last executing test programs:

38.729441194s ago: executing program 4 (id=3773):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xd1cb3ed8a708bab1, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10)
syz_io_uring_setup(0x42ca, &(0x7f0000000300)={0x0, 0x125a, 0x2, 0x0, 0x16f}, &(0x7f0000000040), &(0x7f00000002c0))

38.654020647s ago: executing program 4 (id=3776):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

38.60666135s ago: executing program 4 (id=3777):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa81}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000009700"/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000002c0)=0xfffffffe)
ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000100)=0xffff0080)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0)
socket$inet6(0xa, 0x4, 0x3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x20080000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='host1x_cdma_push_gather\x00', r4}, 0x18)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2686dd6c370c8900282b01ce800000000000000000000000000025fe8000000000000000000000000000aa3c000000000000003b"], 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = getpgrp(0x0)
tkill(r6, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x77ff, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0)

38.340290071s ago: executing program 4 (id=3784):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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")
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0)
pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000200)='=', 0x1}, {0x0}], 0x2, 0x6, 0x2, 0x24)
r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1ab8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
r5 = socket$kcm(0x2b, 0x7, 0x0)
setsockopt$sock_attach_bpf(r5, 0x6, 0x22, &(0x7f0000000200)=r4, 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x7ff, 0xb, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$setregs(0xd, r6, 0x9, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
socket(0x1e, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x4}, 0x18)
ptrace$getregset(0x4204, r6, 0x1, &(0x7f0000000340)={&(0x7f0000000240)=""/204, 0xcc})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000005c0)={[{@jqfmt_vfsold}, {@orlov}, {@user_xattr}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@nodiscard}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80)
write$binfmt_register(r1, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\x94l\\\xec\xd1\xcb\x9a}\xab7\x1f\xde\xb5\x83>\fG\\x00', 0x3a, '/dev\x14bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x38818, 0x0, 0xbf, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x18)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x40086607, &(0x7f00000004c0)=@v1={0x0, @aes256, 0x1, @desc3})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

38.201937957s ago: executing program 4 (id=3788):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

37.796019054s ago: executing program 3 (id=3794):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000010900010073797a30000000003c000000090a010400000300000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c000080080003"], 0xc0}}, 0x40000)

37.754894676s ago: executing program 3 (id=3795):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[], 0x3c}}, 0x0)

37.705750759s ago: executing program 3 (id=3796):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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")
creat(&(0x7f0000000280)='./bus\x00', 0x2)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

37.623698302s ago: executing program 4 (id=3797):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0xfffffffffffffffd, 0x0, &(0x7f000001b000))
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0xef61, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010025bd73000001df2500000000", @ANYRES32=0x0, @ANYBLOB="100804000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000240)=0x8)
sendmmsg$inet6(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)="ccd4d32e022c65d4716a093b3dc4a92bcd4d45430161a2", 0x17}, {&(0x7f0000000a00)}, {0x0}, {&(0x7f00000016c0)}, {&(0x7f0000000b40)='l', 0x1}], 0x5}}], 0x1, 0x4008000)

37.609858463s ago: executing program 32 (id=3797):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0xfffffffffffffffd, 0x0, &(0x7f000001b000))
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0xef61, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010025bd73000001df2500000000", @ANYRES32=0x0, @ANYBLOB="100804000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000240)=0x8)
sendmmsg$inet6(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)="ccd4d32e022c65d4716a093b3dc4a92bcd4d45430161a2", 0x17}, {&(0x7f0000000a00)}, {0x0}, {&(0x7f00000016c0)}, {&(0x7f0000000b40)='l', 0x1}], 0x5}}], 0x1, 0x4008000)

36.477054691s ago: executing program 3 (id=3815):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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")
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0)
pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000200)='=', 0x1}, {0x0}], 0x2, 0x6, 0x2, 0x24)
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1ab8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
r4 = socket$kcm(0x2b, 0x7, 0x0)
setsockopt$sock_attach_bpf(r4, 0x6, 0x22, &(0x7f0000000200)=r3, 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x7ff, 0xb, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregs(0xd, r5, 0x9, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
socket(0x1e, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18)
ptrace$getregset(0x4204, r5, 0x1, &(0x7f0000000340)={&(0x7f0000000240)=""/204, 0xcc})

36.309255539s ago: executing program 3 (id=3816):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x6000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000680)='syzkaller\x00', 0x7, 0x1016, &(0x7f0000001880)=""/4118, 0x41100, 0x28}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x26040001}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x70, 0x4604c2)
r7 = fcntl$dupfd(r6, 0x0, r6)
write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @time={0xfdb7, 0x6}, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0x4}, {0x0, 0x80}, {0x80}, @quote={{0x4, 0xef}, 0xe}}], 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="a2181adc894b958b4425b78f37688fd130ea957d9aa7"], &(0x7f0000000200)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
stat(&(0x7f0000000b00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="599dc27f180000000e0000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x800100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x13, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004810)

32.461409135s ago: executing program 3 (id=3841):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TCXONC(r3, 0x540a, 0x4d8c95d1c2880d9d)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
ioctl$PTP_CLOCK_GETCAPS(r4, 0x40043d14, &(0x7f0000000040))
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)

32.461192975s ago: executing program 33 (id=3841):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TCXONC(r3, 0x540a, 0x4d8c95d1c2880d9d)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
ioctl$PTP_CLOCK_GETCAPS(r4, 0x40043d14, &(0x7f0000000040))
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)

30.387019955s ago: executing program 1 (id=3879):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e"], 0x90}}, 0x4000000)

30.27419926s ago: executing program 1 (id=3880):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kfree\x00', r2}, 0x18)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB=',context='])
ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000001400)={{r1}, "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"})
ioctl$TCXONC(r0, 0x540a, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket(0x2a, 0x8, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009080000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0xfffffffc]}}], 0x40000018)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

30.219598362s ago: executing program 1 (id=3881):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f00000001c0)='./file0\x00', 0x4a9)
inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x20044010)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r6, 0x0, 0x80000001}, 0x18)
r7 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7000000"], 0x10b8}, 0x106)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000110001002bbd7000fbdbdf2500000000", @ANYRES32=r3], 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040)

30.060706519s ago: executing program 6 (id=3842):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)

30.020079011s ago: executing program 6 (id=3885):
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
readv(r0, &(0x7f0000000100)=[{0x0}], 0x1)

29.968618483s ago: executing program 6 (id=3886):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0, 0x0, 0x7}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)

29.968134293s ago: executing program 1 (id=3887):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$eJzs3T9oHmUcB/Df3fu+xiQvEnURxD8gIhoIcRNc4qIQkBBEBBUiIi5KIsQEt8TJxUFnLZm6hNKtaceSJXRpKXRK2wzpUmhDh4YO7XDlfS+BJG/6J33f3pXc5wPH3SV393uO3Pe5G3L3BFBZQxExFhG1iBiOiEZEJHs3eDefhnZWl/rXpiKy7Ks7SXu7fD23u99gRCxGxCcRsZom8Us9Yn7lu81761988Pdc4/2TK9/2F3qSO7Y2N77cPjHx15nxj+cvXbk1kcRYNPedV+8lh/ysnkS89jyKvSCSetkt4GlM/nH6aiv3r0fEe+38NyKN/I/3z+xLq4346P9H7fvv7ctvFtlWoPeyrNG6By5mQOWkEdGMJB2JiHw5TUdG8mf4a7WB9NeZ2d+Hf56Zm/6p7J4K6JVmxMbn5/rODh7I/81ann/g+Grl/+vJ5eut5e1a2a0BCvFWPmvlf/iHhQ9D/qFy5B+qS/6huo6Yf//RAceI+z9U12Py/3JZbQKK0Zn/RtlNAgri+R8qKcuyTP6hwuQfqmtv/gGAasn6yn4DGShL2f0PAAAAAAAAAAAAAAAAAADQaal/bWp3Kqrmhf8itj7LRxfprF9rj0e8+znygbvJvkFIkh4MSvL9O10eoEunSn77+pUb5da/+Ha59RemIxb/jIjRer3z+kt2rr9n9+oTft/4scsCR5QcWP/0m2LrH/Rgudz64+sR51v9z+hh/U8ab7Tnh/c/zR58Mf23+10eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMI8DAAA//84UXFU")
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0)
pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000200)='=', 0x1}, {0x0}], 0x2, 0x6, 0x2, 0x24)
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1ab8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
r4 = socket$kcm(0x2b, 0x7, 0x0)
setsockopt$sock_attach_bpf(r4, 0x6, 0x22, &(0x7f0000000200)=r3, 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x7ff, 0xb, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregs(0xd, r5, 0x9, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
socket(0x1e, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
ptrace$getregset(0x4204, r5, 0x1, &(0x7f0000000340)={&(0x7f0000000240)=""/204, 0xcc})

29.967840743s ago: executing program 6 (id=3888):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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")
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0)
pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000200)='=', 0x1}, {0x0}], 0x2, 0x6, 0x2, 0x24)
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1ab8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
r4 = socket$kcm(0x2b, 0x7, 0x0)
setsockopt$sock_attach_bpf(r4, 0x6, 0x22, &(0x7f0000000200)=r3, 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x7ff, 0xb, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregs(0xd, r5, 0x9, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
socket(0x1e, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
ptrace$getregset(0x4204, r5, 0x1, &(0x7f0000000340)={&(0x7f0000000240)=""/204, 0xcc})

29.541071182s ago: executing program 6 (id=3894):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r2, 0x3, 0x1, 0x8000c62) (fail_nth: 1)

29.540218192s ago: executing program 1 (id=3895):
io_uring_setup(0x4717, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
gettid()
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_clone(0x6a00003a, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffff89, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value=r3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800)
r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
r7 = openat$cgroup_procs(r6, 0x0, 0x2, 0x0)
open_by_handle_at(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000200010004"], 0x408100)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
connect$unix(r8, 0x0, 0x0)

28.272457806s ago: executing program 1 (id=3920):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x1cc0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a0500000000000000000001000000f5ff7caf73797a30000000004c000000090a010400000000000000000100000008000a4000000003"], 0x94}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd3ee}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4080)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

28.272246586s ago: executing program 34 (id=3920):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x1cc0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a0500000000000000000001000000f5ff7caf73797a30000000004c000000090a010400000000000000000100000008000a4000000003"], 0x94}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd3ee}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4080)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

26.354360099s ago: executing program 6 (id=3937):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, 0x0, 0x0)

26.247162094s ago: executing program 35 (id=3937):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, 0x0, 0x0)

18.573817676s ago: executing program 7 (id=4022):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0, 0x0, 0x7}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48)

18.451934421s ago: executing program 7 (id=4023):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe5, 0xc5, ""/197}, &(0x7f0000000200)=0xe5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_emit_ethernet(0x2e, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450800200000000000119078ffffffffe0000009000017c1000c907801000000"], 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40)

18.334262906s ago: executing program 7 (id=4027):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x55b2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
prctl$PR_SET_NAME(0xf, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b40)=""/67}, {&(0x7f0000000400)=""/8}, {&(0x7f0000000680)=""/188}, {&(0x7f0000000bc0)=""/241}, {&(0x7f0000000940)=""/221}], 0x0, &(0x7f0000000a40)=""/192}, 0x8}], 0x3fffffffffffedd, 0x10002, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0xe0, 0x101, 0x0})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x50)

16.238207007s ago: executing program 7 (id=4047):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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")
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0)
pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000200)='=', 0x1}, {0x0}], 0x2, 0x6, 0x2, 0x24)
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1ab8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
r4 = socket$kcm(0x2b, 0x7, 0x0)
setsockopt$sock_attach_bpf(r4, 0x6, 0x22, &(0x7f0000000200)=r3, 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x7ff, 0xb, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18)
ptrace$getregset(0x4204, r5, 0x1, &(0x7f0000000340)={&(0x7f0000000240)=""/204, 0xcc})

15.974639969s ago: executing program 7 (id=4049):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000000000000000000008500ff00b40000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x5f4e9baa8196e34c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40004040)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
dup2(r4, r5)
connect$unix(r5, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain)

14.171710787s ago: executing program 7 (id=4063):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
unshare(0x4020400)

14.125254628s ago: executing program 36 (id=4063):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
unshare(0x4020400)

5.787590169s ago: executing program 5 (id=4147):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x1}, @generic={0x5, 0x0, 0x0, 0x3}, @jmp, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00'}, 0x90)
request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0)
socket$inet6(0xa, 0x4, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2686dd6c370c8900282b01ce800000000000000000000000000025fe8000000000000000000000000000aa3c000000000000003b"], 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x80000}, 0x18)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
r4 = getpgrp(0x0)
tkill(r4, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})

4.654054809s ago: executing program 5 (id=4167):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
unshare(0x4020400)

4.6055975s ago: executing program 5 (id=4169):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x63f}, 0x18)
r1 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000004000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, &(0x7f0000000280)=0x49)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe5, 0xc5, ""/197}, &(0x7f0000000200)=0xe5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18)
syz_emit_ethernet(0x2e, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450800200000000000119078ffffffffe0000009000017c1000c907801000000"], 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)=r3}, 0x20)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10)

4.440224578s ago: executing program 5 (id=4175):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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")
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0)
pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000200)='=', 0x1}, {0x0}], 0x2, 0x6, 0x2, 0x24)
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1ab8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
r4 = socket$kcm(0x2b, 0x7, 0x0)
setsockopt$sock_attach_bpf(r4, 0x6, 0x22, &(0x7f0000000200)=r3, 0x4)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregs(0xd, r5, 0x9, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18)
ptrace$getregset(0x4204, r5, 0x1, &(0x7f0000000340)={&(0x7f0000000240)=""/204, 0xcc})

4.220878927s ago: executing program 5 (id=4180):
stat(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a310000000014"], 0x60}}, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
pipe2(&(0x7f0000001440)={<r3=>0xffffffffffffffff}, 0x0)
close(r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r6)
getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="1748000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r7], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x5df, 0x0, 0x0, 'queue0\x00', 0x3})
write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)
r8 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_context(r8, &(0x7f0000000340)='system_u:object_r:setrans_exec_t:s0\x00', 0x24)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000000)={0xffffffe1, 0x7, 0x2, 0xfa, 0x1})

