last executing test programs:

4.304091996s ago: executing program 0 (id=86):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x4}, 0x18)
write$binfmt_format(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x40000)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0)
openat$incfs(r4, &(0x7f0000000240)='.pending_reads\x00', 0x40, 0x100)
ioctl$FIONCLEX(r0, 0x5450)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

4.158018861s ago: executing program 0 (id=95):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00')
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80)
perf_event_open(&(0x7f0000001000)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x8000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x88)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
pwrite64(0xffffffffffffffff, &(0x7f0000000880)='u', 0xf7d, 0x83)

2.684196886s ago: executing program 0 (id=108):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.683563086s ago: executing program 3 (id=109):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x6}, 0x18)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18)
r4 = msgget$private(0x0, 0x480)
msgsnd(r4, &(0x7f0000000040)={0x2, "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"}, 0x401, 0x0)
msgsnd(r4, &(0x7f0000000a00)={0x1, "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"}, 0x401, 0x0)
msgctl$IPC_RMID(r4, 0x0)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000000)='./file1\x00', 0x16000f57)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5)
renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r6, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c)
shutdown(r6, 0x1)
setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000000c0), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.635381521s ago: executing program 0 (id=115):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$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") (async)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
lseek(r0, 0x9fc5, 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={<r2=>0x0, 0x9}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000240)={r2, 0x7ff, 0xa, "4cbca93e1d867cd3f4e5"}, 0xf) (async)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000001600)={0x0, 0x6}, 0x8) (async)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001540)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x260, 0x20a, 0x278, 0x260, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3c}, @private1, [], [], 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x6}, 0x18) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x7e}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async, rerun: 32)
r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00')
lseek(r5, 0x1000000, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f00000000c0)={"54d51a60fabe796d94c601051381e46e", <r7=>0x0, 0x0, {0x7, 0x2}, {0x4, 0x7}, 0x8, [0x9, 0x2, 0xb, 0xfffffffffffffffd, 0x10001, 0x200, 0x6fe6c76a, 0x2, 0x9, 0x2, 0xffffffff, 0xfffffffffffffff7, 0x3, 0xffffffffffffffda, 0x8, 0x1]}) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r8, r8, 0x2f, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r9, 0x4) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = dup(r10) (async, rerun: 64)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000000800)={0x0, 0x0, {0x0, @usage, <r12=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (rerun: 64)
ioctl$BTRFS_IOC_BALANCE_V2(r11, 0xc4009420, &(0x7f0000001c00)={0x2, 0x2, {0x6, @usage=0x234, r12, 0x162, 0x8, 0x80000001, 0x125, 0x4, 0x82, @struct={0x2ca9, 0x200}, 0x2, 0x1, [0xff, 0xa, 0x0, 0xb9d, 0x1, 0x9]}, {0xf44, @usage=0x100, 0x0, 0x8, 0x2, 0x1000, 0x2, 0x0, 0x0, @struct={0x7, 0x2}, 0x7, 0x9, [0x1, 0x8000000000000001, 0x35e6, 0x4, 0x3ff, 0x2]}, {0x8, @struct={0x3, 0x2}, 0x0, 0x6, 0x8, 0x4c, 0x0, 0x3, 0x2, @usage=0x56f, 0xe973, 0x1e, [0x4, 0xffffffffffffa714, 0x1000, 0x0, 0x7]}, {0x4, 0x401, 0x4f5}}) (async)
ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000000900)={{r6}, r7, 0x10, @unused=[0xffffffffffffff94, 0x0, 0x6, 0x100000000], @devid=r12}) (async, rerun: 64)
ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000001900)={r12, "0476db30c27b38763ef294ee8d54755e"}) (rerun: 64)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={<r13=>0x0, 0xb2, 0x30, 0x10, 0x7}, &(0x7f0000000040)=0x18)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000080)={r13, @in6={{0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}}, &(0x7f0000000140)=0x84)

2.633737711s ago: executing program 3 (id=118):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00')
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80)
perf_event_open(&(0x7f0000001000)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x8000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x88)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
pwrite64(0xffffffffffffffff, &(0x7f0000000880)='u', 0xf7d, 0x83)

2.583645266s ago: executing program 0 (id=121):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
recvmmsg(r2, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{&(0x7f0000001d80)=@caif, 0x80, &(0x7f0000001080)=[{0x0}, {0x0}], 0x2}, 0xea26}], 0x3, 0x2060, 0x0)

2.546011979s ago: executing program 0 (id=123):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x1d, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%+9llu \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000009edffffbf98a919911c516b00000200000000010029e8d2bf5b9d5a4d001500"], 0x20}}, 0x0)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYRES64=0x0], 0x1, 0x29d, &(0x7f0000000640)="$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")
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400e300b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r5}, 0x18)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='mm_lru_insertion\x00', r6}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r7, &(0x7f0000000180), 0x40010)
getdents(r3, 0x0, 0x0)

2.342967849s ago: executing program 2 (id=126):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000d0000000100000040"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x80000}, 0x18)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000380)={r0, 0x0, 0x0}, 0x20)

