] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  138.867063][ T6682] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  138.886385][ T6682] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  138.906296][ T6682] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  138.972669][ T6706] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  138.996019][ T6706] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  139.016605][ T6706] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  139.046855][ T6706] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  139.139646][ T6763] loop9: detected capacity change from 0 to 4096
[  139.156352][ T6682] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.174104][ T6763] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.190449][ T6682] 8021q: adding VLAN 0 to HW filter on device team0
[  139.212892][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.219983][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.239090][ T6706] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.248530][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.255628][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.288527][ T6682] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  139.299198][ T6682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  139.314782][ T6706] 8021q: adding VLAN 0 to HW filter on device team0
[  139.337198][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.344296][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.395734][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.402848][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.465038][ T6682] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.613922][ T6706] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.650424][ T6682] veth0_vlan: entered promiscuous mode
[  139.674424][ T6682] veth1_vlan: entered promiscuous mode
[  139.719530][ T6682] veth0_macvtap: entered promiscuous mode
[  139.743520][ T6682] veth1_macvtap: entered promiscuous mode
[  139.767434][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.784467][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_1
[  139.806917][ T5807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.824265][ T5807] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.857147][ T5807] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.874959][ T5807] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.885096][ T6706] veth0_vlan: entered promiscuous mode
[  139.905238][ T6706] veth1_vlan: entered promiscuous mode
[  139.937040][ T6706] veth0_macvtap: entered promiscuous mode
[  139.962508][ T6706] veth1_macvtap: entered promiscuous mode
[  139.995945][ T6706] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.042043][ T6706] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.052791][   T29] audit: type=1326 audit(1766200805.485:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6793 comm="syz.3.804" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc67e5bf749 code=0x0
[  140.077623][   T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.087888][ T5725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.101276][   T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.127730][   T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.165700][ T6802] loop9: detected capacity change from 0 to 512
[  140.172503][   T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.172812][ T6802] ext4: Unknown parameter 'noacl'
[  140.245901][ T5807] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.276636][ T6795] wg1 speed is unknown, defaulting to 1000
[  140.334698][ T5807] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.395669][ T5807] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.443996][ T6795] chnl_net:caif_netlink_parms(): no params data found
[  140.466608][ T5807] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.569578][ T6795] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.576787][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.601574][ T6795] bridge_slave_0: entered allmulticast mode
[  140.612623][ T6795] bridge_slave_0: entered promiscuous mode
[  140.619855][ T6795] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.627046][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.634631][ T6795] bridge_slave_1: entered allmulticast mode
[  140.641391][ T6795] bridge_slave_1: entered promiscuous mode
[  140.685007][ T6795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.695712][ T5807] bridge_slave_1: left allmulticast mode
[  140.701433][ T5807] bridge_slave_1: left promiscuous mode
[  140.707182][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.732811][ T5807] bridge_slave_0: left allmulticast mode
[  140.738537][ T5807] bridge_slave_0: left promiscuous mode
[  140.744273][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.914157][ T5807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  140.930263][ T5807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  140.938887][   T29] audit: type=1326 audit(1766200806.355:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67e5bf749 code=0x7ffc0000
[  140.962401][   T29] audit: type=1326 audit(1766200806.355:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67e5bf749 code=0x7ffc0000
[  140.986035][   T29] audit: type=1326 audit(1766200806.355:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67e5bf749 code=0x7ffc0000
[  141.009636][   T29] audit: type=1326 audit(1766200806.355:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc67e5bf749 code=0x7ffc0000
[  141.033153][   T29] audit: type=1326 audit(1766200806.355:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67e5bf749 code=0x7ffc0000
[  141.056750][   T29] audit: type=1326 audit(1766200806.355:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67e5bf749 code=0x7ffc0000
[  141.080144][   T29] audit: type=1326 audit(1766200806.355:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67e5bf749 code=0x7ffc0000
[  141.103563][   T29] audit: type=1326 audit(1766200806.355:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc67e5bf749 code=0x7ffc0000
[  141.135388][ T5807] bond0 (unregistering): Released all slaves
[  141.160783][ T6795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.201211][ T5807] hsr_slave_0: left promiscuous mode
[  141.213163][ T6825] loop1: detected capacity change from 0 to 1024
[  141.219914][ T6825] EXT4-fs: inline encryption not supported
[  141.226834][ T5807] hsr_slave_1: left promiscuous mode
[  141.234987][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.242419][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.262344][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.269769][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.280833][ T6825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.296690][ T5807] veth1_macvtap: left promiscuous mode
[  141.345531][ T6825] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.809: Allocating blocks 497-513 which overlap fs metadata
[  141.369892][ T5807] veth0_macvtap: left promiscuous mode
[  141.398871][ T6824] EXT4-fs (loop1): pa ffff8881079bba80: logic 48, phys. 177, len 21
[  141.407020][ T6824] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1
[  141.426662][ T5807] veth1_vlan: left promiscuous mode
[  141.448807][ T5807] veth0_vlan: left promiscuous mode
[  141.478115][ T6843] loop3: detected capacity change from 0 to 4096
[  141.497216][ T6706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.518505][ T6843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.617143][ T5807] team0 (unregistering): Port device team_slave_1 removed
[  141.633124][ T5807] team0 (unregistering): Port device team_slave_0 removed
[  141.723212][ T6840] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.730649][ T6840] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.747493][ T6840] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.754967][ T6840] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.812535][ T6795] team0: Port device team_slave_0 added
[  141.819329][ T6795] team0: Port device team_slave_1 added
[  141.880613][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.887688][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  141.913814][ T6795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.925717][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.932897][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  141.959038][ T6795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.008250][ T6795] hsr_slave_0: entered promiscuous mode
[  142.021893][ T6795] hsr_slave_1: entered promiscuous mode
[  142.028003][ T6795] debugfs: 'hsr0' already exists in 'hsr'
[  142.033823][ T6795] Cannot create hsr debugfs directory
[  142.060325][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.817'.
[  142.081599][ T3494] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  142.106461][ T6682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.372961][ T6871] loop3: detected capacity change from 0 to 164
[  142.379635][ T6871] iso9660: Bad value for 'mode'
[  142.488578][ T6795] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  142.519507][ T6795] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  142.540708][ T6795] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  142.562135][ T6795] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  142.591943][ T6879] loop1: detected capacity change from 0 to 4096
[  142.603390][ T6879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.636259][ T6883] loop3: detected capacity change from 0 to 4096
[  142.653095][ T6883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.660677][ T6795] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.674463][ T6706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.693321][ T6795] 8021q: adding VLAN 0 to HW filter on device team0
[  142.714566][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.721677][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.745077][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.752181][ T5807] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.792512][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  142.821986][ T6895] loop1: detected capacity change from 0 to 1024
[  142.835317][ T6895] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  142.868870][ T6795] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.951582][ T6490] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  143.032056][ T6795] veth0_vlan: entered promiscuous mode
[  143.041474][ T6795] veth1_vlan: entered promiscuous mode
[  143.068538][ T6795] veth0_macvtap: entered promiscuous mode
[  143.076401][ T6795] veth1_macvtap: entered promiscuous mode
[  143.088062][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.100839][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.120535][ T5807] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.140196][ T5807] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.153984][ T5807] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.167254][ T5807] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.528127][ T6682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.686784][ T6922] FAULT_INJECTION: forcing a failure.
[  143.686784][ T6922] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.700307][ T6922] CPU: 0 UID: 0 PID: 6922 Comm: syz.1.833 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  143.700393][ T6922] Tainted: [W]=WARN
[  143.700403][ T6922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  143.700421][ T6922] Call Trace:
[  143.700430][ T6922]  <TASK>
[  143.700440][ T6922]  __dump_stack+0x1d/0x30
[  143.700473][ T6922]  dump_stack_lvl+0xe8/0x140
[  143.700498][ T6922]  dump_stack+0x15/0x1b
[  143.700519][ T6922]  should_fail_ex+0x265/0x280
[  143.700544][ T6922]  should_fail+0xb/0x20
[  143.700568][ T6922]  should_fail_usercopy+0x1a/0x20
[  143.700599][ T6922]  _copy_from_user+0x1c/0xb0
[  143.700669][ T6922]  __sys_bpf+0x183/0x7c0
[  143.700700][ T6922]  __x64_sys_bpf+0x41/0x50
[  143.700733][ T6922]  x64_sys_call+0x28e1/0x3000
[  143.700779][ T6922]  do_syscall_64+0xd8/0x2c0
[  143.700878][ T6922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.700926][ T6922] RIP: 0033:0x7f1f450ff749
[  143.701005][ T6922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.701031][ T6922] RSP: 002b:00007f1f43b67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  143.701057][ T6922] RAX: ffffffffffffffda RBX: 00007f1f45355fa0 RCX: 00007f1f450ff749
[  143.701075][ T6922] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a
[  143.701091][ T6922] RBP: 00007f1f43b67090 R08: 0000000000000000 R09: 0000000000000000
[  143.701103][ T6922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  143.701190][ T6922] R13: 00007f1f45356038 R14: 00007f1f45355fa0 R15: 00007fffe1825cc8
[  143.701215][ T6922]  </TASK>
[  143.943196][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  143.951038][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  143.969585][ T6929] loop1: detected capacity change from 0 to 4096
[  144.009327][ T6931] loop9: detected capacity change from 0 to 2048
[  144.178474][ T6929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.191847][ T6929] FAULT_INJECTION: forcing a failure.