2.501033341s ago: executing program 5 (id=4206):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18)
socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fchown(r2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpid()
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10)
r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r7, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
setns(0xffffffffffffffff, 0x24020000)

2.474244552s ago: executing program 37 (id=4206):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18)
socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fchown(r2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpid()
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10)
r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r7, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
setns(0xffffffffffffffff, 0x24020000)

2.468861033s ago: executing program 9 (id=4209):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
syz_read_part_table(0x60e, &(0x7f00000007c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x145402, 0x8)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.186396905s ago: executing program 9 (id=4214):
io_uring_setup(0x4717, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
gettid()
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_clone(0x6a00003a, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000200010004"], 0x408100)

1.531954004s ago: executing program 9 (id=4223):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18)
r4 = accept$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r8, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r9 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r9, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10)
sendmsg$tipc(r8, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r10}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0)
r12 = socket(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000040))
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000280)={'ip6_vti0\x00', <r13=>r1, 0x4, 0x1, 0xb1, 0x0, 0x58, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x40, 0x1, 0x0, 0x9}})
bind$packet(r12, &(0x7f00000004c0)={0x11, 0x3, r13, 0x1, 0xb, 0x6, @random="61a98f7abdd2"}, 0x14)

1.282743624s ago: executing program 9 (id=4227):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa81}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000009700"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000002c0)=0xfffffffe)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000100)=0xffff0080)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0)
socket$inet6(0xa, 0x4, 0x3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x20080000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='host1x_cdma_push_gather\x00', r4}, 0x18)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2686dd6c370c8900282b01ce800000000000000000000000000025fe8000000000000000000000000000aa3c000000000000003b"], 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = getpgrp(0x0)
tkill(r6, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x77ff, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0)

1.241385646s ago: executing program 8 (id=4230):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x480)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08041000000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300000007600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a08400e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
mmap(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x1000000, 0x110, r4, 0x2d17b000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0)
get_mempolicy(0x0, 0x0, 0x9, &(0x7f0000329000/0x3000)=nil, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
setns(r8, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000140), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
utimes(&(0x7f0000000100)='./file3\x00', 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001"], 0x20}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd706f87402e3ea1637df206eb84c100ffdbdf2508000000140064756d6d79"], 0x28}, 0x1, 0x0, 0x0, 0x2000c004}, 0x8000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000030400f3", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c000280080005000100400005002500010000000500", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

1.042403185s ago: executing program 8 (id=4232):
io_uring_setup(0x4717, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
gettid()
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_clone(0x6a00003a, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000200010004"], 0x408100)

867.249482ms ago: executing program 9 (id=4237):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000950000000000000074a546b0fc23817effbea6ad3bbed6f98099b53a69a9b2a8cede02416897f87086bd9ea52261c04c0983c3765f599d624c"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
socket$nl_sock_diag(0x10, 0x3, 0x4)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$packet(0xffffffffffffffff, &(0x7f0000000500)="683c8ca547ebe248efcd1dd2be86d8563f496361c76a2ad8483bcf00a0cf34deefc2335c19390703a0a4c7e5c257a0664e94d10c7edeaaa7a48e91fdfbbaea7c702f10ee2142803e31ce86804a76af51bae949a47bc7801b692357", 0x5b, 0x4000000, &(0x7f0000000580)={0x11, 0x8, 0x0, 0x1, 0xba}, 0x14)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_usb_connect(0x4, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0x76, 0xe7, 0xf5, 0xec70927f5c9a48e7, 0x19d2, 0x1476, 0x69e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbb, 0x7, 0x0, 0xff, 0xec, 0x8f, 0xd}}]}}]}}, 0x0)
mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x208000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0)
unshare(0x42000000)

855.338153ms ago: executing program 2 (id=4238):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000020000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
readv(r1, &(0x7f0000000680), 0x0)

761.333477ms ago: executing program 2 (id=4239):
stat(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a310000000014"], 0x60}}, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
pipe2(&(0x7f0000001440)={<r3=>0xffffffffffffffff}, 0x0)
close(r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r6)
getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="1748000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r7], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x5df, 0x0, 0x0, 'queue0\x00', 0x3})
write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)
r8 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_context(r8, &(0x7f0000000340)='system_u:object_r:setrans_exec_t:s0\x00', 0x24)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000000)={0xffffffe1, 0x7, 0x2, 0xfa, 0x1})

602.811983ms ago: executing program 2 (id=4242):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe5, 0xc5, ""/197}, &(0x7f0000000200)=0xe5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
syz_emit_ethernet(0x2e, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450800200000000000"], 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40)

551.894446ms ago: executing program 8 (id=4243):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup2(0xffffffffffffffff, r0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x80, 0xff, 0xa248, 0xffffffff, 0x1}, &(0x7f0000000140)=0x98)

458.58412ms ago: executing program 8 (id=4245):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

457.59698ms ago: executing program 2 (id=4246):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f00000002c0)='ack_update_msk\x00', r0, 0x0, 0xeffffffffffffffd}, 0x18)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
unshare(0x62040200)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='f2fs_writepages\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000020000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x803, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@gettaction={0x68, 0x32, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2f}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xea5}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0xd4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfff2, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0xa, 0x7, 0x0, [{0x1000, 0x400, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x8, 0xb, 0x1, 0x42}, {0x6, 0x5, 0x8, 0x8}, {0x8001, 0x5, 0x0, 0x8001}, {0x1, 0x17ffffe, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1000000}, @TCA_U32_CLASSID={0x8, 0x1, {0xa, 0xfff2}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x40)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="010329bd7000fcdbdf252400000018000180140002007465616d5f736c6176655f30"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0)
r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES64=0x0, @ANYBLOB="5440000000000000200012800b0001005b72696467650000100002adec3564c2223f149813950280"], 0x40}}, 0x0)
readv(r9, &(0x7f0000000680)=[{0x0}, {&(0x7f00000001c0)=""/209, 0xd1}, {&(0x7f00000003c0)=""/67, 0x43}, {&(0x7f0000000140)=""/86, 0x56}, {&(0x7f00000004c0)}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000000540)=""/69, 0x45}], 0x7)
socket$igmp(0x2, 0x3, 0x2)

434.163051ms ago: executing program 0 (id=4247):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kfree\x00', r1}, 0x18)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB=',context='])
ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000001400)={{r0}, "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"})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

359.066354ms ago: executing program 8 (id=4248):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa81}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000009700"/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000002c0)=0xfffffffe)
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000100)=0xffff0080)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0)
socket$inet6(0xa, 0x4, 0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x20080000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='host1x_cdma_push_gather\x00', r3}, 0x18)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2686dd6c370c8900282b01ce800000000000000000000000000025fe8000000000000000000000000000aa3c000000000000003b"], 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = getpgrp(0x0)
tkill(r5, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x77ff, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0)

357.426064ms ago: executing program 0 (id=4249):
r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:setrans_exec_t:s0\x00', 0x24)

270.988708ms ago: executing program 0 (id=4250):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa54000085000000820000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0)

270.503128ms ago: executing program 0 (id=4251):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x63f}, 0x18)
r1 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, &(0x7f0000000280)=0x49)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe5, 0xc5, ""/197}, &(0x7f0000000200)=0xe5, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)=r3}, 0x20)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0)

179.177012ms ago: executing program 0 (id=4252):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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")

117.897505ms ago: executing program 0 (id=4253):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x480)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08041000000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300000007600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a08400e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
mmap(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x1000000, 0x110, r4, 0x2d17b000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0)
get_mempolicy(0x0, 0x0, 0x9, &(0x7f0000329000/0x3000)=nil, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
setns(r8, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000140), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
utimes(&(0x7f0000000100)='./file3\x00', 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001"], 0x20}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd706f87402e3ea1637df206eb84c100ffdbdf2508000000140064756d6d79"], 0x28}, 0x1, 0x0, 0x0, 0x2000c004}, 0x8000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000030400f3", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c000280080005000100400005002500010000000500", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

111.352305ms ago: executing program 2 (id=4254):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup2(r0, r1)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, 0x0, &(0x7f0000000140))

63.988567ms ago: executing program 2 (id=4255):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
unshare(0x4020400)

62.408997ms ago: executing program 9 (id=4256):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe5, 0xc5, ""/197}, &(0x7f0000000200)=0xe5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
syz_emit_ethernet(0x2e, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450800200000000000119078ffffffffe000000900"], 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40)

0s ago: executing program 8 (id=4257):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0xfffffffffffffffd, 0x32d83)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000800000000000000080000006b110b000000000095", @ANYRES8=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = open(&(0x7f00000002c0)='./file0\x00', 0x298140, 0x1aa)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001014cb9b2abd7cf0fddbdf2508004a0001000000080001000000000008004a0001000000"], 0x28}}, 0x8000)
unshare(0x64000600)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)}, 0x20)
syz_usbip_server_init(0x1)

kernel console output (not intermixed with test programs):

