last executing test programs:

1m50.105571555s ago: executing program 4 (id=1660):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7eba07d4d7c2df8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)

1m50.053038597s ago: executing program 4 (id=1663):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50)

1m50.018987479s ago: executing program 4 (id=1664):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r1, &(0x7f0000000f40)={&(0x7f0000000e40), 0x14, &(0x7f0000000f00)={&(0x7f0000000e80)="51a53651", 0x4}, 0x1, 0x0, 0x0, 0x4044}, 0x20000010)

1m50.018093828s ago: executing program 4 (id=1666):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x80, &(0x7f00000009c0)={0x0, 0xcccd, 0x800, 0x3, 0x217}, &(0x7f0000000480), &(0x7f0000000a40))
r1 = io_uring_setup(0x3f2a, &(0x7f0000000080)={0x0, 0x10006d37, 0x100, 0x3, 0x4000002, 0x0, r0})
r2 = socket(0x2, 0x80805, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x145)
r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
r5 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\xea\xe8\x015\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz\xc213\x9b\x87\xd5\x99\r\xa2P\x03\x1cl\x0f\xcb)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af', 0x0)
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sendmmsg$inet_sctp(r2, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x3800800, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x2, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==")
openat(0xffffffffffffff9c, 0x0, 0x800, 0x20d)
utimes(&(0x7f0000000280)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x18)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0)
pipe(&(0x7f0000000280)={<r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00'}, 0x18)
setsockopt$inet_buf(r7, 0x0, 0x11, &(0x7f0000000400)="495401ff3c1d2459c0e27070e7545222291f11bb91705a4e3d0decceb2e60f91198caae8a3b7b1fcb5d8cc73874a7d08f3dffd08", 0x34)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

1m49.911618713s ago: executing program 4 (id=1667):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0x1, r2)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1})
io_uring_enter(0xffffffffffffffff, 0x29ab, 0xd480, 0x0, 0x0, 0x0)
close(r0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r3, 0x400, 0x1)
r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r5 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x2)
write$binfmt_misc(r5, &(0x7f0000000180)="e502", 0x2)
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1m49.683604953s ago: executing program 4 (id=1670):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10)
setpgid(0x0, 0x0)

1m49.683431503s ago: executing program 32 (id=1670):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10)
setpgid(0x0, 0x0)

58.842350253s ago: executing program 3 (id=2474):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r1}, 0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x25, &(0x7f0000000000))
fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0x409})
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x5, 0x8}, 0x100, 0x0, 0xfffffffe, 0x9, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, r2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_ARP_VALIDATE={0x8}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, <r4=>0x0}, &(0x7f0000000080)=0xc)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioprio_get$uid(0x3, r4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)

58.478030268s ago: executing program 3 (id=2479):
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
socket$inet6(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000003, 0xfffffefa, 0x6}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x804)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xc2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0)
pwrite64(r3, &(0x7f0000000780)="c68e824bdb01526714b82b1c384e8179e3b2572d818a27e20000000000003a3554a772184e516403d394c8bd087c004cf13eb1d7785ac94cc3e73180701e5c22b9366a0f192d09e7ea00ea37f331bb05d7ca143e1e4db43f52aca2cdff2bb0686dadb0a97f907371d314009e5b4981005a330cf40a3301fd55862ad4e66b8b19520bcd3fffa6199d6663851b15c181d00b73e85a86a15c505fdba23335d6aba6dc405136e0bdfee468", 0xa9, 0x8004)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb)
writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000280)={r6, 0x2, 0x6, @local}, 0x10)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x4)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0)

58.389233012s ago: executing program 3 (id=2482):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r5, 0x0, 0x0)
sendto$packet(r1, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x8, 0x0, 0xff, 0x7ffc1ffd}]})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r7}, 0x18)
setgid(0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r8}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x8c}}, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000080), 0x4)
socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r10 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(r10, 0x1, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
socket(0x10, 0x3, 0x0)
lchown(0x0, 0x0, 0x0)
lchown(0x0, 0x0, 0x0)

57.410379253s ago: executing program 3 (id=2486):
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8)
r1 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt={'uid>', r0}}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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")
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x5}}, 0x24, 0x2)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5, 0x7], &(0x7f0000000180)=[0x2, 0x4], 0x0, 0x2, 0x1}}, 0x40)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x200000000000021d, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18)
r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000300)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r7, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345})
io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {<r10=>r1}}, './file2\x00'})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r10}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20)

57.25338051s ago: executing program 3 (id=2490):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fadvise64(r0, 0x2, 0x0, 0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)

56.795374719s ago: executing program 3 (id=2500):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r1}, 0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x25, &(0x7f0000000000))
fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0x409})
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x5, 0x8}, 0x100, 0x0, 0xfffffffe, 0x9, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, r2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_ARP_VALIDATE={0x8}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, <r4=>0x0}, &(0x7f0000000080)=0xc)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioprio_get$uid(0x3, r4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)

56.795279759s ago: executing program 33 (id=2500):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r1}, 0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x25, &(0x7f0000000000))
fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0x409})
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x5, 0x8}, 0x100, 0x0, 0xfffffffe, 0x9, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, r2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_ARP_VALIDATE={0x8}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, <r4=>0x0}, &(0x7f0000000080)=0xc)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioprio_get$uid(0x3, r4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)

4.418697463s ago: executing program 5 (id=3164):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@float={0x5, 0x0, 0x0, 0x10, 0x2}, @restrict={0x2, 0x0, 0x0, 0xb, 0x4}, @func={0xc, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x61, 0x30, 0x0, 0xd222b4ef41268ac6, 0x0]}}, &(0x7f0000000500)=""/156, 0x43, 0x9c, 0x0, 0x0, 0x10000}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x5, 0x10001, 0x9, 0xa24a, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe, 0x0, @value=r0}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r1}, &(0x7f0000001600), &(0x7f0000001640)='%+9llu \x00'}, 0x20)
r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x4, r2, 0xfffffffffffffffb, r2, 0x0)
keyctl$setperm(0x5, r2, 0x21009) (async, rerun: 64)
keyctl$KEYCTL_MOVE(0x1e, r2, r2, r2, 0x0) (async, rerun: 64)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') (async)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r5) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) (async)
r6 = open(&(0x7f00000003c0)='./file2\x00', 0x281, 0x2)
ioctl$BTRFS_IOC_DEFRAG(r6, 0x4c00, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) (async)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r7, 0x1000)
r8 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) (async)
r9 = eventfd2(0x4, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r9}}) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000640)={'vxcan1\x00', <r10=>0x0}) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x20, 0x9, &(0x7f00000006c0)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @exit], &(0x7f0000000340)='GPL\x00', 0x8, 0xdd, &(0x7f0000000740)=""/221, 0x40f00, 0x36, '\x00', r10, @fallback=0x18, r6, 0x8, &(0x7f0000000840)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0xc, 0x8}, 0x10, 0x0, r8, 0x1, &(0x7f00000008c0)=[r1, r8], &(0x7f0000000900)=[{0x1, 0x3, 0x2, 0x7}], 0x10, 0x6}, 0x94) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0xe, 0x0, 0x0, 0x7, 0x8604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x2000, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001300), &(0x7f00000016c0), 0x400, r1}, 0x38)

4.295386009s ago: executing program 5 (id=3166):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140), 0x0, r2)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r6 = syz_io_uring_setup(0x4073, &(0x7f0000000480)={0x0, 0x1568, 0x10000, 0x2, 0x264}, &(0x7f0000000040)=<r7=>0x0, &(0x7f00000000c0)=<r8=>0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r9}})
request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
close(r0)
r10 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r10, 0x400, 0x1)
r11 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r12 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x2)
write$binfmt_misc(r12, &(0x7f0000000180)="e502", 0x2)
execveat(r12, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
execveat(r11, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

3.440176685s ago: executing program 5 (id=3172):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000380)={0xd, 0x3, 0x4, 0x1, 0x9, 0x0, [{0x3, 0x8000000000000001, 0x690, '\x00', 0x400}, {0xff, 0xf426, 0x8, '\x00', 0x108}, {0x102, 0x6, 0x557, '\x00', 0x2002}, {0xfaa000000000, 0x4, 0xe72, '\x00', 0x2}, {0x10000, 0x1, 0x9, '\x00', 0x2102}, {0x101, 0xb, 0x80000001, '\x00', 0x2008}, {0x20000009, 0x4, 0x7f, '\x00', 0x2000}, {0xffffffff80000001, 0x8, 0x3, '\x00', 0x600}, {0xfff, 0x8000000, 0x5, '\x00', 0x200}]})
syz_emit_ethernet(0x5e, &(0x7f0000000bc0)=ANY=[@ANYRESDEC=r0, @ANYBLOB="d056d667b7752e18dbaec822308722be228cbb27190610f701a6b743a26f810d0afc09d285f49f9ff4ae6a324b8fa920ed494e6c8d9dfb897db1a4a29019f345d2f47fc289a9bd5b082f290e37961cfc1b78f37f", @ANYRESOCT=r0, @ANYBLOB="34031b0752fcec28de08d49bc718c289245fe580b306fc76d709b439c25d0a0fe16ed05698da0360a0d8410c81535725997f434f650b46db87dcfc20dbda4736e4de168a331ab54fec9ce331eb78f5c969068db349ee5d1f128a8b1636f71bf9fc074e6a434bc139afb6054fa9700713cd8e895d03d30b24b9e11ed3c5d58de1c94924a8880ab3611decef5d3a9cbb78048d5bfcb66b468ddc1aa519e093693788b36a85b56d5425533e6639350de39a04", @ANYRESOCT=r0], &(0x7f00000000c0)={0x0, 0x3, [0xb79, 0xa31, 0xce8, 0x25e]})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=<r2=>0x0)
ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000600)={'\x00', 0x9b21, 0x4, 0x100008, 0x8, 0x8, r2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3)
rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000800)={0x29, 0x9, 0xf})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x40, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000006c0)={0x3, 0x0, 0x1, 'queue1\x00', 0x6})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x6}, 0x0, 0x10000, 0x8, 0x4, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000026}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x4, 0x0, 0x4b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x10, 0x7, 0x40000004, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0})
read$msr(r5, &(0x7f0000003ac0)=""/102392, 0x18ff8)
sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x44008004)
write$binfmt_misc(r1, &(0x7f0000000300), 0xfdef)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x2, 0x40208, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x2, 0x5}, 0x121, 0x0, 0x800000, 0x6, 0x2, 0x2, 0xf, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0xd0)
socket(0x10, 0x3, 0x0)

2.12046149s ago: executing program 5 (id=3182):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x2, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x1, 0xb, 0x0, 0x5, 0x0, 0x20000006}, 0x0, 0x2, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
poll(&(0x7f0000000100)=[{r2, 0x84}], 0x1, 0x3ff)
sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r2, 0xda90)
accept4(r2, 0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
socket$inet_smc(0x2b, 0x1, 0x0)

1.881526891s ago: executing program 2 (id=3185):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, 0x0, 0x0, r1)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b000000"], 0x48)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x29ab, 0xd480, 0x0, 0x0, 0x0)
close(r0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r3, 0x400, 0x1)
r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
creat(0x0, 0xd931d3864d39dcdb)
r5 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x2)
write$binfmt_misc(r5, &(0x7f0000000180)="e502", 0x2)
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.720097967s ago: executing program 1 (id=3189):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0x1, r2)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r6 = syz_io_uring_setup(0x4073, &(0x7f0000000480)={0x0, 0x1568, 0x10000, 0x2, 0x264}, &(0x7f0000000040)=<r7=>0x0, &(0x7f00000000c0)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1})
io_uring_enter(r6, 0x29ab, 0xd480, 0x0, 0x0, 0x0)
close(r0)
r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r9, 0x400, 0x1)
r10 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r11 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x2)
write$binfmt_misc(r11, &(0x7f0000000180)="e502", 0x2)
execveat(r11, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.463301898s ago: executing program 0 (id=3195):
r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1)
r1 = socket$igmp6(0xa, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="0c00000004000000810000000800000014100000", @ANYRES32, @ANYBLOB="0000000f000000331db143b2d74493069e1c1c39fc0f110000000000cfb5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x4e0, 0xffffffff, 0xe8, 0x340, 0xe8, 0xfeffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], 'team0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x11, 0x4, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0x218, 0x258, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xd, 0x1}}, @common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e24], [0x4e24, 0x4e22], [0x8, 0x0, 0xa94, 0x1000, 0x3, 0x83fa, 0x3ff, 0xe, 0x1, 0x2, 0x3, 0x9e, 0x945, 0x2, 0x1d3, 0x7fff, 0x7, 0x8, 0x9, 0x7, 0x81, 0x4b5, 0xd, 0x8, 0x1, 0x3, 0x0, 0x8908, 0x7fff, 0xfff, 0x5, 0x200, 0xf1, 0x1000, 0x33, 0x2, 0x8, 0x1, 0x4, 0x6, 0x101000, 0x8, 0x3, 0x101, 0x3, 0x0, 0xc0000000, 0x0, 0x18000000, 0x8, 0x2bb, 0x1000, 0x5, 0x80000000, 0x5a2, 0x4, 0xa4, 0x1, 0x4, 0xff, 0x8, 0x5, 0x3, 0x4], 0x4, [{0x7, 0xe, 0x2}, {0xff, 0x77, 0x8}, {0x2, 0x8d, 0x3}, {0xfe, 0x7f, 0x5}], 0x3, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5c, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x652}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$selinux_access(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x88282, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001880)=ANY=[@ANYBLOB="6000000010000000000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="08860100223803003800128006000100110000001c0003800c00010000000000090000000c0001000000000008000000080005000000000000000000000000000000000078fbe5930eb546f21f00b95e59aafd8c3d213bb12f59586a800735a936f5ba1a31f8c3cb2fed45dbfae9175aca6b22b53d6d2b217f2ddb49c953c3a4c326d42af33fbd59f9c40f9f9012ca372e44f8012eb1f3f35945b5b2a6e6a0b980beee2f78afa911083bc8d7", @ANYRES32=r5, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040884)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000340)='.\x00', 0x850003d1)
readv(r8, &(0x7f0000000480)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000440)='ext4_collapse_range\x00', r9}, 0x18)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c000180060006008035"], 0x24}}, 0x10)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)

1.18765492s ago: executing program 0 (id=3197):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

1.125302883s ago: executing program 0 (id=3199):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x18)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

1.067104565s ago: executing program 0 (id=3200):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = getpgrp(r0)
setpgid(r1, r0)
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000100)={&(0x7f00000000c0)=""/40, 0x28})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
r7 = syz_io_uring_setup(0x26b6, &(0x7f0000000200)={0x0, 0xf906, 0x800, 0x0, 0x308}, &(0x7f0000000080), &(0x7f0000000280))
pselect6(0x40, &(0x7f0000002e80)={0x9, 0x7fffffff, 0x2, 0xffffffffffffff35, 0xedbf, 0x4, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES2(r7, 0xd, &(0x7f00000008c0)={0xa, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000800)=[0x2, 0x4]}, 0x20)
io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x0, 0x0)
r8 = syz_open_procfs$namespace(r1, &(0x7f0000000280)='ns/pid\x00')
sendmsg$nl_route(r5, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlinkprop={0x28, 0x6c, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x8, 0x4}, [@IFLA_NET_NS_FD={0x8, 0x1c, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1010}, 0x4001005)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x9, 0xbd79, 0x3, 0x231fc, r2, 0x3, '\x00', r6, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0xf}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r10}, &(0x7f0000000a00), &(0x7f0000000a40)=r9}, 0x20)
ioctl$sock_inet_tcp_SIOCATMARK(r9, 0x8905, &(0x7f00000003c0))
bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0)

