last executing test programs:

14m21.039703496s ago: executing program 4 (id=991):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611905000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
r4 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0)
openat$incfs(0xffffffffffffffff, &(0x7f0000000400)='.pending_reads\x00', 0x309080, 0x20)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8080)
write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x190da)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
r6 = pidfd_getfd(0xffffffffffffffff, r5, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x10)
r9 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="d8", 0x1, r9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000280)='asymmetric\x00', &(0x7f0000000040)=@chain)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000040039136f724873a4e10000000000000024110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r4}, &(0x7f0000004000), &(0x7f0000000800)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r11, 0x0, 0xf}, 0x18)
request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r9)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0xffffffffffffffb4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r12}, 0x10)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r13, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r13, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f00000002c0), &(0x7f0000000300)=r8}, 0x20)
r14 = pidfd_getfd(r6, r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x34, &(0x7f0000000480)=ANY=[@ANYBLOB="02880f00f0ffffffb7080000000000007b8af8ff00000000b70800005c0000007b8af0ff00000000bf2100000000008007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000df600200080000001800000008000000000000006ac5f23418110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000000ad200000100000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000c18500000006000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b708000000f807007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f0000000040)='GPL\x00', 0x2daf, 0xd5, &(0x7f0000000640)=""/213, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[r6], &(0x7f0000000140)=[{0x2, 0x3, 0xd, 0xc}, {0x4, 0x1, 0xe, 0x7}], 0x10, 0xfffffff8}, 0x94)

14m20.860467693s ago: executing program 4 (id=994):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2020000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)

14m20.860031623s ago: executing program 4 (id=995):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20040a, &(0x7f00000001c0)={[{@grpjquota}, {@errors_continue}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==")
openat$dir(0xffffffffffffff9c, 0x0, 0x514202, 0x0)

14m20.620091088s ago: executing program 4 (id=996):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[], 0x1, 0x2c2, &(0x7f0000001480)="$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")
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
mount(0x0, &(0x7f0000001100)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
socket$key(0xf, 0x3, 0x2)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$bt_hci(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="0141040b4b10810e00bb0001000e00289c2b88a5a463a8cddf9a9c15951162fa12098f34d684366d5368c2c529e5e006833f328683415caf59c5e88ed4d96dbdce3f2f9c3c6c"], 0xf)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], <r8=>0x0, 0xc6, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x73, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r9 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES8=r4], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000100)="126873159fca3fa38fb198e9", 0xc}], 0x2}, 0x40000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10)

14m19.679231143s ago: executing program 4 (id=1004):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r1, 0x0, 0xbc3}, 0x18)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x5c, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x1ff, 0x9, 0x8, 0x9], 0x0, [0x7]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "f102dcf29effae15cd"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000004}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8)

14m18.439081238s ago: executing program 4 (id=1007):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

14m18.397626542s ago: executing program 32 (id=1007):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

5m37.095205975s ago: executing program 3 (id=6346):
socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000000, 0x132}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x23}})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x4004, @fd_index=0x9, 0x8, 0x0, 0x0, 0x2})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

5m35.547311921s ago: executing program 3 (id=6366):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0)
listen(r5, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0)
r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080))
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, 0x0, 0x0)
mkdir(0x0, 0x81)
rmdir(0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

5m34.537114413s ago: executing program 3 (id=6377):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffd, @private2, 0x400}, 0x1c)
listen(r0, 0x100101)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000280), &(0x7f00000002c0)=0x4)

5m33.673430561s ago: executing program 3 (id=6398):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae25625c64f82ecc0a7bb7b", 0x40}, {&(0x7f0000000cc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d", 0x85}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="a704", 0x2}], 0x1}}], 0x2, 0x54004)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58)
listen(r1, 0x5)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)='{', 0x1}], 0x1}}], 0x1, 0x48045)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

5m33.646584954s ago: executing program 3 (id=6402):
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in=@local, 0x0, 0xbf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0xc81, 0x0, 0x0, 0x0, 0x800000000009}, {0x3, 0x0, 0x3, 0x2}}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, 0x2, 0x0, 0xf000000, 0xc0}}, 0xe8)
listen(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0)

5m33.608783517s ago: executing program 3 (id=6405):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe2$9p(&(0x7f0000001900), 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
ptrace(0x10, 0x1)

5m19.076593728s ago: executing program 33 (id=6405):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe2$9p(&(0x7f0000001900), 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
ptrace(0x10, 0x1)

1m30.718043191s ago: executing program 5 (id=9908):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
syz_usb_connect(0x3, 0x51b, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000244be8c1003040ce8bafb010203030902"], 0xfffffffffffffffe)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r0, r0, 0x0, 0x800000009) (fail_nth: 5)

1m29.864109978s ago: executing program 5 (id=9923):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfff5, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c)
shutdown(r0, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x26, 0x0, 0x0, 0x4}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x2, 0x842)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, &(0x7f00000003c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet6(r0, &(0x7f0000000540)="1a", 0x1, 0x0, 0x0, 0x0)

1m29.518182603s ago: executing program 5 (id=9937):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020fe7f000000000000000000850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x4}, 0x94)
io_setup(0x7ff, &(0x7f0000002400)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
eventfd2(0x0, 0x0)
io_submit(r1, 0x0, &(0x7f0000000440))

1m29.418842222s ago: executing program 5 (id=9940):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/26], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
r1 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10)
close_range(r1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000cdb9236861c7ae9f9125a8cc6e86b50c3bd6c3c686c17d89e023f052aab002551c187e8e437dd0c37a858bc6b57380b0cb8b485949c4aa8c41e622fbe578e736b14569ea5815daa7c186b2086fc186bc0273e33483486f59688e749574af0f0efe11b898d11d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x18, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000200000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b70200000100000085000000de985e8db70000000000000095000000000000008517c7c1094cf8a89645636b1c03771b0785015c27c55669dbc549ef220c34bab4eb44a1b985ef"], &(0x7f0000000100)='GPL\x00', 0xc52, 0xea, &(0x7f0000000b00)=""/234, 0x1f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x10, 0x1, 0xc000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0, r0, 0xffffffffffffffff, r0, r0, 0x1], 0x0, 0x10, 0xfff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000005c0)='net_dev_xmit_timeout\x00', r6, 0x0, 0x2}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000001200)={'syztnl0\x00', <r7=>0x0, 0x20, 0x700, 0x8, 0x10001, {{0xa, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x4, 0x0, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, {[@end, @timestamp_addr={0x44, 0xc, 0xdd, 0x1, 0xd, [{@multicast2, 0x8d4d}]}, @generic={0x798fe0e53809d640, 0x2}, @ra={0x94, 0x4, 0x1}]}}}}})
getsockopt$inet_mreqn(r3, 0x0, 0x7, &(0x7f0000001280)={@initdev, @local, <r8=>0x0}, &(0x7f00000012c0)=0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001300)={'vxcan0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd7000fedbdf25070000004000018008000100", @ANYRES32=r7, @ANYBLOB="080003000200000000000000", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000300010000001400020069705f76746930000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r11, &(0x7f0000004200)='t', 0x1)
sendfile(r11, r10, 0x0, 0x40002)
sendfile(r11, r10, 0x0, 0x7ffff000)

1m29.274022067s ago: executing program 5 (id=9942):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYRESHEX=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x7ff, &(0x7f0000002400)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])
r3 = eventfd2(0x0, 0x0)
io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x3f, 0x1, 0x1fb, r3, 0x0, 0x0, 0x8001, 0x0, 0x1, r3}])

1m28.942916211s ago: executing program 5 (id=9948):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYBLOB="010002000000fbdbdf2525000000"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7a7}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x97}, 0x18)
sendto$inet6(r2, 0x0, 0x0, 0x20044051, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYRESOCT], &(0x7f0000000700)='GPL\x00', 0x0, 0xfffffffffffffd47, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000900000000000000ee6d4466fe2a92a60640e006000108000604001daaaaaaaaaabbe00100010180c2000000ffffff5c"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1m28.930027662s ago: executing program 34 (id=9948):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYBLOB="010002000000fbdbdf2525000000"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7a7}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x97}, 0x18)
sendto$inet6(r2, 0x0, 0x0, 0x20044051, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYRESOCT], &(0x7f0000000700)='GPL\x00', 0x0, 0xfffffffffffffd47, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000900000000000000ee6d4466fe2a92a60640e006000108000604001daaaaaaaaaabbe00100010180c2000000ffffff5c"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

25.061010333s ago: executing program 6 (id=11140):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x10000001}, 0x18)
ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})

25.059723073s ago: executing program 6 (id=11141):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000011800008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007})
fcntl$addseals(r4, 0x409, 0x1)
r5 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0)
fcntl$notify(r5, 0x402, 0x80000018)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf)
write$binfmt_elf64(r6, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0)
close(r6)
r7 = socket$key(0xf, 0x3, 0x2)
lstat(&(0x7f00000012c0)='./file1\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
lstat(&(0x7f0000001380)='./file1\x00', &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000001440)={0x0, 0x0, <r10=>0x0}, &(0x7f0000001480)=0xc)
r11 = syz_clone(0x4800000, &(0x7f00000014c0)="ecd6070e05a2dcd79a9b8e76f826e2054222b061aded2ff0fa82c2ca144a2be2fa84d2d568a8fd6a37e49725ff3decb31c02079873fae86c3c1af197f41d109e7139153e344e62214b5e83a37baf38ebd29592e2a42c54484262b14b42eab3b46253fd20c949eb885180645ca995ed2a2d0fe5cc3a8789f35d1eddb57cccff82fff35f9c4179a99c0bc551d0e701eb351b08e1b8c9292adb6c834a345ada7e2882d34556d413dd7b0b9b88af0379066d3645bab1d3214f6168a7c4c924733a42a216e5b61b43204ea4ebeb37244981152641c8680fdfde4fe356f49d0ab8acd9ccb70f002985f19c48974575d85626098e56362f4d44d2a04817d9cb20a23ada72a96d1c837a9d14b16c4c1659ab1e2d5300a7ad4e423bff439fddd0ab8c60271ca16aa797932723a5548f84b7049668e54c23b082a0c758c8f8e038baf0c7fbe82096ade1ac6d00a93a92b399cf177dc3a458be294e0df43dba449be0950cc62e1cdc29b7705f1576bdae907c9fe33ce91a106b838abebab9c06cbfd473de6d4f0d2d95b6cf782f62d7cea27ee83d6c1eba837738623a180d63b48e0ed5f907178cfcdb6d4183c3521bbf66b22b69cdefb8a844afef114c058e44b283b465d8101bea13cf30fc4de99f6e00df834b180dac034752938b04a313e2b5c38b486ec5945169064a70130bb52810394b62fe5767b8495ebf6c53f9cf2d82285eda34ecaae14327ce552489844f6e7b9a03af8472e851487e315d81f20a1767239bdc6269ca2719ca43b2e8848ba0a9382d395acd7fa519a0017bfffc2299c9ecbf66c94b3daaf9f0564602317a48b23a02fe8cd118e199a12be4e22e3548ce28af0453cbb35e610526a78fcc313cc2c29a4ee9df7e8916e76159973987c2daa781ddc1bcf0791381f4f59f50e66cfcc026fb6f57a5a18f9e3bb449546fc3bf8f86aea634f8b7c69b8485769007303d46c1cb9ca96fa107c28ac6260466025165dfcb20ecd9718d9a7862cd69eaed4871de93e8f5e8259b5823596bc654eaccde064a0c6d4845c0fc3096c9f4e3cab6afc06376a74d1a933026dc9756e983eab874e5d19cbe8d5c3b3a77ee827f30fb2ecb117aa65cb465762fbdcc4e4e73e1b6dca5c56a28049468ccd6486c292f60e939c11e2ad2da06f7192608dc2296595511faf169cda82a0a3d49124572fbefeff64ebcff7a8aeecc919f5edbfd9bebed1475a7faee9c5c36b6dc512e448ef3ed550205fa7902a09d0469476d9cdcc923e9b6f05387161d3e0b06ae26be3fc6710f672ae46c7219dbd9bced8089a05cc3bb0f1b0604874dfd9ee5efdb070892d70d4a53fff32106d38fc23fbb2ce7c5490df0e879d3271167d70183d495e2a134a2c9e630585cfc4c5532233928bf6127de2ea1158b9ef4138786313a68d3d20a4a24048fe481a7fa143dfa7e82f1a0afb7d8f07382ba5c16f479f757bc9caf5385639e79e06d7c6d883f06323402e46107dc2d65b92be561c3185d3a4e2df72dcfea51c9b17b981f6d6fe92b21edbba957ff566f94d825760b25dc31ec5be2bc546962a9b22b68975d37193fc89a59ca23e2f99e43a25844f11b24ae4a7835ee9c99e8904b371a8e9438ce5b45acb28fcab86ccf2192cce34feceed30d4515f65c438470f8a0b61fb90b03d1c0872c86d7d9b3678e65637022dcee68c83cdb5fc148e134e89e2978e281132423d63141db6015065d54272c7b1e8e71f8efa96098f6cf6603e90e73c06e3a0b97708a23126386d6a96bddf041f48309a6247f87224e8546b61b3d30c8d0dba0fd286359b9f059fd47aa1c2c808ace01aec038627b548260148a7ce6dd1b7d5e590e018e1fa54f78eb6e07f4cf56a8f1207d73c3f5efd2158a558309bb2fdeb1251a0cfd77dc579a0e7177c8b63664cdf6d89d7c0dcea6a48a28094b52a37bc5b5d61356a1250620360f67a20f4cb9986fc4c925db9d885553a8198802bd6972222c2f129462031195e09fe764dda4f88ba695ec51e8e33faa2889e50a57c91069669b27f04ead511823abf469cb5075ccb07622d494d82ef27d32f41080b7eb04b329efd46942cfd144d5e05533b058b317c48744e05b8e08fdf12c96c28b2a4dc11293168949577c20281a796f95f94a5ee19a8b3d47f248c347b7ad2f740caa02e73a973e548ace0419dc15b7abe3a9900070a30cf04c1e4d7eabeec045fbe9740a455264cd558726f154e860f01340fb43a45805d6a7d4e7ba5d26f390d0b081a452f196055eb37f680b90ec6a4785f82556227b6c3b1bb66c8b06b1b4e6bf97885554fe41295ee73efec44afa3761642a98b9409ee68eb27cf0e2157eee9a5426d10109024281380adca05ff8b7a01959fefce52cb48c2d000c574e09c6e6464fedeba7587718cf9f950ae689b56b4b22ef9052f7607c81ba082c820b190f257a9a04ce321cd14ac2230f352f026439a2c689bcf98e06ecd36918248ff60565a68e3fb1b07d20d4e140198496997062b76fd79af941f73340e1257c40558076e5b8733fa4d658ab3469949b983c488561a98278733c29f77dfb5d29dccfb9dad1dcd1b9134da0467af9ca7d313dea93d4a23b21cbd13f9699b2c2226b8783cb1f5607dedb7f13b2d7fc51a9fc36f52f09c6a077dcbc79f1af31db6b8d6870e851de477b79b3e637e3ec16d5b363a7f7f904a9d75e56b4dbce1b1942a8544663f3493e09b88a5596a74c468b069f6c0e181bc0d41e8d970541c50c7f111dd2ac16d0da547f3a2504f5b743bb1b009f84c25cbb924be39f221af13885ac3e8c7fa2c41596732d6fe423c955e61a7bddd94a56388c2386c5ead3c4e078a7512e934c36298cce8e6fa6d33747bc1c1a9c9b51f77722f15ba6aabaec98e294ffff0c89a8bd85ec1265a228a9ad76f20c05f798ba4d4c6d96548aa045ea4b869cf072753612c5474481fed7d22e0e828fe77d6116bd2c471b4a927210bc56a87ffefc26eb2c857947f167b01321581bb6e66466aa934fd124435a6a852bc6b6a638dc6aa005f502abc093cdc5e8874e36f87058f5eb37c8980164e3d2ac5bd09cd7b13c4b68772de57da530b67c0955e95089084b4f14b08d7110f3ce40d65cb721106009b1c632d10c0010d1b277c69615f703394c468f9bf1928ffc68f8a2da9727d9175afdbbaacade20de3c33bd0ea3b7185c05b47d01e0ecd406dfd4d5b5cf03aa4c5f3bcea5bfcfc77323d830476a8792491c55405abc6fb32a8551830361eb883d9fcf99092a4540c4d22198004b22fc1afab4e569931fab552bb88f023280919c8880683ee116adaf7a194eebd69338fef30c534e305468f0f6be0487f58e0ba1c86daa68f02cd38c9552ef18e2b66bfe8626c7707b3249d69062ae9c2dcb1dd9e937262acf77c4fe20c403ff2c9986ec1878322ba23d8e2befc5570711ca4c29aefe8569de7c5ead4fde99ba2fac54786d33486d7b1658f3d9e891d8b570df0f2a2a94c440490d44783c0c51e62bd701818e82acc3bc31eb3d3fdf367e67d64bb4c5fa76d2d47ea5d11c5b49d1912c82efb9536f8699fa3a20e588047296015665bd3ed29788391a91e67341c4e71e6b207ec866aa0195d3f335f602f481586c9d9b8f665eb227f6e5a1512287244843cfebb3392b4537794a7f60257feee611b06ee2554db7e9013b46336ddb7dd7ca29ac062e28b4da8e28226a7c7e22c9618ac19bc2f5038cafac13d9a023478683c3b9c85013aa186b6f2952ef246c5e288372382c13a4dbf64c826fb393c5856b2657ce7ab470bdae4aa760f371a1d099b160bdb3297a10bd3971553e8573e10956f51acffb518c1a04f75d98b7569780fee67b3ad52c2a7a4bf59e773d1b1a725ffb4ed71faace390a2ee3442e50cbddf68339423f908119738b76d7a7d65cc1837d5dfbdab6a62b01a1b833fb0edd94f91c9fd115b64f764376ced88d7ae2506a164bafe38a5679f0ed9d955224f1d031524fd566bad3484ab9cb0cf9f7baa4b32c3781f9eeae90ee887be84a613ca3418a967e174c2373ad088e03dc974aecc52d6fc24221bdc9d511fc037185ca3705f851c5fef028fe665869d504106be5b7cb1b5732a82e120030163b8cab8425535dc2f395536fea8d072a9d11208659dd69dbcc4cbff907aedc84a13425620eeb8f96af91622037c898923686aaa0c3a505afed08916a067b3ef94acc9114a977015e0bfbcede226cf3103f4e22551ea7c557f76c1e02badcf991cb425bf504aa85251e4fe3a9eefd0d2d0fdeb43de45528afdc80cdbc70deca9387a2f3000ac008e63c773864f60a9a5ce8e04f874ac842891be86da9295fd54e84486d8a0d7bffda8bf9f0cfceb6fd3e84c02a25735fb3fe139197a610882af04a73cf426f6aada30a5577947fac4ad24d7a76e32b5c95fa1d1711864458350c009adeedafaa0300064b7c3c4faf4852c0ea90f1eab5ce5efbc794c41b345d5b5d575c7d088146327a09599f14b351539e5fd5ef54110696ee38cccdba6aee2da98bf83236c8bfbe298335c0354de2495f1e0cf08cbaf2bdbf646cf0485933141158500c2b8441c8a4f19541171a55df1c925214d762405272b6143a4d4cbfe334abad4bd890dff26b9b47154f3c4bad2591c8c61b5c7800da8f0c92f3965d019fb1ae4def4512dbd856908bf6e2330919fa83fd5700dbd8e18e045368ed6732133f78d08531437c5e4712e7f51efd4c8c9f63e0e909cad6f936c729d9fd99416cd58c071cf798f63da413b1199cfe029721d091c5ecc8a97dc0fca39521647ecd5c570bdd48fb660fd46788caba270e9a7b7d2f58c5f5b3e391a1f52d3c4ddda5e5dc60223d05a4c4b69adc0fd50069555511003035b8c82b69b8e98e9c2f3a9dff9c7830dea784ae3a5c407ac3f8f20a41d6e4f7633782014a41ff95474ae5bbe5e843f6840bb8bbaf8c6b57a1c3081821c435c3f6a099fa4d1fa7414731906bc7177867342533e7c626fec855765cf555320728416cac3e2b954ec42bc0ece14af4d6b1abf228913daf445a8b2994884a5171f3f5f400e46ac0970734db7ed6aa0e2c75585fe6d4b06c27bf5cfda781369496774b893be87d4accc3eeb0c98fe794688b6e2fe925dddfb626e72aa9202113715c44a674770b608490e43086a48b21db52cdd30421b624f2ad307d4d5e1ce3a2d320d2164e7d7e90e79f09ab5707068aaa58a081acd4606fab2a7bd19ecf0b50bfd63c18365c5daa6439c54adc2597816bded8c21da3fd3795d96e7cb513e3c8d5c6d9c59cc0c1a098afd0f98ce82e858efb633ecd7d8790aede990bd04bd7d3f9c4e3077f4f73a89fb4fd215f759eccb70a291ba354ec335b939acff040b76b8a6ecb136bb493e169b6821fe8ee8868cfe800953074ebcb9ca675200bed3b8090a468b28cfe2ef89d8da03aecd8577cf634bd99f179abd7b25c13f71129bfe68fb5aad19de8ebb9737e3f32532f826d26573ef4d62f9299090f9bd55b57aeb0c5046e0978326fd24c84e8ca5bce6e02b66f207ecb07975766c4ed4981278979db2da6b49226098de01563918cd6ec69d3179c305e606473aee5eb964abbe8ef93752e9ab873fd3a6c456ce8a62ad6274758cd7abc4a0d7646633b5d6bacb65d6e338856831a479358fa573bd90c1ec110d12ce99903488b5bc0be6b750917874b84af47cf6f72b4cdfbbc3ff0acabf911fe69a8be192c827d9f1e52767176cf026fd255845b3e7ad08ace38cf8cb9e84a32f3794ec7f50da462a88c60bfd37fcc076b02e072738112e68b3006f43131059c5c", 0x1000, &(0x7f00000024c0), &(0x7f0000002500), &(0x7f0000002540)="196986996196b95bb10d1a7396ceb8e61121ec1fe3ec7fbf28a1261bb4e89297c3e7b40ee9db34888536abaf92037c1f6c7e57c4c9fb7d204f2e605bb82c00472776c95e75187014ad4062f8ab7005e98b9f9e8b4143c3f38f54fed13b147a65ff")
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000025c0)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f00000026c0)=0xe8)
r13 = socket(0x10, 0x803, 0x0)
sendto(r13, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r13, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
sendmsg$unix(r5, &(0x7f00000028c0)={&(0x7f0000000400)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000640)="21fe8ca77f5f06dfbb65ede682c9c01e933a1ec9481e50288627238eb71c8c4c426bde26b3f2c05847e12699b43db570cbcadc2d219fcea7806b4a0d76569243f3f54ff3dd23c6acafcfd6c1bdcb783e150c7bd581a60dbcce6f4cb6774ae7473488160c5525866fe755fc8fbc212d0f861265edd8379fc9d6a55ed9db12cee59e88ef57ce4881a98b96127844fe4b40f9537274449818efc6471d424479999f3aeac82eb93deadd82", 0xa9}, {&(0x7f0000000500)="c69295006d81c2121de7e3c9e1428f3c66816a2131e3e4df9d257b071a0d57bb515c28c59bca13c7130eb238ecc3478de737118c91e6c81e5b90adad3d1053a4b545e42f9b1d2a0ee632cd2c0bad9db00c107cf8", 0x54}, {&(0x7f0000000780)="73b2f259cf119a19f70743d8ff8658c81ac6d3f5047ce3ef8d874383f4407868f85df04b03eec796477361b1d11bef0687121b96765bbe24cc596e396d1b7306dfe83097dfecacf9abee3f94f37b60dea7d58abac0b72447f5935cc5b9e99734a31f52676233c2255202f6b8eaa41d1e828be917c6eb7e717a5f59f037444e154fc6beeece33b6d63d40f391ce62aa0361e115e79aa4b8516bf4e56ac5b4c4f7ad65b336b10ff89a8944a17f2f6c29d2290f3b02ec3a0a538848b19e90aa57ee1c5b24cfab068293de9085b3e851a90fb2a6db5424f29c", 0xd7}, {&(0x7f0000000880)="683926dd73ce4ce60ea83c9541f74aa09788f4fcb8c581c7c79ac0012e0910bee296f0c0bdfb62b260b4dc465f8c89fe5362b51ce6df37085b62d50887f91f112800f2c5a24d003669255fae77f64df9c1e499aa7301ca09b99c01f228edda7cf813206f6e153f360ac13c3c4f380b8deec453809c8885fbc492f00f91c18066dbe9b6f207075e07dc6a7526a40bc9be547b59f308617dc1707bee895650dd6e8f43fa568344d1744c425ea7111825b715cabc02217b36ee95666f397dc44d94d23684c3b19ee184a8c296697b790f376c237fd130997954737005215cae11d42be8b3b78236274f96abea42379910aa", 0xf0}, {&(0x7f00000000c0)="a20f44c654fbeea651645c6ef15e6b52704101defa2884e0bb051509c73ba832794fe812", 0x24}, {&(0x7f0000000a40)="6e84b3833bc43936c3dfc4e67ebfb2a51c9d8082cfa354e3037182d0194a9629951ed59cf30a6875949901c57c5c83637de360424b7c39ed9cbcd86a600ee9a11123f605de840a4d768073915d5bb667d91146cca31f6128ae3e997cfc710436cce9da00441b09e7b01d58103a785493a48a2888c8c33eda6f0eba21ce32fde1e7591632920d4148bcd15c01bf6d0d7369b5209ec43f20605ee95c0a56ec0bc39d1cccde7294f183e530090163668574521b3329b28d28c6b2e5a259736c3e6979bbb1700d6cfd250d1706d3b9ccbbd6a4c846aeb1088c168cd1d505c111665c9668b3b2f9699aad0572b75e0b85", 0xee}, {&(0x7f0000000b40)="29980d7109ef31005cf771fc4ec61bb00c661e3cc8dd4369a3edb1eef6bac29fe027f108ca8041e48d5b609e2b3e19422f18b1b32c79be50c63ea8b36c58b1a85619a82a32b4b560ca108a25516fb72637531a40a5750dff4a2f45f55925f67669071a568b86b651e86c39fb2f5c25e07c2c7663fe987ebe0396fc8f1896da2a9c2b84489af1c430a0125cba5837585d8f5f4f632b54f1dbf32fd3260a79090e6592a3fb1bbc5240cfcdff9c4160ae47ffec54d86b6059450482b88efc28f97683e4", 0xc2}, {&(0x7f0000000c40)="8d76deb8b9ec006150d7b48f1ec77a2f61e75618167983952a47a960fb19231c404b866c1015a6790e53c504a780d96a0f3457af27edee4da1ebb1029e2174366f9906ef7e9b55278bb6792ca4121ca97513b1d28d91ea50c13621d268153010f4c5f6202523d93d8c65ace118c101b3404165869da026f3272cc093947420a58ae411c1083f86ae94dd91645b2fb2", 0x8f}, {&(0x7f0000000d00)="e8d919f89d0a506c25aaead75505dfacd0de0f16c4b40cca1214e989eaf9df69bac36b3c5246c585bbff52c86a6e670d1258055c79ec9bf9580dfc6dcfc5d4de60ed797cbdc941d9698085642de736a2685b", 0x52}], 0x9, &(0x7f00000027c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6, r7, r7, r4, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12}}}, @rights={{0x20, 0x1, 0x1, [r4, 0xffffffffffffffff, r3, r13]}}], 0xf0, 0x4}, 0x4080)
r14 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, <r15=>0x0}, &(0x7f0000000400)=0xc)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, r15}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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")
r16 = epoll_create1(0x80000)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000300)="21a327e43b4a2ddeb6dce570190f9c42ea643e89758143a04a17bba174bea65cfdeab644eb64a783adf3a683131743d894de84fc98d57799f5ce09dd86cd9810befa6035bb4031dac0c81c0b6e051d4ab1b04be49597e72edc0dedbf38c7555cf1d7", 0x62}, {&(0x7f0000000400)="006d37333a2519f9ae9a973442d9d7197ceef54a7c8bf44523e1f0439e455012f806958122fe368f357bd35cf1fd106a5a4545372ef16c450dbfda23428f7e1507aa26af1c51a6c1aa8b236071d87607c241b035aaa40263ba6e30a2a777fb17cb", 0x61}, {&(0x7f0000000240)="dfb657fea98fde7bab0aba87cad8c495fefd170475e94a91e2fc456203233a4aa01cbbbd526f99142627d6add18b", 0x2e}, {&(0x7f0000000480)="a401bffdfa9da29cf13822fbfad788d274ecfa12ef89ca2b92500443a634aed408dfc11969fcbf5634e604c77c271c24c95161f7cd02b9bffe78bf0960ba344bd2616bef0f0d0b605cad7173f4f953e0a3c36bb508a4f58fe8c66c813c3c2789cf2e2668c89d49bbd54679f08f88247a40d4930de35594d642d492509ff8010d8b90be4fd489159155bde5e2dac37df2757dcd8c426fe584152efac98614a11da54a27a388f7d0", 0xa7}, {&(0x7f0000000540)="249ec7fd67472d6cb280fc89801ef28f8519ae1a9a4a46b7bbad50b78121ebcb64e8bc50f299374484628e97ce60e8e818688a9853d711432c7f5271681c08401d70db464de29d455c52b9e7272f8cd6e31bb44c07639d4ce9a797cb1395657d9b340ab253685bf4ec07e9f3ac23c98b81eb848c6064313100d40a560694ebb928fc5b326f2f8f130f1fb6965b5d1172cf6a75ada0c5b90c86c379d70c02c2a0dba46d872219394cf963c699aa015fe7f2a19f261020", 0xb6}], 0x5, &(0x7f0000002140)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r0, r0, r1]}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r15}}}, @rights={{0x18, 0x1, 0x1, [r2, r16]}}], 0x138, 0x40401}, 0x800)
r17 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r17, &(0x7f0000000280)=[{&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc25bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x1)