2.329417971s ago: executing program 2 (id=127):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190da)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8, 0x0, 0x1}, 0x18)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x100}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000001c0))
pwritev2(r8, &(0x7f0000000840)=[{&(0x7f00000003c0)="02fe656ea2f755516106d950f6b250624d66d5438e4ec83ba5b206a5fc99f08da0b3148415558da439f0b5a7c21386a741206068f9f24d7774e6f123fd8a42b7eb15492ba2e79dbf8caf1b4a475f2320476dab9fe7993a795229ccd19f44f0e6913bd75c978e3999a468622c6cbedf4e1ed043a390e0bd2e6e14be088eac3a72d90f782f44e30ea50c22facc6acf88e2b378cfce8798f342ec5d189924df970cc0d1e55408212996f8d925e31b2d329a343b863b808b84428881539e712a9cb5a6ad2ff2093cc26f4611d50f492992180adac63b46221c951e53f5fdef2d0e7afb", 0xe1}, {&(0x7f0000000200)}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000580)="1686687f0577285f37e513bed4215b43bf9a47a491265c7d21ba453f3449061746b28f2502a783c1e54e04391f72163b73f7d7ceedc6845aa20f1a71caa1e1655a51b40836dd4c5e76dddd04e7be6ce1e155e232274970eaed07ffd50fbea7038c7195e303e4b1c398b8d4d287e1225ffa130bf926c2946104207f4c83", 0x7d}, {&(0x7f0000000280)="292998f5d0e9f9a410cd", 0xa}, {&(0x7f0000000600)="c1529ccd23c44d5567ea99d753480d61ab3281ed86f6347f37d3bd3fe0c77aad5f4d7587ba8b323de1b0717894e04b8e3f3cb1f3465eb8bb67044f3e4fdec7bfc2b154383984cb2ff2488597d9", 0x4d}, {&(0x7f0000000680)="4656c5c0aa43e1cac8feadf59221ac0da81b1618947d9f3c1178568b8a28a1c47758ab0bebd3baa4558ddb414e95f34e1178d5121bf231e063a2f1986cf1ee82ad7aba8ede196ca23fd5aa5dfb428d505c3c5ce02c0dac4e5b84db4b3efb0a6522f029be13694a27a566128fa0be77cdd871770b5be9549c2fa957741b6a34ee13604a5e897e0f6ff46ce8a6e3c6", 0x8e}, {&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000000740)="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", 0xfd}], 0x9, 0x8, 0xe74, 0x9)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})

1.504998912s ago: executing program 3 (id=133):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r1, 0x20, 0x0, 0x8000) (fail_nth: 1)

1.336171188s ago: executing program 2 (id=134):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
recvmmsg(r2, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x1}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{&(0x7f0000001d80)=@caif, 0x80, &(0x7f0000001080)=[{0x0}, {0x0}], 0x2}, 0xea26}], 0x4, 0x2060, 0x0)

1.335668608s ago: executing program 4 (id=135):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfc, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000002005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0)

1.331115039s ago: executing program 2 (id=136):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0)
sendmsg$SMC_PNETID_DEL(r1, 0x0, 0x4000)
r2 = syz_open_dev$MSR(0x0, 0x8000002000000, 0x0)
read$msr(r2, 0x0, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x555)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0)
unshare(0x2c040000)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)={0x1c, r0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x20040000)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
r5 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x100000b, 0x2013, r5, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)

1.150000857s ago: executing program 3 (id=137):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
unshare(0xc040400)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, 0x0, 0x0)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="00000e000000000000c32517db79bc0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0x5, 0x0, 0x3, 0x50, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000001180)='kfree\x00', r3, 0x0, 0x4}, 0x18)
mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1d, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x20008001)
r4 = socket$inet6(0xa, 0x80803, 0x13)
getsockopt$inet6_int(r4, 0x29, 0x50, 0x0, &(0x7f00000003c0)=0x27)

1.134156058s ago: executing program 1 (id=138):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000d0000000100000040"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x80000}, 0x18)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000380)={r0, 0x0, 0x0}, 0x20)

1.11731261s ago: executing program 4 (id=139):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r1, 0x20, 0x0, 0x8000)

1.081066524s ago: executing program 1 (id=140):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50)
r3 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000})
fcntl$addseals(r3, 0x409, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000080000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/uts\x00')
lseek(r4, 0xfffffffffffffff4, 0x4)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r5, 0x0, 0x20000023896)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0xd4, r8, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x94, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xea2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xb}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffff001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x86}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x64bd}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffd}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xe}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4010}, 0x40000)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
socket$pppl2tp(0x18, 0x1, 0x1)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0xa, 0x300)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xb}, 0x94)
socket$packet(0x11, 0xa, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r10, 0x0, 0xa}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.080428684s ago: executing program 2 (id=141):
r0 = creat(&(0x7f0000000400)='./file1\x00', 0x143)
write$binfmt_elf32(r0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], 0x58e)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000940)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r1, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x7d}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffff7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x810)
r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x9, &(0x7f00000000c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x30, &(0x7f0000000240)=""/48, 0x41000, 0xcc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x5, 0x6, 0x7f}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000300)=[{0x1, 0x5, 0x6, 0x8}, {0x0, 0x1, 0x7, 0x5}, {0x1, 0x4, 0xd, 0x6}, {0x4, 0x4, 0x2, 0x8}], 0x10, 0x90}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000880)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x400448e3, 0x0)
bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)
pipe2$9p(&(0x7f0000000440), 0x80800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsopen(0x0, 0x0)
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = syz_pidfd_open(r7, 0x0)
syz_open_procfs(0x0, &(0x7f0000000480)='sessionid\x00')
pidfd_send_signal(r8, 0x2, 0x0, 0x0)
mlockall(0x2)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x1170, 0x1170, 0x118, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'vcan0\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@hl={{0x28}, {0x3, 0x65}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, [0xff, 0xff000000, 0xffffff00], [0xffffffff], 'rose0\x00', 'bond0\x00', {}, {0xff}, 0x2, 0x2, 0x5, 0x68}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x6, 'snmp_trap\x00', {0x8001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338)
dup2(r9, r2)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r10, 0x20, 0x0, 0x8000)

1.01909771s ago: executing program 3 (id=142):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xb3}, 0x18)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
munmap(&(0x7f0000004000/0x2000)=nil, 0x2000)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r7 = fcntl$dupfd(r6, 0x406, r6)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0xb, 0x1}, 0x5, 0x4, &(0x7f0000000340), 0x0, 0x0, 0x1000, 0x0, 0x1, 0x9, &(0x7f0000000540)="32922eb128699a1885b84a55e950b582c9338ccb0d21699299566e24adae3584af0585d7f33ef5278fac602eb1dc5c381c6a27f63648a0e75ff4126f91b7ee0299e4b88a5c55b1aecd9bc08aaa7c104bdef7c60a1a743f5f07d2f91b5520d72e1295ac1fe5136c50ba41ad24c4597dce709c3d4c533eda2947ace9223299b9b807847691cdc167a940797f368062743aef1fb72b"})
r8 = inotify_init1(0x0)
inotify_add_watch(r8, &(0x7f00000000c0)='.\x00', 0xa4000061)
syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)
read(r8, &(0x7f0000000140)=""/68, 0x44)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r10=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000fcdbdf25010007cc78f5688e", @ANYRES32=r10, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9fffbff"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r11}, 0x10)
close(r11)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

