last executing test programs:

2m32.161905728s ago: executing program 4 (id=2023):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreqn(r2, 0x0, 0x4, 0x0, 0x0)

2m32.161056108s ago: executing program 4 (id=2024):
syz_read_part_table(0x5d4, &(0x7f0000000000)="$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")
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000600)={'syztnl1\x00', <r3=>0x0, 0x0, 0x80, 0x8, 0x4, {{0x5, 0x4, 0x0, 0x20, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @broadcast, @local}}}})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r0, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0, 0x5d, &(0x7f0000000940)=[{}, {}], 0x10, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xa0, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0x0, 0x5, 0x10}, 0xc)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50)
pipe2(&(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r11, 0x0, r10, 0x0, 0x6, 0x0)
readv(r9, &(0x7f0000000680)=[{&(0x7f0000000440)=""/196, 0xc4}], 0x1)
fcntl$setstatus(r10, 0x4, 0x7c00)
dup3(r11, r10, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r10, {0x4}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r10, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{0xffffffffffffffff, <r12=>0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)='%pI4   \x00'}, 0x20)
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)={0x1b, 0x0, 0x0, 0x7, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50)
pipe2$watch_queue(&(0x7f0000000e00)={0xffffffffffffffff, <r14=>0xffffffffffffffff}, 0x80)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e40)={0xffffffffffffffff, <r15=>0xffffffffffffffff}, 0x4)
r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)=@generic={&(0x7f0000000e80)='./file0\x00'}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000f00)={{0x1, 0x1, 0x18, <r17=>r2}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x14, 0x1e, &(0x7f0000001440)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000010001007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r17, @ANYBLOB="0000000000000000b70500000800000085000000a500000018510000010000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x5, 0x59, &(0x7f00000006c0)=""/89, 0x40f00, 0x0, '\x00', r3, @lirc_mode2=0x10, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x3, 0x4, 0x7, 0x6}, 0x10, r5, r1, 0x2, &(0x7f0000000f40)=[r6, r7, r8, r10, r12, r13, r14, r15, r16, r17], &(0x7f0000000f80)=[{0x5, 0x5, 0xe, 0xc}, {0x5, 0x1, 0xa, 0x1}], 0x10, 0x9}, 0x94)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001080)=@newtaction={0xc4, 0x30, 0x4, 0x0, 0x0, {}, [{0xb0, 0x1, [@m_tunnel_key={0xac, 0x201, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x408, 0xfffffffffffffff5, 0x6, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x35, 0x6, "96d54a90e9d041425ea123b4d0602ca866c509000000000000008042e72ef3d2eda1ded2000900"/49}, {0xc}, {0xc}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000814}, 0x0)

2m31.223721605s ago: executing program 4 (id=2038):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x5f501}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x20008000)
r9 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), r7)
sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r9, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x7fffffff]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004084}, 0x8000)
read$rfkill(r4, &(0x7f0000000040), 0x8)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x100, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x5}, @in6={0xa, 0x4e22, 0x3ff, @private1, 0x63}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0x6d3e, @empty, 0x4}, @in6={0xa, 0x4e22, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, @in6={0xa, 0x4e21, 0x2, @remote, 0xe}, @in6={0xa, 0x4e21, 0x5, @private2, 0x4}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, @in6={0xa, 0x4e20, 0x6, @local, 0x6}]}, &(0x7f0000000380)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000600)={0x1, 0xc, 0x200, 0x7, 0xf1, 0x80000000, 0x7, 0xd09}, &(0x7f0000000640)=0x20)
ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f00000005c0))
openat(r4, &(0x7f0000000040)='./file2\x00', 0x143842, 0xe3)

2m31.1621953s ago: executing program 4 (id=2039):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f5, &(0x7f00000008c0)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r2}, 0x18)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x1c5)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
unlink(&(0x7f0000000180)='./file0\x00')
r4 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
sendmmsg$inet(r4, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be57aff9352b356be67ca2746357d1787b35", 0x14}], 0x1}}], 0x2, 0x4004040)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r5}, 0x38)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfdef)
write$P9_RGETATTR(r8, &(0x7f00000005c0)={0xa0, 0x19, 0x2, {0x100, {0x80, 0x3}, 0x0, 0xffffffffffffffff, 0x0, 0x8d, 0x4a86, 0x7, 0x76, 0x3, 0x6000000000, 0xfffffffffffffff8, 0x200000000, 0x5, 0xfffffffffffffffd, 0x6, 0x27, 0x5, 0x2, 0x90}}, 0xa0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x182d17, &(0x7f00000000c0)={[], [{@euid_gt}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}, {@subj_user={'subj_user', 0x3d, '/'}}]}, 0x3, 0x45b, &(0x7f0000000140)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoJQOaJK3BFHJP4CTnBBwAmJK9xRpQr1QoGL0dq79SO2G6dOXOrPR9pmZnfsma9nx57d6QYwtCayf5KInRHxa0SM1bLNBSZqf65fuzD/17UL80lUKm/+kVTL/XntwnxRtHjdjjwzmUaknySxv029y+fOn5orlxfP5vnpldPvTi+fO//0ydNzJxZPLJ6ZPXr0yOGZ556dfaYvcd6VtXXfB0sH9r761uXX549dfvvHr5Mi/pY4+mSi28HHKpU+VzdYuxrSycgAG0JPShGRdddodfyPRSnqnTcWr3w80MYBG6qS63D4YgW4gyUx6BYAg1H80GfXv8W2ebOPwbv6Yu0CKIv7er7VjoxEGrULo9GW69t+moiIYxf//iLbYmPuQwAANPk2m/881W7+l8a9DeX+n68NjedrKbsj4u6I2BMR90RUy94XEff3WH/rIsnq+U96ZV2BrVE2/3s+X9tqnv+lRZHxUp7bVc2MJsdPlhcP5Z/JZIxuzfIzXer47uVfPut0rHH+l21Z/cVcMG/HlZGtza9ZmFuZu5WYG139KGLfSLv4kxsrAUlE7I2Ifeus4+QTXx3odKw1/krS7Z1eaM72YZ2p8mXE47X+vxgt8ReS7uuT0/+L8uKh6eKsWO2nny+90an+m/f/xsr6f3vb8/9G/ONJ43rtcu91XPrt047XNFPrOv/rO7bkf9+fW1k5OxOxJXmt1ujG/bP1eIp8UT6Lf/Jg+/G/O+qfxP6IyE7iByLiwYh4KO+7hyPikYg42CX+H1569J1Ox9bW//90vkN/i7L4F1r6f7y5SEv/1xNbonVP+0Tp1PffNL9jL/Fn/X+kmprM96zl+28t7Vrf2QwAAAD/PWlE7IwknbqRTtOpqdr/4d8T29Py0vLKk8eX3juzUHtGYDxG0+JOV+1+cO1+6Ex+WV/kZ1vyh/P7xp+XtlXzU/NL5YVBBw9DbkeH8Z/5vTTo1gEbzvNaMLyMfxhexj8ML+Mfhleb8b9tEO0ANl+73/8P68nK2GY2BthULePfsh8MEdf/MLyMfxhejeO/6/P3wJ1keVvc/CF5CYlViUhvi2a0SWQ/Zz2+KtngUbDzNvhYekwM+psJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgP/4NAAD//6mY5+0=")
r9 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x130)
getdents(r9, &(0x7f0000001fc0)=""/184, 0xb8)

2m30.282953882s ago: executing program 4 (id=2048):
syz_read_part_table(0x5d4, &(0x7f0000000000)="$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")
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000600)={'syztnl1\x00', <r3=>0x0, 0x0, 0x80, 0x8, 0x4, {{0x5, 0x4, 0x0, 0x20, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @broadcast, @local}}}})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r0, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0, 0x5d, &(0x7f0000000940)=[{}, {}], 0x10, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xa0, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000002000000040000000000"], 0x50)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0x0, 0x5, 0x10}, 0xc)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50)
pipe2(&(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r11, 0x0, r10, 0x0, 0x6, 0x0)
readv(r9, &(0x7f0000000680)=[{&(0x7f0000000440)=""/196, 0xc4}], 0x1)
fcntl$setstatus(r10, 0x4, 0x7c00)
dup3(r11, r10, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r10, {0x4}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r10, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{0xffffffffffffffff, <r12=>0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)='%pI4   \x00'}, 0x20)
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)={0x1b, 0x0, 0x0, 0x7, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50)
pipe2$watch_queue(&(0x7f0000000e00)={0xffffffffffffffff, <r14=>0xffffffffffffffff}, 0x80)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e40)={0xffffffffffffffff, <r15=>0xffffffffffffffff}, 0x4)
r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)=@generic={&(0x7f0000000e80)='./file0\x00'}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000f00)={{0x1, 0x1, 0x18, <r17=>r2}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x14, 0x1e, &(0x7f0000001440)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000010001007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r17, @ANYBLOB="0000000000000000b70500000800000085000000a500000018510000010000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x5, 0x59, &(0x7f00000006c0)=""/89, 0x40f00, 0x0, '\x00', r3, @lirc_mode2=0x10, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x3, 0x4, 0x7, 0x6}, 0x10, r5, r1, 0x2, &(0x7f0000000f40)=[r6, r7, r8, r10, r12, r13, r14, r15, r16, r17], &(0x7f0000000f80)=[{0x5, 0x5, 0xe, 0xc}, {0x5, 0x1, 0xa, 0x1}], 0x10, 0x9}, 0x94)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001080)=@newtaction={0xc4, 0x30, 0x4, 0x0, 0x0, {}, [{0xb0, 0x1, [@m_tunnel_key={0xac, 0x201, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x408, 0xfffffffffffffff5, 0x6, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x35, 0x6, "96d54a90e9d041425ea123b4d0602ca866c509000000000000008042e72ef3d2eda1ded2000900"/49}, {0xc}, {0xc}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000814}, 0x0)

2m29.801818171s ago: executing program 4 (id=2051):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x80}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', <r2=>0x0})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r1, {0x4}}, './file0\x00'})
write$tun(r3, &(0x7f0000000140)={@void, @void, @mpls={[{0x29, 0x0, 0x1}], @llc={@llc={0x96960127bed6230d, 0xaa, "f99d", "adc29c9966652a2e8f19160c3474df0ddcc9ab2fb80584984841fef45213e0c4384235741daa"}}}}, 0x2e)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x6, '\x00', r2, 0xffffffffffffffff, 0x3, 0x1}, 0x50)

2m29.787758732s ago: executing program 32 (id=2051):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x80}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', <r2=>0x0})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r1, {0x4}}, './file0\x00'})
write$tun(r3, &(0x7f0000000140)={@void, @void, @mpls={[{0x29, 0x0, 0x1}], @llc={@llc={0x96960127bed6230d, 0xaa, "f99d", "adc29c9966652a2e8f19160c3474df0ddcc9ab2fb80584984841fef45213e0c4384235741daa"}}}}, 0x2e)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x6, '\x00', r2, 0xffffffffffffffff, 0x3, 0x1}, 0x50)

2m23.407347713s ago: executing program 1 (id=2140):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18)
pipe2(&(0x7f0000000380)={<r1=>0xffffffffffffffff}, 0x4000)
r2 = openat(r1, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
openat(r2, &(0x7f0000000200)='./file2\x00', 0x10400, 0x101)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0xe0000, 0x10b)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0)
r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
getpid()
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
close_range(r3, 0xffffffffffffffff, 0x0)

2m23.406656303s ago: executing program 1 (id=2141):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xf0, 0x30, 0xffff, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x6c, 0x2, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xfe4e, 0x3, {0x2, 0x1b1, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x26e6}}, @TCA_GACT_PROB={0xfffffffffffffe74, 0x3, {0x1, 0x18a8, 0x6}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xf0}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, <r4=>0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000340)={0x3, 0x2, 0x8, 0x3, 0x3ff})
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@sb={'sb', 0x3d, 0x8}}, {@data_err_ignore}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}]}, 0x1, 0x56f, &(0x7f0000001000)="$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")
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6c, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x14}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r8, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x3, @loopback, 0xa}, 0x1c, 0x0}}], 0x1, 0x200880c0)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r7, 0x111, 0x1, 0x0, 0x4)
getsockopt$inet6_buf(r8, 0x29, 0x3d, &(0x7f00000020c0)=""/171, &(0x7f0000000000)=0xab)

2m23.269744795s ago: executing program 1 (id=2143):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffce6, &(0x7f0000000300)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000f920df47a600000000000018110080", @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f00000004c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400444}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x20, r3, 0x200, 0x70bd2a, 0x25dfcc02, {{}, {@void, @val={0xc, 0x99, {0x15abfacb, 0x6}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r4}, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xffffffffffffffff, 0x3e, 0x9, 0x2}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000004ced0000001c0000001c00000002000000000000000000000903000000000000000000000105000000080000000000"], 0x0, 0x36}, 0x28)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18)
pipe2(&(0x7f0000000040), 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="9ebb870ac8d2abc65182c2cb54ff5ef9fad9e4d5f28a8ca440d18315de74ee4b3c4ac41386ab931802abb76ea4cc898271a4c70da09024d554dea909c0722764d2e14108b1166ed6fc56b96589e28bb53deff566349be19221d0861a941582f81a47c4ae2950b9e41dd7014e8489fd45888d666cc6e49b4decd5ff52ff8577515fdacfbacde9275f3563c65f35317ad7e637e27b95d4340d644d2d43e668cb84ba7f1fb84ec13f64a3f2e0d23a5f7d3fd7"], 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40)

2m23.268994405s ago: executing program 1 (id=2144):
modify_ldt$read(0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10}, 0xc0011122)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xe, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0xa65d2b7db4b56451)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', r3}, 0x18)
r5 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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")
r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
openat(r5, 0x0, 0x640, 0x2)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0xfd, 0x0, 0x0, 0x7, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0xd}, 0x4e58, 0x10000, 0x0, 0x1, 0xce, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x3, 0xffffffffffffffff, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r8=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r9=>0xffffffffffffffff})
bind$unix(r9, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e)
close_range(r8, 0xffffffffffffffff, 0x0)
keyctl$unlink(0x9, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0)
r10 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r10, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r10, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@cswp={0x58, 0x114, 0x7, {{0x6, 0xff}, &(0x7f0000000000)=0x400, 0x0, 0xe, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xca2a}}], 0x58, 0x40014}, 0x0)
write$binfmt_register(r6, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

2m23.21385503s ago: executing program 1 (id=2145):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='f2fs_gc_end\x00', r1, 0x0, 0xf}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000000000000002, &(0x7f0000000e80)={<r3=>0xffffffffffffffff}, 0x2, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r3, 0x1}}, 0x18)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000600)={[{@grpjquota}, {@lazytime}, {@barrier}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@journal_async_commit}], [{@seclabel}]}, 0x3, 0x446, &(0x7f0000000d40)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r2, @ANYBLOB='\x00'/22, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x400)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f00000005c0), 0x10)
recvmmsg(r4, &(0x7f00000099c0), 0x0, 0x10002, 0x0)
ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f00000011c0)={0xf})
sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0xfffffffffffffe4e, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8000010}, 0x20004801)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0, &(0x7f00000004c0)='%pI4   \x00'}, 0x20)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x2200, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff00000000000000f6ff060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x1003}, 0x38)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x1b, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRESOCT=r5, @ANYBLOB="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", @ANYBLOB], 0x0, 0x81, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r8, r8, 0xffffffffffffffff, r8], 0x0, 0x10, 0xfffff765}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='rxrpc_tx_fail\x00', r9, 0x0, 0xa8}, 0x18)
r10 = getpid()
sched_setscheduler(r10, 0x5, &(0x7f0000000200)=0x8)

2m23.031047434s ago: executing program 1 (id=2146):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
mq_notify(0xffffffffffffffff, 0x0)

2m23.012665026s ago: executing program 33 (id=2146):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
mq_notify(0xffffffffffffffff, 0x0)

1m57.50771085s ago: executing program 6 (id=2527):
syz_read_part_table(0x5d4, &(0x7f0000000000)="$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")
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000600)={'syztnl1\x00', <r3=>0x0, 0x0, 0x80, 0x8, 0x4, {{0x5, 0x4, 0x0, 0x20, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @broadcast, @local}}}})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r0, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0, 0x5d, &(0x7f0000000940)=[{}, {}], 0x10, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xa0, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB, @ANYRES32, @ANYBLOB="02000000020000000400"/28], 0x50)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0x0, 0x5, 0x10}, 0xc)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50)
pipe2(&(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r11, 0x0, r10, 0x0, 0x6, 0x0)
readv(r9, &(0x7f0000000680)=[{&(0x7f0000000440)=""/196, 0xc4}], 0x1)
fcntl$setstatus(r10, 0x4, 0x7c00)
dup3(r11, r10, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r10, {0x4}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r10, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{0xffffffffffffffff, <r12=>0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)='%pI4   \x00'}, 0x20)
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)={0x1b, 0x0, 0x0, 0x7, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50)
pipe2$watch_queue(&(0x7f0000000e00)={0xffffffffffffffff, <r14=>0xffffffffffffffff}, 0x80)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e40)={0xffffffffffffffff, <r15=>0xffffffffffffffff}, 0x4)
r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)=@generic={&(0x7f0000000e80)='./file0\x00'}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000f00)={{0x1, 0x1, 0x18, <r17=>r2}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x14, 0x1e, &(0x7f0000001440)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000010001007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r17, @ANYBLOB="0000000000000000b70500000800000085000000a500000018510000010000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x5, 0x59, &(0x7f00000006c0)=""/89, 0x40f00, 0x0, '\x00', r3, @lirc_mode2=0x10, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x3, 0x4, 0x7, 0x6}, 0x10, r5, r1, 0x2, &(0x7f0000000f40)=[r6, r7, r8, r10, r12, r13, r14, r15, r16, r17], &(0x7f0000000f80)=[{0x5, 0x5, 0xe, 0xc}, {0x5, 0x1, 0xa, 0x1}], 0x10, 0x9}, 0x94)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001080)=@newtaction={0xc4, 0x30, 0x4, 0x0, 0x0, {}, [{0xb0, 0x1, [@m_tunnel_key={0xac, 0x201, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x408, 0xfffffffffffffff5, 0x6, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x35, 0x6, "96d54a90e9d041425ea123b4d0602ca866c509000000000000008042e72ef3d2eda1ded2000900"/49}, {0xc}, {0xc}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000814}, 0x0)

1m56.197994826s ago: executing program 6 (id=2546):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = syz_io_uring_setup(0x82e, &(0x7f00000004c0)={0x0, 0xb39d, 0x100, 0x1, 0x20005}, &(0x7f0000000000), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000380), 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003400)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703170008000000b704000000001600020095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b4})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={<r5=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000003340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=<r7=>0x0, &(0x7f0000000340)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000})
io_uring_enter(r6, 0x1c3a, 0xe176, 0x22, 0x0, 0x0)
sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003280)="3bfdd75fa571e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee892115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459eb00000000000000a5de11d601d3487f88ca6e5e00100000000000459e8dbc326a99b1b50276dc4f06166000d7069a3cc76f00"/187, 0xbb}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000680)="a68cde956998f3c8681f32c7b7dd3174d3547190d609000000c1969a56a3696b", 0x20}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xca3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xfe9e}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r9 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000dbffffff00000000ff070000850000006400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r9)
r12 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0x5}, {0xffff, 0xffe1}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80000000}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7fffffff}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_RTT={0x8, 0x7, 0x9}]}}]}, 0x6c}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r9, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\r\x00\x00', @ANYRES16=r11, @ANYBLOB="000028bd7000fedbdf250a00000008000600", @ANYRES32=r13, @ANYBLOB='\b\x00\v\x00\t\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4008840}, 0x8000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]})
pwritev2(r9, &(0x7f0000000240), 0x0, 0x7c00, 0x0, 0x3)

1m56.096247865s ago: executing program 6 (id=2547):
eventfd2(0x2, 0x800)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x1000}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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")
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88240, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

