last executing test programs:

4m6.67073867s ago: executing program 32 (id=137):
open_tree(0xffffffffffffff9c, 0x0, 0x9001)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x81842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7102})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94)
write$cgroup_devices(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="5d848b1f7a1e43"], 0xffdd)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

4m3.074020572s ago: executing program 33 (id=185):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) (async)
fallocate(0xffffffffffffffff, 0x1, 0xe, 0x332) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x2, 0x0, 0x4}}, 0x2e)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0)
ioctl$PTP_SYS_OFFSET_EXTENDED(r3, 0xc4c03d09, &(0x7f0000000800)={0x15}) (async)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e21, 0x0, @private1, 0x8001}, 0x1c) (async)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) (async)
setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) (async)
r4 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x20010, r4, 0x100000000)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0)
ioctl$TCSBRKP(r5, 0x5425, 0x0) (async)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000240)={'syzkaller0\x00', {0x2, 0x4e20, @empty}}) (async)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) (async)
syz_io_uring_setup(0x4168, &(0x7f00000000c0)={0x0, 0x2af7, 0x0, 0x3, 0x38}, 0x0, 0x0) (async)
ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000300)={0xff, 0x3eb, 0xfffffffe, 0x7fffffef, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1002, 0xfffffffc}) (async)
recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x1a, 0x0}}], 0x1, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000020601020000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a31000000002000078005000300010000000c00018008000140ac1414aa050014002000000005000500020000000500010006"], 0x68}}, 0x0) (async)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async)
r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r8) (async)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000001300)='cmdline\x00')
pread64(r9, 0x0, 0x0, 0x8)

2m57.644263684s ago: executing program 34 (id=1199):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r0 = getpid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = syz_pidfd_open(r0, 0x0)
r3 = pidfd_getfd(r2, r2, 0x0)
setns(r3, 0x66020000)
syz_clone(0x498144ee5f60e149, 0x0, 0x0, 0x0, 0x0, 0x0)

2m41.197522625s ago: executing program 35 (id=1213):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup2(r2, r3)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x2}, 0x8)

2m39.290253986s ago: executing program 36 (id=1237):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000200000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x84000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x7, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/23, 0x17}, {&(0x7f0000000340)=""/197, 0xc5}], &(0x7f0000000200)=[0xa, 0x7fffffff, 0x8001, 0x4, 0x4, 0xffffffffffffff01], 0x2}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}]}})

2m30.583786433s ago: executing program 37 (id=1637):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0xf)
r3 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x40)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$netlink(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x17fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000040000000000b7080000000000007b8af8ff0000006d56ad6c794737000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000c78ac4f3fccc871c8433de31261c55534bd060d1d514d6ff3e12f92e65385ac22b1eb30b5f4cd464190bb53ce21b9b81140a7805040089eb2568"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)

1m52.345519674s ago: executing program 38 (id=2233):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={<r3=>0xffffffffffffffff}, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, r3, 0x10, 0x1, @in={0x2, 0x4e21, @private=0xa010102}}}, 0xa0)

1m1.417719959s ago: executing program 4 (id=3057):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000880)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
r2 = mq_open(&(0x7f00000000c0)='Z.\x00', 0x800, 0x4c5665ec88a69c5c, &(0x7f0000000140)={0xf7a, 0x8c, 0x7fffffff, 0x9})
mq_notify(r2, &(0x7f0000000180)={0x0, 0x28, 0x29e457742b0ca0fb, @tid=r0})
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x413c1)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
shmget(0x1, 0x5000, 0x800, &(0x7f0000000000/0x5000)=nil)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local'])
syz_io_uring_setup(0x4e6b, &(0x7f00000002c0)={0x0, 0x302, 0x2000, 0x3, 0x1b9}, &(0x7f00000003c0), &(0x7f0000000400))
open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1)
waitid(0x0, r5, 0x0, 0x8, 0x0)
waitid(0x1000000000000000, 0x0, 0x0, 0x4, 0x0)

1m0.493690277s ago: executing program 4 (id=3079):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x18)
unshare(0x22020400)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r1, r2, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0xe02, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff0000003710a1000000000000070100000000ffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x8014)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket(0x2, 0x1, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_ifreq(r5, 0x8991, &(0x7f0000000040)={'pim6reg0\x00', @ifru_names='bond_slave_1\x00'})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, @private1, @mcast1, 0x0, 0x0, 0xa, 0xc0}})
socket$nl_xfrm(0x10, 0x3, 0x6)

1m0.439698492s ago: executing program 4 (id=3081):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006f657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000980)='mm_page_free\x00', r3, 0x0, 0x3}, 0x18)

1m0.348054831s ago: executing program 39 (id=3081):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006f657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000980)='mm_page_free\x00', r3, 0x0, 0x3}, 0x18)

54.24676274s ago: executing program 9 (id=3180):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x39, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095", @ANYRES8, @ANYRES16=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
socket(0xa, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000014c0)='generic_add_lease\x00', r0, 0x0, 0x7}, 0x15)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0x4, 0x4, 0x3c0, 0xffffffff, 0x0, 0x118, 0x118, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0xd}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xffffffff, 0xff, 0xffffff00, 0xff000000], 0x4e24, 0x4e24, 0x4e21, 0x4e24, 0x1d, 0x8, 0x0, 0x1, 0x5}}}, {{@ipv6={@private0, @loopback, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)
socket$rds(0x15, 0x5, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000010140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100100000000000000011000000440005"], 0x58}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
fsopen(&(0x7f0000000040)='securityfs\x00', 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x800)
ioctl$EVIOCGRAB(r5, 0x40044590, 0x0)

54.162459178s ago: executing program 9 (id=3181):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000005c0)={[{@dioread_lock}, {@jqfmt_vfsv0}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@errors_remount}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f0000000c80)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x2000}, 0x18) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r4 = getpgid(0x0)
r5 = syz_pidfd_open(r4, 0x0)
process_madvise(r5, 0x0, 0x0, 0x14, 0x0)

53.922488171s ago: executing program 9 (id=3189):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x18)
unshare(0x22020400)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r1, r2, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0xe02, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff0000003710a1000000000000070100000000ffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x8014)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket(0x2, 0x1, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0x1, 0x400002, 0x74, @rand_addr=' \x01\x00', @mcast2, 0x80, 0x8000, 0x3e, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', r7, 0x0, 0x0, 0x3, 0x4, 0x0, @private1, @mcast1, 0x0, 0x0, 0xa, 0xc0}})
socket$nl_xfrm(0x10, 0x3, 0x6)

53.628672449s ago: executing program 9 (id=3195):
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./bus\x00', 0xa00004, &(0x7f0000000000)=ANY=[], 0x5, 0x81a, &(0x7f0000002540)="$eJzs3V9oHNe5APBvFNmWlXt9Q+7F1xjHmTi5YIOjrGRHQQRuslmN5ElWu7q7q2BzKYmpZWMsJ8FuoPZDHb+0tKSE0oc+JnnoS/tU+tJSaKCFtk+F9rVvgUAfkpaWFtoSUJmd1T9LK/mPYpv09xPeOTPnzJxvjtbz7WiZmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIqlNViqjSdTzxtzJtL/aZKs5s0n90vY+KF7+9ugHW/YbkRT/Ymgo9pWL9v3XSvXe4uVQHCjnDsRQMRmKqw/ufejZ/xwcWFp/k4C22+BGCy9fuXrh9MLC/KW7GMhn4Bs/WTP73eG4yZGdzhp5u5nPVKezNG8304nx8cpTJ6ba6VRez9qn2p1sJq21smqn2UoP144s/sfExLE0GznVnGtMT1brWTpYO5KOTkw88+RYpTKevjgym1Vb7WbjqRdH2rUTeb2eN6aLFdOiumjzTPFGfCnvpJ2sOpOmZ88vzB9bG9LudUEWjUbXLPl0cfXcgSce+ujND/98fn5sq90dq4yNjY6OjY2OJxFRqQyuLHh64ulnKpXByg1iXYu7+qblPrTtx3C4XQO9/B/1yKMRc3Ey0g1/ajEZrWjGTKy8gVfX9/QS/wf/89Qffr1Zv++U+f/6qkgO7FuZ2R/d/H+wnDvYL/+Xfe/c1Sfmz+pnZf8vx5W4GhfidCzEQszHpdXtdi2X9txZf8n2xT5wa+2Ht6ifjiwakUc7mpHHTFS7S9LekjQmYjzGoxKvxImYinakMRV51COLdpyKdnQi676jatGKLKrRiWa0Io3DUYsjkcZoTMREHIs0shiJU9GMuWjEdExGtbuVs3G+O+7Hbohr71de/fG533z0bve3tdRodLMhfiui2+hPmzRal8zlf25ZRPx8G47ccOcWl/I/AAAA8LmVdL9jL87/d8Qj3dJUXs/+f4u1BouXt+5OhAAAAMCd6n7zf6CY7ChKj0RSnP9X1jb6/o57ExwAAACwLZLuNXZJRAzHo2Vp6XKpyr2ODQAAANge3e//DxaT4Yhru5cWO/8HAACAz5GXf9gr3HiP/Q9fLGaTJAZmdyU//WO0WjuS4++dfCK5WC0qqhcfKNfrTV5e3mJnan8SvRsKdrc1Pnj1wWJ+sJatXEfw6a5y+kn3df/gcsXaOJ7v/UUiSZIigOuzfQOINQHs6e3FcgDduXg7HivbPHamnJ5ZqinvKDw8ldezkVqz/uxoVKt7BjrZyc6br53/cnR3/+uNmT1JnD2/MD/yxdcXznRj6d7A+PrF3v6uu4/iJrEs9kYgHll/d+NiUzu6F2L0+h0u+62s3v+By3uKwsAt9PnVOPRv3TaHhsu2w2v3f6joc3Sk394Pl/s3um7PB9e9r3pRnOrN3RDF4+XSxw8/Xk42iGJssyiKsRhbHUVvEG5tLDaMIh6KiHcfu3byr79oJtmxraI4dodRANwrZ7t3/SmyUJmOyiz0j8VSkf9brR07Y03eKVe42aNc0u2l9ySfc29vfCf/m8/uf1/c5Ih+uGxzuPw8Mbh/g7xS2eCI/sb5N37ZO6If/9533vvCwV/94Lbz+tBSk+XvUh7+2YMD0Y1idy+Kq72a1o7km8uZpMyq7xfL3+/bb7s+lhQfFx740sU3Yu/lK1efPH/x9Ln5c/OvjY0dG68cr1SeTpLeL2+x+4lB7gFgA4fiYJnI+z5jp89TeLofAMrcfXyzs+oHInl4+ZKCIie+HgtxJo52rzaIiEc37ne4XOcvxaeSo3GobPt/vaBvOGsdXvWEl6NbnFvujOi1Hduy7fCqx8us+O9vfYa/DgC4Kw5tkYf75v9V5+5HtzjvHl51SeHROFK2PbIUQf9cHhHP3d3RAIB/DVnrk2S487Wk1cpnXxmdmBitdk5kaatZeylt5ZPTWZo3OlkrBquN6SydbTU7zVqzXhReziezdtqem51ttjrpVLOVzjbb+cnuk9/T3qPf29lMtdHJa+3ZelZtZ2mt2ehUa510Mm/X0tm5F+p5+0TW6q7cns1q+VReq3byZiNtN+datWwkTdtZtqphPpk1OvlUXhQb6Wwrn6m2rkdEfW4mSyezdq2Vz3aa5QaX+sobU83WTHezv99zr0cbAO4Pl69cvXB6YWH+0k0Vvh0Ra5b87mbW6t/7kBsLA8A9sJKlP/73G+v88R0AAAAAAAAAAAAAAO4Pt3b9300Udm/vBof6VP3vnoX5S4vXItZXJYuLi7fQxe7Yos3O3lBt80DdlcL1bdnOQGw0zvdPIelf9epzz13ot/oL1/ad6POWKC0v2fJ/ymDRurzU9a2Pd/7onbLq+dvanYFbX+u3EXEbfS0mm7S5d8ckAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjnnwEAAP//vWJmIg==")
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18)
lsm_get_self_attr(0x67, 0x0, &(0x7f0000000280), 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x4040)
syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000180)="e6e0", 0x2}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000002001100000000000000000000000100000001000000000000001c000000000000000000000008"], 0x50}}], 0x3ffffffffffff40, 0x800)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000400000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18)
unshare(0x4020400)
r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000280), 0x40100, 0x0)
poll(&(0x7f0000002300)=[{r4, 0x80}], 0x1, 0x5)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$FOU_CMD_ADD(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="200025bd7000fedbdf25010000000400050008000800ac14141f080008007f000001"], 0x28}, 0x1, 0x0, 0x0, 0x8081}, 0x0)
r8 = mq_open(0x0, 0x42, 0x0, 0x0)
mq_notify(r8, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48)

53.30067757s ago: executing program 9 (id=3203):
r0 = syz_io_uring_setup(0x2806, &(0x7f0000001480)={0x0, 0xb360, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff8000, 0x66a}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080))
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_SHUTDOWN={0x22, 0x18, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x7a2a, 0x7516, 0x10, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
set_robust_list(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xf, 0x16, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device}, 0x94)
r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x3, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd28, 0x3502}, @sadb_lifetime={0x4, 0x4, 0x8, 0x7, 0x5, 0x6}, @sadb_ident={0x2, 0xb, 0xce66, 0x0, 0x7f}]}, 0x50}, 0x1, 0x7}, 0x0)
getsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f00000000c0)={@mcast1, <r10=>0x0}, &(0x7f0000000140)=0x14)
setsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, r10}, 0x14)
writev(r8, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}], 0x1)
writev(r7, &(0x7f0000000600)=[{&(0x7f0000000340)="77f9acf4d91425504791dc16b5d1acc0443b857ccae8e58ce3ba01d0d0d5f8c7b026c3d6f43ab4db6583cf835ffb64cae60552136916e9da22409329fd5d3013e1337458120314e1812a4ebfbd28b3511efd78835138ab95ea21f0c41f135234d4a3cbea5671dfce54d78c2c661e21a4c90ec2", 0x73}, {&(0x7f0000000c00)="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", 0xc00}, {&(0x7f00000003c0)}, {&(0x7f0000000580)="09ee3f7c50d93d8c64d3c29686472f9ae50d4d10a8a8d4abe9b127d8dfec2ef186f15f70a740a240a5724e1181eb0e94ad2da107fdba73055e3775af1e74f78f568d86da3417fb1d58ce58ab15f295a0f0e8b118f9497c50", 0x58}], 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x18)
r11 = getpid()
rt_tgsigqueueinfo(0x0, r11, 0x22, &(0x7f0000000000)={0x27, 0x3, 0x400})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x104)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

52.721012085s ago: executing program 9 (id=3213):
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000643000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10)
lsm_list_modules(&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x48, 0x0)
socket$rds(0x15, 0x5, 0x0) (async)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000200)=0x1, 0x4) (async)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000200)=0x1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x1, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mm_page_free\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0xffffffffffffffff, 0xffffffffffffff0a)
r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x114905, 0x32, 0xfffffbff, 0x3, 0x40000000001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t')
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) (async)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)

52.670584299s ago: executing program 40 (id=3213):
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000643000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10)
lsm_list_modules(&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x48, 0x0)
socket$rds(0x15, 0x5, 0x0) (async)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000200)=0x1, 0x4) (async)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000200)=0x1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x1, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mm_page_free\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0xffffffffffffffff, 0xffffffffffffff0a)
r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x114905, 0x32, 0xfffffbff, 0x3, 0x40000000001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t')
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) (async)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)

31.741468566s ago: executing program 3 (id=3536):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, 0x0, 0x0, 0x20000800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
mount(0x0, 0x0, 0x0, 0x5000, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) (async, rerun: 64)
r6 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000048002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x20000000) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, <r7=>0x0}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_DEV_REPLACE(r5, 0xca289435, &(0x7f0000000740)={0x3, 0x2, @start={r7, 0x0, "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", "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"}, [0x3, 0x8, 0x2, 0x0, 0x8, 0x2, 0x5, 0x0, 0x5, 0x5b1, 0x9, 0x7f, 0x3, 0x9, 0x7, 0x5, 0x8e3, 0x0, 0x4, 0x0, 0x7, 0x9d, 0x1, 0x9, 0xb, 0x3, 0x8001, 0x2, 0x80, 0x1c8, 0x4, 0x5, 0x7, 0xffffffffffffffff, 0x8, 0x7, 0x2, 0xfffffffffffff001, 0x0, 0x1000, 0x2, 0x3, 0x10, 0x7fffffffffffffff, 0x6, 0x9, 0xfffffffffffffff8, 0x81, 0x8539, 0xffffffffffffff00, 0x0, 0x8, 0x10, 0xa18, 0x101, 0x5, 0x80000001, 0x9, 0x2, 0x7, 0x8, 0x3da, 0x7, 0x1]})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000015c0)={r7, "b2c2e1004e620f38a2442e9fd768bb13"}) (async)
ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000004c0)={0x0, 0x6, @start={r7, 0x1, "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", "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"}, [0x4, 0x6, 0x100, 0x3, 0x3, 0x3, 0x80000000, 0x4, 0x7, 0x1fc, 0xffffffffffff02c7, 0x6, 0x2, 0x1, 0x3, 0x9, 0x4, 0x4, 0x0, 0x2, 0xee5c, 0x100, 0x7, 0xced, 0x0, 0x7, 0x0, 0x849, 0x6, 0x4b, 0x1, 0x7, 0x2e, 0x1, 0x8000000000000000, 0x100000001, 0x7fffffffffffffff, 0x9, 0xfffffffffffffffd, 0xb, 0xfffffffffffffff7, 0x3, 0x4, 0x7, 0x6, 0x9, 0x3, 0x7c, 0xffff, 0x8000, 0x2, 0xffffffffffffffda, 0xfffffffffffffffd, 0x10, 0x2, 0x80000001, 0x8, 0x5, 0xffffffff, 0x1, 0xff, 0x1ff, 0x4, 0x53ec17b]}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xd, 0xffff}, {0x5, 0x7ff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x841) (async, rerun: 64)
r8 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)

30.451793589s ago: executing program 3 (id=3563):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004000, &(0x7f0000000040), 0xfe, 0x563, &(0x7f00000007c0)="$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")
r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r1, 0x0, 0x0, 0x1001f0)
fallocate(r1, 0x3, 0xf00, 0x10000)

30.350775438s ago: executing program 3 (id=3570):
socket$inet_udp(0x2, 0x2, 0x0) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x8, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x3, 0x2, 0xb2f, 0x3, 0x5, <r3=>0xffffffffffffffff})
migrate_pages(r3, 0x10001, &(0x7f0000000580)=0x4, &(0x7f00000005c0)=0xb390)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001108000440000000150900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001108000440000000150900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0)

30.290475564s ago: executing program 3 (id=3571):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r1, 0x2, 0x6, @local}, 0x10)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f00000002c0)=ANY=[@ANYRES8=r1], 0xfd, 0x2c8, &(0x7f0000000300)="$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")
r2 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1)
write$qrtrtun(r2, &(0x7f0000000040)="2dc9fcaebd2e1334a48405ddeb01b5387be3050df4c4cc051246a267adbd77d5821f8d584485290671ede2b1ea4a43129af44836", 0x34)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0)
open_tree(r3, &(0x7f0000000640)='\x00', 0x89901)
r5 = epoll_create1(0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r2, 0x29, 0xc9, &(0x7f0000000100)=0x8, 0x4)
listen(r6, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)={0x10000000})
statfs(&(0x7f0000000200)='.\x00', 0x0)