945.478427ms ago: executing program 4 (id=143):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000043c0)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto, @func_proto={0x0, 0x1}]}}, &(0x7f0000000f40)=""/4104, 0x3a, 0x1008, 0x1}, 0x1f)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0)
mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='noacl'])
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3)
pwritev(r1, &(0x7f0000001700)=[{&(0x7f0000000200)="aaa7", 0x2}, {0x0}], 0x2, 0xa, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e32, 0xfffffffd, @local, 0x4}, 0x1c)

851.688246ms ago: executing program 2 (id=144):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00')
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80)
perf_event_open(&(0x7f0000001000)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x8000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x88)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
pwrite64(0xffffffffffffffff, &(0x7f0000000880)='u', 0xf7d, 0x83)

683.049163ms ago: executing program 4 (id=145):
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0xa, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/156, 0x9c}, {&(0x7f0000000080)=""/128, 0x80}, {&(0x7f00000003c0)=""/151, 0x97}], 0x100003aa, &(0x7f0000000c40)=[{&(0x7f0000000240)=""/69, 0x45}, {&(0x7f00000006c0)=""/208, 0xd0}, {&(0x7f0000000580)=""/97, 0x61}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000a40)=""/116, 0x74}, {&(0x7f0000000ac0)=""/206, 0xce}, {&(0x7f0000000bc0)=""/97, 0x61}], 0x8, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r3 = socket(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f0000002dc0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0xd6ab, @private2, 0xc3ca}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000400)='t', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r5, 0x1)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000380)=0x2)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x200000000}, 0x18)
ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000180)={0x20, 0x0})
setsockopt(r5, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0340000001"], 0x48)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x41abcc9428181f53, 0xa}, {0x2, 0x10}, {0x0, 0xffe0}}}, 0x24}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r9, 0x0, 0x4804}, 0x18)
sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0)
close(r8)
socket$igmp(0x2, 0x3, 0x2)

633.269078ms ago: executing program 1 (id=146):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
recvmmsg(r2, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x1}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{&(0x7f0000001d80)=@caif, 0x80, &(0x7f0000001080)=[{0x0}, {0x0}], 0x2}, 0xea26}], 0x4, 0x2060, 0x0)

492.093712ms ago: executing program 1 (id=147):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c14"], 0x24}}, 0x4000000)
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x70, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0xc800}, 0x4000010)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

355.323375ms ago: executing program 1 (id=148):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil)
shmctl$IPC_RMID(r3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x1c, r5, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_setup(0x4, &(0x7f0000000040)=<r7=>0x0)
r8 = eventfd(0x0)
io_submit(r7, 0x1, &(0x7f0000000140)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc3, r8, 0x0, 0x0, 0x36}])

286.668852ms ago: executing program 3 (id=149):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50)
r3 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000})
fcntl$addseals(r3, 0x409, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000080000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/uts\x00')
lseek(r4, 0xfffffffffffffff4, 0x4)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r5, 0x0, 0x20000023896)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0xd4, r8, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x94, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xea2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xb}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffff001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x86}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x64bd}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffd}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xe}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4010}, 0x40000)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
socket$pppl2tp(0x18, 0x1, 0x1)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0xa, 0x300)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xb}, 0x94)
socket$packet(0x11, 0xa, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r10, 0x0, 0xa}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

83.593092ms ago: executing program 1 (id=150):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfc, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000002005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0)

634.15µs ago: executing program 4 (id=151):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000d0000000100000040"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x80000}, 0x18)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000380)={r0, 0x0, 0x0}, 0x20)

0s ago: executing program 4 (id=152):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
unshare(0xc040400)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, 0x0, 0x0)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="00000e000000000000c32517db79bc0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0x5, 0x0, 0x3, 0x50, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000001180)='kfree\x00', r3, 0x0, 0x4}, 0x18)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1d, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x20008001)
r4 = socket$inet6(0xa, 0x80803, 0x13)
getsockopt$inet6_int(r4, 0x29, 0x50, 0x0, &(0x7f00000003c0)=0x27)

kernel console output (not intermixed with test programs):