1m55.404355942s ago: executing program 6 (id=2562):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0xa, 0x2c450, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4e59, 0x10000, 0x0, 0x8, 0x8, 0x20002, 0x40a, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="580100001000130728bd700000000000ac1414aa000000000000000000000000200100000000000008000000000000024e200001000000000a00000084000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff010000000000000000000000000001000000002b000000200100000000000000000000000000010400000000000000000000000100000008000000000000000100000001000000060000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000007000000000000000c000000000000000000000029bd7000000000000a0000000000000000000000680012"], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in6=@private0}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$SO_COOKIE(r6, 0x1, 0x47, &(0x7f0000000040), &(0x7f0000000080)=0x8)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$eJzs3d9rZFcdAPDvvcmkyW5qpiqyFmyLrewW3ZmksRpF2gqiTwW1vq8xmYSQSSZkJnUTiqb4BwgiKvgH+CL44KMg/RNEWNB3UVFEd/VR98qdudH8mEnGZJJZJ58PnMw598f5nnPJ3Lk/DvcGcG29EBFvRMRYRLwcETPF9LRIsd9J+XKPHr6zlKcksuytvyaRFNMO6srL4xFxs1htMiK++qWIbyQn4zZ399YX6/XadlGutja2qs3dvbtrG4urtdXa5vz83M8j4tWF2axwoX6WI+K1L/zxB9/9yRdf++Unvvm7e3++8628WZ/7UKfdEbF0oQA9dOoutbfFgXwbbV9GsCHJ+1MaG3YrAADoR36M//6I+Gj7+H8mxtpHcwAAAMAoyV6fjn8mERkAAAAwstKImI4krRRjAaYjTSuVzhjeD8aNtN5otj6+0tjZXM7nRZSjlK6s1WuzxVjhcpSSvDxXjLE9KL9yrDwfEc9ExPdnptrlylKjvjzsix8AAABwTdx8/uj5/z9m0nYeAAAAGDHlngUAAABgVDjlBwAAgNHn/B8AAABG2pfffDNP2cF7vJff3t1Zb7x9d7nWXK9s7CxVlhrbW5XVRmO1/cy+jbPqqzcaW5+MzZ371Vat2ao2d/fubTR2Nlv31o68AhsAAAC4Qs88/95vk4jY/+xUO0XxHECAI/4w7AYAgzQ27AYAQzM+7AYAQ1M6cwl7CBh1yRnzTw7e6VwrjF9dTnsAAIDBu/3hk/f/J4p5Z18bAP6fGesDANfP0bt7U0NrB3D1SucdAXhr0C0BhuV9nY+nes3v+fCOPu7/d64xZNm5GgYAAAzMdDslaaU4Tp+ONK1UIp6Ox1k5SsnKWr02W5wf/Gam9FRenmuvmZw5ZhgAAAAAAAAAAAAAAAAAAAAAAAAA6MiyJDIAAABgpEWkf0raT/OPuD3z0vTRqwPH3vr147d+eH+x1dqei5hI/jaTT5qIiNaPiumvZF4JAAAAAMM1lf/pnKcXn3PDbhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo+bRw3eWDtJVxv3L5yOi3C3+eEy2PyejFBE3/p7E+KH1kogYG0D8/Xcj4la3+Ek8zrKsXLSiW/ypS45fbm+a7vHTiLg5gPhwnb2X73/e6Pb9S+OF9mf37994kS6q9/4v/c/+b6zH/ufpY+Venn3ws2rP+O9GPDveff9zED/pxD8SIi+82Gcfv/61vb2uMw5V2S3+4VjV1sZWtbm7d3dtY3G1tlrbnJ+f+9TCpxdeXZitrqzVa8XfrmG+95FfPD6t/zd6xC8f7f+J7f9SX73P4l8P7j/8QKdQ6hb/zovdf39v9YifFr99Hyvy+fzbB/n9Tv6w53766+dO6/9yj/5PntH/O331Pz7z8le+8/uuc05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERet5/WBtudJyMTZy0w+IU29jEz27c7/48XqueDqJzLZRVYfjwE0Y+LE93QszlthErGf19XnPyQAADBi/nvQf9odJAAAAAAAAAAAAAAAAAAAAOAynfOxZJMR0ffCx2PuD6erAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn+ncAAAD//+8b0g8=")
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="91103b000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

1m55.248138134s ago: executing program 6 (id=2564):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffff8}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sysinfo(0x0)

1m54.897779683s ago: executing program 6 (id=2574):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)

1m54.862956186s ago: executing program 34 (id=2574):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)

12.183526235s ago: executing program 7 (id=4053):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80040, 0x46)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet6(r0, &(0x7f0000000300)="85feaa5e58bdbb3ab8a767402dbdce11bdae869c33c77c4ee1884adace36342bea0500eedb04c637b69e4daa0896408a60258c384d9fb4d3fff6c59a08cd54106cbf4937e2d0fce0a51a1dd497cc6d0eb0c35e2b6e6bef845debb271545189d3d0b6681509373c056194b128c05e96c5597f6f904c67cc06109f652126f68bfae6b3de13ca", 0xfffffffffffffe78, 0x2000081, &(0x7f0000000240)={0xa, 0x4e24, 0xc, @empty, 0xc}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d6163286165732900"/281], 0x184}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000408}, 0xc, &(0x7f0000000480)={&(0x7f00000007c0)=@delchain={0xd4, 0x65, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x9, 0xfff1}, {0xffe0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x10000}, @TCA_CHAIN={0x8, 0xb, 0xc4}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'wlan1\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_U32_INDEV={0x14, 0x8, 'team_slave_0\x00'}]}}, @filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x2, 0xfffffffb}}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb5}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x6}}, @TCA_U32_HASH={0x8, 0x2, 0x9}, @TCA_U32_LINK={0x8, 0x3, 0xea0}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0xd4}, 0x1, 0x0, 0x0, 0x90}, 0x4000)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4)
setreuid(0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55c, &(0x7f00000006c0)="$eJzs3c1vG2kZAPBnJh92u91mC3uAFdCCFgqqajfubrXay7YXEFqthFhxQBy6IXGjqHZdamfZhEpk/4ZFAokT/AkckDgg7YkDN45IHBDSckAqEIEaJJCMZux8NHGIiR17E/9+0mQ+Xs88z9tkPK/fcecNYGJdiYiNiJiNiHciYq67PelOcbszZa97uvl4cWvz8WIS7fbbf0vy8mxbvkNh95jPdY9ZjIhvfi3iu8nBuM219fsLtVr1UXe93Ko/LDfX1q+v1BeWq8vVB5XKrflbN167+WplaHW9XP/Fk6+uvPmtX//qsx/9buMrP8jSutAt26nHkHWqPrMTJzMdEW+eRLAxmOrOZ8ecB8eTRsQnIuIL+fk/F1P5XycAcJa123PRntu7DgCcdWneB5akpYhI024joNTpw3sxzqe1RrN17V5j9cFSp6/shZhJ763UqjcuFf7wvfzFM0m2Pp+X5eX5emXf+s2IuBQRPyqcy9dLi43a0niaPAAw8Z7be/2PiH8W0rRU6mvXHnf1AIBTo3jsPX1ZAABOq+Nf/wGA02rf9f/cuPIAAEanj8//3Zv9GyeeCwAwGv9f///FE8sDABgd9/8BYPK4/gPARPnGW29lU3ur+/zrpXfXVu833r2+VG3eL9VXF0uLjUcPS8uNxnL+zJ76UcerNRoP51+J1ffKrWqzVW6urd+tN1YftO7mz/W+W50ZSa0AgP/l0uUPf59ExMbr5/Ip9ozl4FoNZ1s67gSAsZkaZGcNBDjVPMALJldfl/C8kfDbE88FGI+eD/Mu9lx81k86sw/6CeJ7RvCxcvXT/ff/G+MZzhb9/zC5jtf//8bQ8wBGT/8/TK52O9k/5v/sThEAcCYN8BW+9g+H1QgBxuqowbyPuv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAk+jC7exnkpbyscDT7GdaKkU8HxEvxExyb6VWvRERF+NyRMwUsvX5cScNAAwo/UvSHf/r6tzLF/aXzib/KuTziPj+T9/+8XsLrdaj+Wz733e2F7aHD6vs7jfAuIIAwJDl1+9Kd77ng/zTzceL29Mo83lyJ/7THYp4cWvzcT51SqYj2xhRzNsS5/+RxHR3n2JEvBQRU0OIv/F+RHyqV/2TuJD3gXRGPt0bP7qxnx9p/PSZ+Gle1plnja9PDiEXmDQf3omI273OvzSu5PPe538xf4ca3JM7nYNtv/dt7Yk/3Y001SN+ds5f6TfGK7/5+oGN7blO2fsRL033ip/sxE8Oif9yn/H/+JnPffDGIWXtn0Vcjd7x98Yqt+oPy8219esr9YXl6nL1QaVya/7Wjdduvlop533U5e2e6oP++vq1i4flltX//CHxiz3rP7uz7xf7rP/P//3Odz6/u1rYH//L21v2/f5f7Bm/I7smfqnP+Avnf3no8N1Z/KVD6n/U7/9an/E/+vP6Up8vBQBGoLm2fn+hVqs+Gmgh+xQ6jOMcWMhS7O/F283FwYL+KU6iFsdcmDmpf9VjLxT7zGd6p6043DS+nR2xR1Ha5x/JcRbSoddioIWno4o1vvckYDR2T/pxZwIAAAAAAAAAAAAAABxmFP91adx1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oz6bwAAAP//yxbH0Q==")
r4 = memfd_create(&(0x7f00000003c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,U\xb1]*\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3S\xef}\xfd\x12\xbc:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f\xe2\\Z\xef\xa3\xe1c\xc5\xe6', 0x0)
write$bt_hci(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)

11.284233588s ago: executing program 7 (id=4065):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x37b1, &(0x7f00000003c0)={0x0, 0x800000, 0x0, 0x1, 0x14b})
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0xfffffffffffffe9a, 0xfffe}, {0x0}]}, 0x4}, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000300)={0x0}, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0x10f, {0x0, r5}}, 0x18)

10.176392919s ago: executing program 7 (id=4081):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}]}}}]}, 0x3c}, 0x1, 0xffffffea}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0)

10.068151908s ago: executing program 7 (id=4085):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
perf_event_open(&(0x7f0000004680)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r2}, 0x18)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
r3 = creat(&(0x7f00000000c0)='./file1\x00', 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a00)=@newqdisc={0x2c8, 0x24, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x6, 0xffff}, {0x0, 0xfff3}, {0xd, 0x3}}, [@TCA_STAB={0x134, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xf4, 0x2, 0xf, 0x2, 0x3, 0xfffff6eb, 0x5}}, {0xe, 0x2, [0xfc4, 0x6, 0x5, 0x0, 0x5]}}, {{0x1c, 0x1, {0x7, 0x8, 0x401, 0x5, 0x2, 0x0, 0x100, 0x8}}, {0x14, 0x2, [0x1, 0xe04, 0xac10, 0xf801, 0x0, 0x8000, 0xffff, 0x8001]}}, {{0x1c, 0x1, {0x1, 0x7, 0x1ff, 0x8, 0x1, 0x7f, 0x80000001, 0x4}}, {0xc, 0x2, [0x0, 0x2, 0xfff, 0x6]}}, {{0x1c, 0x1, {0x81, 0x7, 0x5, 0xffffffff, 0x1, 0x1, 0x0, 0x7}}, {0x12, 0x2, [0x2, 0x5, 0x2, 0x6, 0xfff4, 0x9e43, 0xfffd]}}, {{0x1c, 0x1, {0xbb, 0x58, 0x0, 0x6, 0x0, 0xabf6, 0x46, 0x1}}, {0x6, 0x2, [0xd2a]}}, {{0x1c, 0x1, {0x9, 0x3, 0x8, 0x4, 0x2, 0x7, 0x5, 0xa}}, {0x18, 0x2, [0x800, 0x7ff, 0x0, 0x10, 0x4, 0x1ff, 0x4, 0x6, 0xa, 0x5]}}, {{0x1c, 0x1, {0x7, 0x4, 0x8, 0x3, 0x3, 0x2, 0x1ff, 0x2}}, {0x8, 0x2, [0x1, 0x8]}}]}, @TCA_RATE={0x6, 0x5, {0xff, 0x6}}, @TCA_STAB={0x158, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x73, 0x3, 0x3, 0x0, 0x0, 0x6c, 0x22, 0x4}}, {0xc, 0x2, [0xd, 0x6d, 0x2, 0x5]}}, {{0x1c, 0x1, {0xb3, 0x2a, 0x9, 0x1, 0x2, 0x8, 0x101, 0x3}}, {0xa, 0x2, [0x7, 0x2a, 0x1]}}, {{0x1c, 0x1, {0x3, 0xb, 0x5, 0xffff, 0x2, 0x7, 0x2572, 0x5}}, {0xe, 0x2, [0x9, 0x7, 0x8, 0x2, 0x2]}}, {{0x1c, 0x1, {0x7, 0x1, 0xeb89, 0x2, 0x0, 0x6, 0x2, 0x3}}, {0xa, 0x2, [0x1d1, 0x0, 0x2]}}, {{0x1c, 0x1, {0x3, 0x57, 0x8000, 0x200, 0x0, 0xc0f, 0xf, 0x9}}, {0x16, 0x2, [0x9, 0x40, 0x9, 0xc000, 0x9, 0x80, 0x5, 0x80a1, 0x1]}}, {{0x1c, 0x1, {0x6, 0x5, 0x39ee, 0x8000, 0x2, 0x6, 0x2ca, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0x7, 0x9]}}, {{0x1c, 0x1, {0x0, 0x9, 0xf584, 0xd, 0x0, 0x5, 0x2, 0x7}}, {0x12, 0x2, [0xb2, 0x1000, 0x4, 0x3, 0x4, 0x1, 0xfffa]}}, {{0x1c, 0x1, {0x82, 0x8, 0x9, 0x2, 0x2, 0x1, 0x4, 0x1}}, {0x6, 0x2, [0xfff]}}]}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_RATE={0x6, 0x5, {0x5}}]}, 0x2c8}}, 0x40040)
truncate(&(0x7f0000000080)='./file1\x00', 0xfe0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x2}}, 0x20)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x4)
r5 = socket$xdp(0x2c, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x3200890, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000180)=""/83, 0x10a000, 0x2000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x104e8b, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000318ff2da0b4499e04dae726d928a89d8242c", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18)
r9 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x109)
sendfile(r9, r9, 0x0, 0xb)

9.79337003s ago: executing program 7 (id=4092):
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0xa65d2b7db4b56451)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
bind$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e)

8.823892469s ago: executing program 7 (id=4101):
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'lock', ' ', 'none'}, 0xa)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
pipe2(&(0x7f0000000040), 0x0)
r4 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r4, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0)

8.822339899s ago: executing program 35 (id=4101):
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'lock', ' ', 'none'}, 0xa)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
pipe2(&(0x7f0000000040), 0x0)
r4 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r4, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0)

3.221463687s ago: executing program 2 (id=4159):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000004000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000090100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x20000840)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r4 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161)
sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_retopts={{0x10}}], 0x10}, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r8=>0x0})
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x1, @broadcast}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x10010, r3, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r9, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r9, 0x26, &(0x7f0000000080)={0x2, 0x2, 0x2007, 0x1fd})
fcntl$lock(r9, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
fcntl$lock(r9, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401})
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
close_range(r10, 0xffffffffffffffff, 0x0)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x0, @local}, 0x10)
close_range(r6, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c000000040000000400", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000009377285e00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)

2.881709014s ago: executing program 2 (id=4160):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone3(0x0, 0x0)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8)
pipe2$9p(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r5 = dup(r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])

2.871456335s ago: executing program 5 (id=4161):
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f00000003c0)='GPL\x00', 0x400, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xc}, 0xfffffffffffffec9)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYRESDEC], &(0x7f0000001240)=""/160, 0x1f, 0xa0, 0x1, 0x2, 0x1008}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x7e031, r0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000000, 0x5, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
getuid()
getresuid(&(0x7f00000000c0), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000011c0), 0x0, 0x607, &(0x7f0000001300)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3jenuTpr5fGCy8zwzu8/z3cmz88zMPjsBlNZ49ieN2BVx51QSMdaybDQaC8fz9W7/du10NiVRq73+axJDeV5z/SR/3J4nhiPi26MRj1ZWl7tw5erZ6Wqt4b2I/YvnLu5fuHJ13/y56TOzZ2bPTx144eChyRenDk51Jc7t+eOx4689+fH7bz8/9111XxKH4+TguzOxIo5uGY/xuJOH2Jo/EBGHspk278vDZguEUGqV/P9xMCIej7Go1FMNYzH/UaGVA3qqVomoASWVaP9QUs1+QPPYfn3HwSd73Cvpn1tHGgdAq+MfaJwbieH6sdG220nLkVHj3MaOLpSflfHPtd2fZ1MsOw/x592tM9CFcjpZuh4RT7SLP6nXbUc90iz+dFk9koiYjKifA8ryX3mAOiQt8704D7OWjcafRsTh/DHLP7rB8sdXpPsdPwDldPNIviNfylL39n9Z36PZ/4k2/Z/RNvuujSh6/9e5/9fc3w/Xz5GnK/phWZ/lRPuXHFyZ8dOHxz7tVH5r/y+bsvKbfcF+uHU9YveK+D/Igs37P1n8SZvtn61y6vD6ynj1+1+OdVpWdPy1GxF72h7/3OuVZnNrXJ/cPzdfnZ1s/G1bxtffvPVlp/KLjj/b/ts6xN+y/dOVz8vek4vrLOOrEzfOdVo2et/405+Hksbx5lCe88704uKlqYih5Hi+Skv+gbXr0lyn+RpZ/Hufad/+l/3/X1/+OiPNj8x1uPjG2dudlm1k+7dcTL5TW2cdOsnin7n/9l/V/rO8T9ZZxh9vXn6q07K14h95kMAAAAAAAACghNL6Ndgknbg7n6YTE43xso/FtrR6YWHx2bkLl8/PROytfx9yMG1e6R5rpJMsPZV/H7aZPrAi/VxE7IyIzyoj9fTE6QvVmaKDBwAAAAAAAAAAAAAAAAAAgE1iez7+v3mf6t8rjfH/QEn08gZzwOam/UN51dv/qls8AWVg/w/lpf1DedXb/1DRtQCKYP8P5aX9Q3lp/1Be2j+Ul/YPAAAAAFvSzqdv/phExNJLI/UpWr4JaEQQbG2DRVcAKEyl6AoAhbl76V9nH0pnXf3/v/IfB+x9dYACJO0y652D2tqN/2bbZwIAAAAAAAAAAAAAPbBnV+fx/8YGw9Zm2B+U1wOM//fTAfCQ89P/UF6O8YH7jeIf7rTA+H8AAAAAAAAAAAAA6JvR+pSkE/lY4NFI04mJiP9HxI4YTObmq7OTEfFIRPxQGfxflp4qutIAAAAAAAAAAAAAAAAAAACwxSxcuXp2ulqdvdQ68/eqnK7MDEWXX7BbM827oPahrJfjPz4rkv6/LSMRUfhG6dnMQEtOErGUbflNUbFLC5upgRT8wQQAAAAAAAAAAAAAAAAAACXUMva4vd1f9LlGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANB/9+7/37uZomMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5O/wYAAP//HvQ/UQ==")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
futex(0x0, 0x2, 0xffffffff, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)=0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x68e}, 0x18)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x3, 0x0, @buffer={0x17, 0x0, 0x0}, &(0x7f0000000380)="259374", 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x47)
syz_read_part_table(0x5c8, &(0x7f0000000600)="$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")
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x46, "0040001e1d113c812e5d6000"})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
r3 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@remote, 0x4e22, 0xd439, 0x4e20, 0x1, 0xa, 0x80, 0x120, 0x73}, {0x5, 0x9, 0x0, 0xeb, 0x70000, 0x5, 0x4, 0x3}, {0x8, 0x7, 0x80000001, 0x400}, 0x6, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x33}, 0x2, @in=@private=0xa010102, 0x3502, 0x4, 0x2, 0x1, 0x201, 0x9, 0xb03}}, 0xe8)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff0000000072030000000000001d400500000000004704000001ed000072030200000000001d440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f1ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c107571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d1abf3cb17b40ac9b10968f38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d61f3b39c64307f9c82b2807c9ff4a269841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67a41b9e320146ee9f56"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x7ff}, 0x10}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000001605000300010000002000018007000100637400001400028008000240"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)