30.23264862s ago: executing program 3 (id=3573):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000080))
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f00000000c0)=""/197, &(0x7f00000001c0)=0xc5)
r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x90041)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000240)=0x13c2)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000300)={'gre0\x00', <r3=>0x0, 0x80, 0x40, 0x1, 0x4063d882, {{0x4b, 0x4, 0x1, 0x27, 0x12c, 0x68, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1f, 0x65, [@dev={0xac, 0x14, 0x14, 0x3b}, @remote, @multicast1, @remote, @multicast2, @local, @local]}, @timestamp={0x44, 0x8, 0x18, 0x0, 0x3, [0x0]}, @timestamp={0x44, 0x1c, 0x28, 0x0, 0x2, [0xc1, 0x9, 0x400, 0xb, 0x7, 0x4]}, @noop, @lsrr={0x83, 0x27, 0x48, [@multicast2, @empty, @multicast2, @empty, @private=0xa010100, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1]}, @cipso={0x86, 0x5e, 0x3, [{0x5, 0x10, "b1a5219552042543ad772628b3a1"}, {0x6, 0x2}, {0x7, 0xc, "acb454074d9391223f88"}, {0x7, 0xe, "716ca682e993b57c44e6331a"}, {0x6, 0xc, "10c94c1ac69e14c08989"}, {0x2, 0x9, "7c9b356883ddc2"}, {0x5, 0x5, "fd2e03"}, {0x5, 0x12, "3bc0a59e447015c575119f2e095ae347"}]}, @timestamp={0x44, 0x18, 0xf6, 0x0, 0x7, [0x8, 0x7f, 0x1, 0x6, 0x7]}, @timestamp={0x44, 0x20, 0xee, 0x0, 0xc, [0x101, 0x4, 0xfffffffa, 0x0, 0x2dc, 0x4, 0x3]}, @rr={0x7, 0x17, 0x21, [@multicast1, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast1]}]}}}}})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x2, 0x96, 0x1488, r2, 0x6, '\x00', r3, r4, 0x4, 0x2, 0x5, 0x8}, 0x50)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x2400c0, 0x0)
r7 = accept$inet6(0xffffffffffffffff, &(0x7f00000005c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000600)=0x1c)
connect$inet6(r7, &(0x7f0000000640)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x31}, 0x100}, 0x1c)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000680)=0x9)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8982, &(0x7f00000006c0)={0x6, 'team_slave_1\x00', {0x3}})
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000700)=0xfffffffffffffffe)
fsetxattr$security_ima(r6, &(0x7f0000000740), &(0x7f0000000780)=@v1={0x2, "28a0862559ebd6e0"}, 0x9, 0x3)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@generic={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x3, &(0x7f0000000840)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1}, @ldst={0x1, 0x2, 0x2, 0x6, 0x3, 0x6, 0x4}], &(0x7f0000000880)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x20, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x6, 0x7, 0x7}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000940)=[{0x1, 0x2, 0x3, 0x9}, {0x3, 0x2, 0x6, 0x8}, {0x2, 0x4, 0xb, 0x9}, {0x3, 0x2, 0x3}, {0x4, 0x2, 0x6}, {0x5, 0x5, 0x7, 0xc}, {0x1, 0x2, 0x7, 0x6}, {0x5, 0x3, 0x0, 0x5}, {0x3, 0x4, 0x9}, {0x4, 0x4, 0x10, 0xa}], 0x10, 0x4}, 0x94)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40401, 0x0)
r9 = add_key$fscrypt_provisioning(&(0x7f0000000b00), &(0x7f0000000b40)={'syz', 0x2}, &(0x7f0000000b80)={0x2, 0x0, @auto=[0x2d, 0x2c]}, 0xa, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000bc0)='dns_resolver\x00', &(0x7f0000000c00))
mq_timedsend(r8, &(0x7f0000000c40)="6e8dd245515db9ed920bdb2debbe99b48e04ed3446bb36e47995116ae6a80d230f6bc03c0d6e5e7488716bcffd97df61045b154e5230da", 0x37, 0x0, &(0x7f0000000c80))
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r8)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, r10, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xd}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x80)
r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), r11)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000ec0), 0x400003, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0)
ioctl$KDGKBLED(r11, 0x4b64, &(0x7f0000000f40))

30.01382713s ago: executing program 3 (id=3575):
socket$packet(0x11, 0xa, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

30.013402871s ago: executing program 41 (id=3575):
socket$packet(0x11, 0xa, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

26.919212345s ago: executing program 8 (id=3617):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRESDEC=0x0], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x22c7, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000008000000000018110000ffc861048893208a212de1f08adc7ea3da775557c7813382685cd4b8728bc2384d901a27db9e1d", @ANYRES32=<r2=>r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x12, 0xc, &(0x7f0000000ec0)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES8=r1, @ANYRES8=0x0, @ANYRESDEC=r0, @ANYRES64=r2, @ANYRESHEX=r2, @ANYRESDEC=r1, @ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000006c0)='kfree\x00', r3}, 0xfffffffffffffebc)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r5}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r7)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r8, @ANYBLOB="000029bd7000ffdbdf250b0000000800390010000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000c4}, 0x80)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES64=<r9=>r6], 0x24}}, 0x10)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0xf, 0x12c, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd98872209ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab122c4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f0121a4929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"})
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$tipc(r11, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x20048810)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r13}, 0x10)
sendmsg$tipc(r11, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34044884}, 0xc805)
sendmsg(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
close(r10)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYRESDEC=r9], 0x24, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb0100380000000000000000e03600000000ed010008000008a1ede568ac8113369ffdc9ec138b277afa34cd97fc3e6fab2b924743de057d1b1e611575d4890b95e49b6815c791c71afaf97c9d9fd59632e75ab43bacd34e62757bf8982032f569872093af1b29b03d82edfe3f365b9cebc586d118ad78d4a048f3e17c66ee337cc27a4ce2c35b82b8a57fcfac949501751d50a548fd0e0b1ab8006df11055cfc42c9dd540e180eca61d9f55cd47d8b4ed2a42498deb3b"], 0x0, 0x1a}, 0x28)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000f40)={{{@in=@loopback, @in6}}, {{@in6=@private0}, 0x0, @in6=@private2}}, &(0x7f0000000700)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701", @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000008c0)={0x0, 0x5}, &(0x7f0000000cc0)=0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1a, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r14, 0x0, 0x9}, 0x18)

26.721625013s ago: executing program 8 (id=3619):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x800000000006}, 0x18)
r3 = socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f150000fdff00000000000000839d00000061002e615f00"], &(0x7f0000005bc0)=""/255, 0x37, 0xff, 0x9, 0x1000}, 0x28)
sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="021304010400000028bd7000fddbdf2502000b"], 0x20}}, 0x40800)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x800000000006}, 0x18) (async)
socket$key(0xf, 0x3, 0x2) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f150000fdff00000000000000839d00000061002e615f00"], &(0x7f0000005bc0)=""/255, 0x37, 0xff, 0x9, 0x1000}, 0x28) (async)
sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="021304010400000028bd7000fddbdf2502000b"], 0x20}}, 0x40800) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) (async)

26.490773475s ago: executing program 8 (id=3622):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = msgget$private(0x0, 0x0)
msgsnd(r6, &(0x7f00000008c0)=ANY=[@ANYBLOB="02"], 0x401, 0x0)
msgsnd(r6, &(0x7f0000004280)={0x2, "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"}, 0x401, 0x0)
msgctl$IPC_SET(r6, 0x1, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x7, 0x6d, 0x8, 0x4, 0x3, 0x3, 0x1, 0x7})
mmap$IORING_OFF_SQES(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000008, 0xc94ee3b6e518beb0, 0xffffffffffffffff, 0x10000000)
readahead(r5, 0x4, 0xc)

23.774711233s ago: executing program 8 (id=3654):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x80000003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="d605bda60000000071306400000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
kexec_load(0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@loopback, @in=@local, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x502a, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x40}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x2, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newae={0x5c, 0x1e, 0xff01f7747ae9d38d, 0x70bd2d, 0x25dfdbfc, {{@in=@broadcast, 0x4d4, 0x2, 0x33}, @in6=@loopback, 0xffffffff, 0x3504}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2c, 0x70bd2b, 0x70bd2a, 0x70bd2c, 0x40}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24004850}, 0x40054)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x122)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x2})
r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000002c0)=0x5)
pipe(&(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$P9_RGETLOCK(r8, &(0x7f0000000640)=ANY=[], 0x200002e6)
fcntl$setpipe(r8, 0x407, 0x7000000)
fcntl$setpipe(r7, 0x407, 0x80000001)
sendmsg$nl_generic(r6, 0x0, 0x0)
r9 = syz_open_dev$usbfs(&(0x7f0000000080), 0x8, 0x0)
ioctl$USBDEVFS_BULK(r9, 0xc0185502, &(0x7f00000001c0)={{{0xf, 0x1}}, 0x89, 0x16de, &(0x7f00000000c0)="a4b84785f5b37915c00f0f7cc2152446b482d992e971f23275b57db841310b5df0eac64958153455e3e95178f608f13e8e1f0ced7930c2cffdb80d7ad91309e185c94e60f456e2e7ba10ef634695b289a22ac6177adf9d6e3c920929b08ebc879e1bed5052c825f0d43144e99d8ddbaf5283bd7f35bf6f965bae7b86bbfb64f95b1f40fdbac0f77868"})
write(r5, &(0x7f0000004200)='t', 0x1)
sendfile(r5, r4, 0x0, 0x3ffff)
io_setup(0xfffffff6, &(0x7f0000000040))
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x48, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x11}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x421}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x110}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xb56}]}, 0x48}, 0x1, 0x0, 0x0, 0x8804}, 0x48801)
r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r10, r10)

23.353406833s ago: executing program 8 (id=3665):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x7, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000000000003dc41af5f38d5b1d9def16e69524000000000000000018110000eb49368c69d4243638046657f11ba03f842c89a56890228dcb9261fdb79b622e12daa694b2589c93d9022125061f94cfee4eb4e6e1a1ff12b3d167b1e3f169f10517d22859ac73dca9260f0bbafb997f0354ff1caedc09e5f1d7876853aaa91c7aae2cc67f05d252dee8946a16980c7c73f9a2deaa111e8886f5f756941b2ce4afd41b4b7bc39a843e9824f081fd55a628bbc1b440e682393603a5fd8ab07bf39268", @ANYRES32=<r2=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000340), &(0x7f00000003c0)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001180)=ANY=[@ANYRESDEC=r2, @ANYBLOB="693f0d7f0d990b5d1990a578f090619f40e6275ce3c8ed9b8df214aa9cebc7ed725441d9d17906f86d69642ad6e550c365f1e73ea8df99b6936061bd999a338576d51d257e5cdf290981859d752c5239edb692e79fec885cdd0e98d45bdac2885503b57ce8f952ea9f20e5d17f2e1370d5540bb7b07e989a6118592c9c4670f4d4532e84539d13034e42fe331933d5b280363d4464d5c7dc49c5e73a7cbeaf6af52c5590c717cd2c946e2eb1f5d4391077d1ca361f89cd9e"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYRES16=r1], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20900, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
acct(&(0x7f0000000040)='./file0\x00')
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1e7217582714345e5707000000f1", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18)
r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff7ffe}, 0x4100, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140), 0x80, 0x54f, &(0x7f0000000a00)="$eJzs3c9vHFcdAPDvbLxufji1SzlAJUqBoqSC7MY1bS0OJUgITpUQ5R6MvbGsrL2Rd93GViScvwAJIUBwggsXJP4AJBSJC0eEFAnOIBWBEDhwQAIy1cyOHdeZ3WzSza5/fD7SZN68+fF9bzYznjfzNBPAifVSRFyJiPtpmr4SEdNFfqUYYrs7ZMvd27m1mA1JpOnb/0giKfJ2t5UU43PFaqcj4htfi/h28nDc9ubW9YVms7FeTNc7qzfq7c2tSyurC8uN5cba3Nzs6/NvzL82f3ko9TwfEW9+5S8/+O7Pv/rmrz//7p+v/u1iVu2YKubvr8djyHbRRL8FulWv5vtiV7bC+hMEO6wm8hoWzpQtkaZpej+d3pdzeyQlAwDgoOwC9iMR8emIeCWm41T/y1kAAADgCEq/NBX/S7pPaEpM9sgHAAAAjpBK3gc2qdSKvgBTUanUat0+vB+Ns5Vmq9353LXWxtrS3R9PRcRMVCvXVpqNy0Vf4ZmoJtn0bJ5+MP3qgem5iHguIr4/fSafri22mkvjvvkBAAAAJ8S5A+3/f0932/8AAADAMTPzcFZlHOUAAAAAnp6S9j8AAABwzGj/AwAAwLH29bfeyoZ09/vXS+9sblxvvXNpqdG+XlvdWKwtttZv1JZbreX8nX2r+9c9VbK9Zqt14wuxtnGz3mm0O/X25tbV1dbGWufqygc+gQ0AAACM0HOfvPPHJCK2v3gmHzKT4y4UMBITe6mkGJcc/X96tjt+b0SFAkai7B7+Qe89M4KCACM38URrpYOcNoBDrjruAgBjlzxifs/OO78rxp8abnkAAIDhu/Dx3s//+38DYNsnAuCIcxDDyXXgQV46Pa6CACOXP/8ftMOviwU4VqoD9QAEjrMP/fz/kdL0sQoEAAAM3VQ+JJVacXtvKiqVWi3ifP5ZgGpybaXZuBwRz0bEH6arz2TTs/maySPbDAAAAAAAAAAAAAAAAAAAAAAAAABAV5omkfZzpe9cAAAA4AiIqPw1+U33Xf4Xpl+eOnh/YDL5T/5J4MmIePcnb//w5kKnsz6b5f9zL7/zoyL/1XHcwQAAAAAO2m2n77bjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCY7u3cWry3cyv9786txVHG/fuXI2JmL34+dOdMxOl8fDqqEXH2X0lM7FsviYhTQ4i/fTsiPlYWP8mKtReyLP6Zpx8/Zoq9UBb/3BDiw0l2Jzv/XCk7/irxUj4uP/4mIj4w/aR6n/9i7/x3qsfxf37AGC/c/WW9Z/zbES9MlJ9/duMnD8VPinFloPjf+ubWVq956U8jLkR5/P3R6p3VG/X25talldWF5cZyY21ubvb1+TfmX5u/XL+20mwU/5bG+N4nfnW/X/3P9og/07P+3TK9PFDtI/5/9+bO8z3+XmXxL36mJP5vf1Ys8XD8SrGtzxbpbP6F3fR2N73fi7/4/Yv96r/0oP7VwX7/bsyL/av94AccxoECAAxNe3Pr+kKz2Vg/Conqk6yVtdLLZj1f7IEPX7DJw7J/JB4z8Z2hbjBN07TH/6g7ETHIdpI4DLslT4z3vAQAAAzfg4v+cZcEAAAAAAAAAAAAAAAAAAAATq4hvjNssvQ1eyVvFtjeSyXeDAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBrvBwAA//9pfNv4")
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYRES64=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
write$P9_RGETLOCK(r11, &(0x7f00000002c0)=ANY=[], 0x200002e6)
r12 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r12, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', r13}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r12, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)
fcntl$setpipe(r11, 0x407, 0x7000000)

23.287163109s ago: executing program 8 (id=3666):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@abort}]}, 0x3, 0x57b, &(0x7f0000000800)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4, 0x273, &(0x7f0000000680)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000380)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff)
r2 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x24, 0x4, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x4000)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8000000bb, 0x10001}, 0x6007, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="06000000"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000900)='ext4_evict_inode\x00', 0xffffffffffffffff, 0x0, 0xffbfffffffffffff}, 0x18)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000)
munlock(&(0x7f0000daf000/0x1000)=nil, 0x1000)
munlockall()
eventfd2(0x0, 0x0)
mq_notify(r1, &(0x7f0000000540)={0x0, 0x5, 0x0, @thr={&(0x7f0000000480)="9bc74e148e336ed4da3f201626971269292232f9c2dfa06a168f8c9d13bdbcfd7fc0101dd8b7e70c90c82d88aae8169f8a7f4bc885b2097fbcc8256dff68c8c5c4fbd1bb5f4d07875be872e692c178dd9b885975063558411ed5a47a7cb6c9f481c8ae6b7d1be748c3eb930b33a95f443baca754470410dad167acc2218e1d0eb073e2f7b6d804ba74664886c2213e8d68df3b115361c02fd4531f3f8fb2cf68a29b8803aa52ef5cf10c429900271baeef57bf77aa21207fa961a1a0", &(0x7f0000000400)="1a74a7eb17e77a5130cb27e879871cf0687fc4253a27c8933a3d07d62cccd73fc5e8acedabb29fb22bef1ec45dd150c46b2c3f5614b3148d77e3c6e8"}})
openat$nvram(0xffffffffffffff9c, &(0x7f0000000580), 0x121081, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r4, @ANYRES32=r3], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='sctp_probe_path\x00', r5}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800400, &(0x7f00000009c0)={[{@quota}]}, 0x1, 0x4f3, &(0x7f0000000a00)="$eJzs3c9rXFsdAPDvnSRt0uY5eeri+cD3iq+SFu1M0tg2uCgVxF1BrfsYkkkImWRCZtI2oZQU/wBBRBeuXLkR/AME6cZ9EQq6FxGl2FYXLtSRO3PHxnQmGV4nM+3k84HTe+6P3O/3dDq399x7yAng1LoQEbciYiQiLkdEPtuey0rsN0t63MsXD5bSkkS9fudvSSTZtta5kmx5Pvux8Yj4bnJgxwHV3b31xXK5tJ2tF2sbW8Xq7t6VtY3F1dJqaXNubvb6/I35a/MzPWvrzW/++Sc//MW3bv7mq/f+uPDXSw/TtCazfQfb0UvNpo81/i5aRiNi+ySCDcBI1p6xLo8/e8L5AABwtPQe/7MR8aXG/X8+Rhp3cwAAAMAwqScR/0oi6gAAAMDQyjXGwCa5QjYWYDJyuUKhOYb383EuV65Ua19ZqexsLjfHyk7FWG5lrVyaycYKT8VYkq7PNuqv1q8eWp+LiPcj4sf5iWTlbJQKS5Xy8qAffgAAAMApcf5Q//8f+Wb/HwAAABgyU4NOAAAAADhx+v8AAAAw/Dr2/xOTAQAAAMAQ+Pbt22mpt+a/Xr67u7NeuXtluVRdL2zsLBWWKttbhdVKZbVcKixVNo47X7lS2fpabO7cL9ZK1Vqxuru3sFHZ2awtNOb1Xih1O080AAAA0Dvvf/z4D0lE7H99olFSZ7J9+uow3HLHHzJxoJ6cZC5Af40MOgFgYD7dAF/DgmEYHNfHf16v9ykTYFCO69iPd9rxpPe5AAAAJ2P6C53f/wPDrYv3/23c6nkeQP95/w+nlzf5cHoZ4w+82ft/g4QAAOBdMNkoSa6QvQucjFyuUIh4rzEtwFiyslYuzUTEZyLi9/mxs+n67KCTBgAAAAAAAAAAAAAAAAAAAAAAAIB3TL2eRP2wM69vAgAAAN5dEbm/JNn8X9P5i5OHnw+cSf6Zbywj4t7P7vz0/mKttj2bbn+efzVrWLb9at8fXwAAAACp3/7/aquf3urHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAP1ZPmcunliwdL/Qz87BsRMRWRxm2V5p7RGG8sx2MsIs79PYnRAz+X5jvSg/j7jyLig3bxkzStmMqyOBw/FxETA45/vgfx4TR7nF5/brX7/uXiQmPZ/vs3mpU39exCp+tf7n/Xv5EO17/3uozx4dNfFTvGfxTx4Wj7608rftIh/iddxv/+9/b2Ou2r/zxiOtrHPxirWNvYKlZ3966sbSyullZLm3Nzs9fnb8xfm58prqyVS9mfbWP86Iu//s9R7T/XIf7UMe2/2GX7//30/ovPvbb14dVW/EuftP/8Pzgifvpv4svZ/wPp/ulWfb9ZP+ijX/7uo6Pav9yh/cd9/pe6bP/l7/zgT10eCgD0QXV3b32xXC5tH1l5Escf079K6z7kbcknvRdKKzf7F7T16KGXZ/44Pd+JJj8Rb8XnpdJNZYAXJQAA4ES8uukfdCYAAAAAAAAAAAAAAAAAAABwevXj14kNuo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN34bwAAAP//tfDGOw==")
r6 = open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
preadv2(r6, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
munlockall()