 'syz.2.3688': attribute type 10 has an invalid length.
[  259.791809][T14634] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3688'.
[  259.802096][T14634] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  259.885681][T14644] bond1 (unregistering): Released all slaves
[  259.955164][T14653] netlink: 'syz.2.3691': attribute type 10 has an invalid length.
[  259.967997][T14643] lo speed is unknown, defaulting to 1000
[  259.979883][T14653] ipvlan0: entered allmulticast mode
[  259.985242][T14653] veth0_vlan: entered allmulticast mode
[  260.000595][T14653] team0: Device ipvlan0 failed to register rx_handler
[  260.015940][T14651] lo speed is unknown, defaulting to 1000
[  260.033693][T14656] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3693'.
[  260.304956][T14668] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3700'.
[  260.673903][T14675] lo speed is unknown, defaulting to 1000
[  260.730283][T14686] loop2: detected capacity change from 0 to 1024
[  260.743952][T14688] siw: device registration error -23
[  260.749779][T14686] EXT4-fs: Ignoring removed mblk_io_submit option
[  260.756811][T14686] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  260.792058][T14686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.912819][T14698] loop4: detected capacity change from 0 to 1024
[  260.943111][T14698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.981843][T14716] loop1: detected capacity change from 0 to 1024
[  261.004223][T12640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.016908][T14716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.087086][T14686] pim6reg: entered allmulticast mode
[  261.137755][T14726] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.3707: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  261.179170][T14726] EXT4-fs (loop2): Remounting filesystem read-only
[  261.211348][T14728] bond1 (unregistering): Released all slaves
[  261.445899][T12336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.639424][T14719] syz.2.3707 (14719) used greatest stack depth: 7256 bytes left
[  261.666740][T13019] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.104618][T14755] lo speed is unknown, defaulting to 1000
[  262.254192][T14761] loop3: detected capacity change from 0 to 256
[  262.540103][T14770] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  262.613376][T14775] lo speed is unknown, defaulting to 1000
[  262.746682][T14778] lo speed is unknown, defaulting to 1000
[  262.837183][T14777] lo speed is unknown, defaulting to 1000
[  262.881184][T14785] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3723'.
[  263.176097][T14792] lo speed is unknown, defaulting to 1000
[  263.610110][   T29] kauditd_printk_skb: 244 callbacks suppressed
[  263.610126][   T29] audit: type=1326 audit(1765265381.051:6649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14807 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb080bef749 code=0x7ffc0000
[  263.761036][   T29] audit: type=1326 audit(1765265381.081:6650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14807 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb080bef749 code=0x7ffc0000
[  263.784709][   T29] audit: type=1326 audit(1765265381.091:6651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14807 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb080bef749 code=0x7ffc0000
[  263.797863][T14812] loop2: detected capacity change from 0 to 1024
[  263.808591][   T29] audit: type=1326 audit(1765265381.091:6652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14807 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb080bef749 code=0x7ffc0000
[  263.838377][   T29] audit: type=1326 audit(1765265381.091:6653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14807 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb080bef749 code=0x7ffc0000
[  263.862065][   T29] audit: type=1326 audit(1765265381.091:6654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14807 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb080bef749 code=0x7ffc0000
[  263.885581][   T29] audit: type=1326 audit(1765265381.091:6655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14807 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb080bef749 code=0x7ffc0000
[  263.909136][   T29] audit: type=1326 audit(1765265381.091:6656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14807 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb080bef749 code=0x7ffc0000
[  263.932645][   T29] audit: type=1326 audit(1765265381.091:6657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14807 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb080bef749 code=0x7ffc0000
[  263.956207][   T29] audit: type=1326 audit(1765265381.091:6658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14807 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb080bef749 code=0x7ffc0000
[  264.574907][T14821] loop1: detected capacity change from 0 to 1024
[  264.593069][T14812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.609102][T14821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.772323][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3753'.
[  264.789051][T14835] bridge1: entered promiscuous mode
[  264.794462][T14835] bridge1: entered allmulticast mode
[  264.877114][T14842] lo speed is unknown, defaulting to 1000
[  264.949144][T14842] lo speed is unknown, defaulting to 1000
[  264.963390][T13019] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.048601][T14857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3763'.
[  265.057556][T14857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3763'.
[  265.070281][T12336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.125182][T14863] loop1: detected capacity change from 0 to 1024
[  265.169271][T14863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.218025][T14875] loop3: detected capacity change from 0 to 128
[  265.291326][T14877] lo speed is unknown, defaulting to 1000
[  265.317991][T14886] loop3: detected capacity change from 0 to 1024
[  265.347440][T14886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.365098][T14884] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12)
[  265.371824][T14884] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  265.379370][T14884] vhci_hcd vhci_hcd.0: Device attached
[  265.427546][T14891] vhci_hcd: connection closed
[  265.428281][ T3586] vhci_hcd vhci_hcd.2: stop threads
[  265.438265][ T3586] vhci_hcd vhci_hcd.2: release socket
[  265.438572][T14894] lo speed is unknown, defaulting to 1000
[  265.443736][ T3586] vhci_hcd vhci_hcd.2: disconnect device
[  265.479615][T14898] siw: device registration error -23
[  265.612247][T14912] loop4: detected capacity change from 0 to 128
[  265.619870][T14912] EXT4-fs: Ignoring removed nobh option
[  265.628393][T14912] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  265.647089][T14912] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  265.731841][T11699] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.743135][T12640] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path /125/mnt/lost+found: directory fails checksum at offset 1024
[  265.758864][T12640] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path /125/mnt/lost+found: directory fails checksum at offset 5120
[  265.781849][T12640] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path /125/mnt/lost+found: directory fails checksum at offset 7168
[  265.799424][T12640] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path /125/mnt/lost+found: directory fails checksum at offset 8192
[  265.818281][T12640] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  265.825573][T14921] netlink: 'syz.3.3787': attribute type 10 has an invalid length.
[  265.833989][T12640] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path /125/mnt/lost+found: directory fails checksum at offset 9216
[  265.841777][T14921] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3787'.
[  265.866310][T12640] EXT4-fs error (device loop4): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  265.879783][T12640] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path /125/mnt/lost+found: directory fails checksum at offset 1024
[  265.895203][T12640] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path /125/mnt/lost+found: directory fails checksum at offset 5120
[  265.910236][T12640] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path /125/mnt/lost+found: directory fails checksum at offset 7168
[  265.925567][T12640] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path /125/mnt/lost+found: directory fails checksum at offset 8192
[  265.941695][T12640] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  265.959449][T12640] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  265.976841][T12640] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  265.994058][T12640] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  266.011199][T12640] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  266.041873][T12640] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  266.058592][T12640] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  266.075615][T12640] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  266.092998][T12640] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  266.142419][T14932] lo speed is unknown, defaulting to 1000
[  266.250764][T14940] loop3: detected capacity change from 0 to 1024
[  266.283609][T14940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.303644][T14916] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  266.458415][T14944] lo speed is unknown, defaulting to 1000
[  266.478951][T14957] loop2: detected capacity change from 0 to 512
[  266.485896][T14957] journal_path: Non-blockdev passed as './bus'
[  266.492152][T14957] EXT4-fs: error: could not find journal device path
[  266.568631][T14944] chnl_net:caif_netlink_parms(): no params data found
[  266.579668][T12336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.632413][T14966] usb usb8: usbfs: process 14966 (syz.2.3803) did not claim interface 0 before use
[  266.691988][T14944] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.699121][T14944] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.715141][T14944] bridge_slave_0: entered allmulticast mode
[  266.721985][T14944] bridge_slave_0: entered promiscuous mode
[  266.728982][T14944] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.736212][T14944] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.743707][T14944] bridge_slave_1: entered allmulticast mode
[  266.750458][T14944] bridge_slave_1: entered promiscuous mode
[  266.766563][T14978] netlink: 'syz.2.3806': attribute type 10 has an invalid length.
[  266.863023][   T58] bond0 (unregistering): Released all slaves
[  266.882785][T14978] team0: Device ipvlan0 failed to register rx_handler
[  266.906333][T14944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  266.917002][T14975] lo speed is unknown, defaulting to 1000
[  266.924617][T14944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  266.940331][   T58] hsr_slave_0: left promiscuous mode
[  266.954394][   T58] hsr_slave_1: left promiscuous mode
[  266.960015][   T58] batman_adv: batadv0: Removing interface: veth1_vlan
[  266.982057][T14992] loop1: detected capacity change from 0 to 1024
[  267.002632][T14992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  267.056167][T14996] FAULT_INJECTION: forcing a failure.
[  267.056167][T14996] name failslab, interval 1, probability 0, space 0, times 0
[  267.068886][T14996] CPU: 0 UID: 0 PID: 14996 Comm: syz.0.3813 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  267.068910][T14996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  267.068921][T14996] Call Trace:
[  267.068928][T14996]  <TASK>
[  267.068936][T14996]  __dump_stack+0x1d/0x30
[  267.068982][T14996]  dump_stack_lvl+0xe8/0x140
[  267.069001][T14996]  dump_stack+0x15/0x1b
[  267.069017][T14996]  should_fail_ex+0x265/0x280
[  267.069093][T14996]  should_failslab+0x8c/0xb0
[  267.069119][T14996]  kmem_cache_alloc_noprof+0x69/0x4b0
[  267.069137][T14996]  ? audit_log_start+0x342/0x720
[  267.069204][T14996]  audit_log_start+0x342/0x720
[  267.069221][T14996]  ? kstrtouint+0x76/0xc0
[  267.069333][T14996]  audit_seccomp+0x48/0x100
[  267.069360][T14996]  ? __seccomp_filter+0x832/0x1260
[  267.069384][T14996]  __seccomp_filter+0x843/0x1260
[  267.069525][T14996]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  267.069549][T14996]  ? vfs_write+0x7e8/0x960
[  267.069565][T14996]  ? __cond_resched+0x4e/0x90
[  267.069586][T14996]  __secure_computing+0x82/0x150
[  267.069608][T14996]  syscall_trace_enter+0xcf/0x1e0
[  267.069720][T14996]  do_syscall_64+0xb2/0x2a0
[  267.069746][T14996]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.069827][T14996] RIP: 0033:0x7ff9580af749
[  267.069839][T14996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  267.069854][T14996] RSP: 002b:00007ff956b17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  267.069869][T14996] RAX: ffffffffffffffda RBX: 00007ff958305fa0 RCX: 00007ff9580af749
[  267.069879][T14996] RDX: 0000200000001140 RSI: 0000000000000007 RDI: 0000000000000004
[  267.069913][T14996] RBP: 00007ff956b17090 R08: 0000000000000000 R09: 0000000000000000
[  267.069929][T14996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  267.069944][T14996] R13: 00007ff958306038 R14: 00007ff958305fa0 R15: 00007ffffcebf658
[  267.070040][T14996]  </TASK>
[  267.285059][T14944] team0: Port device team_slave_0 added
[  267.294083][T14944] team0: Port device team_slave_1 added
[  267.318833][T14944] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.325883][T14944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  267.351902][T14944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.366579][T14944] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.373597][T14944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  267.399593][T14944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.454970][T14944] hsr_slave_0: entered promiscuous mode
[  267.464994][T14944] hsr_slave_1: entered promiscuous mode
[  267.472514][T11699] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.503962][T15013] ipvlan0: left allmulticast mode
[  267.509037][T15013] veth0_vlan: left allmulticast mode
[  267.511077][T15016] loop3: detected capacity change from 0 to 128
[  267.543162][T15016] EXT4-fs: Ignoring removed nobh option
[  267.556623][T15016] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  267.578527][T15016] ext4 filesystem being mounted at /234/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  267.636253][T11699] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path /234/mnt/lost+found: directory fails checksum at offset 1024
[  267.641637][T14944] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  267.658367][T11699] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path /234/mnt/lost+found: directory fails checksum at offset 5120
[  267.675217][T14944] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  267.676999][T11699] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path /234/mnt/lost+found: directory fails checksum at offset 7168
[  267.697423][T11699] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path /234/mnt/lost+found: directory fails checksum at offset 8192
[  267.699682][T14944] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  267.721338][T14944] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  267.728359][T11699] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  267.744027][T11699] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path /234/mnt/lost+found: directory fails checksum at offset 9216
[  267.775742][T11699] EXT4-fs error (device loop3): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  267.789479][T11699] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path /234/mnt/lost+found: directory fails checksum at offset 1024
[  267.805780][T11699] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path /234/mnt/lost+found: directory fails checksum at offset 5120
[  267.824408][T11699] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path /234/mnt/lost+found: directory fails checksum at offset 7168
[  267.839835][T11699] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path /234/mnt/lost+found: directory fails checksum at offset 8192
[  267.857426][T11699] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  267.903802][T14944] 8021q: adding VLAN 0 to HW filter on device bond0
[  267.917971][T11699] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  267.936542][T14944] 8021q: adding VLAN 0 to HW filter on device team0
[  267.946437][ T3636] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.952720][T11699] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  267.953537][ T3636] bridge0: port 1(bridge_slave_0) entered forwarding state
[  267.970774][T11699] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  267.994402][T11699] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  268.012075][ T3586] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.019174][ T3586] bridge0: port 2(bridge_slave_1) entered forwarding state
[  268.040605][T11699] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  268.071456][T11699] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  268.090378][T11699] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  268.118573][T11699] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  268.133163][T14944] 8021q: adding VLAN 0 to HW filter on device batadv0
[  268.229271][T12336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.432555][T14944] veth0_vlan: entered promiscuous mode
[  268.445066][T14944] veth1_vlan: entered promiscuous mode
[  268.480490][T14944] veth0_macvtap: entered promiscuous mode
[  268.508475][T14944] veth1_macvtap: entered promiscuous mode
[  268.533715][T14944] batman_adv: batadv0: Interface activated: batadv_slave_0
[  268.542299][T14944] batman_adv: batadv0: Interface activated: batadv_slave_1
[  268.553521][T15022] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  268.578777][   T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.715084][   T29] kauditd_printk_skb: 389 callbacks suppressed