syzkaller
syzkaller login: [   15.029245][   T29] kauditd_printk_skb: 41 callbacks suppressed
[   15.029258][   T29] audit: type=1400 audit(1761515514.299:57): avc:  denied  { transition } for  pid=3191 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   15.033289][   T29] audit: type=1400 audit(1761515514.299:58): avc:  denied  { noatsecure } for  pid=3191 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   15.035945][   T29] audit: type=1400 audit(1761515514.309:59): avc:  denied  { write } for  pid=3191 comm="sh" path="pipe:[1464]" dev="pipefs" ino=1464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   15.038876][   T29] audit: type=1400 audit(1761515514.309:60): avc:  denied  { rlimitinh } for  pid=3191 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   15.041411][   T29] audit: type=1400 audit(1761515514.309:61): avc:  denied  { siginh } for  pid=3191 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts.
[   22.376992][   T29] audit: type=1400 audit(1761515521.649:62): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   22.400008][   T29] audit: type=1400 audit(1761515521.679:63): avc:  denied  { mount } for  pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.400740][ T3301] cgroup: Unknown subsys name 'net'
[   22.427665][   T29] audit: type=1400 audit(1761515521.699:64): avc:  denied  { unmount } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.580503][ T3301] cgroup: Unknown subsys name 'cpuset'
[   22.586585][ T3301] cgroup: Unknown subsys name 'rlimit'
[   22.755295][   T29] audit: type=1400 audit(1761515522.029:65): avc:  denied  { setattr } for  pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   22.783999][   T29] audit: type=1400 audit(1761515522.029:66): avc:  denied  { create } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   22.804548][   T29] audit: type=1400 audit(1761515522.029:67): avc:  denied  { write } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   22.810574][ T3305] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   22.824894][   T29] audit: type=1400 audit(1761515522.029:68): avc:  denied  { read } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   22.853662][   T29] audit: type=1400 audit(1761515522.049:69): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   22.856026][ T3301] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   22.878549][   T29] audit: type=1400 audit(1761515522.049:70): avc:  denied  { mount } for  pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   22.910633][   T29] audit: type=1400 audit(1761515522.109:71): avc:  denied  { relabelto } for  pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   24.808418][ T3312] chnl_net:caif_netlink_parms(): no params data found
[   24.844689][ T3319] chnl_net:caif_netlink_parms(): no params data found
[   24.914218][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.921489][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.928602][ T3312] bridge_slave_0: entered allmulticast mode
[   24.934969][ T3312] bridge_slave_0: entered promiscuous mode
[   24.953229][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.960392][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.967493][ T3312] bridge_slave_1: entered allmulticast mode
[   24.974101][ T3312] bridge_slave_1: entered promiscuous mode
[   24.988300][ T3313] chnl_net:caif_netlink_parms(): no params data found
[   25.024412][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.035472][ T3316] chnl_net:caif_netlink_parms(): no params data found
[   25.054062][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.072707][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.079757][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.086888][ T3319] bridge_slave_0: entered allmulticast mode
[   25.093222][ T3319] bridge_slave_0: entered promiscuous mode
[   25.102086][ T3322] chnl_net:caif_netlink_parms(): no params data found
[   25.120989][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.128039][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.135171][ T3319] bridge_slave_1: entered allmulticast mode
[   25.141708][ T3319] bridge_slave_1: entered promiscuous mode
[   25.159732][ T3312] team0: Port device team_slave_0 added
[   25.180724][ T3312] team0: Port device team_slave_1 added
[   25.191441][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.202647][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.209678][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.216848][ T3313] bridge_slave_0: entered allmulticast mode
[   25.223139][ T3313] bridge_slave_0: entered promiscuous mode
[   25.238840][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.253963][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.261052][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.268120][ T3313] bridge_slave_1: entered allmulticast mode
[   25.274454][ T3313] bridge_slave_1: entered promiscuous mode
[   25.285176][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.292224][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.299303][ T3316] bridge_slave_0: entered allmulticast mode
[   25.305534][ T3316] bridge_slave_0: entered promiscuous mode
[   25.316989][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.323943][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   25.349798][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.367020][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.374073][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.381271][ T3316] bridge_slave_1: entered allmulticast mode
[   25.387630][ T3316] bridge_slave_1: entered promiscuous mode
[   25.398575][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.405565][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   25.431543][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.456060][ T3319] team0: Port device team_slave_0 added
[   25.464355][ T3319] team0: Port device team_slave_1 added
[   25.475554][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.498306][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.505392][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.512502][ T3322] bridge_slave_0: entered allmulticast mode
[   25.518816][ T3322] bridge_slave_0: entered promiscuous mode
[   25.526071][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.535208][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.542257][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.549513][ T3322] bridge_slave_1: entered allmulticast mode
[   25.556012][ T3322] bridge_slave_1: entered promiscuous mode
[   25.563180][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.573228][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.583018][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.589965][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   25.615902][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.626969][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.633931][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   25.659894][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.693689][ T3313] team0: Port device team_slave_0 added
[   25.708679][ T3316] team0: Port device team_slave_0 added
[   25.718300][ T3313] team0: Port device team_slave_1 added
[   25.725124][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.739564][ T3316] team0: Port device team_slave_1 added
[   25.747310][ T3312] hsr_slave_0: entered promiscuous mode
[   25.753221][ T3312] hsr_slave_1: entered promiscuous mode
[   25.759845][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.794539][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.801533][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   25.827420][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.848648][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.855611][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   25.881630][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.898514][ T3322] team0: Port device team_slave_0 added