24.768341224s ago: executing program 6 (id=11146):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
mount(&(0x7f0000000080)=@md0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='anon_inodefs\x00', 0x800000, &(0x7f0000000200)='-}%)\x95#\xb0+$\x00')
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000100b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x208)
shutdown(r5, 0x1)
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000180), 0x4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f00000013c0)={<r6=>0x0, 0x0, "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", "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"})
r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, <r8=>0x0, <r9=>0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r10=>0x0, <r11=>0x0, <r12=>0x0, <r13=>0x0})
syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r13, @ANYRES64=r11, @ANYRES16=r10, @ANYRES16=r13, @ANYRESDEC=r12, @ANYRES16=r9, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32=r8], 0x5, 0x0, &(0x7f0000000000))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f00000023c0)={r6, r8, "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", "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"})
r14 = socket$vsock_stream(0x28, 0x1, 0x0)
r15 = signalfd(r1, &(0x7f0000000240)={[0x4]}, 0x8)
ioctl$TIOCSSOFTCAR(r15, 0x541a, &(0x7f0000000280)=0x2)
connect$vsock_stream(r14, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
r16 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r16, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/126, 0x7e}], 0x1, 0x1000, 0x1)
pidfd_getfd(r16, r14, 0x0)
r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$BTRFS_IOC_FS_INFO(r7, 0x8400941f, &(0x7f0000000cc0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r17, 0x0, 0xfffffffffffffffd}, 0x18)
r18 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f00000002c0))
connect$vsock_stream(r18, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r19=>0x0}, 0x1000)
quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000380)=@rnullb, r19, &(0x7f0000000640)={0x5, 0x2, 0xfffffffffffffff8, 0x2983, 0x3, 0xea, 0x7, 0x7f})

24.709267619s ago: executing program 6 (id=11150):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/26], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
r1 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10)
close_range(r1, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000cdb9236861c7ae9f9125a8cc6e86b50c3bd6c3c686c17d89e023f052aab002551c187e8e437dd0c37a858bc6b57380b0cb8b485949c4aa8c41e622fbe578e736b14569ea5815daa7c186b2086fc186bc0273e33483486f59688e749574af0f0efe11b898d11d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x18, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000200000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b70200000100000085000000de985e8db70000000000000095000000000000008517c7c1094cf8a89645636b1c03771b0785015c27c55669dbc549ef220c34bab4eb44a1b985ef"], &(0x7f0000000100)='GPL\x00', 0xc52, 0xea, &(0x7f0000000b00)=""/234, 0x1f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x10, 0x1, 0xc000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0, r0, 0xffffffffffffffff, r0, r0, 0x1], 0x0, 0x10, 0xfff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000005c0)='net_dev_xmit_timeout\x00', r5, 0x0, 0x2}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000001200)={'syztnl0\x00', <r6=>0x0, 0x20, 0x700, 0x8, 0x10001, {{0xa, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x4, 0x0, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, {[@end, @timestamp_addr={0x44, 0xc, 0xdd, 0x1, 0xd, [{@multicast2, 0x8d4d}]}, @generic={0x798fe0e53809d640, 0x2}, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001300)={'vxcan0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd7000fedbdf25070000004000018008000100", @ANYRES32=r6, @ANYBLOB="080003000200000000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000300010000001400020069705f76746930000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r10, &(0x7f0000004200)='t', 0x1)
sendfile(r10, r9, 0x0, 0x7ffff000)

24.594133811s ago: executing program 6 (id=11152):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x110, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x6}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x800, 0xc0, 0x7, 0x6}, {0xf, 0x9, 0x2, 0x10000}, {0x5, 0x3, 0x5, 0x3}, {0x2, 0x4, 0x2, 0x8}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3, 0x49, 0x7, 0x4}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x54, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x3, 0x401, 0x9, {0xf, 0x2, 0x9f, 0x3ff, 0x3, 0x9}, {0xd, 0x3, 0x40, 0x7f, 0x0, 0x8}, 0xa, 0x200008}}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x80000000}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x81}, 0x28000080)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket(0x10, 0x3, 0x0)
connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)

24.238629047s ago: executing program 6 (id=11162):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r0, 0xf, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0]}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r4 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r5, 0x2285, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
writev(r5, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32dbb0664a5f747d7deda3fa0b7327bd49eb067a0689fff2a4", 0x2b}], 0x2)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000000), 0x3a664c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

24.237488397s ago: executing program 35 (id=11162):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r0, 0xf, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0]}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r4 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r5, 0x2285, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
writev(r5, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32dbb0664a5f747d7deda3fa0b7327bd49eb067a0689fff2a4", 0x2b}], 0x2)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000000), 0x3a664c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

10.428518694s ago: executing program 8 (id=11457):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/26], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
r1 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10)
close_range(r1, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000cdb9236861c7ae9f9125a8cc6e86b50c3bd6c3c686c17d89e023f052aab002551c187e8e437dd0c37a858bc6b57380b0cb8b485949c4aa8c41e622fbe578e736b14569ea5815daa7c186b2086fc186bc0273e33483486f59688e749574af0f0efe11b898d11d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x18, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000200000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b70200000100000085000000de985e8db70000000000000095000000000000008517c7c1094cf8a89645636b1c03771b0785015c27c55669dbc549ef220c34bab4eb44a1b985ef"], &(0x7f0000000100)='GPL\x00', 0xc52, 0xea, &(0x7f0000000b00)=""/234, 0x1f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x10, 0x1, 0xc000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0, r0, 0xffffffffffffffff, r0, r0, 0x1], 0x0, 0x10, 0xfff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000005c0)='net_dev_xmit_timeout\x00', r5, 0x0, 0x2}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000001200)={'syztnl0\x00', <r6=>0x0, 0x20, 0x700, 0x8, 0x10001, {{0xa, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x4, 0x0, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, {[@end, @timestamp_addr={0x44, 0xc, 0xdd, 0x1, 0xd, [{@multicast2, 0x8d4d}]}, @generic={0x798fe0e53809d640, 0x2}, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001300)={'vxcan0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd7000fedbdf25070000004000018008000100", @ANYRES32=r6, @ANYBLOB="080003000200000000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000300010000001400020069705f76746930000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r9, &(0x7f0000004200)='t', 0x1)
sendfile(r9, r8, 0x0, 0x40002)
sendfile(r9, r8, 0x0, 0x7ffff000)

10.022631255s ago: executing program 8 (id=11462):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0xf7ff, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x28008000}, 0x20000800)

9.981681129s ago: executing program 8 (id=11463):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r0, 0xf, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0]}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r4 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r5, 0x2285, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000000), 0x3a664c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

9.815756236s ago: executing program 8 (id=11469):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/26], 0x48)
r1 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10)
close_range(r1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000cdb9236861c7ae9f9125a8cc6e86b50c3bd6c3c686c17d89e023f052aab002551c187e8e437dd0c37a858bc6b57380b0cb8b485949c4aa8c41e622fbe578e736b14569ea5815daa7c186b2086fc186bc0273e33483486f59688e749574af0f0efe11b898d11d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x18, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000200000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b70200000100000085000000de985e8db70000000000000095000000000000008517c7c1094cf8a89645636b1c03771b0785015c27c55669dbc549ef220c34bab4eb44a1b985ef"], &(0x7f0000000100)='GPL\x00', 0xc52, 0xea, &(0x7f0000000b00)=""/234, 0x1f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x10, 0x1, 0xc000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0, r0, 0xffffffffffffffff, r0, r0, 0x1], 0x0, 0x10, 0xfff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000005c0)='net_dev_xmit_timeout\x00', r6, 0x0, 0x2}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000001200)={'syztnl0\x00', <r7=>0x0, 0x20, 0x700, 0x8, 0x10001, {{0xa, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x4, 0x0, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, {[@end, @timestamp_addr={0x44, 0xc, 0xdd, 0x1, 0xd, [{@multicast2, 0x8d4d}]}, @generic={0x798fe0e53809d640, 0x2}, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001300)={'vxcan0\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd7000fedbdf25070000004000018008000100", @ANYRES32=r7, @ANYBLOB="080003000200000000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000300010000001400020069705f76746930000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r9, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r11, &(0x7f0000004200)='t', 0x1)
sendfile(r11, r10, 0x0, 0x40002)
sendfile(r11, r10, 0x0, 0x7ffff000)

9.508462137s ago: executing program 8 (id=11471):
syz_open_procfs(0x0, &(0x7f0000000340)='net/udplite\x00')
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000001580)=ANY=[@ANYBLOB="1800000800000000000000642847a309d3ee7042d567be982c04644ef5275996e0cb4df609b50dbf7e197180a14d9d74e5f20217554d2567b444aaee05730a74a743edb87373230025dbe8b7477f6ae4dfc3021966ac0a18a22cd08f0152e139f9ed98bfac2fce97dc7adf43abc9fd34fe68639b743ab45b8e51b5dab94aaf9d513721585d979ace82970b76106ed16365bcf6099269afa82cab6f7107741dbd9b55a28f4b33", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095", @ANYRESOCT=0x0, @ANYRES16=r1], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r5, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180), 0x0, 0x1, 0x1}}, 0x40)
close_range(r4, 0xffffffffffffffff, 0x0)

6.91360379s ago: executing program 8 (id=11495):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$netlink(0x10, 0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100"], 0x90}}, 0x0)

6.900481601s ago: executing program 36 (id=11495):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$netlink(0x10, 0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100"], 0x90}}, 0x0)

3.440473511s ago: executing program 9 (id=11522):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0xf4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x4004881)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x1, 0xf0, 0x4}, 0x1}, 0x18)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050)

1.981386459s ago: executing program 7 (id=11553):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$netlink(0x10, 0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)

1.877372959s ago: executing program 7 (id=11556):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'erspan0\x00'}}, 0x1e)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0)

1.846080662s ago: executing program 7 (id=11557):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18)
listen(0xffffffffffffffff, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x1, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000010}, 0x8801)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

1.811883536s ago: executing program 7 (id=11558):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/26], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
r1 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10)
close_range(r1, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000cdb9236861c7ae9f9125a8cc6e86b50c3bd6c3c686c17d89e023f052aab002551c187e8e437dd0c37a858bc6b57380b0cb8b485949c4aa8c41e622fbe578e736b14569ea5815daa7c186b2086fc186bc0273e33483486f59688e749574af0f0efe11b898d11d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x18, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000200000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b70200000100000085000000de985e8db70000000000000095000000000000008517c7c1094cf8a89645636b1c03771b0785015c27c55669dbc549ef220c34bab4eb44a1b985ef"], &(0x7f0000000100)='GPL\x00', 0xc52, 0xea, &(0x7f0000000b00)=""/234, 0x1f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x10, 0x1, 0xc000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0, r0, 0xffffffffffffffff, r0, r0, 0x1], 0x0, 0x10, 0xfff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000005c0)='net_dev_xmit_timeout\x00', r5, 0x0, 0x2}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000001200)={'syztnl0\x00', <r6=>0x0, 0x20, 0x700, 0x8, 0x10001, {{0xa, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x4, 0x0, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, {[@end, @timestamp_addr={0x44, 0xc, 0xdd, 0x1, 0xd, [{@multicast2, 0x8d4d}]}, @generic={0x798fe0e53809d640, 0x2}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd7000fedbdf25070000004000018008000100", @ANYRES32=r6, @ANYBLOB="080003000200000000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f76746930000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r9, &(0x7f0000004200)='t', 0x1)
sendfile(r9, r8, 0x0, 0x40002)
sendfile(r9, r8, 0x0, 0x7ffff000)

