last executing test programs:

2.242981718s ago: executing program 3 (id=4):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000980))
pipe2(&(0x7f0000000140), 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4092, 0xffc, 0x0, 0x0, 0xffffff84}, &(0x7f0000000300)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xc8, 0x1, 0x0}, &(0x7f0000001380)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3c00, 0x0, 0x0}, &(0x7f0000000400)=0x40)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x232000, 0x1000}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000f80800000001", @ANYRESOCT=r4], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="8b3329bd70000000000005"], 0x2c}}, 0x0)

2.001701861s ago: executing program 1 (id=9):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfecd, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0xf00)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r4, &(0x7f0000002f80)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x20000000)

2.000669431s ago: executing program 3 (id=10):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="182000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe}, 0xc)
bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0)
dup2(r4, r6)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001e008d2a2abd7000fbdbdf250a0000", @ANYRES32=0x0, @ANYBLOB="00000006"], 0x24}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r9 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r9, 0x2007ffc)
sendfile(r9, r9, 0x0, 0x800000009)

1.994471221s ago: executing program 2 (id=11):
r0 = socket$inet6(0xa, 0x80001, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='pagemap\x00')
pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'nicvf0\x00', @random="91de1a37e905"})
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x44, {{0xa, 0x4e21, 0x0, @private2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000040006000000000000000005"], 0x310)
r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18)
ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f0000000140))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000000), &(0x7f00000000c0)=r2}, 0x20)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0xfffd, 0xfffffffc, @mcast1}}, {{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x108)

1.750968895s ago: executing program 2 (id=13):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='devices.list\x00', 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10)
clock_adjtime(0x4, &(0x7f00000006c0)={0x7fff, 0x1000000007fff, 0x0, 0x0, 0x10000000000000, 0x7fffffffffffffff, 0xfffffffffffffffa, 0x2, 0x0, 0x300, 0x0, 0x2900, 0x20, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4030, 0x5, 0x6, 0x0, 0x0, 0x80000000000})
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
close(0x3)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x7}, 0xfffffffe}}, {{0xa, 0x4e20, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x9)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r3}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$unix(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x40000}, 0x4000)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="190000000400000008"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, 0x0, &(0x7f00000003c0)}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c)
syz_emit_ethernet(0x0, 0x0, 0x0)
pipe2(&(0x7f0000001cc0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r9)
sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x68, r10, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800)
sendmsg$IPVS_CMD_ZERO(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x88, r10, 0x810, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6e}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.728691225s ago: executing program 4 (id=14):
r0 = socket(0x10, 0x3, 0x9)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x2)
fchdir(r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000500)={0xc000000d})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r4, 0x0, 0x6}, 0x18)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100030000000a0004000000000000000900000d000000000c00000000000000030000000100000004001500000100000004000000000000000f0043c47617c79b8c0100000000009c5a0000000001000000040000000b00000000000000000000000000000000000000000000006e73bb068b1381"], &(0x7f0000001500)=""/4096, 0x93, 0x1000, 0x0, 0x1, 0x10000, @value=r2}, 0x28)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)

1.676947506s ago: executing program 1 (id=15):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18)
sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}, 0xfd}, 0x18, &(0x7f00000004c0)={0x0}}, 0x40040) (fail_nth: 4)

1.651483297s ago: executing program 1 (id=17):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382)
r2 = memfd_create(0x0, 0x2)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r1, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x3, 0x0, 0x11, 0x1, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e17bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978072a8b070006584a128d7469166ffbffffff19e7df4af14e1df82d", [0x1, 0x7]})
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x5452, &(0x7f00000020c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000000)={0x2, 0xfffffffffffffff3, 0x8e, &(0x7f0000000280)=""/142})

1.631164507s ago: executing program 4 (id=18):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb, 0xa00}, 0x18}}, 0x4000000)