23.232616625s ago: executing program 42 (id=3666):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@abort}]}, 0x3, 0x57b, &(0x7f0000000800)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4, 0x273, &(0x7f0000000680)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000380)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff)
r2 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x24, 0x4, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x4000)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8000000bb, 0x10001}, 0x6007, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="06000000"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000900)='ext4_evict_inode\x00', 0xffffffffffffffff, 0x0, 0xffbfffffffffffff}, 0x18)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000)
munlock(&(0x7f0000daf000/0x1000)=nil, 0x1000)
munlockall()
eventfd2(0x0, 0x0)
mq_notify(r1, &(0x7f0000000540)={0x0, 0x5, 0x0, @thr={&(0x7f0000000480)="9bc74e148e336ed4da3f201626971269292232f9c2dfa06a168f8c9d13bdbcfd7fc0101dd8b7e70c90c82d88aae8169f8a7f4bc885b2097fbcc8256dff68c8c5c4fbd1bb5f4d07875be872e692c178dd9b885975063558411ed5a47a7cb6c9f481c8ae6b7d1be748c3eb930b33a95f443baca754470410dad167acc2218e1d0eb073e2f7b6d804ba74664886c2213e8d68df3b115361c02fd4531f3f8fb2cf68a29b8803aa52ef5cf10c429900271baeef57bf77aa21207fa961a1a0", &(0x7f0000000400)="1a74a7eb17e77a5130cb27e879871cf0687fc4253a27c8933a3d07d62cccd73fc5e8acedabb29fb22bef1ec45dd150c46b2c3f5614b3148d77e3c6e8"}})
openat$nvram(0xffffffffffffff9c, &(0x7f0000000580), 0x121081, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r4, @ANYRES32=r3], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='sctp_probe_path\x00', r5}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800400, &(0x7f00000009c0)={[{@quota}]}, 0x1, 0x4f3, &(0x7f0000000a00)="$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")
r6 = open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
preadv2(r6, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
munlockall()

22.808808755s ago: executing program 0 (id=3676):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x2a020400)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
set_mempolicy(0x8006, 0x0, 0x5)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (fail_nth: 2)

22.473405476s ago: executing program 0 (id=3682):
unshare(0x6a040000) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r2, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xb}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x401}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x4}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x44}}, 0x0)
r3 = syz_open_dev$usbfs(0x0, 0x20ec1000000, 0x18401)
ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth1_virt_wifi\x00', <r5=>0x0})
openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@deltclass={0x38, 0x29, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x9, 0x3}, {0x7, 0xffff}, {0xc, 0xf}}, [@tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0)

20.871139729s ago: executing program 0 (id=3707):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x18)
ptrace(0x10, r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r2, 0x0, 0x24008010)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x4040000)
ptrace$getregset(0x4204, r0, 0x202, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
kexec_load(0x3, 0x0, 0x0, 0x0)

20.762651369s ago: executing program 0 (id=3710):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
r3 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = syz_open_procfs(r3, &(0x7f0000000200)='wchan\x00')
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00)
sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001080), 0x8280, 0x0)
getpeername$packet(r8, &(0x7f00000010c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001100)=0x14)
bind$packet(r8, &(0x7f0000001140)={0x11, 0x1a, r9, 0x1, 0x5, 0x6, @random="73668438344b"}, 0x14)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0xffffffdd, 0x9, 0xd3, 0x1c040, r4, 0x6, '\x00', r9, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0xa, @value=r4, @void, @value=r5}, 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r11, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/228, 0xe4}], 0x1, 0x401, 0x9)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000640)=0x1)
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x0, 0x0)
r12 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r12, 0x2284, &(0x7f0000000080))

19.835556987s ago: executing program 0 (id=3731):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x19, 0x35}, [@call]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x23)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24)
sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
r5 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x400080, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x13, &(0x7f0000000080)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
syz_clone3(0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000014, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000800), &(0x7f0000000840)=r7}, 0x20)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
waitid(0x0, r8, 0x0, 0x8, 0xfffffffffffffffd)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000180)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280090fd55cd5600000000034461ec", @ANYRES16=0x0, @ANYBLOB="010029bd7000fbdbdf2501000000000000000c410000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8c5)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
faccessat(0xffffffffffffffff, 0x0, 0x5)
r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)=0x10)

19.644944845s ago: executing program 0 (id=3734):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x2a020400)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
set_mempolicy(0x8006, 0x0, 0x5)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

16.252323618s ago: executing program 6 (id=3803):
bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x9, 0x4, 0x8, 0xc}, 0x50)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000700)=@allocspi={0x110, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {{{@in6=@rand_addr=' \x01\x00', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0xfff7, 0x4e22, 0x2, 0x0, 0x20, 0x20, 0x5c}, {@in=@empty, 0x4d2, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, {0x5, 0x7, 0x3, 0x8, 0xc, 0x7, 0x815a, 0xd7}, {0x3, 0x400000000000000, 0x2, 0x5}, {0xa, 0x81, 0x7fff}, 0x70bd2b, 0x0, 0xa, 0x4, 0xb, 0x1}, 0x1, 0x3}, [@replay_val={0x10, 0xa, {0x70bd2c, 0x70bd2c, 0x1007}}, @extra_flags={0x8, 0x18, 0x7}]}, 0x110}}, 0x0)

16.251542107s ago: executing program 6 (id=3804):
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r0 = eventfd2(0xff, 0x80001)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000300)=r0, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0xa, 0x1, {0x0, r0}, 0xb33a, 0x7, 0x1})
io_uring_enter(0xffffffffffffffff, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0)

16.188294104s ago: executing program 6 (id=3805):
r0 = io_uring_setup(0x33cd, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x8000001})
r1 = socket(0x2b, 0x1, 0x1)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r4, 0x402, 0x8000001f)
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4)
fcntl$notify(r5, 0x402, 0x8000003d)
close_range(r4, r5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000000)=0x2, 0x4)
close_range(r0, r1, 0x0)

15.978134004s ago: executing program 6 (id=3808):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffc00, 0x3d)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000600)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@barrier_val={'barrier', 0x3d, 0x8e}}, {}, {@errors_remount}, {@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x109}}, {@quota}]}, 0x5, 0x504, &(0x7f0000002580)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1006)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c6ffffffff00009e63bdbcefbde78439753abd950100002a001200ff0000000000000000000000000000000000000000000000000000bc00", "b7326736181c208220000000b9000000000000000000f0fffffffff2120100", [0x4, 0x5]})
fadvise64(r1, 0x14, 0x2, 0x4)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ppoll(&(0x7f0000000740)=[{r3, 0x104}], 0x1, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffccb}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$inet6(0xa, 0x2, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf9, 0x0, 0x0, 0x0, 0xfc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x800000000006}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x3, 0x0)

15.517860357s ago: executing program 6 (id=3815):
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r0 = eventfd2(0xff, 0x80001)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000300)=r0, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0xa, 0x1, {0x0, r0}, 0xb33a, 0x7, 0x1})
io_uring_enter(0xffffffffffffffff, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0)

15.390024109s ago: executing program 6 (id=3816):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000700)=@allocspi={0x110, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {{{@in6=@rand_addr=' \x01\x00', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0xfff7, 0x4e22, 0x2, 0x0, 0x20, 0x20, 0x5c}, {@in=@empty, 0x4d2, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, {0x5, 0x7, 0x3, 0x8, 0xc, 0x7, 0x815a, 0xd7}, {0x3, 0x400000000000000, 0x2, 0x5}, {0xa, 0x81, 0x7fff}, 0x70bd2b, 0x0, 0xa, 0x4, 0xb, 0x1}, 0x1, 0x3}, [@replay_val={0x10, 0xa, {0x70bd2c, 0x70bd2c, 0x1007}}, @extra_flags={0x8, 0x18, 0x7}]}, 0x110}}, 0x0)

15.389837319s ago: executing program 43 (id=3816):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000700)=@allocspi={0x110, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {{{@in6=@rand_addr=' \x01\x00', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0xfff7, 0x4e22, 0x2, 0x0, 0x20, 0x20, 0x5c}, {@in=@empty, 0x4d2, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, {0x5, 0x7, 0x3, 0x8, 0xc, 0x7, 0x815a, 0xd7}, {0x3, 0x400000000000000, 0x2, 0x5}, {0xa, 0x81, 0x7fff}, 0x70bd2b, 0x0, 0xa, 0x4, 0xb, 0x1}, 0x1, 0x3}, [@replay_val={0x10, 0xa, {0x70bd2c, 0x70bd2c, 0x1007}}, @extra_flags={0x8, 0x18, 0x7}]}, 0x110}}, 0x0)

4.497730523s ago: executing program 44 (id=3734):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x2a020400)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
set_mempolicy(0x8006, 0x0, 0x5)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

4.147990026s ago: executing program 5 (id=3975):
socket$inet_sctp(0x2, 0x5, 0x84) (async)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}])
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async)
r3 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000780)={{r3}, 0x0, 0x2, @inherit={0x50, &(0x7f0000000200)={0x1, 0x1, 0x3, 0x4, {0x3, 0x10000, 0x7, 0x0, 0x3}, [0x55e]}}, @subvolid=0x6})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0x8}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async)
setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f00000002c0)=0x5, 0x4) (async)
r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x17, 0x40, 0x6, 0x0, 0x0, 0x10609, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x108bcf, 0x7ff, 0xffff, 0x8, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r5, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80) (async)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (async)
r7 = syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0x2e7f, 0x800, 0x2, 0x5cc}, &(0x7f0000000280), &(0x7f00000005c0))
io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000040)={0x0, 0x80, 0x4, 0x8, 0x21, 0x8, 0x0, 0xf, 0x342, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xc6c, 0x2, @perf_config_ext={0x633, 0x400}, 0x800, 0xfffffffffffffed4, 0x18f, 0x3, 0xfffffffffffff000, 0xa80000, 0xfff7, 0x0, 0x3, 0x0, 0x4d}) (async)
syz_io_uring_setup(0x2ab8, &(0x7f0000000300)={0x0, 0x9606, 0x2, 0x1, 0x38d}, &(0x7f0000000380), &(0x7f00000003c0))
ioctl$BLKSECTGET(r5, 0x1267, &(0x7f0000000180))

3.845206815s ago: executing program 5 (id=3977):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8], 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x10, <r1=>0x0}, 0x8)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r3, 0x0, 0x8}, 0x18)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000010850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)

3.438448414s ago: executing program 5 (id=3979):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@barrier_val={'barrier', 0x3d, 0x40fa}}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
r3 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

3.072737479s ago: executing program 7 (id=3983):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@appraise}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ")
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000004c0)=ANY=[])
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x130, 0x4c, 0x1a, 0x130, 0x2d, 0x240, 0x258, 0x258, 0x240, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x1, 0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370)
socket$inet_udp(0x2, 0x2, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)

2.627313951s ago: executing program 7 (id=3984):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18)
syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd602d5a0000143c0020010000000000000000000000000002fe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000005e2f9efc00"], 0x0)
io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xa35, 0x1000, 0x2, 0x8f})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]})
set_tid_address(0x0)

2.496490393s ago: executing program 7 (id=3986):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38091}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x5c}}, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38091}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x5c}}, 0x10)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xa, 0x2)

2.281886664s ago: executing program 7 (id=3988):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x10000, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kfree\x00', r5}, 0x18)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
close(r6)
write$cgroup_type(r4, &(0x7f0000000180), 0x13bb711e)

2.277641624s ago: executing program 5 (id=3990):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000200)='tlb_flush\x00', r1, 0x0, 0x100000004}, 0x18)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0)
ioctl$RTC_ALM_READ(r2, 0x80247008, 0xffffffffffffffff)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

2.055055636s ago: executing program 5 (id=3991):
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
r0 = getgid()
lchown(0x0, 0x0, r0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x4000)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$ARCH_SET_GS(0x1e, r2, 0x0, 0x1001)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x0, r0, r1, 0xee00, 0x140, 0xc5b9}, 0x0, 0x0, 0xffffffff, 0xc, 0x5, 0xc0e, 0x7, 0x4, 0x1, 0x1, r2, r2})
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00')
fcntl$notify(r3, 0x402, 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x50)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x4, 0x4, 0x13d8, 0xffffffff, 0x1218, 0x1218, 0x1218, 0xfeffffff, 0xffffffff, 0x1308, 0x1308, 0x1308, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x1, './cgroup.cpu/syz0\x00', 0x1fc, {0x8}}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'pim6reg0\x00', {0xf18}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', [0xff, 0x0, 0xffffffff], [0x0, 0x0, 0xff000000, 0xff], 'team0\x00', '\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 'veth1_to_bond\x00', {0xffffffffffff3ebb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x145b)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = syz_io_uring_setup(0x5d6b, &(0x7f0000000240)={0x0, 0x59fc, 0x2000, 0x2, 0xbd7f7fff}, &(0x7f0000000100)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x250838, &(0x7f0000000080)={[{@journal_async_commit}, {@nogrpid}, {@bh}, {@data_ordered}, {@dax}]}, 0x1, 0x51d, &(0x7f0000000200)="$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")
socket$inet6_udp(0xa, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r9, 0x0, 0x7}, 0x18)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x608a022, 0x0, 0x1, 0x0, &(0x7f0000000000))
r10 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r10, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x400000}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r10, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x1}], 0x1}, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x6, 0x0, @fd, 0x7, 0x0, 0x9, 0x6, 0x1})
io_uring_enter(r5, 0x5535, 0x3acd, 0x22, 0x0, 0x0)
r11 = syz_open_procfs(0x0, &(0x7f0000000640)='net/dev_snmp6\x00')
getdents64(r11, 0x0, 0x0)

1.89796459s ago: executing program 5 (id=3992):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) (async)
ioctl$TCFLSH(r0, 0x400455c8, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0xe25f, 0x1000, 0x7, 0x3ca}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xfffffffd, 0x0, 0x4) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r2, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x0, 0x4009010})
io_uring_enter(r2, 0x47f8, 0x1e43, 0x2000000000000000, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1e, 0xb, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) (async)
syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0)
open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
socket$packet(0x11, 0x3, 0x300)
r5 = timerfd_create(0x0, 0x0)
timerfd_settime(r5, 0x3, &(0x7f0000000500)={{0x0, 0x3938700}}, 0x0) (async)
r6 = timerfd_create(0x4, 0x0)
timerfd_settime(r6, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) (async)
memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Ux\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xb9\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x7)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0xfffffffffffffffe}, 0x18)
signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0xe2]}, 0x8)
r9 = socket(0x10, 0x803, 0x0) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r10, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000000208010100000000000000007600000480080001400000007b1c0004800800010003080002400000001005000300060000000900010073797a310000000006000240001800"/89], 0x64}, 0x1, 0x0, 0x0, 0x20044820}, 0x4000)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="000221c880e8fe000000000000000000", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) (async)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x7, 0xc, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3})

1.382212619s ago: executing program 7 (id=3996):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48)
ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r2}, 0x18)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1)
sendfile(r3, r3, 0x0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x17, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0)
r4 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c0, 0x0, 0x2c0, 0x138, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xff, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xf, 0x7b7b, @remote, 0x4e22}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
syz_open_dev$tty1(0xc, 0x4, 0x4)

1.073579108s ago: executing program 1 (id=4000):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000200)='tlb_flush\x00', r1, 0x0, 0x100000004}, 0x18)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0)
ioctl$RTC_ALM_READ(r2, 0x80247008, 0xffffffffffffffff)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

1.027792123s ago: executing program 1 (id=4001):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000740), 0x75, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x19, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
syz_open_dev$sg(0x0, 0x0, 0x20c02)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r7, r3, 0x25, 0x2, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0x3e, &(0x7f0000000740)=ANY=[], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)

1.013836124s ago: executing program 4 (id=3966):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=<r1=>0x0, @ANYRES32=<r2=>0x0, @ANYBLOB="ff020020000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="380100001a000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500020000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffc030000000000008000000000350000020001002000000000000000480003006465666c617465", @ANYRES8=r1], 0x138}}, 0x844)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\a\x00\x00'], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='objagg_obj_put\x00', r3}, 0x18)
syz_clone3(&(0x7f0000000880)={0x2900080, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0x0], 0x1}, 0x58)

909.944064ms ago: executing program 4 (id=4002):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
r2 = socket$netlink(0x10, 0x3, 0xc)
mount$nfs4(&(0x7f00000004c0)='ma\xba%f\xa6c\a#\x90\xac\x82\xce\xbf\x05h \xe1-\xb7;8\xaf\xd9\x00\x00\x00\x00\x00\x00\x00\xd9~cz\xf4\xdb\xb1\x1b\x81\x88\xde\n\xde\x94M$}(V\xc6Xl\x02\xf5\xae\xc6\xbe\xbd~:H\xaf/\xdfSE\xa96\xe7y\xf6\xb1\x82\x11\x15\x94\xe0\xcd\x85\x17\x86\x8f\xaf\x96\x9dd\xf9(j\x8f\xc4\xc0\xd7\xb9(\xea\x87K;\x160z\x12~f}\x9a\xdf\xe1\x91\xe2\xb7d\x11. \xe9\xa9(\xa9&\xc5N\xf6\xb25[j\x924\xc4\xdb\xa3\xc5\x11\az\xa27\x1ew\x18\x81Y\x9f0\x92\x1e\xb9\xab\xb0?\xd6\xd0\xce\xdd\xe8\x8cJV\xe1\x87I\xa53\x14\r\xd5\xda\x96i\xc2\x91\xa7d\xd2&\xfd\x84e\xce\xe7\x1c\x1cZ\xba\xb0\x9d\xed\xc3\x8d\xec\xcf\x8a\xf7\xe6\x02%\x83\xaf\x7f3\x066\xf7T\x13>\xc5^\xa2\x0f9\x91\xf8\x0f\b\xd3\xa1\xf0xT\xb5>\x01%\xc9\x9a\x0e\"\xf9\x16\a\n\xe5]\a(\x93\xf9<\x8e\x81b\xbc~\xf8\xcc\x83b\xf3\xc7\xea\xba\x9a\x86g\x91\xab^K\xa3\xde/\x84Z\xa5\x87\xef{C\xaae%Q\b\xd1j\xfdc87)\x91^\x17', &(0x7f0000000180)='.\x00', 0x0, 0x3201000, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES64=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
fchdir(0xffffffffffffffff)
syslog(0x9, 0x0, 0x0)
bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x8)
bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x8, 0x7fff7ffc}]})
close_range(r6, 0xffffffffffffffff, 0x0)

588.881494ms ago: executing program 1 (id=4003):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r4}, 0x18)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, 0x0, &(0x7f00000001c0)}, 0x20)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000200)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
lsm_get_self_attr(0x64, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='vnet_tx_trigger\x00', r4, 0x0, 0x1}, 0x18)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'sit0\x00'})
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x210, &(0x7f0000000200)="$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")
r6 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000070000008606000000020000e3e8d85fcf918591b506538dae155265e2b9f96a279f1909971a4d6740da1ddc3fef74e7cdf71bb780dfc27bc76ef2ff416f09ba8d6df21d1da1123b484347298977a9c2d3b7af9c4ee02e542d334ef0f5f562021dd6"], 0x18}, 0x0)

564.917407ms ago: executing program 4 (id=4004):
syz_open_dev$tty1(0xc, 0x4, 0x2)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x70bd2d, 0x25dfdbff, {0x2, 0x1f, 0x51, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004011}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000010000000000000007000000a5100000fdffffff95"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x8, &(0x7f0000000040)=""/8, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x94)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x1)
unshare(0x2c060000)
syz_clone(0x48000080, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r9, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010141}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@fadd={0x58, 0x114, 0x6, {{0x3, 0x1e}, &(0x7f00000000c0)=0x3, &(0x7f0000000100)=0x401, 0x80000001, 0x77a, 0xffffffff, 0xa00, 0x7, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x7ff, 0x3}, &(0x7f0000000000)=0x3, &(0x7f0000000240)=0x3, 0x9, 0x3, 0x7, 0x6, 0x20}}], 0xb0, 0x24000004}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffde)