1.811025776s ago: executing program 9 (id=11559):
socket$kcm(0x11, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0)

1.756510342s ago: executing program 9 (id=11560):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'erspan0\x00'}}, 0x1e)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x2, @empty}}, 0x1e)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0)

1.734510574s ago: executing program 9 (id=11561):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0}, 0x94)
r0 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000cdb9236861c7ae9f9125a8cc6e86b50c3bd6c3c686c17d89e023f052aab002551c187e8e437dd0c37a858bc6b57380b0cb8b485949c4aa8c41e622fbe578e736b14569ea5815daa7c186b2086fc186bc0273e33483486f59688e749574af0f0efe11b898d11d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x18, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000200000000000000ffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b70200000100000085000000de985e8db70000000000000095000000000000008517c7c1094cf8a89645636b1c03771b0785015c27c55669dbc549ef220c34bab4eb44a1b985ef"], &(0x7f0000000100)='GPL\x00', 0xc52, 0xea, &(0x7f0000000b00)=""/234, 0x1f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x10, 0x1, 0xc000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xfff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000005c0)='net_dev_xmit_timeout\x00', r5, 0x0, 0x2}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000001200)={'syztnl0\x00', <r6=>0x0, 0x20, 0x700, 0x8, 0x10001, {{0xa, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x4, 0x0, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, {[@end, @timestamp_addr={0x44, 0xc, 0xdd, 0x1, 0xd, [{@multicast2, 0x8d4d}]}, @generic={0x798fe0e53809d640, 0x2}, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001300)={'vxcan0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd7000fedbdf25070000004000018008000100", @ANYRES32=r6, @ANYBLOB="080003000200000000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000300010000001400020069705f76746930000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r10, &(0x7f0000004200)='t', 0x1)
sendfile(r10, r9, 0x0, 0x40002)
sendfile(r10, r9, 0x0, 0x7ffff000)

1.566136201s ago: executing program 9 (id=11562):
mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xc3\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q\x00'/1189, 0x42, 0x4, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r2)
sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000090)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x99}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe880000000000000000000000000001bf52864432ff010000010000000c7effca0018000000f2528ea07fc034d30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000006c"], 0xf8}, 0x1, 0x0, 0x0, 0x4004010}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x8, 0x3)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x0, 0x5, 0xa, 0x1, "69c4877b44a410cfd993da92379bd69fbc3f04c94b90b964964e00dc490dfed9ed5afea55984810f92fff45c620369691e88637c9e7c42548b1b1a25ee406761", "ce24f55fb96d24e381fe1e07f1c86b4f92b0f337e9d8f97af53d3bd43cd88b7d", [0x7, 0xd2]})
fgetxattr(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="75747266732e7b400ad066a0416510bd1e64109494260200"], 0x0, 0x0)
r6 = syz_io_uring_setup(0x512b, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x400006, 0x20e}, &(0x7f0000000240), &(0x7f0000000140))
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4a7a77f717", @ANYRES32=r4, @ANYBLOB="00000000a0000000"], &(0x7f0000000080)='GPL\x00', 0xf80, 0xa8, &(0x7f0000000540)=""/168, 0x41100, 0x1, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000200)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x1, 0xd, 0x7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000400)=[r4, 0xffffffffffffffff, r4, r4, r4, r4, r4, r4], &(0x7f0000000600)=[{0x0, 0x1, 0xf, 0x3}, {0x0, 0x5, 0x10, 0xb}, {0x1, 0x5, 0x8, 0x9}, {0x1, 0x3, 0x1, 0x4}, {0x0, 0x4, 0x2, 0x3}, {0x1, 0x4, 0xa}, {0x0, 0x5, 0x4, 0xc}, {0x4, 0x5, 0x3, 0xc}], 0x10, 0x9}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@map=r4, 0xe, 0x1, 0xfffffffc, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0], <r8=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)={@fallback=r4, r7, 0x10, 0x4, 0x0, @void, @value=r4, @void, @void, r8}, 0x20)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r10}, 0x10)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f00000000c0), 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r11, &(0x7f0000004200)='t', 0x1)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
sendfile(r11, r4, 0x0, 0x3ffff)

1.503342407s ago: executing program 7 (id=11563):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x21}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x6}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x40000010000, 0x0, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x2, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00')
write$cgroup_int(r3, &(0x7f0000000600)=0x539, 0x12)
r4 = semget$private(0x0, 0x4, 0x0)
semop(r4, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1)
semtimedop(r4, &(0x7f0000000000)=[{0x0, 0x9, 0x800}, {0x2, 0x1, 0x1800}], 0x2, 0x0)
r5 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)

1.139261474s ago: executing program 7 (id=11564):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x110, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x6}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x800, 0xc0, 0x7, 0x6}, {0xf, 0x9, 0x2, 0x10000}, {0x5, 0x3, 0x5, 0x3}, {0x2, 0x4, 0x2, 0x8}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3, 0x49, 0x7, 0x4}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x54, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x3, 0x401, 0x9, {0xf, 0x2, 0x9f, 0x3ff, 0x3, 0x9}, {0xd, 0x3, 0x40, 0x7f, 0x0, 0x8}, 0xa, 0x200008}}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x80000000}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x81}, 0x28000080)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket(0x10, 0x3, 0x0)
connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)

1.138638324s ago: executing program 37 (id=11564):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x110, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x6}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x800, 0xc0, 0x7, 0x6}, {0xf, 0x9, 0x2, 0x10000}, {0x5, 0x3, 0x5, 0x3}, {0x2, 0x4, 0x2, 0x8}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3, 0x49, 0x7, 0x4}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x54, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x3, 0x401, 0x9, {0xf, 0x2, 0x9f, 0x3ff, 0x3, 0x9}, {0xd, 0x3, 0x40, 0x7f, 0x0, 0x8}, 0xa, 0x200008}}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x80000000}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x81}, 0x28000080)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket(0x10, 0x3, 0x0)
connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)

1.022033846s ago: executing program 2 (id=11571):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'erspan0\x00'}}, 0x1e)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x2, @empty}}, 0x1e)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0)

989.244879ms ago: executing program 2 (id=11573):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x110, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x6}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x800, 0xc0, 0x7, 0x6}, {0xf, 0x9, 0x2, 0x10000}, {0x5, 0x3, 0x5, 0x3}, {0x2, 0x4, 0x2, 0x8}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3, 0x49, 0x7, 0x4}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x54, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x3, 0x401, 0x9, {0xf, 0x2, 0x9f, 0x3ff, 0x3, 0x9}, {0xd, 0x3, 0x40, 0x7f, 0x0, 0x8}, 0xa, 0x200008}}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x80000000}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x81}, 0x28000080)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket(0x10, 0x3, 0x0)
connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)

948.039463ms ago: executing program 2 (id=11575):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x21}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x6}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x40000010000, 0x0, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x2, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00')
write$cgroup_int(r3, &(0x7f0000000600)=0x539, 0x12)
r4 = semget$private(0x0, 0x4, 0x0)
semop(r4, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1)
semtimedop(r4, &(0x7f0000000000)=[{0x0, 0x9, 0x800}, {0x2, 0x1, 0x1800}], 0x2, 0x0)
r5 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)

827.221396ms ago: executing program 9 (id=11576):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/26], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
r1 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10)
close_range(r1, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000cdb9236861c7ae9f9125a8cc6e86b50c3bd6c3c686c17d89e023f052aab002551c187e8e437dd0c37a858bc6b57380b0cb8b485949c4aa8c41e622fbe578e736b14569ea5815daa7c186b2086fc186bc0273e33483486f59688e749574af0f0efe11b898d11d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x18, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000200000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b70200000100000085000000de985e8db70000000000000095000000000000008517c7c1094cf8a89645636b1c03771b0785015c27c55669dbc549ef220c34bab4eb44a1b985ef"], &(0x7f0000000100)='GPL\x00', 0xc52, 0xea, &(0x7f0000000b00)=""/234, 0x1f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x10, 0x1, 0xc000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0, r0, 0xffffffffffffffff, r0, r0, 0x1], 0x0, 0x10, 0xfff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000005c0)='net_dev_xmit_timeout\x00', r5, 0x0, 0x2}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001300)={'vxcan0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd7000fedbdf25070000004000018008000100", @ANYRES32, @ANYBLOB="080003000200000000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000300010000001400020069705f76746930000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r9, &(0x7f0000004200)='t', 0x1)
sendfile(r9, r8, 0x0, 0x40002)
sendfile(r9, r8, 0x0, 0x7ffff000)

826.879766ms ago: executing program 38 (id=11576):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/26], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
r1 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10)
close_range(r1, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000cdb9236861c7ae9f9125a8cc6e86b50c3bd6c3c686c17d89e023f052aab002551c187e8e437dd0c37a858bc6b57380b0cb8b485949c4aa8c41e622fbe578e736b14569ea5815daa7c186b2086fc186bc0273e33483486f59688e749574af0f0efe11b898d11d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x18, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000200000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b70200000100000085000000de985e8db70000000000000095000000000000008517c7c1094cf8a89645636b1c03771b0785015c27c55669dbc549ef220c34bab4eb44a1b985ef"], &(0x7f0000000100)='GPL\x00', 0xc52, 0xea, &(0x7f0000000b00)=""/234, 0x1f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x10, 0x1, 0xc000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0, r0, 0xffffffffffffffff, r0, r0, 0x1], 0x0, 0x10, 0xfff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000005c0)='net_dev_xmit_timeout\x00', r5, 0x0, 0x2}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001300)={'vxcan0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd7000fedbdf25070000004000018008000100", @ANYRES32, @ANYBLOB="080003000200000000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000300010000001400020069705f76746930000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r9, &(0x7f0000004200)='t', 0x1)
sendfile(r9, r8, 0x0, 0x40002)
sendfile(r9, r8, 0x0, 0x7ffff000)

679.61156ms ago: executing program 0 (id=11580):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18)
listen(r0, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x1, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000010}, 0x8801)
accept4(r0, 0x0, 0x0, 0x0)

647.935264ms ago: executing program 0 (id=11581):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x21}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00')
semop(0x0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1)
semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x9, 0x800}, {0x2, 0x1, 0x1800}], 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000500)=ANY=[@ANYBLOB="abbbbbbbbbbbaaaaaaaaaabb0800450000740000000000019078ac1e0001ac1414aa03019078036100004600000000004000002f0009ac141410ac1414bb44440001000086dd00000000ac1414bb00000000ac1414320000000000750000000000004fe0000002000000007f00000100000000ac1414aa00000004e0000001"], 0x0)
msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6)

627.339266ms ago: executing program 0 (id=11582):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r0, 0xf, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0]}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r4 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r5, 0x2285, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000000), 0x3a664c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

480.247521ms ago: executing program 1 (id=11583):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'erspan0\x00'}}, 0x1e)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x2, @empty}}, 0x1e)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0)

473.761851ms ago: executing program 2 (id=11584):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x110, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x6}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x800, 0xc0, 0x7, 0x6}, {0xf, 0x9, 0x2, 0x10000}, {0x5, 0x3, 0x5, 0x3}, {0x2, 0x4, 0x2, 0x8}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3, 0x49, 0x7, 0x4}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x54, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x3, 0x401, 0x9, {0xf, 0x2, 0x9f, 0x3ff, 0x3, 0x9}, {0xd, 0x3, 0x40, 0x7f, 0x0, 0x8}, 0xa, 0x200008}}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x80000000}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x81}, 0x28000080)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket(0x10, 0x3, 0x0)
connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)

443.055864ms ago: executing program 0 (id=11585):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r3, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x7a, &(0x7f00000004c0)=ANY=[], 0x0)

412.902048ms ago: executing program 1 (id=11586):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x1f)
setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x368, 0xa, 0x148, 0x0, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x4, 0x1, 0x1, 0x0, 0x1], 0x3}, {0x3, [0x2, 0x6, 0x1, 0x0, 0x0, 0x3], 0x4}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530)

371.941641ms ago: executing program 0 (id=11587):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000380)=@rnullb, 0x0, &(0x7f0000000640)={0x5, 0x2, 0xfffffffffffffff8, 0x2983, 0x3, 0xea, 0x7, 0x7f})

321.053137ms ago: executing program 1 (id=11588):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0xf0, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfffe, 0x70c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0xfe, 0x1000000000000192, 0xff80, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc, 0x9}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xf0}}, 0x40804)

305.430008ms ago: executing program 0 (id=11589):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18)
listen(r0, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x1, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000010}, 0x8801)
accept4(r0, 0x0, 0x0, 0x0)

253.696253ms ago: executing program 1 (id=11590):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000600"/18], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000001280)=ANY=[@ANYBLOB="180000002d0e666735aa566600000000000000005206c1c1c0d0f488a817a4eb811d4b9ec2a58a99ec551c03ec289f55db730fed1019ce3e294aaaa5d00f4f23f511ea0f542fa5d1618c434ed81cc9e349b639c5442595d4684b60c4b8", @ANYRES32=r3], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20)
lsm_set_self_attr(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="6500000000000000030000280900000043000000000000002300000000000000d7"], 0x43, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x391cc40fecd11fba)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1818413, &(0x7f0000000080)={[{@data_journal}]}, 0xfd, 0x5bb, &(0x7f0000000740)="$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")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
fdatasync(r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000140)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000d00)={<r7=>0x0, 0x0, 0x9})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001400)={r7, "75fd406f7ccb2418e59a7504f9994f86"})

235.306996ms ago: executing program 1 (id=11591):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@newqdisc={0x88, 0x24, 0xd0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xfffffff8}]}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x3c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x2}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x2}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x7}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xfff}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x52b}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x7f}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

101.404599ms ago: executing program 1 (id=11592):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r0, 0xf, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0]}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r4 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000000), 0x3a664c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

93.61581ms ago: executing program 2 (id=11593):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

0s ago: executing program 2 (id=11594):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0xfffffffd, 0xffffff4a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000001280)=ANY=[@ANYBLOB="180000002d0e666735aa566600000000000000005206c1c1c0d0f488a817a4eb811d4b9ec2a58a99ec551c03ec289f55db730fed1019ce3e294aaaa5d00f4f23f511ea0f542fa5d1618c434ed81cc9e349b639c5442595d4684b60c4b85435c500c4749118ef286cd70de979400bf04988a4147f90fb06bd7d5837fa1291f0b65f618939b3fb6fc0b7ef85005ee5fdd8d7a6c67d2865737e9585021b27b900e878f500c0b67c726e075e7c8407c8c322bb85b7dc02802f39fdcfee4da344a63ad3fe0e5ef3e40965f5d044cfe9c42ad11a0f68ebaba372ea0021000000000000631f4366", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1818413, &(0x7f0000000080)={[{@data_journal}]}, 0xfd, 0x5bb, &(0x7f0000000740)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000140)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000d00)={0x0, 0x0, 0x9})

kernel console output (not intermixed with test programs):