1.630739267s ago: executing program 1 (id=19):
socket$qrtr(0x2a, 0x2, 0x0)
ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8a, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1.528553878s ago: executing program 2 (id=20):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r2=>r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x1400, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r4 = mq_open(0x0, 0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000500)={'syztnl1\x00', <r5=>0x0, 0xa5699beb843d51a7, 0x25, 0xd, 0x1, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x8, 0x8000, 0x8, 0x2}})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000e40)=ANY=[@ANYBLOB="10de4ab2bd600596941eaacc1f5521ab45a134654b29944637731d831db8bbe187842e4f7b25792195f744ae3ee295eb1b669ba3312e7691feed4c3b8d8d25217baced1615c03cd9b9ce5ecc00cec56ac8671e2bffcfcd0187c6310baed51031f1694d9302f51ca5b1a996fe24723a39e65120dbb2743cf8b6213b8e892377fa02c0d60509e124ce31a40b9e5bfa06586d56ec7599e5138e10d10d0dd320e1b51618fc7e7e32aee274326134cdba7d7aecf6bece93fc8088871f142654c656d38ac4a3d48c4467ec8d4bd13263400667a755712d7b0d792f5bf6ecd268e3b36b4a888c0c2fbe9568cfee5f75bce474939f0b7ead15d5609d908dcfc34b86a3", @ANYRES16=0x0, @ANYRES32, @ANYBLOB="bc0a23c2831518f874925b222159ccfd070cb047a100a2b0da0de901f7c524cce2f822c87e3fabc3f1a549e17901bccea756b89178318aa30a1adbb3458da309d0ef3fc05212fee0c25304ca91d399ab066a623ad7207019786012d9b50015de5f8279065ffd32d6136517c993fcb9f17b32996404a9cc4b348a1f0052895c41485e962cc619f5144722c6c6b1ed980b74399a60e78e75c18273c6f1631fb4d9ca3d1577c7a2c0cc3160af9c0d5a2871f29209b5c38a01269a7faa3743c919d53a36e698df8f2548fba8aa8148d5d92eee1e741d4b", @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r8, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r6}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000580), 0x4, 0x21cc00)
syz_open_dev$tty20(0xc, 0x4, 0x1)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0)

1.471023309s ago: executing program 4 (id=21):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@auto_da_alloc}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x8000, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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")
r3 = open(&(0x7f0000000080)='./file2/file0\x00', 0x14927e, 0x20)
fallocate(r3, 0x0, 0x0, 0x1001f0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170004200028008000500", @ANYRES32=r1, @ANYBLOB="08000400de74b368da0000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20048094) (async)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170004200028008000500", @ANYRES32=r1, @ANYBLOB="08000400de74b368da0000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20048094)
syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x101080) (async)
syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x101080)

1.470212529s ago: executing program 3 (id=22):
unshare(0x2c020400)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYBLOB="734606506df46be28663ff08fee9f9ecd94ee4208dd5cf0acd25b7cec1852d1c4e717eaff7b3f3d6ea44bc43a788b6268cf849023588f65cc02b8bd5e63ac60226d261531016fe1404e95ad3", @ANYRESHEX=0x0], 0x48)
pipe2$9p(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid={'access', 0x3d, 0xffffffffffffffff}}]}})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRESHEX=r2, @ANYRES32=r3], 0x0, 0x9, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0xfffffffffffffcc8, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10)
r10 = socket(0x2b, 0x1, 0x1)
sendmmsg$sock(r10, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001)
connect$netlink(r10, &(0x7f0000000000)=@unspec, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
write$cgroup_devices(r0, &(0x7f0000000340)=ANY=[], 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r13, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$unix(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='\"', 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYRES8=r8, @ANYRESHEX=r9], 0x18}, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
close(r11)
recvmsg$unix(r12, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0)

1.334769531s ago: executing program 2 (id=24):
rt_sigaction(0xd, 0x0, 0xfffffffffffffffd, 0x8, &(0x7f0000000540))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000020000"], 0x48)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="4f3bfde51b257f40b196249654f934f1f14fb37b10", 0x15}], 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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")

1.004386906s ago: executing program 2 (id=25):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18)
setns(r1, 0x24020000)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, 0x0, r3, 0x0, 0x46)
close(r3)

938.242597ms ago: executing program 2 (id=27):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x10, <r1=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="e61ecb1c7ce9bd18e6d9ca8861996bc8a25962673e8e012a098d6f7469fec51e295ef77a76abe444d3c5ede20a1a5d92f3957e041a8e73d5a3857c2ff13b10bd75c7970b52a9cd4c01178b63845ca907b29416e40a3f5b6f856c163a227d840732e1cde2f530f4f62ce907bfa833e33361ddfea4f248411e03f820d22083325e6d7d972a544453dc383e5c5e940bf03c045204336a07230ef09041f81f6bb3b0cdb59c3d3c83406b212829f53ffb723e99c44b8437a79f430bd64829a6ab9d3eae7b34762844da138912ae83a3375ea4101f59af5d612fb6506a755fe45e85d223638724c41aedb4", @ANYRESDEC=r0, @ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
open(0x0, 0x40c5, 0x24)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000)
mlock(&(0x7f0000656000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2)
mlockall(0x7)
syz_open_procfs(0x0, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x3, 0x1}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x2, 0x2, 0x3}, 0x10)
fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000000)=0x1)
sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40400b0)
close(r2)
r3 = socket(0xa, 0x3, 0x3a)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bond0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500000000000000000000003a", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x44}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r4}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001e000100000000000400000002000000", @ANYRES32=0x0, @ANYBLOB="00000f"], 0x24}}, 0x0)
sendmsg$nl_netfilter(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000110b01042abd7000fedbdf25070000070400b80008004900ffffffff0800e2800400e880"], 0x28}}, 0x40d0)