[  144.191847][ T6929] name failslab, interval 1, probability 0, space 0, times 0
[  144.204565][ T6929] CPU: 1 UID: 0 PID: 6929 Comm: syz.1.835 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  144.204601][ T6929] Tainted: [W]=WARN
[  144.204608][ T6929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  144.204621][ T6929] Call Trace:
[  144.204655][ T6929]  <TASK>
[  144.204666][ T6929]  __dump_stack+0x1d/0x30
[  144.204694][ T6929]  dump_stack_lvl+0xe8/0x140
[  144.204719][ T6929]  dump_stack+0x15/0x1b
[  144.204777][ T6929]  should_fail_ex+0x265/0x280
[  144.204807][ T6929]  should_failslab+0x8c/0xb0
[  144.204870][ T6929]  kmem_cache_alloc_noprof+0x69/0x4b0
[  144.204901][ T6929]  ? __es_insert_extent+0x508/0xee0
[  144.205019][ T6929]  __es_insert_extent+0x508/0xee0
[  144.205065][ T6929]  ext4_es_insert_extent+0x436/0x1c30
[  144.205102][ T6929]  ? dvb_ca_en50221_init+0x30d/0x3f0
[  144.205204][ T6929]  ext4_map_query_blocks+0x30f/0x4c0
[  144.205242][ T6929]  ? panic_on_this_cpu+0x2d/0x40
[  144.205336][ T6929]  ext4_map_blocks+0x368/0xd20
[  144.205384][ T6929]  ext4_getblk+0x114/0x510
[  144.205420][ T6929]  ext4_bread_batch+0x5c/0x320
[  144.205516][ T6929]  __ext4_find_entry+0x821/0xe00
[  144.205547][ T6929]  ? __d_lookup_rcu+0x28b/0x2d0
[  144.205579][ T6929]  ? d_alloc_parallel+0xbf3/0xcd0
[  144.205631][ T6929]  ext4_lookup+0xb8/0x390
[  144.205659][ T6929]  __lookup_slow+0x193/0x250
[  144.205700][ T6929]  lookup_slow+0x3c/0x60
[  144.205776][ T6929]  path_lookupat+0x2f7/0x500
[  144.205816][ T6929]  filename_lookup+0x147/0x340
[  144.205861][ T6929]  filename_setxattr+0x56/0x400
[  144.205965][ T6929]  path_setxattrat+0x2c9/0x310
[  144.206064][ T6929]  __x64_sys_setxattr+0x6e/0x90
[  144.206089][ T6929]  x64_sys_call+0xf1e/0x3000
[  144.206119][ T6929]  do_syscall_64+0xd8/0x2c0
[  144.206166][ T6929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.206196][ T6929] RIP: 0033:0x7f1f450ff749
[  144.206211][ T6929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.206298][ T6929] RSP: 002b:00007f1f43b67038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  144.206328][ T6929] RAX: ffffffffffffffda RBX: 00007f1f45355fa0 RCX: 00007f1f450ff749
[  144.206390][ T6929] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000200000000000
[  144.206407][ T6929] RBP: 00007f1f43b67090 R08: 0000000000000001 R09: 0000000000000000
[  144.206424][ T6929] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[  144.206440][ T6929] R13: 00007f1f45356038 R14: 00007f1f45355fa0 R15: 00007fffe1825cc8
[  144.206465][ T6929]  </TASK>
[  144.206899][   T29] kauditd_printk_skb: 123 callbacks suppressed
[  144.206913][   T29] audit: type=1400 audit(1766200809.635:4294): avc:  denied  { setattr } for  pid=6928 comm="syz.1.835" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  144.259651][ T6929] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.835: bg 0: block 363: padding at end of block bitmap is not set
[  144.358738][ T6931] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.530440][ T6706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.600586][ T6941] netlink: 16 bytes leftover after parsing attributes in process `syz.9.836'.
[  144.792260][ T3495] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  144.803142][   T12] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.817180][ T6954] loop1: detected capacity change from 0 to 512
[  144.837859][ T6954] ext4: Unknown parameter 'noacl'
[  144.855295][ T6942] wg1 speed is unknown, defaulting to 1000
[  144.883730][ T5725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.896128][   T12] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.931000][ T6637] wg1 speed is unknown, defaulting to 1000
[  144.937093][ T6637] syz0: Port: 1 Link DOWN
[  144.962643][ T6957] loop9: detected capacity change from 0 to 512
[  144.969698][ T6957] ext4: Unknown parameter 'noacl'
[  144.979546][   T12] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.248184][   T12] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.398722][ T6942] chnl_net:caif_netlink_parms(): no params data found
[  145.504139][   T29] audit: type=1326 audit(1766200810.935:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67e5bf749 code=0x7ffc0000
[  145.593229][   T29] audit: type=1326 audit(1766200810.935:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67e5bf749 code=0x7ffc0000
[  145.616808][   T29] audit: type=1326 audit(1766200810.935:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc67e5bf749 code=0x7ffc0000
[  145.640211][   T29] audit: type=1326 audit(1766200810.975:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67e5bf749 code=0x7ffc0000
[  145.663691][   T29] audit: type=1326 audit(1766200810.975:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67e5bf749 code=0x7ffc0000
[  145.687428][   T29] audit: type=1326 audit(1766200810.985:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fc67e5bf749 code=0x7ffc0000
[  145.711034][   T29] audit: type=1326 audit(1766200810.985:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67e5bf749 code=0x7ffc0000
[  145.734360][   T29] audit: type=1326 audit(1766200810.985:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67e5bf749 code=0x7ffc0000
[  145.757915][   T29] audit: type=1326 audit(1766200810.985:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc67e5bf749 code=0x7ffc0000
[  146.028409][ T6987] loop9: detected capacity change from 0 to 4096
[  146.043918][ T6988] siw: device registration error -23
[  146.052278][ T6988] loop3: detected capacity change from 0 to 512
[  146.062673][   T12] bond0 (unregistering): Released all slaves
[  146.070926][ T6988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.084724][ T6987] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.101323][ T6988] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  146.114281][ T6942] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.121489][ T6942] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.134401][ T6993] loop1: detected capacity change from 0 to 512
[  146.151892][ T6942] bridge_slave_0: entered allmulticast mode
[  146.158496][ T6942] bridge_slave_0: entered promiscuous mode
[  146.165538][ T6993] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  146.186170][ T6942] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.193371][ T6942] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.202678][ T6993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.232082][ T6942] bridge_slave_1: entered allmulticast mode
[  146.232089][ T6993] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  146.242884][ T6942] bridge_slave_1: entered promiscuous mode
[  146.281669][   T12] veth1_macvtap: left promiscuous mode
[  146.294280][   T12] veth0_macvtap: left promiscuous mode
[  146.309214][   T12] veth1_vlan: left promiscuous mode
[  146.322508][   T12] veth0_vlan: left promiscuous mode
[  146.381494][ T6706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.574768][ T6942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.587946][ T5725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.589026][ T6942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.637451][ T6942] team0: Port device team_slave_0 added
[  146.647200][ T6942] team0: Port device team_slave_1 added
[  146.656346][ T7007] netlink: 108 bytes leftover after parsing attributes in process `syz.9.854'.
[  146.676284][ T6942] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.683320][ T6942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  146.709338][ T6942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.720808][ T6942] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.727918][ T6942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  146.753968][ T6942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.787027][ T6942] hsr_slave_0: entered promiscuous mode
[  146.793631][ T6942] hsr_slave_1: entered promiscuous mode
[  146.799571][ T6942] debugfs: 'hsr0' already exists in 'hsr'
[  146.805404][ T6942] Cannot create hsr debugfs directory
[  146.833126][ T6682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.877877][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.855'.
[  146.889152][ T7014] FAULT_INJECTION: forcing a failure.
[  146.889152][ T7014] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  146.902321][ T7014] CPU: 1 UID: 0 PID: 7014 Comm: syz.3.855 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  146.902358][ T7014] Tainted: [W]=WARN
[  146.902366][ T7014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  146.902383][ T7014] Call Trace:
[  146.902392][ T7014]  <TASK>
[  146.902402][ T7014]  __dump_stack+0x1d/0x30
[  146.902468][ T7014]  dump_stack_lvl+0xe8/0x140
[  146.902578][ T7014]  dump_stack+0x15/0x1b
[  146.902604][ T7014]  should_fail_ex+0x265/0x280
[  146.902635][ T7014]  should_fail+0xb/0x20
[  146.902723][ T7014]  should_fail_usercopy+0x1a/0x20
[  146.902767][ T7014]  _copy_from_user+0x1c/0xb0
[  146.902803][ T7014]  kstrtouint_from_user+0x69/0xf0
[  146.902887][ T7014]  ? 0xffffffff81000000
[  146.902912][ T7014]  ? selinux_file_permission+0x1e2/0x320
[  146.902963][ T7014]  proc_fail_nth_write+0x50/0x160
[  146.903005][ T7014]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  146.903090][ T7014]  vfs_write+0x269/0x960
[  146.903116][ T7014]  ? vfs_read+0x4e6/0x770
[  146.903140][ T7014]  ? __rcu_read_unlock+0x4f/0x70
[  146.903168][ T7014]  ? __fget_files+0x184/0x1c0
[  146.903192][ T7014]  ? mutex_lock+0x58/0x90
[  146.903275][ T7014]  ksys_write+0xda/0x1a0
[  146.903357][ T7014]  __x64_sys_write+0x40/0x50
[  146.903383][ T7014]  x64_sys_call+0x2847/0x3000
[  146.903419][ T7014]  do_syscall_64+0xd8/0x2c0
[  146.903545][ T7014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.903570][ T7014] RIP: 0033:0x7fc67e5be1ff
[  146.903590][ T7014] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  146.903616][ T7014] RSP: 002b:00007fc67d027030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  146.903664][ T7014] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc67e5be1ff
[  146.903677][ T7014] RDX: 0000000000000001 RSI: 00007fc67d0270a0 RDI: 0000000000000006
[  146.903689][ T7014] RBP: 00007fc67d027090 R08: 0000000000000000 R09: 0000000000000000
[  146.903722][ T7014] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  146.903734][ T7014] R13: 00007fc67e816038 R14: 00007fc67e815fa0 R15: 00007ffe3d89dbb8
[  146.903767][ T7014]  </TASK>
[  147.141472][ T7017] loop9: detected capacity change from 0 to 1024
[  147.141521][ T7019] loop3: detected capacity change from 0 to 512
[  147.155911][ T7017] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities
[  147.167095][ T7019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.190439][ T7019] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.222302][ T7019] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.857: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  147.249087][ T7019] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  147.264723][ T7019] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.857: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  147.281853][ T7019] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.857: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  147.298437][ T7019] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  147.308117][ T7019] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.857: bg 0: block 18: invalid block bitmap
[  147.328131][ T7019] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.857: Failed to acquire dquot type 1
[  147.357235][ T6682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.376135][ T7024] loop1: detected capacity change from 0 to 512
[  147.394201][ T6942] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  147.403354][ T6942] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  147.412584][ T6942] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  147.422856][ T6942] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  147.432406][ T7024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.450355][ T7024] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.463036][ T7024] FAULT_INJECTION: forcing a failure.