456.291447ms ago: executing program 7 (id=4005):
mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x1c161, 0x2, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000010000104fafffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, 0x0)
r10 = getpid()
tkill(r10, 0x35)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r8, <r11=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000380)='%pB    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r11}, &(0x7f00000004c0), &(0x7f0000000340)='%-010d \x00'}, 0x20)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r13}, 0x10)
r14 = dup(r12)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r14, @ANYBLOB="d55b5f9136c26952d2f95aa6e051d1eff09a4a3cf157da80b9635f80171d1aaeaff99e4c58c25a8c9fea8c1398a49ade806093e189d17a1207d5ba918ee69a14a66c7cdd0de8c5e9d31428ac12b0be2e60056d0c4496", @ANYRESHEX=r14, @ANYBLOB="2c726f6f74636f6e746578743d73797374656d5f752c736d61636b66736861743d410cb300000000000000002c657569643d", @ANYRESDEC=0x0, @ANYBLOB=',k'])
ioctl$TCFLSH(r7, 0x400455c8, 0x0)
syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

365.363226ms ago: executing program 2 (id=4007):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r1=>0x0, 0x34, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000340), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='mm_page_free\x00', r2}, 0x18)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000240)="e30080670000ec67838717bd86dde148f063096244fe42904bcee1", 0x0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x50)
r3 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0)
ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0xd)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x2008098, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x1d3, &(0x7f00000004c0)="$eJzs3L1qFFEUB/CbGE2MJKQStPGijTaDprZQJIK4oKgrfoAwIRNddt0NO1PsisXWVj6HiDZ2gvgCeQu7IIRUqRzRzYeJIY26G8zv18yZ+TNwDgOX4Q7MyuXXz+uLebKYFmF0YiSMXgm9sD4SZsJo2NQLF94/WHt19+Gjm1crlbnxjcsxxukznx6/fHv2c3Hi/ofpj+NheebJyursl+WTy6dWvt17VstjLY/NVhHTON9qFel8I4sLtbyexHi7kaV5FmvNPGvvyBcbraWlbkybC1OTS+0sz2Pa7MZ61o1FKxbtbkyfprVmTJIkTk0G/kT1zXpZhtWyLMvxXijLctgNMWCe/+G2uajfiXEihK+9TrVT7R/7+fUblbmL8aeZ7bvWOp3qka38Uj+PO/OjYXIjn90zPxbOn+vnP7Jrtyq78uNh4d+PDwAAAAAA/6Ukbvl9f39k43TPvF/98n1g1/79WDg9NqAhAAAAgH3l3Rf1tNHI2getGAsHog2FYiDFu3Ag2tguhr0yAQAAf9v2S/+wOwEAAAAAAAAAAAAAAAAAAIDDaxC/Exv2jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+/keAAD///dtbTI=")
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2)
fallocate(r4, 0x0, 0x0, 0x1000f4)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffb}]})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r8}, 0x18)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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")
fadvise64(r5, 0x2, 0x1, 0x3)
sendfile(r4, r4, 0x0, 0x800000a1e)

214.00011ms ago: executing program 2 (id=4008):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f0000000a40)='GPL\x00', 0x4, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

194.583932ms ago: executing program 1 (id=4009):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x3, {{{@in=@private=0xa010100, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x33}, @in6=@remote, {0x80000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0xffff, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x7801, 0x80, 0x6, 0x7, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x66, 0x0, 0x44, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010102}}}})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x24, &(0x7f00000000c0)={0xf813b3c89bb9c002, 0x2, 0x4004, 0x409})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000340)=0x40)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x18}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r8}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000580)={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "5896f3490e67384e18123bc5c4481c106e17c940fd4d423c09b5f397dd06e428", 0x0, 0xffff, 0x9, 0xff}, 0x3c)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {}, {0xcd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xe}, {0x0, 0xfffffffa}, {}, {}, {}, {0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x3, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xec5}], [{}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x6237f348ff2383ba}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)

183.054063ms ago: executing program 2 (id=4010):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000200)='tlb_flush\x00', r1, 0x0, 0x100000004}, 0x18)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0)
ioctl$RTC_ALM_READ(r2, 0x80247008, 0xffffffffffffffff)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

165.064295ms ago: executing program 2 (id=4011):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ffffff, {0x0, 0x0, 0x0, r1, {0x7, 0x9}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x12, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1871c5ea4af294633235c4660000fc80e1f76c1cadd00800"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r1, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000380)='ata_bmdma_status\x00', r4}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c0000007866726da61f22000000000c0002800800020001000000140003007866726d300000000000000000000c00f365fbb8af8d46aa5d872018c7aa467de904ace4425798a11e51c3d5df7dd3a6a906e2272a9d492e80d0da5c64e29428a64962d4d54f08"], 0x50}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x8804, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000540)=[{0x28, 0x0, 0x81, 0xfffff024}, {0x6, 0x4, 0x9, 0x8}]}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000a58533620eb2d99ffd480ef6ec279700de5adef08b38dd904462e83696ebecd4bcbac427ce857d30"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0xa, 0x300)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x8001, 0x6, 0x7, 0x6}, {0x41f, 0x6, 0x6, 0x3}, {0x7, 0x28, 0x3, 0x6}, {0x7, 0x4, 0x1, 0x8}, {0x81, 0x0, 0x2, 0x43}, {0x6, 0x9f, 0x7, 0xfffffffe}, {0x6, 0x2, 0x9, 0x2}, {0x8000, 0x2, 0x2, 0x2}]})

78.145293ms ago: executing program 1 (id=4012):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x800)
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)=0x7ffffffc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="188c3ef61f6e070200000000005400000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
ioctl$EVIOCGRAB(r2, 0x40044590, 0x0)

75.963083ms ago: executing program 1 (id=4013):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) (async, rerun: 64)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2b5, &(0x7f00000008c0)="$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") (rerun: 64)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12)
writev(r2, &(0x7f0000001000)=[{&(0x7f00000000c0)="76b0d8e7", 0x4}], 0x1) (async, rerun: 32)
sendfile(r2, r1, 0x0, 0x7fffeff9) (rerun: 32)

5.82115ms ago: executing program 2 (id=4014):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r3}, 0x18)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x5, &(0x7f00000001c0)={0x300, 0x0, 0x0, 0x200})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000000000002e689903f9d7e91a9402ef3fab9ad7a60ae6ee3272ed3cc21cc7c268f8c302d3bd92b0fd31f64468988241b2a71677ec180b784ce2206bad6bd3010ece54efa2faa732be3631c9dbc4e6a713e466c5a2563a9dd0113cb985d389bfd644deb8d5d0c1014e9f63407e161b2891e7000"/125, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r6}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000a00)="39e8dcfa461ac09e8a722e34d7e498893ffa560200133b06000000000000001770faf047145bc79e0b9971bcbedac0eeaf3300000000000000000000cab0312cf6b68ced648cdb670a6bf4d650ac2b5546216e3ce9", 0x55}], 0x1)
r8 = syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41)
setreuid(0x0, 0xee00)
ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r8])
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f00000003c0), &(0x7f0000000380)=r4}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$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")

0s ago: executing program 2 (id=4015):
pipe2(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
io_setup(0x6, &(0x7f00000000c0)=<r2=>0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='9', 0x20000101}])
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
sendto$inet6(r4, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c)
write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file3'}, 0xb)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000003c0)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0x80000000003fc, 0x9, 0x3, 0x7f, 0x29]}, &(0x7f0000000000)=0x78)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x121404a, &(0x7f0000001600)={[{@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x4ab}}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@discard}, {@dioread_lock}]}, 0x3, 0x572, &(0x7f0000000c40)="$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")
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x18)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDDELIO(r6, 0x4b34, 0x3bf)
ioctl$KDDISABIO(r6, 0x4b37)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0xce342, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
r7 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280))
io_uring_enter(r7, 0x15f1, 0xff9c, 0x69, 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