[  268.715098][   T29] audit: type=1326 audit(1765265386.021:7046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15109 comm="syz.2.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4964d1f749 code=0x7ffc0000
[  268.744716][   T29] audit: type=1326 audit(1765265386.111:7047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15109 comm="syz.2.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4964d1f749 code=0x7ffc0000
[  268.768356][   T29] audit: type=1326 audit(1765265386.111:7048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15109 comm="syz.2.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4964d1f749 code=0x7ffc0000
[  268.791863][   T29] audit: type=1326 audit(1765265386.141:7049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15109 comm="syz.2.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4964d1f749 code=0x7ffc0000
[  268.815324][   T29] audit: type=1326 audit(1765265386.141:7050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15109 comm="syz.2.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4964d1f749 code=0x7ffc0000
[  268.838837][   T29] audit: type=1326 audit(1765265386.141:7051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15109 comm="syz.2.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4964d1f749 code=0x7ffc0000
[  268.862713][   T29] audit: type=1326 audit(1765265386.141:7052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15109 comm="syz.2.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4964d1f749 code=0x7ffc0000
[  269.545928][   T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.578614][   T29] audit: type=1400 audit(1765265387.001:7053): avc:  denied  { mounton } for  pid=14944 comm="syz-executor" path="/root/syzkaller.VMJaI7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=74812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  269.825073][T15113] lo speed is unknown, defaulting to 1000
[  269.882340][   T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.891135][   T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  270.210787][T15133] lo speed is unknown, defaulting to 1000
[  270.405478][T15143] SELinux: security_context_str_to_sid () failed with errno=-22
[  270.428838][T15143] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3835'.
[  270.503399][T15146] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3836'.
[  270.525177][T15146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  270.542045][T15146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.557829][T15146] bond0 (unregistering): Released all slaves
[  270.602917][   T29] audit: type=1326 audit(1765265388.041:7054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15140 comm="syz.2.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4964d1f749 code=0x7ffc0000
[  270.626583][   T29] audit: type=1326 audit(1765265388.041:7055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15140 comm="syz.2.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4964d1f749 code=0x7ffc0000
[  271.126909][T15156] loop1: detected capacity change from 0 to 1024
[  271.144034][T15156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  271.325645][T15141] syz.2.3834 (15141) used greatest stack depth: 7232 bytes left
[  271.347730][T15164] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  271.354260][T15164] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  271.361857][T15164] vhci_hcd vhci_hcd.0: Device attached
[  271.368666][T15165] vhci_hcd: connection closed
[  271.368812][ T3594] vhci_hcd vhci_hcd.2: stop threads
[  271.378791][ T3594] vhci_hcd vhci_hcd.2: release socket
[  271.384200][ T3594] vhci_hcd vhci_hcd.2: disconnect device
[  271.430190][T12336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.595462][T15172] lo speed is unknown, defaulting to 1000
[  271.617992][T15186] lo speed is unknown, defaulting to 1000
[  271.645428][T15190] siw: device registration error -23
[  271.833379][ T3594] bond0 (unregistering): Released all slaves
[  271.847965][T15172] chnl_net:caif_netlink_parms(): no params data found
[  271.912253][T15196] usb usb8: usbfs: process 15196 (syz.1.3847) did not claim interface 0 before use
[  271.951062][T15202] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3849'.
[  271.951666][T15172] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.967366][T15172] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.978340][T15172] bridge_slave_0: entered allmulticast mode
[  271.985629][T15172] bridge_slave_0: entered promiscuous mode
[  272.002446][ T3594] hsr_slave_0: left promiscuous mode
[  272.009603][ T3594] hsr_slave_1: left promiscuous mode
[  272.015898][ T3594] batman_adv: batadv0: Interface deactivated: veth1_vlan
[  272.023005][ T3594] batman_adv: batadv0: Removing interface: veth1_vlan
[  272.094463][T15215] netlink: 'syz.0.3855': attribute type 1 has an invalid length.
[  272.103773][T15205] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3850'.
[  272.103821][T15172] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.119910][T15172] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.127319][T15172] bridge_slave_1: entered allmulticast mode
[  272.134362][T15172] bridge_slave_1: entered promiscuous mode
[  272.149459][T15215] 8021q: adding VLAN 0 to HW filter on device bond1
[  272.157287][T15205] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3850'.
[  272.188472][T15172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  272.198097][T15200] lo speed is unknown, defaulting to 1000
[  272.205776][T15172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  272.248108][T15172] team0: Port device team_slave_0 added
[  272.269770][T15227] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  272.293475][T15172] team0: Port device team_slave_1 added
[  272.307767][T15227] netlink: 'syz.0.3857': attribute type 10 has an invalid length.
[  272.315683][T15227] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3857'.
[  272.326044][T15172] batman_adv: batadv0: Adding interface: batadv_slave_0
[  272.333032][T15172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  272.352679][T15235] netlink: 'syz.1.3858': attribute type 10 has an invalid length.
[  272.359120][T15172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  272.378781][T15235] team0: Device ipvlan0 failed to register rx_handler
[  272.386836][T15227] batman_adv: batadv0: Interface activated: veth1_vlan
[  272.405088][T15172] batman_adv: batadv0: Adding interface: batadv_slave_1
[  272.412140][T15172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  272.438099][T15172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  272.483138][T15172] hsr_slave_0: entered promiscuous mode
[  272.491307][T15172] hsr_slave_1: entered promiscuous mode
[  272.497386][T15172] debugfs: 'hsr0' already exists in 'hsr'
[  272.503167][T15172] Cannot create hsr debugfs directory
[  272.514945][T15231] lo speed is unknown, defaulting to 1000
[  272.722218][T15172] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  272.723237][T15270] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3863'.
[  272.742361][T15172] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  272.744821][T15266] usb usb8: usbfs: process 15266 (syz.0.3862) did not claim interface 0 before use
[  272.761631][T15172] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  272.785616][T15172] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  272.840812][T15281] netlink: 'syz.2.3866': attribute type 1 has an invalid length.
[  272.895799][T15281] 8021q: adding VLAN 0 to HW filter on device bond1
[  272.908886][T15275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3865'.
[  272.929711][T15288] lo speed is unknown, defaulting to 1000
[  272.936337][T15172] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.943509][T15172] bridge0: port 2(bridge_slave_1) entered forwarding state
[  272.993731][T15172] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.002014][ T3636] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.047036][T15303] loop1: detected capacity change from 0 to 1024
[  273.054279][T15295] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12)
[  273.060959][T15295] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  273.068547][T15295] vhci_hcd vhci_hcd.0: Device attached
[  273.094528][T15172] 8021q: adding VLAN 0 to HW filter on device team0
[  273.102396][T15303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.168927][T15306] vhci_hcd: connection closed
[  273.169378][   T12] vhci_hcd vhci_hcd.5: stop threads
[  273.179326][   T12] vhci_hcd vhci_hcd.5: release socket
[  273.182007][T15172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  273.184788][   T12] vhci_hcd vhci_hcd.5: disconnect device
[  273.195113][T15172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  273.217178][T15320] usb usb8: usbfs: process 15320 (syz.0.3875) did not claim interface 0 before use
[  273.230571][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.237766][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.262692][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.269872][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.309927][T15331] 
@0ÙÌ”W¦äz: renamed from bond_slave_1
[  273.376757][T15172] 8021q: adding VLAN 0 to HW filter on device batadv0
[  273.393995][T15339] lo speed is unknown, defaulting to 1000
[  273.425434][T15347] netlink: 'syz.0.3878': attribute type 10 has an invalid length.
[  273.436556][T15347] ipvlan0: entered allmulticast mode
[  273.441919][T15347] veth0_vlan: entered allmulticast mode
[  273.448384][T15347] team0: Device ipvlan0 failed to register rx_handler
[  273.558279][T12336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.613861][T15369] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3879'.
[  273.616822][T15172] veth0_vlan: entered promiscuous mode
[  273.631082][T15172] veth1_vlan: entered promiscuous mode
[  273.656457][T15172] veth0_macvtap: entered promiscuous mode
[  273.677350][T15372] SELinux: security_context_str_to_sid () failed with errno=-22
[  273.692742][T15372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3880'.
[  273.711948][T15172] veth1_macvtap: entered promiscuous mode
[  273.728487][T15172] batman_adv: batadv0: Interface activated: batadv_slave_0
[  273.750033][T15172] batman_adv: batadv0: Interface activated: batadv_slave_1
[  273.770943][ T3586] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  273.783858][T15375] netlink: 'syz.1.3881': attribute type 1 has an invalid length.
[  273.813349][ T3586] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  273.853188][T15375] 8021q: adding VLAN 0 to HW filter on device bond1
[  273.864813][ T3586] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  273.901018][ T3586] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  273.990657][   T29] kauditd_printk_skb: 144 callbacks suppressed
[  273.990676][   T29] audit: type=1326 audit(1765265391.431:7200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15395 comm="syz.1.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb080bef749 code=0x7ffc0000
[  274.002038][T15400] loop6: detected capacity change from 0 to 128
[  274.023859][T15397] loop1: detected capacity change from 0 to 128
[  274.030070][T15400] EXT4-fs: Ignoring removed nobh option
[  274.054180][T15400] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  274.067543][T15397] EXT4-fs: Ignoring removed nobh option
[  274.076417][   T29] audit: type=1326 audit(1765265391.441:7201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15399 comm="syz.6.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd753e8f749 code=0x7ffc0000
[  274.100012][   T29] audit: type=1326 audit(1765265391.441:7202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15399 comm="syz.6.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd753e8f749 code=0x7ffc0000
[  274.123663][   T29] audit: type=1326 audit(1765265391.441:7203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15399 comm="syz.6.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd753e8f749 code=0x7ffc0000
[  274.147205][   T29] audit: type=1326 audit(1765265391.441:7204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15399 comm="syz.6.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd753e8f783 code=0x7ffc0000
[  274.170573][   T29] audit: type=1326 audit(1765265391.441:7205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15399 comm="syz.6.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd753e8e1ff code=0x7ffc0000
[  274.193956][   T29] audit: type=1326 audit(1765265391.451:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15399 comm="syz.6.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd753e8f7d7 code=0x7ffc0000
[  274.202666][T15400] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  274.217553][   T29] audit: type=1326 audit(1765265391.451:7207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15399 comm="syz.6.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd753e8df90 code=0x7ffc0000
[  274.251226][   T29] audit: type=1326 audit(1765265391.451:7208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15399 comm="syz.6.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd753e8f34b code=0x7ffc0000
[  274.274723][   T29] audit: type=1326 audit(1765265391.471:7209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15395 comm="syz.1.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb080bef749 code=0x7ffc0000
[  274.298087][T15397] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  274.314577][T15409] loop5: detected capacity change from 0 to 512
[  274.316091][T15406] bridge1: entered promiscuous mode
[  274.321119][T15409] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  274.326087][T15406] bridge1: entered allmulticast mode
[  274.336026][T15397] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  274.409928][T12336] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /136/mnt/lost+found: directory fails checksum at offset 1024
[  274.426094][T15172] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path /3/mnt/lost+found: directory fails checksum at offset 1024
[  274.448403][T12336] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /136/mnt/lost+found: directory fails checksum at offset 5120
[  274.471750][T15172] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path /3/mnt/lost+found: directory fails checksum at offset 5120
[  274.493177][T12336] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /136/mnt/lost+found: directory fails checksum at offset 7168
[  274.508687][T12336] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /136/mnt/lost+found: directory fails checksum at offset 8192
[  274.524276][T12336] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  274.535744][T15172] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path /3/mnt/lost+found: directory fails checksum at offset 7168
[  274.539900][T12336] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /136/mnt/lost+found: directory fails checksum at offset 9216
[  274.555139][T15422] loop2: detected capacity change from 0 to 1024
[  274.576745][T12336] EXT4-fs error (device loop1): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  274.591077][T15422] EXT4-fs: Ignoring removed nomblk_io_submit option
[  274.608613][T15172] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path /3/mnt/lost+found: directory fails checksum at offset 8192
[  274.623840][T15424] netlink: 'syz.0.3899': attribute type 1 has an invalid length.
[  274.647007][T15172] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  274.659248][T12336] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /136/mnt/lost+found: directory fails checksum at offset 1024
[  274.662623][T15172] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path /3/mnt/lost+found: directory fails checksum at offset 9216
[  274.677534][T15424] 8021q: adding VLAN 0 to HW filter on device bond2
[  274.704500][T15172] EXT4-fs error (device loop6): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  274.717783][T15433] loop5: detected capacity change from 0 to 1024
[  274.721846][T15172] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path /3/mnt/lost+found: directory fails checksum at offset 1024
[  274.739557][T12336] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /136/mnt/lost+found: directory fails checksum at offset 5120
[  274.740535][T15424] bond2 (unregistering): Released all slaves
[  274.760735][T12336] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /136/mnt/lost+found: directory fails checksum at offset 7168
[  274.775752][T15172] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path /3/mnt/lost+found: directory fails checksum at offset 5120
[  274.781699][T12336] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /136/mnt/lost+found: directory fails checksum at offset 8192
[  274.791428][T15422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  274.818038][T12336] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  274.818079][T15172] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path /3/mnt/lost+found: directory fails checksum at offset 7168
[  274.849465][T15172] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path /3/mnt/lost+found: directory fails checksum at offset 8192
[  274.852774][T15433] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  274.871493][T15172] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  274.896848][T12336] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  274.921153][T13019] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.945240][T15442] netlink: 'syz.0.3905': attribute type 10 has an invalid length.
[  274.946399][T14944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.953603][T15442] team0: Device ipvlan0 failed to register rx_handler
[  274.970363][T12336] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  274.986936][T15172] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  275.005048][T15172] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  275.033467][T15172] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  275.049831][T12336] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  275.067006][T15445] loop2: detected capacity change from 0 to 1024