[  147.463036][ T7024] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  147.476178][ T7024] CPU: 0 UID: 0 PID: 7024 Comm: syz.1.858 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  147.476221][ T7024] Tainted: [W]=WARN
[  147.476231][ T7024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  147.476248][ T7024] Call Trace:
[  147.476256][ T7024]  <TASK>
[  147.476267][ T7024]  __dump_stack+0x1d/0x30
[  147.476344][ T7024]  dump_stack_lvl+0xe8/0x140
[  147.476451][ T7024]  dump_stack+0x15/0x1b
[  147.476479][ T7024]  should_fail_ex+0x265/0x280
[  147.476517][ T7024]  should_fail+0xb/0x20
[  147.476546][ T7024]  should_fail_usercopy+0x1a/0x20
[  147.476637][ T7024]  strncpy_from_user+0x27/0x260
[  147.476680][ T7024]  getname_flags+0xae/0x3b0
[  147.476716][ T7024]  user_path_at+0x28/0x130
[  147.476757][ T7024]  do_fchownat+0xb0/0x210
[  147.476867][ T7024]  __x64_sys_lchown+0x4a/0x60
[  147.476958][ T7024]  x64_sys_call+0x2eda/0x3000
[  147.476989][ T7024]  do_syscall_64+0xd8/0x2c0
[  147.477059][ T7024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.477127][ T7024] RIP: 0033:0x7f1f450ff749
[  147.477148][ T7024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.477174][ T7024] RSP: 002b:00007f1f43b67038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e
[  147.477200][ T7024] RAX: ffffffffffffffda RBX: 00007f1f45355fa0 RCX: 00007f1f450ff749
[  147.477217][ T7024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0
[  147.477230][ T7024] RBP: 00007f1f43b67090 R08: 0000000000000000 R09: 0000000000000000
[  147.477242][ T7024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  147.477304][ T7024] R13: 00007f1f45356038 R14: 00007f1f45355fa0 R15: 00007fffe1825cc8
[  147.477328][ T7024]  </TASK>
[  147.669509][ T6706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.681813][ T7038] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  147.700587][ T7038] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.707839][ T7038] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.717646][ T7038] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  147.777679][ T7038] loop3: detected capacity change from 0 to 4096
[  147.784524][ T7038] EXT4-fs: Ignoring removed nomblk_io_submit option
[  147.796108][ T7038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.809696][ T7038] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.850555][ T7048] loop1: detected capacity change from 0 to 128
[  147.864028][ T6942] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.892286][ T6942] 8021q: adding VLAN 0 to HW filter on device team0
[  147.911239][ T7048] FAULT_INJECTION: forcing a failure.
[  147.911239][ T7048] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  147.924715][ T7048] CPU: 1 UID: 0 PID: 7048 Comm: syz.1.863 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  147.924878][ T7048] Tainted: [W]=WARN
[  147.924887][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  147.924905][ T7048] Call Trace:
[  147.924914][ T7048]  <TASK>
[  147.924923][ T7048]  __dump_stack+0x1d/0x30
[  147.924949][ T7048]  dump_stack_lvl+0xe8/0x140
[  147.925028][ T7048]  dump_stack+0x15/0x1b
[  147.925056][ T7048]  should_fail_ex+0x265/0x280
[  147.925085][ T7048]  should_fail+0xb/0x20
[  147.925109][ T7048]  should_fail_usercopy+0x1a/0x20
[  147.925151][ T7048]  _copy_to_user+0x20/0xa0
[  147.925188][ T7048]  simple_read_from_buffer+0xb5/0x130
[  147.925211][ T7048]  proc_fail_nth_read+0x10e/0x150
[  147.925257][ T7048]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  147.925296][ T7048]  vfs_read+0x1a8/0x770
[  147.925321][ T7048]  ? __rcu_read_unlock+0x4f/0x70
[  147.925416][ T7048]  ? __fget_files+0x184/0x1c0
[  147.925448][ T7048]  ? mutex_lock+0x58/0x90
[  147.925526][ T7048]  ksys_read+0xda/0x1a0
[  147.925552][ T7048]  __x64_sys_read+0x40/0x50
[  147.925619][ T7048]  x64_sys_call+0x2889/0x3000
[  147.925684][ T7048]  do_syscall_64+0xd8/0x2c0
[  147.925726][ T7048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.925750][ T7048] RIP: 0033:0x7f1f450fe15c
[  147.925766][ T7048] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  147.925837][ T7048] RSP: 002b:00007f1f43b67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  147.925861][ T7048] RAX: ffffffffffffffda RBX: 00007f1f45355fa0 RCX: 00007f1f450fe15c
[  147.925874][ T7048] RDX: 000000000000000f RSI: 00007f1f43b670a0 RDI: 0000000000000005
[  147.925887][ T7048] RBP: 00007f1f43b67090 R08: 0000000000000000 R09: 0000000000000000
[  147.925903][ T7048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  147.926019][ T7048] R13: 00007f1f45356038 R14: 00007f1f45355fa0 R15: 00007fffe1825cc8
[  147.926039][ T7048]  </TASK>
[  147.943020][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.134746][ T5807] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.151482][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  148.215473][ T7046] EXT4-fs: dax option not supported
[  148.224566][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.231674][ T5825] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.312594][ T7056] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  148.358437][ T7056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.423875][ T6942] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.450528][ T7056] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  148.570553][ T7073] netlink: 'syz.3.868': attribute type 12 has an invalid length.
[  148.571511][ T6706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.619500][ T7077] netlink: 28 bytes leftover after parsing attributes in process `syz.1.869'.
[  148.716654][ T7087] SELinux: syz.1.871 (7087) set checkreqprot to 1. This is no longer supported.
[  148.731226][ T6942] veth0_vlan: entered promiscuous mode
[  148.740157][ T6942] veth1_vlan: entered promiscuous mode
[  148.758594][ T6942] veth0_macvtap: entered promiscuous mode
[  148.766126][ T6942] veth1_macvtap: entered promiscuous mode
[  148.785421][ T6942] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.802104][ T6942] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.819080][ T5825] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.837340][ T5825] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.871908][ T5825] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.891401][ T5825] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.913519][ T7095] EXT4-fs: inline encryption not supported
[  148.942810][ T7095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.964699][ T7101] EXT4-fs: inline encryption not supported
[  149.004361][ T7101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.022744][ T6706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.063196][ T7107] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  149.075602][ T7107] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.090576][ T6682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.132052][ T6942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  149.157397][ T7115] xt_hashlimit: max too large, truncated to 1048576
[  149.179130][ T7115] xt_CT: You must specify a L4 protocol and not use inversions on it
[  149.188682][ T7117] EXT4-fs: inline encryption not supported
[  149.208101][ T7117] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.259619][ T6942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.273565][   T29] kauditd_printk_skb: 219 callbacks suppressed
[  149.273583][   T29] audit: type=1326 audit(1766200814.705:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.9.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b21ebf749 code=0x7ffc0000
[  149.303159][   T29] audit: type=1326 audit(1766200814.705:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.9.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b21ebf749 code=0x7ffc0000
[  149.334241][   T29] audit: type=1326 audit(1766200814.755:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.9.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b21ebf749 code=0x7ffc0000
[  149.342039][ T7128] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64
[  149.357672][   T29] audit: type=1326 audit(1766200814.765:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.9.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b21ebf749 code=0x7ffc0000
[  149.365275][ T7128] audit: out of memory in audit_log_start
[  149.394461][   T29] audit: type=1326 audit(1766200814.765:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.9.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1b21ebf749 code=0x7ffc0000
[  149.417628][   T29] audit: type=1326 audit(1766200814.765:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.9.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b21ebf749 code=0x7ffc0000
[  149.441110][   T29] audit: type=1326 audit(1766200814.765:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.9.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1b21ebf749 code=0x7ffc0000
[  149.464375][   T29] audit: type=1326 audit(1766200814.765:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.9.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b21ebf749 code=0x7ffc0000
[  149.564518][ T7141] FAULT_INJECTION: forcing a failure.
[  149.564518][ T7141] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  149.577664][ T7141] CPU: 0 UID: 0 PID: 7141 Comm: syz.3.889 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  149.577743][ T7141] Tainted: [W]=WARN
[  149.577752][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  149.577858][ T7141] Call Trace:
[  149.577865][ T7141]  <TASK>
[  149.577872][ T7141]  __dump_stack+0x1d/0x30
[  149.577903][ T7141]  dump_stack_lvl+0xe8/0x140
[  149.577927][ T7141]  dump_stack+0x15/0x1b
[  149.577947][ T7141]  should_fail_ex+0x265/0x280
[  149.578034][ T7141]  should_fail+0xb/0x20
[  149.578061][ T7141]  should_fail_usercopy+0x1a/0x20
[  149.578122][ T7141]  _copy_from_user+0x1c/0xb0
[  149.578206][ T7141]  __copy_msghdr+0x244/0x300
[  149.578245][ T7141]  ___sys_sendmsg+0x109/0x1d0
[  149.578296][ T7141]  __x64_sys_sendmsg+0xd4/0x160
[  149.578340][ T7141]  x64_sys_call+0x17ba/0x3000
[  149.578385][ T7141]  do_syscall_64+0xd8/0x2c0
[  149.578430][ T7141]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.578460][ T7141] RIP: 0033:0x7fc67e5bf749
[  149.578480][ T7141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.578501][ T7141] RSP: 002b:00007fc67d027038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  149.578520][ T7141] RAX: ffffffffffffffda RBX: 00007fc67e815fa0 RCX: 00007fc67e5bf749
[  149.578532][ T7141] RDX: 0000000020000000 RSI: 0000200000000600 RDI: 0000000000000006
[  149.578545][ T7141] RBP: 00007fc67d027090 R08: 0000000000000000 R09: 0000000000000000
[  149.578604][ T7141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  149.578621][ T7141] R13: 00007fc67e816038 R14: 00007fc67e815fa0 R15: 00007ffe3d89dbb8
[  149.578645][ T7141]  </TASK>
[  149.750523][ T7139] EXT4-fs: inline encryption not supported
[  149.777953][ T7144] netlink: 104 bytes leftover after parsing attributes in process `syz.1.890'.