ed allmulticast mode
[  248.753797][T15244] bridge_slave_1: entered promiscuous mode
[  248.782555][T15380] loop6: detected capacity change from 0 to 512
[  248.809996][T15244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.824649][T15244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  248.836365][T15380] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.864086][T15380] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.891040][T15244] team0: Port device team_slave_0 added
[  248.974579][T15244] team0: Port device team_slave_1 added
[  249.055137][T15397] loop6: detected capacity change from 0 to 1024
[  249.077663][T15399] FAULT_INJECTION: forcing a failure.
[  249.077663][T15399] name failslab, interval 1, probability 0, space 0, times 0
[  249.090303][T15399] CPU: 0 UID: 0 PID: 15399 Comm: syz.1.3261 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  249.090338][T15399] Tainted: [W]=WARN
[  249.090344][T15399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  249.090402][T15399] Call Trace:
[  249.090410][T15399]  <TASK>
[  249.090419][T15399]  __dump_stack+0x1d/0x30
[  249.090448][T15399]  dump_stack_lvl+0xe8/0x140
[  249.090468][T15399]  dump_stack+0x15/0x1b
[  249.090486][T15399]  should_fail_ex+0x265/0x280
[  249.090524][T15399]  should_failslab+0x8c/0xb0
[  249.090630][T15399]  kmem_cache_alloc_noprof+0x69/0x4b0
[  249.090660][T15399]  ? skb_clone+0x151/0x1f0
[  249.090697][T15399]  skb_clone+0x151/0x1f0
[  249.090793][T15399]  packet_rcv+0x3c4/0xab0
[  249.090813][T15399]  ? __pfx_packet_rcv+0x10/0x10
[  249.090834][T15399]  deliver_skb+0xee/0x160
[  249.090855][T15399]  __netif_receive_skb_core+0x6e2/0x1920
[  249.090900][T15399]  ? __list_del_entry_valid_or_report+0x65/0x130
[  249.090941][T15399]  ? __rmqueue_pcplist+0x9d2/0xbd0
[  249.090975][T15399]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[  249.091061][T15399]  ? get_partial_node+0x33e/0x390
[  249.091089][T15399]  ? freeze_slab+0x79/0xb0
[  249.091157][T15399]  __netif_receive_skb_list_core+0x113/0x500
[  249.091192][T15399]  netif_receive_skb_list_internal+0x487/0x600
[  249.091282][T15399]  netif_receive_skb_list+0x31/0x200
[  249.091324][T15399]  bpf_test_run_xdp_live+0xee1/0x11d0
[  249.091430][T15399]  ? cpus_read_unlock+0x6e/0xc0
[  249.091458][T15399]  ? __static_call_update+0x343/0x380
[  249.091477][T15399]  ? mutex_unlock+0x4f/0x90
[  249.091501][T15399]  ? bpf_test_run_xdp_live+0x354/0x11d0
[  249.091642][T15399]  bpf_prog_test_run_xdp+0x525/0x970
[  249.091670][T15399]  ? _kstrtol+0x51/0x90
[  249.091737][T15399]  ? __rcu_read_unlock+0x4f/0x70
[  249.091759][T15399]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  249.091786][T15399]  bpf_prog_test_run+0x22a/0x390
[  249.091808][T15399]  __sys_bpf+0x4c0/0x7c0
[  249.091907][T15399]  __x64_sys_bpf+0x41/0x50
[  249.091936][T15399]  x64_sys_call+0x28e1/0x3000
[  249.092032][T15399]  do_syscall_64+0xd8/0x2c0
[  249.092063][T15399]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.092138][T15399] RIP: 0033:0x7f994568f749
[  249.092158][T15399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  249.092174][T15399] RSP: 002b:00007f99440f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  249.092190][T15399] RAX: ffffffffffffffda RBX: 00007f99458e5fa0 RCX: 00007f994568f749
[  249.092222][T15399] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  249.092233][T15399] RBP: 00007f99440f7090 R08: 0000000000000000 R09: 0000000000000000
[  249.092244][T15399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  249.092254][T15399] R13: 00007f99458e6038 R14: 00007f99458e5fa0 R15: 00007ffc58599e78
[  249.092274][T15399]  </TASK>
[  249.377911][T15397] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  249.386140][T15244] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.397170][T15244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  249.423173][T15244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.445256][T15244] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.452332][T15244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  249.478369][T15244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  249.520278][T15244] hsr_slave_0: entered promiscuous mode
[  249.526508][T15244] hsr_slave_1: entered promiscuous mode
[  249.532648][T15244] debugfs: 'hsr0' already exists in 'hsr'
[  249.538430][T15244] Cannot create hsr debugfs directory
[  249.558510][T14774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.595599][T15419] 9pnet_fd: Insufficient options for proto=fd
[  249.603355][T15420] loop6: detected capacity change from 0 to 1024
[  249.617400][T15420] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  249.643037][T15424] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.704080][T15202] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm kworker/u8:51: lblock 0 mapped to illegal pblock 0 (length 6)
[  249.723238][T15431] loop8: detected capacity change from 0 to 1024
[  249.744366][T15431] EXT4-fs: inline encryption not supported
[  249.750447][T15431] EXT4-fs: Ignoring removed i_version option
[  249.760485][T15202] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  249.772952][T15202] EXT4-fs (loop6): This should not happen!! Data will be lost
[  249.772952][T15202] 
[  249.795981][T15431] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  249.809299][T15431] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 2: comm syz.8.3270: lblock 2 mapped to illegal pblock 2 (length 1)
[  249.824332][T15202] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:51: lblock 8 mapped to illegal pblock 8 (length 8)
[  249.839002][T15435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3273'.
[  249.848228][T15202] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  249.860532][T15202] EXT4-fs (loop6): This should not happen!! Data will be lost
[  249.860532][T15202] 
[  249.870616][T15431] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 48: comm syz.8.3270: lblock 0 mapped to illegal pblock 48 (length 1)
[  249.894164][T15431] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.3270: Failed to acquire dquot type 0
[  249.906854][T14774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  249.918959][T15431] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  249.935677][T15431] EXT4-fs error (device loop8): ext4_evict_inode:253: inode #11: comm syz.8.3270: mark_inode_dirty error
[  249.935841][T15431] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  249.935873][T15431] EXT4-fs (loop8): 1 orphan inode deleted
[  249.963592][ T6314] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1)
[  249.966081][T15431] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.015662][ T6314] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:23: Failed to release dquot type 0
[  250.015674][T15431] EXT4-fs error (device loop8): __ext4_get_inode_loc:4830: comm syz.8.3270: Invalid inode table block 1 in block_group 0
[  250.042604][T15244] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  250.056867][T15244] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  250.070492][T15244] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  250.083917][T15431] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  250.084277][T15447] loop6: detected capacity change from 0 to 1024
[  250.104426][T15244] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  250.125600][T15447] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.158605][ T8655] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.171896][ T6314] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1)
[  250.207100][ T6314] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:23: Failed to release dquot type 0
[  250.227663][T15449] ip6_vti0 speed is unknown, defaulting to 1000
[  250.234860][ T8655] EXT4-fs error (device loop8): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0
[  250.248469][T14774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.271107][T15244] 8021q: adding VLAN 0 to HW filter on device bond0
[  250.278321][ T8655] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  250.303335][ T8655] EXT4-fs error (device loop8): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error
[  250.319332][T15244] 8021q: adding VLAN 0 to HW filter on device team0
[  250.329649][ T6314] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.335227][T15466] loop6: detected capacity change from 0 to 1024
[  250.336820][ T6314] bridge0: port 1(bridge_slave_0) entered forwarding state
[  250.363178][T15244] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  250.364098][T15466] EXT4-fs: inline encryption not supported
[  250.373689][T15244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  250.379446][T15466] EXT4-fs: Ignoring removed orlov option
[  250.400704][T15466] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  250.412691][ T6314] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.419926][ T6314] bridge0: port 2(bridge_slave_1) entered forwarding state
[  250.439994][T15466] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  250.450311][T15466] System zones: 0-1, 3-12
[  250.455384][T15466] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.473187][T15466] netlink: 16 bytes leftover after parsing attributes in process `+}[@'.
[  250.487880][T15470] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3278'.
[  250.489248][T15475] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3280'.
[  250.510755][T15466] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28
[  250.523245][T15466] EXT4-fs (loop6): This should not happen!! Data will be lost
[  250.523245][T15466] 
[  250.532941][T15466] EXT4-fs (loop6): Total free blocks count 0
[  250.539177][T15466] EXT4-fs (loop6): Free/Dirty block details
[  250.545263][T15466] EXT4-fs (loop6): free_blocks=0
[  250.550373][T15466] EXT4-fs (loop6): dirty_blocks=0
[  250.555484][T15466] EXT4-fs (loop6): Block reservation details
[  250.561623][T15466] EXT4-fs (loop6): i_reserved_data_blocks=0
[  250.601497][T15244] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.617243][T15482] tmpfs: Bad value for 'nr_inodes'
[  250.637168][T14774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.728570][T15499] loop8: detected capacity change from 0 to 128
[  250.746600][T15499] veth0: entered promiscuous mode
[  250.764138][ T3485] tipc: Node number set to 4269801490
[  250.771028][T15244] veth0_vlan: entered promiscuous mode
[  250.791657][T15498] veth0: left promiscuous mode
[  250.802445][T15244] veth1_vlan: entered promiscuous mode
[  250.818871][T15505] loop6: detected capacity change from 0 to 1024
[  250.845436][T15505] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.872765][T15244] veth0_macvtap: entered promiscuous mode
[  250.892349][T15244] veth1_macvtap: entered promiscuous mode
[  250.902111][T14774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.921409][T15244] batman_adv: batadv0: Interface activated: batadv_slave_0
[  250.970027][T15244] batman_adv: batadv0: Interface activated: batadv_slave_1
[  250.982341][T15210] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.023972][T15210] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.060319][T15213] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.082056][T15208] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.095876][T15521] EXT4-fs (loop8): too many log groups per flexible block group
[  251.108979][T15521] EXT4-fs (loop8): failed to initialize mballoc (-12)
[  251.116093][T15521] EXT4-fs (loop8): mount failed
[  251.155527][T15531] netlink: 'syz.3.3215': attribute type 10 has an invalid length.
[  251.185796][T15531] 8021q: adding VLAN 0 to HW filter on device batadv0
[  251.194774][T15531] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  251.353682][T15544] netlink: 'syz.3.3301': attribute type 29 has an invalid length.
[  251.417400][   T29] kauditd_printk_skb: 392 callbacks suppressed
[  251.417413][   T29] audit: type=1326 audit(251.393:23512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15554 comm="syz.8.3304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0bd9ff749 code=0x7ffc0000
[  251.500227][   T29] audit: type=1326 audit(251.393:23513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15554 comm="syz.8.3304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0bd9ff749 code=0x7ffc0000
[  251.523388][   T29] audit: type=1326 audit(251.393:23514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15554 comm="syz.8.3304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0bd9ff749 code=0x7ffc0000
[  251.546539][   T29] audit: type=1326 audit(251.393:23515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15554 comm="syz.8.3304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0bd9ff749 code=0x7ffc0000
[  251.569824][   T29] audit: type=1326 audit(251.393:23516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15554 comm="syz.8.3304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0bd9ff749 code=0x7ffc0000
[  251.592867][   T29] audit: type=1326 audit(251.393:23517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15554 comm="syz.8.3304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0bd9ff749 code=0x7ffc0000
[  251.616300][   T29] audit: type=1326 audit(251.393:23518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15554 comm="syz.8.3304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0bd9ff749 code=0x7ffc0000
[  251.639293][   T29] audit: type=1326 audit(251.393:23519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15554 comm="syz.8.3304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa0bd9ff749 code=0x7ffc0000
[  251.662353][   T29] audit: type=1326 audit(251.393:23520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15554 comm="syz.8.3304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0bd9ff749 code=0x7ffc0000
[  251.685438][   T29] audit: type=1326 audit(251.393:23521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15554 comm="syz.8.3304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fa0bd9ff749 code=0x7ffc0000
[  251.894974][T15579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.919896][T15579] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.965316][T15578] Alternate GPT is invalid, using primary GPT.
[  251.971691][T15578]  loop6: p1 p2 p3
[  252.036948][T15592] __nla_validate_parse: 6 callbacks suppressed
[  252.036989][T15592] netlink: 4236 bytes leftover after parsing attributes in process `syz.3.3316'.
[  252.044520][T15589] bridge0: port 1(macvtap1) entered blocking state
[  252.058872][T15589] bridge0: port 1(macvtap1) entered disabled state
[  252.098582][T15589] macvtap1: entered allmulticast mode
[  252.104081][T15589] bridge0: entered allmulticast mode
[  252.114845][T15589] macvtap1: left allmulticast mode
[  252.120135][T15589] bridge0: left allmulticast mode
[  252.141407][T15594] ip6_vti0 speed is unknown, defaulting to 1000
[  252.154728][T15592] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  252.281911][T15603] bridge0: port 3(ipvlan2) entered blocking state
[  252.288445][T15603] bridge0: port 3(ipvlan2) entered disabled state
[  252.296182][T15603] ipvlan2: entered allmulticast mode
[  252.301515][T15603] bridge0: entered allmulticast mode
[  252.322417][T15603] ipvlan2: left allmulticast mode
[  252.327611][T15603] bridge0: left allmulticast mode
[  252.384905][T15606] EXT4-fs: Ignoring removed orlov option
[  252.410439][T15606] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c118, mo2=0102]
[  252.427766][T15606] System zones: 0-1, 3-12
[  252.432929][T15606] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.477353][T15244] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  252.599844][T15640] vfat: Unknown parameter '¾Éoª ò¾PlÛ�ÊC|.±¦¨k0¾“9)Sö–ên&î¸ù;èÌ‘�xJÊ–V†”-(ñ™K¼XIT.¹ZsÜÑ:bžn?@ ­BÀà'
[  252.633001][T15632] syz.8.3327: attempt to access beyond end of device
[  252.633001][T15632] loop8: rw=0, sector=121, nr_sectors = 920 limit=128
[  252.781369][T15651] syz.8.3327: attempt to access beyond end of device
[  252.781369][T15651] loop8: rw=0, sector=121, nr_sectors = 120 limit=128
[  253.327620][ T6314] kworker/u8:23: attempt to access beyond end of device
[  253.327620][ T6314] loop8: rw=1, sector=241, nr_sectors = 800 limit=128
[  253.386943][T15731] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  253.402626][T15731] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #12: comm syz.8.3338: corrupted in-inode xattr: invalid size in ea xattr
[  253.417308][T15742] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 5, id = 0
[  253.417402][T15739] IPVS: stopping backup sync thread 15742 ...
[  253.456564][ T8655] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  253.484346][T15743] tmpfs: Bad value for 'size'
[  253.525044][T15747] random: crng reseeded on system resumption
[  253.704719][T15745] ip6_vti0 speed is unknown, defaulting to 1000
[  253.827205][T15764] set_capacity_and_notify: 7 callbacks suppressed
[  253.827226][T15764] loop6: detected capacity change from 0 to 512
[  253.841217][T15764] EXT4-fs: Ignoring removed nomblk_io_submit option
[  253.851853][T15764] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  253.884099][T15760] ip6_vti0 speed is unknown, defaulting to 1000
[  254.816343][T15793] Falling back ldisc for ptm0.
[  254.876696][T15795] loop8: detected capacity change from 0 to 1024
[  254.944115][T15800] netlink: 240 bytes leftover after parsing attributes in process `syz.6.3354'.
[  254.954008][T15795] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.988590][ T8655] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.154101][T15811] loop6: detected capacity change from 0 to 512
[  255.172785][T15811] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  255.203328][T15811] EXT4-fs (loop6): 1 truncate cleaned up
[  255.222354][T15811] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.243236][T15811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.276534][T15811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.360608][T15809] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.391127][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3362'.
[  255.404787][T15821] openvswitch: netlink: Missing key (keys=40, expected=100)
[  255.481357][T15830] loop8: detected capacity change from 0 to 512
[  255.492657][T15830] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  255.513365][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3367'.
[  255.607297][T15830] EXT4-fs (loop8): 1 truncate cleaned up
[  255.613551][T15830] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.343043][T15809] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.224395][T15739] Set syz1 is full, maxelem 65536 reached
[  257.292162][T15862] loop3: detected capacity change from 0 to 512
[  257.299034][T15862] ext4: Bad value for 'max_dir_size_kb'
[  257.333245][   T29] kauditd_printk_skb: 836 callbacks suppressed
[  257.333259][   T29] audit: type=1326 audit(257.303:24358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.1.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994568f749 code=0x7ffc0000
[  257.369424][ T8655] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.430237][   T29] audit: type=1326 audit(257.343:24359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.1.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f994568f749 code=0x7ffc0000
[  257.453360][   T29] audit: type=1326 audit(257.343:24360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.1.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994568f749 code=0x7ffc0000
[  257.476397][   T29] audit: type=1326 audit(257.343:24361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.1.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994568f749 code=0x7ffc0000
[  257.499616][   T29] audit: type=1326 audit(257.343:24362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.1.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f994568f749 code=0x7ffc0000
[  257.522772][   T29] audit: type=1326 audit(257.343:24363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.1.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994568f749 code=0x7ffc0000
[  257.545971][   T29] audit: type=1326 audit(257.343:24364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.1.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f994568f749 code=0x7ffc0000
[  257.569220][   T29] audit: type=1326 audit(257.343:24365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.1.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994568f749 code=0x7ffc0000
[  257.592470][   T29] audit: type=1326 audit(257.343:24366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.1.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f994568f749 code=0x7ffc0000
[  257.615688][   T29] audit: type=1326 audit(257.343:24367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.1.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994568f749 code=0x7ffc0000
[  257.639763][T15871] loop8: detected capacity change from 0 to 2048
[  257.654750][T15876] loop3: detected capacity change from 0 to 1024
[  257.665557][T15871] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.673201][T15809] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.680614][T15871] EXT4-fs error (device loop8): ext4_find_extent:939: inode #2: comm syz.8.3378: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  257.693126][T15876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.729879][ T8655] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.744981][T15873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3379'.
[  257.775480][T15244] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.793555][T15883] veth0_to_bridge: entered promiscuous mode
[  257.805384][T15885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3382'.
[  257.816147][T15885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3382'.
[  257.838045][T15885] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3382'.
[  257.863416][T15882] veth0_to_bridge: left promiscuous mode
[  257.871859][T15888] loop8: detected capacity change from 0 to 512
[  257.972627][T15809] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.119880][T15909] loop8: detected capacity change from 0 to 8192
[  258.134644][T15909] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1)
[  258.142535][T15909] FAT-fs (loop8): Filesystem has been set read-only
[  258.213489][T15916] ip6_vti0 speed is unknown, defaulting to 1000
[  258.306001][T15923] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  258.320697][T15923] vhci_hcd vhci_hcd.2: invalid port number 96
[  258.326829][T15923] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[  258.383157][T15199] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.422876][T15199] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.437041][T15936] netlink: '+}[@': attribute type 10 has an invalid length.
[  258.460767][T15936] team0: Port device dummy0 added
[  258.466135][T15199] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.516808][ T7412] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.545509][T14774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.918424][T15945] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3400'.
[  259.005199][T15949] ip6_vti0 speed is unknown, defaulting to 1000
[  259.011989][T15951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3403'.
[  259.079004][T15954] ip6_vti0 speed is unknown, defaulting to 1000
[  259.153228][T15961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3406'.
[  259.251288][T15970] netlink: 'syz.1.3407': attribute type 21 has an invalid length.
[  259.251309][T15970] IPv6: NLM_F_CREATE should be specified when creating new route
[  259.251337][T15970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  259.251345][T15970] IPv6: NLM_F_CREATE should be set when creating new route
[  259.251359][T15970] IPv6: NLM_F_CREATE should be set when creating new route
[  259.251372][T15970] IPv6: NLM_F_CREATE should be set when creating new route
[  259.590642][T15992] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  259.820777][T15995] loop3: detected capacity change from 0 to 8192
[  259.855515][T15999] loop6: detected capacity change from 0 to 164
[  259.863372][T15999] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  259.865756][T15999] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  259.865977][T15999] Symlink component flag not implemented
[  259.865984][T15999] Symlink component flag not implemented
[  259.866418][T15999] Symlink component flag not implemented (7)
[  259.866432][T15999] Symlink component flag not implemented (116)
[  259.880984][T15999] netlink: 8 bytes leftover after parsing attributes in process `'.
[  259.881957][T15999] netlink: 8 bytes leftover after parsing attributes in process `'.
[  259.882354][T15999] netlink: 8 bytes leftover after parsing attributes in process `'.
[  259.952373][T15999] infiniband syz!: set active
[  259.952394][T15999] infiniband syz!: added team_slave_0
[  259.983663][T15999] RDS/IB: syz!: added
[  259.983876][T15999] smc: adding ib device syz! with port count 1
[  259.983893][T15999] smc:    ib device syz! port 1 has no pnetid
[  260.373994][T12779] Bluetooth: hci0: command 0x1003 tx timeout
[  260.380056][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  260.594175][T16034] xt_CT: You must specify a L4 protocol and not use inversions on it
[  260.636393][T16053] ip6_vti0 speed is unknown, defaulting to 1000
[  260.650365][T16055] loop6: detected capacity change from 0 to 4096
[  260.665506][T16055] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.697293][T14774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.810911][T16063] loop6: detected capacity change from 0 to 512
[  260.819232][T16063] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm wg1: corrupted inode contents
[  260.819404][T16063] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #15: comm wg1: mark_inode_dirty error
[  260.819521][T16063] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm wg1: corrupted inode contents
[  260.819853][T16063] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3000: inode #15: comm wg1: mark_inode_dirty error
[  260.820077][T16063] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3003: inode #15: comm wg1: mark inode dirty (error -117)
[  260.831690][T16063] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117)
[  260.831750][T16063] EXT4-fs (loop6): 1 orphan inode deleted
[  260.833000][T16063] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.928492][T14774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.020491][T16071] loop8: detected capacity change from 0 to 256
[  261.038830][T16075] loop3: detected capacity change from 0 to 256
[  261.120906][T16079] loop8: detected capacity change from 0 to 512
[  261.121194][T16079] EXT4-fs: Ignoring removed i_version option
[  261.121222][T16079] EXT4-fs: Ignoring removed bh option
[  261.157020][T16079] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  261.237402][T16089] veth0_to_batadv: entered promiscuous mode
[  261.266049][T16089] macvtap1: entered allmulticast mode
[  261.271482][T16089] veth0_to_batadv: entered allmulticast mode
[  261.295116][ T8655] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.296970][T16089] batman_adv: batadv0: Adding interface: macvtap1
[  261.296982][T16089] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  261.297010][T16089] batman_adv: batadv0: Interface activated: macvtap1
[  261.412863][T16107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16107 comm=syz.8.3451
[  261.596608][T16124] netlink: 'syz.6.3456': attribute type 2 has an invalid length.
[  261.604420][T16124] netlink: 'syz.6.3456': attribute type 8 has an invalid length.
[  262.314893][T16179] dvmrp1: entered allmulticast mode
[  262.325300][T16177] dvmrp1: left allmulticast mode
[  262.395444][T16183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=16183 comm=syz.3.3469
[  262.457149][T16189] loop6: detected capacity change from 0 to 512
[  262.466084][T16189] EXT4-fs: Ignoring removed mblk_io_submit option
[  262.472968][T16189] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  262.486035][T16189] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3471: bad orphan inode 16
[  262.496795][T16188] loop8: detected capacity change from 0 to 512
[  262.514538][T16188] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  262.524693][T16189] ext4_test_bit(bit=15, block=4) = 0
[  262.530008][T16189] EXT4-fs (loop6): 1 orphan inode deleted
[  262.536137][   T29] kauditd_printk_skb: 994 callbacks suppressed