[   25.905154][ T3322] team0: Port device team_slave_1 added
[   25.911119][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.918124][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   25.944088][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.956888][ T3319] hsr_slave_0: entered promiscuous mode
[   25.963149][ T3319] hsr_slave_1: entered promiscuous mode
[   25.968835][ T3319] debugfs: 'hsr0' already exists in 'hsr'
[   25.974570][ T3319] Cannot create hsr debugfs directory
[   25.980250][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.987206][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   26.013174][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.037315][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.044324][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   26.070247][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.097608][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.104637][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   26.130510][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.164536][ T3313] hsr_slave_0: entered promiscuous mode
[   26.170457][ T3313] hsr_slave_1: entered promiscuous mode
[   26.176208][ T3313] debugfs: 'hsr0' already exists in 'hsr'
[   26.181929][ T3313] Cannot create hsr debugfs directory
[   26.189485][ T3316] hsr_slave_0: entered promiscuous mode
[   26.195436][ T3316] hsr_slave_1: entered promiscuous mode
[   26.201266][ T3316] debugfs: 'hsr0' already exists in 'hsr'
[   26.206968][ T3316] Cannot create hsr debugfs directory
[   26.259250][ T3322] hsr_slave_0: entered promiscuous mode
[   26.265160][ T3322] hsr_slave_1: entered promiscuous mode
[   26.271085][ T3322] debugfs: 'hsr0' already exists in 'hsr'
[   26.276793][ T3322] Cannot create hsr debugfs directory
[   26.410617][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   26.419315][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   26.430008][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   26.440841][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   26.455683][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   26.466357][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   26.477950][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   26.486374][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   26.512565][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   26.522176][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   26.533432][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   26.542250][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   26.578325][ T3322] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   26.598134][ T3322] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   26.606827][ T3322] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   26.616425][ T3322] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   26.634601][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   26.644072][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   26.657498][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   26.667186][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   26.703453][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   26.723888][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0
[   26.736458][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0
[   26.755690][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   26.766446][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0
[   26.775367][ T3319] 8021q: adding VLAN 0 to HW filter on device team0
[   26.785564][ T3316] 8021q: adding VLAN 0 to HW filter on device team0
[   26.796097][ T1604] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.803237][ T1604] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.814113][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.821206][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.834314][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.841366][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.852375][  T406] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.859425][  T406] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.869082][ T3313] 8021q: adding VLAN 0 to HW filter on device team0
[   26.878382][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0
[   26.889187][  T406] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.896322][  T406] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.912275][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.919394][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.929997][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.937088][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.951907][ T3322] 8021q: adding VLAN 0 to HW filter on device team0
[   26.964447][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.971510][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.982421][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.989464][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.023315][  T406] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.030403][  T406] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.054992][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   27.116343][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.178027][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.192932][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.204636][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.221318][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.294076][ T3312] veth0_vlan: entered promiscuous mode
[   27.304663][ T3312] veth1_vlan: entered promiscuous mode
[   27.359817][ T3316] veth0_vlan: entered promiscuous mode
[   27.366259][ T3312] veth0_macvtap: entered promiscuous mode
[   27.377058][ T3312] veth1_macvtap: entered promiscuous mode
[   27.384410][ T3322] veth0_vlan: entered promiscuous mode
[   27.398323][ T3322] veth1_vlan: entered promiscuous mode
[   27.406975][ T3316] veth1_vlan: entered promiscuous mode
[   27.413940][ T3319] veth0_vlan: entered promiscuous mode
[   27.427091][ T3322] veth0_macvtap: entered promiscuous mode
[   27.439399][ T3319] veth1_vlan: entered promiscuous mode
[   27.456858][ T3322] veth1_macvtap: entered promiscuous mode
[   27.465092][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   27.475446][ T3313] veth0_vlan: entered promiscuous mode
[   27.484941][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0
[   27.495892][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1
[   27.503528][ T3313] veth1_vlan: entered promiscuous mode
[   27.511764][ T3319] veth0_macvtap: entered promiscuous mode
[   27.518831][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   27.534252][ T3316] veth0_macvtap: entered promiscuous mode
[   27.541577][ T3316] veth1_macvtap: entered promiscuous mode
[   27.547871][ T3319] veth1_macvtap: entered promiscuous mode
[   27.554702][  T555] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   27.564042][  T555] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   27.577839][  T555] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   27.589243][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0
[   27.601120][  T555] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   27.611136][  T555] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   27.619827][  T555] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   27.633590][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1
[   27.641319][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0
[   27.652026][  T555] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   27.665659][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1
[   27.673653][   T29] kauditd_printk_skb: 10 callbacks suppressed