[  275.071960][T15446] bridge1: entered promiscuous mode
[  275.078589][T15446] bridge1: entered allmulticast mode
[  275.088000][T15172] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  275.106591][T12336] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  275.129673][T15172] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  275.132765][T15445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  275.158642][T12336] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  275.174183][T15172] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  275.190984][T12336] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  275.207183][T15172] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  275.231700][T15172] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  275.233753][T12336] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  275.276468][T12336] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  275.297128][T15459] batman_adv: batadv0: Interface deactivated: veth1_vlan
[  275.304975][T15459] ipvlan0: left allmulticast mode
[  275.310087][T15459] veth0_vlan: left allmulticast mode
[  275.316229][T15459] bridge1: left promiscuous mode
[  275.321243][T15459] bridge1: left allmulticast mode
[  275.497959][T13019] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.543240][T15474] __nla_validate_parse: 6 callbacks suppressed
[  275.543267][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3917'.
[  275.565329][T15474] bridge2: entered promiscuous mode
[  275.570562][T15474] bridge2: entered allmulticast mode
[  275.594976][T15414] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  275.619336][T15476] lo speed is unknown, defaulting to 1000
[  275.636606][T15480] netlink: 'syz.5.3918': attribute type 10 has an invalid length.
[  275.654435][T15480] ipvlan0: entered allmulticast mode
[  275.659760][T15480] veth0_vlan: entered allmulticast mode
[  275.667989][T15480] team0: Device ipvlan0 failed to register rx_handler
[  275.739660][T15489] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3922'.
[  275.784518][T15493] loop2: detected capacity change from 0 to 1024
[  275.813378][T15493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  275.875305][T15484] lo speed is unknown, defaulting to 1000
[  276.103261][ T3594] bond0 (unregistering): Released all slaves
[  276.112022][ T3594] bond1 (unregistering): Released all slaves
[  276.142059][T15526] siw: device registration error -23
[  276.157144][T15523] lo speed is unknown, defaulting to 1000
[  276.198324][T15528] lo speed is unknown, defaulting to 1000
[  276.220684][ T3594] hsr_slave_0: left promiscuous mode
[  276.228924][ T3594] hsr_slave_1: left promiscuous mode
[  276.234773][ T3594] batman_adv: batadv0: Removing interface: veth1_vlan
[  276.328308][T15484] chnl_net:caif_netlink_parms(): no params data found
[  276.409578][T15484] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.416716][T15484] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.424450][T15484] bridge_slave_0: entered allmulticast mode
[  276.431023][T15484] bridge_slave_0: entered promiscuous mode
[  276.439641][T15550] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3929'.
[  276.487791][T15484] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.495018][T15484] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.530793][T15484] bridge_slave_1: entered allmulticast mode
[  276.542548][T15484] bridge_slave_1: entered promiscuous mode
[  276.587479][T15484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  276.600490][T15484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  276.625024][T15484] team0: Port device team_slave_0 added
[  276.631719][T15484] team0: Port device team_slave_1 added
[  276.657625][T15484] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.664670][T15484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.690725][T15484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.762022][T15570] lo speed is unknown, defaulting to 1000
[  276.861725][T15484] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.868715][T15484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.902044][T15484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  277.038127][T15578] loop5: detected capacity change from 0 to 1024
[  277.179877][T15484] hsr_slave_0: entered promiscuous mode
[  277.186510][T15484] hsr_slave_1: entered promiscuous mode
[  277.193124][T15484] debugfs: 'hsr0' already exists in 'hsr'
[  277.198938][T15484] Cannot create hsr debugfs directory
[  277.537680][T13019] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.547380][T15410] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  277.562579][T15578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.659739][T14944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.825351][T15605] lo speed is unknown, defaulting to 1000
[  277.834508][ T3594] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.937324][ T3594] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.969022][T15623] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3940'.
[  277.999837][T15614] lo speed is unknown, defaulting to 1000
[  278.027999][ T3594] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.061301][T15484] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  278.073588][T15628] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3941'.
[  278.087689][T15484] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  278.106271][ T3594] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.136239][T15484] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  278.158685][T15484] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  278.195043][T15630] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.265329][T15632] lo speed is unknown, defaulting to 1000
[  278.287153][ T3594] bridge_slave_1: left allmulticast mode
[  278.292867][ T3594] bridge_slave_1: left promiscuous mode
[  278.298590][ T3594] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.311020][T15641] netlink: 'syz.2.3943': attribute type 10 has an invalid length.
[  278.321090][ T3594] bridge_slave_0: left allmulticast mode
[  278.326793][ T3594] bridge_slave_0: left promiscuous mode
[  278.332649][ T3594] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.424681][ T3594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  278.434766][ T3594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  278.444817][ T3594] bond0 (unregistering): Released all slaves
[  278.487362][T15641] ipvlan0: entered allmulticast mode
[  278.492767][T15641] veth0_vlan: entered allmulticast mode
[  278.501132][T15641] team0: Device ipvlan0 failed to register rx_handler
[  278.519219][T15642] bond0 (unregistering): Released all slaves
[  278.536903][T15630] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.562854][ T3594] hsr_slave_0: left promiscuous mode
[  278.568556][ T3594] hsr_slave_1: left promiscuous mode
[  278.574262][ T3594] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  278.581730][ T3594] batman_adv: batadv0: Removing interface: batadv_slave_0
[  278.589427][ T3594] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  278.596910][ T3594] batman_adv: batadv0: Removing interface: batadv_slave_1
[  278.608053][ T3594] veth1_macvtap: left promiscuous mode
[  278.613621][ T3594] veth0_macvtap: left promiscuous mode
[  278.619224][ T3594] veth1_vlan: left promiscuous mode
[  278.624532][ T3594] veth0_vlan: left promiscuous mode
[  278.690440][ T3594] team0 (unregistering): Port device team_slave_1 removed
[  278.700558][ T3594] team0 (unregistering): Port device team_slave_0 removed
[  278.738433][T15614] chnl_net:caif_netlink_parms(): no params data found
[  278.765133][T15630] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.816911][T15630] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.836517][T15614] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.843764][T15614] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.850968][T15614] bridge_slave_0: entered allmulticast mode
[  278.857672][T15614] bridge_slave_0: entered promiscuous mode
[  278.874489][T15614] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.881754][T15614] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.889789][T15614] bridge_slave_1: entered allmulticast mode
[  278.896696][T15614] bridge_slave_1: entered promiscuous mode
[  278.944275][T15614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.970924][T15484] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.980516][T15614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  279.006601][   T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.035602][T15484] 8021q: adding VLAN 0 to HW filter on device team0
[  279.055114][ T3595] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.066628][T15614] team0: Port device team_slave_0 added
[  279.083062][T15614] team0: Port device team_slave_1 added
[  279.091315][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.098480][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.136861][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.144033][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.158939][ T3595] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.183801][T15614] batman_adv: batadv0: Adding interface: batadv_slave_0
[  279.190773][T15614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  279.216829][T15614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  279.230795][ T3595] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.248416][T15484] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  279.258857][T15484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  279.279477][   T29] kauditd_printk_skb: 184 callbacks suppressed
[  279.279493][   T29] audit: type=1326 audit(1765265396.721:7391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b928f749 code=0x7ffc0000
[  279.309739][T15614] batman_adv: batadv0: Adding interface: batadv_slave_1
[  279.316761][T15614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  279.342842][T15614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  279.369570][   T29] audit: type=1326 audit(1765265396.791:7392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3b928f749 code=0x7ffc0000
[  279.393448][   T29] audit: type=1326 audit(1765265396.791:7393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b928f749 code=0x7ffc0000
[  279.417046][   T29] audit: type=1326 audit(1765265396.791:7394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b928f749 code=0x7ffc0000
[  279.440621][   T29] audit: type=1326 audit(1765265396.801:7395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc3b928f749 code=0x7ffc0000
[  279.551961][   T29] audit: type=1326 audit(1765265396.981:7396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b928f749 code=0x7ffc0000
[  279.575602][   T29] audit: type=1326 audit(1765265396.981:7397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b928f749 code=0x7ffc0000
[  279.784209][T15702] netlink: 'syz.2.3954': attribute type 10 has an invalid length.
[  279.796114][T15702] team0: Device ipvlan0 failed to register rx_handler
[  279.852542][T15614] hsr_slave_0: entered promiscuous mode
[  279.892283][T15614] hsr_slave_1: entered promiscuous mode
[  279.932932][T15614] debugfs: 'hsr0' already exists in 'hsr'
[  279.938678][T15614] Cannot create hsr debugfs directory
[  279.955626][   T29] audit: type=1326 audit(1765265397.161:7398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc3b928f749 code=0x7ffc0000
[  279.979130][   T29] audit: type=1326 audit(1765265397.161:7399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b928f749 code=0x7ffc0000
[  280.002637][   T29] audit: type=1326 audit(1765265397.161:7400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b928f749 code=0x7ffc0000
[  280.049713][T15698] lo speed is unknown, defaulting to 1000
[  280.055169][T15484] 8021q: adding VLAN 0 to HW filter on device batadv0
[  280.158409][T15723] netlink: 'syz.0.3958': attribute type 10 has an invalid length.
[  280.190255][T15723] ipvlan0: entered allmulticast mode
[  280.195663][T15723] veth0_vlan: entered allmulticast mode
[  280.234219][T15723] team0: Device ipvlan0 failed to register rx_handler
[  280.248056][T15716] lo speed is unknown, defaulting to 1000
[  280.355552][T15740] loop5: detected capacity change from 0 to 256
[  280.366900][T15614] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  280.391310][T15614] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  280.426932][T15614] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  280.436964][T15751] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3962'.
[  280.455408][T15484] veth0_vlan: entered promiscuous mode
[  280.475205][T15755] loop2: detected capacity change from 0 to 512
[  280.498420][T15755] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  280.529329][T15755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3963'.
[  280.580236][T15614] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  280.623039][T15767] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3964'.
[  280.642848][T15484] veth1_vlan: entered promiscuous mode
[  281.177607][T15780] ipvlan0: left allmulticast mode
[  281.182808][T15780] veth0_vlan: left allmulticast mode
[  281.188232][T15780] bridge2: left promiscuous mode
[  281.193563][T15780] bridge2: left allmulticast mode
[  281.210305][T15614] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.250379][T15614] 8021q: adding VLAN 0 to HW filter on device team0
[  281.267746][ T3584] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.274909][ T3584] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.286570][T15484] veth0_macvtap: entered promiscuous mode
[  281.295219][T15484] veth1_macvtap: entered promiscuous mode
[  281.324664][T15614] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  281.335060][T15614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  281.364792][ T3584] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.371888][ T3584] bridge0: port 2(bridge_slave_1) entered forwarding state
[  281.440387][T15814] loop5: detected capacity change from 0 to 1024
[  281.493857][T15814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.520002][T15484] batman_adv: batadv0: Interface activated: batadv_slave_0
[  281.530845][T15484] batman_adv: batadv0: Interface activated: batadv_slave_1
[  281.543050][ T3637] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.569141][ T3637] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.603341][ T3637] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.632770][T14944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.646771][T15614] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.680167][ T3637] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.724140][T15827] loop2: detected capacity change from 0 to 256
[  281.957880][T15850] SELinux:  Context Ü is not valid (left unmapped).
[  281.985165][T15847] lo speed is unknown, defaulting to 1000
[  282.009664][T15855] loop7: detected capacity change from 0 to 512
[  282.037024][T15855] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  282.066381][T15862] netlink: 'syz.5.3976': attribute type 1 has an invalid length.
[  282.124012][T15862] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.144409][T15614] veth0_vlan: entered promiscuous mode
[  282.175705][T15868] bond0 (unregistering): Released all slaves
[  282.216283][T15614] veth1_vlan: entered promiscuous mode
[  282.234614][T15614] veth0_macvtap: entered promiscuous mode
[  282.243421][T15614] veth1_macvtap: entered promiscuous mode
[  282.255956][T15614] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.269395][T15876] ipvlan0: left allmulticast mode
[  282.274659][T15876] veth0_vlan: left allmulticast mode
[  282.286477][T15614] batman_adv: batadv0: Interface activated: batadv_slave_1
[  282.312780][ T3597] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.334151][ T3597] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.355879][ T3597] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.364771][T15881] bridge: RTM_NEWNEIGH with invalid ether address
[  282.380769][ T3597] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  282.585990][T15915] loop7: detected capacity change from 0 to 1024
[  282.678758][T15924] lo speed is unknown, defaulting to 1000
[  282.681144][T15915] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.710721][T15918] netlink: 'syz.5.3988': attribute type 10 has an invalid length.
[  282.837567][T15484] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.900919][T15918] team0: Device ipvlan0 failed to register rx_handler
[  283.677101][T15944] tap0: tun_chr_ioctl cmd 2147767506
[  283.920922][T15963] netlink: 'syz.8.3999': attribute type 1 has an invalid length.
[  283.960171][T15966] loop2: detected capacity change from 0 to 1024
[  284.023550][T15963] 8021q: adding VLAN 0 to HW filter on device bond1
[  284.147268][T15966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.349394][T13019] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.402975][T15996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4002'.
[  284.644282][T16004] SELinux: security_context_str_to_sid () failed with errno=-22
[  284.676670][T16004] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4004'.
[  284.697958][T16012] loop2: detected capacity change from 0 to 512
[  284.718719][T16012] EXT4-fs (loop2): orphan cleanup on readonly fs
[  284.733950][T16012] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4007: bg 0: block 127: padding at end of block bitmap is not set
[  284.757318][T16012] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.4007: corrupted inode contents
[  284.784825][T16020] netlink: 'syz.5.4009': attribute type 10 has an invalid length.
[  284.785674][T16012] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  284.794223][T16020] team0: Device ipvlan0 failed to register rx_handler
[  284.802135][T16012] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.4007: corrupted inode contents
[  284.821149][T16012] EXT4-fs error (device loop2): ext4_evict_inode:301: inode #15: comm syz.2.4007: mark_inode_dirty error