1.000829958s ago: executing program 0 (id=3201):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xac341af6c6a90546, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
pipe2$9p(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, 0x0, &(0x7f0000001800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x2000)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
r6 = dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',v0,c'])

972.905819ms ago: executing program 2 (id=3202):
pipe2$9p(0x0, 0x48c0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'})
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x80)
pwritev(r2, &(0x7f0000000500)=[{&(0x7f0000000040)='9G', 0x2}], 0x1, 0xffffff01, 0x2)

911.555921ms ago: executing program 6 (id=3203):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080), 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000002d80)={'ip_vti0\x00', &(0x7f0000002c80)=@ethtool_rxnfc={0x31, 0x11, 0xe8, {0x4, @hdata="4ccbebb4add1395ee325a350b1e8d5aa4bc8f864be3e8b34fc5684fd0ad87b3e9ebdb22bfff77549fba411b6983ce1727dffae91", {0x0, @random="f860c2d67e46", 0xa3b7, 0x3, [0x100, 0x3ff]}, @udp_ip4_spec={@multicast1, @remote, 0x4e21, 0x4e22}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, 0xfff9, 0x7ff, [0x1000, 0x203f]}, 0xe, 0x3ff}}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r1}, 0x10)
close(r0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = fsmount(0xffffffffffffffff, 0x0, 0x20)
openat$cgroup_ro(r4, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)

882.601783ms ago: executing program 2 (id=3204):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r1, 0x0, 0x2}, 0x18)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

881.668713ms ago: executing program 6 (id=3205):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2)
r2 = dup2(r1, r1)
ioctl$BLKTRACESTART(r2, 0x125d, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netstat\x00')
r5 = socket(0x11, 0x2, 0x0)
setsockopt(r5, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10)
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20)
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x24020000)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) (async)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async)
creat(&(0x7f00000000c0)='./file0\x00', 0xa2) (async)
dup2(r1, r1) (async)
ioctl$BLKTRACESTART(r2, 0x125d, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netstat\x00') (async)
socket(0x11, 0x2, 0x0) (async)
setsockopt(r5, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10) (async)
close_range(r4, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) (async)
getpid() (async)
syz_pidfd_open(r6, 0x0) (async)
setns(r7, 0x24020000) (async)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) (async)

839.382834ms ago: executing program 2 (id=3206):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0x1, r2)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r5 = syz_io_uring_setup(0x4073, &(0x7f0000000480)={0x0, 0x1568, 0x10000, 0x2, 0x264}, &(0x7f0000000040)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}})
request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
close(r0)
r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r9, 0x400, 0x1)
r10 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r11 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x2)
write$binfmt_misc(r11, &(0x7f0000000180)="e502", 0x2)
execveat(r11, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

816.873245ms ago: executing program 1 (id=3207):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x804, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4088, 0xff8}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x40, &(0x7f0000003700)={0x77359400})

761.842898ms ago: executing program 5 (id=3208):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
close_range(r1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x400004, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)='>', 0x1}], 0x1}}], 0x1, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x2)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0xa840, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sysinfo(&(0x7f0000000000)=""/177)
sysinfo(&(0x7f0000000380)=""/171)
shutdown(r4, 0x1)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8)

760.435448ms ago: executing program 0 (id=3209):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000380)={0xd, 0x3, 0x4, 0x1, 0x9, 0x0, [{0x3, 0x8000000000000001, 0x690, '\x00', 0x400}, {0xff, 0xf426, 0x8, '\x00', 0x108}, {0xf08e, 0x8, 0x4, '\x00', 0x201}, {0xfaa000000000, 0x4, 0xe72, '\x00', 0x2}, {0x10000, 0x1, 0x9, '\x00', 0x2102}, {0x101, 0xb, 0x80000001, '\x00', 0x2008}, {0x20000009, 0x4, 0x7f, '\x00', 0x2000}, {0xffffffff80000001, 0x8, 0x3, '\x00', 0x600}, {0xfff, 0x8000000, 0x5, '\x00', 0x200}]})
syz_emit_ethernet(0x5e, &(0x7f0000000bc0)=ANY=[@ANYRESDEC=r0, @ANYBLOB="d056d667b7752e18dbaec822308722be228cbb27190610f701a6b743a26f810d0afc09d285f49f9ff4ae6a324b8fa920ed494e6c8d9dfb897db1a4a29019f345d2f47fc289a9bd5b082f290e37961cfc1b78f37f", @ANYRESOCT=r0, @ANYBLOB="34031b0752fcec28de08d49bc718c289245fe580b306fc76d709b439c25d0a0fe16ed05698da0360a0d8410c81535725997f434f650b46db87dcfc20dbda4736e4de168a331ab54fec9ce331eb78f5c969068db349ee5d1f128a8b1636f71bf9fc074e6a434bc139afb6054fa9700713cd8e895d03d30b24b9e11ed3c5d58de1c94924a8880ab3611decef5d3a9cbb78048d5bfcb66b468ddc1aa519e093693788b36a85b56d5425533e6639350de39a04", @ANYRESOCT=r0], &(0x7f00000000c0)={0x0, 0x3, [0xb79, 0xa31, 0xce8, 0x25e]})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=<r2=>0x0)
ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000600)={'\x00', 0x9b21, 0x4, 0x100008, 0x8, 0x8, r2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3)
rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000800)={0x29, 0x9, 0xf})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x40, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000006c0)={0x3, 0x0, 0x1, 'queue1\x00', 0x6})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x6}, 0x0, 0x10000, 0x8, 0x4, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000026}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x4, 0x0, 0x4b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x10, 0x7, 0x40000004, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0})
read$msr(r5, &(0x7f0000003ac0)=""/102392, 0x18ff8)
sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x44008004)
write$binfmt_misc(r1, &(0x7f0000000300), 0xfdef)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x2, 0x40208, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x2, 0x5}, 0x121, 0x0, 0x800000, 0x6, 0x2, 0x2, 0xf, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0xd0)
socket(0x10, 0x3, 0x0)

759.662508ms ago: executing program 6 (id=3210):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)

705.06676ms ago: executing program 1 (id=3211):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x1})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x50, 0x180871, 0x7, 0x4, 0x1ff, 0x1, 0x1, 0x0, 0x6})

646.638973ms ago: executing program 6 (id=3212):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = getpgrp(r0)
setpgid(r1, r0)
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000100)={&(0x7f00000000c0)=""/40, 0x28})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
r7 = syz_io_uring_setup(0x26b6, &(0x7f0000000200)={0x0, 0xf906, 0x800, 0x0, 0x308}, &(0x7f0000000080), &(0x7f0000000280))
pselect6(0x40, &(0x7f0000002e80)={0x9, 0x7fffffff, 0x2, 0xffffffffffffff35, 0xedbf, 0x4, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES2(r7, 0xd, &(0x7f00000008c0)={0xa, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000800)=[0x2, 0x4]}, 0x20)
io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x0, 0x0)
r8 = syz_open_procfs$namespace(r1, &(0x7f0000000280)='ns/pid\x00')
sendmsg$nl_route(r5, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlinkprop={0x28, 0x6c, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x8, 0x4}, [@IFLA_NET_NS_FD={0x8, 0x1c, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1010}, 0x4001005)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x9, 0xbd79, 0x3, 0x231fc, r2, 0x3, '\x00', r6, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0xf}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r10}, &(0x7f0000000a00), &(0x7f0000000a40)=r9}, 0x20)
ioctl$sock_inet_tcp_SIOCATMARK(r9, 0x8905, &(0x7f00000003c0))
bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0)

645.253783ms ago: executing program 1 (id=3222):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x804, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4088, 0xff8}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x40, &(0x7f0000003700)={0x77359400})

523.452708ms ago: executing program 5 (id=3213):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, 0x0, 0x0, r1)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b000000"], 0x48)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x29ab, 0xd480, 0x0, 0x0, 0x0)
close(r0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r3, 0x400, 0x1)
r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
creat(0x0, 0xd931d3864d39dcdb)
r5 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x2)
write$binfmt_misc(r5, &(0x7f0000000180)="e502", 0x2)
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

455.468521ms ago: executing program 1 (id=3214):
bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)

436.942862ms ago: executing program 2 (id=3215):
pipe2$9p(0x0, 0x48c0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'})
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x80)
pwritev(r2, &(0x7f0000000500)=[{&(0x7f0000000040)='9G', 0x2}], 0x1, 0xffffff01, 0x2)

160.705083ms ago: executing program 6 (id=3216):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r1, 0x0, 0x2}, 0x18)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

39.679509ms ago: executing program 1 (id=3217):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0x1, r2)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r6 = syz_io_uring_setup(0x4073, &(0x7f0000000480)={0x0, 0x1568, 0x10000, 0x2, 0x264}, &(0x7f0000000040)=<r7=>0x0, &(0x7f00000000c0)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1})
io_uring_enter(r6, 0x29ab, 0xd480, 0x0, 0x0, 0x0)
close(r0)
r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r9, 0x400, 0x1)
r10 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r11 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x2)
write$binfmt_misc(r11, &(0x7f0000000180)="e502", 0x2)
execveat(r11, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

593.31µs ago: executing program 6 (id=3218):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x9, 0x0, 0x0, 0x7, 0x100, {0x15, 0x4, 0x0, 0x4, 0x11d, 0x64, 0x8, 0xf3, 0x84, 0x1, @private=0xa010101, @rand_addr=0x64010102, {[@ssrr={0x89, 0x3, 0xdc}, @timestamp_prespec={0x44, 0x3c, 0x76, 0x3, 0x7, [{@loopback, 0xa2}, {@multicast2, 0x5}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x100}, {@empty, 0x3}, {@broadcast, 0x7}, {@private=0xa010100, 0xf7}]}]}}}}}}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r8, 0x25, &(0x7f0000000000)={0x1})
fcntl$lock(r8, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7})
fcntl$lock(r8, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000})
statx(r8, &(0x7f00000001c0)='./file0\x00', 0x100, 0x200, &(0x7f0000000300))
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0xffffffff}, 0x18)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x10ed}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x3c}}, 0x0)

0s ago: executing program 2 (id=3219):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
close_range(r1, 0xffffffffffffffff, 0x0) (fail_nth: 1)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x400004, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)='>', 0x1}], 0x1}}], 0x1, 0x40c4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sysinfo(&(0x7f0000000000)=""/177)
sysinfo(&(0x7f0000000380)=""/171)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8)

kernel console output (not intermixed with test programs):