[   27.673735][   T29] audit: type=1400 audit(1761515526.949:82): avc:  denied  { mounton } for  pid=3312 comm="syz-executor" path="/root/syzkaller.7cOQ8M/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   27.704871][   T29] audit: type=1400 audit(1761515526.949:83): avc:  denied  { mount } for  pid=3312 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   27.726853][   T29] audit: type=1400 audit(1761515526.949:84): avc:  denied  { mounton } for  pid=3312 comm="syz-executor" path="/root/syzkaller.7cOQ8M/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   27.752039][   T29] audit: type=1400 audit(1761515526.949:85): avc:  denied  { mount } for  pid=3312 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   27.773786][   T29] audit: type=1400 audit(1761515526.949:86): avc:  denied  { mounton } for  pid=3312 comm="syz-executor" path="/root/syzkaller.7cOQ8M/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   27.800321][   T29] audit: type=1400 audit(1761515526.949:87): avc:  denied  { mounton } for  pid=3312 comm="syz-executor" path="/root/syzkaller.7cOQ8M/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   27.827674][   T29] audit: type=1400 audit(1761515526.949:88): avc:  denied  { unmount } for  pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   27.848430][   T29] audit: type=1400 audit(1761515526.979:89): avc:  denied  { mounton } for  pid=3312 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   27.871376][   T29] audit: type=1400 audit(1761515526.979:90): avc:  denied  { mount } for  pid=3312 comm="syz-executor" name="/" dev="gadgetfs" ino=4873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   27.898004][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   27.900764][ T3313] veth0_macvtap: entered promiscuous mode
[   27.920997][ T1604] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   27.929773][ T1604] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   27.945108][ T3313] veth1_macvtap: entered promiscuous mode
[   27.953035][ T1604] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   27.971169][   T29] audit: type=1400 audit(1761515527.239:91): avc:  denied  { read write } for  pid=3312 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   28.000067][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   28.015189][ T1604] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   28.027893][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   28.046154][ T1604] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   28.055349][ T1604] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   28.107409][ T3489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'.
[   28.125159][ T1604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   28.149769][ T1604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   28.159718][ T3495] syz.2.7 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   28.170944][ T1604] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   28.183263][ T3495] loop2: detected capacity change from 0 to 512
[   28.191981][ T1604] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   28.230174][ T3502] FAULT_INJECTION: forcing a failure.
[   28.230174][ T3502] name failslab, interval 1, probability 0, space 0, times 1
[   28.239055][ T1604] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   28.242855][ T3502] CPU: 1 UID: 0 PID: 3502 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   28.242881][ T3502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   28.242892][ T3502] Call Trace:
[   28.242898][ T3502]  <TASK>
[   28.242906][ T3502]  __dump_stack+0x1d/0x30
[   28.242932][ T3502]  dump_stack_lvl+0xe8/0x140
[   28.242962][ T3502]  dump_stack+0x15/0x1b
[   28.243005][ T3502]  should_fail_ex+0x265/0x280
[   28.243023][ T3502]  should_failslab+0x8c/0xb0
[   28.243048][ T3502]  kmem_cache_alloc_noprof+0x50/0x480
[   28.243074][ T3502]  ? alloc_empty_file+0x76/0x200
[   28.243126][ T3502]  ? mntput+0x4b/0x80
[   28.243143][ T3502]  alloc_empty_file+0x76/0x200
[   28.243208][ T3502]  path_openat+0x68/0x2170
[   28.243228][ T3502]  ? _parse_integer_limit+0x170/0x190
[   28.243258][ T3502]  ? kstrtoull+0x111/0x140
[   28.243289][ T3502]  ? kstrtouint+0x76/0xc0
[   28.243351][ T3502]  do_filp_open+0x109/0x230
[   28.243378][ T3502]  do_sys_openat2+0xa6/0x110
[   28.243397][ T3502]  __x64_sys_openat+0xf2/0x120
[   28.243417][ T3502]  x64_sys_call+0x2eab/0x3000
[   28.243502][ T3502]  do_syscall_64+0xd2/0x200
[   28.243519][ T3502]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   28.243622][ T3502]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   28.243725][ T3502]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   28.243745][ T3502] RIP: 0033:0x7f1b03b7d810
[   28.243759][ T3502] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[   28.243775][ T3502] RSP: 002b:00007f1b025e6f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[   28.243797][ T3502] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1b03b7d810
[   28.243809][ T3502] RDX: 0000000000000002 RSI: 00007f1b025e6fa0 RDI: 00000000ffffff9c
[   28.243821][ T3502] RBP: 00007f1b025e6fa0 R08: 0000000000000000 R09: 0000000000000000
[   28.243930][ T3502] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[   28.243942][ T3502] R13: 00007f1b03dd6038 R14: 00007f1b03dd5fa0 R15: 00007ffe50e2f728
[   28.244013][ T3502]  </TASK>
[   28.432458][ T3495] EXT4-fs (loop2): too many log groups per flexible block group
[   28.438161][ T1604] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   28.465978][ T3495] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   28.480790][ T3495] EXT4-fs (loop2): mount failed
[   28.494533][ T3512] syz.4.9 (3512) used greatest stack depth: 10512 bytes left
[   28.521438][ T1604] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   28.602673][ T3516] capability: warning: `syz.2.10' uses 32-bit capabilities (legacy support in use)
[   28.645818][ T3524] loop3: detected capacity change from 0 to 512
[   28.663911][ T3524] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   28.675457][ T3524] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[   28.685557][ T3524] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.12: Corrupt directory, running e2fsck is recommended
[   28.704870][ T3524] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   28.713624][ T3524] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.12: corrupted in-inode xattr: invalid ea_ino
[   28.727214][ T3524] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.12: couldn't read orphan inode 15 (err -117)
[   28.746634][ T3524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   28.768389][ T3532] loop4: detected capacity change from 0 to 512
[   28.786670][ T3532] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   28.798273][ T3532] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[   28.808502][ T3532] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.15: Corrupt directory, running e2fsck is recommended
[   28.811431][ T3539] loop2: detected capacity change from 0 to 128
[   28.821720][ T3532] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[   28.828203][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   28.842616][ T3532] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.15: corrupted in-inode xattr: invalid ea_ino
[   28.858069][ T3532] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.15: couldn't read orphan inode 15 (err -117)
[   28.874701][ T3539] binfmt_misc: register: failed to install interpreter file ./file2
[   28.886170][ T3532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   28.954097][ T3546] loop3: detected capacity change from 0 to 1024
[   28.986411][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.094801][ T3546] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 4294967282)!
[   29.105706][ T3546] EXT4-fs (loop3): group descriptors corrupted!
[   29.113082][ T3554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'.