867.397908ms ago: executing program 4 (id=29):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000700), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000020000000900010073797a320000000014000200"], 0x40}}, 0xc800)

730.67462ms ago: executing program 0 (id=31):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb, 0xa00}, 0x18}}, 0x4000000)

727.80652ms ago: executing program 4 (id=32):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000700), 0xffffffffffffffff)
timerfd_create(0x6, 0xc00)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000020000000900010073797a320000000014000200"], 0x40}}, 0xc800)

704.93903ms ago: executing program 1 (id=33):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000009"], 0x50)
getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000001c0)=<r1=>0x0)
stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0)
mknod(&(0x7f0000000140)='./file1/file3\x00', 0xc000, 0x9)
rename(&(0x7f00000003c0)='./file1/file3\x00', &(0x7f0000000100)='./file0\x00')
r4 = geteuid()
setreuid(r4, r4)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, <r5=>0x0}, &(0x7f0000000300)=0xc)
fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = getuid()
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0, <r9=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8)
stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x8, '\x00', r8, r11, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r12 = getegid()
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {}, [{0x2, 0x2}, {0x2, 0x4, r1}, {0x2, 0x0, r2}, {0x2, 0x1, r4}, {0x2, 0x0, r5}, {0x2, 0x5, r6}, {0x2, 0x1, r7}, {0x2, 0x2, r9}], {0x4, 0x5}, [{0x8, 0x6, r10}, {0x8, 0xf74ce7cf42b573ba, r12}], {0x10, 0x5}}, 0x74, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fdffffff00000000b702000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007000000f0ffffffb703000008000000b704000000300000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0xb, 0xfea, &(0x7f0000001e00)=""/4074, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

640.736061ms ago: executing program 1 (id=34):
getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)

640.467841ms ago: executing program 4 (id=35):
getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)

579.632182ms ago: executing program 0 (id=36):
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x18, 0x0, 0x301, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x4}]}, 0x18}}, 0x20000000)
statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x2000, 0x800, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff)
r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xd, &(0x7f0000000380)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf7}}, @cb_func={0x18, 0x5}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000400)='syzkaller\x00', 0x9, 0xd4, &(0x7f00000005c0)=""/212, 0x41000, 0x48, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xf, 0x5, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000740)=[0x1, 0x1, 0x1, 0x1], &(0x7f0000000780)=[{0x2, 0x2, 0xe}, {0x4, 0x5, 0x6, 0x9}, {0x3, 0x4, 0x10, 0x9}, {0x0, 0x2, 0x8, 0xc}], 0x10, 0xfffffb8e, @void, @value}, 0x94)
r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @none}, &(0x7f00000008c0)=0xe, 0x0)
r8 = getpgrp(0xffffffffffffffff)
r9 = getuid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000900)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, <r10=>0xffffffffffffffff}}, './file0\x00'})
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11, 0x0, 0x6}, 0x18)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r13}, 0x10)
r14 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r17 = socket$inet(0x2, 0x3, 0x8)
r18 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r18}, &(0x7f0000000300))
r19 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000040)={0x0, <r20=>0x0}, &(0x7f00000000c0)=0xc)
sendmsg$nl_generic(r19, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r20}]}]}, 0x28}}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040), 0x0, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r0, r1}}}, @rights={{0x20, 0x1, 0x1, [r2, r3, 0xffffffffffffffff, r4]}}, @rights={{0x20, 0x1, 0x1, [r5, r6, r7, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x14, 0x1, 0x1, [r11]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r13, r14, r15, r17]}}, @cred={{0x1c, 0x1, 0x2, {r18, r20, 0xee01}}}], 0xe0, 0x20000004}, 0x48000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000071117600000000008510000002000000850000000000000095000000000000009500a50500000000373863420deb0214c1b9c2136e0918885a0a3d533a8eda18bae1bcf9083b89bb264c8a815e03283a0e0eaf7fbed7421d6be2c176a1e215908b4da8bd2825a0274b2c58bc68b3ddf338f96eab00"/140], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)

450.360154ms ago: executing program 0 (id=37):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000185"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000000)=r2}, 0x20)

406.013895ms ago: executing program 0 (id=38):
syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = getpgrp(0x0)
ptrace$getregset(0x4204, r1, 0x6, &(0x7f00000000c0)={&(0x7f0000000500)=""/137, 0x89})
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000380000fe0000019078ac1e0001ac1414aa04009078e00000e0450000000000000000110000ac145e459a04ab8d02c7554936d701"], 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00', r4}, 0x18)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff})
ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"])