0
[  158.238858][T12357]  ? should_fail_ex+0xdb/0x280
[  158.238876][T12357]  ? selinux_nlmsg_lookup+0x99/0x890
[  158.238900][T12357]  ? __rcu_read_unlock+0x34/0x70
[  158.238924][T12357]  ? __netlink_lookup+0x266/0x2a0
[  158.238988][T12357]  netlink_unicast+0x5c0/0x690
[  158.239017][T12357]  netlink_sendmsg+0x58b/0x6b0
[  158.239038][T12357]  ? __pfx_netlink_sendmsg+0x10/0x10
[  158.239057][T12357]  __sock_sendmsg+0x145/0x180
[  158.239081][T12357]  ____sys_sendmsg+0x31e/0x4e0
[  158.239184][T12357]  ___sys_sendmsg+0x17b/0x1d0
[  158.239212][T12357]  __x64_sys_sendmsg+0xd4/0x160
[  158.239233][T12357]  x64_sys_call+0x191e/0x3000
[  158.239254][T12357]  do_syscall_64+0xd2/0x200
[  158.239274][T12357]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  158.239323][T12357]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  158.239359][T12357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.239380][T12357] RIP: 0033:0x7fdfdb21f749
[  158.239400][T12357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.239417][T12357] RSP: 002b:00007fdfd9c7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  158.239438][T12357] RAX: ffffffffffffffda RBX: 00007fdfdb475fa0 RCX: 00007fdfdb21f749
[  158.239450][T12357] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  158.239463][T12357] RBP: 00007fdfd9c7f090 R08: 0000000000000000 R09: 0000000000000000
[  158.239542][T12357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.239554][T12357] R13: 00007fdfdb476038 R14: 00007fdfdb475fa0 R15: 00007ffdbd9d1678
[  158.239588][T12357]  </TASK>
[  158.414110][T12363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=12363 comm=syz.5.2483
[  158.418282][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.428975][T12363] loop5: detected capacity change from 0 to 512
[  158.600200][ T5887] bridge_slave_0: left allmulticast mode
[  158.605882][ T5887] bridge_slave_0: left promiscuous mode
[  158.611646][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.634590][T12363] EXT4-fs (loop5): orphan cleanup on readonly fs
[  158.644718][T12363] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 26 (err -116)
[  158.656428][T12363] EXT4-fs (loop5): Remounting filesystem read-only
[  158.665571][T12363] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  158.684273][ T5902] smc: removing ib device syz2
[  158.689280][ T5887] erspan0 (unregistering): left promiscuous mode
[  158.698559][ T5887] 0ªî{X¹¦ (unregistering): left promiscuous mode
[  158.768307][ T5887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.820138][ T5887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.834340][ T5887] bond0 (unregistering): (slave bond1): Releasing backup interface
[  158.848377][ T5887] bond0 (unregistering): (slave bond3): Releasing backup interface
[  158.864493][ T5887] bond0 (unregistering): (slave bond4): Releasing backup interface
[  158.873829][ T5887] bond0 (unregistering): (slave bond5): Releasing backup interface
[  158.883976][ T5887] bond0 (unregistering): Released all slaves
[  158.884301][T12379] loop2: detected capacity change from 0 to 1024
[  158.893232][ T5887] bond1 (unregistering): Released all slaves
[  158.906298][ T5887] bond2 (unregistering): Released all slaves
[  158.916216][ T5887] bond3 (unregistering): Released all slaves
[  158.917199][T12379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.929237][ T5887] bond4 (unregistering): Released all slaves
[  158.943909][ T5887] bond5 (unregistering): Released all slaves
[  158.956740][T12379] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.2485: missing EA_INODE flag
[  158.971980][ T1035] ip6_vti0 speed is unknown, defaulting to 1000
[  158.973324][T12379] EXT4-fs (loop2): Remounting filesystem read-only
[  158.978273][ T1035] syz2: Port: 1 Link DOWN
[  158.989868][T12379] FAULT_INJECTION: forcing a failure.
[  158.989868][T12379] name failslab, interval 1, probability 0, space 0, times 0
[  159.002788][T12379] CPU: 0 UID: 0 PID: 12379 Comm: syz.2.2485 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  159.002821][T12379] Tainted: [W]=WARN
[  159.002826][T12379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  159.002837][T12379] Call Trace:
[  159.002842][T12379]  <TASK>
[  159.002850][T12379]  __dump_stack+0x1d/0x30
[  159.002916][T12379]  dump_stack_lvl+0xe8/0x140
[  159.002934][T12379]  dump_stack+0x15/0x1b
[  159.002950][T12379]  should_fail_ex+0x265/0x280
[  159.002968][T12379]  should_failslab+0x8c/0xb0
[  159.002996][T12379]  kmem_cache_alloc_lru_noprof+0x55/0x490
[  159.003026][T12379]  ? __d_alloc+0x3d/0x340
[  159.003084][T12379]  __d_alloc+0x3d/0x340
[  159.003116][T12379]  d_alloc+0x2e/0x100
[  159.003163][T12379]  lookup_one_qstr_excl+0x99/0x250
[  159.003199][T12379]  do_renameat2+0x380/0x9e0
[  159.003273][T12379]  __x64_sys_rename+0x58/0x70
[  159.003313][T12379]  x64_sys_call+0x1f9/0x3000
[  159.003337][T12379]  do_syscall_64+0xd2/0x200
[  159.003396][T12379]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  159.003426][T12379]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  159.003461][T12379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.003531][T12379] RIP: 0033:0x7f30ea65f749
[  159.003594][T12379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.003613][T12379] RSP: 002b:00007f30e90bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  159.003631][T12379] RAX: ffffffffffffffda RBX: 00007f30ea8b5fa0 RCX: 00007f30ea65f749
[  159.003643][T12379] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000
[  159.003654][T12379] RBP: 00007f30e90bf090 R08: 0000000000000000 R09: 0000000000000000
[  159.003701][T12379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.003713][T12379] R13: 00007f30ea8b6038 R14: 00007f30ea8b5fa0 R15: 00007fffd45e6148
[  159.003804][T12379]  </TASK>
[  159.206872][T12388] loop3: detected capacity change from 0 to 1024
[  159.215203][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.226315][ T8097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.226527][T12388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.253394][T12388] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.2486: missing EA_INODE flag
[  159.270945][T12388] EXT4-fs (loop3): Remounting filesystem read-only
[  159.295678][T12402] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5)
[  159.309966][T12402] bond1 (unregistering): Released all slaves
[  159.373093][ T5887] hsr_slave_0: left promiscuous mode
[  159.382299][ T5887] hsr_slave_1: left promiscuous mode
[  159.388143][ T5887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.395643][ T5887] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.404375][ T5887] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.411933][ T5887] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.423497][ T5887] veth0_macvtap: left promiscuous mode
[  159.429883][T12480] loop5: detected capacity change from 0 to 512
[  159.429903][ T5887] veth1_vlan: left promiscuous mode
[  159.441535][ T5887] veth0_vlan: left promiscuous mode
[  159.443228][T12480] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.459998][T12480] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.521935][ T5887] team0 (unregistering): Port device team_slave_1 removed
[  159.532499][ T5887] team0 (unregistering): Port device team_slave_0 removed
[  159.540540][T12488] loop2: detected capacity change from 0 to 512
[  159.568199][T12480] veth1_to_bond: entered allmulticast mode
[  159.582686][T12488] EXT4-fs (loop2): too many log groups per flexible block group
[  159.592110][T12488] EXT4-fs (loop2): failed to initialize mballoc (-12)
[  159.595127][T12479] veth1_to_bond: left allmulticast mode
[  159.599137][T12488] EXT4-fs (loop2): mount failed
[  159.608345][T11801] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  159.618539][T11801] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  159.628226][T11801] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  159.637179][T11801] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  159.664109][ T8097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.691603][T11801] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.700439][T12403] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.704222][T11801] 8021q: adding VLAN 0 to HW filter on device team0
[  159.725724][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.732939][ T5897] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.741947][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.749035][ T5897] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.860148][T11801] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.889728][T12551] loop5: detected capacity change from 0 to 512
[  159.901954][T12551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.915510][T12551] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.935777][T12551] veth1_to_bond: entered allmulticast mode
[  159.942204][T12549] veth1_to_bond: left allmulticast mode
[  159.952464][ T5887] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.963048][ T5887] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.990778][ T8097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.013543][ T5887] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.024057][ T5887] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.055865][T11801] veth0_vlan: entered promiscuous mode
[  160.063357][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2506'.
[  160.066649][T11801] veth1_vlan: entered promiscuous mode
[  160.083526][ T5887] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.093948][ T5887] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.116308][T12583] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2507'.
[  160.132599][ T5887] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.143032][ T5887] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.162152][T11801] veth0_macvtap: entered promiscuous mode
[  160.180393][T11801] veth1_macvtap: entered promiscuous mode
[  160.207261][T11801] batman_adv: batadv0: Interface activated: batadv_slave_0
[  160.229108][T11801] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.240988][ T5887] bridge_slave_1: left allmulticast mode
[  160.246667][ T5887] bridge_slave_1: left promiscuous mode
[  160.252491][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.260755][ T5887] bridge_slave_0: left allmulticast mode
[  160.266555][ T5887] bridge_slave_0: left promiscuous mode
[  160.272369][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.285295][T12694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2511'.
[  160.338827][ T5887] gretap0 (unregistering): left promiscuous mode
[  160.590601][ T5887] bond0 (unregistering): left promiscuous mode
[  160.596872][ T5887] bond_slave_0: left promiscuous mode
[  160.602508][ T5887] bond_slave_1: left promiscuous mode
[  160.607971][ T5887] bond2 (unregistering): left promiscuous mode
[  160.614218][ T5887] bond3 (unregistering): left promiscuous mode
[  160.620409][ T5887] bond4 (unregistering): left promiscuous mode
[  160.626577][ T5887] bond5 (unregistering): left promiscuous mode
[  160.635180][ T5887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  160.645545][ T5887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  160.655664][ T5887] bond0 (unregistering): (slave bond2): Releasing backup interface
[  160.664330][ T5887] bond0 (unregistering): (slave bond3): Releasing backup interface
[  160.673407][ T5887] bond0 (unregistering): (slave bond4): Releasing backup interface
[  160.678908][T12719] loop2: detected capacity change from 0 to 512
[  160.688481][ T5887] bond0 (unregistering): (slave bond5): Releasing backup interface
[  160.697043][ T5887] bond0 (unregistering): Released all slaves
[  160.703558][T12719] EXT4-fs (loop2): too many log groups per flexible block group
[  160.707395][ T5887] bond1 (unregistering): Released all slaves
[  160.711644][T12719] EXT4-fs (loop2): failed to initialize mballoc (-12)
[  160.720360][ T5887] bond2 (unregistering): Released all slaves
[  160.724407][T12719] EXT4-fs (loop2): mount failed
[  160.733390][ T5887] bond3 (unregistering): Released all slaves
[  160.745555][ T5887] bond4 (unregistering): Released all slaves
[  160.754560][ T5887] bond5 (unregistering): Released all slaves
[  160.763977][ T5887] bond6 (unregistering): Released all slaves
[  160.785323][   T10] infiniband syb2: ib_query_port failed (-19)
[  160.787389][T12548] chnl_net:caif_netlink_parms(): no params data found
[  160.798064][T12726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2515'.
[  160.818458][ T5878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.861583][ T5878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.890111][ T5878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.901434][ T5887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.909129][ T5887] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.918711][ T5887] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.926240][ T5887] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.939101][ T5887] veth1_macvtap: left promiscuous mode
[  160.939562][T12766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.953397][ T5887] veth0_macvtap: left promiscuous mode
[  160.959225][ T5887] veth1_vlan: left promiscuous mode
[  160.959354][T12766] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.964697][ T5887] veth0_vlan: left promiscuous mode
[  161.053489][ T5887] team0 (unregistering): Port device team_slave_1 removed
[  161.070228][ T5887] team0 (unregistering): Port device team_slave_0 removed
[  161.083248][ T5877] smc: removing ib device syz!
[  161.115702][ T5878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.170067][T12548] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.177177][T12548] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.194825][T12548] bridge_slave_0: entered allmulticast mode
[  161.210715][T12548] bridge_slave_0: entered promiscuous mode
[  161.225251][T12548] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.232394][T12548] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.258155][T12548] bridge_slave_1: entered allmulticast mode
[  161.271319][T12548] bridge_slave_1: entered promiscuous mode
[  161.326247][T12548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.348271][T12548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.386916][T12548] team0: Port device team_slave_0 added
[  161.394174][T12548] team0: Port device team_slave_1 added
[  161.429682][T12548] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.436761][T12548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  161.462694][T12548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.474556][T12548] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.481584][T12548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  161.507521][T12548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.540243][T12548] hsr_slave_0: entered promiscuous mode
[  161.546423][T12548] hsr_slave_1: entered promiscuous mode
[  161.552847][T12548] debugfs: 'hsr0' already exists in 'hsr'
[  161.558692][T12548] Cannot create hsr debugfs directory
[  161.625773][   T29] kauditd_printk_skb: 1369 callbacks suppressed
[  161.625790][   T29] audit: type=1326 audit(1764273054.084:39108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12775 comm="syz.2.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f30ea6565e7 code=0x7ffc0000
[  161.646943][T12548] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  161.665712][T12548] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  161.675298][T12548] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  161.676043][   T29] audit: type=1326 audit(1764273054.124:39109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12775 comm="syz.2.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f30ea5fb829 code=0x7ffc0000
[  161.705854][   T29] audit: type=1326 audit(1764273054.124:39110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12775 comm="syz.2.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f30ea6565e7 code=0x7ffc0000
[  161.729431][   T29] audit: type=1326 audit(1764273054.124:39111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12775 comm="syz.2.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f30ea5fb829 code=0x7ffc0000
[  161.752949][   T29] audit: type=1326 audit(1764273054.124:39112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12775 comm="syz.2.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f30ea65f749 code=0x7ffc0000
[  161.776742][   T29] audit: type=1326 audit(1764273054.124:39113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12775 comm="syz.2.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f30ea6565e7 code=0x7ffc0000
[  161.800272][   T29] audit: type=1326 audit(1764273054.124:39114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12775 comm="syz.2.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f30ea5fb829 code=0x7ffc0000
[  161.824067][   T29] audit: type=1326 audit(1764273054.124:39115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12775 comm="syz.2.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f30ea65f749 code=0x7ffc0000
[  161.847669][   T29] audit: type=1326 audit(1764273054.134:39116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12775 comm="syz.2.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f30ea6565e7 code=0x7ffc0000
[  161.871375][   T29] audit: type=1326 audit(1764273054.134:39117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12775 comm="syz.2.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f30ea5fb829 code=0x7ffc0000
[  161.911747][T12548] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  161.931255][T12983] loop5: detected capacity change from 0 to 512
[  161.944638][T12548] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.951757][T12548] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.959085][T12548] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.966159][T12548] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.015022][T12983] EXT4-fs (loop5): too many log groups per flexible block group
[  162.016319][T12548] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.028986][T12983] EXT4-fs (loop5): failed to initialize mballoc (-12)
[  162.036318][T12983] EXT4-fs (loop5): mount failed
[  162.080722][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.088652][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.091678][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2527'.
[  162.111385][T12548] 8021q: adding VLAN 0 to HW filter on device team0