2.503851705s ago: executing program 0 (id=4163):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80040, 0x46)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet6(r0, &(0x7f0000000300)="85feaa5e58bdbb3ab8a767402dbdce11bdae869c33c77c4ee1884adace36342bea0500eedb04c637b69e4daa0896408a60258c384d9fb4d3fff6c59a08cd54106cbf4937e2d0fce0a51a1dd497cc6d0eb0c35e2b6e6bef845debb271545189d3d0b6681509373c056194b128c05e96c5597f6f904c67cc06109f652126f68bfae6b3de13ca", 0xfffffffffffffe78, 0x2000081, &(0x7f0000000240)={0xa, 0x4e24, 0xc, @empty, 0xc}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1200)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d6163286165732900"/281], 0x184}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000408}, 0xc, &(0x7f0000000480)={&(0x7f00000007c0)=@delchain={0xd4, 0x65, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x9, 0xfff1}, {0xffe0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x10000}, @TCA_CHAIN={0x8, 0xb, 0xc4}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'wlan1\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_U32_INDEV={0x14, 0x8, 'team_slave_0\x00'}]}}, @filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x2, 0xfffffffb}}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb5}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x6}}, @TCA_U32_HASH={0x8, 0x2, 0x9}, @TCA_U32_LINK={0x8, 0x3, 0xea0}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0xd4}, 0x1, 0x0, 0x0, 0x90}, 0x4000)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0)
setreuid(0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55c, &(0x7f00000006c0)="$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")
r4 = memfd_create(&(0x7f00000003c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,U\xb1]*\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3S\xef}\xfd\x12\xbc:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f\xe2\\Z\xef\xa3\xe1c\xc5\xe6', 0x0)
write$bt_hci(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)

2.44739889s ago: executing program 2 (id=4164):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
readv(r0, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1)
write$binfmt_script(r1, &(0x7f0000020240), 0x10010)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
r2 = socket(0x25, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0)
recvmmsg$unix(r2, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)}}], 0x1, 0x0, 0x0)
setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0)
signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80)
io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x39, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)

2.332644729s ago: executing program 5 (id=4165):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000007000000bf65000009"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1a, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5df6}}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40022}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xd, &(0x7f0000000040)=""/13, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x41, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)

2.243162157s ago: executing program 5 (id=4166):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b626", 0xdde}, {0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0)

2.238709197s ago: executing program 5 (id=4167):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket(0x21, 0x80004, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180002005ed84cf78200000000000000000000000095000014e2a02499a7c02ed5a026321b62f62b6dbbd5a2ed1048a06df3a863917e0b26a9f61a0c142a49e37c13e8a9bbb6b24b81541ed8fdd59efc097ca3add16e428a055e9efbf1ea4d46d2134639d5e91043f9381a84416ba832e8deb6c5d2f529958ed654c427c231785f42f5a06f35974b3e59382179b9df5138086a69c8dcda655f48c1"], &(0x7f0000000080)='GPL\x00', 0xa, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x10}, 0x94)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x13, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES8=r2, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095", @ANYRES16, @ANYRES8=r5, @ANYBLOB="6c348cfb80fffa110009038fa009d23599aca6efea31b1096736ba6a2f1f1059ed1a21423be2cc5d31592c75a579021881c45d2bc7fe7dfab88d053187bca27c55fb32f87fa2c6a8b2a817340d43fba26173f1f02c3dfc415edce095accaa39b6f78c728dc3e667b8c61869fd022883e3f96e85c47e04f80fe8208028a8c96e0353c7740c8332027ca44f3ddfeb88e330eadc705d15220aff914fffcc8407661c7bab25e5810ac0a8052d09a2224a468d6989d41eae32395dc7cfbbb8584b57f3a1fc1f944429443547999fca9094e4ab036a334f832114bc97615546e5f830413586ecf3cf5c3bb314e1b9f966ac3"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000000), 0x4)
r8 = syz_open_dev$usbmon(&(0x7f0000000240), 0x1fe00000000, 0x100)
read$usbmon(r8, &(0x7f00000006c0)=""/171, 0xab)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "0000000000000080", "a14748a65151e96d6d2a01e49419560000000000000000000000004000", "6d40e581", "066580001e00"}, 0x38)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0)
pwritev2(r9, &(0x7f0000000080)=[{&(0x7f0000000b80)='/', 0x1}], 0x1, 0xe7b, 0x2a, 0x0)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
r10 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r10, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x85, &(0x7f0000000900)=""/133}, &(0x7f0000000000)="123583000000", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r9, 0x6628)
flock(r9, 0x7)
r11 = dup3(r3, r2, 0x0)
recvmmsg(r11, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)

2.099852118s ago: executing program 8 (id=4168):
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0xc75a}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bond0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan1\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440), 0x1)
io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0x0)

1.612259428s ago: executing program 0 (id=4170):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
close_range(r1, r1, 0x0)
io_setup(0x9, &(0x7f0000000240)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="1761d53e11dc6ed622a8536c7b22591840ffdba8fc69772eb560a23f9207d992973afaa681ab7b44c5f246e1ebbb3d7a00393d33fa8c970868e3a22dba77c6296d1edebec1fb061e54dc718289472a9bccd2807f228608c48f1119e4f313749538613f3a1d398bd3022c01846c74d3cc62167ba7853f695fbe07fd58cf36e39558e173", 0x83}, {0x0}], 0x2}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)="05", 0x1}])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x80, 0x10003, 0x7ffb, 0x5, 0x4, 0xf095, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003e00), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="01042bbd7000fbdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20040050)
socket(0x10, 0x803, 0x0)

1.58968835s ago: executing program 2 (id=4171):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000004000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000090100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x20000840)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r4 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161)
sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_retopts={{0x10}}], 0x10}, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r8=>0x0})
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x1, @broadcast}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x10010, r3, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r9, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r9, 0x26, &(0x7f0000000080)={0x2, 0x2, 0x2007, 0x1fd})
fcntl$lock(r9, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
fcntl$lock(r9, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401})
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
close_range(r10, 0xffffffffffffffff, 0x0)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x0, @local}, 0x10)
close_range(r6, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c000000040000000400", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000009377285e00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)

1.507990407s ago: executing program 3 (id=4174):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone3(0x0, 0x0)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8)
pipe2$9p(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r5 = dup(r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])

1.479370879s ago: executing program 2 (id=4175):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
r1 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0xfe2e)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94)
socket$xdp(0x2c, 0x3, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000005c625260616ab98cc4b0ea003fe92c73dd56f1f297d634a7f0e91e2b83420425997918ba95697459dec65bc6b82591fd1c13ce5a5554a2edcc0ce83eff3a604054fa1b4d11620f4235e0f8eac9fedeffe72cc6e119352c63dbc86ae69607db132e32fba8f788ab4d9b4b281fbed7a09e4b1e8f62db1ac19c41d2f9b3280c1ab4a2175957a6639ac165e91bb529a61be1e03f65ac0ff994a8"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd"], 0xfdef)
keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id\xf7\xff\xffe{')

1.47047051s ago: executing program 0 (id=4176):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, 0x0, 0x944b2e6245cec16f)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="78040000000000000d01000005000000ece538e8b62831eafcd9056be7c8a4f36891e0bd363476ba635f8d61e20221d10831df051097c214cf0e5f4345fa2c1eff6b0f8eedd3687f41fdd27b53aabf690ef80b8953b86b7943136212b1ec5c95809bc5d24c84f1ea4c6a1ff8b0dfc20e9b15115ddad4e233132bb07ee1577ae158a9ec4de6171ac0a7542ea221a3d97d80e7bed34fde3c64661a751d33a6d102ec5e611cee97f445ff21d4d3b360a17a83b7594ad811751ceb59ea8b5cde9525ac5679cf2e35907c0abbb85a25c776a98af56eff37c6627d00c51fd572f6113013d16a54d005b0f833f3c9cde6b897172b7ddc1b063781f822e06890c08ad3025e80b4a550a680e58053a8c33d2e1858f971a40788f6b287baa082a334140c0091f5f2d232ecbc86218a477e468e5be1b48d7787071b5c891cc3efde21a3b0337adeaa6a41ce8fd6edf1b0a47ca0cd6d785cc2c1c3803dde4d9749a10e21d489531efca60760b4ff2061dd7800c4f23c3d1e2bcd694fcc87261a2fdfee6baaa701c7083e9675a75b8d530f09f72d8d3fed4ed848ba18d11635893b52c84a6f0fdc9711b63cba52c9e33ac701261d5459b6ff53be036549b6d0e617d125a6a758370d0671f5f956918db7c4d0afb4f7369bad2a1cf0b7bcf130464bb031b092392a72e8234c1cc1d41190dad660bd1d9283d7d4c7f7410c83f6cfbd25b438097f3e5fd4a23e56c1995179797f03c6dfc5e8be4515fbc72ef9ecbb7cd80d4e71d2ac2f31396081eb9fee4b5d633aee32775a004f7aee9f33d81f9e469a1bef0a995ca8d50c2d853bfb1ebaf301d0c649b74827ae650b6a3bec85e2e9fd45e33bdd8c29cb0692d78a73700daf8eaff8efc06f8c07b3ce384ab1d925cdc440a4b85ace1edb6202df092fe6b37c11e10f3cb3d9e0cc19d55989766aec965403244c8dabfcdcc51c2297131307048ffc88b47d07e821656fa73395dd464d79ee82b3d4f47bd29f42f44f9521efdec7b0e8b5436d496ae046d72d69bc3d35a62829954fdf87fa10330a7864465ee86c540b2e1320e8453701898027ef86ad0d7c31c009f0e5f4c35eeb870ba4caa3708656b38c3797aaadb4b372acf23c05d55d98eb8c1c628e744a6a4439b5a515a2a083f8fbc71a2e6800c3ffec640d21d05a4b1f4548c5541f809e9766cce96b2c53b220361638c4dc43af7d5edb874bb48ca3c8a837fdccff0c8b50bc402da6262c5e3b344f313153fd455e4414f2b0e4a2bcf881b5615e399f8bbe6c3c20a314539b856de845a6e37e5f6925f3d5929eb59243b792834b0de7643077681b9113f5d192c4e96ebea0465901e5aa5da812b0d112089c048e29c523a753f7babe4e3de0bff0f220493bef0e7b76b051cecc325a8fb60a76880155ed33bbbccb472dd3b568829eb7cfb4280521adee82b1b1b7c31b0baa329f81f254526461b787d32bd18a760944a3f728a8a257f2bb9bc9172daeeb9a3d099fa60a440063b70cb48a54cf8739467f7e2b075b74800056475332bd226daf3e7a85c198107c3fe4818e78dda31d1d8c4c618c218e368a0e20655c325f95ebdb03320448cfd754064e7a6b69b1677d12a5"], 0x478}, 0x0, 0xe3d08660d3cd4684})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944)
sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = gettid()
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3], [0x0, 0x8, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$ptp(r6, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r7=>0x0)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r8, &(0x7f0000000000)='map_files\x00')
mq_notify(0xffffffffffffffff, &(0x7f0000019200)={0x0, 0x16, 0x0, @tid=r8})
timer_settime(r7, 0x1, &(0x7f0000000340), 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r9 = syz_open_procfs(r0, &(0x7f00000001c0)='pagemap\x00')
pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
r10 = dup(0xffffffffffffffff)
write$P9_RLERRORu(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000101b5", @ANYBLOB="fe4cecb210"], 0x53)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.308864643s ago: executing program 5 (id=4177):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xdde}, {0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0)

1.175162804s ago: executing program 5 (id=4178):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa8883, 0x0)
ioctl$TIOCGPTPEER(r3, 0x5441, 0x401)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xfec, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xfe, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x18)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r11}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x7, 0x10, 0x95, 0x8, 0x0, 0xc304, 0x1031, 0xb, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x2, @perf_bp={&(0x7f00000012c0), 0x8}, 0x80, 0x2, 0x1c, 0x5, 0x9, 0xd0d, 0x5, 0x0, 0x0, 0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
mq_unlink(&(0x7f0000000780)='\x86\xb7\xc2\xd7\fYzoI\xd8}\xaf\x948\a\x01\xf8}&0&_Y\xec\xc3\xb9\xf5\xb5=\x98\xb0\x19\xe5\x11\xceL\x80Z\x8b\xde~S\x05z\xe2\xbbnUQ^ !\xaf;X\x99\x10Z\xb8\xbe\xf3\xd4\xb6\xbb\x1f\xcb\xa3d\xdd\x01ru\xe0\xcd\x8e\xf0\xc7\a\x00\xabH\f\xff\x17\x9b\xbd\x1f\xf7\x89Oi:\x86\xa1\xc4\xde\x84W\xad\xfb\xa8\xf7\x8c-\xb3\xe5D\xe4:\xd6\xe8\x83\xf2A\xfa\xb5\x055\xfe4E\x81\x00\x00\x00\x00\x00\x00\x00\x98-N\xb7\xa2\xdb\x84l\xe4\xb7\x8a\xc5y\xb6\xbf\xa9r5n(\fL\xa4\xfa$\xd3o2\xbc\xd5\xdcH\xe5w@\xb0\xd2>J\xd6\x93z\xdd\x19j\xab\xc1\xdf\xbb\xc8\xdf\n\x90\xb56\xb4:0\xde\x05@\x8c\x97\xb4m\xeaW')

1.121634468s ago: executing program 8 (id=4179):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003})
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000340)=0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="3e00000008001400030000040400000000000000", @ANYRES32=r0, @ANYBLOB="f900"/20, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="0500000002000000020000000500"/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108284, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
unshare(0x26000400)
r8 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=<r9=>0x0, &(0x7f0000000040)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r8, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r8, 0x627, 0x4c1, 0x43, 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r12, 0x0, 0x3}, 0x18)
close(r11)

1.066329433s ago: executing program 3 (id=4180):
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f00000003c0)='GPL\x00', 0x400, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xc}, 0xfffffffffffffec9)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYRESDEC], &(0x7f0000001240)=""/160, 0x1f, 0xa0, 0x1, 0x2, 0x1008}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x7e031, r0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000000, 0x5, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
getuid()
getresuid(&(0x7f00000000c0), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000011c0), 0x0, 0x607, &(0x7f0000001300)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
futex(0x0, 0x2, 0xffffffff, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)=0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x68e}, 0x18)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x3, 0x0, @buffer={0x17, 0x0, 0x0}, &(0x7f0000000380)="259374", 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x47)
syz_read_part_table(0x5c8, &(0x7f0000000600)="$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")
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x46, "0040001e1d113c812e5d6000"})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
r3 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@remote, 0x4e22, 0xd439, 0x4e20, 0x1, 0xa, 0x80, 0x120, 0x73}, {0x5, 0x9, 0x0, 0xeb, 0x70000, 0x5, 0x4, 0x3}, {0x8, 0x7, 0x80000001, 0x400}, 0x6, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x33}, 0x2, @in=@private=0xa010102, 0x3502, 0x4, 0x2, 0x1, 0x201, 0x9, 0xb03}}, 0xe8)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x7ff}, 0x10}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000001605000300010000002000018007000100637400001400028008000240"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)

707.244022ms ago: executing program 8 (id=4181):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f00000002c0), 0x9}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20805, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
accept(r0, &(0x7f0000000080)=@xdp, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)
r5 = io_uring_setup(0x437b, &(0x7f00000002c0)={0x0, 0x698c, 0x40, 0x2, 0xfffffffe})
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={<r6=>0xffffffffffffffff})
sendmmsg$sock(r6, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x200000000000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000400)='kfree\x00', r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r8, 0x0, 0x0)
connect$vsock_stream(r7, 0x0, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x55, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

614.19806ms ago: executing program 2 (id=4182):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
readv(r0, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1)
write$binfmt_script(r1, &(0x7f0000020240), 0x10010)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
r2 = socket(0x25, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0)
recvmmsg$unix(r2, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)}}], 0x1, 0x0, 0x0)
setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0)
signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80)
io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x39, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)

521.894647ms ago: executing program 0 (id=4183):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, 0x0, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x92)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x110800, 0x0)
inotify_init1(0x800)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40002120, &(0x7f0000002f00))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r4 = fspick(r3, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r3)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40050}, 0x24000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x4008800)

513.300238ms ago: executing program 3 (id=4184):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000000000000000008a03b30c02d7efb4289598ba102cdb98f9a1fc1400abfccd4495f2d5a70b0ed9eaa35b98f7e4aeeb42196b191c4f3de6579b64a5a2d4c3d0149988b1380c7e015d2125f2c2573948e14bc2a1d3c092fa1c3a09dcf7136f95dc6b1fec9370a390815c193dc6808c2d9e8a6d9e4f385b19fc9856b5f67277e1bdc139ee90d3594b18a1127c4"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18)
connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="41c147a08ff819e6ebc9c11f7b46d0461e5640d67199f51fe3c1c75d4508c5428d0b9892f417178cdd36a016f7d2549b4a3dfe2c26bb970713f8f4ae04f0be674aec14539da690d10e3affdbfd66d1a361eecf412228730cddc9b80d5a1b7a4295dbfdf24d8f598b964254b636b6b8bb5bc06c507514b0b563fbe6a548c77cd1a8775b71affdb9", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18)
mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0x10000}}]}})

449.590184ms ago: executing program 0 (id=4185):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000004000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000090100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x20000840)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r4 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161)
sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_retopts={{0x10}}], 0x10}, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r8=>0x0})
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x1, @broadcast}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x10010, r3, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r9, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r9, 0x26, &(0x7f0000000080)={0x2, 0x2, 0x2007, 0x1fd})
fcntl$lock(r9, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
fcntl$lock(r9, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401})
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
close_range(r10, 0xffffffffffffffff, 0x0)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x0, @local}, 0x10)
close_range(r6, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c000000040000000400", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000009377285e00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)

423.627686ms ago: executing program 3 (id=4186):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200000000}, 0x18)
r1 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @remote, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc67}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) (fail_nth: 1)

136.366049ms ago: executing program 3 (id=4187):
r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$selinux_create(r0, &(0x7f0000000280)=@objname={'system_u:object_r:crack_exec_t:s0', 0x20, '/sbin/dhclient', 0x20, 0xfffffffffffffffb, 0x20, './file0/file0\x00'}, 0x54)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r2, 0x29, 0xb, 0xfffffffffffffffd, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0, 0x92)
preadv(r3, &(0x7f0000000800)=[{&(0x7f0000000000)=""/78, 0x4e}, {0x0}], 0x2, 0x8, 0xfffffffb)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3, @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r4}, 0x10)
syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xfffffffc, 0x100, 0x0, 0x1dd}, &(0x7f0000000340), &(0x7f0000000300))
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000001}, 0x50)
getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000bc0)={@rand_addr, <r8=>0x0}, &(0x7f0000000c00)=0x14)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)

131.081949ms ago: executing program 8 (id=4188):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xdde}, {0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0)

112.651891ms ago: executing program 8 (id=4189):
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0xa65d2b7db4b56451)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
bind$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e)

101.023752ms ago: executing program 0 (id=4190):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone3(0x0, 0x0)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8)
pipe2$9p(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r5 = dup(r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])