355.043126ms ago: executing program 3 (id=39):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@max_batch_time={'max_batch_time', 0x3d, 0x55e}}, {@delalloc}, {@abort}, {@nodelalloc}]}, 0x3, 0x57e, &(0x7f0000001280)="$eJzs3V1rHFUYAOB3Nh/91KZQiopIoBdWajdN4kcFwXopWizofV2SbajZdEt2U5pYaHthb7yRIohYEH+A914W/4C/oqCFIiXohTeR2cw202Q3n6tJneeBbc+Zmc2Zs2fes+/M7LIBFNZw+k8p4sW4FV8nEUdy6/ojWzm8vN3i4xsT6SOJpaVP/kgiyZa1t0+y/w9llRci4pcvI06V1rbbmF+YrtRq1dmsPtKcuTrSmF84fXmmMlWdql4ZGx8/++b42Dtvv9Wzvr524a/vPr7/wdmvTix++9PDo3eTOBeHs3X5fuzArXxlOIaz12Qgzq3acLQHje0lyW7vANvSl8X5QKRzwJHoy6Ie+P+7GRFLQEEl4h8Kqp0HtM/te3Qe/Mx49P7yCVC774NP+t+/fG0k9rfOjQ4uJk+dGaXnu0M9aD9t4+ff791NH7HBdYibPWgPoO3W7Yg409+/dv5Psvlv+85ElDpeF8xdD17dRtHef2A33U/zn9c75X+lJ/lPdMh/DnWI3e3YOP5LD3vQTFdp/vdux/z3ySQ11JfVnmvlfAPJpcu16pmIeD4iTsbAvrS+3v2cs4sPlrqty+d/6SNtv50LZvvxsH/f08+ZrDQrO+lz3qPbES+t5L9JrJn/97dy3dXjn74eFzbZxvHqvVe6rdu4/3m9z4CXfox4teP4r7xzJevfnxxpHQ8j7aNirT/vHP+1W/tb63/vpeN/cP3+DyX5+7WNrbfxw/6/q93Wbff4H0w+bZUHs2XXK83m7GjEYPLR2uVjK89t19vbp/0/eWL9+a/T8X8gIj7bZP/vHLvTddO9MP6TWxr/rRcefPjF993a39z4v9EqncyWbGb+2+wO7uS1AwAAAAAAgL2mFBGHIymVI+J2q1wqlcvLn+84FgdLtXqjeepSfe7KZLS+KzsUA6X2ne4juc9DjGafh23Xx1bVxyPiaER803egVS9P1GuTu915AAAAAAAAAAAAAAAAAAAA2CMO5b7/X8p9/z/1W99u7x3wr/OT31BcG8Z/L37pCdiTvP9DcXWJf9MCFIBAh+IS/1Bc4h+KS/xDcYl/KC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD114fz59LG0+PjGRFqfvDY/N12/dnqy2pguz8xNlCfqs1fLU/X6VK1anqjPbPT3avX61dGxmLs+0qw2miON+YWLM/W5K82Ll2cqU9WL1YH/pFcAAAAAAAAAAAAAAAAAAADwbGnML0xXarXqrELXwnux27vx+cs7eXrSeZSTXAeXbauJ/r0yTAo9LezyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOf8EAAD//25+Mxc=")
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x8000000, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400fe0f000000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001000000"], 0x64}}, 0x0)

308.737716ms ago: executing program 0 (id=40):
r0 = socket(0x10, 0x3, 0x9)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x2)
fchdir(r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000500)={0xc000000d})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r4, 0x0, 0x6}, 0x18)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100030000000a0004000000000000000900000d000000000c00000000000000030000000100000004001500000100000004000000000000000f0043c47617c79b8c0100000000009c5a0000000001000000040000000b00000000000000000000000000000000000000000000006e73bb068b1381"], &(0x7f0000001500)=""/4096, 0x93, 0x1000, 0x0, 0x1, 0x10000, @value=r2}, 0x28)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)

271.680396ms ago: executing program 0 (id=41):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
syz_io_uring_setup(0xa2, &(0x7f0000000100)={0x0, 0x105cc8, 0x0, 0xfffffffe, 0x77}, &(0x7f0000000040)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000400)=0x468)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f00000004c0)=0xd)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x55f, &(0x7f0000001d80)="$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")
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{0x0}], 0x1})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r9}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