[  162.123674][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.130908][ T5887] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.153185][T12548] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  162.163743][T12548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  162.185497][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.192617][ T5887] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.260919][T12548] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.268701][T13008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=13008 comm=syz.5.2529
[  162.300471][T13008] loop5: detected capacity change from 0 to 512
[  162.322867][T13008] EXT4-fs (loop5): orphan cleanup on readonly fs
[  162.330712][T13008] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 26 (err -116)
[  162.342432][T13008] EXT4-fs (loop5): Remounting filesystem read-only
[  162.351654][T13008] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  162.391874][T12548] veth0_vlan: entered promiscuous mode
[  162.400070][T12548] veth1_vlan: entered promiscuous mode
[  162.414599][T12548] veth0_macvtap: entered promiscuous mode
[  162.422548][T12548] veth1_macvtap: entered promiscuous mode
[  162.433215][T12548] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.444245][T12548] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.454772][ T5878] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.464438][ T5878] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.473643][ T5878] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.484269][ T5878] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.522078][T13031] FAULT_INJECTION: forcing a failure.
[  162.522078][T13031] name failslab, interval 1, probability 0, space 0, times 0
[  162.534915][T13031] CPU: 1 UID: 0 PID: 13031 Comm: syz.6.2501 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  162.534951][T13031] Tainted: [W]=WARN
[  162.534958][T13031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  162.535036][T13031] Call Trace:
[  162.535042][T13031]  <TASK>
[  162.535049][T13031]  __dump_stack+0x1d/0x30
[  162.535075][T13031]  dump_stack_lvl+0xe8/0x140
[  162.535134][T13031]  dump_stack+0x15/0x1b
[  162.535154][T13031]  should_fail_ex+0x265/0x280
[  162.535186][T13031]  should_failslab+0x8c/0xb0
[  162.535217][T13031]  __kmalloc_noprof+0xa5/0x570
[  162.535250][T13031]  ? bpf_test_init+0x86/0x140
[  162.535313][T13031]  bpf_test_init+0x86/0x140
[  162.535353][T13031]  bpf_prog_test_run_xdp+0x305/0x970
[  162.535380][T13031]  ? _kstrtol+0x81/0x90
[  162.535406][T13031]  ? __rcu_read_unlock+0x4f/0x70
[  162.535443][T13031]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  162.535554][T13031]  bpf_prog_test_run+0x22a/0x390
[  162.535577][T13031]  __sys_bpf+0x4c0/0x7c0
[  162.535594][T13031]  __x64_sys_bpf+0x41/0x50
[  162.535647][T13031]  x64_sys_call+0x2aee/0x3000
[  162.535661][T13031]  do_syscall_64+0xd2/0x200
[  162.535675][T13031]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  162.535701][T13031]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  162.535784][T13031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.535798][T13031] RIP: 0033:0x7f4f49b6f749
[  162.535809][T13031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.535821][T13031] RSP: 002b:00007f4f485cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  162.535836][T13031] RAX: ffffffffffffffda RBX: 00007f4f49dc5fa0 RCX: 00007f4f49b6f749
[  162.535901][T13031] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  162.535915][T13031] RBP: 00007f4f485cf090 R08: 0000000000000000 R09: 0000000000000000
[  162.535926][T13031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  162.535934][T13031] R13: 00007f4f49dc6038 R14: 00007f4f49dc5fa0 R15: 00007ffc7835d818
[  162.535947][T13031]  </TASK>
[  163.040316][ T8097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.059634][T13052] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[  163.066322][T13052] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  163.073944][T13052] vhci_hcd vhci_hcd.0: Device attached
[  163.082503][T13053] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0
[  163.089870][ T5887] vhci_hcd: stop threads
[  163.094243][ T5887] vhci_hcd: release socket
[  163.098672][ T5887] vhci_hcd: disconnect device
[  163.146877][T13052] loop5: detected capacity change from 0 to 2048
[  163.180062][T13052]  loop5: p1 p2 p3
[  163.185172][T13052] loop5: p2 size 458752 extends beyond EOD, truncated
[  163.194910][T13052] loop5: p3 start 8388352 is beyond EOD, truncated
[  163.634672][T13093] loop6: detected capacity change from 0 to 512
[  163.657780][T13098] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  163.676350][T13098] loop6: detected capacity change from 0 to 2048
[  163.729565][T13098]  loop6: p1 p2 p3
[  163.735038][T13098] loop6: p2 size 458752 extends beyond EOD, truncated
[  163.744171][T13098] loop6: p3 start 8388352 is beyond EOD, truncated
[  163.852149][T13122] loop1: detected capacity change from 0 to 256
[  163.860400][T13122] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  163.882715][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2548'.
[  163.932161][T13136] loop5: detected capacity change from 0 to 2048
[  163.952171][T13136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.973533][T13136] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2551'.
[  163.982912][T13136] 0ªî{X¹¦: renamed from gretap0
[  163.989333][T13136] 0ªî{X¹¦: entered allmulticast mode
[  163.995655][T13136] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  164.035703][ T8097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.737730][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2560'.
[  164.752230][T13171] netlink: 'syz.2.2561': attribute type 1 has an invalid length.
[  164.760018][T13171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2561'.
[  164.774120][T13173] loop6: detected capacity change from 0 to 512
[  164.774288][T13171] netlink: 'syz.2.2561': attribute type 1 has an invalid length.
[  164.788267][T13171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2561'.
[  164.791916][T13173] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.802160][T13171] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2561'.
[  164.811148][T13173] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.846059][T13180] loop2: detected capacity change from 0 to 256
[  164.847033][T13173] veth1_to_bond: entered allmulticast mode
[  164.859488][T13180] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  164.861192][T13172] veth1_to_bond: left allmulticast mode
[  164.908124][T12548] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.994005][T13197] loop5: detected capacity change from 0 to 512
[  165.009805][T13197] EXT4-fs (loop5): too many log groups per flexible block group
[  165.018433][T13197] EXT4-fs (loop5): failed to initialize mballoc (-12)
[  165.021925][T13204] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2571'.
[  165.025491][T13197] EXT4-fs (loop5): mount failed
[  165.062115][T13215] x_tables: duplicate underflow at hook 1
[  165.087590][T13215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2573'.
[  165.103305][T13220] loop5: detected capacity change from 0 to 512
[  165.131522][T13220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.154507][T13220] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.188104][T13220] veth1_to_bond: entered allmulticast mode
[  165.197331][T13219] veth1_to_bond: left allmulticast mode
[  165.231613][T13240] loop6: detected capacity change from 0 to 256
[  165.239465][T13240] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  165.240619][ T8097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.271370][T13245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2582'.
[  165.333806][T13249] openvswitch: netlink: Flow actions attr not present in new flow.
[  165.497019][T13267] x_tables: duplicate underflow at hook 1
[  165.509524][T13267] team0 (unregistering): Port device team_slave_0 removed
[  165.519870][T13267] team0 (unregistering): Port device team_slave_1 removed
[  165.537049][T13271] loop5: detected capacity change from 0 to 512
[  165.551003][T13271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.563657][T13271] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.581643][T13271] veth1_to_bond: entered allmulticast mode
[  165.588021][T13270] veth1_to_bond: left allmulticast mode
[  165.619067][ T8097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.856290][T13316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.865635][T13316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.263070][T13340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=13340 comm=syz.1.2600
[  166.286314][T13340] loop1: detected capacity change from 0 to 512
[  166.309404][T13340] EXT4-fs (loop1): orphan cleanup on readonly fs
[  166.316844][T13340] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 26 (err -116)
[  166.329735][T13340] EXT4-fs (loop1): Remounting filesystem read-only
[  166.337989][T13340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  166.384709][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.588660][T13354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.599147][T13354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.594254][T13385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.738977][T13385] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.918032][T13402] __nla_validate_parse: 4 callbacks suppressed
[  168.918049][T13402] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2608'.
[  168.918378][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2608'.
[  169.029562][T13401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13401 comm=syz.6.2608
[  169.080063][   T29] kauditd_printk_skb: 1986 callbacks suppressed
[  169.080081][   T29] audit: type=1326 audit(1764273061.544:41104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13420 comm="syz.6.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f49b6f749 code=0x7ffc0000
[  169.110656][   T29] audit: type=1326 audit(1764273061.544:41105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13420 comm="syz.6.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f4f49b6f749 code=0x7ffc0000
[  169.134266][   T29] audit: type=1326 audit(1764273061.544:41106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13420 comm="syz.6.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f49b6f749 code=0x7ffc0000
[  169.158122][   T29] audit: type=1326 audit(1764273061.544:41107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13420 comm="syz.6.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f49b6f749 code=0x7ffc0000
[  169.181842][   T29] audit: type=1326 audit(1764273061.544:41108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13420 comm="syz.6.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f49b6f749 code=0x7ffc0000
[  169.205719][   T29] audit: type=1326 audit(1764273061.544:41109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13420 comm="syz.6.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f49b6f749 code=0x7ffc0000
[  169.229337][   T29] audit: type=1326 audit(1764273061.544:41110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13420 comm="syz.6.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f49b6f749 code=0x7ffc0000
[  169.252948][   T29] audit: type=1326 audit(1764273061.544:41111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13420 comm="syz.6.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f49b6f749 code=0x7ffc0000
[  169.276437][   T29] audit: type=1326 audit(1764273061.544:41112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13420 comm="syz.6.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f49b6f749 code=0x7ffc0000
[  169.300070][   T29] audit: type=1326 audit(1764273061.544:41113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13420 comm="syz.6.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4f49b6f749 code=0x7ffc0000
[  169.674769][T13437] loop6: detected capacity change from 0 to 512
[  170.024027][T13437] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  170.042331][T13437] EXT4-fs (loop6): 1 truncate cleaned up
[  170.048544][T13437] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.114127][T12548] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.582221][T13475] loop5: detected capacity change from 0 to 512
[  170.650174][T13475] EXT4-fs (loop5): too many log groups per flexible block group
[  170.658056][T13475] EXT4-fs (loop5): failed to initialize mballoc (-12)
[  170.665304][T13475] EXT4-fs (loop5): mount failed
[  170.673327][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2624'.
[  170.689698][T13480] bridge0: entered promiscuous mode
[  170.695269][T13480] macvtap1: entered allmulticast mode
[  170.700741][T13480] bridge0: entered allmulticast mode
[  170.705546][T13488] loop5: detected capacity change from 0 to 512
[  170.713412][T13488] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  170.715350][T13480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13480 comm=syz.0.2624
[  170.728330][T13488] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2625: Invalid block bitmap block 0 in block_group 0
[  170.752011][T13488] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  170.761543][T13488] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.2625: attempt to clear invalid blocks 983261 len 1
[  170.776029][T13488] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.2625: Invalid inode table block 0 in block_group 0
[  170.790050][T13488] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  170.800730][T13488] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem
[  170.810283][T13488] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.2625: Invalid inode table block 0 in block_group 0
[  170.823920][T13488] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  170.834176][T13488] EXT4-fs error (device loop5): ext4_truncate:4637: inode #11: comm syz.5.2625: mark_inode_dirty error
[  170.845949][T13488] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem
[  170.855070][T13488] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.2625: Invalid inode table block 0 in block_group 0
[  170.867974][T13488] EXT4-fs (loop5): 1 truncate cleaned up
[  170.874127][T13488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.888297][T13488] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  170.906769][ T8097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.922901][T13496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=13496 comm=syz.0.2628
[  171.149041][T13530] loop2: detected capacity change from 0 to 512
[  171.160695][T13530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.173463][T13530] ext4 filesystem being mounted at /495/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.200196][T13530] veth1_to_bond: entered allmulticast mode
[  171.206607][T13529] veth1_to_bond: left allmulticast mode
[  171.224996][T13540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2638'.
[  171.245843][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.981930][T13560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2643'.
[  171.997097][T13560] loop2: detected capacity change from 0 to 512
[  172.010667][T13560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.024638][T13560] ext4 filesystem being mounted at /497/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.039592][T13560] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  172.091666][T13564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2643'.
[  172.304354][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.421301][T13587] loop1: detected capacity change from 0 to 512
[  172.440809][T13587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.453515][T13587] ext4 filesystem being mounted at /570/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.454655][T13583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=13583 comm=syz.5.2648
[  172.495257][T13583] loop5: detected capacity change from 0 to 512
[  172.501548][T13587] veth1_to_bond: entered allmulticast mode
[  172.501852][T13586] veth1_to_bond: left allmulticast mode
[  172.515714][T13583] EXT4-fs (loop5): orphan cleanup on readonly fs
[  172.522687][T13583] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 26 (err -116)
[  172.534537][T13583] EXT4-fs (loop5): Remounting filesystem read-only
[  172.541903][T13583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  172.554011][T13596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2651'.
[  172.564635][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.582594][T13600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2652'.
[  172.597401][T13600] bridge0: entered promiscuous mode
[  172.603040][T13600] macvtap1: entered allmulticast mode
[  172.608598][T13600] bridge0: entered allmulticast mode
[  172.617873][T13596] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  172.622176][T13600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13600 comm=syz.1.2652
[  173.283394][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2656'.
[  173.302926][ T8097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.340554][T13621] loop2: detected capacity change from 0 to 8192
[  173.444169][T13621]  loop2: p1 p2 p3 p4
[  173.449887][T13621] loop2: p1 size 196608 extends beyond EOD, truncated
[  173.464708][T13621] loop2: p2 start 164919041 is beyond EOD, truncated
[  173.471477][T13621] loop2: p3 size 66846464 extends beyond EOD, truncated
[  173.511560][T13621] loop2: p4 size 37048832 extends beyond EOD, truncated
[  173.582963][T13644] loop1: detected capacity change from 0 to 512
[  173.617514][T13644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.641462][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2658'.
[  173.663410][T13644] ext4 filesystem being mounted at /576/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.696223][T13651] macvtap1: entered allmulticast mode
[  173.701850][T13651] bridge0: entered allmulticast mode
[  173.721152][T13651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13651 comm=syz.5.2658
[  173.759083][T13644] veth1_to_bond: entered allmulticast mode
[  173.775309][T13643] veth1_to_bond: left allmulticast mode
[  173.839310][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.093552][   T29] kauditd_printk_skb: 1858 callbacks suppressed
[  174.093569][   T29] audit: type=1326 audit(1764273066.554:42970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13682 comm="syz.0.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc321fc65e7 code=0x7ffc0000
[  174.124056][   T29] audit: type=1326 audit(1764273066.554:42971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13682 comm="syz.0.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc321f6b829 code=0x7ffc0000