[  284.839665][   T29] kauditd_printk_skb: 239 callbacks suppressed
[  284.839702][   T29] audit: type=1326 audit(1765265402.281:7640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.7.4001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf033f749 code=0x7ffc0000
[  284.869865][   T29] audit: type=1326 audit(1765265402.281:7641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.7.4001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf033f749 code=0x7ffc0000
[  284.900826][T16012] EXT4-fs (loop2): 1 orphan inode deleted
[  284.922703][T16012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  284.925699][T16023] loop7: detected capacity change from 0 to 512
[  284.945381][T16023] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  284.955730][T16023] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4011'.
[  284.993449][T16028] loop7: detected capacity change from 0 to 512
[  285.001632][T16028] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  285.012119][T16028] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4014'.
[  285.033628][T13019] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.063617][T16031] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4017'.
[  285.072618][T16031] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4017'.
[  285.089548][   T29] audit: type=1400 audit(1765265402.531:7642): avc:  denied  { read } for  pid=16029 comm="syz.5.4016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  285.126621][T16031] bridge1: entered promiscuous mode
[  285.131978][T16031] bridge1: entered allmulticast mode
[  285.197549][   T29] audit: type=1326 audit(1765265402.641:7643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16042 comm="syz.2.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4964d1f749 code=0x7ffc0000
[  285.322022][   T29] audit: type=1326 audit(1765265402.671:7644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16042 comm="syz.2.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4964d1f749 code=0x7ffc0000
[  285.345606][   T29] audit: type=1326 audit(1765265402.671:7645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16042 comm="syz.2.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4964d1f749 code=0x7ffc0000
[  285.369366][   T29] audit: type=1326 audit(1765265402.671:7646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16042 comm="syz.2.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4964d1f749 code=0x7ffc0000
[  285.393211][   T29] audit: type=1326 audit(1765265402.671:7647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16042 comm="syz.2.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4964d1f749 code=0x7ffc0000
[  285.416931][   T29] audit: type=1326 audit(1765265402.671:7648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16042 comm="syz.2.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4964d1f749 code=0x7ffc0000
[  285.440659][   T29] audit: type=1326 audit(1765265402.671:7649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16042 comm="syz.2.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4964d1f749 code=0x7ffc0000
[  285.542717][T16056] loop5: detected capacity change from 0 to 512
[  285.560684][T16056] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  285.610313][T16056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4026'.
[  285.631979][T16061] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4028'.
[  285.642459][T16061] bond0 (unregistering): Released all slaves
[  285.749658][T16068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4030'.
[  285.758700][T16068] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4030'.
[  285.770889][T16068] bridge2: entered promiscuous mode
[  285.776338][T16068] bridge2: entered allmulticast mode
[  286.400881][T16093] SELinux: security_context_str_to_sid () failed with errno=-22
[  286.509121][T16088] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.516306][T16088] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.720854][T16088] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.750240][T16088] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.835639][ T3584] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.862752][ T3584] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.898096][ T3584] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.949113][ T3584] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.978363][T16116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4042'.
[  286.987284][T16116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4042'.
[  287.053131][T16116] bridge3: entered promiscuous mode
[  287.058400][T16116] bridge3: entered allmulticast mode
[  287.706584][T16138] netlink: 'syz.0.4045': attribute type 1 has an invalid length.
[  287.782354][T16142] loop7: detected capacity change from 0 to 128
[  287.797439][T16142] EXT4-fs: Ignoring removed nobh option
[  287.808230][T16138] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.811546][T16142] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  287.827653][T16142] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  287.839179][T16132] bond0 (unregistering): Released all slaves
[  287.872185][T16148] lo speed is unknown, defaulting to 1000
[  287.901755][T16152] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4048'.
[  287.943366][T15484] EXT4-fs error (device loop7): ext4_readdir:224: inode #11: comm syz-executor: path /17/mnt/lost+found: directory fails checksum at offset 1024
[  287.970803][T16127] can0: slcan on ttyS3.
[  287.985346][T15484] EXT4-fs error (device loop7): ext4_readdir:224: inode #11: comm syz-executor: path /17/mnt/lost+found: directory fails checksum at offset 5120
[  288.006223][T15484] EXT4-fs error (device loop7): ext4_readdir:224: inode #11: comm syz-executor: path /17/mnt/lost+found: directory fails checksum at offset 7168
[  288.041384][T15484] EXT4-fs error (device loop7): ext4_readdir:224: inode #11: comm syz-executor: path /17/mnt/lost+found: directory fails checksum at offset 8192
[  288.061283][T15484] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  288.076929][T15484] EXT4-fs error (device loop7): ext4_readdir:224: inode #11: comm syz-executor: path /17/mnt/lost+found: directory fails checksum at offset 9216
[  288.101645][T16119] can0 (unregistered): slcan off ttyS3.
[  288.108746][T15484] EXT4-fs error (device loop7): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  288.130346][T15484] EXT4-fs error (device loop7): ext4_readdir:224: inode #11: comm syz-executor: path /17/mnt/lost+found: directory fails checksum at offset 1024
[  288.168154][T15484] EXT4-fs error (device loop7): ext4_readdir:224: inode #11: comm syz-executor: path /17/mnt/lost+found: directory fails checksum at offset 5120
[  288.186484][T15484] EXT4-fs error (device loop7): ext4_readdir:224: inode #11: comm syz-executor: path /17/mnt/lost+found: directory fails checksum at offset 7168
[  288.203226][T15484] EXT4-fs error (device loop7): ext4_readdir:224: inode #11: comm syz-executor: path /17/mnt/lost+found: directory fails checksum at offset 8192
[  288.230539][T15484] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  288.247592][T15484] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  288.264124][T16183] bond0 (unregistering): Released all slaves
[  288.273807][T15484] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  288.294092][T16190] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4056'.
[  288.300897][T15484] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  288.303050][T16190] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4056'.
[  288.322377][T15484] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  288.351091][T15484] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  288.369710][T16195] bridge3: left promiscuous mode
[  288.374775][T16195] bridge3: left allmulticast mode
[  288.383167][T16190] bridge1: entered promiscuous mode
[  288.388529][T16190] bridge1: entered allmulticast mode
[  288.393142][T15484] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  288.424166][T15484] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  288.440901][T15484] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  288.766820][T16213] loop8: detected capacity change from 0 to 1024
[  288.834654][T16213] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.947318][  T390] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.548308][T16151] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  289.558194][T15614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.733918][  T390] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.894674][   T29] kauditd_printk_skb: 219 callbacks suppressed
[  289.894691][   T29] audit: type=1326 audit(1765265407.291:7869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16224 comm="syz.0.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9580af749 code=0x7ffc0000
[  289.924588][   T29] audit: type=1326 audit(1765265407.291:7870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16224 comm="syz.0.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9580af749 code=0x7ffc0000
[  290.005674][T16237] lo speed is unknown, defaulting to 1000
[  290.026002][T16235] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4064'.
[  290.041157][  T390] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.055676][T16245] loop8: detected capacity change from 0 to 512
[  290.094222][T16240] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4066'.
[  290.094398][T16235] macsec1: entered promiscuous mode
[  290.108519][T16235] bridge0: entered promiscuous mode
[  290.126593][   T29] audit: type=1400 audit(1765265407.401:7871): avc:  denied  { write } for  pid=16231 comm="syz.2.4064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  290.146151][   T29] audit: type=1400 audit(1765265407.441:7872): avc:  denied  { getopt } for  pid=16231 comm="syz.2.4064" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  290.166604][   T29] audit: type=1326 audit(1765265407.501:7873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16243 comm="syz.8.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13328cf749 code=0x7ffc0000
[  290.190162][   T29] audit: type=1326 audit(1765265407.501:7874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16243 comm="syz.8.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13328cf749 code=0x7ffc0000
[  290.213935][   T29] audit: type=1326 audit(1765265407.501:7875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16243 comm="syz.8.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13328cf749 code=0x7ffc0000
[  290.237707][   T29] audit: type=1326 audit(1765265407.501:7876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16243 comm="syz.8.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13328cf749 code=0x7ffc0000
[  290.261252][   T29] audit: type=1326 audit(1765265407.501:7877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16243 comm="syz.8.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f13328cf749 code=0x7ffc0000
[  290.284898][   T29] audit: type=1326 audit(1765265407.501:7878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16243 comm="syz.8.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f13328cf783 code=0x7ffc0000
[  290.311619][T16235] bridge0: port 1(macsec1) entered blocking state
[  290.318091][T16235] bridge0: port 1(macsec1) entered disabled state
[  290.330458][T16235] macsec1: entered allmulticast mode
[  290.335828][T16235] bridge0: entered allmulticast mode
[  290.346180][T16235] macsec1: left allmulticast mode
[  290.351400][T16235] bridge0: left allmulticast mode
[  290.369940][T16235] bridge0: left promiscuous mode
[  290.418128][  T390] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.475919][T16245] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  290.544012][T16245] EXT4-fs (loop8): 1 truncate cleaned up
[  290.552019][T16245] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  290.622721][  T390] bridge_slave_1: left allmulticast mode
[  290.628421][  T390] bridge_slave_1: left promiscuous mode
[  290.634213][  T390] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.706388][T16271] loop2: detected capacity change from 0 to 256
[  290.722494][T15614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.732687][  T390] bridge_slave_0: left allmulticast mode
[  290.738358][  T390] bridge_slave_0: left promiscuous mode
[  290.744154][  T390] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.945725][  T390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  290.978670][T16290] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4076'.
[  290.989779][  T390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  290.999802][  T390] bond0 (unregistering): Released all slaves
[  291.010692][T16290] bridge_slave_1: left allmulticast mode
[  291.016401][T16290] bridge_slave_1: left promiscuous mode
[  291.022347][T16290] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.031656][T16290] bridge_slave_0: left allmulticast mode
[  291.037396][T16290] bridge_slave_0: left promiscuous mode
[  291.043338][T16290] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.079803][T16284] siw: device registration error -23
[  291.572536][T16291] lo speed is unknown, defaulting to 1000
[  291.599306][T16298] bond2 (unregistering): Released all slaves
[  291.658289][  T390] hsr_slave_0: left promiscuous mode
[  291.778174][  T390] hsr_slave_1: left promiscuous mode
[  291.791757][  T390] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  291.799234][  T390] batman_adv: batadv0: Removing interface: batadv_slave_0
[  291.822032][  T390] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  291.829477][  T390] batman_adv: batadv0: Removing interface: batadv_slave_1
[  291.831720][T16314] loop8: detected capacity change from 0 to 1024
[  291.952765][  T390] veth1_macvtap: left promiscuous mode
[  291.964658][  T390] veth0_macvtap: left promiscuous mode
[  291.970278][  T390] veth1_vlan: left promiscuous mode
[  291.976316][  T390] veth0_vlan: left promiscuous mode
[  291.976926][T16314] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.016693][T15614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.182821][  T390] team0 (unregistering): Port device team_slave_1 removed
[  292.199270][  T390] team0 (unregistering): Port device team_slave_0 removed
[  292.280088][T16332] lo speed is unknown, defaulting to 1000
[  292.407452][T16334] bond2 (unregistering): Released all slaves
[  292.471219][T16239] lo speed is unknown, defaulting to 1000
[  292.871681][T16239] chnl_net:caif_netlink_parms(): no params data found
[  293.000429][T16239] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.007714][T16239] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.018376][T16239] bridge_slave_0: entered allmulticast mode
[  293.171784][T16239] bridge_slave_0: entered promiscuous mode
[  293.189620][T16239] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.196820][T16239] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.656000][T16359] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4081'.
[  293.708085][T16239] bridge_slave_1: entered allmulticast mode
[  293.717973][T16239] bridge_slave_1: entered promiscuous mode
[  293.746948][T16239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  293.768461][T16362] lo speed is unknown, defaulting to 1000
[  294.128551][T16239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  294.714790][T16239] team0: Port device team_slave_0 added
[  294.756292][T16239] team0: Port device team_slave_1 added
[  294.790821][T16389] xt_hashlimit: max too large, truncated to 1048576
[  294.948360][T16239] batman_adv: batadv0: Adding interface: batadv_slave_0
[  294.955441][T16239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  294.981487][T16239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.063505][T16408] loop5: detected capacity change from 0 to 256
[  295.091982][T16239] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.098948][T16239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  295.125011][T16239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.245346][T16418] loop5: detected capacity change from 0 to 512
[  295.267317][T16418] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  295.318557][T16422] netlink: 'syz.0.4096': attribute type 10 has an invalid length.
[  295.371949][T16422] ipvlan0: entered allmulticast mode
[  295.377308][T16422] veth0_vlan: entered allmulticast mode
[  295.385188][T16422] team0: Device ipvlan0 failed to register rx_handler
[  295.385939][T16418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4095'.
[  295.407887][T16239] hsr_slave_0: entered promiscuous mode
[  295.431924][T16239] hsr_slave_1: entered promiscuous mode
[  295.441804][T16239] debugfs: 'hsr0' already exists in 'hsr'
[  295.447667][T16239] Cannot create hsr debugfs directory
[  295.491846][T16439] xt_hashlimit: max too large, truncated to 1048576
[  295.516900][T16420] lo speed is unknown, defaulting to 1000
[  295.626012][T16451] SELinux: security_context_str_to_sid () failed with errno=-22
[  295.653371][T16451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4101'.
[  295.727121][T16471] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4105'.
[  295.742167][T16471] bond0 (unregistering): Released all slaves
[  295.794823][T16475] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.4106'.
[  295.822765][T16475] netlink: zone id is out of range
[  295.822741][T16480] FAULT_INJECTION: forcing a failure.
[  295.822741][T16480] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  295.827914][T16475] netlink: zone id is out of range
[  295.835861][T16239] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  295.840971][T16480] CPU: 0 UID: 0 PID: 16480 Comm: syz.5.4108 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  295.841006][T16480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  295.841025][T16480] Call Trace:
[  295.841034][T16480]  <TASK>
[  295.841047][T16480]  __dump_stack+0x1d/0x30
[  295.841152][T16480]  dump_stack_lvl+0xe8/0x140
[  295.841251][T16480]  dump_stack+0x15/0x1b
[  295.841279][T16480]  should_fail_ex+0x265/0x280
[  295.841311][T16480]  should_fail+0xb/0x20