[  262.536150][   T29] audit: type=1400 audit(262.513:25362): avc:  denied  { create } for  pid=16193 comm="syz.1.3473" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[  262.564432][T16189] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.578782][T16189] EXT4-fs error (device loop6): __ext4_new_inode:1073: comm syz.6.3471: reserved inode found cleared - inode=9
[  262.593123][T16196] netlink: 'syz.3.3474': attribute type 4 has an invalid length.
[  262.602592][T16188] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  262.604155][T16196] netlink: 'syz.3.3474': attribute type 4 has an invalid length.
[  262.633976][T16188] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3472: bg 0: block 248: padding at end of block bitmap is not set
[  262.650741][T16188] Quota error (device loop8): write_blk: dquota write failed
[  262.652447][T16196] bridge0: entered promiscuous mode
[  262.658266][T16188] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[  262.673327][T16188] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.3472: Failed to acquire dquot type 1
[  262.678772][T14774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.687355][T16188] EXT4-fs (loop8): 1 truncate cleaned up
[  262.700177][T16188] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  262.700311][T16200] ip6_vti0 speed is unknown, defaulting to 1000
[  262.720408][T16196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16196 comm=syz.3.3474
[  262.743839][ T8655] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  262.773146][T16206] loop8: detected capacity change from 0 to 1024
[  262.798338][T16206] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.833483][ T8655] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.865047][   T29] audit: type=1400 audit(262.843:25363): avc:  denied  { bind } for  pid=16215 comm="syz.8.3480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  262.905740][T16216] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.932357][T16222] __nla_validate_parse: 11 callbacks suppressed
[  262.932371][T16222] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3482'.
[  262.958166][T16216] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3480'.
[  262.978567][ T8655] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.043030][   T29] audit: type=1400 audit(263.003:25364): avc:  denied  { ioctl } for  pid=16231 comm="syz.6.3486" path="socket:[54346]" dev="sockfs" ino=54346 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  263.067557][   T29] audit: type=1400 audit(263.003:25365): avc:  denied  { accept } for  pid=16231 comm="syz.6.3486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  263.088920][   T29] audit: type=1400 audit(263.063:25366): avc:  denied  { read } for  pid=16231 comm="syz.6.3486" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  263.111862][   T29] audit: type=1400 audit(263.063:25367): avc:  denied  { open } for  pid=16231 comm="syz.6.3486" path="/dev/usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  263.162913][T16232] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  263.213221][T16246] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.264880][T16232] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  263.300400][T14774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.336388][T16253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3493'.
[  263.476192][T16256] ip6_vti0 speed is unknown, defaulting to 1000
[  263.495547][T16262] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  263.504907][T16262] EXT4-fs (loop3): orphan cleanup on readonly fs
[  263.512669][T16262] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.3495: corrupted inode contents
[  263.567383][T16262] EXT4-fs (loop3): Remounting filesystem read-only
[  263.585284][   T29] audit: type=1326 audit(263.433:25368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16261 comm="syz.3.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2a6ef749 code=0x7ffc0000
[  263.608417][   T29] audit: type=1326 audit(263.433:25369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16261 comm="syz.3.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f2a6ef749 code=0x7ffc0000
[  263.617441][T16262] EXT4-fs (loop3): 1 truncate cleaned up
[  263.634085][T15205] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  263.647673][T15205] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  263.682142][T15205] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  263.704886][T16262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  263.796608][T16280] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3501'.
[  263.807779][T15244] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.834312][T16280] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.209567][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3508'.
[  264.233032][T16312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3508'.
[  264.315815][T16314] ip6_vti0 speed is unknown, defaulting to 1000
[  264.584640][T16316] netlink: 'syz.2.3507': attribute type 13 has an invalid length.
[  264.831728][T16313] netlink: 'syz.6.3503': attribute type 10 has an invalid length.
[  264.865505][ T8655] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.953609][T16325] set_capacity_and_notify: 5 callbacks suppressed
[  265.953628][T16325] loop8: detected capacity change from 0 to 164
[  266.244995][T16325] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  266.456736][T16326] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  266.607337][T16313] hsr0: entered allmulticast mode
[  266.612491][T16313] hsr_slave_0: entered allmulticast mode
[  266.618192][T16313] hsr_slave_1: entered allmulticast mode
[  266.651222][T16340] loop8: detected capacity change from 0 to 1024
[  266.661876][T16342] loop3: detected capacity change from 0 to 128
[  266.674090][T16313] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  266.691721][T16340] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.705707][T16313] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  266.718176][T16313] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  266.726029][ T7419] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.741935][T16350] bridge_slave_1: default FDB implementation only supports local addresses
[  266.754021][ T7419] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.768283][ T8655] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.787717][ T7419] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.822642][ T7419] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.835797][T16344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3510'.
[  266.850774][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3522'.
[  266.859722][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3522'.
[  266.889562][T16365] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3522'.
[  266.898881][T16363] loop3: detected capacity change from 0 to 2048
[  266.932471][T16369] loop8: detected capacity change from 0 to 128
[  266.940422][T16369] EXT4-fs: Ignoring removed nobh option
[  266.949199][T16363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  266.952559][T16369] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  266.999933][T16363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  267.066548][ T8655] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  267.111456][T16389] netlink: 'syz.8.3528': attribute type 3 has an invalid length.
[  267.120305][T16389] random: crng reseeded on system resumption
[  267.287675][T16415] ip6_vti0 speed is unknown, defaulting to 1000
[  267.607375][T16433] loop8: detected capacity change from 0 to 1024
[  267.627031][T16433] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  267.673580][ T8655] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.712179][T16441] x_tables: duplicate underflow at hook 3
[  267.728307][   T29] kauditd_printk_skb: 356 callbacks suppressed
[  267.728322][   T29] audit: type=1400 audit(267.703:25720): avc:  denied  { getopt } for  pid=16440 comm="syz.8.3542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  267.771698][   T29] audit: type=1400 audit(267.733:25721): avc:  denied  { map } for  pid=16440 comm="syz.8.3542" path="socket:[54815]" dev="sockfs" ino=54815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  267.794605][   T29] audit: type=1400 audit(267.733:25722): avc:  denied  { accept } for  pid=16440 comm="syz.8.3542" path="socket:[54815]" dev="sockfs" ino=54815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  267.824434][   T29] audit: type=1326 audit(267.803:25723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16445 comm="syz.8.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0bd9ff749 code=0x7ffc0000
[  267.855960][   T29] audit: type=1326 audit(267.823:25724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16445 comm="syz.8.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0bd9ff749 code=0x7ffc0000
[  267.879025][   T29] audit: type=1326 audit(267.823:25725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16445 comm="syz.8.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0bd9ff749 code=0x7ffc0000
[  267.902145][   T29] audit: type=1326 audit(267.823:25726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16445 comm="syz.8.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0bd9ff749 code=0x7ffc0000
[  267.925238][   T29] audit: type=1326 audit(267.823:25727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16445 comm="syz.8.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa0bd9ff749 code=0x7ffc0000
[  267.948225][   T29] audit: type=1326 audit(267.823:25728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16445 comm="syz.8.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0bd9ff749 code=0x7ffc0000
[  267.971355][   T29] audit: type=1326 audit(267.823:25729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16445 comm="syz.8.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0bd9ff749 code=0x7ffc0000
[  267.997645][T16446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16446 comm=syz.8.3543
[  268.029992][T16448] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3544'.
[  268.039067][T16448] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3544'.
[  268.049728][T16449] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3544'.
[  268.058789][T16449] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3544'.
[  268.081652][T16452] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  268.107137][T16454] loop8: detected capacity change from 0 to 1024
[  268.110537][T16448] program syz.1.3544 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  268.115051][T16454] EXT4-fs: Ignoring removed orlov option
[  268.137522][T16454] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.481158][ T8655] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.572709][T16486] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  268.617858][T16501] loop3: detected capacity change from 0 to 1024
[  268.637312][T16501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.667249][T15244] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.683305][T16516] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3568'.
[  268.693219][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3568'.
[  268.702800][T16514] loop8: detected capacity change from 0 to 2048
[  268.716278][T16520] SET target dimension over the limit!
[  268.731544][T16514] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.756034][T16516] loop6: detected capacity change from 0 to 764
[  268.767289][T16514] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.773584][T16528] ip6gretap0: entered allmulticast mode
[  268.784498][T16528] vfat: Unknown parameter ''
[  268.792563][T16527] ip6gretap0: left allmulticast mode
[  268.820944][T16530] EXT4-fs (loop6): corrupt root inode, run e2fsck
[  268.827963][T16530] EXT4-fs (loop6): mount failed
[  268.853890][T16530] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3572'.
[  268.999720][ T6315] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.059661][ T6315] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.128270][ T6315] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.151809][T16537] ip6_vti0 speed is unknown, defaulting to 1000
[  269.198388][ T6315] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.289207][T16537] chnl_net:caif_netlink_parms(): no params data found
[  269.341848][ T6315] bridge_slave_1: left allmulticast mode
[  269.347627][ T6315] bridge_slave_1: left promiscuous mode
[  269.353426][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.362103][ T6315] bridge_slave_0: left allmulticast mode
[  269.367834][ T6315] bridge_slave_0: left promiscuous mode
[  269.373517][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.488649][T16552] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3577'.
[  269.509085][T16559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3579'.
[  269.518155][T16559] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3579'.
[  269.567171][ T6315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  269.583917][ T6315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  269.600800][ T6315] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  269.611389][ T6315] bond0 (unregistering): Released all slaves
[  269.684097][T16537] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.691210][T16537] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.748791][T16537] bridge_slave_0: entered allmulticast mode
[  269.761696][T16573] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.3582: Parent and EA inode have the same ino 15
[  269.792710][T16537] bridge_slave_0: entered promiscuous mode
[  269.820824][T16537] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.828106][T16537] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.844059][T16573] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.3582: Parent and EA inode have the same ino 15
[  269.889171][T16573] EXT4-fs (loop6): 1 orphan inode deleted
[  269.899472][T16537] bridge_slave_1: entered allmulticast mode
[  269.910600][T16573] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.915229][T16537] bridge_slave_1: entered promiscuous mode
[  269.942366][T14774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.969299][ T6315] hsr_slave_0: left promiscuous mode
[  269.977046][ T6315] hsr_slave_1: left promiscuous mode
[  269.985575][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  269.992974][ T6315] batman_adv: batadv0: Removing interface: batadv_slave_0
[  270.005930][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  270.013355][ T6315] batman_adv: batadv0: Removing interface: batadv_slave_1
[  270.032453][ T6315] veth1_macvtap: left promiscuous mode
[  270.043901][ T6315] veth0_macvtap: left promiscuous mode
[  270.049553][ T6315] veth1_vlan: left promiscuous mode
[  270.060071][ T6315] veth0_vlan: left promiscuous mode
[  270.145411][ T6315] team0 (unregistering): Port device team_slave_1 removed
[  270.219170][ T6315] team0 (unregistering): Port device team_slave_0 removed
[  270.290764][ T6315] team0 (unregistering): Port device dummy0 removed
[  270.341543][T16593] bridge0: port 1(erspan0) entered blocking state
[  270.348141][T16593] bridge0: port 1(erspan0) entered disabled state
[  270.367332][T16593] erspan0: entered allmulticast mode
[  270.396616][T16593] erspan0: entered promiscuous mode
[  270.415161][T16594] erspan0: left allmulticast mode
[  270.420344][T16594] erspan0: left promiscuous mode
[  270.425596][T16594] bridge0: port 1(erspan0) entered disabled state
[  270.453459][T16537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  270.479319][T16537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  270.519314][T16614] EXT4-fs: Ignoring removed mblk_io_submit option
[  270.527014][T16614] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  270.535385][T16614] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042e018, mo2=0002]
[  270.543404][T16614] System zones: 0-1, 15-15, 18-18, 34-34
[  270.549347][T16614] EXT4-fs (loop8): orphan cleanup on readonly fs
[  270.556250][T16614] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.3592: bg 0: block 15: invalid block bitmap
[  270.569098][T16614] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  270.572766][T16537] team0: Port device team_slave_0 added
[  270.586366][T16614] EXT4-fs (loop8): 1 truncate cleaned up
[  270.592648][T16614] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  270.603033][T16537] team0: Port device team_slave_1 added
[  270.631375][ T8655] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.682407][T16537] batman_adv: batadv0: Adding interface: batadv_slave_0
[  270.689437][T16537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  270.715609][T16537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  270.762623][T16537] batman_adv: batadv0: Adding interface: batadv_slave_1
[  270.769658][T16537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  270.795656][T16537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  270.852817][T16537] hsr_slave_0: entered promiscuous mode
[  270.872532][T16537] hsr_slave_1: entered promiscuous mode
[  270.883631][T16537] debugfs: 'hsr0' already exists in 'hsr'
[  270.889501][T16537] Cannot create hsr debugfs directory
[  270.902116][T16625] ip6_vti0 speed is unknown, defaulting to 1000
[  270.933600][T16628] nfs: Unknown parameter ''
[  270.949648][T16628] EXT4-fs: Ignoring removed i_version option
[  271.024039][T16628] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.108834][T16651] netlink: 'syz.2.3602': attribute type 21 has an invalid length.
[  271.118186][T14774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.129854][T16651] netlink: 'syz.2.3602': attribute type 1 has an invalid length.
[  271.296516][T16668] set_capacity_and_notify: 6 callbacks suppressed
[  271.296535][T16668] loop8: detected capacity change from 0 to 512
[  271.338987][T16676] loop6: detected capacity change from 0 to 1024
[  271.346199][T16676] EXT4-fs: inline encryption not supported
[  271.368048][T16676] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.388102][T16668] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.489698][T14774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.547812][T16537] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  271.635135][T16688] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  271.642880][T16537] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  271.693998][T16689] loop6: detected capacity change from 0 to 1024
[  271.702088][T16537] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  271.714413][T16689] EXT4-fs: Ignoring removed orlov option
[  271.734547][T16689] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.740868][T16537] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  271.774815][T15205] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  271.853931][T15205] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 65545 with max blocks 25 with error 28
[  271.866759][T15205] EXT4-fs (loop8): This should not happen!! Data will be lost
[  271.866759][T15205] 
[  271.876425][T15205] EXT4-fs (loop8): Total free blocks count 0
[  271.882408][T15205] EXT4-fs (loop8): Free/Dirty block details
[  271.888406][T15205] EXT4-fs (loop8): free_blocks=65280
[  271.893734][T15205] EXT4-fs (loop8): dirty_blocks=25
[  271.898867][T15205] EXT4-fs (loop8): Block reservation details
[  271.904932][T15205] EXT4-fs (loop8): i_reserved_data_blocks=25
[  271.937822][T16537] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.960988][T16537] 8021q: adding VLAN 0 to HW filter on device team0
[  271.972574][ T8655] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.986187][ T6316] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.993284][ T6316] bridge0: port 1(bridge_slave_0) entered forwarding state
[  272.025583][T16537] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  272.036088][T16537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  272.050947][ T6316] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.058034][ T6316] bridge0: port 2(bridge_slave_1) entered forwarding state
[  272.244867][T16537] 8021q: adding VLAN 0 to HW filter on device batadv0
[  272.333843][T16721] wireguard0: entered promiscuous mode
[  272.339384][T16721] wireguard0: entered allmulticast mode
[  272.406990][T14774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.532237][T16733] loop6: detected capacity change from 0 to 1024
[  272.592268][T16733] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.593164][T16537] veth0_vlan: entered promiscuous mode
[  272.633215][T16537] veth1_vlan: entered promiscuous mode
[  272.639854][   T37] Bluetooth: hci0: Frame reassembly failed (-84)
[  272.673190][T16733] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  272.685742][T16537] veth0_macvtap: entered promiscuous mode
[  272.704128][T16537] veth1_macvtap: entered promiscuous mode
[  272.716017][T16537] batman_adv: batadv0: Interface activated: batadv_slave_0
[  272.724848][T16537] batman_adv: batadv0: Interface activated: batadv_slave_1
[  272.733914][   T29] kauditd_printk_skb: 622 callbacks suppressed
[  272.733930][   T29] audit: type=1400 audit(272.703:26352): avc:  denied  { lock } for  pid=16732 comm="syz.6.3621" path="socket:[55681]" dev="sockfs" ino=55681 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  272.777872][ T6315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  272.789875][T14774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.806052][ T7412] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  272.816455][   T29] audit: type=1326 audit(272.783:26353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16736 comm="syz.8.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0bd9ff749 code=0x7ffc0000
[  272.839468][   T29] audit: type=1326 audit(272.783:26354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16736 comm="syz.8.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0bd9ff749 code=0x7ffc0000
[  272.865650][ T7412] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  272.883923][ T7412] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.925224][T16748] ip6_vti0 speed is unknown, defaulting to 1000
[  272.947117][   T29] audit: type=1326 audit(272.923:26355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5595f749 code=0x7ffc0000
[  272.970167][   T29] audit: type=1326 audit(272.923:26356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5595f749 code=0x7ffc0000
[  272.995097][T16751] loop6: detected capacity change from 0 to 128
[  273.114268][   T29] audit: type=1326 audit(272.983:26357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d5595df90 code=0x7ffc0000
[  273.137328][   T29] audit: type=1326 audit(272.983:26358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5595f749 code=0x7ffc0000
[  273.160388][   T29] audit: type=1326 audit(272.983:26359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5595f749 code=0x7ffc0000
[  273.183383][   T29] audit: type=1326 audit(272.983:26360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d5595f749 code=0x7ffc0000
[  273.185002][T16754] tipc: Started in network mode
[  273.206396][   T29] audit: type=1326 audit(272.983:26361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5595f749 code=0x7ffc0000
[  273.211185][T16754] tipc: Node identity 4, cluster identity 4711
[  273.240372][T16754] tipc: Node number set to 4
[  273.286504][T16756] loop6: detected capacity change from 0 to 1024
[  273.293364][T16756] EXT4-fs: Ignoring removed oldalloc option
[  273.299426][T16756] EXT4-fs: Ignoring removed bh option
[  273.328984][T16756] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.429140][T14774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.486115][T16768] loop6: detected capacity change from 0 to 256
[  273.493369][T16768] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  273.716931][T16772] ip6_vti0 speed is unknown, defaulting to 1000
[  273.749156][T16776] wg2: entered promiscuous mode
[  273.754156][T16776] wg2: entered allmulticast mode
[  273.758371][T16777] __nla_validate_parse: 5 callbacks suppressed
[  273.758442][T16777] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3630'.
[  273.798327][T16777] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3630'.
[  273.840690][T16776] ip6_vti0 speed is unknown, defaulting to 1000
[  273.950011][T16783] siw: device registration error -23
[  274.273524][T16796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3638'.
[  274.693851][T12779] Bluetooth: hci0: command 0x1003 tx timeout
[  274.723836][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  274.828390][T16829] 9p: Bad value for 'rfdno'
[  274.872689][T16831] ip6_vti0 speed is unknown, defaulting to 1000
[  274.956855][T16835] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3649'.
[  274.974082][T16833] ip6_vti0 speed is unknown, defaulting to 1000
[  275.002765][T16835] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  275.185675][T16839] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3651'.
[  275.319554][T16860] loop8: detected capacity change from 0 to 1024
[  275.327393][T16860] EXT4-fs: Ignoring removed orlov option
[  275.339189][T16860] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.363142][T16873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3658'.
[  275.398218][T16875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.695914][ T8655] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  275.713005][ T8655] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  275.750203][T16884] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.848890][T16875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.000012][T16875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.082506][T16875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.104725][T16893] ip6_vti0 speed is unknown, defaulting to 1000
[  276.155677][T16920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3675'.
[  276.180327][ T7412] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.197396][ T7412] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  276.224494][ T7412] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  276.264107][ T7412] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  276.284174][T16928] sctp: [Deprecated]: syz.1.3678 (pid 16928) Use of int in maxseg socket option.
[  276.284174][T16928] Use struct sctp_assoc_value instead
[  276.312788][T16934] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3679'.
[  276.322786][T16932] FAULT_INJECTION: forcing a failure.
[  276.322786][T16932] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  276.335873][T16932] CPU: 1 UID: 0 PID: 16932 Comm: syz.0.3676 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  276.335985][T16932] Tainted: [W]=WARN
[  276.335995][T16932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  276.336012][T16932] Call Trace:
[  276.336021][T16932]  <TASK>
[  276.336030][T16932]  __dump_stack+0x1d/0x30
[  276.336057][T16932]  dump_stack_lvl+0xe8/0x140
[  276.336092][T16932]  dump_stack+0x15/0x1b
[  276.336189][T16932]  should_fail_ex+0x265/0x280
[  276.336221][T16932]  should_fail+0xb/0x20
[  276.336245][T16932]  should_fail_usercopy+0x1a/0x20
[  276.336276][T16932]  _copy_to_user+0x20/0xa0
[  276.336344][T16932]  bpf_prog_test_run_syscall+0x29a/0x350
[  276.336389][T16932]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  276.336550][T16932]  bpf_prog_test_run+0x22a/0x390
[  276.336583][T16932]  __sys_bpf+0x4c0/0x7c0
[  276.336618][T16932]  __x64_sys_bpf+0x41/0x50
[  276.336650][T16932]  x64_sys_call+0x28e1/0x3000
[  276.336710][T16932]  do_syscall_64+0xd8/0x2c0
[  276.336772][T16932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.336801][T16932] RIP: 0033:0x7f0d5595f749
[  276.336820][T16932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.336845][T16932] RSP: 002b:00007f0d543c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  276.336870][T16932] RAX: ffffffffffffffda RBX: 00007f0d55bb5fa0 RCX: 00007f0d5595f749
[  276.336896][T16932] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a
[  276.336909][T16932] RBP: 00007f0d543c7090 R08: 0000000000000000 R09: 0000000000000000
[  276.337011][T16932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  276.337027][T16932] R13: 00007f0d55bb6038 R14: 00007f0d55bb5fa0 R15: 00007ffc2eda85e8
[  276.337051][T16932]  </TASK>
[  276.419503][T16936] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3679'.
[  276.558859][T16893] chnl_net:caif_netlink_parms(): no params data found