[  174.147689][   T29] audit: type=1326 audit(1764273066.554:42972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13682 comm="syz.0.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fc321fcf749 code=0x7ffc0000
[  174.151460][T13692] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  174.171483][   T29] audit: type=1326 audit(1764273066.584:42973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13682 comm="syz.0.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc321fc65e7 code=0x7ffc0000
[  174.202239][   T29] audit: type=1326 audit(1764273066.584:42974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13682 comm="syz.0.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc321f6b829 code=0x7ffc0000
[  174.226048][   T29] audit: type=1326 audit(1764273066.584:42975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13682 comm="syz.0.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fc321fcf749 code=0x7ffc0000
[  174.249900][   T29] audit: type=1326 audit(1764273066.584:42976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13680 comm="syz.2.2668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f30ea6565e7 code=0x7ffc0000
[  174.273570][   T29] audit: type=1326 audit(1764273066.584:42977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13680 comm="syz.2.2668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f30ea5fb829 code=0x7ffc0000
[  174.297118][   T29] audit: type=1326 audit(1764273066.584:42978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13680 comm="syz.2.2668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f30ea65f749 code=0x7ffc0000
[  174.320918][   T29] audit: type=1326 audit(1764273066.584:42979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13682 comm="syz.0.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc321fc65e7 code=0x7ffc0000
[  174.636829][T13703] loop5: detected capacity change from 0 to 512
[  174.650839][T13703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.663755][T13703] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.683777][T13703] veth1_to_bond: entered allmulticast mode
[  174.690246][T13702] veth1_to_bond: left allmulticast mode
[  174.748330][ T8097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.857424][T13722] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  174.913851][T13727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=13727 comm=syz.0.2683
[  175.231214][T13738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2686'.
[  175.245468][T13738] bridge0: entered promiscuous mode
[  175.250924][T13738] macvtap1: entered allmulticast mode
[  175.256342][T13738] bridge0: entered allmulticast mode
[  175.284638][T13742] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2687'.
[  175.297077][T13742] loop6: detected capacity change from 0 to 512
[  175.317311][T13742] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.330048][T13742] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.354768][T13742] veth1_to_bond: entered allmulticast mode
[  175.361217][T13741] veth1_to_bond: left allmulticast mode
[  175.390454][T12548] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.405932][T13755] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2701'.
[  175.419379][T13755] loop5: detected capacity change from 0 to 512
[  175.430785][T13755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.443439][T13755] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.461314][T13755] veth1_to_bond: entered allmulticast mode
[  175.467587][T13752] veth1_to_bond: left allmulticast mode
[  175.497985][ T8097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.742147][T13769] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2694'.
[  175.752044][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2694'.
[  176.747099][T13792] loop5: detected capacity change from 0 to 1024
[  176.783326][T13792] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  176.823145][T13792] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.858911][T13792] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2698'.
[  176.887864][T13792] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2698'.
[  176.920465][T13792] netlink: 'syz.5.2698': attribute type 1 has an invalid length.
[  177.053209][ T8097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  177.063068][T13808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=13808 comm=syz.2.2703
[  177.176024][T13808] loop2: detected capacity change from 0 to 512
[  177.221959][T13808] EXT4-fs (loop2): orphan cleanup on readonly fs
[  177.241907][T13808] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 26 (err -116)
[  177.276588][T13808] EXT4-fs (loop2): Remounting filesystem read-only
[  177.311606][T13808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  177.377278][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.139967][T13875] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  178.307498][T13877] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2720'.
[  178.372395][T13877] macvtap2: entered allmulticast mode
[  178.798404][T13902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=13902 comm=syz.1.2725
[  178.818189][T13902] loop1: detected capacity change from 0 to 512
[  178.840889][T13902] EXT4-fs (loop1): orphan cleanup on readonly fs
[  178.867245][T13902] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 26 (err -116)
[  178.896147][T13902] EXT4-fs (loop1): Remounting filesystem read-only
[  178.908581][T13902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  178.942968][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.103198][   T29] kauditd_printk_skb: 2279 callbacks suppressed
[  179.103210][   T29] audit: type=1400 audit(1764273071.564:45259): avc:  denied  { execute } for  pid=13888 comm="syz.5.2723" dev="tmpfs" ino=1582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  179.131429][   T29] audit: type=1326 audit(1764273071.574:45260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13926 comm="syz.0.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc321fc65e7 code=0x7ffc0000
[  179.155045][   T29] audit: type=1326 audit(1764273071.574:45261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13926 comm="syz.0.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc321f6b829 code=0x7ffc0000
[  179.178640][   T29] audit: type=1326 audit(1764273071.574:45262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13926 comm="syz.0.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc321fcf749 code=0x7ffc0000
[  179.202212][   T29] audit: type=1400 audit(1764273071.574:45263): avc:  denied  { execute } for  pid=13926 comm="syz.0.2732" dev="tmpfs" ino=1585 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  179.223673][   T29] audit: type=1400 audit(1764273071.574:45264): avc:  denied  { execute_no_trans } for  pid=13926 comm="syz.0.2732" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1585 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  179.253549][   T29] audit: type=1326 audit(1764273071.574:45265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13926 comm="syz.0.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc321fc65e7 code=0x7ffc0000
[  179.277354][   T29] audit: type=1326 audit(1764273071.574:45266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13926 comm="syz.0.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc321f6b829 code=0x7ffc0000
[  179.300841][   T29] audit: type=1326 audit(1764273071.574:45267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13926 comm="syz.0.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc321fcf749 code=0x7ffc0000
[  179.324331][   T29] audit: type=1326 audit(1764273071.574:45268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13926 comm="syz.0.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321fcf749 code=0x7ffc0000
[  179.430301][T13938] FAULT_INJECTION: forcing a failure.
[  179.430301][T13938] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  179.443483][T13938] CPU: 1 UID: 0 PID: 13938 Comm: syz.5.2735 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  179.443521][T13938] Tainted: [W]=WARN
[  179.443529][T13938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  179.443542][T13938] Call Trace:
[  179.443548][T13938]  <TASK>
[  179.443565][T13938]  __dump_stack+0x1d/0x30
[  179.443587][T13938]  dump_stack_lvl+0xe8/0x140
[  179.443685][T13938]  dump_stack+0x15/0x1b
[  179.443703][T13938]  should_fail_ex+0x265/0x280
[  179.443726][T13938]  should_fail+0xb/0x20
[  179.443741][T13938]  should_fail_usercopy+0x1a/0x20
[  179.443817][T13938]  _copy_from_user+0x1c/0xb0
[  179.443839][T13938]  kstrtouint_from_user+0x69/0xf0
[  179.443857][T13938]  ? 0xffffffff81000000
[  179.443869][T13938]  ? selinux_file_permission+0x1e4/0x320
[  179.443965][T13938]  proc_fail_nth_write+0x50/0x160
[  179.443994][T13938]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  179.444020][T13938]  vfs_write+0x269/0x960
[  179.444107][T13938]  ? vfs_read+0x4e6/0x770
[  179.444127][T13938]  ? __rcu_read_unlock+0x4f/0x70
[  179.444163][T13938]  ? __fget_files+0x184/0x1c0
[  179.444194][T13938]  ksys_write+0xda/0x1a0
[  179.444216][T13938]  __x64_sys_write+0x40/0x50
[  179.444271][T13938]  x64_sys_call+0x2802/0x3000
[  179.444292][T13938]  do_syscall_64+0xd2/0x200
[  179.444430][T13938]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  179.444462][T13938]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  179.444544][T13938]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.444575][T13938] RIP: 0033:0x7fdfdb21e1ff
[  179.444590][T13938] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  179.444662][T13938] RSP: 002b:00007fdfd9c7f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  179.444686][T13938] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdfdb21e1ff
[  179.444701][T13938] RDX: 0000000000000001 RSI: 00007fdfd9c7f0a0 RDI: 0000000000000003
[  179.444716][T13938] RBP: 00007fdfd9c7f090 R08: 0000000000000000 R09: 0000000000000000
[  179.444729][T13938] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  179.444771][T13938] R13: 00007fdfdb476038 R14: 00007fdfdb475fa0 R15: 00007ffdbd9d1678
[  179.444787][T13938]  </TASK>
[  180.073578][T13951] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2737'.
[  180.383710][T13958] FAULT_INJECTION: forcing a failure.
[  180.383710][T13958] name failslab, interval 1, probability 0, space 0, times 0
[  180.396550][T13958] CPU: 1 UID: 0 PID: 13958 Comm: syz.5.2739 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  180.396589][T13958] Tainted: [W]=WARN
[  180.396595][T13958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  180.396606][T13958] Call Trace:
[  180.396613][T13958]  <TASK>
[  180.396620][T13958]  __dump_stack+0x1d/0x30
[  180.396642][T13958]  dump_stack_lvl+0xe8/0x140
[  180.396739][T13958]  dump_stack+0x15/0x1b
[  180.396755][T13958]  should_fail_ex+0x265/0x280
[  180.396773][T13958]  should_failslab+0x8c/0xb0
[  180.396805][T13958]  __kmalloc_node_track_caller_noprof+0xa5/0x580
[  180.396866][T13958]  ? sidtab_sid2str_get+0xa0/0x130
[  180.396936][T13958]  kmemdup_noprof+0x2b/0x70
[  180.396959][T13958]  sidtab_sid2str_get+0xa0/0x130
[  180.396988][T13958]  security_sid_to_context_core+0x1eb/0x2e0
[  180.397077][T13958]  security_sid_to_context+0x27/0x40
[  180.397166][T13958]  selinux_lsmprop_to_secctx+0x67/0xf0
[  180.397204][T13958]  security_lsmprop_to_secctx+0x1a3/0x1c0
[  180.397231][T13958]  audit_log_subj_ctx+0xa4/0x3e0
[  180.397319][T13958]  ? skb_put+0xa9/0xf0
[  180.397352][T13958]  audit_log_task_context+0x48/0x70
[  180.397373][T13958]  audit_log_task+0xf4/0x250
[  180.397400][T13958]  ? kstrtouint+0x76/0xc0
[  180.397473][T13958]  audit_seccomp+0x61/0x100
[  180.397505][T13958]  ? __seccomp_filter+0x82d/0x1250
[  180.397536][T13958]  __seccomp_filter+0x83e/0x1250
[  180.397566][T13958]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  180.397712][T13958]  ? vfs_write+0x7e8/0x960
[  180.397746][T13958]  __secure_computing+0x82/0x150
[  180.397795][T13958]  syscall_trace_enter+0xcf/0x1e0
[  180.397819][T13958]  do_syscall_64+0xac/0x200
[  180.397837][T13958]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  180.397865][T13958]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  180.397903][T13958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.397923][T13958] RIP: 0033:0x7fdfdb21f749
[  180.397938][T13958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  180.398023][T13958] RSP: 002b:00007fdfd9c5e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb
[  180.398043][T13958] RAX: ffffffffffffffda RBX: 00007fdfdb476090 RCX: 00007fdfdb21f749
[  180.398058][T13958] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  180.398072][T13958] RBP: 00007fdfd9c5e090 R08: 0000000000000000 R09: 0000000000000000
[  180.398135][T13958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  180.398149][T13958] R13: 00007fdfdb476128 R14: 00007fdfdb476090 R15: 00007ffdbd9d1678
[  180.398167][T13958]  </TASK>
[  180.729860][T13962] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  180.784608][T13964] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2742'.
[  180.805292][T13961] netlink: 'syz.1.2740': attribute type 3 has an invalid length.
[  180.813103][T13961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2740'.
[  180.853915][T13964] loop2: detected capacity change from 0 to 512
[  180.869699][T13964] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  180.944739][T13974] ucma_write: process 121 (syz.6.2744) changed security contexts after opening file descriptor, this is not allowed.
[  181.078979][T13974] loop6: detected capacity change from 0 to 8192
[  181.108522][T14004] veth1_to_bond: entered allmulticast mode
[  181.115709][T14003] veth1_to_bond: left allmulticast mode
[  181.129062][T13974]  loop6: p1 p2 p3 p4[EZD]
[  181.133644][T13974] loop6: p1 start 134154240 is beyond EOD, truncated
[  181.143986][T13974] loop6: p3 start 360447 is beyond EOD, truncated
[  181.150545][T13974] loop6: p4 size 264072 extends beyond EOD, truncated
[  181.357875][T14025] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  181.671636][T14038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=14038 comm=syz.6.2756
[  181.708638][T14038] loop6: detected capacity change from 0 to 512
[  181.730579][T14038] EXT4-fs (loop6): orphan cleanup on readonly fs
[  181.739677][T14038] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 26 (err -116)
[  181.753413][T14038] EXT4-fs (loop6): Remounting filesystem read-only
[  181.762889][T14038] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  182.030497][T14047] loop1: detected capacity change from 0 to 512
[  182.063605][T14047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.084918][T14047] ext4 filesystem being mounted at /589/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.128922][T14045] veth1_to_bond: entered allmulticast mode
[  182.137690][T14044] veth1_to_bond: left allmulticast mode
[  182.183848][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.382754][T12548] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.596667][T14088] vlan0: entered allmulticast mode
[  182.602774][T14088] dummy0: entered allmulticast mode
[  183.266944][T14121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=14121 comm=syz.6.2773
[  183.406576][T14121] loop6: detected capacity change from 0 to 512
[  183.431010][T14121] EXT4-fs (loop6): orphan cleanup on readonly fs
[  183.448816][T14121] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 26 (err -116)
[  183.469693][T14121] EXT4-fs (loop6): Remounting filesystem read-only
[  183.489968][T14132] veth1_to_bond: entered allmulticast mode
[  183.499326][T14121] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  183.586424][T14126] veth1_to_bond: left allmulticast mode
[  183.955053][T12548] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.038887][T14167] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  184.098490][T14175] loop6: detected capacity change from 0 to 512
[  184.109310][   T29] kauditd_printk_skb: 2347 callbacks suppressed
[  184.109361][   T29] audit: type=1400 audit(1764273076.574:47615): avc:  denied  { mounton } for  pid=14174 comm="syz.6.2788" path="/60/file1" dev="tmpfs" ino=340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  184.138456][   T29] audit: type=1326 audit(1764273076.594:47616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14169 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f68fc7365e7 code=0x7ffc0000
[  184.162100][   T29] audit: type=1326 audit(1764273076.594:47617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14169 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f68fc6db829 code=0x7ffc0000
[  184.165564][T14175] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.185925][   T29] audit: type=1326 audit(1764273076.594:47618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14169 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f68fc73f749 code=0x7ffc0000
[  184.185959][   T29] audit: type=1400 audit(1764273076.594:47619): avc:  denied  { execute } for  pid=14169 comm="syz.1.2786" dev="tmpfs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  184.185981][   T29] audit: type=1400 audit(1764273076.594:47620): avc:  denied  { execute_no_trans } for  pid=14169 comm="syz.1.2786" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  184.206719][T14175] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.226226][   T29] audit: type=1326 audit(1764273076.624:47621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14169 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f68fc7365e7 code=0x7ffc0000
[  184.307313][   T29] audit: type=1326 audit(1764273076.624:47622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14169 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f68fc6db829 code=0x7ffc0000
[  184.330927][   T29] audit: type=1326 audit(1764273076.624:47623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14169 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f68fc73f749 code=0x7ffc0000
[  184.354540][   T29] audit: type=1326 audit(1764273076.624:47624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14169 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fc73f749 code=0x7ffc0000
[  184.425405][T14175] veth1_to_bond: entered allmulticast mode
[  184.433495][T14174] veth1_to_bond: left allmulticast mode
[  184.515474][T12548] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.206906][T14208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2798'.
[  185.369050][T14227] bond4: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5)
[  185.381066][T14227] bond4 (unregistering): Released all slaves
[  185.482269][T14265] xt_hashlimit: max too large, truncated to 1048576