9.983199ms ago: executing program 3 (id=4191):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80040, 0x46)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet6(r0, &(0x7f0000000300)="85feaa5e58bdbb3ab8a767402dbdce11bdae869c33c77c4ee1884adace36342bea0500eedb04c637b69e4daa0896408a60258c384d9fb4d3fff6c59a08cd54106cbf4937e2d0fce0a51a1dd497cc6d0eb0c35e2b6e6bef845debb271545189d3d0b6681509373c056194b128c05e96c5597f6f904c67cc06109f652126f68bfae6b3de13ca", 0xfffffffffffffe78, 0x2000081, &(0x7f0000000240)={0xa, 0x4e24, 0xc, @empty, 0xc}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d6163286165732900"/281], 0x184}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000408}, 0xc, &(0x7f0000000480)={&(0x7f00000007c0)=@delchain={0xd4, 0x65, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x9, 0xfff1}, {0xffe0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x10000}, @TCA_CHAIN={0x8, 0xb, 0xc4}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'wlan1\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_U32_INDEV={0x14, 0x8, 'team_slave_0\x00'}]}}, @filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x2, 0xfffffffb}}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb5}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x6}}, @TCA_U32_HASH={0x8, 0x2, 0x9}, @TCA_U32_LINK={0x8, 0x3, 0xea0}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0xd4}, 0x1, 0x0, 0x0, 0x90}, 0x4000)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4)
setreuid(0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55c, &(0x7f00000006c0)="$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")
r4 = memfd_create(&(0x7f00000003c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,U\xb1]*\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3S\xef}\xfd\x12\xbc:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f\xe2\\Z\xef\xa3\xe1c\xc5\xe6', 0x0)
write$bt_hci(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)

0s ago: executing program 8 (id=4192):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
r1 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0xfe2e)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94)
socket$xdp(0x2c, 0x3, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000005c625260616ab98cc4b0ea003fe92c73dd56f1f297d634a7f0e91e2b83420425997918ba95697459dec65bc6b82591fd1c13ce5a5554a2edcc0ce83eff3a604054fa1b4d11620f4235e0f8eac9fedeffe72cc6e119352c63dbc86ae69607db132e32fba8f788ab4d9b4b281fbed7a09e4b1e8f62db1ac19c41d2f9b3280c1ab4a2175957a6639ac165e91bb529a61be1e03f65ac0ff994a8"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd"], 0xfdef)
keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id\xf7\xff\xffe{')

kernel console output (not intermixed with test programs):