[  149.795638][ T7139] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.835242][ T7150] sctp: [Deprecated]: syz.9.892 (pid 7150) Use of int in maxseg socket option.
[  149.835242][ T7150] Use struct sctp_assoc_value instead
[  149.901755][ T6942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.954760][ T7160] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7160 comm=syz.6.895
[  150.001897][ T7160] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=7160 comm=syz.6.895
[  150.087795][ T7171] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  150.110107][ T7171] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.117398][ T7171] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.128310][ T7169] set_capacity_and_notify: 8 callbacks suppressed
[  150.128325][ T7169] loop3: detected capacity change from 0 to 4096
[  150.144296][ T7171] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  150.171782][ T7169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.208996][ T7173] loop6: detected capacity change from 0 to 4096
[  150.226480][ T7173] EXT4-fs: Ignoring removed nomblk_io_submit option
[  150.267849][ T7173] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.320153][ T7182] loop1: detected capacity change from 0 to 512
[  150.328142][ T7173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.346136][ T7182] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  150.365467][ T7182] EXT4-fs error (device loop1): ext4_quota_enable:7173: comm syz.1.903: Bad quota inum: 4, type: 2
[  150.391996][ T7182] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix.
[  150.435639][ T7182] EXT4-fs (loop1): mount failed
[  150.469491][ T7182] loop1: detected capacity change from 0 to 512
[  150.477680][ T7182] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  150.493819][ T7182] EXT4-fs (loop1): 1 truncate cleaned up
[  150.505731][ T7182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.561636][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.903'.
[  150.813459][ T7192] loop9: detected capacity change from 0 to 1024
[  150.820280][ T7192] EXT4-fs: inline encryption not supported
[  150.837959][ T7192] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.875354][ T5725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.056836][ T6682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.120895][ T7215] netlink: 68 bytes leftover after parsing attributes in process `syz.6.914'.
[  151.132061][ T7212] loop9: detected capacity change from 0 to 4096
[  151.146328][ T7215] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.158386][ T7212] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.193505][ T7214] mmap: syz.6.914 (7214): VmData 29208576 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data.
[  151.254108][ T6706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.613498][ T5725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.678373][ T7231] loop9: detected capacity change from 0 to 512
[  151.696462][ T7231] ext3: Unknown parameter 'audit'
[  152.139203][ T7239] loop3: detected capacity change from 0 to 1024
[  152.146143][ T7239] EXT4-fs: inline encryption not supported
[  152.242403][ T7239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.285758][ T7239] IPv6: NLM_F_CREATE should be specified when creating new route
[  152.312631][ T7239] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.922: Allocating blocks 385-513 which overlap fs metadata
[  152.343731][ T7239] EXT4-fs (loop3): pa ffff8881079a2700: logic 16, phys. 129, len 24
[  152.351813][ T7239] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8
[  152.382881][ T7239] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[  152.396819][ T7239] EXT4-fs (loop3): This should not happen!! Data will be lost
[  152.396819][ T7239] 
[  152.406553][ T7239] EXT4-fs (loop3): Total free blocks count 0
[  152.412631][ T7239] EXT4-fs (loop3): Free/Dirty block details
[  152.418617][ T7239] EXT4-fs (loop3): free_blocks=128
[  152.423821][ T7239] EXT4-fs (loop3): dirty_blocks=0
[  152.428875][ T7239] EXT4-fs (loop3): Block reservation details
[  152.434901][ T7239] EXT4-fs (loop3): i_reserved_data_blocks=0
[  152.537606][ T7215] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.577607][ T7215] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.685093][ T7215] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.766655][ T5807] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.786050][   T37] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.809850][   T37] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.824682][   T37] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.866110][ T7264] loop1: detected capacity change from 0 to 4096
[  152.890957][ T7264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.915950][ T7267] loop6: detected capacity change from 0 to 512
[  152.961952][ T7267] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  153.043213][ T7267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.081923][ T7272] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  153.090695][ T7267] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  153.132848][ T7272] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.190813][ T7272] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  153.209182][ T7281] FAULT_INJECTION: forcing a failure.
[  153.209182][ T7281] name failslab, interval 1, probability 0, space 0, times 0
[  153.222002][ T7281] CPU: 1 UID: 0 PID: 7281 Comm: syz.3.935 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  153.222042][ T7281] Tainted: [W]=WARN
[  153.222053][ T7281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  153.222067][ T7281] Call Trace:
[  153.222073][ T7281]  <TASK>
[  153.222079][ T7281]  __dump_stack+0x1d/0x30
[  153.222101][ T7281]  dump_stack_lvl+0xe8/0x140
[  153.222122][ T7281]  dump_stack+0x15/0x1b
[  153.222140][ T7281]  should_fail_ex+0x265/0x280
[  153.222162][ T7281]  should_failslab+0x8c/0xb0
[  153.222182][ T7281]  kmem_cache_alloc_noprof+0x69/0x4b0
[  153.222203][ T7281]  ? mas_dup_build+0x205/0xde0
[  153.222222][ T7281]  mas_dup_build+0x205/0xde0
[  153.222239][ T7281]  ? pcpu_block_update_hint_alloc+0x63d/0x660
[  153.222270][ T7281]  ? css_rstat_updated+0xbb/0x280
[  153.222289][ T7281]  __mt_dup+0xe7/0x1a0
[  153.222312][ T7281]  dup_mmap+0x266/0xea0
[  153.222353][ T7281]  copy_mm+0x11a/0x370
[  153.222386][ T7281]  copy_process+0xcbc/0x1ef0
[  153.222409][ T7281]  kernel_clone+0x16c/0x5c0
[  153.222427][ T7281]  ? vfs_write+0x7e8/0x960
[  153.222445][ T7281]  __x64_sys_clone+0xe6/0x120
[  153.222471][ T7281]  x64_sys_call+0x12d0/0x3000
[  153.222493][ T7281]  do_syscall_64+0xd8/0x2c0
[  153.222523][ T7281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.222542][ T7281] RIP: 0033:0x7fc67e5bf749
[  153.222555][ T7281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.222571][ T7281] RSP: 002b:00007fc67d026fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[  153.222588][ T7281] RAX: ffffffffffffffda RBX: 00007fc67e815fa0 RCX: 00007fc67e5bf749
[  153.222599][ T7281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000002080
[  153.222610][ T7281] RBP: 00007fc67d027090 R08: 0000000000000000 R09: 0000000000000000
[  153.222621][ T7281] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
[  153.222632][ T7281] R13: 00007fc67e816038 R14: 00007fc67e815fa0 R15: 00007ffe3d89dbb8
[  153.222648][ T7281]  </TASK>
[  153.521822][ T6942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.535262][ T5725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.594950][ T7288] netlink: 'syz.9.938': attribute type 10 has an invalid length.
[  153.602758][ T7288] netlink: 40 bytes leftover after parsing attributes in process `syz.9.938'.
[  153.624816][ T7288] team0: Failed to send options change via netlink (err -105)
[  153.632393][ T7288] team0: Port device geneve1 added
[  153.724165][ T7293] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  153.760429][ T6706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.090052][ T7313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.946'.
[  154.151893][ T7317] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  154.179730][ T7317] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  154.282543][   T29] kauditd_printk_skb: 194 callbacks suppressed
[  154.282564][   T29] audit: type=1326 audit(1766200819.715:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.6.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc9241af749 code=0x7ffc0000
[  154.327083][   T29] audit: type=1326 audit(1766200819.715:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.6.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc9241af749 code=0x7ffc0000
[  154.334142][ T7327] netlink: 'syz.6.950': attribute type 4 has an invalid length.
[  154.404537][ T7327] netlink: 24 bytes leftover after parsing attributes in process `syz.6.950'.
[  154.412465][ T7331] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.953: Parent and EA inode have the same ino 15
[  154.426612][ T7331] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.953: Parent and EA inode have the same ino 15
[  154.429166][ T7332] netlink: 24 bytes leftover after parsing attributes in process `syz.6.950'.
[  154.464659][ T7331] EXT4-fs (loop9): 1 orphan inode deleted
[  154.532767][ T7327] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.543492][ T7327] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.579699][ T4147] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.589139][ T4147] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.602789][ T4147] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.618098][ T7348] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  154.635256][ T4147] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.648682][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.9.953'.
[  154.682535][ T7350] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  154.694373][   T29] audit: type=1326 audit(1766200820.115:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7349 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  154.717824][   T29] audit: type=1326 audit(1766200820.115:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7349 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  154.741178][   T29] audit: type=1326 audit(1766200820.115:4727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7349 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  154.764669][   T29] audit: type=1326 audit(1766200820.115:4728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7349 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  154.788209][   T29] audit: type=1326 audit(1766200820.115:4729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7349 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  154.811673][   T29] audit: type=1326 audit(1766200820.115:4730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7349 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  154.835091][   T29] audit: type=1326 audit(1766200820.125:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7349 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  154.858460][   T29] audit: type=1326 audit(1766200820.125:4732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7349 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  154.887349][ T7352] FAULT_INJECTION: forcing a failure.