0s ago: executing program 3 (id=42):
quotactl$Q_SETQUOTA(0xffffffff80000802, 0x0, 0x0, 0x0)
setresuid(0x0, 0x0, 0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$vcsu(0x0, 0x6, 0x80080)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)='%pB    \x00'}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup(r4, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe90, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000182000"/28, @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r7)
execve(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts.
[   26.632816][   T29] audit: type=1400 audit(1750330968.777:62): avc:  denied  { mounton } for  pid=3297 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   26.633584][ T3297] cgroup: Unknown subsys name 'net'
[   26.655550][   T29] audit: type=1400 audit(1750330968.777:63): avc:  denied  { mount } for  pid=3297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.683060][   T29] audit: type=1400 audit(1750330968.807:64): avc:  denied  { unmount } for  pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.792890][ T3297] cgroup: Unknown subsys name 'cpuset'
[   26.798918][ T3297] cgroup: Unknown subsys name 'rlimit'
[   26.947244][   T29] audit: type=1400 audit(1750330969.087:65): avc:  denied  { setattr } for  pid=3297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   26.970895][   T29] audit: type=1400 audit(1750330969.087:66): avc:  denied  { create } for  pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.991507][   T29] audit: type=1400 audit(1750330969.087:67): avc:  denied  { write } for  pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.998416][ T3299] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   27.013106][   T29] audit: type=1400 audit(1750330969.087:68): avc:  denied  { read } for  pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   27.042189][   T29] audit: type=1400 audit(1750330969.087:69): avc:  denied  { mounton } for  pid=3297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   27.067162][   T29] audit: type=1400 audit(1750330969.087:70): avc:  denied  { mount } for  pid=3297 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   27.071992][ T3297] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   27.090590][   T29] audit: type=1400 audit(1750330969.157:71): avc:  denied  { relabelto } for  pid=3299 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   28.252161][ T3306] chnl_net:caif_netlink_parms(): no params data found
[   28.295280][ T3307] chnl_net:caif_netlink_parms(): no params data found
[   28.326023][ T3315] chnl_net:caif_netlink_parms(): no params data found
[   28.373530][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.380729][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.387944][ T3306] bridge_slave_0: entered allmulticast mode
[   28.394575][ T3306] bridge_slave_0: entered promiscuous mode
[   28.403201][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.410287][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.417510][ T3306] bridge_slave_1: entered allmulticast mode
[   28.423870][ T3306] bridge_slave_1: entered promiscuous mode
[   28.449281][ T3312] chnl_net:caif_netlink_parms(): no params data found
[   28.461120][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.485201][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.520797][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.527887][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.535465][ T3307] bridge_slave_0: entered allmulticast mode
[   28.541998][ T3307] bridge_slave_0: entered promiscuous mode
[   28.564238][ T3306] team0: Port device team_slave_0 added
[   28.570238][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.578217][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.585433][ T3315] bridge_slave_0: entered allmulticast mode
[   28.592086][ T3315] bridge_slave_0: entered promiscuous mode
[   28.598600][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.606168][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.613336][ T3307] bridge_slave_1: entered allmulticast mode
[   28.619832][ T3307] bridge_slave_1: entered promiscuous mode
[   28.629193][ T3306] team0: Port device team_slave_1 added
[   28.635055][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.642212][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.649880][ T3315] bridge_slave_1: entered allmulticast mode
[   28.656444][ T3315] bridge_slave_1: entered promiscuous mode
[   28.687776][ T3314] chnl_net:caif_netlink_parms(): no params data found
[   28.705670][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.714965][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.721983][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.747980][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.759867][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.775729][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.789664][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.796755][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.823039][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.834854][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.850571][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.858046][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.865406][ T3312] bridge_slave_0: entered allmulticast mode
[   28.871776][ T3312] bridge_slave_0: entered promiscuous mode
[   28.883374][ T3315] team0: Port device team_slave_0 added
[   28.905703][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.912935][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.920141][ T3312] bridge_slave_1: entered allmulticast mode
[   28.926702][ T3312] bridge_slave_1: entered promiscuous mode
[   28.933495][ T3315] team0: Port device team_slave_1 added
[   28.941938][ T3306] hsr_slave_0: entered promiscuous mode
[   28.948225][ T3306] hsr_slave_1: entered promiscuous mode
[   28.961450][ T3307] team0: Port device team_slave_0 added
[   28.968347][ T3307] team0: Port device team_slave_1 added
[   28.987919][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.994984][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.021315][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.044879][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.054208][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.061193][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.087255][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.108806][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.125850][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.133553][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.159740][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.189923][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.196929][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.223064][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.239482][ T3312] team0: Port device team_slave_0 added