lticast mode
[  937.364057][ T3416] dummy0: left promiscuous mode
[  937.368987][ T3416] dummy0: left allmulticast mode
[  937.375821][ T3416] nlmon0: left promiscuous mode
[  937.380815][ T3416] nlmon0: left allmulticast mode
[  937.387540][ T3416] caif0: left promiscuous mode
[  937.392384][ T3416] caif0: left allmulticast mode
[  937.397312][ T3416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  937.492279][ T3438] vcan0: tx drop: invalid da for name 0x0000000000000015
[  937.567719][ T3448] macsec1: entered promiscuous mode
[  937.586884][ T3448] bridge0: port 3(macsec1) entered blocking state
[  937.593412][ T3448] bridge0: port 3(macsec1) entered disabled state
[  937.600577][ T3448] macsec1: entered allmulticast mode
[  937.617086][ T3448] macsec1: left allmulticast mode
[  937.750127][ T3464] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  937.887174][ T3477] wireguard0: entered promiscuous mode
[  938.535334][ T3496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=187 sclass=netlink_route_socket pid=3496 comm=syz.6.10692
[  938.560727][ T3496] loop6: detected capacity change from 0 to 512
[  938.605851][ T3496] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  938.654851][ T3496] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  938.703068][ T3496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  938.774703][ T3515] bridge0: entered promiscuous mode
[  938.777482][ T3516] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  938.788245][ T3515] macsec1: entered promiscuous mode
[  938.794654][ T3515] bridge0: port 3(macsec1) entered blocking state
[  938.801258][ T3515] bridge0: port 3(macsec1) entered disabled state
[  938.808488][ T3515] macsec1: entered allmulticast mode
[  938.813877][ T3515] bridge0: entered allmulticast mode
[  938.820080][ T3515] macsec1: left allmulticast mode
[  938.825174][ T3515] bridge0: left allmulticast mode
[  938.831776][ T3515] bridge0: left promiscuous mode
[  938.907825][ T3505] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  939.071962][ T3531] loop6: detected capacity change from 0 to 512
[  939.081560][ T3531] ext4: Invalid gid '0x00000000ffffffff'
[  939.088834][ T3531] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  939.088834][ T3531]    program syz.6.10704 not setting count and/or reply_len properly
[  939.397247][ T3546] lo: entered promiscuous mode
[  939.402161][ T3546] lo: entered allmulticast mode
[  939.409101][ T3546] tunl0: entered promiscuous mode
[  939.414265][ T3546] tunl0: entered allmulticast mode
[  939.421049][ T3546] gre0: entered promiscuous mode
[  939.426174][ T3546] gre0: entered allmulticast mode
[  939.433170][ T3546] gretap0: entered promiscuous mode
[  939.438765][ T3546] gretap0: entered allmulticast mode
[  939.446151][ T3546] erspan0: entered promiscuous mode
[  939.451422][ T3546] erspan0: entered allmulticast mode
[  939.458866][ T3546] ip_vti0: entered promiscuous mode
[  939.464281][ T3546] ip_vti0: entered allmulticast mode
[  939.473110][ T3546] ip6_vti0: entered promiscuous mode
[  939.478473][ T3546] ip6_vti0: entered allmulticast mode
[  939.486077][ T3546] sit0: entered promiscuous mode
[  939.491096][ T3546] sit0: entered allmulticast mode
[  939.498031][ T3546] ip6tnl0: entered promiscuous mode
[  939.503431][ T3546] ip6tnl0: entered allmulticast mode
[  939.510730][ T3546] ip6gre0: entered promiscuous mode
[  939.515994][ T3546] ip6gre0: entered allmulticast mode
[  939.522865][ T3546] syz_tun: entered allmulticast mode
[  939.529675][ T3546] ip6gretap0: entered allmulticast mode
[  939.536602][ T3546] bridge0: entered promiscuous mode
[  939.541909][ T3546] bridge0: entered allmulticast mode
[  939.549317][ T3546] vcan0: entered promiscuous mode
[  939.554427][ T3546] vcan0: entered allmulticast mode
[  939.561545][ T3546] bond0: entered allmulticast mode
[  939.566796][ T3546] bond_slave_0: entered allmulticast mode
[  939.572634][ T3546] bond_slave_1: entered allmulticast mode
[  939.581251][ T3546] team0: entered allmulticast mode
[  939.586568][ T3546] team_slave_0: entered allmulticast mode
[  939.592409][ T3546] team_slave_1: entered allmulticast mode
[  939.600517][ T3546] dummy0: entered promiscuous mode
[  939.605770][ T3546] dummy0: entered allmulticast mode
[  939.613071][ T3546] nlmon0: entered promiscuous mode
[  939.618285][ T3546] nlmon0: entered allmulticast mode
[  939.625828][ T3546] caif0: entered promiscuous mode
[  939.630919][ T3546] caif0: entered allmulticast mode
[  939.636120][ T3546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  939.773321][ T3556] netlink: 'syz.1.10712': attribute type 1 has an invalid length.
[  939.804179][ T3556] 8021q: adding VLAN 0 to HW filter on device bond6
[  939.854058][ T3553] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  939.929542][ T3562] loop7: detected capacity change from 0 to 1024
[  939.932063][ T3563] __nla_validate_parse: 6 callbacks suppressed
[  939.932113][ T3563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10716'.
[  939.939303][ T3562] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  939.961673][ T3562] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  939.972688][ T3562] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  939.973363][ T3563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10716'.
[  939.986025][ T3562] JBD2: no valid journal superblock found
[  939.997387][ T3562] EXT4-fs (loop7): Could not load journal inode
[  940.134446][ T3572] vcan0: tx drop: invalid da for name 0x0000000000000015
[  940.142692][ T3566] loop6: detected capacity change from 0 to 512
[  940.149513][ T3566] ext4: Invalid gid '0x00000000ffffffff'
[  940.156988][ T3566] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  940.156988][ T3566]    program syz.6.10717 not setting count and/or reply_len properly
[  940.502598][ T3595] wireguard0: entered promiscuous mode
[  940.578589][ T3594] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10727'.
[  940.693224][ T3594] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  940.781198][ T3604] Cannot find del_set index 3 as target
[  940.871803][ T3606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10731'.
[  940.881034][ T3606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10731'.
[  940.954240][ T3616] vcan0: tx drop: invalid da for name 0x0000000000000015
[  941.005297][   T29] kauditd_printk_skb: 253 callbacks suppressed
[  941.005324][   T29] audit: type=1326 audit(1768100992.561:38479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.6.10739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d9d7f749 code=0x7ffc0000
[  941.035666][   T29] audit: type=1326 audit(1768100992.561:38480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.6.10739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d9d7f749 code=0x7ffc0000
[  941.059533][   T29] audit: type=1326 audit(1768100992.592:38481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.6.10739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f89d9d7f749 code=0x7ffc0000
[  941.085107][   T29] audit: type=1326 audit(1768100992.592:38482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.6.10739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d9d7f749 code=0x7ffc0000
[  941.108868][   T29] audit: type=1326 audit(1768100992.592:38483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.6.10739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d9d7f749 code=0x7ffc0000
[  941.132717][   T29] audit: type=1326 audit(1768100992.645:38484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.6.10739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f89d9d7f749 code=0x7ffc0000
[  941.156645][   T29] audit: type=1326 audit(1768100992.645:38485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.6.10739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d9d7f749 code=0x7ffc0000
[  941.180651][   T29] audit: type=1326 audit(1768100992.645:38486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.6.10739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d9d7f749 code=0x7ffc0000
[  941.204842][   T29] audit: type=1326 audit(1768100992.645:38487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.6.10739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f89d9d7f749 code=0x7ffc0000
[  941.332954][ T3632] wireguard0: entered promiscuous mode
[  941.348261][   T29] audit: type=1326 audit(1768100992.676:38488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3585 comm="syz.7.10726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1bf1f749 code=0x7ffc0000
[  941.725362][ T3642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  941.847634][ T3638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10745'.
[  941.859061][ T3638] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  941.876205][ T3645] vcan0: tx drop: invalid da for name 0x0000000000000015
[  941.982149][ T3648] loop6: detected capacity change from 0 to 4096
[  941.989310][ T3648] EXT4-fs: Ignoring removed nomblk_io_submit option
[  941.998831][ T3648] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  942.026686][ T3658] Cannot find del_set index 3 as target
[  942.027050][ T3660] macsec1: entered promiscuous mode
[  942.038749][ T3660] bridge0: port 3(macsec1) entered blocking state
[  942.045305][ T3660] bridge0: port 3(macsec1) entered disabled state
[  942.051932][ T3660] macsec1: entered allmulticast mode
[  942.058018][ T3660] macsec1: left allmulticast mode
[  942.068207][ T3657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10753'.
[  942.078835][ T3657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10753'.
[  942.125884][ T2763] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  942.247589][ T3673] loop6: detected capacity change from 0 to 1024
[  942.254922][ T3673] EXT4-fs: Ignoring removed orlov option
[  942.263619][ T3673] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  942.290796][ T3549] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  942.299085][ T3549] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  942.329594][ T3674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  942.386610][ T3681] vcan0: tx drop: invalid da for name 0x0000000000000015
[  943.406092][ T2763] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  943.520955][ T3695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10765'.
[  943.530121][ T3695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10765'.
[  943.543840][ T3682] wireguard1: entered promiscuous mode
[  943.618997][ T3707] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.664273][ T3713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  943.694729][ T3707] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.716238][ T3719] openvswitch: netlink: EtherType 0 is less than min 600
[  943.742700][ T3707] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.812595][ T3707] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.827538][ T3727] loop7: detected capacity change from 0 to 1024
[  943.837654][ T3727] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  943.847786][ T3727] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  943.858976][ T3727] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  943.869749][ T3727] JBD2: no valid journal superblock found
[  943.879439][ T3727] EXT4-fs (loop7): Could not load journal inode
[  943.923570][ T5965] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  943.958191][ T5965] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  943.979665][ T5965] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  943.994923][ T3741] team0: entered promiscuous mode
[  944.000135][ T3741] team_slave_0: entered promiscuous mode
[  944.006005][ T3741] team_slave_1: entered promiscuous mode
[  944.015774][ T3741] ip6gretap0: entered promiscuous mode
[  944.025337][ T3741] debugfs: 'hsr1' already exists in 'hsr'
[  944.031391][ T3741] Cannot create hsr debugfs directory
[  944.042075][ T5965] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  944.125299][ T3751] wireguard0: entered promiscuous mode
[  944.568849][ T3768] FAULT_INJECTION: forcing a failure.
[  944.568849][ T3768] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  944.582247][ T3768] CPU: 0 UID: 0 PID: 3768 Comm: syz.7.10792 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  944.582329][ T3768] Tainted: [W]=WARN
[  944.582339][ T3768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  944.582357][ T3768] Call Trace:
[  944.582365][ T3768]  <TASK>
[  944.582375][ T3768]  __dump_stack+0x1d/0x30
[  944.582414][ T3768]  dump_stack_lvl+0x95/0xd0
[  944.582442][ T3768]  dump_stack+0x15/0x1b
[  944.582468][ T3768]  should_fail_ex+0x265/0x280
[  944.582497][ T3768]  should_fail+0xb/0x20
[  944.582573][ T3768]  should_fail_usercopy+0x1a/0x20
[  944.582604][ T3768]  _copy_from_user+0x1c/0xb0
[  944.582633][ T3768]  __copy_msghdr+0x244/0x300
[  944.582663][ T3768]  ___sys_sendmsg+0x109/0x1d0
[  944.582726][ T3768]  __x64_sys_sendmsg+0xd4/0x160
[  944.582765][ T3768]  x64_sys_call+0x17ba/0x3000
[  944.582797][ T3768]  do_syscall_64+0xca/0x2b0
[  944.582888][ T3768]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  944.582995][ T3768] RIP: 0033:0x7ffa1bf1f749
[  944.583024][ T3768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  944.583049][ T3768] RSP: 002b:00007ffa1a97f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  944.583132][ T3768] RAX: ffffffffffffffda RBX: 00007ffa1c175fa0 RCX: 00007ffa1bf1f749
[  944.583148][ T3768] RDX: 0000000030006041 RSI: 0000200000000000 RDI: 0000000000000003
[  944.583164][ T3768] RBP: 00007ffa1a97f090 R08: 0000000000000000 R09: 0000000000000000
[  944.583179][ T3768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  944.583195][ T3768] R13: 00007ffa1c176038 R14: 00007ffa1c175fa0 R15: 00007ffc914a43f8
[  944.583219][ T3768]  </TASK>
[  944.828979][ T3781] __nla_validate_parse: 3 callbacks suppressed
[  944.828998][ T3781] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10799'.
[  944.847406][ T3781] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10799'.
[  944.926968][ T3791] netlink: 'syz.2.10800': attribute type 1 has an invalid length.
[  944.963378][ T3791] 8021q: adding VLAN 0 to HW filter on device bond7
[  945.013028][ T3798] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10804'.
[  945.019300][ T3788] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10798'.
[  945.031246][ T3788] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10798'.
[  945.248986][ T3814] loop7: detected capacity change from 0 to 1024
[  945.286583][ T3814] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  945.300546][ T3814] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  945.311594][ T3814] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  945.366284][ T3815] wireguard0: entered promiscuous mode
[  945.689805][ T3814] JBD2: no valid journal superblock found
[  945.695710][ T3814] EXT4-fs (loop7): Could not load journal inode
[  945.782900][ T3826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10815'.
[  945.806189][ T3826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10815'.
[  945.837475][   T29] kauditd_printk_skb: 1115 callbacks suppressed
[  945.837494][   T29] audit: type=1326 audit(1768100997.631:39604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.2.10813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f83ff749 code=0x7ffc0000
[  945.878303][   T29] audit: type=1326 audit(1768100997.631:39605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.2.10813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f83ff749 code=0x7ffc0000
[  945.902107][   T29] audit: type=1326 audit(1768100997.631:39606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.2.10813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2f83ff749 code=0x7ffc0000
[  945.925760][   T29] audit: type=1326 audit(1768100997.631:39607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.2.10813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f83ff749 code=0x7ffc0000
[  945.949456][   T29] audit: type=1326 audit(1768100997.631:39608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.2.10813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f83ff749 code=0x7ffc0000
[  945.973203][   T29] audit: type=1326 audit(1768100997.631:39609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.2.10813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2f83ff749 code=0x7ffc0000
[  945.996895][   T29] audit: type=1326 audit(1768100997.631:39610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.2.10813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f83ff749 code=0x7ffc0000
[  946.020581][   T29] audit: type=1326 audit(1768100997.631:39611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.2.10813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f83ff749 code=0x7ffc0000
[  946.044210][   T29] audit: type=1326 audit(1768100997.631:39612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.2.10813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2f83ff749 code=0x7ffc0000
[  946.068052][   T29] audit: type=1326 audit(1768100997.631:39613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.2.10813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f83ff749 code=0x7ffc0000
[  946.140265][ T3834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10816'.
[  946.412808][ T3835] 9p: Bad value for 'rfdno'
[  946.449622][ T3859] netlink: 'syz.1.10824': attribute type 1 has an invalid length.
[  946.482963][ T3859] 8021q: adding VLAN 0 to HW filter on device bond7
[  946.669585][ T3866] wireguard0: entered promiscuous mode
[  947.219821][ T3872] Cannot find del_set index 3 as target
[  947.267148][ T3877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10829'.
[  947.572714][ T3889] lo speed is unknown, defaulting to 1000
[  947.758046][ T3889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10834'.
[  947.776321][ T3889] ip6gre1: entered allmulticast mode
[  948.958570][ T3919] wireguard0: entered promiscuous mode
[  948.970865][ T3932] loop7: detected capacity change from 0 to 1024
[  948.977720][ T3932] EXT4-fs: Ignoring removed orlov option
[  948.991141][ T3921] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  949.076226][ T3932] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  949.129608][ T3944] macsec1: entered promiscuous mode
[  949.136199][ T3944] bridge0: port 3(macsec1) entered blocking state
[  949.142764][ T3944] bridge0: port 3(macsec1) entered disabled state
[  949.149657][ T3944] macsec1: entered allmulticast mode
[  949.156183][ T3944] macsec1: left allmulticast mode
[  949.199669][ T3948] vcan0: tx drop: invalid da for name 0x0000000000000015
[  949.317635][T11959] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  949.325784][T11959] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  949.449186][ T3963] Cannot find add_set index 0 as target
[  949.525970][ T3974] ip6erspan0: entered promiscuous mode
[  949.625863][ T3992] __nla_validate_parse: 13 callbacks suppressed
[  949.625882][ T3992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10874'.
[  949.656312][ T3992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10874'.
[  949.716827][ T3988] loop6: detected capacity change from 0 to 512
[  949.724009][ T3988] ext4: Invalid gid '0x00000000ffffffff'
[  949.731381][ T3988] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  949.731381][ T3988]    program syz.6.10871 not setting count and/or reply_len properly
[  949.816900][ T1306] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  949.946434][ T4014] bridge0: entered promiscuous mode
[  949.951957][ T4014] macsec1: entered promiscuous mode
[  949.958355][ T4014] bridge0: port 3(macsec1) entered blocking state
[  949.964997][ T4014] bridge0: port 3(macsec1) entered disabled state
[  949.973561][ T4014] macsec1: entered allmulticast mode
[  949.979005][ T4014] bridge0: entered allmulticast mode
[  949.985238][ T4014] macsec1: left allmulticast mode
[  949.990375][ T4014] bridge0: left allmulticast mode
[  949.999452][ T4014] bridge0: left promiscuous mode
[  950.008924][ T4015] FAULT_INJECTION: forcing a failure.
[  950.008924][ T4015] name failslab, interval 1, probability 0, space 0, times 0
[  950.021781][ T4015] CPU: 1 UID: 0 PID: 4015 Comm: syz.7.10870 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  950.021827][ T4015] Tainted: [W]=WARN
[  950.021836][ T4015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  950.021853][ T4015] Call Trace:
[  950.021861][ T4015]  <TASK>
[  950.021870][ T4015]  __dump_stack+0x1d/0x30
[  950.021903][ T4015]  dump_stack_lvl+0x95/0xd0
[  950.021941][ T4015]  dump_stack+0x15/0x1b
[  950.021968][ T4015]  should_fail_ex+0x265/0x280
[  950.022013][ T4015]  should_failslab+0x8c/0xb0
[  950.022042][ T4015]  kmem_cache_alloc_noprof+0x69/0x4b0
[  950.022071][ T4015]  ? audit_log_start+0x342/0x720
[  950.022096][ T4015]  audit_log_start+0x342/0x720
[  950.022122][ T4015]  ? kstrtouint+0x76/0xc0
[  950.022168][ T4015]  audit_seccomp+0x48/0x100
[  950.022209][ T4015]  ? __seccomp_filter+0x832/0x1260
[  950.022245][ T4015]  __seccomp_filter+0x843/0x1260
[  950.022330][ T4015]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  950.022366][ T4015]  ? vfs_write+0x7e8/0x960
[  950.022390][ T4015]  ? __rcu_read_unlock+0x4f/0x70
[  950.022477][ T4015]  ? __fget_files+0x184/0x1c0
[  950.022509][ T4015]  __secure_computing+0x82/0x150
[  950.022545][ T4015]  syscall_trace_enter+0xcf/0x1e0
[  950.022578][ T4015]  do_syscall_64+0xa4/0x2b0
[  950.022692][ T4015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  950.022722][ T4015] RIP: 0033:0x7ffa1bf1f749
[  950.022740][ T4015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  950.022881][ T4015] RSP: 002b:00007ffa1a97f038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c
[  950.022907][ T4015] RAX: ffffffffffffffda RBX: 00007ffa1c175fa0 RCX: 00007ffa1bf1f749
[  950.022924][ T4015] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffffffffffffffff
[  950.022942][ T4015] RBP: 00007ffa1a97f090 R08: 0000000000000000 R09: 0000000000000000
[  950.022994][ T4015] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001
[  950.023006][ T4015] R13: 00007ffa1c176038 R14: 00007ffa1c175fa0 R15: 00007ffc914a43f8
[  950.023042][ T4015]  </TASK>
[  950.408935][ T4017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10881'.
[  950.426493][ T4017] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  950.767363][ T4058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10897'.
[  950.778727][   T29] kauditd_printk_skb: 187 callbacks suppressed
[  950.778745][   T29] audit: type=1326 audit(1768101002.817:39799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.2.10896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f83ff749 code=0x7ffc0000
[  950.778937][ T4058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10897'.
[  950.818113][   T29] audit: type=1326 audit(1768101002.817:39800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.2.10896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2f83ff749 code=0x7ffc0000
[  950.841732][   T29] audit: type=1326 audit(1768101002.817:39801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.2.10896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f83ff749 code=0x7ffc0000
[  950.865591][   T29] audit: type=1326 audit(1768101002.817:39802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.2.10896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa2f83ff749 code=0x7ffc0000
[  950.893600][   T29] audit: type=1326 audit(1768101002.817:39803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.2.10896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa2f83ff783 code=0x7ffc0000
[  951.050370][   T29] audit: type=1326 audit(1768101002.891:39804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.2.10896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa2f83fe1ff code=0x7ffc0000
[  951.073996][   T29] audit: type=1326 audit(1768101002.912:39805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.2.10896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa2f83ff7d7 code=0x7ffc0000
[  951.097803][   T29] audit: type=1326 audit(1768101002.943:39806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.2.10896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa2f83fdf90 code=0x7ffc0000
[  951.121659][   T29] audit: type=1326 audit(1768101002.943:39807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.2.10896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa2f83fe3aa code=0x7ffc0000
[  951.145226][   T29] audit: type=1326 audit(1768101002.975:39808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.2.10896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f83ff749 code=0x7ffc0000
[  951.163956][ T4065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10899'.
[  951.193794][ T4065] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  951.303487][ T4079] Cannot find add_set index 0 as target