[  295.841342][T16480]  should_fail_usercopy+0x1a/0x20
[  295.841409][T16480]  _copy_from_user+0x1c/0xb0
[  295.841524][T16480]  ___sys_sendmsg+0xc1/0x1d0
[  295.841632][T16480]  __x64_sys_sendmsg+0xd4/0x160
[  295.841686][T16480]  x64_sys_call+0x17ba/0x3000
[  295.841721][T16480]  do_syscall_64+0xd8/0x2a0
[  295.841815][T16480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.841847][T16480] RIP: 0033:0x7fc3b928f749
[  295.841869][T16480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  295.841893][T16480] RSP: 002b:00007fc3b7cef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  295.841920][T16480] RAX: ffffffffffffffda RBX: 00007fc3b94e5fa0 RCX: 00007fc3b928f749
[  295.841938][T16480] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  295.841962][T16480] RBP: 00007fc3b7cef090 R08: 0000000000000000 R09: 0000000000000000
[  295.841979][T16480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.841996][T16480] R13: 00007fc3b94e6038 R14: 00007fc3b94e5fa0 R15: 00007ffc678b2328
[  295.842030][T16480]  </TASK>
[  295.907389][T16475] netlink: zone id is out of range
[  295.988865][T16485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=16485 comm=syz.0.4106
[  295.992823][T16475] netlink: zone id is out of range
[  295.992834][T16475] netlink: zone id is out of range
[  295.992841][T16475] netlink: zone id is out of range
[  295.992847][T16475] netlink: zone id is out of range
[  296.050733][T16475] netlink: zone id is out of range
[  296.055997][T16475] netlink: zone id is out of range
[  296.056265][T16239] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  296.061152][T16475] netlink: zone id is out of range
[  296.138574][T16239] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  296.148598][T16487] loop5: detected capacity change from 0 to 256
[  296.170711][T16239] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  296.246385][T16499] netlink: 'syz.5.4112': attribute type 1 has an invalid length.
[  296.291684][T16239] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.311207][T16239] 8021q: adding VLAN 0 to HW filter on device team0
[  296.322241][ T3636] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.329456][ T3636] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.374248][  T390] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.381363][  T390] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.399947][   T29] kauditd_printk_skb: 147 callbacks suppressed
[  296.399959][   T29] audit: type=1400 audit(1765265413.841:8026): avc:  denied  { name_connect } for  pid=16517 comm="syz.0.4116" dest=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  296.511941][   T29] audit: type=1326 audit(1765265413.961:8027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16527 comm="syz.8.4118" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13328cf749 code=0x0
[  296.523824][T16239] 8021q: adding VLAN 0 to HW filter on device batadv0
[  296.575207][T16538] bond2 (unregistering): Released all slaves
[  296.670903][T16560] loop5: detected capacity change from 0 to 512
[  296.689465][T16542] lo speed is unknown, defaulting to 1000
[  296.721008][T16560] loop5: detected capacity change from 0 to 512
[  296.732605][T16560] EXT4-fs: Ignoring removed bh option
[  296.776719][T16560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.789534][T16560] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  296.805024][T16560] bridge: RTM_NEWNEIGH with invalid ether address
[  296.833198][T16560] bridge_slave_0: left allmulticast mode
[  296.838898][T16560] bridge_slave_0: left promiscuous mode
[  296.844669][T16560] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.857052][T16560] bridge_slave_1: left allmulticast mode
[  296.862777][T16560] bridge_slave_1: left promiscuous mode
[  296.868467][T16560] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.869129][   T29] audit: type=1400 audit(1765265414.311:8028): avc:  denied  { create } for  pid=16556 comm="syz.5.4122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1
[  296.906582][T16560] team0: Port device team_slave_0 removed
[  296.915854][T16560] team0: Port device team_slave_1 removed
[  296.923340][T16560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  296.930816][T16560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  296.939609][T16560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  296.947130][T16560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  296.981630][T16239] veth0_vlan: entered promiscuous mode
[  296.989524][T14944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.997129][T16239] veth1_vlan: entered promiscuous mode
[  297.054503][T16597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4125'.
[  297.064666][T16594] netlink: 'syz.5.4123': attribute type 1 has an invalid length.
[  297.083437][T16594] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.110426][T16239] veth0_macvtap: entered promiscuous mode
[  297.126206][T16594] bond0 (unregistering): Released all slaves
[  297.138151][T16239] veth1_macvtap: entered promiscuous mode
[  297.154855][T16239] batman_adv: batadv0: Interface activated: batadv_slave_0
[  297.160561][T16606] loop2: detected capacity change from 0 to 512
[  297.176858][T16606] EXT4-fs (loop2): orphan cleanup on readonly fs
[  297.186562][T16239] batman_adv: batadv0: Interface activated: batadv_slave_1
[  297.204808][T16606] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4128: bg 0: block 127: padding at end of block bitmap is not set
[  297.228346][ T3586] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.265941][T16610] ALSA: seq fatal error: cannot create timer (-19)
[  297.289195][T16606] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.4128: corrupted inode contents
[  297.302271][ T3586] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.312472][T16606] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  297.321793][   T29] audit: type=1400 audit(1765265414.771:8029): avc:  denied  { mount } for  pid=16239 comm="syz-executor" name="/" dev="gadgetfs" ino=3798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  297.346608][T16606] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.4128: corrupted inode contents
[  297.367942][   T58] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.383574][T16606] EXT4-fs error (device loop2): ext4_evict_inode:301: inode #15: comm syz.2.4128: mark_inode_dirty error
[  297.400845][   T58] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.413715][T16606] EXT4-fs (loop2): 1 orphan inode deleted
[  297.420034][T16606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  297.466781][T16639] loop9: detected capacity change from 0 to 512
[  297.473248][   T29] audit: type=1326 audit(1765265414.911:8030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16632 comm="syz.9.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ce63f749 code=0x7ffc0000
[  297.496956][   T29] audit: type=1326 audit(1765265414.911:8031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16632 comm="syz.9.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ce63f749 code=0x7ffc0000
[  297.520501][   T29] audit: type=1326 audit(1765265414.911:8032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16632 comm="syz.9.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ce63f749 code=0x7ffc0000
[  297.544079][   T29] audit: type=1326 audit(1765265414.911:8033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16632 comm="syz.9.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff6ce63f749 code=0x7ffc0000
[  297.567846][   T29] audit: type=1326 audit(1765265414.911:8034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16632 comm="syz.9.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff6ce63f783 code=0x7ffc0000
[  297.591222][   T29] audit: type=1326 audit(1765265414.911:8035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16632 comm="syz.9.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff6ce63e1ff code=0x7ffc0000
[  297.617915][T16639] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  297.658400][T13019] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.668776][T16639] EXT4-fs (loop9): 1 truncate cleaned up
[  297.680638][T16639] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  297.708350][T16651] lo speed is unknown, defaulting to 1000
[  297.716008][T16655] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4135'.
[  297.771269][T16239] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.782939][T16658] lo speed is unknown, defaulting to 1000
[  297.793925][T16662] netlink: 'syz.0.4138': attribute type 10 has an invalid length.
[  297.809613][T16651] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4136'.
[  297.847108][T16662] team0: Device ipvlan0 failed to register rx_handler
[  297.876479][T16670] loop8: detected capacity change from 0 to 512
[  297.920500][T16670] ------------[ cut here ]------------
[  297.926029][T16670] EA inode 11 i_nlink=2
[  297.926056][T16670] WARNING: fs/ext4/xattr.c:1058 at 0x0, CPU#0: syz.8.4141/16670
[  297.938103][T16670] Modules linked in:
[  297.942264][T16670] CPU: 0 UID: 0 PID: 16670 Comm: syz.8.4141 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  297.952160][T16670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  297.962316][T16670] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320
[  297.969047][T16670] Code: c1 d2 9c ff 4c 8d 2d 0a bf 20 05 49 8d 7e 40 e8 01 65 b8 ff 49 8b 6e 40 4c 89 e7 e8 15 60 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 3c cf ba 03 66 66 66 2e 0f 1f 84
[  297.988838][T16670] RSP: 0018:ffffc90001c535a0 EFLAGS: 00010246
[  297.995224][T16670] RAX: ffff88810196dd10 RBX: ffff888107bdca78 RCX: ffffffff81bb4beb
[  298.003410][T16670] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0ae0
[  298.011492][T16670] RBP: 000000000000000b R08: 0001888107bdca2b R09: 0000000000000000
[  298.019487][T16670] R10: ffffffff88ee7a38 R11: 000000000000000b R12: ffff888107bdca28
[  298.027650][T16670] R13: ffffffff86dc0ae0 R14: ffff888107bdc9e0 R15: 0000000000000001
[  298.035924][T16670] FS:  00007f133132f6c0(0000) GS:ffff8882aedc3000(0000) knlGS:0000000000000000
[  298.045293][T16670] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  298.051953][T16670] CR2: 00007f8c2bea8feb CR3: 00000001313d8000 CR4: 00000000003506f0
[  298.062481][T16670] DR0: fffffffffffffffe DR1: 0000200000000300 DR2: 0000000000000000
[  298.070559][T16670] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  298.078615][T16670] Call Trace:
[  298.082139][T16670]  <TASK>
[  298.085163][T16670]  ext4_xattr_set_entry+0x77f/0x1020
[  298.090887][T16670]  ext4_xattr_ibody_set+0x184/0x3c0
[  298.096186][T16670]  ext4_expand_extra_isize_ea+0xcbb/0x11f0
[  298.102081][T16670]  __ext4_expand_extra_isize+0x246/0x280
[  298.107748][T16670]  __ext4_mark_inode_dirty+0x29d/0x3f0
[  298.113398][T16670]  ext4_evict_inode+0x7c4/0xd40
[  298.118318][T16670]  ? __pfx_ext4_evict_inode+0x10/0x10
[  298.123789][T16670]  evict+0x2af/0x510
[  298.127720][T16670]  ? __dquot_initialize+0x146/0x7c0
[  298.133114][T16670]  iput+0x4bd/0x650
[  298.136947][T16670]  ext4_process_orphan+0x1a9/0x1c0
[  298.142190][T16670]  ext4_orphan_cleanup+0x6a8/0xa00
[  298.147410][T16670]  ext4_fill_super+0x3411/0x37a0
[  298.152485][T16670]  ? set_blocksize+0x1a8/0x310
[  298.157725][T16670]  ? sb_set_blocksize+0xfc/0x170
[  298.162759][T16670]  ? setup_bdev_super+0x30e/0x370
[  298.167902][T16670]  ? __pfx_ext4_fill_super+0x10/0x10
[  298.173385][T16670]  get_tree_bdev_flags+0x291/0x300
[  298.178528][T16670]  ? __pfx_ext4_fill_super+0x10/0x10
[  298.183944][T16670]  get_tree_bdev+0x1f/0x30
[  298.188382][T16670]  ext4_get_tree+0x1c/0x30
[  298.192877][T16670]  vfs_get_tree+0x57/0x1d0
[  298.197393][T16670]  do_new_mount+0x24d/0x6a0
[  298.202008][T16670]  path_mount+0x4ab/0xb80
[  298.206439][T16670]  ? user_path_at+0xbf/0x130
[  298.211228][T16670]  __se_sys_mount+0x28c/0x2e0
[  298.216017][T16670]  __x64_sys_mount+0x67/0x80
[  298.220694][T16670]  x64_sys_call+0x2cca/0x3000
[  298.225504][T16670]  do_syscall_64+0xd8/0x2a0
[  298.230093][T16670]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.236272][T16670] RIP: 0033:0x7f13328d0eea
[  298.240729][T16670] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  298.259449][T16699] loop2: detected capacity change from 0 to 128
[  298.260609][T16670] RSP: 002b:00007f133132ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  298.275339][T16670] RAX: ffffffffffffffda RBX: 00007f133132eef0 RCX: 00007f13328d0eea
[  298.283432][T16670] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f133132eeb0
[  298.291515][T16670] RBP: 0000200000000180 R08: 00007f133132eef0 R09: 0000000000800718
[  298.299584][T16670] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0
[  298.300554][T16695] lo speed is unknown, defaulting to 1000
[  298.307627][T16670] R13: 00007f133132eeb0 R14: 000000000000046f R15: 0000200000000200
[  298.307671][T16670]  </TASK>
[  298.307680][T16670] ---[ end trace 0000000000000000 ]---
[  298.314759][T16699] EXT4-fs: Ignoring removed nobh option
[  298.323851][T16670] EXT4-fs (loop8): 1 orphan inode deleted
[  298.339034][T16699] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  298.353673][T16699] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  298.450491][T16670] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  298.471875][T13019] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  298.566953][T15614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.598459][T16719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4156'.
[  298.682438][T16723] serio: Serial port ttyS3
[  298.699053][T16725] lo speed is unknown, defaulting to 1000
[  298.772685][T16731] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4155'.
[  298.795906][T16737] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4159'.
[  298.804308][T16689] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4147'.
[  298.825170][T16728] lo speed is unknown, defaulting to 1000
[  298.950818][T16755] FAULT_INJECTION: forcing a failure.
[  298.950818][T16755] name failslab, interval 1, probability 0, space 0, times 0
[  298.963514][T16755] CPU: 1 UID: 0 PID: 16755 Comm: syz.8.4162 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  298.963553][T16755] Tainted: [W]=WARN
[  298.963562][T16755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  298.963577][T16755] Call Trace:
[  298.963585][T16755]  <TASK>
[  298.963595][T16755]  __dump_stack+0x1d/0x30
[  298.963627][T16755]  dump_stack_lvl+0xe8/0x140
[  298.963656][T16755]  dump_stack+0x15/0x1b
[  298.963681][T16755]  should_fail_ex+0x265/0x280
[  298.963711][T16755]  should_failslab+0x8c/0xb0
[  298.963740][T16755]  kmem_cache_alloc_noprof+0x69/0x4b0
[  298.963769][T16755]  ? mas_alloc_nodes+0x1a2/0x210
[  298.963820][T16755]  mas_alloc_nodes+0x1a2/0x210
[  298.963856][T16755]  mas_preallocate+0x2ca/0x510
[  298.963896][T16755]  __split_vma+0x240/0x660
[  298.963915][T16755]  ? __rcu_read_unlock+0x4f/0x70
[  298.963944][T16755]  ? terminate_walk+0x1e6/0x210
[  298.963974][T16755]  ? path_openat+0x1d88/0x23b0
[  298.964014][T16755]  vms_gather_munmap_vmas+0x17a/0x7b0
[  298.964053][T16755]  ? _parse_integer_limit+0x170/0x190
[  298.964081][T16755]  do_vmi_align_munmap+0x1ac/0x3d0
[  298.964129][T16755]  do_vmi_munmap+0x1db/0x220
[  298.964169][T16755]  __vm_munmap+0x193/0x270
[  298.964199][T16755]  __x64_sys_munmap+0x36/0x50
[  298.964234][T16755]  x64_sys_call+0xbee/0x3000
[  298.964263][T16755]  do_syscall_64+0xd8/0x2a0
[  298.964303][T16755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.964330][T16755] RIP: 0033:0x7f13328cf749
[  298.964348][T16755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  298.964371][T16755] RSP: 002b:00007f133132f038 EFLAGS: 00000246 ORIG_RAX: 000000000000000b
[  298.964395][T16755] RAX: ffffffffffffffda RBX: 00007f1332b25fa0 RCX: 00007f13328cf749
[  298.964410][T16755] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 00002000003fe000
[  298.964424][T16755] RBP: 00007f133132f090 R08: 0000000000000000 R09: 0000000000000000
[  298.964438][T16755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  298.964453][T16755] R13: 00007f1332b26038 R14: 00007f1332b25fa0 R15: 00007ffea9d29918
[  298.964494][T16755]  </TASK>
[  299.308223][T16779] loop8: detected capacity change from 0 to 512
[  299.320652][T16771] lo speed is unknown, defaulting to 1000
[  299.327584][T16779] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  299.348527][T16779] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4168'.
[  299.358160][T16783] netlink: 'syz.9.4164': attribute type 10 has an invalid length.
[  299.374582][T16783] ipvlan0: entered allmulticast mode
[  299.379924][T16783] veth0_vlan: entered allmulticast mode
[  299.432846][T16783] team0: Device ipvlan0 failed to register rx_handler
[  299.491177][T16794] netlink: 'syz.2.4170': attribute type 10 has an invalid length.
[  299.509400][T16793] netlink: 100 bytes leftover after parsing attributes in process `syz.8.4173'.
[  299.519126][T16794] ipvlan0: entered allmulticast mode
[  299.524562][T16794] veth0_vlan: entered allmulticast mode
[  299.531395][T16796] loop5: detected capacity change from 0 to 128
[  299.543229][T16796] EXT4-fs: Ignoring removed nobh option
[  299.559108][T16794] team0: Device ipvlan0 failed to register rx_handler
[  299.619942][T16787] lo speed is unknown, defaulting to 1000
[  299.651007][T16796] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  299.667393][T16796] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  299.720907][T14944] EXT4-fs error (device loop5): ext4_readdir:224: inode #11: comm syz-executor: path /99/mnt/lost+found: directory fails checksum at offset 1024
[  299.736969][T14944] EXT4-fs error (device loop5): ext4_readdir:224: inode #11: comm syz-executor: path /99/mnt/lost+found: directory fails checksum at offset 5120
[  299.752765][T14944] EXT4-fs error (device loop5): ext4_readdir:224: inode #11: comm syz-executor: path /99/mnt/lost+found: directory fails checksum at offset 7168
[  299.767824][T14944] EXT4-fs error (device loop5): ext4_readdir:224: inode #11: comm syz-executor: path /99/mnt/lost+found: directory fails checksum at offset 8192