[   29.245248][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.252364][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.259855][ T3314] bridge_slave_0: entered allmulticast mode
[   29.266295][ T3314] bridge_slave_0: entered promiscuous mode
[   29.275522][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.282653][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.289811][ T3314] bridge_slave_1: entered allmulticast mode
[   29.296332][ T3314] bridge_slave_1: entered promiscuous mode
[   29.309804][ T3312] team0: Port device team_slave_1 added
[   29.338933][ T3315] hsr_slave_0: entered promiscuous mode
[   29.346072][ T3315] hsr_slave_1: entered promiscuous mode
[   29.352149][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.359762][ T3315] Cannot create hsr debugfs directory
[   29.370836][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.378000][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.403905][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.426067][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.433053][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.459720][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.474106][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.513128][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.524188][ T3307] hsr_slave_0: entered promiscuous mode
[   29.530205][ T3307] hsr_slave_1: entered promiscuous mode
[   29.536051][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.543603][ T3307] Cannot create hsr debugfs directory
[   29.551079][ T3312] hsr_slave_0: entered promiscuous mode
[   29.557131][ T3312] hsr_slave_1: entered promiscuous mode
[   29.563072][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.570610][ T3312] Cannot create hsr debugfs directory
[   29.599724][ T3314] team0: Port device team_slave_0 added
[   29.621346][ T3314] team0: Port device team_slave_1 added
[   29.654196][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.661613][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.687716][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.699056][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.706125][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.732503][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.794165][ T3314] hsr_slave_0: entered promiscuous mode
[   29.800327][ T3314] hsr_slave_1: entered promiscuous mode
[   29.806985][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.814750][ T3314] Cannot create hsr debugfs directory
[   29.874427][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   29.883549][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   29.903786][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   29.914565][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   29.947150][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   29.955737][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   29.969141][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   29.977575][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   30.003966][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   30.012551][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   30.021049][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   30.029810][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   30.057763][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   30.067293][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   30.082487][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   30.091831][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   30.123905][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   30.135323][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   30.144447][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   30.170161][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.177673][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   30.208654][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.223744][ T3306] 8021q: adding VLAN 0 to HW filter on device team0
[   30.237056][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.244658][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.253786][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.260879][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.271918][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.285948][ T3315] 8021q: adding VLAN 0 to HW filter on device team0
[   30.305295][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   30.316158][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.327603][ T3333] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.334825][ T3333] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.353835][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.361032][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.377056][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.387562][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.405458][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.416156][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.428447][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.435583][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.444583][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.451660][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.471783][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   30.485902][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.493222][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.508700][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.533868][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.540949][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.559821][ T3314] 8021q: adding VLAN 0 to HW filter on device team0
[   30.571380][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.582222][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.614038][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.621487][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.643420][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.660111][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.667237][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.702087][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.712526][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.725977][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.755029][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.843062][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.854473][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.941945][ T3312] veth0_vlan: entered promiscuous mode