[  951.306615][ T4082] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10902'.
[  951.318296][ T4082] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10902'.
[  951.607726][ T4093] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10910'.
[  951.630417][ T4093] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  951.673230][ T4110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10915'.
[  951.682865][ T4110] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  951.837475][ T4127] wireguard1: entered promiscuous mode
[  952.330107][ T4143] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  952.648564][ T4183] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  952.839748][ T4202] wireguard0: entered promiscuous mode
[  953.116213][ T4214] loop6: detected capacity change from 0 to 1024
[  953.124920][ T4208] lo speed is unknown, defaulting to 1000
[  953.142833][ T4214] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002]
[  953.162005][ T4214] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  953.268576][ T3388] IPVS: starting estimator thread 0...
[  953.275617][ T4220] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10957: bg 0: block 88: padding at end of block bitmap is not set
[  953.369922][ T4221] IPVS: using max 2112 ests per chain, 105600 per kthread
[  953.426456][ T4224] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  953.524829][ T2763] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  953.582458][ T4246] veth2: entered promiscuous mode
[  953.610489][ T4254] loop6: detected capacity change from 0 to 1024
[  953.617395][ T4254] EXT4-fs: Ignoring removed orlov option
[  953.626217][ T4254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  953.657032][ T3388] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  953.674196][ T3388] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  953.794807][ T4261] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  953.908872][ T4278] loop7: detected capacity change from 0 to 1024
[  953.916753][ T4278] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  953.927013][ T4278] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  953.938046][ T4278] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  953.949219][ T4278] JBD2: no valid journal superblock found
[  953.955024][ T4278] EXT4-fs (loop7): Could not load journal inode
[  953.998679][ T4272] xt_policy: too many policy elements
[  954.016820][ T2763] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  954.139235][ T4301] sg_write: data in/out 1768/10 bytes for SCSI command 0xfe-- guessing data in;
[  954.139235][ T4301]    program syz.7.10989 not setting count and/or reply_len properly
[  954.323905][ T4306] wireguard0: entered promiscuous mode
[  954.518398][ T4313] netlink: 'syz.1.10991': attribute type 1 has an invalid length.
[  954.677237][ T4313] 8021q: adding VLAN 0 to HW filter on device bond8
[  954.752169][ T4322] __nla_validate_parse: 12 callbacks suppressed
[  954.752185][ T4322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10994'.
[  954.767804][ T4322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10994'.
[  954.975886][ T4336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11001'.
[  954.985061][ T4336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11001'.
[  955.000334][ T4337] loop6: detected capacity change from 0 to 1024
[  955.015374][ T4337] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  955.037357][ T4337] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  955.048624][ T4337] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  955.083969][ T4337] JBD2: no valid journal superblock found
[  955.089772][ T4337] EXT4-fs (loop6): Could not load journal inode
[  955.232669][ T4348] netlink: 424 bytes leftover after parsing attributes in process `syz.0.11000'.
[  955.282433][ T4349] sctp: [Deprecated]: syz.2.11003 (pid 4349) Use of struct sctp_assoc_value in delayed_ack socket option.
[  955.282433][ T4349] Use struct sctp_sack_info instead
[  955.374871][ T4346] sctp: [Deprecated]: syz.2.11003 (pid 4346) Use of struct sctp_assoc_value in delayed_ack socket option.
[  955.374871][ T4346] Use struct sctp_sack_info instead
[  955.460747][ T4362] loop6: detected capacity change from 0 to 1024
[  955.472493][ T4362] EXT4-fs: Ignoring removed nobh option
[  955.483493][ T4364] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11011'.
[  955.492667][ T4364] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11011'.
[  955.505249][ T4362] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  955.636148][   T29] kauditd_printk_skb: 257 callbacks suppressed
[  955.636195][   T29] audit: type=1326 audit(1768101007.909:40066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.6.11010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d9d7f749 code=0x7ffc0000
[  955.685990][   T29] audit: type=1326 audit(1768101007.951:40067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.6.11010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d9d7f749 code=0x7ffc0000
[  955.709692][   T29] audit: type=1326 audit(1768101007.951:40068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.6.11010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89d9d7f749 code=0x7ffc0000
[  955.733412][   T29] audit: type=1326 audit(1768101007.951:40069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.6.11010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d9d7f749 code=0x7ffc0000
[  955.757012][   T29] audit: type=1326 audit(1768101007.951:40070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.6.11010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d9d7f749 code=0x7ffc0000
[  955.780650][   T29] audit: type=1326 audit(1768101007.951:40071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.6.11010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89d9d7f749 code=0x7ffc0000
[  955.804382][   T29] audit: type=1326 audit(1768101007.951:40072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.6.11010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d9d7f749 code=0x7ffc0000
[  955.828003][   T29] audit: type=1326 audit(1768101007.951:40073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.6.11010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d9d7f749 code=0x7ffc0000
[  955.851983][   T29] audit: type=1326 audit(1768101007.951:40074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.6.11010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89d9d7f749 code=0x7ffc0000
[  955.875608][   T29] audit: type=1326 audit(1768101007.951:40075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.6.11010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d9d7f749 code=0x7ffc0000
[  955.913816][ T4372] Cannot find add_set index 0 as target
[  955.953974][ T4374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11014'.
[  955.963130][ T4374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11014'.
[  955.973095][ T4362] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.11010: Allocating blocks 497-513 which overlap fs metadata
[  955.987884][ T4362] EXT4-fs (loop6): pa ffff8881076dfa10: logic 256, phys. 385, len 8
[  955.996068][ T4362] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1
[  956.121860][ T4382] vcan0: tx drop: invalid da for name 0x0000000000000015
[  956.289896][ T2763] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  956.356630][ T4404] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11025'.
[  956.467881][ T4399] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  956.526841][ T4415] loop7: detected capacity change from 0 to 1024
[  956.533918][ T4415] EXT4-fs: Ignoring removed orlov option
[  956.547729][ T4415] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  956.612252][ T1306] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  956.625402][ T4428] vcan0: tx drop: invalid da for name 0x0000000000000015
[  956.737060][ T4436] netlink: 'syz.1.11039': attribute type 1 has an invalid length.
[  956.791430][ T4436] 8021q: adding VLAN 0 to HW filter on device bond9
[  956.817330][ T4440] loop6: detected capacity change from 0 to 2048
[  956.875456][ T4440]  loop6: p1 < > p4
[  956.880048][ T4440] loop6: p4 size 8388608 extends beyond EOD, truncated
[  956.935871][ T4444] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  956.953393][ T4446] FAULT_INJECTION: forcing a failure.
[  956.953393][ T4446] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  956.966616][ T4446] CPU: 0 UID: 0 PID: 4446 Comm: syz.6.11041 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  956.966667][ T4446] Tainted: [W]=WARN
[  956.966677][ T4446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  956.966741][ T4446] Call Trace:
[  956.966749][ T4446]  <TASK>
[  956.966757][ T4446]  __dump_stack+0x1d/0x30
[  956.966805][ T4446]  dump_stack_lvl+0x95/0xd0
[  956.966855][ T4446]  dump_stack+0x15/0x1b
[  956.966875][ T4446]  should_fail_ex+0x265/0x280
[  956.966921][ T4446]  should_fail+0xb/0x20
[  956.966953][ T4446]  should_fail_usercopy+0x1a/0x20
[  956.967038][ T4446]  _copy_from_iter+0xcf/0xe70
[  956.967086][ T4446]  ? __alloc_skb+0x396/0x4b0
[  956.967118][ T4446]  ? __alloc_skb+0x228/0x4b0
[  956.967151][ T4446]  netlink_sendmsg+0x471/0x6b0
[  956.967195][ T4446]  ? __pfx_netlink_sendmsg+0x10/0x10
[  956.967238][ T4446]  __sock_sendmsg+0x145/0x180
[  956.967290][ T4446]  ____sys_sendmsg+0x31e/0x4a0
[  956.967329][ T4446]  ___sys_sendmsg+0x17b/0x1d0
[  956.967442][ T4446]  __x64_sys_sendmsg+0xd4/0x160
[  956.967474][ T4446]  x64_sys_call+0x17ba/0x3000
[  956.967503][ T4446]  do_syscall_64+0xca/0x2b0
[  956.967666][ T4446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.967703][ T4446] RIP: 0033:0x7f89d9d7f749
[  956.967723][ T4446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  956.967748][ T4446] RSP: 002b:00007f89d87e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  956.967780][ T4446] RAX: ffffffffffffffda RBX: 00007f89d9fd5fa0 RCX: 00007f89d9d7f749
[  956.967793][ T4446] RDX: 0000000000008044 RSI: 0000200000000440 RDI: 0000000000000004
[  956.967805][ T4446] RBP: 00007f89d87e7090 R08: 0000000000000000 R09: 0000000000000000
[  956.967817][ T4446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  956.967833][ T4446] R13: 00007f89d9fd6038 R14: 00007f89d9fd5fa0 R15: 00007ffd49162d98
[  956.967859][ T4446]  </TASK>
[  957.409141][ T4470] 9p: Unknown access argument 18446744073709551615: -34
[  957.537632][ T4472] macsec1: entered promiscuous mode
[  957.548904][ T4472] bridge0: port 3(macsec1) entered blocking state
[  957.555566][ T4472] bridge0: port 3(macsec1) entered disabled state
[  957.562539][ T4472] macsec1: entered allmulticast mode
[  957.568689][ T4472] macsec1: left allmulticast mode
[  957.582364][ T4475] macsec1: entered promiscuous mode
[  957.588646][ T4475] bridge0: port 3(macsec1) entered blocking state
[  957.595338][ T4475] bridge0: port 3(macsec1) entered disabled state
[  957.602690][ T4475] macsec1: entered allmulticast mode
[  957.618155][ T4475] macsec1: left allmulticast mode
[  957.859546][ T4500] loop6: detected capacity change from 0 to 512
[  957.874489][ T4500] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.11053: iget: bad extra_isize 90 (inode size 256)
[  957.888290][ T4500] EXT4-fs (loop6): Remounting filesystem read-only
[  957.954476][ T4505] wireguard1: entered promiscuous mode
[  958.024790][ T4500] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30)
[  958.074820][ T4500] EXT4-fs (loop6): 1 orphan inode deleted
[  958.114226][ T4500] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  958.170873][ T4512] macsec1: entered promiscuous mode
[  958.182326][ T4500] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  958.206157][ T4512] bridge0: port 3(macsec1) entered blocking state
[  958.212789][ T4512] bridge0: port 3(macsec1) entered disabled state
[  958.292359][ T4512] macsec1: entered allmulticast mode
[  958.335669][ T4512] macsec1: left allmulticast mode
[  958.436737][ T4476] loop7: detected capacity change from 0 to 512
[  958.443457][ T4476] ext4: Invalid gid '0x00000000ffffffff'
[  958.450800][ T4476] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  958.450800][ T4476]    program syz.7.11052 not setting count and/or reply_len properly
[  958.717641][ T4532] vcan0: tx drop: invalid da for name 0x0000000000000015
[  958.801722][ T4540] 9p: Bad value for 'rfdno'
[  958.869338][ T4552] wireguard0: entered promiscuous mode
[  958.928155][ T4549] Cannot find add_set index 0 as target
[  959.539164][ T4583] __nla_validate_parse: 17 callbacks suppressed
[  959.539183][ T4583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11096'.
[  959.631695][ T4585] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11097'.
[  959.640970][ T4585] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11097'.
[  959.796679][ T4592] macsec1: entered promiscuous mode
[  959.803579][ T4592] bridge0: port 3(macsec1) entered blocking state
[  959.810145][ T4592] bridge0: port 3(macsec1) entered disabled state
[  959.848569][ T4596] sctp: [Deprecated]: syz.1.11099 (pid 4596) Use of struct sctp_assoc_value in delayed_ack socket option.
[  959.848569][ T4596] Use struct sctp_sack_info instead
[  959.865642][ T4592] macsec1: entered allmulticast mode
[  959.882934][ T4596] sctp: [Deprecated]: syz.1.11099 (pid 4596) Use of struct sctp_assoc_value in delayed_ack socket option.
[  959.882934][ T4596] Use struct sctp_sack_info instead
[  959.901365][ T4592] macsec1: left allmulticast mode
[  959.988532][ T4603] bridge0: port 3(gretap0) entered blocking state
[  959.995105][ T4603] bridge0: port 3(gretap0) entered disabled state
[  960.002955][ T4603] bridge0: port 3(gretap0) entered blocking state
[  960.009473][ T4603] bridge0: port 3(gretap0) entered forwarding state
[  960.033644][ T4606] vcan0: tx drop: invalid da for name 0x0000000000000015
[  960.097733][ T4614] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) !
[  960.203251][ T4619] wireguard0: entered promiscuous mode
[  960.237458][ T4624] loop7: detected capacity change from 0 to 1024
[  960.280773][ T4624] EXT4-fs: Mount option(s) incompatible with ext2
[  960.290358][ T4624] sctp: [Deprecated]: syz.7.11107 (pid 4624) Use of struct sctp_assoc_value in delayed_ack socket option.
[  960.290358][ T4624] Use struct sctp_sack_info instead
[  960.307267][ T4624] sctp: [Deprecated]: syz.7.11107 (pid 4624) Use of struct sctp_assoc_value in delayed_ack socket option.
[  960.307267][ T4624] Use struct sctp_sack_info instead
[  960.470599][ T4635] netlink: 'syz.0.11113': attribute type 1 has an invalid length.
[  960.489600][ T4635] 8021q: adding VLAN 0 to HW filter on device bond5
[  960.537545][ T4640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11115'.
[  960.637450][ T4650] netlink: '+}[@': attribute type 30 has an invalid length.
[  960.745330][   T29] kauditd_printk_skb: 221 callbacks suppressed
[  960.745350][   T29] audit: type=1326 audit(1768101013.284:40297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.1.11122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28125f749 code=0x7ffc0000
[  960.826517][   T29] audit: type=1326 audit(1768101013.284:40298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.1.11122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa28125f749 code=0x7ffc0000
[  960.850285][   T29] audit: type=1326 audit(1768101013.284:40299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.1.11122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28125f749 code=0x7ffc0000
[  960.874218][   T29] audit: type=1326 audit(1768101013.284:40300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.1.11122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa28125f749 code=0x7ffc0000
[  960.898128][   T29] audit: type=1326 audit(1768101013.284:40301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.1.11122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa28125f783 code=0x7ffc0000
[  960.922046][   T29] audit: type=1326 audit(1768101013.294:40302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.1.11122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa28125e1ff code=0x7ffc0000
[  960.945957][   T29] audit: type=1326 audit(1768101013.294:40303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.1.11122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa28125f7d7 code=0x7ffc0000
[  960.969508][   T29] audit: type=1326 audit(1768101013.315:40304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.1.11122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa28125df90 code=0x7ffc0000
[  960.993174][   T29] audit: type=1326 audit(1768101013.315:40305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.1.11122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa28125e3aa code=0x7ffc0000
[  961.016696][   T29] audit: type=1326 audit(1768101013.315:40306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.1.11122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28125f749 code=0x7ffc0000
[  961.109147][ T4670] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11128'.
[  961.175765][ T4668] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11127'.
[  961.184905][ T4668] openvswitch: netlink: Flow actions attr not present in new flow.
[  961.308787][ T4682] loop6: detected capacity change from 0 to 1024
[  961.318715][ T4682] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  961.333973][ T4682] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  961.344994][ T4682] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  961.355847][ T4682] JBD2: no valid journal superblock found
[  961.361762][ T4682] EXT4-fs (loop6): Could not load journal inode
[  961.564148][ T4699] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11139'.
[  961.577827][ T4699] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  961.594681][ T4709] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11143'.
[  961.621477][ T4710] loop6: detected capacity change from 0 to 512
[  961.655970][ T4710] ext4: Invalid gid '0x00000000ffffffff'
[  961.670648][ T4701] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  961.670648][ T4701]    program syz.6.11141 not setting count and/or reply_len properly
[  961.688635][ T4714] 9p: Bad value for 'rfdno'
[  961.837344][ T4725] loop6: detected capacity change from 0 to 1024
[  961.844230][ T4725] EXT4-fs: Ignoring removed orlov option
[  961.853098][ T4725] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  961.877097][T11956] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  961.885248][T11956] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  961.906310][ T4699] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  961.918422][ T4731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11148'.
[  961.930962][ T4731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11148'.
[  961.945268][ T2763] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  961.981133][ T2763] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  962.095372][ T3982] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  962.117174][ T4699] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.145360][ T4740] 9p: Bad value for 'rfdno'
[  962.258683][ T4699] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.277675][ T5241] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.326179][T23605] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  962.345053][ T5241] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.424904][ T4759] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  962.447724][ T5241] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.478261][ T5241] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.512937][T23600] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  962.525575][T23600] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  962.571435][ T5241] bridge_slave_1: left allmulticast mode
[  962.577228][ T5241] bridge_slave_1: left promiscuous mode
[  962.583005][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state
[  962.597939][ T5241] bridge_slave_0: left allmulticast mode
[  962.603801][ T5241] bridge_slave_0: left promiscuous mode
[  962.609629][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state
[  962.726900][ T5241] ip6gretap0 (unregistering): left promiscuous mode
[  962.827501][ T5241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  962.849509][ T5241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  962.865344][ T5241] bond0 (unregistering): Released all slaves
[  962.927957][ T4758] lo speed is unknown, defaulting to 1000
[  962.972940][ T6386] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  962.999093][ T5241] team0: left promiscuous mode
[  963.004108][ T5241] team_slave_0: left promiscuous mode
[  963.009718][ T5241] team_slave_1: left promiscuous mode
[  963.023678][ T5241] hsr_slave_0: left promiscuous mode
[  963.029838][ T5241] hsr_slave_1: left promiscuous mode
[  963.035939][ T5241] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  963.043473][ T5241] batman_adv: batadv0: Removing interface: batadv_slave_0
[  963.051847][ T5241] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  963.059494][ T5241] batman_adv: batadv0: Removing interface: batadv_slave_1
[  963.071932][ T5241] veth1_macvtap: left promiscuous mode
[  963.077846][ T5241] veth0_macvtap: left promiscuous mode
[  963.083440][ T5241] veth1_vlan: left promiscuous mode
[  963.089710][ T5241] veth0_vlan: left promiscuous mode
[  963.161988][ T4803] 9p: Bad value for 'rfdno'
[  963.211314][ T5241] team0 (unregistering): Port device team_slave_1 removed
[  963.222858][ T5241] team0 (unregistering): Port device team_slave_0 removed
[  963.292776][ T4810] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  963.320377][ T4758] chnl_net:caif_netlink_parms(): no params data found
[  963.392842][ T4758] bridge0: port 1(bridge_slave_0) entered blocking state
[  963.400221][ T4758] bridge0: port 1(bridge_slave_0) entered disabled state
[  963.407434][ T4758] bridge_slave_0: entered allmulticast mode
[  963.414271][ T4758] bridge_slave_0: entered promiscuous mode
[  963.421521][ T4758] bridge0: port 2(bridge_slave_1) entered blocking state
[  963.428613][ T4758] bridge0: port 2(bridge_slave_1) entered disabled state
[  963.436050][ T4758] bridge_slave_1: entered allmulticast mode
[  963.443047][ T4758] bridge_slave_1: entered promiscuous mode
[  963.471355][ T4758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  963.483711][ T4827] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  963.506198][ T4831] loop7: detected capacity change from 0 to 1024
[  963.514812][ T4758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  963.527228][ T5241] IPVS: stop unused estimator thread 0...
[  963.555501][ T4827] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  963.565588][ T4831] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  963.577615][ T4831] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  963.580160][ T4758] team0: Port device team_slave_0 added
[  963.588553][ T4831] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  963.605614][ T4831] JBD2: no valid journal superblock found
[  963.611420][ T4831] EXT4-fs (loop7): Could not load journal inode
[  963.622197][ T4758] team0: Port device team_slave_1 added
[  963.638978][ T4827] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  963.674772][ T4758] batman_adv: batadv0: Adding interface: batadv_slave_0
[  963.682292][ T4758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  963.708376][ T4758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  963.722893][ T4758] batman_adv: batadv0: Adding interface: batadv_slave_1
[  963.729952][ T4758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  963.755985][ T4758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  963.769389][ T4827] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  963.803216][ T4758] hsr_slave_0: entered promiscuous mode
[  963.810151][ T4758] hsr_slave_1: entered promiscuous mode
[  963.817374][ T4758] debugfs: 'hsr0' already exists in 'hsr'
[  963.823166][ T4758] Cannot create hsr debugfs directory
[  963.840408][ T3153] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  963.854255][ T3153] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  963.880862][ T3153] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  963.905331][ T3153] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  964.000556][ T4758] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  964.027018][ T4856] 9p: Bad value for 'rfdno'
[  964.030019][ T4758] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  964.044652][ T4758] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  964.056249][ T4758] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  964.105232][ T4758] bridge0: port 2(bridge_slave_1) entered blocking state
[  964.112436][ T4758] bridge0: port 2(bridge_slave_1) entered forwarding state