ire_dquot:6933: comm syz.0.3727: Failed to acquire dquot type 0
[  351.714303][T15436] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.3727: Freeing blocks not in datazone - block = 0, count = 4096
[  351.728431][T15436] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.3727: Invalid inode bitmap blk 0 in block_group 0
[  351.742957][T15436] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  351.744130][ T1085] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  351.766760][T15436] EXT4-fs (loop0): 1 orphan inode deleted
[  351.768125][ T1085] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0
[  351.808575][T15436] loop0: detected capacity change from 0 to 2048
[  351.867209][T15436] Alternate GPT is invalid, using primary GPT.
[  351.873590][T15436]  loop0: p1 p2 p3
[  351.878284][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3728'.
[  351.911452][T15436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3727'.
[  352.091969][T15455] loop7: detected capacity change from 0 to 2048
[  352.232442][T15459] loop2: detected capacity change from 0 to 512
[  352.242103][T15459] EXT4-fs (loop2): orphan cleanup on readonly fs
[  352.248857][T15459] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3737: Failed to acquire dquot type 1
[  352.262192][T15459] EXT4-fs (loop2): 1 truncate cleaned up
[  352.269690][T15459] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  352.280821][T15459] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 8
[  352.292972][T15459] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3737'.
[  352.361769][T15462] batadv_slave_1: entered promiscuous mode
[  352.420458][T15464] batadv_slave_1: left promiscuous mode
[  352.457784][T15467] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3735'.
[  352.502593][T15468] loop2: detected capacity change from 0 to 512
[  352.510158][T15468] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  352.947025][T15482] loop3: detected capacity change from 0 to 512
[  352.955289][T15482] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  352.986041][T15482] EXT4-fs (loop3): 1 truncate cleaned up
[  353.033324][T15490] loop3: detected capacity change from 0 to 512
[  353.057346][T15493] vxcan1: entered allmulticast mode
[  353.066677][T15494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3749'.
[  353.119215][T15499] loop3: detected capacity change from 0 to 2048
[  353.131654][T15499] EXT4-fs (loop3): failed to initialize system zone (-117)
[  353.139697][T15499] EXT4-fs (loop3): mount failed
[  353.175964][T15504] loop0: detected capacity change from 0 to 512
[  353.186726][T15504] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  353.322876][   T29] kauditd_printk_skb: 404 callbacks suppressed
[  353.322895][   T29] audit: type=1400 audit(1753943492.840:21705): avc:  denied  { transition } for  pid=15508 comm="syz.3.3753" path="/134/file0" dev="tmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[  353.353203][   T29] audit: type=1400 audit(1753943492.840:21706): avc:  denied  { entrypoint } for  pid=15508 comm="syz.3.3753" path="/134/file0" dev="tmpfs" ino=768 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  353.377948][   T29] audit: type=1400 audit(1753943492.840:21707): avc:  denied  { noatsecure } for  pid=15508 comm="syz.3.3753" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[  353.393786][T15514] netlink: 'syz.7.3752': attribute type 1 has an invalid length.
[  353.409969][T15516] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15516 comm=syz.2.3755
[  353.423185][T15516] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15516 comm=syz.2.3755
[  353.485698][T15516] loop2: detected capacity change from 0 to 1024
[  353.515897][T15521] loop5: detected capacity change from 0 to 2048
[  353.526209][T15514] 8021q: adding VLAN 0 to HW filter on device bond1
[  353.538770][T15516] ext4: Unknown parameter 'fsname'
[  353.553395][T15518] bond1: (slave gretap1): making interface the new active one
[  353.562773][T15518] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  353.626018][T15523] loop2: detected capacity change from 0 to 1024
[  353.651058][T15523] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  353.667323][T15523] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm syz.2.3757: lblock 1 mapped to illegal pblock 1 (length 15)
[  353.756614][T15529] loop2: detected capacity change from 0 to 512
[  353.764104][T15529] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  353.776748][T15529] EXT4-fs (loop2): 1 truncate cleaned up
[  353.867630][T15535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3761'.
[  353.877887][T15536] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3756'.
[  353.891447][   T29] audit: type=1326 audit(1753943493.410:21708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15534 comm="syz.2.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  353.915111][   T29] audit: type=1326 audit(1753943493.410:21709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15534 comm="syz.2.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  353.939994][   T29] audit: type=1326 audit(1753943493.410:21710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15534 comm="syz.2.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  353.963928][   T29] audit: type=1326 audit(1753943493.410:21711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15534 comm="syz.2.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  353.987999][   T29] audit: type=1326 audit(1753943493.410:21712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15534 comm="syz.2.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  354.011675][   T29] audit: type=1326 audit(1753943493.460:21713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15534 comm="syz.2.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  354.035696][   T29] audit: type=1326 audit(1753943493.460:21714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15534 comm="syz.2.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  354.107992][T15542] loop2: detected capacity change from 0 to 2048
[  354.119567][T15542] EXT4-fs (loop2): failed to initialize system zone (-117)
[  354.127016][T15542] EXT4-fs (loop2): mount failed
[  354.167325][T15547] loop2: detected capacity change from 0 to 1024
[  354.174625][T15547] EXT4-fs: Ignoring removed nomblk_io_submit option
[  354.189540][T15549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3766'.
[  354.503000][T15569] loop2: detected capacity change from 0 to 512
[  354.511851][T15569] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  354.634349][T15568] loop5: detected capacity change from 0 to 1024
[  354.654049][T15568] EXT4-fs: Ignoring removed nomblk_io_submit option
[  354.743692][T15575] batadv_slave_1: entered promiscuous mode
[  354.811490][T15576] batadv_slave_1: left promiscuous mode
[  354.867224][T15578] loop5: detected capacity change from 0 to 2048
[  354.913324][T15578] EXT4-fs (loop5): failed to initialize system zone (-117)
[  354.921538][T15578] EXT4-fs (loop5): mount failed
[  354.944168][T15582] loop0: detected capacity change from 0 to 512
[  354.958447][T15582] EXT4-fs (loop0): orphan cleanup on readonly fs
[  354.967360][T15582] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3777: Failed to acquire dquot type 1
[  354.990070][T15582] EXT4-fs (loop0): 1 truncate cleaned up
[  355.018448][T15582] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  355.036689][T15587] loop5: detected capacity change from 0 to 1024
[  355.043713][T15582] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 8
[  355.056905][T13065] IPVS: starting estimator thread 0...
[  355.061680][T15587] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  355.078565][T15587] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 1: comm syz.5.3779: lblock 1 mapped to illegal pblock 1 (length 15)
[  355.132831][T15595] loop3: detected capacity change from 0 to 512
[  355.144755][T15596] loop5: detected capacity change from 0 to 2048
[  355.151986][T15588] IPVS: using max 2352 ests per chain, 117600 per kthread
[  355.159296][T15595] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  355.170640][T15595] EXT4-fs (loop3): 1 truncate cleaned up
[  355.213737][T15598] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  355.214948][T15601] loop3: detected capacity change from 0 to 1024
[  355.221446][T15598] batman_adv: batadv0: Removing interface: batadv_slave_0
[  355.235498][T15598] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  355.242999][T15598] batman_adv: batadv0: Removing interface: batadv_slave_1
[  355.253948][T15601] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  355.354060][T15606] loop2: detected capacity change from 0 to 512
[  355.362256][T15607] net_ratelimit: 140 callbacks suppressed
[  355.362275][T15607] netlink: zone id is out of range
[  355.379775][T15606] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  355.398382][T15607] netlink: zone id is out of range
[  355.403597][T15607] netlink: zone id is out of range
[  355.408906][T15607] netlink: zone id is out of range
[  355.414119][T15607] netlink: zone id is out of range
[  355.419434][T15607] netlink: zone id is out of range
[  355.440253][T15607] netlink: zone id is out of range
[  355.447303][T15607] netlink: zone id is out of range
[  355.453927][T15607] netlink: zone id is out of range
[  355.460070][T15607] netlink: zone id is out of range
[  355.513713][T15615] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  355.521188][T15617] __nla_validate_parse: 4 callbacks suppressed
[  355.521203][T15617] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3782'.
[  355.560862][T15615] loop0: detected capacity change from 0 to 512
[  355.567902][T15615] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  355.582928][T15615] EXT4-fs (loop0): 1 truncate cleaned up
[  355.621410][T15623] loop0: detected capacity change from 0 to 512
[  355.629228][T15623] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  355.703509][T15631] loop0: detected capacity change from 0 to 512
[  355.712624][T15631] EXT4-fs (loop0): orphan cleanup on readonly fs
[  355.720065][T15631] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3792: Failed to acquire dquot type 1
[  355.733296][T15631] EXT4-fs (loop0): 1 truncate cleaned up
[  355.741759][T15631] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  355.753919][T15631] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 8
[  355.769707][T15631] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3792'.
[  355.771046][T15640] loop7: detected capacity change from 0 to 512
[  355.786274][T15640] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  355.797896][T15640] EXT4-fs (loop7): 1 truncate cleaned up
[  355.864681][T15649] loop7: detected capacity change from 0 to 1024
[  355.882069][T15649] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  355.934451][T15657] loop0: detected capacity change from 0 to 512
[  355.941797][T15657] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  356.082443][T15668] loop5: detected capacity change from 0 to 1024
[  356.099959][T15668] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  356.114303][T15668] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 1: comm syz.5.3804: lblock 1 mapped to illegal pblock 1 (length 15)
[  356.160553][T15675] loop5: detected capacity change from 0 to 512
[  356.169152][T15675] EXT4-fs (loop5): orphan cleanup on readonly fs
[  356.176069][T15675] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3805: Failed to acquire dquot type 1
[  356.188471][T15675] EXT4-fs (loop5): 1 truncate cleaned up
[  356.195765][T15675] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  356.207066][T15675] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 8
[  356.220966][T15675] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3805'.
[  356.231361][T13055] IPVS: starting estimator thread 0...
[  356.318412][T15678] IPVS: using max 2016 ests per chain, 100800 per kthread
[  356.360827][T15689] loop3: detected capacity change from 0 to 512
[  356.368190][T15689] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  356.399471][T15691] loop5: detected capacity change from 0 to 1024
[  356.413853][T15691] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  356.434611][T15697] loop3: detected capacity change from 0 to 2048
[  356.449695][T15699] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  356.482952][T15699] loop2: detected capacity change from 0 to 512
[  356.491203][T15699] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  356.503264][T15699] EXT4-fs (loop2): 1 truncate cleaned up
[  356.539267][T15705] loop2: detected capacity change from 0 to 1024
[  356.553283][T15705] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  356.566868][T15705] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm syz.2.3815: lblock 1 mapped to illegal pblock 1 (length 15)
[  356.613394][T15711] loop5: detected capacity change from 0 to 1024
[  356.621570][T15711] EXT4-fs: Ignoring removed nobh option
[  356.627182][T15711] EXT4-fs: Ignoring removed bh option
[  356.898603][T15719] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  356.905165][T15719] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  356.912840][T15719] vhci_hcd vhci_hcd.0: Device attached
[  356.973288][T15724] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(11)
[  356.979937][T15724] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  356.987573][T15724] vhci_hcd vhci_hcd.0: Device attached
[  356.994271][T15724] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  357.003931][T15724] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(15)
[  357.010552][T15724] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  357.017974][T15724] vhci_hcd vhci_hcd.0: Device attached
[  357.025381][T15724] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(17)
[  357.032011][T15724] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  357.039851][T15724] vhci_hcd vhci_hcd.0: Device attached
[  357.046822][T15724] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  357.059684][T15719] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(8)
[  357.066240][T15719] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  357.073942][T15719] vhci_hcd vhci_hcd.0: Device attached
[  357.082423][T15733] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3813'.
[  357.113777][T15724] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(21)
[  357.120491][T15724] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  357.128122][T15724] vhci_hcd vhci_hcd.0: Device attached
[  357.188552][T13064] usb 11-1: new low-speed USB device number 2 using vhci_hcd
[  357.295752][T15738] loop0: detected capacity change from 0 to 1024
[  357.306895][T15738] EXT4-fs: Ignoring removed nomblk_io_submit option
[  357.520221][T15731] vhci_hcd: connection closed
[  357.520367][T15727] vhci_hcd: connection closed
[  357.525240][T15720] vhci_hcd: connection reset by peer
[  357.535542][T15722] vhci_hcd: connection closed
[  357.535697][T15725] vhci_hcd: connection closed
[  357.540457][T15729] vhci_hcd: connection closed
[  357.545514][ T3444] vhci_hcd: stop threads
[  357.554569][ T3444] vhci_hcd: release socket
[  357.559030][ T3444] vhci_hcd: disconnect device
[  357.594206][ T3444] vhci_hcd: stop threads
[  357.598615][ T3444] vhci_hcd: release socket
[  357.603081][ T3444] vhci_hcd: disconnect device
[  357.618049][ T3444] vhci_hcd: stop threads
[  357.622399][ T3444] vhci_hcd: release socket
[  357.626881][ T3444] vhci_hcd: disconnect device
[  357.648553][ T3444] vhci_hcd: stop threads
[  357.652853][ T3444] vhci_hcd: release socket
[  357.657327][ T3444] vhci_hcd: disconnect device
[  357.662481][ T3444] vhci_hcd: stop threads
[  357.666735][ T3444] vhci_hcd: release socket
[  357.671257][ T3444] vhci_hcd: disconnect device
[  357.676361][ T3444] vhci_hcd: stop threads
[  357.680626][ T3444] vhci_hcd: release socket
[  357.685057][ T3444] vhci_hcd: disconnect device
[  357.707740][T15752] loop0: detected capacity change from 0 to 512
[  357.716215][T15752] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  357.732625][T15754] loop3: detected capacity change from 0 to 512
[  357.740434][T15754] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  357.765034][T15754] EXT4-fs (loop3): 1 truncate cleaned up
[  357.786495][T15759] loop0: detected capacity change from 0 to 1024
[  357.812388][T15759] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  357.862911][T15759] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 1: comm syz.0.3827: lblock 1 mapped to illegal pblock 1 (length 15)
[  358.426952][T15785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3836'.
[  358.443935][   T29] kauditd_printk_skb: 290 callbacks suppressed
[  358.443950][   T29] audit: type=1326 audit(1753943497.960:21999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15784 comm="syz.5.3836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4264be9a9 code=0x7ffc0000
[  358.492931][   T29] audit: type=1326 audit(1753943497.990:22000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15784 comm="syz.5.3836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fe4264be9a9 code=0x7ffc0000
[  358.516837][   T29] audit: type=1326 audit(1753943497.990:22001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15784 comm="syz.5.3836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4264be9a9 code=0x7ffc0000
[  358.540666][   T29] audit: type=1326 audit(1753943497.990:22002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15784 comm="syz.5.3836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fe4264be9a9 code=0x7ffc0000
[  358.564406][   T29] audit: type=1326 audit(1753943497.990:22003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15784 comm="syz.5.3836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4264be9a9 code=0x7ffc0000
[  358.591695][T15788] loop5: detected capacity change from 0 to 512
[  358.598805][T15788] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  358.666027][T15793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3838'.
[  358.698672][T15795] loop3: detected capacity change from 0 to 1024
[  358.705456][T15795] EXT4-fs: Ignoring removed nomblk_io_submit option
[  358.811830][T15800] loop3: detected capacity change from 0 to 512
[  358.848577][T15800] EXT4-fs: Ignoring removed nobh option
[  358.872844][T15800] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117
[  358.912435][T15800] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3840: invalid indirect mapped block 256 (level 1)
[  358.953179][T15811] loop2: detected capacity change from 0 to 512
[  358.953241][T15810] batadv_slave_1: entered promiscuous mode
[  358.966932][T15811] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  358.981009][T15800] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3840: invalid indirect mapped block 2683928664 (level 1)
[  358.996837][T15811] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal
[  359.015331][T15800] EXT4-fs (loop3): 1 truncate cleaned up
[  359.026676][T15800] netlink: 'syz.3.3840': attribute type 10 has an invalid length.
[  359.036055][T15814] batadv_slave_1: left promiscuous mode
[  359.072227][T15817] wireguard0: entered promiscuous mode
[  359.077746][T15817] wireguard0: entered allmulticast mode
[  359.080085][T15816] loop0: detected capacity change from 0 to 512
[  359.092254][T15820] netlink: 'syz.7.3848': attribute type 6 has an invalid length.
[  359.129818][T15824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3849'.
[  359.250233][T15828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15828 comm=syz.7.3848
[  359.306030][T15827] loop0: detected capacity change from 0 to 1024
[  359.330606][T15827] EXT4-fs: Ignoring removed nomblk_io_submit option
[  359.378794][T15830] loop5: detected capacity change from 0 to 512
[  359.535517][T15799] syz.3.3840 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000
[  359.550072][T15799] CPU: 1 UID: 0 PID: 15799 Comm: syz.3.3840 Tainted: G        W           6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) 
[  359.550162][T15799] Tainted: [W]=WARN
[  359.550170][T15799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  359.550195][T15799] Call Trace:
[  359.550203][T15799]  <TASK>
[  359.550214][T15799]  __dump_stack+0x1d/0x30
[  359.550241][T15799]  dump_stack_lvl+0xe8/0x140
[  359.550358][T15799]  dump_stack+0x15/0x1b
[  359.550377][T15799]  dump_header+0x81/0x220
[  359.550485][T15799]  oom_kill_process+0x342/0x400
[  359.550514][T15799]  out_of_memory+0x979/0xb80
[  359.550539][T15799]  try_charge_memcg+0x5e6/0x9e0
[  359.550576][T15799]  obj_cgroup_charge_pages+0xa6/0x150
[  359.550616][T15799]  __memcg_kmem_charge_page+0x9f/0x170
[  359.550739][T15799]  __alloc_frozen_pages_noprof+0x188/0x360
[  359.550781][T15799]  alloc_pages_mpol+0xb3/0x250
[  359.550815][T15799]  alloc_pages_noprof+0x90/0x130
[  359.550909][T15799]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  359.551043][T15799]  __kvmalloc_node_noprof+0x30f/0x4e0
[  359.551075][T15799]  ? ip_set_alloc+0x1f/0x30
[  359.551109][T15799]  ? ip_set_alloc+0x1f/0x30
[  359.551143][T15799]  ? __kmalloc_cache_noprof+0x189/0x320
[  359.551173][T15799]  ip_set_alloc+0x1f/0x30
[  359.551220][T15799]  hash_netiface_create+0x282/0x740
[  359.551281][T15799]  ? __pfx_hash_netiface_create+0x10/0x10
[  359.551319][T15799]  ip_set_create+0x3cc/0x960
[  359.551378][T15799]  ? __nla_parse+0x40/0x60
[  359.551409][T15799]  nfnetlink_rcv_msg+0x4c6/0x590
[  359.551559][T15799]  netlink_rcv_skb+0x123/0x220
[  359.551670][T15799]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  359.551790][T15799]  nfnetlink_rcv+0x16b/0x1690
[  359.551817][T15799]  ? nlmon_xmit+0x4f/0x60
[  359.551842][T15799]  ? consume_skb+0x49/0x150
[  359.551904][T15799]  ? nlmon_xmit+0x4f/0x60
[  359.551936][T15799]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  359.551981][T15799]  ? __dev_queue_xmit+0x1200/0x2000
[  359.552080][T15799]  ? __dev_queue_xmit+0x182/0x2000
[  359.552121][T15799]  ? __alloc_frozen_pages_noprof+0x188/0x360
[  359.552156][T15799]  ? ref_tracker_free+0x37d/0x3e0
[  359.552262][T15799]  ? __netlink_deliver_tap+0x4dc/0x500
[  359.552308][T15799]  netlink_unicast+0x5bd/0x690
[  359.552346][T15799]  netlink_sendmsg+0x58b/0x6b0
[  359.552417][T15799]  ? __pfx_netlink_sendmsg+0x10/0x10
[  359.552459][T15799]  __sock_sendmsg+0x142/0x180
[  359.552490][T15799]  ____sys_sendmsg+0x31e/0x4e0
[  359.552586][T15799]  ___sys_sendmsg+0x17b/0x1d0
[  359.552660][T15799]  __x64_sys_sendmsg+0xd4/0x160
[  359.552709][T15799]  x64_sys_call+0x191e/0x2ff0
[  359.552735][T15799]  do_syscall_64+0xd2/0x200
[  359.552810][T15799]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  359.552882][T15799]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  359.552918][T15799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.552939][T15799] RIP: 0033:0x7f37a240e9a9
[  359.552957][T15799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  359.552985][T15799] RSP: 002b:00007f37a0a77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  359.553009][T15799] RAX: ffffffffffffffda RBX: 00007f37a2635fa0 RCX: 00007f37a240e9a9
[  359.553026][T15799] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004
[  359.553043][T15799] RBP: 00007f37a2490d69 R08: 0000000000000000 R09: 0000000000000000
[  359.553060][T15799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  359.553077][T15799] R13: 0000000000000000 R14: 00007f37a2635fa0 R15: 00007ffdf8c6d488
[  359.553102][T15799]  </TASK>
[  359.553157][T15799] memory: usage 307200kB, limit 307200kB, failcnt 257
[  359.611659][   T29] audit: type=1326 audit(1753943499.070:22004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15832 comm="syz.5.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4264be9a9 code=0x7ffc0000
[  359.614083][T15799] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0
[  359.614103][T15799] kmem: usage 305956kB, limit 9007199254740988kB, failcnt 0
[  359.619014][   T29] audit: type=1326 audit(1753943499.070:22005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15832 comm="syz.5.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4264be9a9 code=0x7ffc0000
[  359.624350][T15799] Memory cgroup stats for /syz3:
[  359.629925][T15799] cache 946176
[  359.635679][   T29] audit: type=1326 audit(1753943499.070:22006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15832 comm="syz.5.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fe4264be9a9 code=0x7ffc0000
[  359.640499][T15799] rss 212992
[  359.645416][   T29] audit: type=1326 audit(1753943499.070:22007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15832 comm="syz.5.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4264be9a9 code=0x7ffc0000
[  359.651383][T15799] shmem 262144
[  359.656699][   T29] audit: type=1326 audit(1753943499.070:22008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15832 comm="syz.5.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fe4264be9a9 code=0x7ffc0000
[  359.792605][T15837] loop5: detected capacity change from 0 to 2048
[  359.795345][T15799] mapped_file 397312
[  359.795357][T15799] dirty 405504
[  359.795366][T15799] writeback 0
[  359.795376][T15799] workingset_refault_anon 53
[  360.074755][T15799] workingset_refault_file 494
[  360.079469][T15799] swap 0
[  360.082327][T15799] swapcached 0
[  360.085715][T15799] pgpgin 224348
[  360.089216][T15799] pgpgout 224037
[  360.092853][T15799] pgfault 260271
[  360.096410][T15799] pgmajfault 64
[  360.099895][T15799] inactive_anon 40960
[  360.103888][T15799] active_anon 434176
[  360.107885][T15799] inactive_file 0
[  360.111571][T15799] active_file 798720
[  360.115479][T15799] unevictable 0
[  360.119027][T15799] hierarchical_memory_limit 314572800
[  360.124410][T15799] hierarchical_memsw_limit 9223372036854771712
[  360.130608][T15799] total_cache 946176
[  360.134522][T15799] total_rss 212992
[  360.138288][T15799] total_shmem 262144
[  360.142280][T15799] total_mapped_file 397312
[  360.146710][T15799] total_dirty 405504
[  360.150683][T15799] total_writeback 0
[  360.154560][T15799] total_workingset_refault_anon 53
[  360.159762][T15799] total_workingset_refault_file 494
[  360.165102][T15799] total_swap 0
[  360.168528][T15799] total_swapcached 0
[  360.172687][T15799] total_pgpgin 224348
[  360.177005][T15799] total_pgpgout 224037
[  360.181202][T15799] total_pgfault 260271
[  360.185294][T15799] total_pgmajfault 64
[  360.189322][T15799] total_inactive_anon 40960
[  360.193853][T15799] total_active_anon 434176
[  360.198307][T15799] total_inactive_file 0
[  360.202474][T15799] total_active_file 798720
[  360.206899][T15799] total_unevictable 0
[  360.210964][T15799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3840,pid=15798,uid=0
[  360.225756][T15799] Memory cgroup out of memory: Killed process 15799 (syz.3.3840) total-vm:95808kB, anon-rss:1072kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  360.446241][T15848] loop7: detected capacity change from 0 to 2048
[  360.501403][T15848] EXT4-fs (loop7): failed to initialize system zone (-117)
[  360.517595][T15848] EXT4-fs (loop7): mount failed
[  360.874450][T15856] batadv_slave_1: entered promiscuous mode
[  360.932210][T15859] batadv_slave_1: left promiscuous mode
[  360.956162][T15861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3860'.
[  360.976958][T15863] loop7: detected capacity change from 0 to 2048
[  360.992122][T15863] EXT4-fs (loop7): failed to initialize system zone (-117)
[  360.999551][T15863] EXT4-fs (loop7): mount failed
[  361.048141][T15865] loop3: detected capacity change from 0 to 164
[  361.054972][T15871] loop7: detected capacity change from 0 to 1024
[  361.061578][T15865] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  361.062546][T15871] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  361.082284][T15871] EXT4-fs error (device loop7): ext4_map_blocks:816: inode #3: block 1: comm syz.7.3864: lblock 1 mapped to illegal pblock 1 (length 1)
[  361.108599][T15871] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3864: Failed to acquire dquot type 0