[  154.887349][ T7352] name failslab, interval 1, probability 0, space 0, times 0
[  154.900071][ T7352] CPU: 1 UID: 0 PID: 7352 Comm: syz.3.957 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  154.900115][ T7352] Tainted: [W]=WARN
[  154.900125][ T7352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  154.900153][ T7352] Call Trace:
[  154.900162][ T7352]  <TASK>
[  154.900179][ T7352]  __dump_stack+0x1d/0x30
[  154.900249][ T7352]  dump_stack_lvl+0xe8/0x140
[  154.900281][ T7352]  dump_stack+0x15/0x1b
[  154.900309][ T7352]  should_fail_ex+0x265/0x280
[  154.900338][ T7352]  should_failslab+0x8c/0xb0
[  154.900362][ T7352]  __kmalloc_node_track_caller_noprof+0xb9/0x5b0
[  154.900438][ T7352]  ? sidtab_sid2str_get+0xa0/0x130
[  154.900484][ T7352]  kmemdup_noprof+0x2b/0x70
[  154.900511][ T7352]  sidtab_sid2str_get+0xa0/0x130
[  154.900554][ T7352]  security_sid_to_context_core+0x1eb/0x2e0
[  154.900631][ T7352]  security_sid_to_context+0x27/0x40
[  154.900661][ T7352]  selinux_lsmprop_to_secctx+0x67/0xf0
[  154.900714][ T7352]  security_lsmprop_to_secctx+0x1a3/0x1c0
[  154.900747][ T7352]  audit_log_subj_ctx+0xa4/0x3e0
[  154.900779][ T7352]  ? skb_put+0xa9/0xf0
[  154.900810][ T7352]  audit_log_task_context+0x48/0x70
[  154.900891][ T7352]  audit_log_task+0xf4/0x250
[  154.900931][ T7352]  ? kstrtouint+0x76/0xc0
[  154.901014][ T7352]  audit_seccomp+0x61/0x100
[  154.901116][ T7352]  ? __seccomp_filter+0x832/0x1260
[  154.901161][ T7352]  __seccomp_filter+0x843/0x1260
[  154.901214][ T7352]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  154.901250][ T7352]  ? vfs_write+0x7e8/0x960
[  154.901334][ T7352]  ? __rcu_read_unlock+0x4f/0x70
[  154.901365][ T7352]  ? __fget_files+0x184/0x1c0
[  154.901466][ T7352]  __secure_computing+0x82/0x150
[  154.901575][ T7352]  syscall_trace_enter+0xcf/0x1e0
[  154.901608][ T7352]  do_syscall_64+0xb2/0x2c0
[  154.901655][ T7352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.901761][ T7352] RIP: 0033:0x7fc67e5bf749
[  154.901850][ T7352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.901874][ T7352] RSP: 002b:00007fc67d027038 EFLAGS: 00000246 ORIG_RAX: 000000000000008c
[  154.901900][ T7352] RAX: ffffffffffffffda RBX: 00007fc67e815fa0 RCX: 00007fc67e5bf749
[  154.901992][ T7352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  154.902010][ T7352] RBP: 00007fc67d027090 R08: 0000000000000000 R09: 0000000000000000
[  154.902026][ T7352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  154.902044][ T7352] R13: 00007fc67e816038 R14: 00007fc67e815fa0 R15: 00007ffe3d89dbb8
[  154.902070][ T7352]  </TASK>
[  155.235143][ T7364] set_capacity_and_notify: 4 callbacks suppressed
[  155.235219][ T7364] loop3: detected capacity change from 0 to 1024
[  155.248982][ T7364] EXT4-fs: inline encryption not supported
[  155.315454][ T7371] loop1: detected capacity change from 0 to 1024
[  155.327241][ T7371] EXT4-fs: inline encryption not supported
[  155.337520][ T7373] loop9: detected capacity change from 0 to 128
[  156.044210][ T7382] loop3: detected capacity change from 0 to 512
[  156.051375][ T7382] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  156.064336][ T7382] EXT4-fs (loop3): 1 truncate cleaned up
[  156.157708][ T6490] Process accounting resumed
[  156.360650][ T7398] vhci_hcd vhci_hcd.1: default hub control req: a100 vfdfe i0000 l0
[  156.376442][ T7400] netlink: 'syz.1.973': attribute type 2 has an invalid length.
[  156.384387][ T7400] netlink: 'syz.1.973': attribute type 8 has an invalid length.
[  156.392248][ T7400] netlink: 132 bytes leftover after parsing attributes in process `syz.1.973'.
[  156.578461][ T7408] FAULT_INJECTION: forcing a failure.
[  156.578461][ T7408] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  156.591817][ T7408] CPU: 0 UID: 0 PID: 7408 Comm: syz.9.974 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  156.591854][ T7408] Tainted: [W]=WARN
[  156.591864][ T7408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  156.591881][ T7408] Call Trace:
[  156.591889][ T7408]  <TASK>
[  156.591954][ T7408]  __dump_stack+0x1d/0x30
[  156.591981][ T7408]  dump_stack_lvl+0xe8/0x140
[  156.592005][ T7408]  dump_stack+0x15/0x1b
[  156.592027][ T7408]  should_fail_ex+0x265/0x280
[  156.592053][ T7408]  should_fail_alloc_page+0xf2/0x100
[  156.592135][ T7408]  __alloc_frozen_pages_noprof+0x109/0x360
[  156.592171][ T7408]  alloc_pages_mpol+0xb3/0x260
[  156.592205][ T7408]  folio_alloc_noprof+0x97/0x150
[  156.592290][ T7408]  filemap_alloc_folio_noprof+0x93/0x230
[  156.592328][ T7408]  __filemap_get_folio_mpol+0x295/0x650
[  156.592378][ T7408]  ? __kmalloc_noprof+0x2b4/0x5a0
[  156.592405][ T7408]  aio_setup_ring+0x26f/0x760
[  156.592439][ T7408]  ioctx_alloc+0x2aa/0x4c0
[  156.592469][ T7408]  __se_sys_io_setup+0x6b/0x1b0
[  156.592528][ T7408]  __x64_sys_io_setup+0x31/0x40
[  156.592553][ T7408]  x64_sys_call+0x2a8e/0x3000
[  156.592578][ T7408]  do_syscall_64+0xd8/0x2c0
[  156.592662][ T7408]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.592684][ T7408] RIP: 0033:0x7f1b21ebf749
[  156.592700][ T7408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.592779][ T7408] RSP: 002b:00007f1b20927038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  156.592798][ T7408] RAX: ffffffffffffffda RBX: 00007f1b22115fa0 RCX: 00007f1b21ebf749
[  156.592811][ T7408] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 00000000000003ff
[  156.592883][ T7408] RBP: 00007f1b20927090 R08: 0000000000000000 R09: 0000000000000000
[  156.592895][ T7408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  156.592948][ T7408] R13: 00007f1b22116038 R14: 00007f1b22115fa0 R15: 00007fff30f28b28
[  156.592969][ T7408]  </TASK>
[  156.884822][ T7418] loop3: detected capacity change from 0 to 1024
[  156.893525][ T7418] EXT4-fs: inline encryption not supported
[  156.935011][ T7419] netlink: 164 bytes leftover after parsing attributes in process `syz.1.979'.
[  156.975294][ T7426] loop9: detected capacity change from 0 to 1024
[  156.982488][ T7426] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities
[  157.191678][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  157.687436][ T7434] netlink: 'syz.3.982': attribute type 1 has an invalid length.
[  157.706699][ T7434] 8021q: adding VLAN 0 to HW filter on device bond1
[  157.724920][ T7434] 8021q: adding VLAN 0 to HW filter on device bond1
[  157.733535][ T7434] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  157.745664][ T7434] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  157.929817][ T7442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.984'.
[  157.973781][ T7442] loop3: detected capacity change from 0 to 1024
[  157.989353][ T7442] EXT4-fs: dax option not supported
[  158.012412][ T7442] loop3: detected capacity change from 0 to 128
[  158.052967][ T7442] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  158.155554][ T7462] FAULT_INJECTION: forcing a failure.
[  158.155554][ T7462] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  158.168911][ T7462] CPU: 1 UID: 0 PID: 7462 Comm: syz.1.990 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  158.168951][ T7462] Tainted: [W]=WARN
[  158.168961][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  158.168978][ T7462] Call Trace:
[  158.168986][ T7462]  <TASK>
[  158.168995][ T7462]  __dump_stack+0x1d/0x30
[  158.169057][ T7462]  dump_stack_lvl+0xe8/0x140
[  158.169082][ T7462]  dump_stack+0x15/0x1b
[  158.169108][ T7462]  should_fail_ex+0x265/0x280
[  158.169213][ T7462]  should_fail+0xb/0x20
[  158.169237][ T7462]  should_fail_usercopy+0x1a/0x20
[  158.169331][ T7462]  strncpy_from_user+0x27/0x260
[  158.169376][ T7462]  getname_flags+0xae/0x3b0
[  158.169401][ T7462]  io_renameat_prep+0x105/0x1b0
[  158.169506][ T7462]  io_submit_sqes+0x70f/0x11b0
[  158.169553][ T7462]  __se_sys_io_uring_enter+0x1bd/0x1a30
[  158.169579][ T7462]  ? 0xffffffff81000000
[  158.169596][ T7462]  ? __rcu_read_unlock+0x4f/0x70
[  158.169699][ T7462]  ? proc_fail_nth_write+0x13b/0x160
[  158.169734][ T7462]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  158.169768][ T7462]  ? vfs_write+0x7e8/0x960
[  158.169792][ T7462]  ? __rcu_read_unlock+0x4f/0x70
[  158.169843][ T7462]  ? __fget_files+0x184/0x1c0
[  158.169871][ T7462]  ? mutex_unlock+0x4f/0x90
[  158.169964][ T7462]  ? fput+0x8f/0xc0
[  158.169993][ T7462]  __x64_sys_io_uring_enter+0x78/0x90
[  158.170077][ T7462]  x64_sys_call+0x27e4/0x3000
[  158.170110][ T7462]  do_syscall_64+0xd8/0x2c0
[  158.170164][ T7462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.170200][ T7462] RIP: 0033:0x7f1f450ff749
[  158.170216][ T7462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.170235][ T7462] RSP: 002b:00007f1f43b67038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  158.170254][ T7462] RAX: ffffffffffffffda RBX: 00007f1f45355fa0 RCX: 00007f1f450ff749
[  158.170292][ T7462] RDX: 0000000000003acd RSI: 0000000000005535 RDI: 0000000000000003
[  158.170309][ T7462] RBP: 00007f1f43b67090 R08: 0000000000000000 R09: 0000000000000000
[  158.170324][ T7462] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001
[  158.170337][ T7462] R13: 00007f1f45356038 R14: 00007f1f45355fa0 R15: 00007fffe1825cc8
[  158.170361][ T7462]  </TASK>
[  158.459971][ T7467] loop1: detected capacity change from 0 to 512
[  158.484987][ T7467] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.576994][ T7478] vhci_hcd vhci_hcd.2: invalid port number 96
[  158.583322][ T7478] vhci_hcd vhci_hcd.2: default hub control req: 8011 v0005 i0060 l7
[  158.633723][ T6961] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.653049][ T7482] loop1: detected capacity change from 0 to 1024
[  158.660087][ T7482] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  158.701981][ T6961] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.714197][ T7485] netlink: 'syz.9.995': attribute type 12 has an invalid length.