[  276.568016][T16936] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  276.605772][T16951] netlink: 'syz.1.3683': attribute type 1 has an invalid length.
[  276.652709][T16936] batman_adv: batadv0: Removing interface: batadv_slave_0
[  276.667146][T16936] batman_adv: batadv0: Interface deactivated: macvtap1
[  276.674472][T16936] veth0_to_batadv (unregistering): left allmulticast mode
[  276.701322][T16936] batman_adv: batadv0: Removing interface: macvtap1
[  276.739759][T16948] ip6_vti0 speed is unknown, defaulting to 1000
[  276.782318][T16958] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3684'.
[  276.804780][T16965] sctp: [Deprecated]: syz.6.3686 (pid 16965) Use of struct sctp_assoc_value in delayed_ack socket option.
[  276.804780][T16965] Use struct sctp_sack_info instead
[  276.857420][ T6315] team0: Port device gtp0 removed
[  276.942651][T16989] loop6: detected capacity change from 0 to 1024
[  277.007234][ T6315] bond4 (unregistering): (slave macvlan0): Releasing backup interface
[  277.018504][ T6315] bond0 (unregistering): Released all slaves
[  277.027778][ T6315] bond1 (unregistering): Released all slaves
[  277.036870][ T6315] bond2 (unregistering): Released all slaves
[  277.046208][ T6315] bond3 (unregistering): Released all slaves
[  277.055464][ T6315] bond4 (unregistering): Released all slaves
[  277.094872][T16893] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.102035][T16893] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.116709][T16893] bridge_slave_0: entered allmulticast mode
[  277.125417][T16893] bridge_slave_0: entered promiscuous mode
[  277.141210][T16893] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.148463][T16893] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.157412][T16995] FAULT_INJECTION: forcing a failure.
[  277.157412][T16995] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  277.170533][T16995] CPU: 1 UID: 0 PID: 16995 Comm: syz.1.3693 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  277.170562][T16995] Tainted: [W]=WARN
[  277.170569][T16995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  277.170630][T16995] Call Trace:
[  277.170637][T16995]  <TASK>
[  277.170647][T16995]  __dump_stack+0x1d/0x30
[  277.170678][T16995]  dump_stack_lvl+0xe8/0x140
[  277.170717][T16995]  dump_stack+0x15/0x1b
[  277.170809][T16995]  should_fail_ex+0x265/0x280
[  277.170833][T16995]  should_fail+0xb/0x20
[  277.170939][T16995]  should_fail_usercopy+0x1a/0x20
[  277.170988][T16995]  _copy_to_user+0x20/0xa0
[  277.171027][T16995]  simple_read_from_buffer+0xb5/0x130
[  277.171107][T16995]  proc_fail_nth_read+0x10e/0x150
[  277.171147][T16995]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  277.171182][T16995]  vfs_read+0x1a8/0x770
[  277.171207][T16995]  ksys_read+0xda/0x1a0
[  277.171268][T16995]  __x64_sys_read+0x40/0x50
[  277.171294][T16995]  x64_sys_call+0x2889/0x3000
[  277.171328][T16995]  do_syscall_64+0xd8/0x2c0
[  277.171386][T16995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.171409][T16995] RIP: 0033:0x7f994568e15c
[  277.171428][T16995] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  277.171493][T16995] RSP: 002b:00007f99440f7030 EFLAGS: 00000246
[  277.171497][T16893] bridge_slave_1: entered allmulticast mode
[  277.171508][T16995]  ORIG_RAX: 0000000000000000
[  277.171518][T16995] RAX: ffffffffffffffda RBX: 00007f99458e5fa0 RCX: 00007f994568e15c
[  277.171547][T16995] RDX: 000000000000000f RSI: 00007f99440f70a0 RDI: 0000000000000001
[  277.171604][T16995] RBP: 00007f99440f7090 R08: 0000000000000000 R09: 0000000000000000
[  277.171657][T16995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  277.171715][T16995] R13: 00007f99458e6038 R14: 00007f99458e5fa0 R15: 00007ffc58599e78
[  277.171859][T16995]  </TASK>
[  277.364565][T16893] bridge_slave_1: entered promiscuous mode
[  277.460456][T16893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  277.542779][T17002] loop6: detected capacity change from 0 to 1024
[  277.554465][T17002] EXT4-fs: Ignoring removed bh option
[  277.599047][T16893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  277.622285][T17008] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.3697' sets config #-1
[  277.654919][T16893] team0: Port device team_slave_0 added
[  277.667169][T16893] team0: Port device team_slave_1 added
[  277.704822][T17015] netlink: 'syz.6.3699': attribute type 6 has an invalid length.
[  277.716232][T16893] batman_adv: batadv0: Adding interface: batadv_slave_0
[  277.723211][T16893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  277.749314][T16893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  277.764040][T16893] batman_adv: batadv0: Adding interface: batadv_slave_1
[  277.771067][T16893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  277.797043][T16893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  277.832949][T17020] loop6: detected capacity change from 0 to 512
[  277.840486][ T6315] IPVS: stop unused estimator thread 0...
[  277.854572][T17020] EXT4-fs: quotafile must be on filesystem root
[  277.875945][T16893] hsr_slave_0: entered promiscuous mode
[  277.882099][T16893] hsr_slave_1: entered promiscuous mode
[  277.888267][T16893] debugfs: 'hsr0' already exists in 'hsr'
[  277.894184][T16893] Cannot create hsr debugfs directory
[  277.932344][   T29] kauditd_printk_skb: 364 callbacks suppressed
[  277.932359][   T29] audit: type=1326 audit(277.903:26726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.2.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dae6af749 code=0x7ffc0000
[  277.995672][   T29] audit: type=1326 audit(277.933:26727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.2.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dae6af749 code=0x7ffc0000
[  278.018831][   T29] audit: type=1326 audit(277.933:26728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.2.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9dae6adf90 code=0x7ffc0000
[  278.042383][   T29] audit: type=1326 audit(277.933:26729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.2.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dae6af749 code=0x7ffc0000
[  278.065492][   T29] audit: type=1326 audit(277.933:26730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.2.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dae6af749 code=0x7ffc0000
[  278.088746][   T29] audit: type=1326 audit(277.933:26731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.2.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9dae6af749 code=0x7ffc0000
[  278.111747][   T29] audit: type=1326 audit(277.933:26732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.2.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dae6af749 code=0x7ffc0000
[  278.134847][   T29] audit: type=1326 audit(277.933:26733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.2.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dae6af749 code=0x7ffc0000
[  278.157830][   T29] audit: type=1326 audit(277.933:26734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.2.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dae6af749 code=0x7ffc0000
[  278.181042][   T29] audit: type=1326 audit(277.933:26735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.2.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dae6af749 code=0x7ffc0000
[  278.229752][T17040] ip6_vti0 speed is unknown, defaulting to 1000
[  278.318241][T17051] netlink: 'syz.6.3711': attribute type 10 has an invalid length.
[  278.374733][T17051] team0: Port device dummy0 added
[  278.482855][T16893] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  278.506071][T16893] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  278.526919][T16893] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  278.545992][T16893] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  278.559415][T15207] tipc: Subscription rejected, illegal request
[  278.566593][T17066] netlink: 'syz.2.3715': attribute type 30 has an invalid length.
[  278.624514][T17075] IPv6: NLM_F_CREATE should be specified when creating new route
[  278.633516][T17076] loop6: detected capacity change from 0 to 128
[  278.641659][T17076] FAT-fs (loop6): Directory bread(block 414) failed
[  278.649637][T17076] FAT-fs (loop6): Directory bread(block 415) failed
[  278.657680][T17076] FAT-fs (loop6): Directory bread(block 416) failed
[  278.664969][T17076] FAT-fs (loop6): Directory bread(block 417) failed
[  278.672108][T17076] FAT-fs (loop6): Directory bread(block 418) failed
[  278.681126][T17076] FAT-fs (loop6): Directory bread(block 419) failed
[  278.686687][T16893] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.692276][T17076] FAT-fs (loop6): Directory bread(block 420) failed
[  278.705121][T17076] FAT-fs (loop6): Directory bread(block 421) failed
[  278.710305][T16893] 8021q: adding VLAN 0 to HW filter on device team0
[  278.723766][T10959] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.730940][T10959] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.738973][T17075] FAT-fs (loop6): FAT read failed (blocknr 128)
[  278.748372][ T7412] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.755599][ T7412] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.792172][T17078] netlink: 'syz.2.3717': attribute type 39 has an invalid length.
[  278.841824][T16893] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.000127][T17111] loop6: detected capacity change from 0 to 512
[  279.017041][T17111] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.3725: error while reading EA inode 32 err=-116
[  279.035616][T17111] EXT4-fs (loop6): Remounting filesystem read-only
[  279.043008][T16893] veth0_vlan: entered promiscuous mode
[  279.051653][T16893] veth1_vlan: entered promiscuous mode
[  279.057315][T17111] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -30)
[  279.067649][T17111] EXT4-fs (loop6): 1 orphan inode deleted
[  279.085231][T16893] veth0_macvtap: entered promiscuous mode
[  279.096100][T16893] veth1_macvtap: entered promiscuous mode
[  279.103578][T17118] ip6_vti0 speed is unknown, defaulting to 1000
[  279.117738][T16893] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.139944][T16893] batman_adv: batadv0: Interface activated: batadv_slave_1
[  279.162180][   T37] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.186619][   T37] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.220013][   T37] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.252400][   T37] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.334946][T17136] loop7: detected capacity change from 0 to 1024
[  279.362227][T17136] EXT4-fs: Ignoring removed orlov option
[  279.423582][T17141] xt_hashlimit: max too large, truncated to 1048576
[  279.480228][T17148] netlink: 'syz.7.3736': attribute type 29 has an invalid length.
[  279.523790][T17152] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  279.553893][T17156] netlink: 'syz.2.3739': attribute type 39 has an invalid length.
[  279.573194][T17159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17159 comm=syz.7.3736
[  279.656832][T17161] ip6_vti0 speed is unknown, defaulting to 1000
[  279.745511][T17167] loop7: detected capacity change from 0 to 1024
[  279.850162][T17184] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  279.866808][T17189] veth0_to_bridge: entered promiscuous mode
[  279.898809][T17188] veth0_to_bridge: left promiscuous mode
[  279.956983][T17198] __nla_validate_parse: 1 callbacks suppressed
[  279.957078][T17198] netlink: 4236 bytes leftover after parsing attributes in process `syz.6.3749'.
[  279.988332][T17198] ip6_vti0 speed is unknown, defaulting to 1000
[  280.032817][T17200] loop6: detected capacity change from 0 to 1024
[  280.039579][T17200] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  280.190581][T17208] sctp: [Deprecated]: syz.7.3752 (pid 17208) Use of struct sctp_assoc_value in delayed_ack socket option.
[  280.190581][T17208] Use struct sctp_sack_info instead
[  280.197691][T17212] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3753'.
[  280.388392][T17225] loop7: detected capacity change from 0 to 512
[  280.425372][T17225] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3759: bg 0: block 393: padding at end of block bitmap is not set
[  280.450030][T17225] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  280.469037][T17225] EXT4-fs (loop7): 2 truncates cleaned up
[  280.541029][T17227] ip6_vti0 speed is unknown, defaulting to 1000
[  280.642120][T17237] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3761'.
[  280.796492][T17245] loop6: detected capacity change from 0 to 512
[  280.803202][T17243] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3765'.
[  280.826011][T17245] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.3766: bg 0: block 5: invalid block bitmap
[  280.840552][T17245] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  280.850863][T17245] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3766: invalid indirect mapped block 3 (level 2)
[  280.864678][T17245] EXT4-fs (loop6): 2 truncates cleaned up
[  280.878553][T17245] ext4: Unknown parameter '01777777777777777777777'
[  281.129739][T17260] bond0: (slave bond_slave_0): Releasing backup interface
[  281.155889][T17260] bond0: (slave bond_slave_1): Releasing backup interface
[  281.163838][T17265] netlink: 'syz.2.3772': attribute type 10 has an invalid length.
[  281.171777][T17265] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3772'.
[  281.203745][T17260] team0: Port device team_slave_0 removed
[  281.221865][T17260] team0: Port device team_slave_1 removed
[  281.234193][T17260] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  281.260901][T17265] veth1_vlan: left promiscuous mode
[  281.274895][T17265] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  281.595484][T17295] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  281.684878][T17302] veth0_to_bridge: entered promiscuous mode
[  281.714339][T17301] veth0_to_bridge: left promiscuous mode
[  281.795468][T17307] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3789'.
[  281.804611][T17307] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  281.817038][T17307] batman_adv: batadv0: Removing interface: batadv_slave_1
[  281.841269][T17304] syz.6.3790: attempt to access beyond end of device
[  281.841269][T17304] loop6: rw=0, sector=121, nr_sectors = 920 limit=128
[  281.872126][T17304] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.958429][T17304] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.984194][T17314] syz.6.3790: attempt to access beyond end of device
[  281.984194][T17314] loop6: rw=0, sector=121, nr_sectors = 120 limit=128
[  282.046147][T17304] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.106149][T17304] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.167493][ T6315] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.206051][ T6315] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.247335][ T6315] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.267040][ T6315] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  282.279111][T17316] openvswitch: netlink: Missing key (keys=40, expected=100)
[  282.404867][ T6315] kworker/u8:24: attempt to access beyond end of device
[  282.404867][ T6315] loop6: rw=1, sector=241, nr_sectors = 800 limit=128
[  282.477721][T17326] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3797'.
[  282.534545][T17328] netlink: 228 bytes leftover after parsing attributes in process `syz.6.3798'.
[  282.641645][T17333] set_capacity_and_notify: 1 callbacks suppressed
[  282.641665][T17333] loop6: detected capacity change from 0 to 1024
[  282.715950][T17339] veth0_to_bridge: entered promiscuous mode
[  282.723826][T17337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3801'.
[  282.743449][T17337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3801'.
[  282.757404][T17338] veth0_to_bridge: left promiscuous mode
[  282.951256][   T29] kauditd_printk_skb: 573 callbacks suppressed
[  282.951275][   T29] audit: type=1326 audit(282.923:27309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17355 comm="syz.2.3807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dae6af749 code=0x7ffc0000
[  282.960418][T17358] siw: device registration error -23
[  283.004051][   T29] audit: type=1326 audit(282.923:27310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17355 comm="syz.2.3807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f9dae6af749 code=0x7ffc0000
[  283.027212][   T29] audit: type=1326 audit(282.923:27311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17355 comm="syz.2.3807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dae6af749 code=0x7ffc0000
[  283.050231][   T29] audit: type=1326 audit(282.923:27312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17355 comm="syz.2.3807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dae6af749 code=0x7ffc0000
[  283.073534][   T29] audit: type=1326 audit(282.923:27313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17355 comm="syz.2.3807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9dae6af749 code=0x7ffc0000
[  283.096410][   T29] audit: type=1326 audit(282.923:27314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17355 comm="syz.2.3807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dae6af749 code=0x7ffc0000
[  283.120044][   T29] audit: type=1326 audit(282.923:27315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17355 comm="syz.2.3807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dae6af749 code=0x7ffc0000
[  283.143094][   T29] audit: type=1326 audit(282.923:27316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17355 comm="syz.2.3807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dae6af749 code=0x7ffc0000
[  283.166152][   T29] audit: type=1326 audit(282.923:27317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17355 comm="syz.2.3807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dae6af749 code=0x7ffc0000
[  283.189281][   T29] audit: type=1326 audit(282.923:27318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17355 comm="syz.2.3807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f9dae6af749 code=0x7ffc0000
[  283.240569][T17361] loop6: detected capacity change from 0 to 512
[  283.313958][T17361] loop6: detected capacity change from 512 to 2
[  283.324035][T17377] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Out of memory
[  283.335057][T17377] syz.6.3808: attempt to access beyond end of device
[  283.335057][T17377] loop6: rw=8534017, sector=2, nr_sectors = 2 limit=2
[  283.348489][T17377] Buffer I/O error on dev loop6, logical block 1, lost sync page write
[  283.360965][T17381] veth0_to_bridge: entered promiscuous mode
[  283.383756][T17377] EXT4-fs (loop6): I/O error while writing superblock
[  283.390644][T17377] EXT4-fs (loop6): Remounting filesystem read-only
[  283.404985][T17379] veth0_to_bridge: left promiscuous mode
[  283.563101][T17368] kmmpd-loop6: attempt to access beyond end of device
[  283.563101][T17368] loop6: rw=8402945, sector=34, nr_sectors = 2 limit=2
[  283.576691][T17368] Buffer I/O error on dev loop6, logical block 17, lost sync page write
[  283.668241][ T6316] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.717492][ T6316] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.776162][ T6316] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.845186][ T6316] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.941191][T17387] ip6_vti0 speed is unknown, defaulting to 1000
[  284.158473][T17387] chnl_net:caif_netlink_parms(): no params data found
[  284.234831][T17387] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.241987][T17387] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.269173][T17387] bridge_slave_0: entered allmulticast mode
[  284.285219][T17387] bridge_slave_0: entered promiscuous mode
[  284.299815][T17407] rdma_rxe: rxe_newlink: failed to add lo
[  284.307885][T17387] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.315036][T17387] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.340875][T17387] bridge_slave_1: entered allmulticast mode
[  284.358110][T17387] bridge_slave_1: entered promiscuous mode
[  284.392175][T17418] veth0_to_bridge: entered promiscuous mode
[  284.398582][T17416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=17416 comm=syz.2.3823
[  284.406229][T17387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  284.421892][T17387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  284.431674][T17417] veth0_to_bridge: left promiscuous mode
[  284.473097][T17387] team0: Port device team_slave_0 added
[  284.476321][T17420] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  284.486250][T17387] team0: Port device team_slave_1 added
[  284.599183][T17387] batman_adv: batadv0: Adding interface: batadv_slave_0
[  284.606223][T17387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  284.632142][T17387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  284.698007][T17387] batman_adv: batadv0: Adding interface: batadv_slave_1
[  284.705044][T17387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  284.731109][T17387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  284.827350][T17435] loop7: detected capacity change from 0 to 128
[  284.862212][T17387] hsr_slave_0: entered promiscuous mode
[  284.880195][T17387] hsr_slave_1: entered promiscuous mode
[  284.893253][T17387] debugfs: 'hsr0' already exists in 'hsr'
[  284.899108][T17387] Cannot create hsr debugfs directory
[  285.668316][T17447] ip6_vti0 speed is unknown, defaulting to 1000
[  285.813289][T17424] syz.2.3827 (17424) used greatest stack depth: 6008 bytes left
[  285.920172][T17455] netlink: 'syz.2.3835': attribute type 21 has an invalid length.
[  285.928061][T17455] IPv6: NLM_F_CREATE should be specified when creating new route
[  285.985152][T17387] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  285.992054][T17455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  285.999286][T17455] IPv6: NLM_F_CREATE should be set when creating new route
[  286.006574][T17455] IPv6: NLM_F_CREATE should be set when creating new route
[  286.013799][T17455] IPv6: NLM_F_CREATE should be set when creating new route
[  286.045043][T17387] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  286.069924][T17387] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  286.107900][T17387] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  286.125327][T17455] siw: device registration error -23
[  286.225323][T17387] 8021q: adding VLAN 0 to HW filter on device bond0
[  286.251149][T17387] 8021q: adding VLAN 0 to HW filter on device team0
[  286.275821][T17487] pimreg: entered allmulticast mode
[  286.316969][T17485] pimreg: left allmulticast mode
[  286.341212][ T6315] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.348360][ T6315] bridge0: port 1(bridge_slave_0) entered forwarding state
[  286.400371][ T6315] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.407639][ T6315] bridge0: port 2(bridge_slave_1) entered forwarding state
[  286.449907][T17500] loop7: detected capacity change from 0 to 1024
[  286.476989][T17500] EXT4-fs mount: 18 callbacks suppressed
[  286.477004][T17500] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.501615][ T6316] bridge_slave_1: left allmulticast mode
[  286.507454][ T6316] bridge_slave_1: left promiscuous mode
[  286.513263][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.541280][ T6316] bridge_slave_0: left allmulticast mode
[  286.547106][ T6316] bridge_slave_0: left promiscuous mode
[  286.552794][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.572841][T16893] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.857678][ T6316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  286.906737][ T6316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  286.917535][ T6316] bond0 (unregistering): Released all slaves
[  286.932898][T17507] veth0_to_bridge: entered promiscuous mode
[  286.950659][T17506] veth0_to_bridge: left promiscuous mode
[  287.061953][T17525] __nla_validate_parse: 2 callbacks suppressed
[  287.061971][T17525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3852'.
[  287.098166][ T6316] hsr_slave_0: left promiscuous mode
[  287.108061][ T6316] hsr_slave_1: left promiscuous mode
[  287.113676][ T6316] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  287.121177][ T6316] batman_adv: batadv0: Removing interface: batadv_slave_1
[  287.154596][ T6316] veth1_macvtap: left promiscuous mode
[  287.173792][ T6316] veth0_macvtap: left promiscuous mode
[  287.183636][ T6316] veth1_vlan: left promiscuous mode
[  287.193788][ T6316] veth0_vlan: left promiscuous mode
[  287.443822][ T6316] team0 (unregistering): Port device team_slave_1 removed
[  287.541973][ T6316] team0 (unregistering): Port device team_slave_0 removed
[  287.556197][   T37] smc: removing ib device syz!
[  287.619398][ T6316] team0 (unregistering): Port device dummy0 removed
[  287.638587][T17539] loop7: detected capacity change from 0 to 1024
[  287.653051][T17533] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  287.691232][T17387] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.707960][T17539] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  287.726378][T17543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3857'.
[  287.778849][T17550] netlink: 'syz.1.3858': attribute type 30 has an invalid length.
[  287.785031][T16893] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.817103][T17553] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  287.954792][ T2971] hid_parser_main: 8 callbacks suppressed
[  287.954853][ T2971] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  287.994252][ T2971] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  288.095442][T17387] veth0_vlan: entered promiscuous mode
[  288.115877][T17387] veth1_vlan: entered promiscuous mode
[  288.121543][   T29] kauditd_printk_skb: 335 callbacks suppressed
[  288.121561][   T29] audit: type=1400 audit(288.093:27654): avc:  denied  { getopt } for  pid=17575 comm="syz.1.3865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  288.146915][   T29] audit: type=1326 audit(288.093:27655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17575 comm="syz.1.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994568f749 code=0x7ffc0000
[  288.173269][ T2971] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0
[  288.180772][ T2971] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0
[  288.188327][ T2971] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0
[  288.195822][ T2971] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0
[  288.203326][ T2971] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0
[  288.210770][ T2971] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0
[  288.218259][ T2971] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0
[  288.225737][ T2971] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0
[  288.233144][ T2971] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0
[  288.242398][T17387] veth0_macvtap: entered promiscuous mode
[  288.248980][   T29] audit: type=1326 audit(288.153:27656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17575 comm="syz.1.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f994568f749 code=0x7ffc0000
[  288.272000][   T29] audit: type=1326 audit(288.153:27657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17575 comm="syz.1.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994568f749 code=0x7ffc0000
[  288.285605][T17387] veth1_macvtap: entered promiscuous mode
[  288.295260][   T29] audit: type=1326 audit(288.153:27658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17575 comm="syz.1.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f994568f749 code=0x7ffc0000
[  288.323555][   T29] audit: type=1326 audit(288.153:27659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17575 comm="syz.1.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994568f749 code=0x7ffc0000
[  288.346612][   T29] audit: type=1326 audit(288.153:27660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17575 comm="syz.1.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f994568f749 code=0x7ffc0000
[  288.369700][   T29] audit: type=1326 audit(288.153:27661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17575 comm="syz.1.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994568f749 code=0x7ffc0000
[  288.382553][T17387] batman_adv: batadv0: Interface activated: batadv_slave_0
[  288.392692][   T29] audit: type=1326 audit(288.223:27662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17575 comm="syz.1.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f994568f749 code=0x7ffc0000