[  361.122400][T15875] batadv_slave_1: entered promiscuous mode
[  361.130171][T15871] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.3864: Freeing blocks not in datazone - block = 0, count = 4096
[  361.144386][T15871] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.3864: Invalid inode bitmap blk 0 in block_group 0
[  361.158946][ T2100] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  361.173455][T15871] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem
[  361.182227][ T2100] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0
[  361.193880][T15871] EXT4-fs (loop7): 1 orphan inode deleted
[  361.230086][T15871] loop7: detected capacity change from 0 to 2048
[  361.249077][T15883] batadv_slave_1: left promiscuous mode
[  361.263922][T15871] Alternate GPT is invalid, using primary GPT.
[  361.270366][T15871]  loop7: p1 p2 p3
[  361.289394][T15890] loop0: detected capacity change from 0 to 512
[  361.293706][T15891] loop2: detected capacity change from 0 to 1024
[  361.302799][T15890] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  361.308077][T15871] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3864'.
[  361.325060][T15891] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  361.439579][T15900] net_ratelimit: 141 callbacks suppressed
[  361.439662][T15900] netlink: zone id is out of range
[  361.480700][T15902] loop7: detected capacity change from 0 to 1024
[  361.482627][T15900] netlink: zone id is out of range
[  361.487631][T15902] EXT4-fs: Ignoring removed nomblk_io_submit option
[  361.504048][T15900] netlink: zone id is out of range
[  361.511644][T15900] netlink: zone id is out of range
[  361.520388][T15900] netlink: zone id is out of range
[  361.525807][T15900] netlink: zone id is out of range
[  361.543361][T15900] netlink: zone id is out of range
[  361.548649][T15900] netlink: zone id is out of range
[  361.554133][T15900] netlink: zone id is out of range
[  361.559742][T15900] netlink: zone id is out of range
[  361.610519][T15910] loop2: detected capacity change from 0 to 1024
[  361.617484][T15910] EXT4-fs: Ignoring removed nomblk_io_submit option
[  361.640569][T15914] loop3: detected capacity change from 0 to 512
[  361.737605][T15931] loop3: detected capacity change from 0 to 1024
[  361.744793][T15931] EXT4-fs: Ignoring removed nomblk_io_submit option
[  361.806526][T15938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3886'.
[  361.859003][T15948] loop3: detected capacity change from 0 to 512
[  361.891988][T15951] loop3: detected capacity change from 0 to 1024
[  361.900018][T15951] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  361.912218][T15951] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.3892: lblock 1 mapped to illegal pblock 1 (length 1)
[  361.927188][T15951] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3892: Failed to acquire dquot type 0
[  361.938858][T15951] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.3892: Freeing blocks not in datazone - block = 0, count = 4096
[  361.952505][T15951] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.3892: Invalid inode bitmap blk 0 in block_group 0
[  361.958366][ T2266] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  361.979697][ T2266] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0
[  361.982414][T15951] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  362.000147][T15951] EXT4-fs (loop3): 1 orphan inode deleted
[  362.036485][T15951] loop3: detected capacity change from 0 to 2048
[  362.079308][T15951] Alternate GPT is invalid, using primary GPT.
[  362.085696][T15951]  loop3: p1 p2 p3
[  362.116861][T15951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3892'.
[  362.180947][T15959] loop0: detected capacity change from 0 to 512
[  362.187601][T15959] EXT4-fs: Ignoring removed nobh option
[  362.199229][T15959] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117
[  362.214111][T15963] loop3: detected capacity change from 0 to 1024
[  362.221782][T13064] usb 11-1: enqueue for inactive port 0
[  362.231935][T13064] usb 11-1: enqueue for inactive port 0
[  362.237877][T15959] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3894: invalid indirect mapped block 256 (level 1)
[  362.261490][T15963] EXT4-fs: Ignoring removed nomblk_io_submit option
[  362.269439][T15959] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3894: invalid indirect mapped block 2683928664 (level 1)
[  362.319905][T15959] EXT4-fs (loop0): 1 truncate cleaned up
[  362.361578][T13064] vhci_hcd: vhci_device speed not set
[  362.393891][T15959] netlink: 'syz.0.3894': attribute type 10 has an invalid length.
[  362.427310][T15959] team0: Port device dummy0 added
[  362.502531][T15971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3899'.
[  362.535373][T15973] loop3: detected capacity change from 0 to 512
[  362.545107][T15973] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  362.572259][T15973] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal
[  362.587421][T15975] loop7: detected capacity change from 0 to 512
[  362.595503][T15975] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  362.629154][T15975] EXT4-fs (loop7): 1 truncate cleaned up
[  362.637838][T15977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3900'.
[  362.695837][T15979] loop7: detected capacity change from 0 to 512
[  362.784914][T15989] loop5: detected capacity change from 0 to 512
[  362.795682][T15989] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  362.819898][T15991] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  362.874253][T15991] loop2: detected capacity change from 0 to 512
[  362.882562][T15991] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  362.895967][T15991] EXT4-fs (loop2): 1 truncate cleaned up
[  362.907397][T15957] syz.0.3894 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000
[  362.921974][T15957] CPU: 0 UID: 0 PID: 15957 Comm: syz.0.3894 Tainted: G        W           6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) 
[  362.922040][T15957] Tainted: [W]=WARN
[  362.922048][T15957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  362.922084][T15957] Call Trace:
[  362.922093][T15957]  <TASK>
[  362.922103][T15957]  __dump_stack+0x1d/0x30
[  362.922174][T15957]  dump_stack_lvl+0xe8/0x140
[  362.922256][T15957]  dump_stack+0x15/0x1b
[  362.922278][T15957]  dump_header+0x81/0x220
[  362.922368][T15957]  oom_kill_process+0x342/0x400
[  362.922402][T15957]  out_of_memory+0x979/0xb80
[  362.922431][T15957]  try_charge_memcg+0x5e6/0x9e0
[  362.922512][T15957]  obj_cgroup_charge_pages+0xa6/0x150
[  362.922702][T15957]  __memcg_kmem_charge_page+0x9f/0x170
[  362.922790][T15957]  __alloc_frozen_pages_noprof+0x188/0x360
[  362.922858][T15957]  alloc_pages_mpol+0xb3/0x250
[  362.922882][T15957]  alloc_pages_noprof+0x90/0x130
[  362.922905][T15957]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  362.922949][T15957]  __kvmalloc_node_noprof+0x30f/0x4e0
[  362.923147][T15957]  ? ip_set_alloc+0x1f/0x30
[  362.923253][T15957]  ? ip_set_alloc+0x1f/0x30
[  362.923279][T15957]  ? __kmalloc_cache_noprof+0x189/0x320
[  362.923307][T15957]  ip_set_alloc+0x1f/0x30
[  362.923403][T15957]  hash_netiface_create+0x282/0x740
[  362.923432][T15957]  ? __pfx_hash_netiface_create+0x10/0x10
[  362.923523][T15957]  ip_set_create+0x3cc/0x960
[  362.923580][T15957]  ? __nla_parse+0x40/0x60
[  362.923625][T15957]  nfnetlink_rcv_msg+0x4c6/0x590
[  362.923683][T15957]  netlink_rcv_skb+0x123/0x220
[  362.923719][T15957]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  362.923760][T15957]  nfnetlink_rcv+0x16b/0x1690
[  362.923818][T15957]  ? nlmon_xmit+0x4f/0x60
[  362.923852][T15957]  ? consume_skb+0x49/0x150
[  362.923880][T15957]  ? nlmon_xmit+0x4f/0x60
[  362.923992][T15957]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  362.924038][T15957]  ? __dev_queue_xmit+0x1200/0x2000
[  362.924104][T15957]  ? __dev_queue_xmit+0x182/0x2000
[  362.924146][T15957]  ? __alloc_frozen_pages_noprof+0x188/0x360
[  362.924182][T15957]  ? ref_tracker_free+0x37d/0x3e0
[  362.924253][T15957]  ? __netlink_deliver_tap+0x4dc/0x500
[  362.924299][T15957]  netlink_unicast+0x5bd/0x690
[  362.924331][T15957]  netlink_sendmsg+0x58b/0x6b0
[  362.924399][T15957]  ? __pfx_netlink_sendmsg+0x10/0x10
[  362.924432][T15957]  __sock_sendmsg+0x142/0x180
[  362.924528][T15957]  ____sys_sendmsg+0x31e/0x4e0
[  362.924574][T15957]  ___sys_sendmsg+0x17b/0x1d0
[  362.924627][T15957]  __x64_sys_sendmsg+0xd4/0x160
[  362.924714][T15957]  x64_sys_call+0x191e/0x2ff0
[  362.924776][T15957]  do_syscall_64+0xd2/0x200
[  362.924805][T15957]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  362.924848][T15957]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  362.924955][T15957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.924985][T15957] RIP: 0033:0x7fe9c39ee9a9
[  362.925004][T15957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  362.925028][T15957] RSP: 002b:00007fe9c204f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  362.925121][T15957] RAX: ffffffffffffffda RBX: 00007fe9c3c15fa0 RCX: 00007fe9c39ee9a9
[  362.925138][T15957] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004
[  362.925151][T15957] RBP: 00007fe9c3a70d69 R08: 0000000000000000 R09: 0000000000000000
[  362.925164][T15957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  362.925176][T15957] R13: 0000000000000000 R14: 00007fe9c3c15fa0 R15: 00007ffe5fe0fed8
[  362.925274][T15957]  </TASK>
[  362.925284][T15957] memory: usage 307200kB, limit 307200kB, failcnt 529
[  363.071958][T15993] 9pnet_fd: Insufficient options for proto=fd
[  363.073034][T15957] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0
[  363.291941][T15957] kmem: usage 306184kB, limit 9007199254740988kB, failcnt 0
[  363.299334][T15957] Memory cgroup stats for /syz0:
[  363.300210][T15957] cache 684032
[  363.308693][T15957] rss 81920
[  363.311913][T15957] shmem 262144
[  363.315338][T15957] mapped_file 413696
[  363.319326][T15957] dirty 421888
[  363.322717][T15957] writeback 53248
[  363.326376][T15957] workingset_refault_anon 86
[  363.331031][T15957] workingset_refault_file 307
[  363.335784][T15957] swap 53248
[  363.339064][T15957] swapcached 81920
[  363.342812][T15957] pgpgin 210783
[  363.346324][T15957] pgpgout 210545
[  363.349921][T15957] pgfault 274488
[  363.353527][T15957] pgmajfault 83
[  363.357062][T15957] inactive_anon 294912
[  363.361199][T15957] active_anon 0
[  363.364666][T15957] inactive_file 0
[  363.368422][T15957] active_file 552960
[  363.372345][T15957] unevictable 0
[  363.375876][T15957] hierarchical_memory_limit 314572800
[  363.381363][T15957] hierarchical_memsw_limit 9223372036854771712
[  363.387550][T15957] total_cache 684032
[  363.391558][T15957] total_rss 81920
[  363.395196][T15957] total_shmem 262144
[  363.399132][T15957] total_mapped_file 413696
[  363.403560][T15957] total_dirty 421888
[  363.407462][T15957] total_writeback 53248
[  363.411680][T15957] total_workingset_refault_anon 86
[  363.416906][T15957] total_workingset_refault_file 307
[  363.422151][T15957] total_swap 53248
[  363.425886][T15957] total_swapcached 81920
[  363.430173][T15957] total_pgpgin 210783
[  363.434165][T15957] total_pgpgout 210545
[  363.438280][T15957] total_pgfault 274488
[  363.439744][T16006] loop2: detected capacity change from 0 to 2048
[  363.442351][T15957] total_pgmajfault 83
[  363.442364][T15957] total_inactive_anon 294912
[  363.442374][T15957] total_active_anon 0
[  363.461408][T15957] total_inactive_file 0
[  363.465580][T15957] total_active_file 552960
[  363.470077][T15957] total_unevictable 0
[  363.474102][T15957] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3894,pid=15956,uid=0
[  363.488919][T15957] Memory cgroup out of memory: Killed process 15956 (syz.0.3894) total-vm:93760kB, anon-rss:1072kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  363.509856][T16003] batadv_slave_1: entered promiscuous mode
[  363.516369][   T29] kauditd_printk_skb: 335 callbacks suppressed
[  363.516386][   T29] audit: type=1326 audit(1753943502.940:22338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16004 comm="syz.2.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  363.546306][   T29] audit: type=1326 audit(1753943502.940:22339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16004 comm="syz.2.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  363.569923][   T29] audit: type=1326 audit(1753943502.940:22340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16004 comm="syz.2.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  363.571106][T16007] batadv_slave_1: left promiscuous mode
[  363.593763][   T29] audit: type=1326 audit(1753943502.940:22341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16004 comm="syz.2.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  363.623114][   T29] audit: type=1326 audit(1753943502.940:22342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16004 comm="syz.2.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  363.646742][   T29] audit: type=1326 audit(1753943502.940:22343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16004 comm="syz.2.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  363.670347][   T29] audit: type=1326 audit(1753943502.940:22344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16004 comm="syz.2.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  363.693978][   T29] audit: type=1326 audit(1753943502.940:22345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16004 comm="syz.2.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  363.717634][   T29] audit: type=1326 audit(1753943502.940:22346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16004 comm="syz.2.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  363.719931][T16005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3910'.
[  363.741297][   T29] audit: type=1326 audit(1753943502.940:22347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16004 comm="syz.2.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  363.792628][T16010] loop3: detected capacity change from 0 to 512
[  363.866348][T16019] loop7: detected capacity change from 0 to 1024
[  363.885271][T16023] loop3: detected capacity change from 0 to 512
[  363.916692][T16019] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  363.933022][T16031] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  363.954243][T16037] loop3: detected capacity change from 0 to 512
[  363.961497][T16037] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  363.975950][T16031] loop5: detected capacity change from 0 to 512
[  363.998761][T16031] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  364.028751][T16037] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal
[  364.041206][T16031] EXT4-fs (loop5): 1 truncate cleaned up
[  364.090976][T16033] 9pnet_fd: Insufficient options for proto=fd
[  364.105877][T16046] loop5: detected capacity change from 0 to 1024
[  364.113208][T16046] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  364.123712][T16047] loop2: detected capacity change from 0 to 512
[  364.124503][T16048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3923'.
[  364.140329][T16047] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  364.153506][T16046] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #3: block 1: comm syz.5.3925: lblock 1 mapped to illegal pblock 1 (length 1)
[  364.168695][T16046] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3925: Failed to acquire dquot type 0
[  364.189040][T16046] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.3925: Freeing blocks not in datazone - block = 0, count = 4096
[  364.207217][T16046] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.3925: Invalid inode bitmap blk 0 in block_group 0
[  364.229480][T16053] batadv_slave_1: entered promiscuous mode
[  364.229721][ T2266] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  364.242325][T16046] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  364.250989][ T2266] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0
[  364.270081][T16046] EXT4-fs (loop5): 1 orphan inode deleted
[  364.288961][T16054] batadv_slave_1: left promiscuous mode
[  364.302410][T16046] loop5: detected capacity change from 0 to 2048
[  364.340723][T16046] Alternate GPT is invalid, using primary GPT.
[  364.347091][T16046]  loop5: p1 p2 p3
[  364.366632][T16046] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3925'.
[  364.393965][T16067] loop0: detected capacity change from 0 to 512
[  364.402530][T16067] EXT4-fs: Ignoring removed nobh option
[  364.425958][T16067] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117
[  364.448579][T16070] loop5: detected capacity change from 0 to 512
[  364.463036][T16067] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3930: invalid indirect mapped block 256 (level 1)
[  364.487120][T16067] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3930: invalid indirect mapped block 2683928664 (level 1)
[  364.526501][T16067] EXT4-fs (loop0): 1 truncate cleaned up
[  364.562417][T16067] netlink: 'syz.0.3930': attribute type 10 has an invalid length.
[  364.666031][T16077] 9pnet_fd: Insufficient options for proto=fd
[  364.753676][T16083] batadv_slave_1: entered promiscuous mode
[  364.803356][T16085] loop3: detected capacity change from 0 to 1024
[  364.814991][T16086] batadv_slave_1: left promiscuous mode
[  364.822059][T16085] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  365.078633][T16062] syz.0.3930 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000
[  365.093370][T16062] CPU: 0 UID: 0 PID: 16062 Comm: syz.0.3930 Tainted: G        W           6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) 
[  365.093481][T16062] Tainted: [W]=WARN
[  365.093490][T16062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  365.093507][T16062] Call Trace:
[  365.093527][T16062]  <TASK>
[  365.093537][T16062]  __dump_stack+0x1d/0x30
[  365.093618][T16062]  dump_stack_lvl+0xe8/0x140
[  365.093663][T16062]  dump_stack+0x15/0x1b
[  365.093684][T16062]  dump_header+0x81/0x220
[  365.093793][T16062]  oom_kill_process+0x342/0x400
[  365.093892][T16062]  out_of_memory+0x979/0xb80
[  365.093920][T16062]  try_charge_memcg+0x5e6/0x9e0
[  365.093961][T16062]  obj_cgroup_charge_pages+0xa6/0x150
[  365.093993][T16062]  __memcg_kmem_charge_page+0x9f/0x170
[  365.094087][T16062]  __alloc_frozen_pages_noprof+0x188/0x360
[  365.094122][T16062]  alloc_pages_mpol+0xb3/0x250
[  365.094156][T16062]  alloc_pages_noprof+0x90/0x130
[  365.094200][T16062]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  365.094271][T16062]  __kvmalloc_node_noprof+0x30f/0x4e0
[  365.094302][T16062]  ? ip_set_alloc+0x1f/0x30
[  365.094337][T16062]  ? ip_set_alloc+0x1f/0x30
[  365.094370][T16062]  ? __kmalloc_cache_noprof+0x189/0x320
[  365.094406][T16062]  ip_set_alloc+0x1f/0x30
[  365.094440][T16062]  hash_netiface_create+0x282/0x740
[  365.094502][T16062]  ? __pfx_hash_netiface_create+0x10/0x10
[  365.094584][T16062]  ip_set_create+0x3cc/0x960
[  365.094638][T16062]  ? __nla_parse+0x40/0x60
[  365.094670][T16062]  nfnetlink_rcv_msg+0x4c6/0x590
[  365.094729][T16062]  netlink_rcv_skb+0x123/0x220
[  365.094780][T16062]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  365.094821][T16062]  nfnetlink_rcv+0x16b/0x1690
[  365.094922][T16062]  ? nlmon_xmit+0x4f/0x60
[  365.094957][T16062]  ? consume_skb+0x49/0x150
[  365.095114][T16062]  ? nlmon_xmit+0x4f/0x60
[  365.095146][T16062]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  365.095191][T16062]  ? __dev_queue_xmit+0x1200/0x2000
[  365.095300][T16062]  ? __dev_queue_xmit+0x182/0x2000
[  365.095341][T16062]  ? ref_tracker_free+0x37d/0x3e0
[  365.095444][T16062]  ? __netlink_deliver_tap+0x4dc/0x500
[  365.095491][T16062]  netlink_unicast+0x5bd/0x690
[  365.095531][T16062]  netlink_sendmsg+0x58b/0x6b0
[  365.095577][T16062]  ? __pfx_netlink_sendmsg+0x10/0x10
[  365.095665][T16062]  __sock_sendmsg+0x142/0x180
[  365.095738][T16062]  ____sys_sendmsg+0x31e/0x4e0
[  365.095783][T16062]  ___sys_sendmsg+0x17b/0x1d0
[  365.095949][T16062]  __x64_sys_sendmsg+0xd4/0x160
[  365.095998][T16062]  x64_sys_call+0x191e/0x2ff0
[  365.096053][T16062]  do_syscall_64+0xd2/0x200
[  365.096083][T16062]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  365.096113][T16062]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  365.096229][T16062]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.096258][T16062] RIP: 0033:0x7fe9c39ee9a9
[  365.096335][T16062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  365.096356][T16062] RSP: 002b:00007fe9c204f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  365.096376][T16062] RAX: ffffffffffffffda RBX: 00007fe9c3c15fa0 RCX: 00007fe9c39ee9a9
[  365.096388][T16062] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004
[  365.096407][T16062] RBP: 00007fe9c3a70d69 R08: 0000000000000000 R09: 0000000000000000
[  365.096435][T16062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  365.096452][T16062] R13: 0000000000000000 R14: 00007fe9c3c15fa0 R15: 00007ffe5fe0fed8
[  365.096478][T16062]  </TASK>
[  365.096505][T16062] memory: usage 307200kB, limit 307200kB, failcnt 764
[  365.127921][T16099] loop5: detected capacity change from 0 to 2048
[  365.130676][T16062] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0
[  365.130696][T16062] kmem: usage 306188kB, limit 9007199254740988kB, failcnt 0
[  365.130712][T16062] Memory cgroup stats for /syz0:
[  365.496094][T16062] cache 815104
[  365.505328][T16062] rss 0
[  365.508119][T16062] shmem 262144
[  365.511577][T16062] mapped_file 413696
[  365.515517][T16062] dirty 421888
[  365.518958][T16062] writeback 0
[  365.522261][T16062] workingset_refault_anon 133
[  365.526950][T16062] workingset_refault_file 386
[  365.531700][T16062] swap 167936
[  365.535083][T16062] swapcached 45056
[  365.538915][T16062] pgpgin 214024
[  365.542490][T16062] pgpgout 213782
[  365.546050][T16062] pgfault 277863
[  365.549712][T16062] pgmajfault 100
[  365.553350][T16062] inactive_anon 290816
[  365.557501][T16062] active_anon 16384
[  365.561383][T16062] inactive_file 618496
[  365.565492][T16062] active_file 65536
[  365.569431][T16062] unevictable 0
[  365.573027][T16062] hierarchical_memory_limit 314572800
[  365.578504][T16062] hierarchical_memsw_limit 9223372036854771712
[  365.584666][T16062] total_cache 815104
[  365.588623][T16062] total_rss 0
[  365.591963][T16062] total_shmem 262144
[  365.595949][T16062] total_mapped_file 413696
[  365.600575][T16062] total_dirty 421888
[  365.604554][T16062] total_writeback 0
[  365.608405][T16062] total_workingset_refault_anon 133
[  365.613616][T16062] total_workingset_refault_file 386
[  365.618883][T16062] total_swap 167936
[  365.622701][T16062] total_swapcached 45056
[  365.627015][T16062] total_pgpgin 214024
[  365.631086][T16062] total_pgpgout 213782
[  365.635811][T16062] total_pgfault 277863
[  365.640058][T16062] total_pgmajfault 100
[  365.644141][T16062] total_inactive_anon 290816
[  365.648767][T16062] total_active_anon 16384
[  365.653113][T16062] total_inactive_file 618496
[  365.657758][T16062] total_active_file 65536
[  365.662195][T16062] total_unevictable 0
[  365.666250][T16062] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3930,pid=16061,uid=0
[  365.681023][T16062] Memory cgroup out of memory: Killed process 16062 (syz.0.3930) total-vm:93760kB, anon-rss:1072kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  365.699781][T16099] EXT4-fs (loop5): failed to initialize system zone (-117)
[  365.707102][T16099] EXT4-fs (loop5): mount failed
[  365.766911][T16125] loop2: detected capacity change from 0 to 512
[  365.786725][T16125] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  365.807747][T16125] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal
[  365.823325][T16112] 9pnet_fd: Insufficient options for proto=fd
[  365.858691][T16129] loop5: detected capacity change from 0 to 512
[  365.869816][T16129] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  365.881816][T16130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3950'.
[  365.910103][T16132] loop3: detected capacity change from 0 to 1024
[  365.920218][T16132] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  365.936156][T16140] FAULT_INJECTION: forcing a failure.
[  365.936156][T16140] name failslab, interval 1, probability 0, space 0, times 0
[  365.948932][T16140] CPU: 0 UID: 0 PID: 16140 Comm: syz.0.3954 Tainted: G        W           6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) 
[  365.948979][T16140] Tainted: [W]=WARN
[  365.948987][T16140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  365.949004][T16140] Call Trace:
[  365.949012][T16140]  <TASK>
[  365.949019][T16140]  __dump_stack+0x1d/0x30
[  365.949123][T16140]  dump_stack_lvl+0xe8/0x140
[  365.949173][T16140]  dump_stack+0x15/0x1b
[  365.949270][T16140]  should_fail_ex+0x265/0x280
[  365.949313][T16140]  should_failslab+0x8c/0xb0
[  365.949351][T16140]  kmem_cache_alloc_node_noprof+0x57/0x320
[  365.949449][T16140]  ? __alloc_skb+0x101/0x320
[  365.949530][T16140]  __alloc_skb+0x101/0x320
[  365.949560][T16140]  ? audit_log_start+0x365/0x6c0
[  365.949598][T16140]  audit_log_start+0x380/0x6c0
[  365.949681][T16140]  audit_seccomp+0x48/0x100
[  365.949760][T16140]  ? __seccomp_filter+0x68c/0x10d0
[  365.949823][T16140]  __seccomp_filter+0x69d/0x10d0
[  365.949848][T16140]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  365.949883][T16140]  ? vfs_write+0x75e/0x8e0
[  365.949958][T16140]  ? __rcu_read_unlock+0x4f/0x70
[  365.949987][T16140]  ? __fget_files+0x184/0x1c0
[  365.950023][T16140]  __secure_computing+0x82/0x150
[  365.950056][T16140]  syscall_trace_enter+0xcf/0x1e0
[  365.950092][T16140]  do_syscall_64+0xac/0x200
[  365.950122][T16140]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  365.950156][T16140]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  365.950200][T16140]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.950280][T16140] RIP: 0033:0x7fe9c39ee9a9
[  365.950301][T16140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  365.950326][T16140] RSP: 002b:00007fe9c204f038 EFLAGS: 00000246 ORIG_RAX: 000000000000008a
[  365.950351][T16140] RAX: ffffffffffffffda RBX: 00007fe9c3c15fa0 RCX: 00007fe9c39ee9a9
[  365.950436][T16140] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  365.950453][T16140] RBP: 00007fe9c204f090 R08: 0000000000000000 R09: 0000000000000000
[  365.950469][T16140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  365.950528][T16140] R13: 0000000000000000 R14: 00007fe9c3c15fa0 R15: 00007ffe5fe0fed8
[  365.950552][T16140]  </TASK>
[  366.247774][T16147] loop0: detected capacity change from 0 to 512
[  366.254883][T16147] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  366.266866][T16147] EXT4-fs (loop0): 1 truncate cleaned up
[  366.275178][T16148] EXT4-fs error (device loop0): __ext4_iget:5374: inode #12: block 2: comm syz.0.3957: invalid block
[  366.286918][T16148] EXT4-fs (loop0): Remounting filesystem read-only
[  366.337786][T16154] loop0: detected capacity change from 0 to 512
[  366.348652][T16156] loop3: detected capacity change from 0 to 1024
[  366.355654][T16156] EXT4-fs: Ignoring removed nomblk_io_submit option
[  366.377019][T16159] loop0: detected capacity change from 0 to 2048
[  366.391025][T16159] EXT4-fs (loop0): failed to initialize system zone (-117)
[  366.398551][T16159] EXT4-fs (loop0): mount failed
[  366.432071][T16166] loop0: detected capacity change from 0 to 512
[  366.441667][T16166] EXT4-fs (loop0): orphan cleanup on readonly fs
[  366.448732][T16166] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3963: Failed to acquire dquot type 1
[  366.464075][T16166] EXT4-fs (loop0): 1 truncate cleaned up
[  366.484765][T16166] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  366.499492][T16166] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 8
[  366.513666][T16170] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  366.527028][T16166] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3963'.
[  366.560861][T16167] 9pnet_fd: Insufficient options for proto=fd
[  366.567722][T16170] loop7: detected capacity change from 0 to 512