[  158.722143][ T7485] netlink: 'syz.9.995': attribute type 29 has an invalid length.
[  158.730068][ T7485] netlink: 148 bytes leftover after parsing attributes in process `syz.9.995'.
[  158.739361][ T7485] netlink: 43 bytes leftover after parsing attributes in process `syz.9.995'.
[  158.775627][ T7470] chnl_net:caif_netlink_parms(): no params data found
[  158.791157][ T6961] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.834243][ T7470] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.841706][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.849368][ T7470] bridge_slave_0: entered allmulticast mode
[  158.856086][ T7470] bridge_slave_0: entered promiscuous mode
[  158.866218][ T6961] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.877917][ T7470] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.885027][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.892221][ T7470] bridge_slave_1: entered allmulticast mode
[  158.898638][ T7470] bridge_slave_1: entered promiscuous mode
[  158.918841][ T7470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.929616][ T7470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.953441][ T7470] team0: Port device team_slave_0 added
[  158.960578][ T7470] team0: Port device team_slave_1 added
[  158.983935][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.990993][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  159.017575][ T7470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.031542][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.038515][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  159.064493][ T7470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.098942][ T6961] bridge_slave_1: left allmulticast mode
[  159.104792][ T6961] bridge_slave_1: left promiscuous mode
[  159.110527][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.121653][ T6961] bridge_slave_0: left allmulticast mode
[  159.127304][ T6961] bridge_slave_0: left promiscuous mode
[  159.133075][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.229705][ T6961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.239724][ T6961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.249247][ T6961] bond0 (unregistering): Released all slaves
[  159.259771][ T7470] hsr_slave_0: entered promiscuous mode
[  159.266364][ T7470] hsr_slave_1: entered promiscuous mode
[  159.272689][ T7470] debugfs: 'hsr0' already exists in 'hsr'
[  159.278440][ T7470] Cannot create hsr debugfs directory
[  159.297907][ T6961] hsr_slave_0: left promiscuous mode
[  159.304666][ T6961] hsr_slave_1: left promiscuous mode
[  159.310318][ T6961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.317855][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.325584][ T6961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.333002][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.344187][ T6961] veth1_macvtap: left promiscuous mode
[  159.349667][ T6961] veth0_macvtap: left promiscuous mode
[  159.355241][ T6961] veth1_vlan: left promiscuous mode
[  159.360575][ T6961] veth0_vlan: left promiscuous mode
[  159.448031][ T6961] team0 (unregistering): Port device team_slave_1 removed
[  159.459520][ T6961] team0 (unregistering): Port device team_slave_0 removed
[  159.541129][   T29] kauditd_printk_skb: 277 callbacks suppressed
[  159.541148][   T29] audit: type=1400 audit(1766200824.965:5007): avc:  denied  { module_load } for  pid=7497 comm="syz.1.997" path="/sys/kernel/notes" dev="sysfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  159.586793][ T7500] netlink: 'syz.9.998': attribute type 4 has an invalid length.
[  159.634372][ T7500] netlink: 'syz.9.998': attribute type 4 has an invalid length.
[  159.762561][ T7502] EXT4-fs: dax option not supported
[  159.777804][   T29] audit: type=1326 audit(1766200825.205:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  159.812961][   T29] audit: type=1326 audit(1766200825.205:5009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  159.836399][   T29] audit: type=1326 audit(1766200825.205:5010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  159.851340][ T7514] bridge0: entered promiscuous mode
[  159.859864][   T29] audit: type=1326 audit(1766200825.205:5011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  159.877792][ T7514] macsec1: entered promiscuous mode
[  159.888668][   T29] audit: type=1326 audit(1766200825.205:5012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  159.917337][   T29] audit: type=1326 audit(1766200825.205:5013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  159.940784][   T29] audit: type=1400 audit(1766200825.205:5014): avc:  denied  { create } for  pid=7501 comm="syz.1.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  159.960174][   T29] audit: type=1326 audit(1766200825.205:5015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  159.983637][   T29] audit: type=1326 audit(1766200825.205:5016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  159.992635][ T7516] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  160.028592][ T7516] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  160.052609][ T7521] ext4: Unknown parameter 'noacl'
[  160.108947][ T7470] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  160.140446][ T7470] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  160.157892][ T7470] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  160.171327][ T7470] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  160.171389][ T7524] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.1006: Parent and EA inode have the same ino 15
[  160.190925][ T7524] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.1006: Parent and EA inode have the same ino 15
[  160.216282][ T7524] EXT4-fs (loop1): 1 orphan inode deleted
[  160.262241][ T7470] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.280732][ T7470] 8021q: adding VLAN 0 to HW filter on device team0
[  160.296735][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'.
[  160.310059][ T4147] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.317193][ T4147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.346583][ T4147] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.353696][ T4147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.433199][ T7470] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.592511][ T7470] veth0_vlan: entered promiscuous mode
[  160.603748][ T7470] veth1_vlan: entered promiscuous mode
[  160.625271][ T7470] veth0_macvtap: entered promiscuous mode
[  160.645351][ T7470] veth1_macvtap: entered promiscuous mode
[  160.659954][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_0
[  160.675283][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.687445][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.707457][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.719733][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.745535][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.947267][ T7572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1014'.
[  160.956318][ T7572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1014'.
[  160.969551][ T7572] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1014'.
[  161.006984][ T7575] set_capacity_and_notify: 4 callbacks suppressed
[  161.007004][ T7575] loop5: detected capacity change from 0 to 1024
[  161.065716][ T7575] EXT4-fs: inline encryption not supported
[  161.084110][ T7578] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  161.113914][ T7585] SELinux: security_context_str_to_sid (s) failed with errno=-22
[  161.122990][ T7585] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  161.185147][ T7587] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1013'.
[  161.538374][ T7595] loop9: detected capacity change from 0 to 512
[  161.587025][ T7595] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.1019: Parent and EA inode have the same ino 15
[  161.665692][ T7595] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.1019: Parent and EA inode have the same ino 15
[  161.708097][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1020'.
[  161.717073][ T7603] netlink: 'syz.1.1020': attribute type 15 has an invalid length.
[  161.765911][ T7595] EXT4-fs (loop9): 1 orphan inode deleted
[  161.843104][ T7603] vxlan0: entered promiscuous mode
[  161.865367][   T31] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  161.882059][   T31] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  161.900738][   T31] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  161.919985][   T31] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  162.476493][ T6961] tipc: Subscription rejected, illegal request
[  162.540419][ T7629] netlink: 'syz.9.1028': attribute type 21 has an invalid length.
[  162.548671][ T7629] netlink: 'syz.9.1028': attribute type 1 has an invalid length.
[  162.556543][ T7629] netlink: 144 bytes leftover after parsing attributes in process `syz.9.1028'.
[  162.612455][ T7632] loop9: detected capacity change from 0 to 4096
[  162.702319][ T7635] loop1: detected capacity change from 0 to 4096
[  162.902701][ T7635] EXT4-fs mount: 25 callbacks suppressed
[  162.902719][ T7635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.982326][ T5725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.046823][ T7647] loop5: detected capacity change from 0 to 512
[  163.054262][ T7647] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  163.073752][ T7649] loop6: detected capacity change from 0 to 512
[  163.104167][ T7647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.129063][ T7649] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.1036: Parent and EA inode have the same ino 15
[  163.153503][ T7649] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.1036: Parent and EA inode have the same ino 15
[  163.166190][ T7647] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  163.182275][ T7649] EXT4-fs (loop6): 1 orphan inode deleted
[  163.259326][ T7649] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.297851][ T7650] loop9: detected capacity change from 0 to 512
[  163.315749][ T7650] vfat: Unknown parameter 'ip6gre0'
[  163.341718][ T7470] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.374098][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1038'.
[  163.507227][ T7671] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  163.541722][ T6706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.638849][ T7677] loop1: detected capacity change from 0 to 1024
[  163.645665][ T7677] EXT4-fs: inline encryption not supported
[  163.663279][ T7677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.934526][ T6942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.962388][ T7683] loop6: detected capacity change from 0 to 2048
[  163.973002][ T7683] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.992397][ T7683] netlink: 268 bytes leftover after parsing attributes in process `syz.6.1043'.
[  164.001621][ T7683] unsupported nla_type 65024
[  164.061771][ T6942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.112196][ T7691] TCP: TCP_TX_DELAY enabled
[  164.134690][ T7693] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1046'.
[  164.214444][ T7697] loop6: detected capacity change from 0 to 512
[  164.222356][ T7697] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  164.236603][ T7697] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.249407][ T7697] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  164.313541][ T7701] EXT4-fs: Ignoring removed nomblk_io_submit option
[  164.326542][ T6942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.327221][ T7701] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  164.343604][ T7701] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102]
[  164.355049][ T7704] FAULT_INJECTION: forcing a failure.