[   29.296459][ T3570] FAULT_INJECTION: forcing a failure.
[   29.296459][ T3570] name failslab, interval 1, probability 0, space 0, times 0
[   29.309144][ T3570] CPU: 0 UID: 0 PID: 3570 Comm: syz.4.21 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   29.309170][ T3570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   29.309182][ T3570] Call Trace:
[   29.309190][ T3570]  <TASK>
[   29.309198][ T3570]  __dump_stack+0x1d/0x30
[   29.309294][ T3570]  dump_stack_lvl+0xe8/0x140
[   29.309313][ T3570]  dump_stack+0x15/0x1b
[   29.309326][ T3570]  should_fail_ex+0x265/0x280
[   29.309346][ T3570]  should_failslab+0x8c/0xb0
[   29.309369][ T3570]  kmem_cache_alloc_noprof+0x50/0x480
[   29.309428][ T3570]  ? prepare_creds+0x37/0x4c0
[   29.309502][ T3570]  prepare_creds+0x37/0x4c0
[   29.309526][ T3570]  copy_creds+0x8f/0x3f0
[   29.309551][ T3570]  copy_process+0x658/0x2000
[   29.309576][ T3570]  ? kstrtouint+0x76/0xc0
[   29.309670][ T3570]  ? __rcu_read_unlock+0x4f/0x70
[   29.309692][ T3570]  kernel_clone+0x16c/0x5c0
[   29.309770][ T3570]  ? vfs_write+0x7e8/0x960
[   29.309791][ T3570]  __x64_sys_clone+0xe6/0x120
[   29.309850][ T3570]  x64_sys_call+0x119c/0x3000
[   29.309873][ T3570]  do_syscall_64+0xd2/0x200
[   29.309891][ T3570]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   29.309916][ T3570]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   29.309943][ T3570]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   29.310027][ T3570] RIP: 0033:0x7f1b03b7efc9
[   29.310145][ T3570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   29.310214][ T3570] RSP: 002b:00007f1b025a4fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   29.310233][ T3570] RAX: ffffffffffffffda RBX: 00007f1b03dd6180 RCX: 00007f1b03b7efc9
[   29.310246][ T3570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042164000
[   29.310259][ T3570] RBP: 00007f1b025a5090 R08: 0000000000000000 R09: 0000000000000000
[   29.310271][ T3570] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[   29.310358][ T3570] R13: 00007f1b03dd6218 R14: 00007f1b03dd6180 R15: 00007ffe50e2f728
[   29.310440][ T3570]  </TASK>
[   29.582011][ T3572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.27'.
[   29.604324][ T3565] loop3: detected capacity change from 0 to 1024
[   29.606042][ T3565] =======================================================
[   29.606042][ T3565] WARNING: The mand mount option has been deprecated and
[   29.606042][ T3565]          and is ignored by this kernel. Remove the mand
[   29.606042][ T3565]          option from the mount to silence this warning.
[   29.606042][ T3565] =======================================================
[   29.606209][ T3565] EXT4-fs: Ignoring removed bh option
[   29.725185][ T3565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   30.101089][ T3594] loop4: detected capacity change from 0 to 1024
[   30.131392][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.272493][ T3594] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   30.283439][ T3594] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   30.314143][ T3600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'.
[   30.341617][ T3594] JBD2: no valid journal superblock found
[   30.347402][ T3594] EXT4-fs (loop4): Could not load journal inode
[   30.363800][ T3394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1
[   30.371285][ T3394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   30.372010][ T3605] loop1: detected capacity change from 0 to 128
[   30.378673][ T3394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   30.378696][ T3394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   30.378715][ T3394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   30.378735][ T3394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   30.394862][ T3394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   30.422251][ T3394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   30.429638][ T3394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   30.437268][ T3394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2
[   30.444745][ T3394] hid-generic 0000:0000:0000.0001: collection stack underflow
[   30.452236][ T3394] hid-generic 0000:0000:0000.0001: item 0 0 0 12 parsing failed
[   30.487499][ T3394] hid-generic 0000:0000:0000.0001: probe with driver hid-generic failed with error -22
[   30.500577][ T3608] FAT-fs (loop1): error, corrupted directory (invalid entries)
[   30.508127][ T3608] FAT-fs (loop1): Filesystem has been set read-only
[   30.618499][ T3594] loop4: detected capacity change from 0 to 512
[   30.631228][ T3605] FAT-fs (loop1): error, corrupted directory (invalid entries)
[   30.639659][ T3594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   30.941695][ T3608] FAT-fs (loop1): error, corrupted directory (invalid entries)
[   30.972008][ T3605] FAT-fs (loop1): error, corrupted directory (invalid entries)
[   31.051330][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.129475][ T3625] FAULT_INJECTION: forcing a failure.
[   31.129475][ T3625] name failslab, interval 1, probability 0, space 0, times 0
[   31.142323][ T3625] CPU: 0 UID: 0 PID: 3625 Comm: syz.1.42 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   31.142345][ T3625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   31.142355][ T3625] Call Trace:
[   31.142361][ T3625]  <TASK>
[   31.142369][ T3625]  __dump_stack+0x1d/0x30
[   31.142388][ T3625]  dump_stack_lvl+0xe8/0x140
[   31.142410][ T3625]  dump_stack+0x15/0x1b
[   31.142496][ T3625]  should_fail_ex+0x265/0x280
[   31.142511][ T3625]  ? __pfx_shmem_alloc_inode+0x10/0x10
[   31.142564][ T3625]  should_failslab+0x8c/0xb0
[   31.142586][ T3625]  kmem_cache_alloc_lru_noprof+0x55/0x490
[   31.142609][ T3625]  ? shmem_alloc_inode+0x34/0x50
[   31.142626][ T3625]  ? __pfx_shmem_alloc_inode+0x10/0x10
[   31.142646][ T3625]  shmem_alloc_inode+0x34/0x50
[   31.142689][ T3625]  alloc_inode+0x40/0x170
[   31.142789][ T3625]  new_inode+0x1d/0xe0
[   31.142808][ T3625]  shmem_get_inode+0x244/0x750
[   31.142832][ T3625]  __shmem_file_setup+0x113/0x210
[   31.142852][ T3625]  shmem_file_setup+0x3b/0x50
[   31.142870][ T3625]  __se_sys_memfd_create+0x2c3/0x590
[   31.142906][ T3625]  __x64_sys_memfd_create+0x31/0x40
[   31.142987][ T3625]  x64_sys_call+0x2ac2/0x3000
[   31.143057][ T3625]  do_syscall_64+0xd2/0x200
[   31.143075][ T3625]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   31.143169][ T3625]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   31.143191][ T3625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   31.143257][ T3625] RIP: 0033:0x7f8326eeefc9
[   31.143272][ T3625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   31.143286][ T3625] RSP: 002b:00007f8325956e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   31.143302][ T3625] RAX: ffffffffffffffda RBX: 00000000000004aa RCX: 00007f8326eeefc9
[   31.143312][ T3625] RDX: 00007f8325956ef0 RSI: 0000000000000000 RDI: 00007f8326f72960
[   31.143322][ T3625] RBP: 0000200000000740 R08: 00007f8325956bb7 R09: 00007f8325956e40
[   31.143332][ T3625] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080
[   31.143342][ T3625] R13: 00007f8325956ef0 R14: 00007f8325956eb0 R15: 00002000000004c0
[   31.143377][ T3625]  </TASK>
[   31.418375][ T3635] loop4: detected capacity change from 0 to 512
[   31.426373][ T3637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'.
[   31.444704][ T3635] EXT4-fs: Ignoring removed i_version option
[   31.450821][ T3635] EXT4-fs: Ignoring removed bh option
[   31.472151][ T3629] syz.0.44 (3629) used greatest stack depth: 10160 bytes left
[   31.492954][ T3635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.509978][ T3635] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   31.520456][ T3644] loop0: detected capacity change from 0 to 1024