[  299.783291][T14944] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  299.798902][T14944] EXT4-fs error (device loop5): ext4_readdir:224: inode #11: comm syz-executor: path /99/mnt/lost+found: directory fails checksum at offset 9216
[  299.818834][T14944] EXT4-fs error (device loop5): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  299.832473][T14944] EXT4-fs error (device loop5): ext4_readdir:224: inode #11: comm syz-executor: path /99/mnt/lost+found: directory fails checksum at offset 1024
[  299.864535][T16814] loop8: detected capacity change from 0 to 512
[  299.894087][T14944] EXT4-fs error (device loop5): ext4_readdir:224: inode #11: comm syz-executor: path /99/mnt/lost+found: directory fails checksum at offset 5120
[  299.930121][T14944] EXT4-fs error (device loop5): ext4_readdir:224: inode #11: comm syz-executor: path /99/mnt/lost+found: directory fails checksum at offset 7168
[  299.986354][T16814] EXT4-fs (loop8): orphan cleanup on readonly fs
[  299.994434][T14944] EXT4-fs error (device loop5): ext4_readdir:224: inode #11: comm syz-executor: path /99/mnt/lost+found: directory fails checksum at offset 8192
[  300.010099][T14944] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  300.014122][T16814] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4181: bg 0: block 127: padding at end of block bitmap is not set
[  300.098199][T16814] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.4181: corrupted inode contents
[  300.145731][T16814] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem
[  300.206854][T16814] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.4181: corrupted inode contents
[  300.254979][T16814] EXT4-fs error (device loop8): ext4_evict_inode:301: inode #15: comm syz.8.4181: mark_inode_dirty error
[  300.267078][T16814] EXT4-fs (loop8): 1 orphan inode deleted
[  300.274218][T16814] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  300.477671][T14944] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  300.500549][T15614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.501762][T14944] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  300.546412][T14944] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  300.572052][T14944] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  300.592444][T14944] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  300.612388][T16837] netlink: 'syz.8.4188': attribute type 1 has an invalid length.
[  300.627737][T16837] 8021q: adding VLAN 0 to HW filter on device bond2
[  300.638605][T14944] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  300.655041][T16837] bond2 (unregistering): Released all slaves
[  300.672020][T14944] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  300.694410][T14944] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  300.845446][T16858] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.852721][T16858] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.870946][T16865] netlink: 'syz.2.4193': attribute type 10 has an invalid length.
[  300.895239][T16868] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8)
[  300.901803][T16868] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  300.909391][T16868] vhci_hcd vhci_hcd.0: Device attached
[  300.935566][T16867] FAULT_INJECTION: forcing a failure.
[  300.935566][T16867] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  300.948815][T16867] CPU: 0 UID: 0 PID: 16867 Comm: syz.0.4196 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  300.948862][T16867] Tainted: [W]=WARN
[  300.948871][T16867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  300.948888][T16867] Call Trace:
[  300.948895][T16867]  <TASK>
[  300.948965][T16867]  __dump_stack+0x1d/0x30
[  300.948992][T16867]  dump_stack_lvl+0xe8/0x140
[  300.949033][T16867]  dump_stack+0x15/0x1b
[  300.949060][T16867]  should_fail_ex+0x265/0x280
[  300.949090][T16867]  should_fail+0xb/0x20
[  300.949150][T16867]  should_fail_usercopy+0x1a/0x20
[  300.949208][T16867]  strncpy_from_user+0x27/0x260
[  300.949295][T16867]  getname_flags+0xae/0x3b0
[  300.949325][T16867]  do_sys_openat2+0x60/0x150
[  300.949356][T16867]  __x64_sys_openat+0xf2/0x120
[  300.949391][T16867]  x64_sys_call+0x2b07/0x3000
[  300.949425][T16867]  do_syscall_64+0xd8/0x2a0
[  300.949456][T16867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.949559][T16867] RIP: 0033:0x7ff9580adf90
[  300.949576][T16867] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[  300.949596][T16867] RSP: 002b:00007ff956b16b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  300.949618][T16867] RAX: ffffffffffffffda RBX: 0000000000002082 RCX: 00007ff9580adf90
[  300.949705][T16867] RDX: 0000000000002082 RSI: 00007ff956b16c10 RDI: 00000000ffffff9c
[  300.949721][T16867] RBP: 00007ff956b16c10 R08: 0000000000000000 R09: 002367732f766564
[  300.949782][T16867] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd
[  300.949798][T16867] R13: 00007ff958306038 R14: 00007ff958305fa0 R15: 00007ffffcebf658
[  300.949821][T16867]  </TASK>
[  301.132568][T16858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  301.153869][T16858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  301.180373][T16858] ipvlan0: left allmulticast mode
[  301.185606][T16858] veth0_vlan: left allmulticast mode
[  301.209126][T16865] team0: Device ipvlan0 failed to register rx_handler
[  301.222598][ T3630] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.235214][T16857] lo speed is unknown, defaulting to 1000
[  301.240986][ T3586] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.254767][T16861] lo speed is unknown, defaulting to 1000
[  301.261390][ T3494] usb 17-1: new low-speed USB device number 2 using vhci_hcd
[  301.278148][ T3586] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.300642][T16883] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4201'.
[  301.311052][ T3586] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.363730][T16811] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  301.386916][  T324] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.397017][T16869] vhci_hcd: connection reset by peer
[  301.404985][ T3586] vhci_hcd vhci_hcd.8: stop threads
[  301.410312][ T3586] vhci_hcd vhci_hcd.8: release socket
[  301.415816][ T3586] vhci_hcd vhci_hcd.8: disconnect device
[  301.432311][T16895] loop2: detected capacity change from 0 to 512
[  301.477989][T16895] __quota_error: 250 callbacks suppressed
[  301.478009][T16895] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6).
[  301.495803][  T324] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.532570][T16901] loop9: detected capacity change from 0 to 2048
[  301.537319][T16895] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  301.558738][T16895] EXT4-fs (loop2): mount failed
[  301.576535][   T29] audit: type=1400 audit(1765265419.021:8286): avc:  denied  { map } for  pid=16893 comm="syz.2.4203" path="socket:[82477]" dev="sockfs" ino=82477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  301.611879][T16901]  loop9: p1 < > p4
[  301.617377][  T324] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.629744][T16901] loop9: p4 size 8388608 extends beyond EOD, truncated
[  301.643713][  T324] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.698220][   T29] audit: type=1400 audit(1765265419.141:8287): avc:  denied  { read append } for  pid=16899 comm="syz.9.4209" name="loop9p4" dev="devtmpfs" ino=2243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  301.722006][   T29] audit: type=1400 audit(1765265419.141:8288): avc:  denied  { open } for  pid=16899 comm="syz.9.4209" path="/dev/loop9p4" dev="devtmpfs" ino=2243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  301.763996][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  301.775231][ T6114] udevd[6114]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory
[  301.796423][T16904] lo speed is unknown, defaulting to 1000
[  301.818167][T16924] ipvlan0: left allmulticast mode
[  301.823339][T16924] veth0_vlan: left allmulticast mode
[  301.861630][T16926] netlink: 'syz.9.4214': attribute type 10 has an invalid length.
[  301.870149][T16922] lo speed is unknown, defaulting to 1000
[  301.878054][T16926] ipvlan0: entered allmulticast mode
[  301.883437][T16926] veth0_vlan: entered allmulticast mode
[  301.892115][T16926] team0: Device ipvlan0 failed to register rx_handler
[  301.930522][T16934] loop2: detected capacity change from 0 to 512
[  301.947287][T16934] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  302.069710][   T29] audit: type=1326 audit(1765265419.511:8289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16951 comm="syz.2.4220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4964d1f749 code=0x7ffc0000
[  302.095333][   T29] audit: type=1326 audit(1765265419.511:8290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16951 comm="syz.2.4220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4964d1f749 code=0x7ffc0000
[  302.119059][   T29] audit: type=1326 audit(1765265419.541:8291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16951 comm="syz.2.4220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4964d1f749 code=0x7ffc0000
[  302.143878][   T29] audit: type=1326 audit(1765265419.541:8292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16951 comm="syz.2.4220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4964d1f749 code=0x7ffc0000
[  302.167640][   T29] audit: type=1326 audit(1765265419.541:8293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16951 comm="syz.2.4220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4964d1f749 code=0x7ffc0000
[  302.191154][   T29] audit: type=1326 audit(1765265419.541:8294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16951 comm="syz.2.4220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4964d1f749 code=0x7ffc0000
[  302.383271][  T324] hsr_slave_0: left promiscuous mode
[  302.392877][  T324] hsr_slave_1: left promiscuous mode
[  302.403383][  T324] veth1_macvtap: left promiscuous mode
[  302.415309][  T324] veth0_macvtap: left promiscuous mode
[  302.420942][  T324] veth1_vlan: left promiscuous mode
[  302.431496][  T324] veth0_vlan: left promiscuous mode
[  302.449354][T16965] __nla_validate_parse: 1 callbacks suppressed
[  302.449369][T16965] netlink: 100 bytes leftover after parsing attributes in process `syz.8.4224'.
[  302.509401][T16970] loop8: detected capacity change from 0 to 512
[  302.519004][T16970] EXT4-fs (loop8): orphan cleanup on readonly fs
[  302.527067][T16970] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4226: bg 0: block 127: padding at end of block bitmap is not set
[  302.554217][T16970] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.4226: corrupted inode contents
[  302.566488][T16970] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem
[  302.575703][T16970] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.4226: corrupted inode contents
[  302.588113][T16970] EXT4-fs error (device loop8): ext4_evict_inode:301: inode #15: comm syz.8.4226: mark_inode_dirty error
[  302.599916][T16970] EXT4-fs (loop8): 1 orphan inode deleted
[  302.629324][T16970] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  302.629773][T16904] chnl_net:caif_netlink_parms(): no params data found
[  302.704680][T15614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.725893][T16976] lo speed is unknown, defaulting to 1000
[  302.767173][T16992] siw: device registration error -23
[  302.785248][T16904] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.792453][T16904] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.800462][T16904] bridge_slave_0: entered allmulticast mode
[  302.808088][T16904] bridge_slave_0: entered promiscuous mode
[  302.827606][T16999] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4230'.
[  302.838153][T16904] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.845512][T16904] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.852890][T16904] bridge_slave_1: entered allmulticast mode
[  302.859474][T16904] bridge_slave_1: entered promiscuous mode
[  302.885708][T16904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  302.906937][T16904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  302.940143][T17009] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4234'.
[  302.960552][T17006] lo speed is unknown, defaulting to 1000
[  302.983088][T16904] team0: Port device team_slave_0 added
[  303.010289][T17014] netlink: 'syz.8.4232': attribute type 10 has an invalid length.
[  303.030871][T17020] SELinux: security_context_str_to_sid () failed with errno=-22
[  303.051841][T17020] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4236'.
[  303.131179][T16904] team0: Port device team_slave_1 added
[  303.143014][T17014] ipvlan0: entered allmulticast mode
[  303.148350][T17014] veth0_vlan: entered allmulticast mode
[  303.166870][T17014] team0: Device ipvlan0 failed to register rx_handler
[  303.201303][T17038] lo speed is unknown, defaulting to 1000
[  303.224529][T16904] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.231535][T16904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  303.257721][T16904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  303.273886][T16904] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.280849][T16904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  303.306826][T16904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  303.363671][T17043] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4241'.
[  303.433178][T16904] hsr_slave_0: entered promiscuous mode
[  303.456570][T16904] hsr_slave_1: entered promiscuous mode
[  303.523535][T17071] SELinux: security_context_str_to_sid () failed with errno=-22
[  303.527898][T17065] lo speed is unknown, defaulting to 1000
[  303.540195][T17071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4247'.
[  303.622178][T17073] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4246'.
[  303.680173][T17089] siw: device registration error -23
[  303.687023][T17079] lo speed is unknown, defaulting to 1000
[  303.847477][T17106] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4253'.
[  303.886509][ T3304] ==================================================================
[  303.894649][ T3304] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod
[  303.901630][ T3304] 
[  303.903965][ T3304] write to 0xffff8881038c3b14 of 4 bytes by task 6114 on cpu 1:
[  303.911634][ T3304]  shmem_mknod+0x143/0x170
[  303.916097][ T3304]  shmem_create+0x34/0x50
[  303.920477][ T3304]  path_openat+0x1115/0x23b0
[  303.925105][ T3304]  do_filp_open+0x109/0x230
[  303.929644][ T3304]  do_sys_openat2+0xa6/0x150
[  303.934267][ T3304]  __x64_sys_openat+0xf2/0x120
[  303.939095][ T3304]  x64_sys_call+0x2b07/0x3000
[  303.943788][ T3304]  do_syscall_64+0xd8/0x2a0
[  303.948307][ T3304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.954201][ T3304] 
[  303.956525][ T3304] read to 0xffff8881038c3b14 of 4 bytes by task 3304 on cpu 0:
[  303.964066][ T3304]  fill_mg_cmtime+0x5b/0x260
[  303.968662][ T3304]  generic_fillattr+0x24a/0x340
[  303.973523][ T3304]  shmem_getattr+0x181/0x200
[  303.978132][ T3304]  vfs_getattr_nosec+0x146/0x1e0
[  303.983085][ T3304]  vfs_statx+0x113/0x390
[  303.987339][ T3304]  vfs_fstatat+0x115/0x170
[  303.991770][ T3304]  __se_sys_newfstatat+0x55/0x260
[  303.996839][ T3304]  __x64_sys_newfstatat+0x55/0x70
[  304.001883][ T3304]  x64_sys_call+0x111f/0x3000
[  304.006596][ T3304]  do_syscall_64+0xd8/0x2a0
[  304.011208][ T3304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.017106][ T3304] 
[  304.019436][ T3304] value changed: 0x12d2039e -> 0x13c87eaa
[  304.025154][ T3304] 
[  304.027495][ T3304] Reported by Kernel Concurrency Sanitizer on:
[  304.034101][ T3304] CPU: 0 UID: 0 PID: 3304 Comm: udevd Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  304.044979][ T3304] Tainted: [W]=WARN
[  304.048795][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  304.058858][ T3304] ==================================================================
[  304.151166][T17121] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8)
[  304.162552][T17121] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  304.171424][T17121] vhci_hcd vhci_hcd.0: Device attached
[  304.179562][T17117] lo speed is unknown, defaulting to 1000
[  304.257422][T17125] vhci_hcd: connection closed
[  304.257607][   T58] vhci_hcd vhci_hcd.8: stop threads
[  304.267640][   T58] vhci_hcd vhci_hcd.8: release socket
[  304.273110][   T58] vhci_hcd vhci_hcd.8: disconnect device
[  304.309146][T16904] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  304.318227][T16904] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  304.327781][T16904] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  304.347281][T16904] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  304.398694][T16904] 8021q: adding VLAN 0 to HW filter on device bond0
[  304.413834][T16904] 8021q: adding VLAN 0 to HW filter on device team0
[  304.429436][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.436522][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.447864][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.454975][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state
[  304.534147][T16904] 8021q: adding VLAN 0 to HW filter on device batadv0
[  304.665758][T16904] veth0_vlan: entered promiscuous mode
[  304.674030][T16904] veth1_vlan: entered promiscuous mode
[  304.690159][T16904] veth0_macvtap: entered promiscuous mode
[  304.698214][T16904] veth1_macvtap: entered promiscuous mode
[  304.710157][T16904] batman_adv: batadv0: Interface activated: batadv_slave_0
[  304.723359][T16904] batman_adv: batadv0: Interface activated: batadv_slave_1
[  304.735517][ T3586] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.751679][ T3586] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.767151][ T3586] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.784961][ T3586] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.281419][ T3494] usb 17-1: enqueue for inactive port 0
[  306.287038][ T3494] usb 17-1: enqueue for inactive port 0
[  306.374278][ T3494] vhci_hcd vhci_hcd.8: vhci_device speed not set