[  185.558577][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2804'.
[  186.283382][T14335] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  186.523080][T14347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2814'.
[  186.537738][T14346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2815'.
[  186.825990][T14372] sd 0:0:1:0: device reset
[  187.123012][T14401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2829'.
[  187.536199][T14407] 9pnet_fd: Insufficient options for proto=fd
[  187.934276][T14414] loop5: detected capacity change from 0 to 1024
[  188.069503][T14414] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  188.095063][T14414] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  188.124075][T14411] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.2832: Freeing blocks not in datazone - block = 0, count = 16
[  188.150993][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2832'.
[  188.178955][ T8097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  188.521354][T14448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=14448 comm=syz.5.2840
[  188.546042][T14448] loop5: detected capacity change from 0 to 512
[  188.557610][T14448] EXT4-fs (loop5): orphan cleanup on readonly fs
[  188.565953][T14448] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 26 (err -116)
[  188.580543][T14448] EXT4-fs (loop5): Remounting filesystem read-only
[  188.587648][T14448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  188.695934][ T5877] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.730040][T14453] chnl_net:caif_netlink_parms(): no params data found
[  188.742350][ T5877] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.794896][T14453] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.802268][T14453] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.810946][T14453] bridge_slave_0: entered allmulticast mode
[  188.817622][T14453] bridge_slave_0: entered promiscuous mode
[  188.833755][ T5877] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.846936][T14453] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.854343][T14453] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.863625][T14453] bridge_slave_1: entered allmulticast mode
[  188.871410][T14453] bridge_slave_1: entered promiscuous mode
[  188.881557][ T5877] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.911954][T14453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.926463][T14453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.980235][T14453] team0: Port device team_slave_0 added
[  188.997233][T14453] team0: Port device team_slave_1 added
[  189.044233][T14453] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.051356][T14453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  189.077349][T14453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.091452][T14453] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.098479][T14453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  189.124537][T14453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  189.135546][   T29] kauditd_printk_skb: 2793 callbacks suppressed
[  189.135628][   T29] audit: type=1400 audit(1764273081.554:50416): avc:  denied  { read write } for  pid=12548 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  189.166744][   T29] audit: type=1400 audit(1764273081.554:50417): avc:  denied  { open } for  pid=12548 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  189.191435][   T29] audit: type=1400 audit(1764273081.554:50418): avc:  denied  { ioctl } for  pid=12548 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  189.220761][   T29] audit: type=1400 audit(1764273081.634:50419): avc:  denied  { prog_load } for  pid=14704 comm="syz.0.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  189.240169][   T29] audit: type=1400 audit(1764273081.634:50420): avc:  denied  { bpf } for  pid=14704 comm="syz.0.2846" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  189.261014][   T29] audit: type=1400 audit(1764273081.634:50421): avc:  denied  { perfmon } for  pid=14704 comm="syz.0.2846" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  189.282409][   T29] audit: type=1400 audit(1764273081.634:50422): avc:  denied  { prog_load } for  pid=14704 comm="syz.0.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  189.301752][   T29] audit: type=1400 audit(1764273081.634:50423): avc:  denied  { name_bind } for  pid=14704 comm="syz.0.2846" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  189.323599][   T29] audit: type=1400 audit(1764273081.634:50424): avc:  denied  { node_bind } for  pid=14704 comm="syz.0.2846" saddr=::ffff:224.0.0.1 src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  189.346757][   T29] audit: type=1400 audit(1764273081.684:50425): avc:  denied  { map_create } for  pid=14703 comm="syz.6.2845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  189.376334][ T5877] bridge_slave_1: left allmulticast mode
[  189.382200][ T5877] bridge_slave_1: left promiscuous mode
[  189.387914][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.397195][ T5877] bridge_slave_0: left allmulticast mode
[  189.402906][ T5877] bridge_slave_0: left promiscuous mode
[  189.408705][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.409975][T14707] loop6: detected capacity change from 0 to 4096
[  189.435703][T14707] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.448766][ T8097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.458509][ T1035] IPVS: starting estimator thread 0...
[  189.512614][ T5877] bridge0 (unregistering): left allmulticast mode
[  189.549128][T14743] IPVS: using max 2976 ests per chain, 148800 per kthread
[  189.580873][ T5877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.590669][ T5877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.600435][ T5877] bond0 (unregistering): (slave bond1): Releasing backup interface
[  189.609508][ T5877] bond0 (unregistering): (slave bond2): Releasing backup interface
[  189.618771][ T5877] bond0 (unregistering): (slave bond3): Releasing backup interface
[  189.627493][ T5877] bond0 (unregistering): (slave bond4): Releasing backup interface
[  189.636254][ T5877] bond0 (unregistering): (slave bond5): Releasing backup interface
[  189.644596][ T5877] bond0 (unregistering): Released all slaves
[  189.653439][ T5877] bond1 (unregistering): Released all slaves
[  189.661880][ T5877] bond2 (unregistering): Released all slaves
[  189.670369][ T5877] bond3 (unregistering): Released all slaves
[  189.679205][ T5877] bond4 (unregistering): Released all slaves
[  189.687731][ T5877] bond5 (unregistering): Released all slaves
[  189.709191][T14732] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  189.735485][T14453] hsr_slave_0: entered promiscuous mode
[  189.754509][T14453] hsr_slave_1: entered promiscuous mode
[  189.761637][T14453] debugfs: 'hsr0' already exists in 'hsr'
[  189.767443][T14453] Cannot create hsr debugfs directory
[  189.779692][ T5877] tipc: Disabling bearer <udp:syz0>
[  189.784974][ T5877] tipc: Left network mode
[  189.799714][T12548] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.836344][ T5877] hsr_slave_0: left promiscuous mode
[  189.849067][ T5877] hsr_slave_1: left promiscuous mode
[  189.856665][ T5877] veth1_macvtap: left promiscuous mode
[  189.866863][ T5877] veth0_macvtap: left promiscuous mode
[  189.908975][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2851'.
[  189.931696][T14805] SELinux:  policydb version 0 does not match my version range 15-35
[  189.940028][T14805] SELinux: failed to load policy
[  190.076280][T14854] loop2: detected capacity change from 0 to 1024
[  190.087131][T14854] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[  190.101928][T14854] 9pnet_fd: Insufficient options for proto=fd
[  190.284942][T14884] SELinux:  policydb version 0 does not match my version range 15-35
[  190.294330][T14884] SELinux: failed to load policy
[  190.295516][T14881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=14881 comm=syz.6.2857
[  190.319672][T14881] loop6: detected capacity change from 0 to 512
[  190.331250][T14881] EXT4-fs (loop6): orphan cleanup on readonly fs
[  190.339307][T14881] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 26 (err -116)
[  190.361637][T14881] EXT4-fs (loop6): Remounting filesystem read-only
[  190.368929][T14881] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  190.417244][T14899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2858'.
[  190.418396][T14453] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  190.449097][T14453] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  190.461063][T14453] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  190.471770][T14453] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  190.534323][T14453] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.547816][T14453] 8021q: adding VLAN 0 to HW filter on device team0
[  190.557730][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.564940][ T5909] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.593420][ T5909] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.600553][ T5909] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.727220][T14453] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.122113][T12548] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.205101][T14453] veth0_vlan: entered promiscuous mode
[  191.227548][T14453] veth1_vlan: entered promiscuous mode
[  191.300537][T14453] veth0_macvtap: entered promiscuous mode
[  191.324040][T14453] veth1_macvtap: entered promiscuous mode
[  191.354197][T14453] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.379982][T14453] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.559635][ T5897] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.568385][ T5897] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.589985][ T5897] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.601058][ T5897] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.951419][T14969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=14969 comm=syz.6.2870
[  191.983910][T14969] loop6: detected capacity change from 0 to 512
[  191.986904][T14982] sch_tbf: burst 19360 is lower than device lo mtu (65550) !
[  192.005312][T14969] EXT4-fs (loop6): orphan cleanup on readonly fs
[  192.019193][T14969] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 26 (err -116)
[  192.031572][T14969] EXT4-fs (loop6): Remounting filesystem read-only
[  192.041253][T14969] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  193.099377][T12548] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.313337][T15035] FAULT_INJECTION: forcing a failure.
[  193.313337][T15035] name failslab, interval 1, probability 0, space 0, times 0
[  193.326122][T15035] CPU: 1 UID: 0 PID: 15035 Comm: syz.6.2877 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  193.326287][T15035] Tainted: [W]=WARN
[  193.326295][T15035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  193.326309][T15035] Call Trace:
[  193.326318][T15035]  <TASK>
[  193.326327][T15035]  __dump_stack+0x1d/0x30
[  193.326351][T15035]  dump_stack_lvl+0xe8/0x140
[  193.326408][T15035]  dump_stack+0x15/0x1b
[  193.326454][T15035]  should_fail_ex+0x265/0x280
[  193.326475][T15035]  should_failslab+0x8c/0xb0
[  193.326508][T15035]  kmem_cache_alloc_noprof+0x50/0x480
[  193.326575][T15035]  ? security_file_alloc+0x32/0x100
[  193.326600][T15035]  security_file_alloc+0x32/0x100
[  193.326623][T15035]  init_file+0x5c/0x1d0
[  193.326640][T15035]  alloc_empty_file+0x8b/0x200
[  193.326733][T15035]  alloc_file_pseudo+0xc6/0x160
[  193.326752][T15035]  aio_setup_ring+0x133/0x760
[  193.326817][T15035]  ioctx_alloc+0x2c4/0x4e0
[  193.326853][T15035]  __se_sys_io_setup+0x6b/0x1b0
[  193.326883][T15035]  __x64_sys_io_setup+0x31/0x40
[  193.326973][T15035]  x64_sys_call+0x2f0e/0x3000
[  193.326998][T15035]  do_syscall_64+0xd2/0x200
[  193.327023][T15035]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  193.327092][T15035]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  193.327130][T15035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.327153][T15035] RIP: 0033:0x7f4f49b6f749
[  193.327168][T15035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  193.327207][T15035] RSP: 002b:00007f4f485cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  193.327238][T15035] RAX: ffffffffffffffda RBX: 00007f4f49dc5fa0 RCX: 00007f4f49b6f749
[  193.327253][T15035] RDX: 0000000000000000 RSI: 0000200000002400 RDI: 00000000000008f0
[  193.327266][T15035] RBP: 00007f4f485cf090 R08: 0000000000000000 R09: 0000000000000000
[  193.327280][T15035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  193.327295][T15035] R13: 00007f4f49dc6038 R14: 00007f4f49dc5fa0 R15: 00007ffc7835d818
[  193.327315][T15035]  </TASK>
[  193.591891][T15031] netlink: 'syz.0.2878': attribute type 4 has an invalid length.
[  193.732631][T15048] loop5: detected capacity change from 0 to 512
[  193.768430][T15048] EXT4-fs (loop5): too many log groups per flexible block group
[  193.776494][T15048] EXT4-fs (loop5): failed to initialize mballoc (-12)
[  193.823506][T15048] EXT4-fs (loop5): mount failed
[  193.839964][T15058] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2888'.
[  194.014434][T15069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2891'.
[  194.117680][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2892'.
[  194.142891][   T29] kauditd_printk_skb: 1871 callbacks suppressed
[  194.142907][   T29] audit: type=1400 audit(1764273086.604:52297): avc:  denied  { execute } for  pid=15043 comm="syz.0.2882" dev="tmpfs" ino=524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  194.174086][   T29] audit: type=1400 audit(1764273086.604:52298): avc:  denied  { read write } for  pid=8097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  194.198642][   T29] audit: type=1400 audit(1764273086.604:52299): avc:  denied  { open } for  pid=8097 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  194.223095][   T29] audit: type=1400 audit(1764273086.614:52300): avc:  denied  { ioctl } for  pid=8097 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  194.249871][   T29] audit: type=1400 audit(1764273086.614:52301): avc:  denied  { read write } for  pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  194.274617][   T29] audit: type=1400 audit(1764273086.614:52302): avc:  denied  { open } for  pid=3320 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  194.301343][   T29] audit: type=1400 audit(1764273086.614:52303): avc:  denied  { ioctl } for  pid=3320 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  194.327211][   T29] audit: type=1400 audit(1764273086.614:52304): avc:  denied  { read write } for  pid=12548 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  194.351694][   T29] audit: type=1400 audit(1764273086.614:52305): avc:  denied  { open } for  pid=12548 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  194.376100][   T29] audit: type=1400 audit(1764273086.614:52306): avc:  denied  { ioctl } for  pid=12548 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  194.449149][T15083] loop2: detected capacity change from 0 to 2048
[  194.496863][T15083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.763402][T15106] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2893'.
[  194.802025][T15106] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  194.827640][T15106] 0ªî{X¹¦: entered allmulticast mode
[  194.842646][T15106] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  194.986703][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.043760][T15115] FAULT_INJECTION: forcing a failure.
[  195.043760][T15115] name failslab, interval 1, probability 0, space 0, times 0
[  195.056443][T15115] CPU: 1 UID: 0 PID: 15115 Comm: syz.0.2901 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  195.056477][T15115] Tainted: [W]=WARN
[  195.056485][T15115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  195.056498][T15115] Call Trace:
[  195.056505][T15115]  <TASK>
[  195.056513][T15115]  __dump_stack+0x1d/0x30
[  195.056616][T15115]  dump_stack_lvl+0xe8/0x140
[  195.056634][T15115]  dump_stack+0x15/0x1b
[  195.056650][T15115]  should_fail_ex+0x265/0x280
[  195.056673][T15115]  should_failslab+0x8c/0xb0
[  195.056706][T15115]  __kmalloc_noprof+0xa5/0x570
[  195.056796][T15115]  ? iter_file_splice_write+0xf9/0xa60
[  195.056912][T15115]  iter_file_splice_write+0xf9/0xa60
[  195.056970][T15115]  ? copy_splice_read+0x623/0x660
[  195.056993][T15115]  ? copy_splice_read+0x623/0x660
[  195.057012][T15115]  ? __traceiter_kfree+0x2e/0x50
[  195.057086][T15115]  ? copy_splice_read+0x623/0x660
[  195.057113][T15115]  ? copy_splice_read+0x623/0x660
[  195.057142][T15115]  ? __pfx_iter_file_splice_write+0x10/0x10
[  195.057199][T15115]  direct_splice_actor+0x156/0x2a0
[  195.057222][T15115]  ? shmem_file_splice_read+0x1/0x600
[  195.057248][T15115]  splice_direct_to_actor+0x312/0x680
[  195.057305][T15115]  ? __pfx_direct_splice_actor+0x10/0x10
[  195.057348][T15115]  do_splice_direct+0xda/0x150
[  195.057378][T15115]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  195.057409][T15115]  do_sendfile+0x380/0x650
[  195.057438][T15115]  __x64_sys_sendfile64+0x105/0x150
[  195.057544][T15115]  x64_sys_call+0x2bb4/0x3000
[  195.057568][T15115]  do_syscall_64+0xd2/0x200
[  195.057621][T15115]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  195.057646][T15115]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  195.057676][T15115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.057736][T15115] RIP: 0033:0x7fc321fcf749
[  195.057811][T15115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  195.057827][T15115] RSP: 002b:00007fc320a37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  195.057848][T15115] RAX: ffffffffffffffda RBX: 00007fc322225fa0 RCX: 00007fc321fcf749
[  195.057863][T15115] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006
[  195.057878][T15115] RBP: 00007fc320a37090 R08: 0000000000000000 R09: 0000000000000000
[  195.057892][T15115] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000001
[  195.057906][T15115] R13: 00007fc322226038 R14: 00007fc322225fa0 R15: 00007ffde1093538
[  195.057956][T15115]  </TASK>
[  195.601216][T15123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=15123 comm=syz.6.2905
[  195.640429][T15132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2906'.
[  195.649615][T15135] xt_TCPMSS: Only works on TCP SYN packets
[  195.668035][T15135] netlink: 288 bytes leftover after parsing attributes in process `syz.5.2910'.
[  195.680204][T15123] loop6: detected capacity change from 0 to 512
[  195.708874][T15135] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2910'.