[   30.953263][ T3306] veth0_vlan: entered promiscuous mode
[   30.976265][ T3306] veth1_vlan: entered promiscuous mode
[   30.993120][ T3312] veth1_vlan: entered promiscuous mode
[   31.010487][ T3306] veth0_macvtap: entered promiscuous mode
[   31.034835][ T3306] veth1_macvtap: entered promiscuous mode
[   31.043404][ T3314] veth0_vlan: entered promiscuous mode
[   31.054005][ T3314] veth1_vlan: entered promiscuous mode
[   31.069730][ T3315] veth0_vlan: entered promiscuous mode
[   31.088401][ T3315] veth1_vlan: entered promiscuous mode
[   31.095253][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.104151][ T3312] veth0_macvtap: entered promiscuous mode
[   31.111344][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.123835][ T3307] veth0_vlan: entered promiscuous mode
[   31.131909][ T3312] veth1_macvtap: entered promiscuous mode
[   31.139123][ T3306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.148095][ T3306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.157041][ T3306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.165977][ T3306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.185258][ T3307] veth1_vlan: entered promiscuous mode
[   31.194989][ T3314] veth0_macvtap: entered promiscuous mode
[   31.212504][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.227961][ T3314] veth1_macvtap: entered promiscuous mode
[   31.235237][ T3315] veth0_macvtap: entered promiscuous mode
[   31.244127][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.255594][ T3315] veth1_macvtap: entered promiscuous mode
[   31.255852][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   31.266317][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.285582][ T3312] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.294547][ T3312] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.303567][ T3312] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.312502][ T3312] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.329005][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.338566][ T3307] veth0_macvtap: entered promiscuous mode
[   31.349209][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.366842][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.376195][ T3315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.385219][ T3315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.394000][ T3315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.402801][ T3315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.416155][ T3307] veth1_macvtap: entered promiscuous mode
[   31.423235][ T3314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.432146][ T3314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.440923][ T3314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.449791][ T3314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.486725][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.511949][ T3481] FAULT_INJECTION: forcing a failure.
[   31.511949][ T3481] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   31.521155][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.525263][ T3481] CPU: 0 UID: 0 PID: 3481 Comm: syz.1.6 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) 
[   31.525291][ T3481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   31.525302][ T3481] Call Trace:
[   31.525307][ T3481]  <TASK>
[   31.525314][ T3481]  __dump_stack+0x1d/0x30
[   31.525379][ T3481]  dump_stack_lvl+0xe8/0x140
[   31.525397][ T3481]  dump_stack+0x15/0x1b
[   31.525414][ T3481]  should_fail_ex+0x265/0x280
[   31.525443][ T3481]  should_fail+0xb/0x20
[   31.525469][ T3481]  should_fail_usercopy+0x1a/0x20
[   31.525500][ T3481]  strncpy_from_user+0x25/0x230
[   31.525523][ T3481]  ? __kmalloc_cache_noprof+0x189/0x320
[   31.525622][ T3481]  __se_sys_memfd_create+0x1ff/0x590
[   31.525651][ T3481]  __x64_sys_memfd_create+0x31/0x40
[   31.525748][ T3481]  x64_sys_call+0x122f/0x2fb0
[   31.525768][ T3481]  do_syscall_64+0xd2/0x200
[   31.525786][ T3481]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   31.525810][ T3481]  ? clear_bhb_loop+0x40/0x90
[   31.525831][ T3481]  ? clear_bhb_loop+0x40/0x90
[   31.525887][ T3481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   31.525907][ T3481] RIP: 0033:0x7f50612ce929
[   31.525922][ T3481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   31.525949][ T3481] RSP: 002b:00007f505f936e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   31.525969][ T3481] RAX: ffffffffffffffda RBX: 00000000000004f2 RCX: 00007f50612ce929
[   31.525982][ T3481] RDX: 00007f505f936ef0 RSI: 0000000000000000 RDI: 00007f50613514cc
[   31.526042][ T3481] RBP: 0000200000000600 R08: 00007f505f936bb7 R09: 00007f505f936e40
[   31.526054][ T3481] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000
[   31.526066][ T3481] R13: 00007f505f936ef0 R14: 00007f505f936eb0 R15: 00002000000002c0
[   31.526103][ T3481]  </TASK>
[   31.649140][   T29] kauditd_printk_skb: 31 callbacks suppressed
[   31.649154][   T29] audit: type=1400 audit(1750330973.797:103): avc:  denied  { create } for  pid=3484 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   31.673475][ T3307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.753251][ T3307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.762111][ T3307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.771236][ T3307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.842354][   T29] audit: type=1400 audit(1750330973.977:104): avc:  denied  { prog_load } for  pid=3489 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   31.845600][ T3491] loop4: detected capacity change from 0 to 256
[   31.861344][   T29] audit: type=1400 audit(1750330973.977:105): avc:  denied  { bpf } for  pid=3489 comm="syz.3.4" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   31.888159][   T29] audit: type=1400 audit(1750330973.987:106): avc:  denied  { perfmon } for  pid=3489 comm="syz.3.4" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   31.910800][ T3493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'.
[   31.950834][ T3492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'.
[   31.971533][ T3496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'.
[   32.017163][    C1] hrtimer: interrupt took 30338 ns