[  366.574659][T16170] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  366.586025][T16170] EXT4-fs (loop7): 1 truncate cleaned up
[  366.681285][T16183] loop0: detected capacity change from 0 to 512
[  366.689783][T16183] EXT4-fs (loop0): orphan cleanup on readonly fs
[  366.696626][T16183] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3965: Failed to acquire dquot type 1
[  366.714047][T16185] loop2: detected capacity change from 0 to 1024
[  366.721328][T16183] EXT4-fs (loop0): 1 truncate cleaned up
[  366.744215][T16183] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  366.765114][T16192] loop5: detected capacity change from 0 to 512
[  366.768628][T16183] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 8
[  366.785787][T16185] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  366.809064][T16183] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3965'.
[  366.870945][T16197] loop5: detected capacity change from 0 to 1024
[  366.892560][T16197] EXT4-fs: Ignoring removed nomblk_io_submit option
[  366.904184][T16200] net_ratelimit: 190 callbacks suppressed
[  366.904263][T16200] netlink: zone id is out of range
[  366.920018][T16200] netlink: zone id is out of range
[  366.927315][T16200] netlink: zone id is out of range
[  366.944335][T16200] netlink: zone id is out of range
[  366.958121][T16200] netlink: zone id is out of range
[  366.976342][T16200] netlink: zone id is out of range
[  366.982242][T16200] netlink: zone id is out of range
[  366.987814][T16200] netlink: zone id is out of range
[  367.013700][T16200] netlink: zone id is out of range
[  367.026270][T16200] netlink: zone id is out of range
[  367.234411][T16220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3980'.
[  367.252693][T16220] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  367.300956][T16220] batman_adv: batadv0: Removing interface: batadv_slave_1
[  367.311382][T16213] 9pnet_fd: Insufficient options for proto=fd
[  367.456212][T16225] 9pnet_fd: Insufficient options for proto=fd
[  368.046415][T16232] loop7: detected capacity change from 0 to 2048
[  368.073139][T16234] loop0: detected capacity change from 0 to 2048
[  368.095316][T16237] FAULT_INJECTION: forcing a failure.
[  368.095316][T16237] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  368.108522][T16237] CPU: 1 UID: 0 PID: 16237 Comm: syz.5.3986 Tainted: G        W           6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) 
[  368.108610][T16237] Tainted: [W]=WARN
[  368.108619][T16237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  368.108635][T16237] Call Trace:
[  368.108644][T16237]  <TASK>
[  368.108654][T16237]  __dump_stack+0x1d/0x30
[  368.108681][T16237]  dump_stack_lvl+0xe8/0x140
[  368.108787][T16237]  dump_stack+0x15/0x1b
[  368.108804][T16237]  should_fail_ex+0x265/0x280
[  368.108826][T16237]  should_fail+0xb/0x20
[  368.108843][T16237]  should_fail_usercopy+0x1a/0x20
[  368.108869][T16237]  _copy_from_user+0x1c/0xb0
[  368.108898][T16237]  __copy_msghdr+0x244/0x300
[  368.108933][T16237]  ___sys_sendmsg+0x109/0x1d0
[  368.109037][T16237]  __sys_sendmmsg+0x178/0x300
[  368.109113][T16237]  __x64_sys_sendmmsg+0x57/0x70
[  368.109203][T16237]  x64_sys_call+0x1c4a/0x2ff0
[  368.109225][T16237]  do_syscall_64+0xd2/0x200
[  368.109246][T16237]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  368.109283][T16237]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  368.109356][T16237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.109432][T16237] RIP: 0033:0x7fe4264be9a9
[  368.109492][T16237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  368.109511][T16237] RSP: 002b:00007fe424b27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  368.109530][T16237] RAX: ffffffffffffffda RBX: 00007fe4266e5fa0 RCX: 00007fe4264be9a9
[  368.109542][T16237] RDX: 0000000000000001 RSI: 0000200000001500 RDI: 0000000000000003
[  368.109565][T16237] RBP: 00007fe424b27090 R08: 0000000000000000 R09: 0000000000000000
[  368.109612][T16237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  368.109628][T16237] R13: 0000000000000000 R14: 00007fe4266e5fa0 R15: 00007ffe49db7778
[  368.109653][T16237]  </TASK>
[  368.359624][T16234] EXT4-fs (loop0): failed to initialize system zone (-117)
[  368.367073][T16234] EXT4-fs (loop0): mount failed
[  368.396436][T16232] EXT4-fs (loop7): failed to initialize system zone (-117)
[  368.407763][T16232] EXT4-fs (loop7): mount failed
[  368.506488][T16253] loop3: detected capacity change from 0 to 1024
[  368.588882][   T29] kauditd_printk_skb: 512 callbacks suppressed
[  368.588901][   T29] audit: type=1400 audit(1753943508.081:22851): avc:  denied  { mount } for  pid=16238 comm="syz.5.3987" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  368.617938][   T29] audit: type=1326 audit(1753943508.081:22852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16238 comm="syz.5.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4264be9a9 code=0x7ffc0000
[  368.641988][   T29] audit: type=1326 audit(1753943508.081:22853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16238 comm="syz.5.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4264be9a9 code=0x7ffc0000
[  368.666112][   T29] audit: type=1326 audit(1753943508.081:22854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16238 comm="syz.5.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4264be9a9 code=0x7ffc0000
[  368.689813][   T29] audit: type=1326 audit(1753943508.081:22855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16238 comm="syz.5.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4264be9a9 code=0x7ffc0000
[  368.713679][   T29] audit: type=1326 audit(1753943508.081:22856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16238 comm="syz.5.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4264be9a9 code=0x7ffc0000
[  368.741871][T16253] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  368.828105][   T29] audit: type=1326 audit(1753943508.211:22857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16245 comm="syz.0.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c39ee9a9 code=0x7ffc0000
[  368.851960][   T29] audit: type=1326 audit(1753943508.211:22858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16245 comm="syz.0.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c39ee9a9 code=0x7ffc0000
[  368.875703][   T29] audit: type=1326 audit(1753943508.211:22859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16245 comm="syz.0.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9c39ee9a9 code=0x7ffc0000
[  368.899421][   T29] audit: type=1326 audit(1753943508.211:22860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16245 comm="syz.0.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c39ee9a9 code=0x7ffc0000
[  369.144449][T16265] loop0: detected capacity change from 0 to 1024
[  369.230734][T16265] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  369.261409][T16265] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.3993: lblock 1 mapped to illegal pblock 1 (length 1)
[  369.283748][T16265] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3993: Failed to acquire dquot type 0
[  369.323872][T16265] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.3993: Freeing blocks not in datazone - block = 0, count = 4096
[  369.356617][T16265] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.3993: Invalid inode bitmap blk 0 in block_group 0
[  369.515257][T16265] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  369.599717][T16265] EXT4-fs (loop0): 1 orphan inode deleted
[  369.734137][T16271] 9pnet_fd: Insufficient options for proto=fd
[  369.769980][T16284] loop7: detected capacity change from 0 to 1024
[  369.781868][ T2100] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  369.796517][ T2100] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0
[  369.832562][T16288] loop2: detected capacity change from 0 to 512
[  369.839751][T16288] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  369.857655][T16265] loop0: detected capacity change from 0 to 2048
[  369.867045][T16288] EXT4-fs (loop2): 1 truncate cleaned up
[  369.888916][T16291] loop5: detected capacity change from 0 to 2048
[  369.912955][T16291] EXT4-fs (loop5): failed to initialize system zone (-117)
[  369.918814][T16265] Alternate GPT is invalid, using primary GPT.
[  369.921746][T16291] EXT4-fs (loop5): mount failed
[  369.926578][T16265]  loop0: p1 p2 p3
[  370.061440][T16265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3993'.
[  370.132970][T16308] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  370.193626][T16308] loop0: detected capacity change from 0 to 512
[  370.216608][T16308] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  370.252660][T16308] EXT4-fs (loop0): 1 truncate cleaned up
[  370.283425][T16317] loop2: detected capacity change from 0 to 1024
[  370.317516][T16317] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  370.340443][T16317] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.4011: lblock 1 mapped to illegal pblock 1 (length 1)
[  370.355155][T16317] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4011: Failed to acquire dquot type 0
[  370.367902][T16317] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.4011: Freeing blocks not in datazone - block = 0, count = 4096
[  370.389303][T16317] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.4011: Invalid inode bitmap blk 0 in block_group 0
[  370.418498][T16317] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  370.418510][ T3444] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  370.442858][T16317] EXT4-fs (loop2): 1 orphan inode deleted
[  370.466937][ T3444] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0
[  370.479213][T16317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4011'.
[  370.499144][T16321] 9pnet_fd: Insufficient options for proto=fd
[  370.630930][T16331] loop0: detected capacity change from 0 to 1024
[  370.687508][T16337] loop0: detected capacity change from 0 to 512
[  370.694764][T16337] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  370.711950][T16337] EXT4-fs (loop0): 1 truncate cleaned up
[  370.773702][T16341] loop7: detected capacity change from 0 to 512
[  370.833101][T16344] loop7: detected capacity change from 0 to 1024
[  370.840721][T16344] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  370.951876][T16344] EXT4-fs error (device loop7): ext4_map_blocks:816: inode #3: block 1: comm syz.7.4018: lblock 1 mapped to illegal pblock 1 (length 1)
[  370.972246][T16344] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.4018: Failed to acquire dquot type 0
[  370.996877][T16344] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.4018: Freeing blocks not in datazone - block = 0, count = 4096
[  371.019926][T16344] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.4018: Invalid inode bitmap blk 0 in block_group 0
[  371.033119][T16344] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem
[  371.051879][   T37] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  371.131382][T16344] EXT4-fs (loop7): 1 orphan inode deleted
[  371.169361][   T37] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0
[  371.359045][T16362] loop5: detected capacity change from 0 to 1024
[  371.408027][T16362] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  371.478085][T16362] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #3: block 1: comm syz.5.4023: lblock 1 mapped to illegal pblock 1 (length 1)
[  371.512608][T16362] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4023: Failed to acquire dquot type 0
[  371.586215][T16362] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.4023: Freeing blocks not in datazone - block = 0, count = 4096
[  371.631760][T16362] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.4023: Invalid inode bitmap blk 0 in block_group 0
[  371.650605][   T37] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  371.742364][   T37] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0
[  371.756131][T16362] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  371.789805][T16362] EXT4-fs (loop5): 1 orphan inode deleted
[  371.871632][T16362] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4023'.
[  372.021940][T16344] loop7: detected capacity change from 0 to 2048
[  372.099189][T16383] loop5: detected capacity change from 0 to 1024
[  372.111323][T16344] Alternate GPT is invalid, using primary GPT.
[  372.116424][T16383] EXT4-fs: Ignoring removed nomblk_io_submit option
[  372.117691][T16344]  loop7: p1 p2 p3
[  372.292313][T16344] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4018'.
[  372.350987][T16381] 9pnet_fd: Insufficient options for proto=fd
[  372.531109][T16396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4037'.
[  372.567243][T16402] loop0: detected capacity change from 0 to 1024
[  372.575583][T16402] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  372.587632][T16402] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.4040: lblock 1 mapped to illegal pblock 1 (length 1)
[  372.604375][T16402] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.4040: Failed to acquire dquot type 0
[  372.616306][T16402] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.4040: Freeing blocks not in datazone - block = 0, count = 4096
[  372.631078][T16402] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.4040: Invalid inode bitmap blk 0 in block_group 0
[  372.652525][ T2100] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  372.669914][T16402] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  372.678673][ T2100] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0
[  372.684148][T16402] EXT4-fs (loop0): 1 orphan inode deleted
[  372.914776][T16402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4040'.
[  372.972206][T16416] loop3: detected capacity change from 0 to 512
[  373.018658][T16416] EXT4-fs (loop3): orphan cleanup on readonly fs
[  373.076063][T16416] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4044: Failed to acquire dquot type 1
[  373.114931][T16416] EXT4-fs (loop3): 1 truncate cleaned up
[  373.135443][T16416] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  373.156756][T16416] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 8
[  373.168442][T16416] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4044'.
[  373.178398][T13055] IPVS: starting estimator thread 0...
[  373.278230][T16427] IPVS: using max 2400 ests per chain, 120000 per kthread
[  373.293611][T16433] loop5: detected capacity change from 0 to 2048
[  373.322853][T16433] EXT4-fs (loop5): failed to initialize system zone (-117)
[  373.330325][T16433] EXT4-fs (loop5): mount failed
[  373.344537][T16437] batadv_slave_1: entered promiscuous mode
[  373.377774][T16426] 9pnet_fd: Insufficient options for proto=fd
[  373.436068][T16441] batadv_slave_1: left promiscuous mode
[  373.445882][T16440] loop5: detected capacity change from 0 to 512
[  373.547256][T16455] loop7: detected capacity change from 0 to 512
[  373.563941][T16455] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  373.589487][T16455] EXT4-fs mount: 200 callbacks suppressed
[  373.589503][T16455] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  373.619712][T16455] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  373.642234][   T29] kauditd_printk_skb: 617 callbacks suppressed
[  373.642252][   T29] audit: type=1400 audit(1753943513.161:23461): avc:  denied  { execute_no_trans } for  pid=16442 comm="syz.7.4053" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1810 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  373.778009][   T29] audit: type=1326 audit(1753943513.291:23462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16466 comm="syz.0.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c39ee9a9 code=0x7ffc0000
[  373.821081][   T29] audit: type=1326 audit(1753943513.321:23463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16466 comm="syz.0.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fe9c39ee9a9 code=0x7ffc0000
[  373.844904][   T29] audit: type=1326 audit(1753943513.321:23464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16466 comm="syz.0.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c39ee9a9 code=0x7ffc0000
[  373.868627][   T29] audit: type=1326 audit(1753943513.321:23465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16466 comm="syz.0.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fe9c39ee9a9 code=0x7ffc0000
[  373.892342][   T29] audit: type=1326 audit(1753943513.321:23466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16466 comm="syz.0.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c39ee9a9 code=0x7ffc0000
[  374.039738][   T29] audit: type=1326 audit(1753943513.561:23467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16475 comm="syz.2.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  374.063476][   T29] audit: type=1326 audit(1753943513.561:23468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16475 comm="syz.2.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  374.087153][   T29] audit: type=1326 audit(1753943513.561:23469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16475 comm="syz.2.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  374.111107][   T29] audit: type=1326 audit(1753943513.561:23470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16475 comm="syz.2.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  374.484879][T16483] loop3: detected capacity change from 0 to 512
[  374.532051][T16483] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  374.597397][T16490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4068'.
[  374.636781][T13429] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  374.730088][T16494] loop3: detected capacity change from 0 to 1024
[  374.755918][T16494] EXT4-fs: Ignoring removed nomblk_io_submit option
[  374.775838][T16496] loop5: detected capacity change from 0 to 512
[  374.821239][T16496] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  374.842435][T16494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  374.947000][T13429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.957185][T10165] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  375.011687][T16509] loop5: detected capacity change from 0 to 1024
[  375.075233][T16509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  375.089228][T16511] net_ratelimit: 92 callbacks suppressed
[  375.089246][T16511] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  375.169631][T16509] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  375.260667][T16521] loop2: detected capacity change from 0 to 512
[  375.295330][T16522] netlink: zone id is out of range
[  375.308185][T16521] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  375.329088][T16522] netlink: zone id is out of range
[  375.369364][T16525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4080'.
[  375.378369][T16522] netlink: zone id is out of range
[  375.383620][T16522] netlink: zone id is out of range
[  375.388970][T16522] netlink: zone id is out of range
[  375.394287][T16522] netlink: zone id is out of range
[  375.399505][T16522] netlink: zone id is out of range
[  375.404787][T16522] netlink: zone id is out of range
[  375.410003][T16522] netlink: zone id is out of range
[  375.456267][T13146] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  375.466474][T16528] netlink: 'syz.7.4081': attribute type 10 has an invalid length.
[  375.484865][T16528] team0: Device hsr_slave_0 failed to register rx_handler
[  375.486282][T10165] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.525591][T16532] loop3: detected capacity change from 0 to 128
[  375.543275][T16532] EXT4-fs: Ignoring removed nobh option
[  375.551914][T16532] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  375.564572][T16532] ext4 filesystem being mounted at /205/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  375.583716][T16539] loop7: detected capacity change from 0 to 128
[  375.606500][T16539] EXT4-fs: Ignoring removed nobh option
[  375.613191][T13429] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  375.644141][T16539] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  375.677528][T16539] ext4 filesystem being mounted at /282/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  375.688526][T16547] loop3: detected capacity change from 0 to 1024
[  375.702317][T16547] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  375.746203][T16547] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.4087: lblock 1 mapped to illegal pblock 1 (length 1)
[  375.783101][T11738] EXT4-fs error (device loop7): ext4_readdir:224: inode #11: comm syz-executor: path /282/mnt/lost+found: directory fails checksum at offset 1024
[  375.819421][T16543] 9pnet_fd: Insufficient options for proto=fd
[  375.824589][T16547] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4087: Failed to acquire dquot type 0
[  375.891759][T11738] EXT4-fs error (device loop7): ext4_empty_dir:3105: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  375.905729][T11738] EXT4-fs error (device loop7): ext4_readdir:224: inode #11: comm syz-executor: path /282/mnt/lost+found: directory fails checksum at offset 1024
[  375.921465][T16547] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.4087: Freeing blocks not in datazone - block = 0, count = 4096
[  375.948504][T11738] EXT4-fs error (device loop7): ext4_empty_dir:3105: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  375.963943][T16547] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.4087: Invalid inode bitmap blk 0 in block_group 0
[  375.977255][T11738] EXT4-fs error (device loop7): ext4_readdir:224: inode #11: comm syz-executor: path /282/mnt/lost+found: directory fails checksum at offset 1024
[  375.992259][ T8153] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1)
[  375.993953][T16547] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  376.031440][T11738] EXT4-fs error (device loop7): ext4_empty_dir:3105: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  376.046252][T16547] EXT4-fs (loop3): 1 orphan inode deleted
[  376.052278][T11738] EXT4-fs error (device loop7): ext4_readdir:224: inode #11: comm syz-executor: path /282/mnt/lost+found: directory fails checksum at offset 1024
[  376.060687][ T8153] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 0
[  376.086961][T16547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.122587][T11738] EXT4-fs error (device loop7): ext4_empty_dir:3105: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  376.143885][T16547] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.153253][T11738] EXT4-fs error (device loop7): ext4_readdir:224: inode #11: comm syz-executor: path /282/mnt/lost+found: directory fails checksum at offset 1024
[  376.184608][T11738] EXT4-fs error (device loop7): ext4_empty_dir:3105: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  376.244954][T16547] loop3: detected capacity change from 0 to 2048
[  376.306974][T16547] Alternate GPT is invalid, using primary GPT.
[  376.313457][T16547]  loop3: p1 p2 p3
[  376.363575][T16568] loop5: detected capacity change from 0 to 1024
[  376.371980][T16547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4087'.
[  376.439642][T16568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  376.499318][T16568] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  376.513528][T16572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4096'.
[  376.712770][T11738] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  376.725439][ T2100] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.807589][ T2100] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.887378][T10165] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.021585][ T2100] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.312486][ T2100] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.420976][ T2100] bridge_slave_1: left allmulticast mode
[  377.426781][ T2100] bridge_slave_1: left promiscuous mode
[  377.432729][ T2100] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.540003][ T2100] bridge_slave_0: left allmulticast mode
[  377.545747][ T2100] bridge_slave_0: left promiscuous mode
[  377.551595][ T2100] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.585840][T16596] loop0: detected capacity change from 0 to 512
[  377.613805][T16596] EXT4-fs (loop0): orphan cleanup on readonly fs
[  377.620951][T16596] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.4105: Failed to acquire dquot type 1
[  377.641705][T16596] EXT4-fs (loop0): 1 truncate cleaned up
[  377.659045][ T2100] bond1 (unregistering): (slave gretap1): Releasing active interface
[  377.685328][T16596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  377.699466][T16599] FAULT_INJECTION: forcing a failure.
[  377.699466][T16599] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  377.712740][T16599] CPU: 0 UID: 0 PID: 16599 Comm: +}[@ Tainted: G        W           6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) 
[  377.712780][T16599] Tainted: [W]=WARN
[  377.712786][T16599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  377.712861][T16599] Call Trace:
[  377.712869][T16599]  <TASK>
[  377.712879][T16599]  __dump_stack+0x1d/0x30
[  377.712904][T16599]  dump_stack_lvl+0xe8/0x140
[  377.713013][T16599]  dump_stack+0x15/0x1b
[  377.713032][T16599]  should_fail_ex+0x265/0x280
[  377.713055][T16599]  should_fail+0xb/0x20
[  377.713077][T16599]  should_fail_usercopy+0x1a/0x20
[  377.713104][T16599]  strncpy_from_user+0x25/0x230
[  377.713168][T16599]  path_setxattrat+0xeb/0x310
[  377.713215][T16599]  __x64_sys_lsetxattr+0x71/0x90
[  377.713311][T16599]  x64_sys_call+0x2877/0x2ff0
[  377.713338][T16599]  do_syscall_64+0xd2/0x200
[  377.713366][T16599]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  377.713396][T16599]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  377.713443][T16599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.713471][T16599] RIP: 0033:0x7f37a240e9a9
[  377.713488][T16599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  377.713506][T16599] RSP: 002b:00007f37a0a77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[  377.713526][T16599] RAX: ffffffffffffffda RBX: 00007f37a2635fa0 RCX: 00007f37a240e9a9
[  377.713575][T16599] RDX: 0000200000000040 RSI: 0000200000000300 RDI: 0000000000000000
[  377.713592][T16599] RBP: 00007f37a0a77090 R08: 0000000000000000 R09: 0000000000000000
[  377.713608][T16599] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000001
[  377.713623][T16599] R13: 0000000000000000 R14: 00007f37a2635fa0 R15: 00007ffdf8c6d488
[  377.713710][T16599]  </TASK>
[  377.953231][T16596] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  377.968904][T16596] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 8
[  377.990978][ T2100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  378.005075][ T2100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  378.014953][T16596] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4105'.
[  378.019316][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4107'.
[  378.035790][ T2100] bond0 (unregistering): Released all slaves
[  378.047244][T12709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.051387][ T2100] bond1 (unregistering): Released all slaves
[  378.065452][T16593] 9pnet_fd: Insufficient options for proto=fd
[  378.085934][T16613] loop0: detected capacity change from 0 to 1024
[  378.103306][T16613] EXT4-fs: Ignoring removed nomblk_io_submit option
[  378.114403][ T2100] tipc: Left network mode
[  378.150168][T16613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  378.164888][ T2100] hsr_slave_0: left promiscuous mode
[  378.181461][ T2100] hsr_slave_1: left promiscuous mode
[  378.195048][ T2100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  378.202656][ T2100] batman_adv: batadv0: Removing interface: batadv_slave_0
[  378.212119][T16623] loop5: detected capacity change from 0 to 512
[  378.219807][ T2100] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  378.219976][T12709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.228577][ T2100] batman_adv: batadv0: Removing interface: batadv_slave_1