[  288.422974][   T29] audit: type=1326 audit(288.223:27663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17575 comm="syz.1.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994568f749 code=0x7ffc0000
[  288.446384][T17387] batman_adv: batadv0: Interface activated: batadv_slave_1
[  288.456224][ T2971] hid-generic 0003:0004:0000.0010: hidraw0: USB HID v0.02 Device [syz0] on syz1
[  288.483906][ T6315] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.492703][ T6315] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  288.505931][ T6315] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.515313][ T6315] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.605126][T17596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3868'.
[  288.819137][T17602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3871'.
[  288.939327][T17616] veth0_to_bridge: entered promiscuous mode
[  288.968825][T17615] veth0_to_bridge: left promiscuous mode
[  289.001045][T17618] ip6_vti0 speed is unknown, defaulting to 1000
[  289.041856][T17573] loop7: detected capacity change from 0 to 1024
[  289.049011][T17573] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  289.059941][T17573] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  289.101780][T17573] JBD2: no valid journal superblock found
[  289.107599][T17573] EXT4-fs (loop7): Could not load journal inode
[  289.151929][T17573] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  289.211532][T17633] ip6_vti0 speed is unknown, defaulting to 1000
[  289.501683][T17644] netlink: 'syz.2.3882': attribute type 30 has an invalid length.
[  289.527594][T17646] loop7: detected capacity change from 0 to 512
[  289.553785][T17646] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  289.641811][T17663] loop7: detected capacity change from 0 to 1024
[  289.679332][T17668] loop5: detected capacity change from 0 to 512
[  289.686381][T17663] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  289.699852][T17668] journal_path: Non-blockdev passed as './file1'
[  289.706380][T17668] EXT4-fs: error: could not find journal device path
[  289.727585][T16893] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.824017][T17671] 9p: Bad value for 'wfdno'
[  289.891879][T17684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3896'.
[  289.902414][T17684] netlink: 312 bytes leftover after parsing attributes in process `syz.5.3896'.
[  289.911636][T17684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3896'.
[  289.923305][T17684] xt_ecn: cannot match TCP bits for non-tcp packets
[  289.936193][T17684] loop5: detected capacity change from 0 to 1024
[  289.943354][T17684] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  289.954000][T17684] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003]
[  289.962206][T17684] System zones: 0-1, 3-36
[  289.967869][T17684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.994936][T17387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.018604][T17687] loop5: detected capacity change from 0 to 512
[  290.028206][T17687] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.3897: iget: bad extra_isize 90 (inode size 256)
[  290.042182][T17687] EXT4-fs (loop5): Remounting filesystem read-only
[  290.050274][T17687] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30)
[  290.060509][T17687] EXT4-fs (loop5): 1 orphan inode deleted
[  290.066962][T17687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.090764][T17387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.150070][T17697] veth0_to_bridge: entered promiscuous mode
[  290.166675][T17696] veth0_to_bridge: left promiscuous mode
[  290.181372][T17699] netlink: 'syz.5.3901': attribute type 1 has an invalid length.
[  290.339885][ T3399] Process accounting resumed
[  290.562183][T17719] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  290.643084][T17720] ip6_vti0 speed is unknown, defaulting to 1000
[  290.978822][T17723] loop7: detected capacity change from 0 to 1024
[  291.294358][T17723] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.348289][T16893] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.391473][T17742] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  291.408632][T17744] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3914'.
[  291.468605][T17739] loop5: detected capacity change from 0 to 2048
[  291.485751][T17754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.494928][T17754] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.504748][T17754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.513322][T17754] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.523124][T17739] SELinux: failed to load policy
[  291.531222][T17754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.546473][T17754] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.568542][T17758] loop5: detected capacity change from 0 to 128
[  291.577903][T17758] hub 9-0:1.0: USB hub found
[  291.582638][T17758] hub 9-0:1.0: 8 ports detected
[  291.597778][T17758] tmpfs: Bad value for 'mpol'
[  291.749224][T17770] loop7: detected capacity change from 0 to 1024
[  291.768131][T17770] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.792671][T16893] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.819826][T17775] bridge2: entered allmulticast mode
[  291.865637][T17777] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.884359][T17777] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.3926: iget: checksum invalid
[  291.900641][T17777] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  291.910506][T17777] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.3926: iget: checksum invalid
[  291.933357][T16893] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.057620][T17781] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3927'.
[  292.087401][T17781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  292.101646][T17781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  292.112649][T17781] bond0 (unregistering): Released all slaves
[  292.291416][T17801] ip6_vti0 speed is unknown, defaulting to 1000
[  292.323337][T17796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3933'.
[  292.341927][T17797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3933'.
[  292.468129][T17806] ip6_vti0 speed is unknown, defaulting to 1000
[  292.594680][T17820] veth0_to_bridge: entered promiscuous mode
[  292.627286][T17819] veth0_to_bridge: left promiscuous mode
[  292.861361][T17824] veth0_to_bridge: entered promiscuous mode
[  292.904185][T17823] veth0_to_bridge: left promiscuous mode
[  293.031300][T17832] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3944'.
[  293.068903][T17838] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  293.116596][T17838] netlink: 232 bytes leftover after parsing attributes in process `syz.7.3945'.
[  293.156680][T17845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3948'.
[  293.171549][   T29] kauditd_printk_skb: 335 callbacks suppressed
[  293.171567][   T29] audit: type=1400 audit(293.143:27999): avc:  denied  { lock } for  pid=17844 comm="syz.2.3948" path="socket:[60621]" dev="sockfs" ino=60621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  293.222478][T17851] netlink: 'syz.2.3951': attribute type 21 has an invalid length.
[  293.230679][T17851] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3951'.
[  293.238598][   T29] audit: type=1400 audit(293.143:28000): avc:  denied  { create } for  pid=17844 comm="syz.2.3948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  293.239831][T17851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3951'.
[  293.259089][   T29] audit: type=1400 audit(293.143:28001): avc:  denied  { ioctl } for  pid=17844 comm="syz.2.3948" path="socket:[60622]" dev="sockfs" ino=60622 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  293.292221][   T29] audit: type=1400 audit(293.143:28002): avc:  denied  { create } for  pid=17844 comm="syz.2.3948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  293.311403][   T29] audit: type=1326 audit(293.183:28003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17846 comm="syz.1.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994568f749 code=0x7ffc0000
[  293.334620][   T29] audit: type=1326 audit(293.183:28004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17846 comm="syz.1.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f994568f749 code=0x7ffc0000
[  293.357688][   T29] audit: type=1326 audit(293.183:28005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17846 comm="syz.1.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994568f749 code=0x7ffc0000
[  293.380705][   T29] audit: type=1400 audit(293.193:28006): avc:  denied  { create } for  pid=17850 comm="syz.2.3951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  293.399987][   T29] audit: type=1400 audit(293.193:28007): avc:  denied  { bind } for  pid=17850 comm="syz.2.3951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  293.419075][   T29] audit: type=1400 audit(293.193:28008): avc:  denied  { listen } for  pid=17850 comm="syz.2.3951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  293.538589][T17859] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3954'.
[  293.557285][T17849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.603520][T17849] FAULT_INJECTION: forcing a failure.
[  293.603520][T17849] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  293.616899][T17849] CPU: 1 UID: 0 PID: 17849 Comm: syz.5.3950 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  293.616942][T17849] Tainted: [W]=WARN
[  293.616951][T17849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  293.617024][T17849] Call Trace:
[  293.617069][T17849]  <TASK>
[  293.617078][T17849]  __dump_stack+0x1d/0x30
[  293.617117][T17849]  dump_stack_lvl+0xe8/0x140
[  293.617148][T17849]  dump_stack+0x15/0x1b
[  293.617174][T17849]  should_fail_ex+0x265/0x280
[  293.617205][T17849]  should_fail_alloc_page+0xf2/0x100
[  293.617305][T17849]  __alloc_frozen_pages_noprof+0x109/0x360
[  293.617349][T17849]  alloc_pages_mpol+0xb3/0x260
[  293.617454][T17849]  folio_alloc_noprof+0x97/0x150
[  293.617494][T17849]  filemap_alloc_folio_noprof+0x93/0x230
[  293.617527][T17849]  __filemap_get_folio_mpol+0x295/0x650
[  293.617609][T17849]  ext4_block_zero_page_range+0x8c/0x620
[  293.617659][T17849]  ext4_zero_partial_blocks+0x17c/0x190
[  293.617708][T17849]  ext4_punch_hole+0x45f/0x790
[  293.617749][T17849]  ext4_fallocate+0x2d7/0x2f0
[  293.617786][T17849]  vfs_fallocate+0x3b6/0x400
[  293.617859][T17849]  __x64_sys_fallocate+0x7a/0xd0
[  293.617891][T17849]  x64_sys_call+0x1cd4/0x3000
[  293.617924][T17849]  do_syscall_64+0xd8/0x2c0
[  293.618042][T17849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.618078][T17849] RIP: 0033:0x7f765fccf749
[  293.618098][T17849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  293.618129][T17849] RSP: 002b:00007f765e72f038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[  293.618155][T17849] RAX: ffffffffffffffda RBX: 00007f765ff25fa0 RCX: 00007f765fccf749
[  293.618173][T17849] RDX: 0000000000000f00 RSI: 0000000000000003 RDI: 0000000000000006
[  293.618195][T17849] RBP: 00007f765e72f090 R08: 0000000000000000 R09: 0000000000000000
[  293.618214][T17849] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001
[  293.618231][T17849] R13: 00007f765ff26038 R14: 00007f765ff25fa0 R15: 00007ffe6ae25d98
[  293.618258][T17849]  </TASK>
[  293.832734][T17870] xt_limit: Overflow, try lower: 268435456/134217728
[  293.874463][T17387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.006307][T17878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3961'.
[  294.015218][T17878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3961'.
[  294.327902][T17895] netlink: 'syz.2.3962': attribute type 10 has an invalid length.
[  294.347565][T17895] sctp: [Deprecated]: syz.2.3962 (pid 17895) Use of int in max_burst socket option deprecated.
[  294.347565][T17895] Use struct sctp_assoc_value instead
[  294.674757][T17918] set_capacity_and_notify: 2 callbacks suppressed
[  294.674778][T17918] loop7: detected capacity change from 0 to 1024
[  294.697879][T17917] pimreg: entered allmulticast mode
[  294.703992][T17917] pimreg: left allmulticast mode
[  294.705682][T17918] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  294.784413][T17906] ip6_vti0 speed is unknown, defaulting to 1000
[  294.806612][ T6306] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.912779][ T6306] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.990039][T17906] chnl_net:caif_netlink_parms(): no params data found
[  295.032399][ T6306] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.136524][ T6306] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.170432][T17906] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.177717][T17906] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.187129][T17906] bridge_slave_0: entered allmulticast mode
[  295.194659][T17906] bridge_slave_0: entered promiscuous mode
[  295.255560][T17906] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.262875][T17906] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.271887][T17906] bridge_slave_1: entered allmulticast mode
[  295.278823][T17906] bridge_slave_1: entered promiscuous mode
[  295.287761][T17956] netlink: 'syz.5.3977': attribute type 21 has an invalid length.
[  295.303478][T17956] netlink: 'syz.5.3977': attribute type 6 has an invalid length.
[  295.312138][ T6306] bridge_slave_1: left allmulticast mode
[  295.317893][ T6306] bridge_slave_1: left promiscuous mode
[  295.323583][ T6306] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.335979][ T6306] bridge_slave_0: left allmulticast mode
[  295.341666][ T6306] bridge_slave_0: left promiscuous mode
[  295.347533][ T6306] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.488537][ T6306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  295.509517][ T6306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  295.534098][T16893] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.544686][ T6306] bond0 (unregistering): Released all slaves
[  295.597202][T17906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  295.670576][T17906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  295.682613][T17958] loop5: detected capacity change from 0 to 1024
[  295.689696][T17958] EXT4-fs: Ignoring removed nomblk_io_submit option
[  295.717076][ T6306] tipc: Left network mode
[  295.722936][T17906] team0: Port device team_slave_0 added
[  295.730559][T17958] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.754410][T17906] team0: Port device team_slave_1 added
[  295.872076][ T6306] hsr_slave_0: left promiscuous mode
[  295.888232][ T6306] hsr_slave_1: left promiscuous mode
[  295.906909][ T6306] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  295.914416][ T6306] batman_adv: batadv0: Removing interface: batadv_slave_0
[  295.936648][ T6306] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  295.944112][ T6306] batman_adv: batadv0: Removing interface: batadv_slave_1
[  295.966245][ T6306] veth1_macvtap: left promiscuous mode
[  295.971966][ T6306] veth0_macvtap: left promiscuous mode
[  295.977658][ T6306] veth1_vlan: left promiscuous mode
[  295.987302][ T6306] veth0_vlan: left promiscuous mode
[  296.020549][T17974] loop7: detected capacity change from 0 to 1024
[  296.056492][T17974] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  296.111107][T17974] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.144964][T17974] xt_l2tp: invalid flags combination: c
[  296.154570][T17974] netlink: zone id is out of range
[  296.159698][T17974] netlink: zone id is out of range
[  296.165507][ T6306] team0 (unregistering): Port device team_slave_1 removed
[  296.189610][ T6306] team0 (unregistering): Port device team_slave_0 removed
[  296.198001][T17974] netlink: zone id is out of range
[  296.203166][T17974] netlink: zone id is out of range
[  296.235559][T17974] netlink: zone id is out of range
[  296.256463][T17974] netlink: zone id is out of range
[  296.261672][T17974] netlink: zone id is out of range
[  296.314166][T17974] netlink: zone id is out of range
[  296.328378][T17906] batman_adv: batadv0: Adding interface: batadv_slave_0
[  296.335391][T17906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  296.361322][T17906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  296.375375][T17974] netlink: del zone limit has 8 unknown bytes
[  296.401045][T17972] xt_TPROXY: Can be used only with -p tcp or -p udp
[  296.416691][T17906] batman_adv: batadv0: Adding interface: batadv_slave_1
[  296.423756][T17906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  296.449747][T17906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  296.471753][T16893] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.493451][T17906] hsr_slave_0: entered promiscuous mode
[  296.517578][T17906] hsr_slave_1: entered promiscuous mode
[  296.800338][T17387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.898505][T18004] ip6_vti0 speed is unknown, defaulting to 1000
[  297.027307][T17906] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  297.048906][T17906] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  297.070358][T17906] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  297.086742][T17906] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  297.139273][T15201] Bluetooth: hci0: Frame reassembly failed (-84)
[  297.216980][T17906] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.277830][T17906] 8021q: adding VLAN 0 to HW filter on device team0
[  297.309641][T15201] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.316761][T15201] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.377231][T15201] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.384355][T15201] bridge0: port 2(bridge_slave_1) entered forwarding state
[  297.535549][T18029] __nla_validate_parse: 21 callbacks suppressed
[  297.535569][T18029] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3994'.
[  297.551774][T17906] 8021q: adding VLAN 0 to HW filter on device batadv0
[  297.575949][T18029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3994'.
[  297.754135][T18046] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3996'.
[  297.791482][T18049] ip6gre1: entered promiscuous mode
[  297.796833][T18049] ip6gre1: entered allmulticast mode
[  297.829828][T17906] veth0_vlan: entered promiscuous mode
[  297.856321][T17906] veth1_vlan: entered promiscuous mode
[  297.882959][T17906] veth0_macvtap: entered promiscuous mode
[  297.906350][T17906] veth1_macvtap: entered promiscuous mode
[  297.930327][T17906] batman_adv: batadv0: Interface activated: batadv_slave_0
[  297.948783][T17906] batman_adv: batadv0: Interface activated: batadv_slave_1
[  297.968238][ T6315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.996870][ T6315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.014001][ T6315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.037263][ T6315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.122448][T18066] serio: Serial port ptm1
[  298.174796][   T29] kauditd_printk_skb: 209 callbacks suppressed
[  298.174814][   T29] audit: type=1326 audit(298.153:28218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18065 comm="syz.4.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415dd8f749 code=0x7ffc0000
[  298.253285][   T29] audit: type=1326 audit(298.153:28219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18065 comm="syz.4.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415dd8f749 code=0x7ffc0000
[  298.276581][   T29] audit: type=1326 audit(298.153:28220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18065 comm="syz.4.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415dd8f749 code=0x7ffc0000
[  298.299609][   T29] audit: type=1326 audit(298.153:28221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18065 comm="syz.4.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f415dd8f749 code=0x7ffc0000
[  298.322709][   T29] audit: type=1326 audit(298.153:28222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18065 comm="syz.4.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415dd8f749 code=0x7ffc0000
[  298.345752][   T29] audit: type=1326 audit(298.153:28223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18065 comm="syz.4.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415dd8f749 code=0x7ffc0000
[  298.368815][   T29] audit: type=1326 audit(298.153:28224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18065 comm="syz.4.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415dd8f749 code=0x7ffc0000
[  298.391845][   T29] audit: type=1326 audit(298.153:28225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18065 comm="syz.4.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f415dd8f749 code=0x7ffc0000
[  298.414849][   T29] audit: type=1326 audit(298.153:28226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18065 comm="syz.4.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415dd8f749 code=0x7ffc0000
[  298.437833][   T29] audit: type=1326 audit(298.153:28227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18065 comm="syz.4.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415dd8f749 code=0x7ffc0000
[  298.486215][T18046] xt_TPROXY: Can be used only with -p tcp or -p udp
[  298.620210][T18077] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4005'.
[  298.633411][T18077] ipvlan2: entered promiscuous mode
[  298.643875][T18077] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  298.687433][T18078] ip6_vti0 speed is unknown, defaulting to 1000
[  298.862943][T18091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4009'.
[  298.890474][T18093] veth0: entered promiscuous mode
[  298.897692][T18093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4011'.
[  298.907312][T18093] veth0 (unregistering): left promiscuous mode
[  298.951531][T18096] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4011'.
[  299.071698][T18103] ip6_vti0 speed is unknown, defaulting to 1000
[  299.126993][T18099] ==================================================================
[  299.135112][T18099] BUG: KCSAN: data-race in do_sendfile / do_writev
[  299.141657][T18099] 
[  299.143996][T18099] write to 0xffff88811b633a30 of 8 bytes by task 18098 on cpu 0:
[  299.151727][T18099]  do_writev+0x11a/0x210
[  299.155999][T18099]  __x64_sys_writev+0x45/0x50
[  299.160689][T18099]  x64_sys_call+0x1ba5/0x3000
[  299.165399][T18099]  do_syscall_64+0xd8/0x2c0
[  299.169940][T18099]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.175877][T18099] 
[  299.178222][T18099] read to 0xffff88811b633a30 of 8 bytes by task 18099 on cpu 1:
[  299.178583][T12779] Bluetooth: hci0: command 0x1003 tx timeout
[  299.185868][T18099]  do_sendfile+0x246/0x650
[  299.185901][T18099]  __x64_sys_sendfile64+0x105/0x150
[  299.201534][T18099]  x64_sys_call+0x2db1/0x3000
[  299.206254][T18099]  do_syscall_64+0xd8/0x2c0
[  299.210804][T18099]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.216711][T18099] 
[  299.219049][T18099] value changed: 0x0000000000000078 -> 0x0000000000000084
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  299.226169][T18099] 
[  299.228506][T18099] Reported by Kernel Concurrency Sanitizer on:
[  299.234235][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  299.234847][T18099] CPU: 1 UID: 0 PID: 18099 Comm: syz.1.4013 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  299.252285][T18099] Tainted: [W]=WARN
[  299.256103][T18099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  299.266200][T18099] ==================================================================
[  299.707881][ T6314] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.795990][ T6314] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.857131][ T6314] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.906351][ T6314] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.960110][ T6314] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.016592][ T6314] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.066462][ T6314] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.126669][ T6314] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.390629][ T6314] bridge_slave_1: left allmulticast mode
[  300.396402][ T6314] bridge_slave_1: left promiscuous mode
[  300.402099][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.410069][ T6314] bridge_slave_0: left allmulticast mode
[  300.415858][ T6314] bridge_slave_0: left promiscuous mode
[  300.421569][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.429877][ T6314] batadv0: left allmulticast mode
[  300.434954][ T6314] batadv0: left promiscuous mode
[  300.440110][ T6314] bridge0: port 1(batadv0) entered disabled state
[  300.448791][ T6314] tipc: Resetting bearer <eth:syzkaller0>
[  300.504388][ T6314] team0: Port device ip6gre0 removed
[  300.585277][ T6314] tipc: Disabling bearer <eth:syzkaller0>
[  300.715438][ T6314] bond0 (unregistering): Released all slaves
[  300.724306][ T6314] bond1 (unregistering): (slave team0): Releasing backup interface
[  300.733031][ T6314] bond1 (unregistering): Released all slaves
[  300.741201][ T6314] bond2 (unregistering): Released all slaves
[  300.825749][ T6314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  300.835773][ T6314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  300.845298][ T6314] bond0 (unregistering): Released all slaves
[  300.985184][ T6314] bond0 (unregistering): Released all slaves
[  300.993324][ T6314] bond1 (unregistering): Released all slaves
[  302.444570][ T6314] tipc: Left network mode
[  302.449497][ T6314] tipc: Left network mode
[  302.506176][ T6314] hsr_slave_0: left promiscuous mode
[  302.511780][ T6314] hsr_slave_1: left promiscuous mode
[  302.520146][ T6314] hsr_slave_0: left promiscuous mode
[  302.526871][ T6314] hsr_slave_1: left promiscuous mode
[  302.532390][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  302.539857][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_0
[  302.547432][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  302.554846][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_1
[  302.563495][ T6314] hsr_slave_0: left promiscuous mode
[  302.569167][ T6314] hsr_slave_1: left promiscuous mode
[  302.579227][ T6314] veth1_macvtap: left promiscuous mode
[  302.584878][ T6314] veth0_macvtap: left promiscuous mode
[  302.590381][ T6314] veth1_vlan: left promiscuous mode
[  302.595716][ T6314] veth0_vlan: left promiscuous mode
[  302.656418][ T6314] pim6reg9 (unregistering): left allmulticast mode
[  302.724122][ T6314] team0 (unregistering): Port device team_slave_1 removed
[  302.733997][ T6314] team0 (unregistering): Port device team_slave_0 removed
[  302.815911][   T23] infiniband syz1: ib_query_port failed (-19)
[  303.390842][ T6314] IPVS: stop unused estimator thread 0...
[  303.787450][ T6314] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.856636][ T6314] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.917012][ T6314] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.986712][ T6314] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.078423][ T6314] bridge_slave_1: left allmulticast mode
[  304.084249][ T6314] bridge_slave_1: left promiscuous mode
[  304.090043][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.098041][ T6314] bridge_slave_0: left allmulticast mode
[  304.103779][ T6314] bridge_slave_0: left promiscuous mode
[  304.109571][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.186058][ T6314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  304.195968][ T6314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  304.205530][ T6314] bond0 (unregistering): Released all slaves
[  304.274367][ T6314] hsr_slave_0: left promiscuous mode
[  304.280254][ T6314] hsr_slave_1: left promiscuous mode
[  304.285899][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  304.293350][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_0
[  304.301128][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  304.308572][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_1
[  304.318565][ T6314] veth1_macvtap: left promiscuous mode
[  304.324085][ T6314] veth0_macvtap: left promiscuous mode
[  304.329578][ T6314] veth1_vlan: left promiscuous mode
[  304.334885][ T6314] veth0_vlan: left promiscuous mode
[  304.401205][ T6314] team0 (unregistering): Port device team_slave_1 removed
[  304.411116][ T6314] team0 (unregistering): Port device team_slave_0 removed