[   32.072954][   T29] audit: type=1400 audit(1750330973.987:107): avc:  denied  { read write } for  pid=3488 comm="syz.4.5" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   32.096512][   T29] audit: type=1400 audit(1750330973.987:108): avc:  denied  { open } for  pid=3488 comm="syz.4.5" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   32.119726][   T29] audit: type=1400 audit(1750330973.987:109): avc:  denied  { ioctl } for  pid=3488 comm="syz.4.5" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   32.144470][   T29] audit: type=1400 audit(1750330973.987:110): avc:  denied  { read write } for  pid=3488 comm="wg1" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   32.167999][   T29] audit: type=1400 audit(1750330973.987:111): avc:  denied  { open } for  pid=3488 comm="wg1" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   32.191413][   T29] audit: type=1400 audit(1750330973.987:112): avc:  denied  { ioctl } for  pid=3488 comm="wg1" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   32.228149][ T3506] loop3: detected capacity change from 0 to 1024
[   32.258805][ T3506] =======================================================
[   32.258805][ T3506] WARNING: The mand mount option has been deprecated and
[   32.258805][ T3506]          and is ignored by this kernel. Remove the mand
[   32.258805][ T3506]          option from the mount to silence this warning.
[   32.258805][ T3506] =======================================================
[   32.356167][ T3506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.370698][ T3518] vxcan0: tx address claim with dlc 0
[   32.414983][ T3402] IPVS: starting estimator thread 0...
[   32.435884][ T3506] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.10: Allocating blocks 449-513 which overlap fs metadata
[   32.502636][ T3523] IPVS: using max 2832 ests per chain, 141600 per kthread
[   32.513650][ T3505] EXT4-fs (loop3): pa ffff8881069d5070: logic 48, phys. 177, len 21
[   32.521722][ T3505] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4
[   32.576895][ T3537] netlink: 132 bytes leftover after parsing attributes in process `syz.2.20'.
[   32.595699][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.634521][ T3540] loop4: detected capacity change from 0 to 512
[   32.781546][ T3548] loop2: detected capacity change from 0 to 512
[   32.796588][ T3540] EXT4-fs: Ignoring removed bh option
[   32.844636][ T3548] EXT4-fs (loop2): too many log groups per flexible block group
[   32.852466][ T3548] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   32.860808][ T3540] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   32.874188][ T3540] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   32.933344][ T3548] EXT4-fs (loop2): mount failed
[   33.012976][ T3540] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   33.081711][ T3540] EXT4-fs (loop4): 1 truncate cleaned up
[   33.088027][ T3540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.134609][ T3540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'.
[   33.146215][ T3558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'.
[   33.170352][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.205696][ T3563] Driver unsupported XDP return value 0 on prog  (id 25) dev N/A, expect packet loss!
[   33.218605][ T3563] process 'syz.0.30' launched './file0' with NULL argv: empty string added
[   33.253668][ T3565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.29'.
[   33.311958][ T3566] mmap: syz.2.27 (3566) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   33.349448][ T3569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.32'.
[   33.449296][ T3566] bond_slave_0: entered promiscuous mode
[   33.455214][ T3566] bond_slave_1: entered promiscuous mode
[   33.481879][ T3566] macsec1: entered allmulticast mode
[   33.487315][ T3566] bond0: entered allmulticast mode
[   33.492585][ T3566] bond_slave_0: entered allmulticast mode
[   33.498530][ T3566] bond_slave_1: entered allmulticast mode
[   33.528891][ T3566] bond0: left allmulticast mode
[   33.533851][ T3566] bond_slave_0: left allmulticast mode
[   33.539390][ T3566] bond_slave_1: left allmulticast mode
[   33.544959][ T3566] bond_slave_0: left promiscuous mode
[   33.550370][ T3566] bond_slave_1: left promiscuous mode
[   33.578475][ T3581] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   33.682582][ T3542] syz.3.22 (3542) used greatest stack depth: 9816 bytes left
[   33.763016][ T3590] loop3: detected capacity change from 0 to 1024
[   33.813940][ T3590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.835098][ T3595] loop6: detected capacity change from 0 to 7
[   33.914736][ T3590] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   33.962548][ T3590] syz_tun: entered promiscuous mode
[   33.989892][ T3590] vlan2: entered promiscuous mode
[   34.065690][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.082483][ T2997] ==================================================================
[   34.091225][ T2997] BUG: KCSAN: data-race in block_uevent / inc_diskseq
[   34.098476][ T2997] 
[   34.100972][ T2997] write to 0xffff888102321618 of 8 bytes by task 3314 on cpu 1:
[   34.110019][ T2997]  inc_diskseq+0x2d/0x40
[   34.115263][ T2997]  disk_force_media_change+0x9e/0xe0
[   34.121484][ T2997]  lo_release+0x2cb/0x400
[   34.126177][ T2997]  bdev_release+0x373/0x3d0
[   34.130689][ T2997]  blkdev_release+0x15/0x20
[   34.135288][ T2997]  __fput+0x298/0x650
[   34.139291][ T2997]  fput_close_sync+0x6e/0x120
[   34.144013][ T2997]  __x64_sys_close+0x56/0xf0
[   34.148789][ T2997]  x64_sys_call+0x2747/0x2fb0
[   34.153474][ T2997]  do_syscall_64+0xd2/0x200
[   34.157980][ T2997]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   34.163890][ T2997] 
[   34.166218][ T2997] read to 0xffff888102321618 of 8 bytes by task 2997 on cpu 0:
[   34.173770][ T2997]  block_uevent+0x31/0x50
[   34.178109][ T2997]  dev_uevent+0x34c/0x3d0
[   34.182457][ T2997]  uevent_show+0x11a/0x200
[   34.186982][ T2997]  dev_attr_show+0x3f/0xa0
[   34.191409][ T2997]  sysfs_kf_seq_show+0x1a0/0x280
[   34.196372][ T2997]  kernfs_seq_show+0x82/0xa0
[   34.201077][ T2997]  seq_read_iter+0x316/0x940
[   34.205678][ T2997]  kernfs_fop_read_iter+0xc4/0x300
[   34.210808][ T2997]  vfs_read+0x5ca/0x6f0
[   34.214976][ T2997]  ksys_read+0xda/0x1a0
[   34.219231][ T2997]  __x64_sys_read+0x40/0x50
[   34.223833][ T2997]  x64_sys_call+0x2d77/0x2fb0
[   34.228525][ T2997]  do_syscall_64+0xd2/0x200
[   34.233211][ T2997]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   34.239233][ T2997] 
[   34.241619][ T2997] value changed: 0x000000000000002a -> 0x000000000000002c
[   34.248740][ T2997] 
[   34.251124][ T2997] Reported by Kernel Concurrency Sanitizer on:
[   34.257276][ T2997] CPU: 0 UID: 0 PID: 2997 Comm: udevd Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) 
[   34.269371][ T2997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   34.279458][ T2997] ==================================================================
[   34.413526][ T3599] loop0: detected capacity change from 0 to 164
[   34.463743][ T3599] isofs_fill_super: root inode is not a directory. Corrupted media?