[  378.247463][ T2100] veth1_macvtap: left promiscuous mode
[  378.253076][ T2100] veth0_macvtap: left promiscuous mode
[  378.255568][T16623] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  378.261651][ T2100] veth1_vlan: left promiscuous mode
[  378.281947][ T2100] veth0_vlan: left promiscuous mode
[  378.334583][T10165] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  378.378653][ T2100] pim6reg (unregistering): left allmulticast mode
[  378.471908][ T2100] team0 (unregistering): Port device team_slave_1 removed
[  378.496399][ T2100] team0 (unregistering): Port device team_slave_0 removed
[  378.533682][ T2100] team0 (unregistering): Port device dummy0 removed
[  378.602461][T16636] loop2: detected capacity change from 0 to 2048
[  378.643451][T16636] EXT4-fs (loop2): failed to initialize system zone (-117)
[  378.652256][   T29] kauditd_printk_skb: 426 callbacks suppressed
[  378.652273][   T29] audit: type=1326 audit(1753943518.171:23892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f37a2405967 code=0x7ffc0000
[  378.655316][T16636] EXT4-fs (loop2): mount failed
[  378.658774][   T29] audit: type=1326 audit(1753943518.181:23893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37a23aab89 code=0x7ffc0000
[  378.709879][   T29] audit: type=1326 audit(1753943518.201:23894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f37a2405967 code=0x7ffc0000
[  378.732769][   T29] audit: type=1326 audit(1753943518.201:23895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37a23aab89 code=0x7ffc0000
[  378.732869][   T29] audit: type=1326 audit(1753943518.201:23896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f37a240e9a9 code=0x7ffc0000
[  378.732902][   T29] audit: type=1326 audit(1753943518.211:23897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f37a2405967 code=0x7ffc0000
[  378.732930][   T29] audit: type=1326 audit(1753943518.211:23898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37a23aab89 code=0x7ffc0000
[  378.732955][   T29] audit: type=1326 audit(1753943518.211:23899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f37a240e9a9 code=0x7ffc0000
[  378.733037][   T29] audit: type=1326 audit(1753943518.211:23900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f37a2405967 code=0x7ffc0000
[  378.733068][   T29] audit: type=1326 audit(1753943518.211:23901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37a23aab89 code=0x7ffc0000
[  378.926299][T16588] chnl_net:caif_netlink_parms(): no params data found
[  379.036889][T16649] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  379.047936][T16649] loop2: detected capacity change from 0 to 512
[  379.050051][T16649] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  379.083915][T16649] EXT4-fs (loop2): 1 truncate cleaned up
[  379.091800][T16649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  379.105919][T16649] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.124547][ T2100] IPVS: stop unused estimator thread 0...
[  379.162643][T16588] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.169956][T16588] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.177730][T16588] bridge_slave_0: entered allmulticast mode
[  379.184614][T16588] bridge_slave_0: entered promiscuous mode
[  379.191737][T16588] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.198884][T16588] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.206240][T16588] bridge_slave_1: entered allmulticast mode
[  379.212969][T16588] bridge_slave_1: entered promiscuous mode
[  379.228913][T16657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4121'.
[  379.244592][T16588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  379.276946][T16588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  379.294073][ T8153] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.326011][T16663] 9pnet_fd: Insufficient options for proto=fd
[  379.380850][T16588] team0: Port device team_slave_0 added
[  379.391963][T16588] team0: Port device team_slave_1 added
[  379.407506][ T8153] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.464859][T16588] batman_adv: batadv0: Adding interface: batadv_slave_0
[  379.472016][T16588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  379.498109][T16588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  379.540600][ T8153] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.553716][T16671] batadv_slave_1: entered promiscuous mode
[  379.560804][T16588] batman_adv: batadv0: Adding interface: batadv_slave_1
[  379.567856][T16588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  379.594110][T16588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  379.641179][T16671] batadv_slave_1: left promiscuous mode
[  379.680385][ T8153] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.695687][T16588] hsr_slave_0: entered promiscuous mode
[  379.703400][T16588] hsr_slave_1: entered promiscuous mode
[  379.778573][T16686] loop5: detected capacity change from 0 to 512
[  379.785486][T16686] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  379.805529][T16686] EXT4-fs (loop5): 1 truncate cleaned up
[  379.813653][T16686] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  379.832953][T16688] bridge0: port 3(batadv1) entered blocking state
[  379.839500][T16688] bridge0: port 3(batadv1) entered disabled state
[  379.846124][T16688] batadv1: entered allmulticast mode
[  379.852171][T16688] batadv1: entered promiscuous mode
[  379.884254][T16693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4130'.
[  379.910981][ T8153] bridge_slave_1: left allmulticast mode
[  379.916705][ T8153] bridge_slave_1: left promiscuous mode
[  379.922466][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.931897][ T8153] bridge_slave_0: left allmulticast mode
[  379.937565][ T8153] bridge_slave_0: left promiscuous mode
[  379.943354][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.943476][T16697] loop2: detected capacity change from 0 to 512
[  379.958813][T16697] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  379.982696][T10165] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.992616][T13146] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  380.035277][ T8153] bond1 (unregistering): (slave gretap1): Releasing active interface
[  380.075589][T16707] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4132'.
[  380.111563][T16711] loop0: detected capacity change from 0 to 1024
[  380.121522][ T8153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  380.134367][ T8153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  380.143513][T16711] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  380.155202][T16711] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  380.167885][ T8153] bond0 (unregistering): Released all slaves
[  380.173495][T16712] 9pnet_fd: Insufficient options for proto=fd
[  380.180324][T16711] JBD2: no valid journal superblock found
[  380.181236][ T8153] bond1 (unregistering): Released all slaves
[  380.186130][T16711] EXT4-fs (loop0): Could not load journal inode
[  380.206947][T16711] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  380.252347][T16588] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  380.293051][T16716] loop0: detected capacity change from 0 to 1024
[  380.313476][T16719] cgroup: Unknown subsys name 'cpuset'
[  380.318273][T16588] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  380.326230][T16716] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  380.339728][ T3444] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  380.349011][ T3444] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  380.350093][T16588] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  380.370810][T16716] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.4139: lblock 1 mapped to illegal pblock 1 (length 1)
[  380.390164][ T8153] hsr_slave_0: left promiscuous mode
[  380.396304][ T8153] hsr_slave_1: left promiscuous mode
[  380.403498][T16716] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.4139: Failed to acquire dquot type 0
[  380.404263][ T8153] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  380.422307][ T8153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  380.425885][T16716] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.4139: Freeing blocks not in datazone - block = 0, count = 4096
[  380.443435][ T8153] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  380.443761][T16716] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.4139: Invalid inode bitmap blk 0 in block_group 0
[  380.450861][ T8153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  380.470771][ T2100] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  380.470870][T16716] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  380.488774][ T2100] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0
[  380.493909][T16716] EXT4-fs (loop0): 1 orphan inode deleted
[  380.511018][ T8153] veth1_macvtap: left promiscuous mode
[  380.511774][T16716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  380.516562][ T8153] veth0_macvtap: left promiscuous mode
[  380.534788][T16730] loop2: detected capacity change from 0 to 512
[  380.537439][ T8153] veth1_vlan: left promiscuous mode
[  380.546417][ T8153] veth0_vlan: left promiscuous mode
[  380.546450][T16730] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  380.554222][T16716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.570901][T16730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  380.584533][T16730] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.620026][T16716] loop0: detected capacity change from 0 to 2048
[  380.645098][ T8153] team0 (unregistering): Port device team_slave_1 removed
[  380.654661][ T8153] team0 (unregistering): Port device team_slave_0 removed
[  380.670558][T16716] Alternate GPT is invalid, using primary GPT.
[  380.676853][T16716]  loop0: p1 p2 p3
[  380.690117][T16716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4139'.
[  380.700658][ T8153] team0 (unregistering): Port device dummy0 removed
[  380.719516][T16588] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  380.743656][T16668] chnl_net:caif_netlink_parms(): no params data found
[  380.788956][T16668] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.796134][T16668] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.808273][T16668] bridge_slave_0: entered allmulticast mode
[  380.815049][T16668] bridge_slave_0: entered promiscuous mode
[  380.823929][T16668] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.831034][T16668] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.839825][T16668] bridge_slave_1: entered allmulticast mode
[  380.846653][T16668] bridge_slave_1: entered promiscuous mode
[  380.881500][T16668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  380.881530][T16748] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  380.902402][T16668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  380.928012][T16588] 8021q: adding VLAN 0 to HW filter on device bond0
[  380.932068][T16748] loop5: detected capacity change from 0 to 512
[  380.942069][T16748] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  380.953946][T16668] team0: Port device team_slave_0 added
[  380.957993][T16748] EXT4-fs (loop5): 1 truncate cleaned up
[  380.965902][T16588] 8021q: adding VLAN 0 to HW filter on device team0
[  380.966788][T16748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  380.986180][T16748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.989043][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.002341][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  381.012218][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.019435][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  381.028302][T16668] team0: Port device team_slave_1 added
[  381.063601][T16668] batman_adv: batadv0: Adding interface: batadv_slave_0
[  381.070654][T16668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  381.096656][T16668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  381.112776][T16668] batman_adv: batadv0: Adding interface: batadv_slave_1
[  381.119858][T16668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  381.145886][T16668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  381.164297][T16755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4148'.
[  381.166756][ T8153] IPVS: stop unused estimator thread 0...
[  381.209391][T16668] hsr_slave_0: entered promiscuous mode
[  381.215635][T16668] hsr_slave_1: entered promiscuous mode
[  381.222090][T16668] debugfs: 'hsr0' already exists in 'hsr'
[  381.227853][T16668] Cannot create hsr debugfs directory
[  381.334272][T16588] 8021q: adding VLAN 0 to HW filter on device batadv0
[  381.478693][T16588] veth0_vlan: entered promiscuous mode
[  381.486939][T16588] veth1_vlan: entered promiscuous mode
[  381.508632][T16588] veth0_macvtap: entered promiscuous mode
[  381.519070][T16588] veth1_macvtap: entered promiscuous mode
[  381.539445][T16588] batman_adv: batadv0: Interface activated: batadv_slave_0
[  381.554157][T16588] batman_adv: batadv0: Interface activated: batadv_slave_1
[  381.571335][ T1085] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  381.581369][T16668] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  381.600850][T16668] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  381.612284][T16789] infiniband syz2: set active
[  381.615164][ T1085] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  381.617133][T16789] infiniband syz2: added veth0_to_bond
[  381.627806][T16668] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  381.642511][T13064] hid-generic FFFE:0004:0000.0003: unknown main item tag 0x0
[  381.650131][T13064] hid-generic FFFE:0004:0000.0003: unknown main item tag 0x0
[  381.657604][T13064] hid-generic FFFE:0004:0000.0003: unknown main item tag 0x0
[  381.662108][T16796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4153'.
[  381.672574][T13064] hid-generic FFFE:0004:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  381.685422][T16789] RDS/IB: syz2: added
[  381.689719][T16789] smc: adding ib device syz2 with port count 1
[  381.696133][T16789] smc:    ib device syz2 port 1 has pnetid 
[  381.704474][ T1085] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  381.713543][T16668] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  381.737908][ T1085] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  381.757549][T16798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4153'.
[  381.866546][T16668] 8021q: adding VLAN 0 to HW filter on device bond0
[  381.882221][T16668] 8021q: adding VLAN 0 to HW filter on device team0
[  381.940872][T16668] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  381.951437][T16668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  381.966119][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.973273][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  381.982946][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.990079][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  382.014432][T16810] loop0: detected capacity change from 0 to 1024
[  382.025069][T16807] net_ratelimit: 91 callbacks suppressed
[  382.025080][T16807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  382.033153][T16810] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  382.165579][T16810] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.4154: lblock 1 mapped to illegal pblock 1 (length 1)
[  382.188712][T16810] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.4154: Failed to acquire dquot type 0
[  382.252221][T16668] 8021q: adding VLAN 0 to HW filter on device batadv0
[  382.316636][T16824] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  382.327700][T16810] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.4154: Freeing blocks not in datazone - block = 0, count = 4096
[  382.362747][T16828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4158'.
[  382.383708][T16829] loop5: detected capacity change from 0 to 512
[  382.396666][T16810] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.4154: Invalid inode bitmap blk 0 in block_group 0
[  382.422295][T16829] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  382.446020][T16810] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  382.464958][T16810] EXT4-fs (loop0): 1 orphan inode deleted
[  382.491462][T16810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  382.509428][T16829] EXT4-fs (loop5): 1 truncate cleaned up
[  382.515740][T16829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  382.535776][ T2266] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  382.561134][ T2266] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0
[  382.592368][T16829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.604185][T16810] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.621617][T16668] veth0_vlan: entered promiscuous mode
[  382.647419][T16668] veth1_vlan: entered promiscuous mode
[  382.681404][T16668] veth0_macvtap: entered promiscuous mode
[  382.692492][T16668] veth1_macvtap: entered promiscuous mode
[  382.733877][T16668] batman_adv: batadv0: Interface activated: batadv_slave_0
[  382.759541][T16668] batman_adv: batadv0: Interface activated: batadv_slave_1
[  382.784333][T16844] loop5: detected capacity change from 0 to 1024
[  382.824568][T16844] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  382.835537][T16810] loop0: detected capacity change from 0 to 2048
[  382.851396][T16844] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #3: block 1: comm syz.5.4161: lblock 1 mapped to illegal pblock 1 (length 1)
[  382.859688][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  382.880738][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  382.889847][T16844] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4161: Failed to acquire dquot type 0
[  382.905453][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  382.908460][T16810] Alternate GPT is invalid, using primary GPT.
[  382.914536][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  382.920617][T16810]  loop0: p1 p2 p3
[  382.939017][T16844] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.4161: Freeing blocks not in datazone - block = 0, count = 4096
[  382.978532][T16844] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.4161: Invalid inode bitmap blk 0 in block_group 0
[  382.999607][T16844] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  383.000121][ T3444] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  383.025416][T16844] EXT4-fs (loop5): 1 orphan inode deleted
[  383.031707][T16844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.045983][T16851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4154'.
[  383.055929][T16850] vxcan1: entered allmulticast mode
[  383.073963][ T3444] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0
[  383.124860][T16844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.161624][T16844] loop5: detected capacity change from 0 to 2048
[  383.202301][T16858] loop0: detected capacity change from 0 to 512
[  383.210036][T16858] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  383.219525][T16844] Alternate GPT is invalid, using primary GPT.
[  383.225862][T16844]  loop5: p1 p2 p3
[  383.242262][T16858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.257474][T16844] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4161'.
[  383.272067][T16858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.529646][T16875] bond0: entered promiscuous mode
[  383.534755][T16875] bond_slave_0: entered promiscuous mode
[  383.540627][T16875] bond_slave_1: entered promiscuous mode
[  383.548548][T16875] macvlan1: entered promiscuous mode
[  383.554564][T16875] hsr1: entered promiscuous mode
[  384.000864][T16880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4169'.
[  384.043715][T16886] loop3: detected capacity change from 0 to 512
[  384.053133][T16886] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  384.079602][T16668] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  384.152807][   T29] kauditd_printk_skb: 370 callbacks suppressed
[  384.152824][   T29] audit: type=1326 audit(1753943523.671:24263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16896 comm="syz.0.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c39ee9a9 code=0x7ffc0000
[  384.189785][   T29] audit: type=1326 audit(1753943523.671:24264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16895 comm="syz.2.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  384.190645][T16898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4176'.
[  384.213565][   T29] audit: type=1326 audit(1753943523.671:24265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16895 comm="syz.2.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  384.246074][   T29] audit: type=1326 audit(1753943523.671:24266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16895 comm="syz.2.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  384.269799][   T29] audit: type=1326 audit(1753943523.671:24267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16895 comm="syz.2.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  384.293419][   T29] audit: type=1326 audit(1753943523.671:24268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16895 comm="syz.2.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  384.317705][   T29] audit: type=1326 audit(1753943523.671:24269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16895 comm="syz.2.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  384.341594][   T29] audit: type=1326 audit(1753943523.671:24270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16895 comm="syz.2.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  384.365190][   T29] audit: type=1326 audit(1753943523.671:24271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16895 comm="syz.2.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  384.388905][   T29] audit: type=1326 audit(1753943523.671:24272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16895 comm="syz.2.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376ffee9a9 code=0x7ffc0000
[  384.534483][T16910] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  384.577233][T16915] loop3: detected capacity change from 0 to 1024
[  384.620161][T16915] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  384.640537][T16915] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.4180: lblock 1 mapped to illegal pblock 1 (length 1)
[  384.687260][T16915] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4180: Failed to acquire dquot type 0
[  384.714269][T16915] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.4180: Freeing blocks not in datazone - block = 0, count = 4096
[  384.728015][T16915] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.4180: Invalid inode bitmap blk 0 in block_group 0
[  384.744665][T16915] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  384.755021][T16915] EXT4-fs (loop3): 1 orphan inode deleted
[  384.761859][T16915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  384.848500][ T3444] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  384.864769][ T3444] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0
[  384.877454][T16915] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.952855][T16915] loop3: detected capacity change from 0 to 2048
[  385.008466][T16915] Alternate GPT is invalid, using primary GPT.
[  385.014859][T16915]  loop3: p1 p2 p3
[  385.043737][T16915] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4180'.
[  385.099700][T16925] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4183'.
[  385.110690][T16923] netlink: 'syz.8.4181': attribute type 21 has an invalid length.
[  385.130460][T16923] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4181'.
[  385.139576][T16923] netlink: 'syz.8.4181': attribute type 1 has an invalid length.
[  385.214490][T16932] FAULT_INJECTION: forcing a failure.
[  385.214490][T16932] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  385.227793][T16932] CPU: 1 UID: 0 PID: 16932 Comm: syz.3.4186 Tainted: G        W           6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) 
[  385.227833][T16932] Tainted: [W]=WARN
[  385.227840][T16932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  385.227856][T16932] Call Trace:
[  385.227865][T16932]  <TASK>
[  385.227977][T16932]  __dump_stack+0x1d/0x30
[  385.228005][T16932]  dump_stack_lvl+0xe8/0x140
[  385.228053][T16932]  dump_stack+0x15/0x1b
[  385.228148][T16932]  should_fail_ex+0x265/0x280
[  385.228174][T16932]  should_fail+0xb/0x20
[  385.228234][T16932]  should_fail_usercopy+0x1a/0x20
[  385.228256][T16932]  _copy_from_user+0x1c/0xb0
[  385.228285][T16932]  get_user_ifreq+0x53/0x110
[  385.228306][T16932]  sock_ioctl+0x54e/0x610
[  385.228424][T16932]  ? __pfx_sock_ioctl+0x10/0x10
[  385.228446][T16932]  __se_sys_ioctl+0xcb/0x140
[  385.228471][T16932]  __x64_sys_ioctl+0x43/0x50
[  385.228530][T16932]  x64_sys_call+0x1816/0x2ff0
[  385.228557][T16932]  do_syscall_64+0xd2/0x200
[  385.228633][T16932]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  385.228680][T16932]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  385.228750][T16932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.228774][T16932] RIP: 0033:0x7fd4de45e9a9
[  385.228795][T16932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  385.228863][T16932] RSP: 002b:00007fd4dcabf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  385.228890][T16932] RAX: ffffffffffffffda RBX: 00007fd4de685fa0 RCX: 00007fd4de45e9a9
[  385.228907][T16932] RDX: 0000200000000040 RSI: 00000000000089f2 RDI: 0000000000000005
[  385.228981][T16932] RBP: 00007fd4dcabf090 R08: 0000000000000000 R09: 0000000000000000
[  385.228994][T16932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  385.229033][T16932] R13: 0000000000000000 R14: 00007fd4de685fa0 R15: 00007ffde6432c68
[  385.229056][T16932]  </TASK>
[  385.440551][T16933] batadv_slave_1: entered promiscuous mode
[  385.497915][T16938] batadv_slave_1: left promiscuous mode
[  385.569429][T16940] loop8: detected capacity change from 0 to 512
[  385.578424][T16940] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  385.607349][T16588] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  385.702849][T16948] loop3: detected capacity change from 0 to 512
[  385.710382][T16948] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  385.742354][    T2] ==================================================================
[  385.750472][    T2] BUG: KCSAN: data-race in alloc_pid / copy_process
[  385.757100][    T2] 
[  385.759429][    T2] read-write to 0xffffffff8685fc68 of 4 bytes by task 16946 on cpu 0:
[  385.767583][    T2]  alloc_pid+0x539/0x720
[  385.771835][    T2]  copy_process+0xe25/0x2000
[  385.776436][    T2]  kernel_clone+0x16c/0x5c0
[  385.780956][    T2]  __se_sys_clone3+0x1c2/0x200
[  385.785738][    T2]  __x64_sys_clone3+0x31/0x40
[  385.790430][    T2]  x64_sys_call+0x1fc9/0x2ff0
[  385.795119][    T2]  do_syscall_64+0xd2/0x200
[  385.799634][    T2]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.805544][    T2] 
[  385.807868][    T2] read to 0xffffffff8685fc68 of 4 bytes by task 2 on cpu 1:
[  385.815156][    T2]  copy_process+0x14a6/0x2000
[  385.819856][    T2]  kernel_clone+0x16c/0x5c0
[  385.824376][    T2]  kernel_thread+0xac/0xe0
[  385.828821][    T2]  kthreadd+0x28d/0x360
[  385.833005][    T2]  ret_from_fork+0xdd/0x150
[  385.837519][    T2]  ret_from_fork_asm+0x1a/0x30
[  385.842291][    T2] 
[  385.844614][    T2] value changed: 0x80000101 -> 0x80000102
[  385.850359][    T2] 
[  385.852684][    T2] Reported by Kernel Concurrency Sanitizer on:
[  385.858852][    T2] CPU: 1 UID: 0 PID: 2 Comm: kthreadd Tainted: G        W           6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) 
[  385.872068][    T2] Tainted: [W]=WARN
[  385.875874][    T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  385.885937][    T2] ==================================================================
[  385.907839][T16948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  385.922720][T16948] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.