[  964.119846][ T4758] bridge0: port 1(bridge_slave_0) entered blocking state
[  964.127040][ T4758] bridge0: port 1(bridge_slave_0) entered forwarding state
[  964.169332][ T4758] 8021q: adding VLAN 0 to HW filter on device bond0
[  964.183501][ T3153] bridge0: port 1(bridge_slave_0) entered disabled state
[  964.196967][ T3153] bridge0: port 2(bridge_slave_1) entered disabled state
[  964.210267][ T4874] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  964.230735][ T4758] 8021q: adding VLAN 0 to HW filter on device team0
[  964.242601][ T6716] bridge0: port 1(bridge_slave_0) entered blocking state
[  964.250041][ T6716] bridge0: port 1(bridge_slave_0) entered forwarding state
[  964.263019][ T6716] bridge0: port 2(bridge_slave_1) entered blocking state
[  964.270249][ T6716] bridge0: port 2(bridge_slave_1) entered forwarding state
[  964.302603][ T4758] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  964.313193][ T4758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  964.516561][ T4758] 8021q: adding VLAN 0 to HW filter on device batadv0
[  964.697407][ T4909] __nla_validate_parse: 10 callbacks suppressed
[  964.697428][ T4909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11211'.
[  964.733402][ T4909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11211'.
[  964.930389][ T4758] veth0_vlan: entered promiscuous mode
[  964.959042][ T4758] veth1_vlan: entered promiscuous mode
[  965.000709][ T4758] veth0_macvtap: entered promiscuous mode
[  965.018602][ T4758] veth1_macvtap: entered promiscuous mode
[  965.048350][ T4758] batman_adv: batadv0: Interface activated: batadv_slave_0
[  965.070900][ T4758] batman_adv: batadv0: Interface activated: batadv_slave_1
[  965.094755][   T52] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  965.126498][   T52] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  965.152906][   T52] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  965.161794][   T52] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  965.218922][ T4924] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11163'.
[  965.228115][ T4924] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11163'.
[  965.268518][ T4924] bond0: entered promiscuous mode
[  965.273658][ T4924] bond_slave_0: entered promiscuous mode
[  965.279435][ T4924] bond_slave_1: entered promiscuous mode
[  965.297352][ T4924] syz_tun: entered promiscuous mode
[  965.305123][ T4924] debugfs: 'hsr1' already exists in 'hsr'
[  965.310966][ T4924] Cannot create hsr debugfs directory
[  965.414879][ T4932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11217'.
[  965.519512][ T4939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11220'.
[  965.537992][ T4939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11220'.
[  965.642308][   T29] kauditd_printk_skb: 238 callbacks suppressed
[  965.642326][   T29] audit: type=1400 audit(1768101018.428:40545): avc:  denied  { connect } for  pid=4945 comm="syz.8.11223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  965.832049][   T29] audit: type=1326 audit(1768101018.627:40546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4949 comm="syz.0.11225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ce6f749 code=0x7ffc0000
[  965.896338][ T4955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11227'.
[  965.905460][ T4955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11227'.
[  965.914684][   T29] audit: type=1326 audit(1768101018.648:40547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4949 comm="syz.0.11225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff79ce6f749 code=0x7ffc0000
[  965.938420][   T29] audit: type=1326 audit(1768101018.648:40548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4949 comm="syz.0.11225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ce6f749 code=0x7ffc0000
[  965.962165][   T29] audit: type=1326 audit(1768101018.648:40549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4949 comm="syz.0.11225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff79ce6df90 code=0x7ffc0000
[  965.985879][   T29] audit: type=1326 audit(1768101018.648:40550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4949 comm="syz.0.11225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff79ce6df90 code=0x7ffc0000
[  966.009602][   T29] audit: type=1326 audit(1768101018.648:40551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4949 comm="syz.0.11225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ce6f749 code=0x7ffc0000
[  966.033221][   T29] audit: type=1326 audit(1768101018.648:40552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4949 comm="syz.0.11225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7ff79ce6f749 code=0x7ffc0000
[  966.056866][   T29] audit: type=1326 audit(1768101018.648:40553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4949 comm="syz.0.11225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ce6f749 code=0x7ffc0000
[  966.080505][   T29] audit: type=1326 audit(1768101018.648:40554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4949 comm="syz.0.11225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7ff79ce6f749 code=0x7ffc0000
[  966.088585][ T4956] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  966.174129][ T4956] bridge0: port 3(batadv1) entered blocking state
[  966.180631][ T4956] bridge0: port 3(batadv1) entered disabled state
[  966.226090][ T4946] loop8: detected capacity change from 0 to 32768
[  966.232850][ T4956] batadv1: entered allmulticast mode
[  966.249025][ T4956] batadv1: entered promiscuous mode
[  966.297786][ T4946]  loop8: p1 p3 < p5 p6 >
[  966.302219][ T4946] loop8: partition table partially beyond EOD, truncated
[  966.348714][ T4962] Cannot find del_set index 3 as target
[  966.357562][ T4874] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  966.388472][ T4964] loop7: detected capacity change from 0 to 1024
[  966.402837][ T4964] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  966.418460][ T4964] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  966.429625][ T4964] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  966.450698][ T4964] JBD2: no valid journal superblock found
[  966.456502][ T4964] EXT4-fs (loop7): Could not load journal inode
[  966.469275][ T4874] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  966.539373][ T4977] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11236'.
[  966.539643][ T4874] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  966.565358][ T4978] wireguard0: entered promiscuous mode
[  966.602475][ T4985] loop7: detected capacity change from 0 to 1024
[  966.609791][ T4985] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  966.620126][ T4985] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  966.631195][ T4985] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  966.640885][ T6716] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  966.650432][ T6716] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  966.663489][ T4985] JBD2: no valid journal superblock found
[  966.669394][ T4985] EXT4-fs (loop7): Could not load journal inode
[  966.696756][ T4987] wireguard0: entered promiscuous mode
[  966.855666][ T4998] Cannot find del_set index 3 as target
[  966.940940][ T5002] loop7: detected capacity change from 0 to 8192
[  966.949129][ T5002] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  966.960368][ T5002] FAULT_INJECTION: forcing a failure.
[  966.960368][ T5002] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  966.973593][ T5002] CPU: 1 UID: 0 PID: 5002 Comm: syz.7.11244 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  966.973669][ T5002] Tainted: [W]=WARN
[  966.973679][ T5002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  966.973695][ T5002] Call Trace:
[  966.973705][ T5002]  <TASK>
[  966.973716][ T5002]  __dump_stack+0x1d/0x30
[  966.973743][ T5002]  dump_stack_lvl+0x95/0xd0
[  966.973764][ T5002]  dump_stack+0x15/0x1b
[  966.973853][ T5002]  should_fail_ex+0x265/0x280
[  966.973877][ T5002]  should_fail+0xb/0x20
[  966.973899][ T5002]  should_fail_usercopy+0x1a/0x20
[  966.973977][ T5002]  strncpy_from_user+0x27/0x260
[  966.974083][ T5002]  getname_flags+0xae/0x3b0
[  966.974115][ T5002]  do_sys_openat2+0x60/0x150
[  966.974154][ T5002]  __x64_sys_open+0xe6/0x110
[  966.974189][ T5002]  x64_sys_call+0x166f/0x3000
[  966.974218][ T5002]  do_syscall_64+0xca/0x2b0
[  966.974260][ T5002]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  966.974362][ T5002] RIP: 0033:0x7ffa1bf1f749
[  966.974382][ T5002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  966.974405][ T5002] RSP: 002b:00007ffa1a97f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  966.974496][ T5002] RAX: ffffffffffffffda RBX: 00007ffa1c175fa0 RCX: 00007ffa1bf1f749
[  966.974513][ T5002] RDX: 0000000000000000 RSI: 0000000000145142 RDI: 0000200000000240
[  966.974530][ T5002] RBP: 00007ffa1a97f090 R08: 0000000000000000 R09: 0000000000000000
[  966.974549][ T5002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  966.974561][ T5002] R13: 00007ffa1c176038 R14: 00007ffa1c175fa0 R15: 00007ffc914a43f8
[  966.974586][ T5002]  </TASK>
[  967.205310][ T5010] loop7: detected capacity change from 0 to 512
[  967.212741][ T5010] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  967.230406][ T5010] EXT4-fs (loop7): too many log groups per flexible block group
[  967.238645][ T5010] EXT4-fs (loop7): failed to initialize mballoc (-12)
[  967.245867][ T5010] EXT4-fs (loop7): mount failed
[  967.267819][ T5010] vlan2: entered promiscuous mode
[  967.273079][ T5010] vlan2: entered allmulticast mode
[  967.278268][ T5010] hsr_slave_1: entered allmulticast mode
[  967.383839][ T5015] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5015 comm=syz.1.11249
[  967.546609][ T5033] wireguard1: entered promiscuous mode
[  967.714951][ T5037] sctp: [Deprecated]: syz.0.11256 (pid 5037) Use of struct sctp_assoc_value in delayed_ack socket option.
[  967.714951][ T5037] Use struct sctp_sack_info instead
[  967.731884][ T5037] sctp: [Deprecated]: syz.0.11256 (pid 5037) Use of struct sctp_assoc_value in delayed_ack socket option.
[  967.731884][ T5037] Use struct sctp_sack_info instead
[  967.748481][ T5052] unsupported nla_type 52263
[  967.801271][ T5061] loop8: detected capacity change from 0 to 1024
[  967.808603][ T5061] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  967.819008][ T5061] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  967.830065][ T5061] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  967.840689][ T5061] JBD2: no valid journal superblock found
[  967.846480][ T5061] EXT4-fs (loop8): Could not load journal inode
[  968.027159][ T5071] loop8: detected capacity change from 0 to 512
[  968.034216][ T5071] ext4: Invalid gid '0x00000000ffffffff'
[  968.041947][ T5071] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  968.041947][ T5071]    program syz.8.11273 not setting count and/or reply_len properly
[  968.245290][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  968.263178][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  968.293099][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  968.305541][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  968.343192][ T5090] 9p: Bad value for 'rfdno'
[  968.383042][ T5091] loop8: detected capacity change from 0 to 1024
[  968.390336][ T5091] EXT4-fs: Mount option(s) incompatible with ext2
[  968.429532][ T5091] sctp: [Deprecated]: syz.8.11277 (pid 5091) Use of struct sctp_assoc_value in delayed_ack socket option.
[  968.429532][ T5091] Use struct sctp_sack_info instead
[  968.474710][ T5091] sctp: [Deprecated]: syz.8.11277 (pid 5091) Use of struct sctp_assoc_value in delayed_ack socket option.
[  968.474710][ T5091] Use struct sctp_sack_info instead
[  968.559462][ T5107] Cannot find del_set index 3 as target
[  968.692539][ T5116] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  968.706308][ T5124] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub
[  968.722546][ T5124] option changes via remount are deprecated (pid=5123 comm=syz.7.11294)
[  968.731187][ T5124] cgroup: option or name mismatch, new: 0x0 "nofavordynmods", old: 0x0 ""
[  968.774446][ T5116] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  968.851001][ T5116] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  968.896445][ T5137] Cannot find del_set index 3 as target
[  968.907653][ T5116] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  968.955735][ T6386] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  968.971020][ T6386] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  968.985246][ T6386] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  969.005812][ T6386] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  969.091782][ T5150] SELinux: failed to load policy
[  969.321132][ T5170] 9p: Bad value for 'rfdno'
[  969.396280][ T5177] program syz.8.11318 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  969.457485][ T5181] syz_tun: refused to change device tx_queue_len
[  969.497570][ T5185] __nla_validate_parse: 26 callbacks suppressed
[  969.497587][ T5185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11321'.
[  969.517412][ T5185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5185 comm=syz.0.11321
[  969.637738][ T5187] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11322'.
[  969.672926][ T5187] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  969.793153][ T5200] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11328'.
[  969.802648][ T5200] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11328'.
[  969.847550][ T5204] 9p: Bad value for 'rfdno'
[  969.910328][ T5209] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[  969.918642][ T5209] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[  969.987176][ T5209] loop8: detected capacity change from 0 to 512
[  969.996222][ T5209] ext4: block size(8192) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE
[  970.006611][ T5209] EXT4-fs (loop8): bad block size 8192
[  970.056310][ T5217] loop8: detected capacity change from 0 to 1024
[  970.064075][ T5217] EXT4-fs: Ignoring removed nobh option
[  970.081599][ T5217] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  970.109640][ T5223] wireguard0: entered promiscuous mode
[  970.332624][ T5237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11340'.
[  970.410919][   T29] kauditd_printk_skb: 740 callbacks suppressed
[  970.410937][   T29] audit: type=1326 audit(1768101023.435:41295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.2.11340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa2f8432005 code=0x7ffc0000
[  970.444966][   T29] audit: type=1326 audit(1768101023.467:41296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.2.11340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa2f8432005 code=0x7ffc0000
[  970.468787][   T29] audit: type=1326 audit(1768101023.467:41297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.2.11340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa2f83f65e7 code=0x7ffc0000
[  970.492465][   T29] audit: type=1326 audit(1768101023.467:41298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.2.11340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa2f839b829 code=0x7ffc0000
[  970.516048][   T29] audit: type=1326 audit(1768101023.467:41299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.2.11340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f83ff749 code=0x7ffc0000
[  970.539674][   T29] audit: type=1326 audit(1768101023.467:41300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.2.11340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa2f8432005 code=0x7ffc0000
[  970.563703][   T29] audit: type=1326 audit(1768101023.467:41301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.2.11340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa2f8432005 code=0x7ffc0000
[  970.587589][   T29] audit: type=1326 audit(1768101023.467:41302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.2.11340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa2f8432005 code=0x7ffc0000
[  970.619080][   T29] audit: type=1326 audit(1768101023.498:41303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5215 comm="syz.8.11333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a989bf749 code=0x7ffc0000
[  970.642811][   T29] audit: type=1326 audit(1768101023.498:41304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5215 comm="syz.8.11333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a989bf749 code=0x7ffc0000
[  970.702001][ T5254] Cannot find del_set index 3 as target
[  970.726496][ T5256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11346'.
[  970.749640][ T4758] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  970.764428][ T5258] 9p: Bad value for 'rfdno'
[  970.776552][ T5260] netlink: 72 bytes leftover after parsing attributes in process `syz.8.11348'.
[  970.785992][ T5260] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11348'.
[  970.828302][ T5264] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  970.861947][ T5270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11353'.
[  970.871318][ T5264] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  970.882282][ T5264] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  970.900023][ T5264] JBD2: no valid journal superblock found
[  970.901960][ T5270] macsec1: entered promiscuous mode
[  970.905934][ T5264] EXT4-fs (loop8): Could not load journal inode
[  970.973188][ T5280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11357'.
[  971.011001][ T5285] lo: left promiscuous mode
[  971.017007][ T5285] tunl0: left promiscuous mode
[  971.023291][ T5285] gre0: left promiscuous mode
[  971.031039][ T5285] bridge0: port 3(gretap0) entered disabled state
[  971.040051][ T5285] erspan0: left promiscuous mode
[  971.047387][ T5285] ip_vti0: left promiscuous mode
[  971.054482][ T5285] ip6_vti0: left promiscuous mode
[  971.065123][ T5285] sit0: left promiscuous mode
[  971.071759][ T5285] ip6tnl0: left promiscuous mode
[  971.078403][ T5285] ip6gre0: left promiscuous mode
[  971.102870][ T5285] syz_tun: left promiscuous mode
[  971.112396][ T5285] vcan0: left promiscuous mode
[  971.122725][ T5285] team0: left promiscuous mode
[  971.127686][ T5285] team_slave_0: left promiscuous mode
[  971.133262][ T5285] team_slave_1: left promiscuous mode
[  971.142659][ T5285] dummy0: left promiscuous mode
[  971.149773][ T5285] nlmon0: left promiscuous mode
[  971.156449][ T5285] caif0: left promiscuous mode
[  971.171313][ T5285] bridge0: port 1(bridge_slave_0) entered disabled state
[  971.181964][ T5285] bridge0: port 2(bridge_slave_1) entered disabled state
[  971.229379][ T5285] bond1: left promiscuous mode
[  971.255257][ T5285] macsec1: left promiscuous mode
[  971.302132][ T5274] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65363 sclass=netlink_audit_socket pid=5274 comm=syz.7.11355
[  971.352633][ T5301] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  971.370700][ T5292] set_capacity_and_notify: 1 callbacks suppressed
[  971.370720][ T5292] loop8: detected capacity change from 0 to 128
[  971.388791][ T5292] FAULT_INJECTION: forcing a failure.
[  971.388791][ T5292] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  971.402744][ T5292] CPU: 1 UID: 0 PID: 5292 Comm: syz.8.11361 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  971.402795][ T5292] Tainted: [W]=WARN
[  971.402804][ T5292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  971.402820][ T5292] Call Trace:
[  971.402828][ T5292]  <TASK>
[  971.402838][ T5292]  __dump_stack+0x1d/0x30
[  971.402866][ T5292]  dump_stack_lvl+0x95/0xd0
[  971.402923][ T5292]  dump_stack+0x15/0x1b
[  971.402949][ T5292]  should_fail_ex+0x265/0x280
[  971.402976][ T5292]  should_fail_alloc_page+0xf2/0x100
[  971.403006][ T5292]  __alloc_frozen_pages_noprof+0x109/0x360
[  971.403250][ T5292]  alloc_pages_mpol+0xb3/0x260
[  971.403360][ T5292]  folio_alloc_mpol_noprof+0x39/0x80
[  971.403405][ T5292]  shmem_get_folio_gfp+0x3cf/0xd50
[  971.403436][ T5292]  shmem_fault+0xf6/0x250
[  971.403462][ T5292]  __do_fault+0xbc/0x200
[  971.403496][ T5292]  handle_mm_fault+0xd9c/0x2c60
[  971.403528][ T5292]  ? mt_find+0x21b/0x330
[  971.403764][ T5292]  do_user_addr_fault+0x3fe/0x1080
[  971.403797][ T5292]  exc_page_fault+0x62/0xa0
[  971.403927][ T5292]  asm_exc_page_fault+0x26/0x30
[  971.403963][ T5292] RIP: 0010:__put_user_1+0xd/0x20
[  971.403992][ T5292] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <88> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90
[  971.404009][ T5292] RSP: 0018:ffffc9000220fc48 EFLAGS: 00050206
[  971.404023][ T5292] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000010aa
[  971.404035][ T5292] RDX: 00000000000000f0 RSI: 0000000000000000 RDI: ffffc9000220fe38
[  971.404123][ T5292] RBP: 0000000000000001 R08: 0001c9000220fe3b R09: 0000000000000000
[  971.404134][ T5292] R10: 0000000000000002 R11: ffffffff81be99a0 R12: 0000000000000001
[  971.404145][ T5292] R13: 0000200000000f80 R14: ffffc9000220fe38 R15: ffffffff864acdd3
[  971.404159][ T5292]  ? __pfx_fat_ioctl_filldir+0x10/0x10
[  971.404225][ T5292]  fat_ioctl_filldir+0x8f/0x400
[  971.404242][ T5292]  ? __pfx_fat_ioctl_filldir+0x10/0x10
[  971.404286][ T5292]  __fat_readdir+0x1cb/0xd80
[  971.404308][ T5292]  ? ioctl_has_perm+0x255/0x2a0
[  971.404339][ T5292]  ? do_vfs_ioctl+0x7b0/0xe10
[  971.404455][ T5292]  fat_dir_ioctl+0x14b/0x1d0
[  971.404509][ T5292]  ? __pfx_fat_ioctl_filldir+0x10/0x10
[  971.404535][ T5292]  ? __pfx_fat_dir_ioctl+0x10/0x10
[  971.404565][ T5292]  __se_sys_ioctl+0xce/0x140
[  971.404598][ T5292]  __x64_sys_ioctl+0x43/0x50
[  971.404626][ T5292]  x64_sys_call+0x14b0/0x3000
[  971.404651][ T5292]  do_syscall_64+0xca/0x2b0
[  971.404736][ T5292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  971.404756][ T5292] RIP: 0033:0x7f7a989bf749
[  971.404771][ T5292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  971.404836][ T5292] RSP: 002b:00007f7a97427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  971.404853][ T5292] RAX: ffffffffffffffda RBX: 00007f7a98c15fa0 RCX: 00007f7a989bf749
[  971.404864][ T5292] RDX: 0000200000000f80 RSI: 0000000082307201 RDI: 0000000000000006
[  971.404876][ T5292] RBP: 00007f7a97427090 R08: 0000000000000000 R09: 0000000000000000
[  971.404957][ T5292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  971.404969][ T5292] R13: 00007f7a98c16038 R14: 00007f7a98c15fa0 R15: 00007ffef50b09c8
[  971.405031][ T5292]  </TASK>
[  971.755736][ T5301] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  971.825695][ T5301] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  971.842252][ T5309] wireguard0: entered promiscuous mode
[  971.870477][ T5301] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  971.976614][ T2319] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  971.989791][ T2319] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  972.029253][ T2319] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  972.044272][ T2319] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  972.073601][ T5322] loop7: detected capacity change from 0 to 1024
[  972.082082][ T5322] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  972.095611][ T5322] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  972.106707][ T5322] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  972.127612][ T5322] JBD2: no valid journal superblock found
[  972.133433][ T5322] EXT4-fs (loop7): Could not load journal inode
[  972.339398][ T5342] FAULT_INJECTION: forcing a failure.
[  972.339398][ T5342] name failslab, interval 1, probability 0, space 0, times 0
[  972.352194][ T5342] CPU: 1 UID: 0 PID: 5342 Comm: syz.7.11380 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  972.352269][ T5342] Tainted: [W]=WARN
[  972.352279][ T5342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  972.352295][ T5342] Call Trace:
[  972.352302][ T5342]  <TASK>
[  972.352311][ T5342]  __dump_stack+0x1d/0x30
[  972.352413][ T5342]  dump_stack_lvl+0x95/0xd0
[  972.352443][ T5342]  dump_stack+0x15/0x1b
[  972.352470][ T5342]  should_fail_ex+0x265/0x280
[  972.352494][ T5342]  should_failslab+0x8c/0xb0
[  972.352516][ T5342]  kmem_cache_alloc_noprof+0x69/0x4b0
[  972.352605][ T5342]  ? ioctx_alloc+0xe4/0x4c0
[  972.352635][ T5342]  ioctx_alloc+0xe4/0x4c0
[  972.352667][ T5342]  __se_sys_io_setup+0x6b/0x1b0
[  972.352700][ T5342]  __x64_sys_io_setup+0x31/0x40
[  972.352757][ T5342]  x64_sys_call+0x2a8e/0x3000
[  972.352785][ T5342]  do_syscall_64+0xca/0x2b0
[  972.352832][ T5342]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  972.352893][ T5342] RIP: 0033:0x7ffa1bf1f749
[  972.352914][ T5342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  972.352939][ T5342] RSP: 002b:00007ffa1a97f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  972.352965][ T5342] RAX: ffffffffffffffda RBX: 00007ffa1c175fa0 RCX: 00007ffa1bf1f749