[  164.355049][ T7704] name failslab, interval 1, probability 0, space 0, times 0
[  164.367807][ T7704] CPU: 0 UID: 0 PID: 7704 Comm: syz.5.1051 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  164.367867][ T7704] Tainted: [W]=WARN
[  164.367876][ T7704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  164.367924][ T7704] Call Trace:
[  164.368011][ T7704]  <TASK>
[  164.368022][ T7704]  __dump_stack+0x1d/0x30
[  164.368054][ T7704]  dump_stack_lvl+0xe8/0x140
[  164.368086][ T7704]  dump_stack+0x15/0x1b
[  164.368201][ T7704]  should_fail_ex+0x265/0x280
[  164.368234][ T7704]  should_failslab+0x8c/0xb0
[  164.368266][ T7704]  kmem_cache_alloc_noprof+0x69/0x4b0
[  164.368297][ T7704]  ? sk_prot_alloc+0x3f/0x190
[  164.368343][ T7704]  sk_prot_alloc+0x3f/0x190
[  164.368449][ T7704]  sk_alloc+0x34/0x3d0
[  164.368486][ T7704]  inet_create+0x3c0/0x780
[  164.368528][ T7704]  __sock_create+0x2e5/0x580
[  164.368558][ T7704]  sock_create_kern+0x38/0x50
[  164.368580][ T7704]  udp_sock_create4+0x66/0x2a0
[  164.368613][ T7704]  rxrpc_lookup_local+0x824/0xc70
[  164.368651][ T7704]  rxrpc_sendmsg+0x2f3/0x590
[  164.368698][ T7704]  ? __pfx_rxrpc_sendmsg+0x10/0x10
[  164.368733][ T7704]  __sock_sendmsg+0x145/0x180
[  164.368757][ T7704]  ____sys_sendmsg+0x31e/0x4a0
[  164.368790][ T7704]  ___sys_sendmsg+0x17b/0x1d0
[  164.368894][ T7704]  __x64_sys_sendmsg+0xd4/0x160
[  164.368939][ T7704]  x64_sys_call+0x17ba/0x3000
[  164.368973][ T7704]  do_syscall_64+0xd8/0x2c0
[  164.369100][ T7704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.369132][ T7704] RIP: 0033:0x7fb36b2af749
[  164.369152][ T7704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.369177][ T7704] RSP: 002b:00007fb369d0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  164.369203][ T7704] RAX: ffffffffffffffda RBX: 00007fb36b505fa0 RCX: 00007fb36b2af749
[  164.369297][ T7704] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006
[  164.369313][ T7704] RBP: 00007fb369d0f090 R08: 0000000000000000 R09: 0000000000000000
[  164.369330][ T7704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  164.369346][ T7704] R13: 00007fb36b506038 R14: 00007fb36b505fa0 R15: 00007ffd438521d8
[  164.369368][ T7704]  </TASK>
[  164.369582][ T7701] EXT4-fs (loop9): couldn't mount RDWR because of unsupported optional features (80)
[  164.495531][ T7707] xt_CT: You must specify a L4 protocol and not use inversions on it
[  164.499359][ T7701] EXT4-fs (loop9): Skipping orphan cleanup due to unknown ROCOMPAT features
[  164.517587][ T7701] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  164.624666][ T6706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.630303][ T7701] EXT4-fs warning (device loop9): dx_probe:861: inode #2: comm syz.9.1049: dx entry: limit 65535 != root limit 120
[  164.646177][ T7701] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1049: Corrupt directory, running e2fsck is recommended
[  164.676697][ T5725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.677930][ T7709] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  164.719600][ T7709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.732488][ T7709] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  164.759763][ T7719] IPVS: Unknown mcast interface: ipvlan1
[  164.782605][ T7719] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  164.866463][   T29] kauditd_printk_skb: 51 callbacks suppressed
[  164.866482][   T29] audit: type=1400 audit(1766200830.285:5068): avc:  denied  { setopt } for  pid=7716 comm="syz.6.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  164.870357][ T7729] netlink: 'syz.9.1055': attribute type 1 has an invalid length.
[  164.906722][ T6706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.915840][   T29] audit: type=1400 audit(1766200830.335:5069): avc:  denied  { append } for  pid=7723 comm="syz.5.1058" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  164.951399][   T29] audit: type=1326 audit(1766200830.375:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  164.979499][   T29] audit: type=1326 audit(1766200830.375:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  165.003023][   T29] audit: type=1326 audit(1766200830.385:5072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  165.026510][   T29] audit: type=1326 audit(1766200830.385:5073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  165.051382][   T29] audit: type=1326 audit(1766200830.385:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  165.075119][   T29] audit: type=1326 audit(1766200830.385:5075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  165.098401][   T29] audit: type=1326 audit(1766200830.385:5076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  165.121922][   T29] audit: type=1326 audit(1766200830.385:5077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f1f450ff749 code=0x7ffc0000
[  165.152859][ T7729] bond1 (unregistering): Released all slaves
[  165.185018][ T7740] netlink: 'syz.1.1062': attribute type 30 has an invalid length.
[  165.204593][ T7737] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  165.238798][ T7737] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.279341][ T7737] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  165.461706][ T7742] SELinux: failed to load policy
[  165.528815][ T6942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.093647][ T7768] set_capacity_and_notify: 4 callbacks suppressed
[  166.093664][ T7768] loop9: detected capacity change from 0 to 4096
[  166.115551][ T7768] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.415384][ T7781] loop1: detected capacity change from 0 to 512
[  166.422789][ T7781] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  166.438759][ T7783] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  166.462822][ T7781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.489827][ T7781] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  166.602465][ T6706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.656799][ T7791] loop1: detected capacity change from 0 to 128
[  166.676091][ T7791] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  166.707986][ T7791] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  166.777974][ T7791] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  166.786231][ T7791] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  166.803359][ T7798] Cannot find map_set index 0 as target
[  166.823648][ T7798] __nla_validate_parse: 4 callbacks suppressed
[  166.823664][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1081'.
[  166.840739][ T5725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.882009][ T7802] xt_CT: You must specify a L4 protocol and not use inversions on it
[  166.895931][ T7804] loop1: detected capacity change from 0 to 4096
[  166.916308][ T7804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.939659][ T7808] pim6reg1: entered promiscuous mode
[  166.945040][ T7808] pim6reg1: entered allmulticast mode
[  166.983399][ T7819] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1089'.
[  167.007537][ T7812] loop3: detected capacity change from 0 to 1024
[  167.014589][ T7812] EXT4-fs: inline encryption not supported
[  167.035514][ T7817] loop6: detected capacity change from 0 to 512
[  167.042936][ T7817] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  167.053094][ T7812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.092620][ T7817] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.111697][ T7827] loop9: detected capacity change from 0 to 512
[  167.127585][ T7827] ext4: Unknown parameter 'noacl'
[  167.138259][ T7817] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  167.314457][ T6942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.504497][ T7838] xt_CT: You must specify a L4 protocol and not use inversions on it
[  167.707781][ T7840] loop6: detected capacity change from 0 to 512
[  167.715742][ T7840] EXT4-fs: Ignoring removed i_version option
[  167.722131][ T7840] EXT4-fs: Ignoring removed bh option
[  167.733753][ T6682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.747237][ T6706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.772942][ T7840] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.798455][ T7840] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  167.847023][ T7852] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  168.019870][ T7861] netlink: 'syz.1.1100': attribute type 6 has an invalid length.
[  168.027779][ T7861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1100'.
[  168.195148][ T7861] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  168.223309][ T7866] loop9: detected capacity change from 0 to 512
[  168.351016][ T7866] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.401262][ T7876] loop1: detected capacity change from 0 to 512
[  168.456526][ T7878] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm wÞ£ÿ: corrupted inode contents
[  168.472704][ T7876] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  168.485284][ T7866] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.500013][ T7878] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #3: comm wÞ£ÿ: mark_inode_dirty error
[  168.511737][ T7878] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm wÞ£ÿ: corrupted inode contents
[  168.523831][ T7878] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm wÞ£ÿ: mark_inode_dirty error
[  168.535478][ T7878] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm wÞ£ÿ: Failed to acquire dquot type 0
[  168.558552][ T5725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.596177][ T7878] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm wÞ£ÿ: corrupted inode contents
[  168.608655][ T7876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.625174][ T7878] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #16: comm wÞ£ÿ: mark_inode_dirty error
[  168.625562][ T6942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.651909][ T7876] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  168.662329][ T7878] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm wÞ£ÿ: corrupted inode contents
[  168.676523][ T7884] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  168.685302][ T7878] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm wÞ£ÿ: mark_inode_dirty error
[  168.710676][ T7878] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm wÞ£ÿ: corrupted inode contents
[  168.737967][ T7878] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  168.756588][ T7884] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.779890][ T7878] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm wÞ£ÿ: corrupted inode contents
[  168.792056][ T7878] EXT4-fs error (device loop3): ext4_truncate:4635: inode #16: comm wÞ£ÿ: mark_inode_dirty error
[  168.793200][ T6706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.803678][ T7878] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  168.818329][ T7884] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  168.835997][ T7878] EXT4-fs (loop3): 1 truncate cleaned up
[  168.845280][ T7878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.857993][ T7878] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.907525][ T6682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.927773][ T7892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.944034][ T7892] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.967630][ T7892] FAULT_INJECTION: forcing a failure.