[  195.718266][T15123] EXT4-fs (loop6): orphan cleanup on readonly fs
[  195.725346][T15123] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 26 (err -116)
[  195.738029][T15123] EXT4-fs (loop6): Remounting filesystem read-only
[  195.763494][T15123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  196.043902][T15170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.054463][T15170] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.126916][T15175] loop1: detected capacity change from 0 to 256
[  196.200424][T15175] vfat: Unknown parameter 'ext4'
[  196.327290][T12548] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.517381][T15199] loop1: detected capacity change from 0 to 512
[  196.527970][T15199] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  196.544228][T15199] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2924: bg 0: block 104: invalid block bitmap
[  196.558532][T15199] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  196.568345][T15199] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2924: invalid indirect mapped block 1 (level 1)
[  196.583044][T15199] EXT4-fs (loop1): 1 truncate cleaned up
[  196.595542][T15199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.940927][T15209] bridge0: port 3(batadv0) entered blocking state
[  196.947441][T15209] bridge0: port 3(batadv0) entered disabled state
[  196.955863][T15209] batadv0: entered allmulticast mode
[  196.961936][T15209] batadv0: entered promiscuous mode
[  196.980871][T15209] veth1_macvtap: left promiscuous mode
[  196.986464][T15209] macsec0: entered promiscuous mode
[  197.149747][T15219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=15219 comm=syz.2.2931
[  197.173895][T15219] loop2: detected capacity change from 0 to 512
[  197.185497][T15219] EXT4-fs (loop2): orphan cleanup on readonly fs
[  197.193015][T15219] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 26 (err -116)
[  197.205329][T15219] EXT4-fs (loop2): Remounting filesystem read-only
[  197.213204][T15219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  197.439088][   T52] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  197.448350][   T52] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  197.466165][T15229] loop6: detected capacity change from 0 to 1024
[  197.475652][T15229] EXT4-fs: Ignoring removed orlov option
[  197.491196][T15229] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.562009][T12548] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.913573][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.941236][T15256] lo speed is unknown, defaulting to 1000
[  197.947717][T15256] lo speed is unknown, defaulting to 1000
[  197.954072][T15256] lo speed is unknown, defaulting to 1000
[  197.961014][T15256] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  197.985606][T15256] lo speed is unknown, defaulting to 1000
[  197.994080][T15256] lo speed is unknown, defaulting to 1000
[  198.000458][T15256] lo speed is unknown, defaulting to 1000
[  198.007028][T15256] lo speed is unknown, defaulting to 1000
[  198.014800][T15256] lo speed is unknown, defaulting to 1000
[  198.096764][T15265] loop2: detected capacity change from 0 to 1024
[  198.106231][T15265] EXT4-fs: Ignoring removed orlov option
[  198.115747][T15265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.156421][T15271] smc: net device bond0 applied user defined pnetid SYZ0
[  198.165761][T15271] smc: net device bond0 erased user defined pnetid SYZ0
[  198.180749][T15271] loop5: detected capacity change from 0 to 512
[  198.189369][T15271] EXT4-fs: Ignoring removed orlov option
[  198.196836][T15271] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  198.207782][T15271] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.2942: corrupted in-inode xattr: e_value size too large
[  198.222834][T15271] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2942: couldn't read orphan inode 15 (err -117)
[  198.235438][T15271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.275131][ T8097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.355929][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.481794][T15290] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2947'.
[  198.611636][T15303] SELinux:  Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped).
[  198.621547][T15296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=15296 comm=syz.2.2948
[  198.640494][T15296] loop2: detected capacity change from 0 to 512
[  198.642881][T15303] x_tables: duplicate underflow at hook 2
[  198.659412][T15296] EXT4-fs (loop2): orphan cleanup on readonly fs
[  198.684652][T15296] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 26 (err -116)
[  198.705288][T15296] EXT4-fs (loop2): Remounting filesystem read-only
[  198.739275][T15296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  198.815026][T15319] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  198.906125][T15330] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2960'.
[  199.019214][T15339] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  199.083124][T15345] FAULT_INJECTION: forcing a failure.
[  199.083124][T15345] name failslab, interval 1, probability 0, space 0, times 0
[  199.096227][T15345] CPU: 0 UID: 0 PID: 15345 Comm: syz.6.2964 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  199.096258][T15345] Tainted: [W]=WARN
[  199.096264][T15345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  199.096327][T15345] Call Trace:
[  199.096334][T15345]  <TASK>
[  199.096344][T15345]  __dump_stack+0x1d/0x30
[  199.096438][T15345]  dump_stack_lvl+0xe8/0x140
[  199.096474][T15345]  dump_stack+0x15/0x1b
[  199.096494][T15345]  should_fail_ex+0x265/0x280
[  199.096551][T15345]  should_failslab+0x8c/0xb0
[  199.096580][T15345]  kmem_cache_alloc_noprof+0x50/0x480
[  199.096606][T15345]  ? alloc_empty_file+0x76/0x200
[  199.096639][T15345]  ? mntput+0x4b/0x80
[  199.096679][T15345]  alloc_empty_file+0x76/0x200
[  199.096788][T15345]  path_openat+0x68/0x2170
[  199.096808][T15345]  ? _parse_integer_limit+0x170/0x190
[  199.096843][T15345]  ? kstrtoull+0x111/0x140
[  199.096947][T15345]  ? kstrtouint+0x76/0xc0
[  199.096982][T15345]  do_filp_open+0x109/0x230
[  199.097015][T15345]  do_sys_openat2+0xa6/0x110
[  199.097039][T15345]  __x64_sys_openat+0xf2/0x120
[  199.097109][T15345]  x64_sys_call+0x2eab/0x3000
[  199.097133][T15345]  do_syscall_64+0xd2/0x200
[  199.097219][T15345]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  199.097250][T15345]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  199.097285][T15345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.097307][T15345] RIP: 0033:0x7f4f49b6df90
[  199.097328][T15345] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[  199.097345][T15345] RSP: 002b:00007f4f485cef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  199.097366][T15345] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f4f49b6df90
[  199.097426][T15345] RDX: 0000000000000002 RSI: 00007f4f485cefa0 RDI: 00000000ffffff9c
[  199.097509][T15345] RBP: 00007f4f485cefa0 R08: 0000000000000000 R09: 0000000000000000
[  199.097524][T15345] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  199.097538][T15345] R13: 00007f4f49dc6038 R14: 00007f4f49dc5fa0 R15: 00007ffc7835d818
[  199.097559][T15345]  </TASK>
[  199.308158][   T29] kauditd_printk_skb: 2878 callbacks suppressed
[  199.308175][   T29] audit: type=1326 audit(1764273091.564:55181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15320 comm="syz.0.2956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fc321fcf749 code=0x7ffc0000
[  199.338091][   T29] audit: type=1326 audit(1764273091.774:55186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15333 comm="syz.5.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdfdb2165e7 code=0x7ffc0000
[  199.361658][   T29] audit: type=1326 audit(1764273091.774:55187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15333 comm="syz.5.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdfdb1bb829 code=0x7ffc0000
[  199.385142][   T29] audit: type=1326 audit(1764273091.774:55188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15333 comm="syz.5.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fdfdb21f749 code=0x7ffc0000
[  199.410067][   T29] audit: type=1326 audit(1764273091.784:55189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15320 comm="syz.0.2956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc321fc65e7 code=0x7ffc0000
[  199.433594][   T29] audit: type=1326 audit(1764273091.784:55190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15320 comm="syz.0.2956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc321f6b829 code=0x7ffc0000
[  199.457272][   T29] audit: type=1326 audit(1764273091.784:55191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15320 comm="syz.0.2956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fc321fcf749 code=0x7ffc0000
[  199.457841][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2966'.
[  199.480996][   T29] audit: type=1326 audit(1764273091.784:55192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15320 comm="syz.0.2956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc321fc65e7 code=0x7ffc0000
[  199.481029][   T29] audit: type=1326 audit(1764273091.784:55193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15320 comm="syz.0.2956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc321f6b829 code=0x7ffc0000
[  199.527926][ T3320] audit: audit_backlog=65 > audit_backlog_limit=64
[  199.544908][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.595712][T15355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2967'.
[  199.719617][T15370] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2973'.
[  199.737552][T15371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.758495][T15371] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.954939][T15391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2978'.
[  200.017763][T15385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=15385 comm=syz.5.2977
[  200.081211][T15385] loop5: detected capacity change from 0 to 512
[  200.141184][T15385] EXT4-fs (loop5): orphan cleanup on readonly fs
[  200.159527][T15385] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 26 (err -116)
[  200.173021][T15385] EXT4-fs (loop5): Remounting filesystem read-only
[  200.180493][T15385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  200.321028][T15401] netlink: 'syz.6.2980': attribute type 10 has an invalid length.
[  200.339039][ T5894] Bluetooth: hci0: Frame reassembly failed (-90)
[  200.385058][T15403] netlink: 'syz.6.2980': attribute type 10 has an invalid length.
[  200.432347][T15403] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  200.495880][T15419] ref_ctr_offset mismatch. inode: 0x1e7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20000000
[  200.666547][T15426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2987'.
[  200.731723][ T8097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.971786][T15450] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2993'.
[  201.077362][T15459] loop5: detected capacity change from 0 to 1024
[  201.091275][T15459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.269528][ T8097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.351702][T15483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3000'.
[  201.372272][T15477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=15477 comm=syz.5.2998
[  201.393052][T15477] loop5: detected capacity change from 0 to 512
[  201.402549][T15477] EXT4-fs (loop5): orphan cleanup on readonly fs
[  201.409322][T15477] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 26 (err -116)
[  201.420845][T15477] EXT4-fs (loop5): Remounting filesystem read-only
[  201.427740][T15477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  201.824647][T15500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3004'.
[  202.143098][ T8097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.168916][T15524] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3011'.
[  202.328642][T15533] sctp: [Deprecated]: syz.5.3013 (pid 15533) Use of int in maxseg socket option.
[  202.328642][T15533] Use struct sctp_assoc_value instead
[  202.353323][T15533] veth3: entered promiscuous mode
[  202.358933][ T5733] Bluetooth: hci0: command 0x1003 tx timeout
[  202.367271][ T3506] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  202.870082][T15626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=15626 comm=syz.6.3022
[  202.895764][T15626] loop6: detected capacity change from 0 to 512
[  202.929999][T15626] EXT4-fs (loop6): orphan cleanup on readonly fs
[  202.939975][T15626] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 26 (err -116)
[  202.985474][T15626] EXT4-fs (loop6): Remounting filesystem read-only
[  202.993780][T15626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  203.191101][T15659] 9pnet_fd: Insufficient options for proto=fd
[  203.613932][T12548] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.696654][T15716] batman_adv: batadv0: Adding interface: dummy0
[  203.703033][T15716] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  203.728311][T15716] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  203.993769][T15741] 9pnet_fd: Insufficient options for proto=fd
[  204.066842][T15749] __nla_validate_parse: 3 callbacks suppressed
[  204.066859][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3052'.
[  204.293092][T15756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=15756 comm=syz.1.3056
[  204.309253][   T29] kauditd_printk_skb: 3342 callbacks suppressed
[  204.309269][   T29] audit: type=1400 audit(1764273096.764:58534): avc:  denied  { map_create } for  pid=15764 comm="syz.0.3057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  204.335284][   T29] audit: type=1400 audit(1764273096.764:58535): avc:  denied  { bpf } for  pid=15764 comm="syz.0.3057" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  204.356020][   T29] audit: type=1400 audit(1764273096.764:58536): avc:  denied  { map_read map_write } for  pid=15764 comm="syz.0.3057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  204.376890][   T29] audit: type=1326 audit(1764273096.764:58537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15764 comm="syz.0.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321fcf749 code=0x7ffc0000
[  204.400550][   T29] audit: type=1326 audit(1764273096.764:58538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15764 comm="syz.0.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321fcf749 code=0x7ffc0000
[  204.424238][   T29] audit: type=1326 audit(1764273096.764:58539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15764 comm="syz.0.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321fcf749 code=0x7ffc0000
[  204.455762][   T29] audit: type=1326 audit(1764273096.784:58540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15764 comm="syz.0.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321fcf749 code=0x7ffc0000
[  204.479534][   T29] audit: type=1326 audit(1764273096.784:58541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15764 comm="syz.0.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321fcf749 code=0x7ffc0000
[  204.496845][T15774] loop5: detected capacity change from 0 to 1024
[  204.503339][   T29] audit: type=1326 audit(1764273096.784:58542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15764 comm="syz.0.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc321fcf749 code=0x7ffc0000
[  204.512892][T15774] EXT4-fs: inline encryption not supported
[  204.534091][   T29] audit: type=1400 audit(1764273096.784:58543): avc:  denied  { prog_load } for  pid=15764 comm="syz.0.3057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  204.561764][T15774] EXT4-fs: Ignoring removed nobh option
[  204.567357][T15774] EXT4-fs: Ignoring removed bh option
[  204.612918][T15774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.792707][T15774] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3062'.
[  204.801830][T15774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3062'.
[  205.123225][T15795] 9pnet_fd: Insufficient options for proto=fd
[  205.183872][ T8097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.299908][T15809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3066'.
[  205.413590][T15818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3069'.
[  205.429632][T15818] team0 (unregistering): Port device team_slave_0 removed
[  205.441700][T15818] team0 (unregistering): Port device team_slave_1 removed
[  205.480897][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3071'.
[  205.507675][T15821] macvtap3: entered allmulticast mode
[  205.521625][T15821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15821 comm=syz.5.3071
[  205.720363][T15866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=15866 comm=syz.0.3075
[  205.782973][T15878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3079'.
[  206.492604][T15894] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  206.695074][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3091'.
[  207.405107][T15923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=15923 comm=syz.6.3094
[  207.425896][T15923] loop6: detected capacity change from 0 to 512
[  207.435425][T15923] EXT4-fs (loop6): orphan cleanup on readonly fs
[  207.442565][T15923] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 26 (err -116)
[  207.454091][T15923] EXT4-fs (loop6): Remounting filesystem read-only
[  207.461233][T15923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  207.772031][T15951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3103'.
[  208.218229][T12548] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.635840][T15967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=15967 comm=syz.0.3108
[  208.764429][T15976] loop6: detected capacity change from 0 to 1024
[  208.773183][T15976] EXT4-fs: inline encryption not supported
[  208.779193][T15976] EXT4-fs: Ignoring removed nobh option
[  208.784900][T15976] EXT4-fs: Ignoring removed bh option
[  208.801052][T15976] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.955576][T15976] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3109'.
[  209.330772][   T29] kauditd_printk_skb: 2594 callbacks suppressed
[  209.330791][   T29] audit: type=1326 audit(1764273101.764:61138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15987 comm="syz.5.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdfdb2165e7 code=0x7ffc0000
[  209.361304][   T29] audit: type=1326 audit(1764273101.764:61139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15987 comm="syz.5.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdfdb1bb829 code=0x7ffc0000