[  972.352981][ T5342] RDX: 0000000000000000 RSI: 0000200000002400 RDI: 00000000000008f0
[  972.353049][ T5342] RBP: 00007ffa1a97f090 R08: 0000000000000000 R09: 0000000000000000
[  972.353064][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  972.353080][ T5342] R13: 00007ffa1c176038 R14: 00007ffa1c175fa0 R15: 00007ffc914a43f8
[  972.353107][ T5342]  </TASK>
[  972.752802][ T5357] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  972.791657][ T5359] loop8: detected capacity change from 0 to 512
[  972.800875][ T5359] EXT4-fs: Ignoring removed oldalloc option
[  972.807114][ T5359] EXT4-fs: Ignoring removed i_version option
[  972.813266][ T5359] EXT4-fs: Ignoring removed nomblk_io_submit option
[  972.820260][ T5359] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  972.836194][ T5359] EXT4-fs (loop8): 1 truncate cleaned up
[  972.842768][ T5359] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  972.856016][ T5359] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  972.872313][ T5365] macsec1: entered promiscuous mode
[  972.957668][ T5373] loop7: detected capacity change from 0 to 1024
[  972.964519][ T5373] EXT4-fs: Ignoring removed orlov option
[  972.972332][ T5373] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  972.995919][T11956] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  973.003964][T11956] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  973.227499][ T1306] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  973.332921][ T5402] Cannot find add_set index 0 as target
[  973.357692][ T5405] Cannot find del_set index 3 as target
[  973.456119][ T5409] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  973.522988][ T5418] loop7: detected capacity change from 0 to 1024
[  973.531330][ T5418] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  973.571998][ T5427] FAULT_INJECTION: forcing a failure.
[  973.571998][ T5427] name failslab, interval 1, probability 0, space 0, times 0
[  973.584964][ T5427] CPU: 1 UID: 0 PID: 5427 Comm: syz.8.11415 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  973.585029][ T5427] Tainted: [W]=WARN
[  973.585037][ T5427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  973.585049][ T5427] Call Trace:
[  973.585056][ T5427]  <TASK>
[  973.585065][ T5427]  __dump_stack+0x1d/0x30
[  973.585090][ T5427]  dump_stack_lvl+0x95/0xd0
[  973.585174][ T5427]  dump_stack+0x15/0x1b
[  973.585198][ T5427]  should_fail_ex+0x265/0x280
[  973.585228][ T5427]  should_failslab+0x8c/0xb0
[  973.585315][ T5427]  kmem_cache_alloc_noprof+0x69/0x4b0
[  973.585359][ T5427]  ? ioctx_alloc+0xe4/0x4c0
[  973.585396][ T5427]  ioctx_alloc+0xe4/0x4c0
[  973.585426][ T5427]  __se_sys_io_setup+0x6b/0x1b0
[  973.585501][ T5427]  __x64_sys_io_setup+0x31/0x40
[  973.585553][ T5427]  x64_sys_call+0x2a8e/0x3000
[  973.585586][ T5427]  do_syscall_64+0xca/0x2b0
[  973.585632][ T5427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  973.585654][ T5427] RIP: 0033:0x7f7a989bf749
[  973.585712][ T5427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  973.585735][ T5427] RSP: 002b:00007f7a97427038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  973.585759][ T5427] RAX: ffffffffffffffda RBX: 00007f7a98c15fa0 RCX: 00007f7a989bf749
[  973.585774][ T5427] RDX: 0000000000000000 RSI: 0000200000002400 RDI: 00000000000008f0
[  973.585789][ T5427] RBP: 00007f7a97427090 R08: 0000000000000000 R09: 0000000000000000
[  973.585805][ T5427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  973.585881][ T5427] R13: 00007f7a98c16038 R14: 00007f7a98c15fa0 R15: 00007ffef50b09c8
[  973.585912][ T5427]  </TASK>
[  973.765329][ T5418] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  973.776367][ T5418] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  973.787684][ T5418] JBD2: no valid journal superblock found
[  973.793522][ T5418] EXT4-fs (loop7): Could not load journal inode
[  974.190241][ T5450] loop8: detected capacity change from 0 to 512
[  974.198673][ T5450] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  974.223216][ T5450] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  974.237212][ T5450] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  974.293421][ T5450] __nla_validate_parse: 12 callbacks suppressed
[  974.293437][ T5450] netlink: 68 bytes leftover after parsing attributes in process `syz.8.11424'.
[  974.318232][ T5450] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  974.341533][ T5471] loop7: detected capacity change from 0 to 1024
[  974.348896][ T5471] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  974.359418][ T5471] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  974.370458][ T5471] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  974.384734][ T5450] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  974.395850][ T5471] JBD2: no valid journal superblock found
[  974.401636][ T5471] EXT4-fs (loop7): Could not load journal inode
[  974.405563][ T5473] sctp: [Deprecated]: syz.1.11430 (pid 5473) Use of struct sctp_assoc_value in delayed_ack socket option.
[  974.405563][ T5473] Use struct sctp_sack_info instead
[  974.424718][ T5473] sctp: [Deprecated]: syz.1.11430 (pid 5473) Use of struct sctp_assoc_value in delayed_ack socket option.
[  974.424718][ T5473] Use struct sctp_sack_info instead
[  974.463143][ T5450] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  974.511621][ T5450] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  974.630210][ T5479] wireguard0: entered promiscuous mode
[  975.041647][ T5965] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  975.054600][ T5965] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  975.068392][ T5965] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  975.081665][ T5965] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  975.104324][ T4758] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  975.133715][ T5492] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11435'.
[  975.143557][ T5492] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11435'.
[  975.186394][   T29] kauditd_printk_skb: 831 callbacks suppressed
[  975.186414][   T29] audit: type=1326 audit(1768101028.443:42136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.11438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28125f749 code=0x7ffc0000
[  975.249363][   T29] audit: type=1326 audit(1768101028.474:42137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.11438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa28125f749 code=0x7ffc0000
[  975.273098][   T29] audit: type=1326 audit(1768101028.474:42138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.11438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28125f749 code=0x7ffc0000
[  975.296841][   T29] audit: type=1326 audit(1768101028.474:42139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.11438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa28125f749 code=0x7ffc0000
[  975.320516][   T29] audit: type=1326 audit(1768101028.474:42140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.11438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa28125f783 code=0x7ffc0000
[  975.343950][   T29] audit: type=1326 audit(1768101028.474:42141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.11438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa28125e1ff code=0x7ffc0000
[  975.367442][   T29] audit: type=1326 audit(1768101028.485:42142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.11438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa28125f7d7 code=0x7ffc0000
[  975.391009][   T29] audit: type=1326 audit(1768101028.485:42143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.11438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa28125df90 code=0x7ffc0000
[  975.414619][   T29] audit: type=1326 audit(1768101028.485:42144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.11438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa28125e3aa code=0x7ffc0000
[  975.438070][   T29] audit: type=1326 audit(1768101028.485:42145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.11438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28125f749 code=0x7ffc0000
[  975.512560][ T5507] loop8: detected capacity change from 0 to 512
[  975.535332][ T5504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11440'.
[  975.536163][ T5512] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  975.555614][ T5507] ext4: Invalid gid '0x00000000ffffffff'
[  975.563049][ T5504] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  975.571394][ T5507] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  975.571394][ T5507]    program syz.8.11439 not setting count and/or reply_len properly
[  975.894581][ T5532] macsec1: entered promiscuous mode
[  975.919176][ T5529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11449'.
[  975.938377][ T5529] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  976.004807][ T5539] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11452'.
[  976.016662][ T5539] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11452'.
[  976.025967][ T5542] wireguard0: entered promiscuous mode
[  976.038900][ T5545] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11454'.
[  976.118733][ T5552] loop8: detected capacity change from 0 to 1024
[  976.126310][ T5552] EXT4-fs: Ignoring removed orlov option
[  976.135099][ T5552] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  976.221806][ T5557] netlink: 176 bytes leftover after parsing attributes in process `syz.1.11456'.
[  976.421945][ T5561] loop7: detected capacity change from 0 to 1024
[  976.428896][ T5561] EXT4-fs: Ignoring removed orlov option
[  976.455132][ T5561] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  976.484561][T27034] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  976.495695][T27034] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  976.512863][ T4758] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  976.528037][ T5567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11461'.
[  976.732300][ T5586] loop8: detected capacity change from 0 to 1024
[  976.739491][ T5586] EXT4-fs: Ignoring removed orlov option
[  976.768236][ T5586] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  976.950872][T22979] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  976.970115][T22979] hid-generic 0000:0000:0000.000D: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  977.028914][ T4758] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  977.046652][ T4758] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  977.083953][ T5584] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.130010][ T4933] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  977.151169][ T5584] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.205621][ T4933] syz_tun (unregistering): left promiscuous mode
[  977.234137][ T5584] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.291041][ T1306] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  977.339210][ T5584] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.366406][T23602] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.430003][ T5592] lo speed is unknown, defaulting to 1000
[  977.481590][T23602] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.526758][ T5607] loop7: detected capacity change from 0 to 1024
[  977.533923][ T5607] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  977.549472][T23602] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.563402][ T5607] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  977.574437][ T5607] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  977.587238][ T5592] chnl_net:caif_netlink_parms(): no params data found
[  977.618349][ T4970] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  977.622579][ T5607] JBD2: no valid journal superblock found
[  977.632459][ T5607] EXT4-fs (loop7): Could not load journal inode
[  977.643486][T23602] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.675772][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state
[  977.683252][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state
[  977.691319][ T5592] bridge_slave_0: entered allmulticast mode
[  977.698568][ T5592] bridge_slave_0: entered promiscuous mode
[  977.706211][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state
[  977.713419][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state
[  977.721022][ T5592] bridge_slave_1: entered allmulticast mode
[  977.727619][ T5592] bridge_slave_1: entered promiscuous mode
[  977.743927][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  977.775147][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  977.790489][ T5623] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  977.790489][ T5623]    program syz.7.11477 not setting count and/or reply_len properly
[  977.795696][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  977.819808][  T361] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  977.828492][T23602] bridge_slave_1: left allmulticast mode
[  977.834408][T23602] bridge_slave_1: left promiscuous mode
[  977.840120][T23602] bridge0: port 2(bridge_slave_1) entered disabled state
[  977.848175][T23602] bridge_slave_0: left allmulticast mode
[  977.853920][T23602] bridge_slave_0: left promiscuous mode
[  977.859724][T23602] bridge0: port 1(bridge_slave_0) entered disabled state
[  978.018379][T23602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  978.027410][T23602] bond_slave_0: left promiscuous mode
[  978.033215][T23602] bond_slave_0: left allmulticast mode
[  978.040382][T23602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  978.049577][T23602] bond_slave_1: left promiscuous mode
[  978.055142][T23602] bond_slave_1: left allmulticast mode
[  978.061506][T23602] bond0 (unregistering): Released all slaves
[  978.070759][T23602] bond1 (unregistering): Released all slaves
[  978.079663][T23602] bond2 (unregistering): Released all slaves
[  978.088564][T23602] bond3 (unregistering): Released all slaves
[  978.098657][T23602] bond4 (unregistering): Released all slaves
[  978.107799][T23602] bond5 (unregistering): Released all slaves
[  978.117270][T23602] bond6 (unregistering): Released all slaves
[  978.126205][T23602] bond7 (unregistering): Released all slaves
[  978.150878][ T2109] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  978.162104][ T5592] team0: Port device team_slave_0 added
[  978.170532][ T5592] team0: Port device team_slave_1 added
[  978.213662][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0
[  978.220682][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  978.247157][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  978.263334][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1
[  978.270582][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  978.296600][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  978.320377][T23602] hsr_slave_0: left promiscuous mode
[  978.326253][T23602] hsr_slave_1: left promiscuous mode
[  978.332351][T23602] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  978.339819][T23602] batman_adv: batadv0: Removing interface: batadv_slave_0
[  978.348417][T23602] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  978.355937][T23602] batman_adv: batadv0: Removing interface: batadv_slave_1
[  978.375579][T23602] veth1_macvtap: left promiscuous mode
[  978.381273][T23602] veth0_macvtap: left promiscuous mode
[  978.386985][T23602] veth1_vlan: left promiscuous mode
[  978.392317][T23602] veth0_vlan: left promiscuous mode
[  978.513366][T23602] team_slave_1 (unregistering): left promiscuous mode
[  978.520311][T23602] team_slave_1 (unregistering): left allmulticast mode
[  978.536159][T23602] team0 (unregistering): Port device team_slave_1 removed
[  978.551336][T23602] team_slave_0 (unregistering): left promiscuous mode
[  978.558339][T23602] team_slave_0 (unregistering): left allmulticast mode
[  978.579542][T23602] team0 (unregistering): Port device team_slave_0 removed
[  978.639717][T23602] team0 (unregistering): Port device dummy0 removed
[  978.674576][ T5592] hsr_slave_0: entered promiscuous mode
[  978.681452][ T5592] hsr_slave_1: entered promiscuous mode
[  978.687624][ T5592] debugfs: 'hsr0' already exists in 'hsr'
[  978.693415][ T5592] Cannot create hsr debugfs directory
[  978.963867][ T5639] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  979.052718][ T5592] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  979.062443][ T5592] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  979.077411][ T5592] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  979.088124][ T5592] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  979.108057][ T5652] __nla_validate_parse: 5 callbacks suppressed
[  979.108075][ T5652] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11490'.
[  979.153168][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0
[  979.162473][ T5660] Cannot find add_set index 0 as target
[  979.188567][ T5652] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  979.203713][ T5592] 8021q: adding VLAN 0 to HW filter on device team0
[  979.250118][ T5667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11491'.
[  979.259220][ T5667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11491'.
[  979.288545][T16551] bridge0: port 1(bridge_slave_0) entered blocking state
[  979.295695][T16551] bridge0: port 1(bridge_slave_0) entered forwarding state
[  979.306424][T16551] bridge0: port 2(bridge_slave_1) entered blocking state
[  979.313553][T16551] bridge0: port 2(bridge_slave_1) entered forwarding state
[  979.346301][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0
[  979.367549][ T5652] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  979.426489][ T5673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11493'.
[  979.435749][ T5673] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  979.460549][ T5592] veth0_vlan: entered promiscuous mode
[  979.468817][ T5592] veth1_vlan: entered promiscuous mode
[  979.486096][ T5652] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  979.505428][ T5592] veth0_macvtap: entered promiscuous mode
[  979.514319][ T5592] veth1_macvtap: entered promiscuous mode
[  979.527448][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0
[  979.540189][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1
[  979.551114][ T5652] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  979.567632][T23605] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  979.584873][T23605] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  979.599753][   T12] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  979.617969][T23605] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  979.641769][T23605] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  979.652368][   T12] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  979.692125][   T12] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  979.732477][ T5692] loop2: detected capacity change from 0 to 1024
[  979.741510][   T12] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  979.752985][ T5692] EXT4-fs: Ignoring removed orlov option
[  979.762913][ T5692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  979.885585][   T12] batadv1: left allmulticast mode
[  979.890840][   T12] batadv1: left promiscuous mode
[  979.895963][   T12] bridge0: port 3(batadv1) entered disabled state
[  979.926226][   T12] bridge_slave_1: left allmulticast mode
[  979.932125][   T12] bridge_slave_1: left promiscuous mode
[  979.938027][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  979.956310][   T12] bridge_slave_0: left allmulticast mode
[  979.962050][   T12] bridge_slave_0: left promiscuous mode
[  979.967906][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  980.129616][   T12] bond0 (unregistering): left promiscuous mode
[  980.135878][   T12] bond_slave_0: left promiscuous mode
[  980.141525][   T12] bond_slave_1: left promiscuous mode
[  980.151016][ T5703] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11498'.
[  980.161546][ T5592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  980.161738][ T5703] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  980.184484][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  980.195286][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  980.205966][   T12] bond0 (unregistering): Released all slaves
[  980.215523][ T5688] lo speed is unknown, defaulting to 1000
[  980.258520][ T5709] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11501'.
[  980.377027][ T5713] netlink: 'syz.1.11502': attribute type 1 has an invalid length.
[  980.442095][ T5713] 8021q: adding VLAN 0 to HW filter on device bond10
[  980.467429][   T12] hsr_slave_0: left promiscuous mode
[  980.488202][   T12] hsr_slave_1: left promiscuous mode
[  980.506978][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  980.514571][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  980.558521][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  980.566029][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  980.599852][   T12] veth1_macvtap: left promiscuous mode
[  980.614653][   T12] veth0_macvtap: left promiscuous mode
[  980.625780][   T12] veth1_vlan: left promiscuous mode
[  980.637629][   T12] veth0_vlan: left promiscuous mode
[  980.790107][   T12] team0 (unregistering): Port device team_slave_1 removed
[  980.800719][   T12] team0 (unregistering): Port device team_slave_0 removed
[  980.852615][ T5688] chnl_net:caif_netlink_parms(): no params data found
[  980.934220][ T5688] bridge0: port 1(bridge_slave_0) entered blocking state
[  980.941482][ T5688] bridge0: port 1(bridge_slave_0) entered disabled state
[  980.949331][ T5688] bridge_slave_0: entered allmulticast mode
[  980.956986][ T5688] bridge_slave_0: entered promiscuous mode
[  980.976478][ T5688] bridge0: port 2(bridge_slave_1) entered blocking state
[  980.983703][ T5688] bridge0: port 2(bridge_slave_1) entered disabled state
[  981.010459][ T5688] bridge_slave_1: entered allmulticast mode
[  981.025279][ T5688] bridge_slave_1: entered promiscuous mode
[  981.072694][ T5728] loop2: detected capacity change from 0 to 1024
[  981.079874][ T5728] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  981.090641][ T5728] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  981.101668][ T5728] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  981.113026][ T5728] JBD2: no valid journal superblock found
[  981.118876][ T5728] EXT4-fs (loop2): Could not load journal inode
[  981.129461][ T5688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  981.149712][ T5688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  981.169739][ T5730] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11507'.
[  981.185628][ T5688] team0: Port device team_slave_0 added
[  981.197521][ T5688] team0: Port device team_slave_1 added
[  981.203199][ T8237] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  981.230209][ T5688] batman_adv: batadv0: Adding interface: batadv_slave_0
[  981.237332][ T5688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  981.263443][ T5688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  981.300999][ T5688] batman_adv: batadv0: Adding interface: batadv_slave_1
[  981.307997][ T5688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  981.333997][ T5688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  981.367813][ T5688] hsr_slave_0: entered promiscuous mode
[  981.374279][ T5688] hsr_slave_1: entered promiscuous mode
[  981.381176][ T5688] debugfs: 'hsr0' already exists in 'hsr'
[  981.387042][ T5688] Cannot create hsr debugfs directory
[  981.455832][T23602] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  981.534640][ T5688] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  981.544203][ T5688] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  981.553543][ T5688] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  981.563226][ T5688] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  981.578885][ T5738] loop7: detected capacity change from 0 to 512
[  981.628498][ T5688] 8021q: adding VLAN 0 to HW filter on device bond0
[  981.641251][ T5688] 8021q: adding VLAN 0 to HW filter on device team0
[  981.707745][ T5688] 8021q: adding VLAN 0 to HW filter on device batadv0
[  981.741067][ T5759] netlink: 424 bytes leftover after parsing attributes in process `syz.2.11511'.
[  981.813412][ T5738] ext4: Invalid gid '0x00000000ffffffff'
[  981.823019][T23602] bridge0: port 1(bridge_slave_0) entered blocking state
[  981.830135][T23602] bridge0: port 1(bridge_slave_0) entered forwarding state
[  981.842496][T23602] bridge0: port 2(bridge_slave_1) entered blocking state
[  981.849651][T23602] bridge0: port 2(bridge_slave_1) entered forwarding state
[  981.850693][ T5724] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  981.850693][ T5724]    program syz.7.11504 not setting count and/or reply_len properly