[  168.967630][ T7892] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  168.980829][ T7892] CPU: 1 UID: 0 PID: 7892 Comm: syz.1.1107 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  168.980920][ T7892] Tainted: [W]=WARN
[  168.980927][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  168.980941][ T7892] Call Trace:
[  168.980949][ T7892]  <TASK>
[  168.980960][ T7892]  __dump_stack+0x1d/0x30
[  168.980993][ T7892]  dump_stack_lvl+0xe8/0x140
[  168.981025][ T7892]  dump_stack+0x15/0x1b
[  168.981111][ T7892]  should_fail_ex+0x265/0x280
[  168.981154][ T7892]  should_fail+0xb/0x20
[  168.981199][ T7892]  should_fail_usercopy+0x1a/0x20
[  168.981278][ T7892]  _copy_to_user+0x20/0xa0
[  168.981319][ T7892]  simple_read_from_buffer+0xb5/0x130
[  168.981347][ T7892]  proc_fail_nth_read+0x10e/0x150
[  168.981427][ T7892]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  168.981467][ T7892]  vfs_read+0x1a8/0x770
[  168.981521][ T7892]  ? __rcu_read_unlock+0x4f/0x70
[  168.981549][ T7892]  ? __fget_files+0x184/0x1c0
[  168.981647][ T7892]  ? mutex_lock+0x58/0x90
[  168.981687][ T7892]  ksys_read+0xda/0x1a0
[  168.981735][ T7892]  __x64_sys_read+0x40/0x50
[  168.981758][ T7892]  x64_sys_call+0x2889/0x3000
[  168.981793][ T7892]  do_syscall_64+0xd8/0x2c0
[  168.981904][ T7892]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.981935][ T7892] RIP: 0033:0x7f1f450fe15c
[  168.981955][ T7892] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  168.981982][ T7892] RSP: 002b:00007f1f43b67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  168.982004][ T7892] RAX: ffffffffffffffda RBX: 00007f1f45355fa0 RCX: 00007f1f450fe15c
[  168.982076][ T7892] RDX: 000000000000000f RSI: 00007f1f43b670a0 RDI: 0000000000000006
[  168.982094][ T7892] RBP: 00007f1f43b67090 R08: 0000000000000000 R09: 0000000000000000
[  168.982110][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.982124][ T7892] R13: 00007f1f45356038 R14: 00007f1f45355fa0 R15: 00007fffe1825cc8
[  168.982145][ T7892]  </TASK>
[  169.184285][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1110'.
[  169.194296][ T6706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.221194][ T5725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.221478][ T7902] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1110'.
[  169.304857][ T7912] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  169.348430][ T7917] xt_recent: Unsupported userspace flags (000000b1)
[  169.433667][ T7920] Cannot find add_set index 0 as target
[  169.456066][ T7922] can0: slcan on ptm0.
[  169.494019][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'.
[  169.512753][ T7924] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  169.591493][ T7922] can0 (unregistered): slcan off ptm0.
[  169.804332][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1122'.
[  169.813805][ T7933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=7933 comm=syz.1.1122
[  169.943719][ T7936] netlink: 'syz.1.1123': attribute type 4 has an invalid length.
[  170.143567][ T7940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.226270][ T7940] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.651539][ T6961] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:14: bg 0: block 345: padding at end of block bitmap is not set
[  170.686695][ T6961] EXT4-fs (loop1): Remounting filesystem read-only
[  170.864188][ T6706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.894017][ T7953] ==================================================================
[  170.902184][ T7953] BUG: KCSAN: data-race in __tty_hangup / io_file_get_normal
[  170.909628][ T7953] 
[  170.911978][ T7953] write to 0xffff888103de0d88 of 8 bytes by task 7956 on cpu 0:
[  170.919635][ T7953]  __tty_hangup+0x1ef/0x540
[  170.924170][ T7953]  tty_ioctl+0x601/0xb80
[  170.928430][ T7953]  __se_sys_ioctl+0xce/0x140
[  170.933041][ T7953]  __x64_sys_ioctl+0x43/0x50
[  170.937657][ T7953]  x64_sys_call+0x14b0/0x3000
[  170.942364][ T7953]  do_syscall_64+0xd8/0x2c0
[  170.946895][ T7953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.952808][ T7953] 
[  170.955153][ T7953] read to 0xffff888103de0d88 of 8 bytes by task 7953 on cpu 1:
[  170.962696][ T7953]  io_file_get_normal+0x3b/0x180
[  170.967659][ T7953]  io_assign_file+0x9e/0x200
[  170.972274][ T7953]  io_issue_sqe+0x40/0xa80
[  170.976711][ T7953]  io_submit_sqes+0x78b/0x11b0
[  170.981494][ T7953]  __se_sys_io_uring_enter+0x1bd/0x1a30
[  170.987054][ T7953]  __x64_sys_io_uring_enter+0x78/0x90
[  170.992432][ T7953]  x64_sys_call+0x27e4/0x3000
[  170.997121][ T7953]  do_syscall_64+0xd8/0x2c0
[  171.001643][ T7953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.007549][ T7953] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  171.009898][ T7953] value changed: 0xffffffff858a6020 -> 0xffffffff858a5f10
[  171.017017][ T7953] 
[  171.019340][ T7953] Reported by Kernel Concurrency Sanitizer on:
[  171.025496][ T7953] CPU: 1 UID: 0 PID: 7953 Comm: syz.3.1130 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  171.036793][ T7953] Tainted: [W]=WARN
[  171.040619][ T7953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  171.050683][ T7953] ==================================================================
[  171.395941][ T6961] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.476834][ T6961] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.534063][ T6961] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.584411][ T6961] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.666239][ T6961] bridge_slave_1: left allmulticast mode
[  171.672038][ T6961] bridge_slave_1: left promiscuous mode
[  171.677692][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.685453][ T6961] bridge_slave_0: left allmulticast mode
[  171.691112][ T6961] bridge_slave_0: left promiscuous mode
[  171.696833][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.735641][ T6961] team0: Port device geneve1 removed
[  171.783985][ T6961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.793799][ T6961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.803128][ T6961] bond0 (unregistering): Released all slaves
[  171.862991][ T6961] tipc: Left network mode
[  171.868295][ T6961] hsr_slave_0: left promiscuous mode
[  171.874213][ T6961] hsr_slave_1: left promiscuous mode
[  171.912980][ T6961] team0 (unregistering): Port device team_slave_0 removed
[  172.177293][ T6961] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.274669][ T6961] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.314363][ T6961] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.394252][ T6961] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.488626][ T6961] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.514122][ T6961] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.564343][ T6961] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.637882][ T6961] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.847411][ T6961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.857826][ T6961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.894664][ T6961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.904980][ T6961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.974672][ T6961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.985030][ T6961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.044206][ T6961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  173.054577][ T6961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.136152][ T6961] bridge_slave_1: left allmulticast mode
[  173.141902][ T6961] bridge_slave_1: left promiscuous mode
[  173.147567][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.155478][ T6961] bridge_slave_0: left allmulticast mode
[  173.161137][ T6961] bridge_slave_0: left promiscuous mode
[  173.166877][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.175531][ T6961] bridge_slave_1: left allmulticast mode
[  173.181175][ T6961] bridge_slave_1: left promiscuous mode
[  173.186832][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.194916][ T6961] bridge_slave_0: left allmulticast mode
[  173.200627][ T6961] bridge_slave_0: left promiscuous mode
[  173.206464][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.214590][ T6961] bridge_slave_1: left allmulticast mode
[  173.220236][ T6961] bridge_slave_1: left promiscuous mode
[  173.225966][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.233849][ T6961] bridge_slave_0: left allmulticast mode
[  173.239485][ T6961] bridge_slave_0: left promiscuous mode
[  173.245223][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.253361][ T6961] bridge_slave_1: left allmulticast mode
[  173.259110][ T6961] bridge_slave_1: left promiscuous mode
[  173.264800][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.272562][ T6961] bridge_slave_0: left allmulticast mode
[  173.278217][ T6961] bridge_slave_0: left promiscuous mode
[  173.283862][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.403549][ T6961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.413355][ T6961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.422864][ T6961] bond0 (unregistering): Released all slaves
[  173.504551][ T6961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.514177][ T6961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.523588][ T6961] bond0 (unregistering): Released all slaves
[  173.532245][ T6961] bond1 (unregistering): Released all slaves
[  173.583120][ T6961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.592877][ T6961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.602076][ T6961] bond0 (unregistering): Released all slaves
[  173.664760][ T6961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.674653][ T6961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.684237][ T6961] bond0 (unregistering): Released all slaves
[  173.731524][ T6961] hsr_slave_0: left promiscuous mode
[  173.737287][ T6961] hsr_slave_1: left promiscuous mode
[  173.743006][ T6961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.750426][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.758548][ T6961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.765996][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.775379][ T6961] hsr_slave_0: left promiscuous mode
[  173.780989][ T6961] hsr_slave_1: left promiscuous mode
[  173.786669][ T6961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.794048][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.801560][ T6961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.808937][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.818328][ T6961] hsr_slave_0: left promiscuous mode
[  173.824013][ T6961] hsr_slave_1: left promiscuous mode
[  173.829621][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.837510][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.846453][ T6961] hsr_slave_0: left promiscuous mode
[  173.852166][ T6961] hsr_slave_1: left promiscuous mode
[  173.857663][ T6961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.865084][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.872684][ T6961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.880092][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.895023][ T6961] veth1_macvtap: left promiscuous mode
[  173.900499][ T6961] veth0_macvtap: left promiscuous mode
[  173.906156][ T6961] veth1_vlan: left promiscuous mode
[  173.911411][ T6961] veth0_vlan: left promiscuous mode
[  173.917110][ T6961] veth1_macvtap: left promiscuous mode
[  173.922859][ T6961] veth0_macvtap: left promiscuous mode
[  173.928421][ T6961] veth1_vlan: left promiscuous mode
[  173.933921][ T6961] veth0_vlan: left promiscuous mode
[  173.939679][ T6961] veth1_macvtap: left promiscuous mode
[  173.945207][ T6961] veth0_macvtap: left promiscuous mode
[  173.950716][ T6961] veth1_vlan: left promiscuous mode
[  173.955963][ T6961] veth0_vlan: left promiscuous mode
[  174.094148][ T6961] team0 (unregistering): Port device team_slave_1 removed
[  174.103861][ T6961] team0 (unregistering): Port device team_slave_0 removed
[  174.162246][ T6961] team0 (unregistering): Port device team_slave_1 removed
[  174.172078][ T6961] team0 (unregistering): Port device team_slave_0 removed
[  174.228017][ T6961] team0 (unregistering): Port device team_slave_1 removed
[  174.239214][ T6961] team0 (unregistering): Port device team_slave_0 removed
[  174.296937][ T6961] team0 (unregistering): Port device team_slave_1 removed
[  174.307156][ T6961] team0 (unregistering): Port device team_slave_0 removed