[  209.385124][   T29] audit: type=1326 audit(1764273101.764:61140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15987 comm="syz.5.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fdfdb21f749 code=0x7ffc0000
[  209.408860][   T29] audit: type=1400 audit(1764273101.764:61141): avc:  denied  { execute } for  pid=15987 comm="syz.5.3111" dev="tmpfs" ino=1657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  209.430170][   T29] audit: type=1326 audit(1764273101.764:61142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.2.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ea65f749 code=0x7ffc0000
[  209.453751][   T29] audit: type=1326 audit(1764273101.764:61143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.2.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ea65f749 code=0x7ffc0000
[  209.477378][   T29] audit: type=1326 audit(1764273101.774:61144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.2.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30ea65f749 code=0x7ffc0000
[  209.501109][   T29] audit: type=1400 audit(1764273101.774:61145): avc:  denied  { map_create } for  pid=16001 comm="syz.2.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  209.520411][   T29] audit: type=1400 audit(1764273101.774:61146): avc:  denied  { perfmon } for  pid=16001 comm="syz.2.3115" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  209.541601][   T29] audit: type=1326 audit(1764273101.774:61147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15987 comm="syz.5.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdfdb2165e7 code=0x7ffc0000
[  209.567149][T12548] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.641655][T16008] __nla_validate_parse: 1 callbacks suppressed
[  209.641692][T16008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3117'.
[  209.735902][T16012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=16012 comm=syz.2.3118
[  209.751219][T16019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3130'.
[  209.782457][T16012] loop2: detected capacity change from 0 to 512
[  209.801271][T16012] EXT4-fs (loop2): orphan cleanup on readonly fs
[  209.813079][T16012] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 26 (err -116)
[  209.832087][T16012] EXT4-fs (loop2): Remounting filesystem read-only
[  209.851270][T16029] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3132'.
[  209.860925][T16012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  209.959679][T16032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3122'.
[  209.984465][T16032] macvtap2: entered allmulticast mode
[  210.051496][T16044] 9pnet_fd: Insufficient options for proto=fd
[  210.154210][T16058] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3128'.
[  210.157930][T16059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3129'.
[  210.178226][T16059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3129'.
[  210.266245][T16067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3135'.
[  210.472271][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.597262][T16091] 9pnet_fd: Insufficient options for proto=fd
[  210.843583][ T5857] Bluetooth: hci0: Frame reassembly failed (-84)
[  210.908360][T16109] Bluetooth: hci0: Frame reassembly failed (-84)
[  210.975265][T16111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3147'.
[  211.193293][T16127] FAULT_INJECTION: forcing a failure.
[  211.193293][T16127] name failslab, interval 1, probability 0, space 0, times 0
[  211.201478][T16121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=16121 comm=syz.2.3151
[  211.206085][T16127] CPU: 0 UID: 0 PID: 16127 Comm: syz.6.3153 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  211.206118][T16127] Tainted: [W]=WARN
[  211.206125][T16127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  211.206137][T16127] Call Trace:
[  211.206144][T16127]  <TASK>
[  211.206152][T16127]  __dump_stack+0x1d/0x30
[  211.206175][T16127]  dump_stack_lvl+0xe8/0x140
[  211.206224][T16127]  dump_stack+0x15/0x1b
[  211.206242][T16127]  should_fail_ex+0x265/0x280
[  211.206261][T16127]  should_failslab+0x8c/0xb0
[  211.206288][T16127]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  211.206383][T16127]  ? __alloc_skb+0x101/0x320
[  211.206469][T16127]  __alloc_skb+0x101/0x320
[  211.206494][T16127]  ? audit_log_start+0x342/0x720
[  211.206515][T16127]  audit_log_start+0x3a0/0x720
[  211.206536][T16127]  ? kstrtouint+0x76/0xc0
[  211.206565][T16127]  audit_seccomp+0x48/0x100
[  211.206641][T16127]  ? __seccomp_filter+0x82d/0x1250
[  211.206667][T16127]  __seccomp_filter+0x83e/0x1250
[  211.206693][T16127]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  211.206851][T16127]  ? vfs_write+0x7e8/0x960
[  211.206878][T16127]  __secure_computing+0x82/0x150
[  211.206970][T16127]  syscall_trace_enter+0xcf/0x1e0
[  211.206998][T16127]  do_syscall_64+0xac/0x200
[  211.207019][T16127]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  211.207116][T16127]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  211.207192][T16127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.207213][T16127] RIP: 0033:0x7f4f49b6f749
[  211.207229][T16127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  211.207246][T16127] RSP: 002b:00007f4f485cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042
[  211.207267][T16127] RAX: ffffffffffffffda RBX: 00007f4f49dc5fa0 RCX: 00007f4f49b6f749
[  211.207280][T16127] RDX: 0000000000000014 RSI: 0000000000000000 RDI: ffffffffffffffff
[  211.207344][T16127] RBP: 00007f4f485cf090 R08: 0000000000000000 R09: 0000000000000000
[  211.207356][T16127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  211.207369][T16127] R13: 00007f4f49dc6038 R14: 00007f4f49dc5fa0 R15: 00007ffc7835d818
[  211.207386][T16127]  </TASK>
[  211.448552][T16121] loop2: detected capacity change from 0 to 512
[  211.460476][T16121] EXT4-fs (loop2): orphan cleanup on readonly fs
[  211.467479][T16121] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 26 (err -116)
[  211.479364][T16121] EXT4-fs (loop2): Remounting filesystem read-only
[  211.486505][T16121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  212.005268][T16154] loop6: detected capacity change from 0 to 512
[  212.014829][T16154] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  212.050413][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.422640][T16180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3160'.
[  212.607301][T16187] loop2: detected capacity change from 0 to 1024
[  212.615101][T16187] EXT4-fs: Ignoring removed nomblk_io_submit option
[  212.641297][T16187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.918794][ T3506] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  213.842546][T16186] syz.2.3168 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  213.853681][T16186] CPU: 1 UID: 0 PID: 16186 Comm: syz.2.3168 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  213.853725][T16186] Tainted: [W]=WARN
[  213.853733][T16186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  213.853748][T16186] Call Trace:
[  213.853757][T16186]  <TASK>
[  213.853765][T16186]  __dump_stack+0x1d/0x30
[  213.853787][T16186]  dump_stack_lvl+0xe8/0x140
[  213.853822][T16186]  dump_stack+0x15/0x1b
[  213.853892][T16186]  dump_header+0x81/0x220
[  213.853910][T16186]  oom_kill_process+0x342/0x400
[  213.853938][T16186]  out_of_memory+0x979/0xb80
[  213.853998][T16186]  try_charge_memcg+0x610/0xa10
[  213.854034][T16186]  charge_memcg+0x51/0xc0
[  213.854060][T16186]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  213.854084][T16186]  __read_swap_cache_async+0x17b/0x2d0
[  213.854174][T16186]  swap_cluster_readahead+0x262/0x3c0
[  213.854204][T16186]  swapin_readahead+0xde/0x800
[  213.854296][T16186]  ? mod_memcg_lruvec_state+0x1fc/0x2c0
[  213.854333][T16186]  ? __rcu_read_unlock+0x34/0x70
[  213.854362][T16186]  ? __rcu_read_unlock+0x4f/0x70
[  213.854391][T16186]  ? swap_cache_get_folio+0x277/0x280
[  213.854473][T16186]  do_swap_page+0x2ae/0x2370
[  213.854498][T16186]  ? sysvec_reschedule_ipi+0x4f/0x70
[  213.854608][T16186]  ? mas_state_walk+0xd4/0x650
[  213.854631][T16186]  ? __pfx_default_wake_function+0x10/0x10
[  213.854656][T16186]  handle_mm_fault+0x9a5/0x2be0
[  213.854680][T16186]  ? vma_start_read+0x141/0x1f0
[  213.854757][T16186]  do_user_addr_fault+0x630/0x1080
[  213.854782][T16186]  exc_page_fault+0x62/0xa0
[  213.854809][T16186]  asm_exc_page_fault+0x26/0x30
[  213.854888][T16186] RIP: 0033:0x7f30ea535a51
[  213.854907][T16186] Code: a0 48 8d 1d 71 05 38 00 83 3d 76 23 38 00 00 48 8d ab 00 1e 00 00 0f 8e 7e fd ff ff 0f 1f 44 00 00 80 7b 20 00 49 89 d8 74 1f <e8> da 9a ff ff 84 c0 74 0c 48 8d bb 98 00 00 00 e8 ca b6 fe ff 31
[  213.854925][T16186] RSP: 002b:00007fffd45e62b0 EFLAGS: 00010202
[  213.854941][T16186] RAX: 0000001b33924000 RBX: 00007f30ea8b6090 RCX: 0000001b33924000
[  213.854966][T16186] RDX: 000000000000001d RSI: 000000000000001e RDI: 0000001b33d23fe2
[  213.854981][T16186] RBP: 00007f30ea8b7da0 R08: 00007f30ea8b6090 R09: 0000000000000204
[  213.854996][T16186] R10: 0000001b33924218 R11: 000000000000000a R12: 00000000000341a6
[  213.855051][T16186] R13: 00007f30ea8b6180 R14: ffffffffffffffff R15: 00007fffd45e63c0
[  213.855083][T16186]  </TASK>
[  213.855091][T16186] memory: usage 307200kB, limit 307200kB, failcnt 1904
[  214.090705][T16186] memory+swap: usage 308100kB, limit 9007199254740988kB, failcnt 0
[  214.098597][T16186] kmem: usage 307104kB, limit 9007199254740988kB, failcnt 0
[  214.105931][T16186] Memory cgroup stats for /syz2:
[  214.126052][T16186] cache 32768
[  214.134344][T16186] rss 8192
[  214.137421][T16186] shmem 0
[  214.140393][T16186] mapped_file 4096
[  214.144119][T16186] dirty 0
[  214.147122][T16186] writeback 8192
[  214.150755][T16186] workingset_refault_anon 148
[  214.155443][T16186] workingset_refault_file 2815
[  214.160375][T16186] swap 921600
[  214.163674][T16186] swapcached 16384
[  214.167667][T16186] pgpgin 269009
[  214.171168][T16186] pgpgout 268985
[  214.174760][T16186] pgfault 171384
[  214.178497][T16186] pgmajfault 114
[  214.182078][T16186] inactive_anon 8192
[  214.186132][T16186] active_anon 8192
[  214.189889][T16186] inactive_file 0
[  214.193598][T16186] active_file 81920
[  214.197417][T16186] unevictable 0
[  214.201044][T16186] hierarchical_memory_limit 314572800
[  214.206428][T16186] hierarchical_memsw_limit 9223372036854771712
[  214.212620][T16186] total_cache 32768
[  214.216441][T16186] total_rss 8192
[  214.220033][T16186] total_shmem 0
[  214.223499][T16186] total_mapped_file 4096
[  214.227753][T16186] total_dirty 0
[  214.231257][T16186] total_writeback 8192
[  214.235389][T16186] total_workingset_refault_anon 148
[  214.240711][T16186] total_workingset_refault_file 2815
[  214.246025][T16186] total_swap 921600
[  214.249917][T16186] total_swapcached 16384
[  214.254187][T16186] total_pgpgin 269009
[  214.258182][T16186] total_pgpgout 268985
[  214.262294][T16186] total_pgfault 171384
[  214.266366][T16186] total_pgmajfault 114
[  214.270583][T16186] total_inactive_anon 8192
[  214.275037][T16186] total_active_anon 8192
[  214.279302][T16186] total_inactive_file 0
[  214.283466][T16186] total_active_file 81920
[  214.287849][T16186] total_unevictable 0
[  214.291893][T16186] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3168,pid=16186,uid=0
[  214.306737][T16186] Memory cgroup out of memory: Killed process 16186 (syz.2.3168) total-vm:98336kB, anon-rss:1136kB, file-rss:26536kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000
[  214.357054][   T29] kauditd_printk_skb: 3023 callbacks suppressed
[  214.357072][   T29] audit: type=1326 audit(1764273106.794:64169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16224 comm="syz.1.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd01e5f749 code=0x7ffc0000
[  214.387354][   T29] audit: type=1326 audit(1764273106.794:64170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16224 comm="syz.1.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd01e5f749 code=0x7ffc0000
[  214.498184][   T29] audit: type=1400 audit(1764273106.874:64171): avc:  denied  { create } for  pid=16227 comm="syz.0.3179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  214.518073][   T29] audit: type=1400 audit(1764273106.874:64172): avc:  denied  { connect } for  pid=16227 comm="syz.0.3179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  214.537970][   T29] audit: type=1400 audit(1764273106.874:64173): avc:  denied  { read write } for  pid=12548 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  214.562636][   T29] audit: type=1400 audit(1764273106.874:64174): avc:  denied  { open } for  pid=12548 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  214.587085][   T29] audit: type=1400 audit(1764273106.874:64175): avc:  denied  { ioctl } for  pid=12548 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  214.588146][T16233] audit: audit_backlog=65 > audit_backlog_limit=64
[  214.613051][   T29] audit: type=1400 audit(1764273106.874:64176): avc:  denied  { prog_load } for  pid=16227 comm="syz.0.3179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  214.619502][T16233] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64
[  214.666607][T16237] 9pnet_fd: Insufficient options for proto=fd
[  214.734544][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.910611][T16256] __nla_validate_parse: 1 callbacks suppressed
[  214.910629][T16256] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3188'.
[  214.968262][T16256] macvtap2: entered allmulticast mode
[  214.988805][T16260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3190'.
[  215.171811][T16280] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  215.221840][T16284] loop6: detected capacity change from 0 to 128
[  215.231014][T16284] vfat: Unknown parameter 'ÿÿ'
[  215.241870][T16280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3195'.
[  215.266709][T16280] bond1: Invalid ad_actor_system MAC address.
[  215.272934][T16280] bond1: option ad_actor_system: invalid value (1)
[  215.281158][T16280] bond1 (unregistering): Released all slaves
[  215.356299][T16354] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  215.677105][T16373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3202'.
[  215.757042][T16381] dummy0: entered allmulticast mode
[  215.773348][T16382] 9pnet_fd: Insufficient options for proto=fd
[  215.785566][T16381] dummy0: left allmulticast mode
[  216.357922][T16422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3215'.
[  216.676609][T11801] ==================================================================
[  216.684747][T11801] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr
[  216.692773][T11801] 
[  216.695128][T11801] read-write to 0xffff88811ab87f50 of 8 bytes by task 16410 on cpu 0:
[  216.703296][T11801]  shmem_add_to_page_cache+0x414/0x530
[  216.709153][T11801]  shmem_get_folio_gfp+0x4e8/0xd60
[  216.714298][T11801]  shmem_write_begin+0xa8/0x190
[  216.719259][T11801]  generic_perform_write+0x184/0x490
[  216.724668][T11801]  shmem_file_write_iter+0xc5/0xf0
[  216.729807][T11801]  __kernel_write_iter+0x2d6/0x540
[  216.734949][T11801]  dump_user_range+0x61e/0x8f0
[  216.739826][T11801]  elf_core_dump+0x1de7/0x1f80
[  216.744673][T11801]  coredump_write+0xb12/0xe30
[  216.749373][T11801]  vfs_coredump+0x143a/0x20d0
[  216.754057][T11801]  get_signal+0xd84/0xf70
[  216.758401][T11801]  arch_do_signal_or_restart+0x96/0x440
[  216.763964][T11801]  irqentry_exit_to_user_mode+0x5b/0xa0
[  216.769570][T11801]  irqentry_exit+0x12/0x50
[  216.773995][T11801]  asm_exc_page_fault+0x26/0x30
[  216.778850][T11801] 
[  216.781179][T11801] read to 0xffff88811ab87f50 of 8 bytes by task 11801 on cpu 1:
[  216.788809][T11801]  shmem_getattr+0x68/0x200
[  216.793320][T11801]  vfs_getattr_nosec+0x146/0x1e0
[  216.798270][T11801]  vfs_statx+0x113/0x390
[  216.802520][T11801]  vfs_fstatat+0x115/0x170
[  216.807117][T11801]  __se_sys_newfstatat+0x55/0x260
[  216.812166][T11801]  __x64_sys_newfstatat+0x55/0x70
[  216.817202][T11801]  x64_sys_call+0x135a/0x3000
[  216.821887][T11801]  do_syscall_64+0xd2/0x200
[  216.826393][T11801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.832296][T11801] 
[  216.834619][T11801] value changed: 0x0000000000004210 -> 0x0000000000004215
[  216.841815][T11801] 
[  216.844136][T11801] Reported by Kernel Concurrency Sanitizer on:
[  216.850284][T11801] CPU: 1 UID: 0 PID: 11801 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  216.861830][T11801] Tainted: [W]=WARN
[  216.865627][T11801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  216.875789][T11801] ==================================================================
[  216.993946][T16433] FAULT_INJECTION: forcing a failure.
[  216.993946][T16433] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  217.007289][T16433] CPU: 0 UID: 0 PID: 16433 Comm: syz.2.3219 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  217.007346][T16433] Tainted: [W]=WARN
[  217.007354][T16433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  217.007368][T16433] Call Trace:
[  217.007375][T16433]  <TASK>
[  217.007383][T16433]  __dump_stack+0x1d/0x30
[  217.007463][T16433]  dump_stack_lvl+0xe8/0x140
[  217.007485][T16433]  dump_stack+0x15/0x1b
[  217.007501][T16433]  should_fail_ex+0x265/0x280
[  217.007557][T16433]  should_fail_alloc_page+0xf2/0x100
[  217.007590][T16433]  __alloc_frozen_pages_noprof+0xff/0x360
[  217.007651][T16433]  alloc_pages_mpol+0xb3/0x260
[  217.007676][T16433]  vma_alloc_folio_noprof+0x1aa/0x300
[  217.007701][T16433]  handle_mm_fault+0xec2/0x2be0
[  217.007803][T16433]  ? vma_start_read+0x141/0x1f0
[  217.007841][T16433]  do_user_addr_fault+0x630/0x1080
[  217.007910][T16433]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  217.007934][T16433]  exc_page_fault+0x62/0xa0
[  217.008026][T16433]  asm_exc_page_fault+0x26/0x30
[  217.008044][T16433] RIP: 0033:0x7f30ea60cc5b
[  217.008059][T16433] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01
[  217.008076][T16433] RSP: 002b:00007f30e90bce10 EFLAGS: 00010246
[  217.008096][T16433] RAX: 00007f30e90bef30 RBX: 00007f30ea88a640 RCX: 0000000000000000
[  217.008135][T16433] RDX: 00007f30e90bef78 RSI: 00007f30ea6c0df8 RDI: 00007f30e90bce30
[  217.008149][T16433] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000
[  217.008201][T16433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  217.008213][T16433] R13: 00007f30ea8b6038 R14: 00007f30ea8b5fa0 R15: 00007fffd45e6148
[  217.008229][T16433]  </TASK>
[  217.008239][T16433] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  217.196182][T16431] Cannot find add_set index 0 as target