[  981.879762][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  981.913252][T23605] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  981.994387][ T5688] veth0_vlan: entered promiscuous mode
[  982.002863][ T5688] veth1_vlan: entered promiscuous mode
[  982.017980][ T5688] veth0_macvtap: entered promiscuous mode
[  982.025635][ T5688] veth1_macvtap: entered promiscuous mode
[  982.042187][ T5688] batman_adv: batadv0: Interface activated: batadv_slave_0
[  982.052938][ T5688] batman_adv: batadv0: Interface activated: batadv_slave_1
[  982.065236][T23605] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  982.077748][T23605] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  982.088789][T23605] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  982.098135][T23605] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  982.135914][ T5782] sctp: [Deprecated]: syz.1.11513 (pid 5782) Use of struct sctp_assoc_value in delayed_ack socket option.
[  982.135914][ T5782] Use struct sctp_sack_info instead
[  982.157599][ T5782] sctp: [Deprecated]: syz.1.11513 (pid 5782) Use of struct sctp_assoc_value in delayed_ack socket option.
[  982.157599][ T5782] Use struct sctp_sack_info instead
[  982.202067][ T5785] Cannot find add_set index 0 as target
[  982.248130][   T29] kauditd_printk_skb: 64 callbacks suppressed
[  982.248150][   T29] audit: type=1326 audit(1768101035.854:42210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5788 comm="syz.0.11515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ce6f749 code=0x7ffc0000
[  982.286712][ T5790] netlink: 'syz.9.11496': attribute type 1 has an invalid length.
[  982.314363][ T5790] 8021q: adding VLAN 0 to HW filter on device bond1
[  982.318198][   T29] audit: type=1326 audit(1768101035.854:42211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5788 comm="syz.0.11515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ce6f749 code=0x7ffc0000
[  982.344675][   T29] audit: type=1326 audit(1768101035.854:42212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5788 comm="syz.0.11515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff79ce6f749 code=0x7ffc0000
[  982.368392][   T29] audit: type=1326 audit(1768101035.854:42213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5788 comm="syz.0.11515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ce6f749 code=0x7ffc0000
[  982.392060][   T29] audit: type=1326 audit(1768101035.854:42214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5788 comm="syz.0.11515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff79ce6f749 code=0x7ffc0000
[  982.415898][   T29] audit: type=1326 audit(1768101035.854:42215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5788 comm="syz.0.11515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ce6f749 code=0x7ffc0000
[  982.439581][   T29] audit: type=1326 audit(1768101035.865:42216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5788 comm="syz.0.11515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff79ce6f749 code=0x7ffc0000
[  982.463243][   T29] audit: type=1326 audit(1768101035.886:42217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5788 comm="syz.0.11515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ce6f749 code=0x7ffc0000
[  982.486923][   T29] audit: type=1326 audit(1768101035.886:42218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5788 comm="syz.0.11515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ce6f749 code=0x7ffc0000
[  982.512455][   T29] audit: type=1326 audit(1768101036.064:42219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.0.11516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ce6f749 code=0x7ffc0000
[  982.543843][ T5793] wireguard0: entered promiscuous mode
[  983.105426][ T5810] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11522'.
[  983.162614][ T5814] netlink: 92 bytes leftover after parsing attributes in process `syz.0.11524'.
[  983.286131][ T5830] loop7: detected capacity change from 0 to 1024
[  983.292957][ T5830] EXT4-fs: Ignoring removed orlov option
[  983.301718][ T5830] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  983.327067][T27034] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  983.335431][T27034] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  983.560357][ T1306] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  983.627018][ T5851] vcan0: tx drop: invalid da for name 0x0000000000000015
[  983.659519][ T5854] loop7: detected capacity change from 0 to 1024
[  983.667666][ T5854] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  983.678541][ T5854] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  983.689694][ T5854] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  983.702916][ T5854] JBD2: no valid journal superblock found
[  983.708695][ T5854] EXT4-fs (loop7): Could not load journal inode
[  983.770997][ T5863] netlink: 'syz.0.11540': attribute type 1 has an invalid length.
[  983.786754][ T5863] 8021q: adding VLAN 0 to HW filter on device bond6
[  984.267268][ T5866] wireguard1: entered promiscuous mode
[  984.345051][ T5875] netlink: 148 bytes leftover after parsing attributes in process `syz.7.11546'.
[  984.430188][ T5877] loop2: detected capacity change from 0 to 4096
[  984.437268][ T5877] EXT4-fs: Ignoring removed nomblk_io_submit option
[  984.449336][ T5877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  984.527357][ T5888] vcan0: tx drop: invalid da for name 0x0000000000000015
[  984.563023][ T5592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  984.604749][ T5891] netlink: 92 bytes leftover after parsing attributes in process `syz.7.11553'.
[  984.654417][ T5899] wireguard0: entered promiscuous mode
[  984.673209][ T5902] wireguard0: entered promiscuous mode
[  984.731329][ T5909] loop7: detected capacity change from 0 to 1024
[  984.739119][ T5909] EXT4-fs: Ignoring removed orlov option
[  984.747530][ T5909] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  984.814654][ T5917] loop9: detected capacity change from 0 to 1024
[  984.821545][ T5917] EXT4-fs: Ignoring removed orlov option
[  984.830074][ T5917] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  984.851986][T27034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  984.860137][T27034] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  984.878308][ T3687] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  984.886404][ T3687] hid-generic 0000:0000:0000.0010: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  984.970290][ T5688] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  984.987488][ T5688] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  985.035186][ T1306] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  985.053311][ T1306] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  985.159349][ T3325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  985.432702][ T3153] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  985.491930][ T3153] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  985.590221][ T3153] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  985.606742][ T5688] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  985.624033][ T5927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11566'.
[  985.639023][ T5927] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  985.650212][ T3153] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  985.687488][ T5953] loop2: detected capacity change from 0 to 4096
[  985.713054][ T5953] EXT4-fs: Ignoring removed nomblk_io_submit option
[  985.747927][ T5953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  985.783829][ T3153] bridge_slave_1: left allmulticast mode
[  985.789617][ T3153] bridge_slave_1: left promiscuous mode
[  985.795428][ T3153] bridge0: port 2(bridge_slave_1) entered disabled state
[  985.803443][ T3153] bridge_slave_0: left allmulticast mode
[  985.809264][ T3153] bridge_slave_0: left promiscuous mode
[  985.815101][ T3153] bridge0: port 1(bridge_slave_0) entered disabled state
[  985.844206][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11579'.
[  985.942832][ T3153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  985.951652][ T3153] bond_slave_0: left promiscuous mode
[  985.957282][ T3153] bond_slave_0: left allmulticast mode
[  985.964209][ T3153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  985.974509][ T3153] bond_slave_1: left promiscuous mode
[  985.980115][ T3153] bond_slave_1: left allmulticast mode
[  985.987172][ T3153] bond0 (unregistering): Released all slaves
[  985.996457][ T3153] bond1 (unregistering): Released all slaves
[  986.005975][ T3153] bond2 (unregistering): Released all slaves
[  986.014314][ T5924] lo speed is unknown, defaulting to 1000
[  986.060653][ T5592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  986.130105][ T3153] hsr_slave_0: left promiscuous mode
[  986.138878][ T5987] Cannot find add_set index 0 as target
[  986.147044][ T3153] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  986.154550][ T3153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  986.163122][ T3153] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  986.170726][ T3153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  986.182825][ T3153] veth1_macvtap: left promiscuous mode
[  986.188949][ T3153] veth0_macvtap: left promiscuous mode
[  986.194590][ T3153] veth1_vlan: left promiscuous mode
[  986.200016][ T3153] veth0_vlan: left promiscuous mode
[  986.238592][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11584'.
[  986.247849][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11584'.
[  986.314401][ T3153] team_slave_1 (unregistering): left promiscuous mode
[  986.321332][ T3153] team_slave_1 (unregistering): left allmulticast mode
[  986.329037][ T3153] team0 (unregistering): Port device team_slave_1 removed
[  986.338815][ T3153] team_slave_0 (unregistering): left promiscuous mode
[  986.345654][ T3153] team_slave_0 (unregistering): left allmulticast mode
[  986.355048][ T3153] team0 (unregistering): Port device team_slave_0 removed
[  986.473895][ T5924] chnl_net:caif_netlink_parms(): no params data found
[  986.527258][ T6011] loop2: detected capacity change from 0 to 1024
[  986.535835][ T5963] lo speed is unknown, defaulting to 1000
[  986.536079][ T6011] ==================================================================
[  986.549818][ T6011] BUG: KCSAN: data-race in data_alloc / prb_reserve
[  986.556457][ T6011] 
[  986.558809][ T6011] write to 0xffffffff86887ad8 of 8 bytes by task 5963 on cpu 1:
[  986.566463][ T6011]  data_alloc+0x31c/0x390
[  986.570875][ T6011]  prb_reserve+0x8d7/0xad0
[  986.575351][ T6011]  vprintk_store+0x53c/0x830
[  986.580021][ T6011]  vprintk_emit+0x15a/0x5c0
[  986.584580][ T6011]  vprintk_default+0x26/0x30
[  986.589200][ T6011]  vprintk+0x1d/0x30
[  986.593146][ T6011]  _printk+0x79/0xa0
[  986.597083][ T6011]  ib_get_eth_speed+0x33d/0x4b0
[  986.601983][ T6011]  siw_query_port+0x3a/0x2d0
[  986.606620][ T6011]  ib_query_port+0x393/0x3d0
[  986.611256][ T6011]  ib_setup_port_attrs+0x14a/0x1430
[  986.616510][ T6011]  add_one_compat_dev+0x298/0x390
[  986.621572][ T6011]  rdma_dev_init_net+0x1ba/0x250
[  986.626551][ T6011]  ops_init+0x22a/0x2e0
[  986.630746][ T6011]  setup_net+0x95/0x220
[  986.634924][ T6011]  copy_net_ns+0x309/0x460
[  986.639369][ T6011]  create_new_namespaces+0x20e/0x400
[  986.644694][ T6011]  unshare_nsproxy_namespaces+0xe8/0x120
[  986.650353][ T6011]  ksys_unshare+0x3d0/0x6d0
[  986.654892][ T6011]  __x64_sys_unshare+0x1f/0x30
[  986.659685][ T6011]  x64_sys_call+0x2ae6/0x3000
[  986.664393][ T6011]  do_syscall_64+0xca/0x2b0
[  986.668944][ T6011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  986.674866][ T6011] 
[  986.677210][ T6011] read to 0xffffffff86887ad8 of 8 bytes by task 6011 on cpu 0:
[  986.684773][ T6011]  prb_reserve+0x207/0xad0
[  986.689222][ T6011]  vprintk_store+0x53c/0x830
[  986.693851][ T6011]  vprintk_emit+0x15a/0x5c0
[  986.698393][ T6011]  vprintk_default+0x26/0x30
[  986.703022][ T6011]  vprintk+0x1d/0x30
[  986.706939][ T6011]  _printk+0x79/0xa0
[  986.710852][ T6011]  __ext4_msg+0x18f/0x1a0
[  986.715204][ T6011]  ext4_check_journal_data_mode+0x16f/0x210
[  986.721125][ T6011]  ext4_fill_super+0x1c81/0x37a0
[  986.726093][ T6011]  get_tree_bdev_flags+0x291/0x300
[  986.731229][ T6011]  get_tree_bdev+0x1f/0x30
[  986.735670][ T6011]  ext4_get_tree+0x1c/0x30
[  986.740119][ T6011]  vfs_get_tree+0x57/0x1d0
[  986.744556][ T6011]  do_new_mount+0x24d/0x6a0
[  986.749082][ T6011]  path_mount+0x4ab/0xb80
[  986.753439][ T6011]  __se_sys_mount+0x28c/0x2e0
[  986.758140][ T6011]  __x64_sys_mount+0x67/0x80
[  986.762751][ T6011]  x64_sys_call+0x2cca/0x3000
[  986.767454][ T6011]  do_syscall_64+0xca/0x2b0
[  986.772103][ T6011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  986.778040][ T6011] 
[  986.780392][ T6011] value changed: 0x00000000000e6970 -> 0x00000000001a93a8
[  986.787521][ T6011] 
[  986.789862][ T6011] Reported by Kernel Concurrency Sanitizer on:
[  986.796030][ T6011] CPU: 0 UID: 0 PID: 6011 Comm: syz.2.11594 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  986.807436][ T6011] Tainted: [W]=WARN
[  986.811263][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  986.821353][ T6011] ==================================================================
[  986.535820][ T6011] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  986.842022][ T6011] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  986.853317][ T6011] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  986.882581][ T6011] JBD2: no valid journal superblock found
[  986.888393][ T6011] EXT4-fs (loop2): Could not load journal inode
[  986.940610][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state
[  986.947847][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state
[  986.959322][ T5924] bridge_slave_0: entered allmulticast mode
[  986.965961][ T5924] bridge_slave_0: entered promiscuous mode
[  986.987495][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state
[  986.994625][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state
[  987.002152][ T5924] bridge_slave_1: entered allmulticast mode
[  987.009566][ T5924] bridge_slave_1: entered promiscuous mode
[  987.030097][ T3153] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  987.066978][ T5924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  987.216791][ T5963] chnl_net:caif_netlink_parms(): no params data found
[  987.265761][ T3153] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  987.316137][ T5924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  987.369249][ T3153] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  987.474772][ T3153] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  987.573269][ T3153] bridge_slave_1: left allmulticast mode
[  987.578988][ T3153] bridge_slave_1: left promiscuous mode
[  987.584714][ T3153] bridge0: port 2(bridge_slave_1) entered disabled state
[  987.592937][ T3153] bridge_slave_0: left allmulticast mode
[  987.598693][ T3153] bridge_slave_0: left promiscuous mode
[  987.604392][ T3153] bridge0: port 1(bridge_slave_0) entered disabled state
[  987.693323][ T3153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  987.703634][ T3153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  987.713343][ T3153] bond0 (unregistering): Released all slaves
[  987.722345][ T3153] bond1 (unregistering): Released all slaves
[  987.817332][ T3153] hsr_slave_0: left promiscuous mode
[  987.823089][ T3153] hsr_slave_1: left promiscuous mode
[  987.829033][ T3153] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  987.836546][ T3153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  987.845313][ T3153] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  987.852796][ T3153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  987.864642][ T3153] veth1_macvtap: left promiscuous mode
[  987.870137][ T3153] veth0_macvtap: left promiscuous mode
[  987.875809][ T3153] veth1_vlan: left promiscuous mode
[  987.881240][ T3153] veth0_vlan: left promiscuous mode
[  987.952241][ T3153] team0 (unregistering): Port device team_slave_1 removed
[  987.963361][ T3153] team0 (unregistering): Port device team_slave_0 removed
[  988.248738][ T3153] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  988.311164][ T3153] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  988.378621][ T3153] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  988.426043][ T3153] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  988.516586][ T3153] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  988.558805][ T3153] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  988.606704][ T3153] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  988.663724][ T3153] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  988.736800][ T3153] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  988.780186][ T3153] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  988.827585][ T3153] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  988.865634][ T3153] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  988.935311][ T3153] bridge_slave_1: left allmulticast mode
[  988.941060][ T3153] bridge_slave_1: left promiscuous mode
[  988.946853][ T3153] bridge0: port 2(bridge_slave_1) entered disabled state
[  988.954906][ T3153] bridge_slave_0: left allmulticast mode
[  988.960762][ T3153] bridge_slave_0: left promiscuous mode
[  988.966600][ T3153] bridge0: port 1(bridge_slave_0) entered disabled state
[  988.975420][ T3153] gretap0: left promiscuous mode
[  988.980599][ T3153] bridge0: port 3(gretap0) entered disabled state
[  988.987712][ T3153] bridge_slave_1: left allmulticast mode
[  988.993391][ T3153] bridge_slave_1: left promiscuous mode
[  988.999152][ T3153] bridge0: port 2(bridge_slave_1) entered disabled state
[  989.006991][ T3153] bridge_slave_0: left allmulticast mode
[  989.012644][ T3153] bridge_slave_0: left promiscuous mode
[  989.018468][ T3153] bridge0: port 1(bridge_slave_0) entered disabled state
[  989.027505][ T3153] bridge_slave_1: left allmulticast mode
[  989.033223][ T3153] bridge_slave_1: left promiscuous mode
[  989.038978][ T3153] bridge0: port 2(bridge_slave_1) entered disabled state
[  989.046927][ T3153] bridge_slave_0: left allmulticast mode
[  989.052621][ T3153] bridge_slave_0: left promiscuous mode
[  989.058375][ T3153] bridge0: port 1(bridge_slave_0) entered disabled state
[  989.067059][ T3153] bridge_slave_1: left allmulticast mode
[  989.072814][ T3153] bridge_slave_1: left promiscuous mode
[  989.078444][ T3153] bridge0: port 2(bridge_slave_1) entered disabled state
[  989.086604][ T3153] bridge_slave_0: left allmulticast mode
[  989.092402][ T3153] bridge_slave_0: left promiscuous mode
[  989.098100][ T3153] bridge0: port 1(bridge_slave_0) entered disabled state
[  989.295273][ T3153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  989.304103][ T3153] bond_slave_0: left promiscuous mode
[  989.309641][ T3153] bond_slave_0: left allmulticast mode
[  989.316643][ T3153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  989.325664][ T3153] bond_slave_1: left promiscuous mode
[  989.331257][ T3153] bond_slave_1: left allmulticast mode
[  989.337576][ T3153] bond0 (unregistering): Released all slaves
[  989.346465][ T3153] bond1 (unregistering): Released all slaves
[  989.355648][ T3153] bond2 (unregistering): Released all slaves
[  989.364681][ T3153] bond3 (unregistering): Released all slaves
[  989.373634][ T3153] bond4 (unregistering): Released all slaves
[  989.382506][ T3153] bond5 (unregistering): Released all slaves
[  989.391778][ T3153] bond6 (unregistering): Released all slaves
[  989.400813][ T3153] bond7 (unregistering): Released all slaves
[  989.409652][ T3153] bond8 (unregistering): Released all slaves
[  989.418434][ T3153] bond9 (unregistering): Released all slaves
[  989.427044][ T3153] bond10 (unregistering): Released all slaves
[  989.437277][ T3153] ip6gretap0 (unregistering): left promiscuous mode
[  989.502402][ T3153] bond0 (unregistering): left promiscuous mode
[  989.508600][ T3153] bond_slave_0: left promiscuous mode
[  989.514127][ T3153] bond_slave_1: left promiscuous mode
[  989.523318][ T3153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  989.532359][ T3153] bond_slave_0: left allmulticast mode
[  989.539176][ T3153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  989.548080][ T3153] bond_slave_1: left allmulticast mode
[  989.554442][ T3153] bond0 (unregistering): Released all slaves
[  989.563567][ T3153] bond1 (unregistering): Released all slaves
[  989.572197][ T3153] bond2 (unregistering): Released all slaves
[  989.580922][ T3153] bond3 (unregistering): Released all slaves
[  989.589599][ T3153] bond4 (unregistering): Released all slaves
[  989.598351][ T3153] bond5 (unregistering): Released all slaves
[  989.607558][ T3153] bond6 (unregistering): Released all slaves
[  989.692720][ T3153] bond0 (unregistering): Released all slaves
[  989.759975][ T3153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  989.769939][ T3153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  989.779504][ T3153] bond0 (unregistering): Released all slaves
[  989.818099][ T3153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  989.828815][ T3153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  989.838565][ T3153] bond0 (unregistering): Released all slaves
[  989.998071][ T3153] hsr_slave_0: left promiscuous mode
[  990.003830][ T3153] hsr_slave_1: left promiscuous mode
[  990.010889][ T3153] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  990.018415][ T3153] batadv0: mtu less than device minimum
[  990.024741][ T3153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  990.035773][ T3153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  990.046576][ T3153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  990.057391][ T3153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  990.068368][ T3153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  990.079457][ T3153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  990.090489][ T3153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  990.101387][ T3153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  990.118273][ T3153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  990.126102][ T3153] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  990.145543][ T3153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  990.153143][ T3153] batman_adv: batadv0: Interface deactivated: dummy0
[  990.159882][ T3153] batman_adv: batadv0: Removing interface: dummy0
[  990.167574][ T3153] hsr_slave_0: left promiscuous mode
[  990.173191][ T3153] hsr_slave_1: left promiscuous mode
[  990.180960][ T3153] hsr_slave_0: left promiscuous mode
[  990.186812][ T3153] hsr_slave_1: left promiscuous mode
[  990.192506][ T3153] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  990.199932][ T3153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  990.207745][ T3153] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  990.215299][ T3153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  990.231820][ T3153] veth1_macvtap: left promiscuous mode
[  990.237372][ T3153] veth0_macvtap: left promiscuous mode
[  990.243437][ T3153] veth1_vlan: left promiscuous mode
[  990.248737][ T3153] veth0_vlan: left promiscuous mode
[  990.254479][ T3153] veth1_macvtap: left promiscuous mode
[  990.260141][ T3153] veth0_macvtap: left promiscuous mode
[  990.266183][ T3153] veth1_macvtap: left promiscuous mode
[  990.271666][ T3153] veth0_macvtap: left promiscuous mode
[  990.277595][ T3153] veth1_vlan: left promiscuous mode
[  990.283085][ T3153] veth0_vlan: left promiscuous mode
[  990.431132][ T3153] team_slave_1 (unregistering): left promiscuous mode
[  990.438392][ T3153] team_slave_1 (unregistering): left allmulticast mode
[  990.446952][ T3153] team0 (unregistering): Port device team_slave_1 removed
[  990.457633][ T3153] team_slave_0 (unregistering): left promiscuous mode
[  990.464497][ T3153] team_slave_0 (unregistering): left allmulticast mode
[  990.472187][ T3153] team0 (unregistering): Port device team_slave_0 removed
[  990.525385][ T3153] team_slave_1 (unregistering): left allmulticast mode
[  990.532748][ T3153] team0 (unregistering): Port device team_slave_1 removed
[  990.543813][ T3153] team_slave_0 (unregistering): left allmulticast mode
[  990.551214][ T3153] team0 (unregistering): Port device team_slave_0 removed
[  990.578756][ T3153] team0 (unregistering): Port device dummy0 removed
[  990.649032][ T3153] team0 (unregistering): Port device team_slave_1 removed
[  990.658850][ T3153] team0 (unregistering): Port device team_slave_0 removed
[  990.694224][ T6233] lo speed is unknown, defaulting to 1000
[  990.700067][ T6233] infiniband syz2: ib_query_port failed (-19)