[   31.527404][ T3644] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   31.537871][ T3644] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[   31.554271][ T3644] EXT4-fs (loop0): failed to initialize system zone (-117)
[   31.561932][ T3644] EXT4-fs (loop0): mount failed
[   31.562599][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.607403][ T3648] loop4: detected capacity change from 0 to 1024
[   31.624970][ T3648] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   31.635981][ T3648] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   31.681309][ T3660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'.
[   31.691648][ T3648] JBD2: no valid journal superblock found
[   31.697392][ T3648] EXT4-fs (loop4): Could not load journal inode
[   31.725428][ T3648] loop4: detected capacity change from 0 to 512
[   31.760603][ T3648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.819923][ T3666] 9pnet: Could not find request transport: t
[   31.890907][ T3676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.60'.
[   31.900586][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.926650][ T3678] loop0: detected capacity change from 0 to 1024
[   31.974427][ T3678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.990795][ T3694] FAULT_INJECTION: forcing a failure.
[   31.990795][ T3694] name failslab, interval 1, probability 0, space 0, times 0
[   32.003432][ T3694] CPU: 1 UID: 0 PID: 3694 Comm: syz.3.66 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   32.003459][ T3694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   32.003472][ T3694] Call Trace:
[   32.003479][ T3694]  <TASK>
[   32.003486][ T3694]  __dump_stack+0x1d/0x30
[   32.003533][ T3694]  dump_stack_lvl+0xe8/0x140
[   32.003549][ T3694]  dump_stack+0x15/0x1b
[   32.003563][ T3694]  should_fail_ex+0x265/0x280
[   32.003578][ T3694]  ? rtnl_newlink+0x5c/0x12d0
[   32.003630][ T3694]  should_failslab+0x8c/0xb0
[   32.003674][ T3694]  __kmalloc_cache_noprof+0x4c/0x4a0
[   32.003702][ T3694]  rtnl_newlink+0x5c/0x12d0
[   32.003736][ T3694]  ? xas_load+0x413/0x430
[   32.003794][ T3694]  ? xas_load+0x413/0x430
[   32.003820][ T3694]  ? __memcg_slab_free_hook+0x135/0x230
[   32.003846][ T3694]  ? __rcu_read_unlock+0x4f/0x70
[   32.003912][ T3694]  ? avc_has_perm_noaudit+0x1b1/0x200
[   32.003933][ T3694]  ? cred_has_capability+0x210/0x280
[   32.003960][ T3694]  ? selinux_capable+0x31/0x40
[   32.003997][ T3694]  ? security_capable+0x83/0x90
[   32.004026][ T3694]  ? ns_capable+0x7d/0xb0
[   32.004047][ T3694]  ? __pfx_rtnl_newlink+0x10/0x10
[   32.004125][ T3694]  rtnetlink_rcv_msg+0x5fe/0x6d0
[   32.004227][ T3694]  netlink_rcv_skb+0x123/0x220
[   32.004255][ T3694]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   32.004316][ T3694]  rtnetlink_rcv+0x1c/0x30
[   32.004345][ T3694]  netlink_unicast+0x5c0/0x690
[   32.004372][ T3694]  netlink_sendmsg+0x58b/0x6b0
[   32.004388][ T3694]  ? __pfx_netlink_sendmsg+0x10/0x10
[   32.004403][ T3694]  __sock_sendmsg+0x145/0x180
[   32.004424][ T3694]  ____sys_sendmsg+0x31e/0x4e0
[   32.004502][ T3694]  ___sys_sendmsg+0x17b/0x1d0
[   32.004535][ T3694]  __x64_sys_sendmsg+0xd4/0x160
[   32.004591][ T3694]  x64_sys_call+0x191e/0x3000
[   32.004613][ T3694]  do_syscall_64+0xd2/0x200
[   32.004627][ T3694]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   32.004649][ T3694]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   32.004685][ T3694]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   32.004706][ T3694] RIP: 0033:0x7f2329c4efc9
[   32.004721][ T3694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   32.004738][ T3694] RSP: 002b:00007f23286af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   32.004757][ T3694] RAX: ffffffffffffffda RBX: 00007f2329ea5fa0 RCX: 00007f2329c4efc9
[   32.004769][ T3694] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003
[   32.004780][ T3694] RBP: 00007f23286af090 R08: 0000000000000000 R09: 0000000000000000
[   32.004858][ T3694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   32.004867][ T3694] R13: 00007f2329ea6038 R14: 00007f2329ea5fa0 R15: 00007ffd66387978
[   32.004881][ T3694]  </TASK>
[   32.350996][ T3678] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[   32.351206][ T3704] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[   32.378495][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.432090][ T3714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.72'.
[   32.461184][ T3718] loop3: detected capacity change from 0 to 1024
[   32.469488][ T3718] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   32.480453][ T3718] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   32.501817][ T3720] FAULT_INJECTION: forcing a failure.
[   32.501817][ T3720] name failslab, interval 1, probability 0, space 0, times 0
[   32.514703][ T3716] loop0: detected capacity change from 0 to 1024
[   32.515250][ T3716] EXT4-fs: Ignoring removed bh option
[   32.521330][ T3720] CPU: 1 UID: 0 PID: 3720 Comm: syz.2.61 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   32.521354][ T3720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   32.521396][ T3720] Call Trace:
[   32.521401][ T3720]  <TASK>
[   32.521409][ T3720]  __dump_stack+0x1d/0x30
[   32.521429][ T3720]  dump_stack_lvl+0xe8/0x140
[   32.521446][ T3720]  dump_stack+0x15/0x1b
[   32.521540][ T3720]  should_fail_ex+0x265/0x280
[   32.521559][ T3720]  should_failslab+0x8c/0xb0
[   32.521583][ T3720]  kmem_cache_alloc_lru_noprof+0x55/0x490
[   32.521640][ T3720]  ? __d_alloc+0x3d/0x340
[   32.521667][ T3720]  __d_alloc+0x3d/0x340
[   32.521693][ T3720]  d_alloc_pseudo+0x1e/0x80
[   32.521788][ T3720]  alloc_file_pseudo+0x71/0x160
[   32.521865][ T3720]  ? alloc_fd+0x38a/0x3c0
[   32.521954][ T3720]  anon_inode_getfile_fmode+0xa5/0x140
[   32.521975][ T3720]  do_eventfd+0x116/0x1b0
[   32.521998][ T3720]  __x64_sys_eventfd2+0x2d/0x40
[   32.522035][ T3720]  x64_sys_call+0x2ecc/0x3000
[   32.522069][ T3720]  do_syscall_64+0xd2/0x200
[   32.522086][ T3720]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   32.522110][ T3720]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   32.522156][ T3720]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   32.522176][ T3720] RIP: 0033:0x7f976f79efc9
[   32.522263][ T3720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   32.522294][ T3720] RSP: 002b:00007f976e207038 EFLAGS: 00000246 ORIG_RAX: 0000000000000122
[   32.522312][ T3720] RAX: ffffffffffffffda RBX: 00007f976f9f5fa0 RCX: 00007f976f79efc9
[   32.522377][ T3720] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 000000000000ce77
[   32.522389][ T3720] RBP: 00007f976e207090 R08: 0000000000000000 R09: 0000000000000000
[   32.522400][ T3720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   32.522439][ T3720] R13: 00007f976f9f6038 R14: 00007f976f9f5fa0 R15: 00007ffdf97f9cd8
[   32.522504][ T3720]  </TASK>
[   32.542515][ T3718] JBD2: no valid journal superblock found
[   32.572136][ T3723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.74'.
[   32.575437][ T3718] EXT4-fs (loop3): Could not load journal inode
[   32.582420][ T3716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.629955][ T3718] loop3: detected capacity change from 0 to 512
[   32.677696][ T3729] FAULT_INJECTION: forcing a failure.
[   32.677696][ T3729] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   32.702447][   T29] kauditd_printk_skb: 1930 callbacks suppressed
[   32.702461][   T29] audit: type=1326 audit(1761515531.969:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2329c45e67 code=0x7ffc0000
[   32.703512][ T3729] CPU: 1 UID: 0 PID: 3729 Comm: syz.2.75 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   32.703572][ T3729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   32.703583][ T3729] Call Trace:
[   32.703589][ T3729]  <TASK>
[   32.703596][ T3729]  __dump_stack+0x1d/0x30
[   32.703618][ T3729]  dump_stack_lvl+0xe8/0x140
[   32.703636][ T3729]  dump_stack+0x15/0x1b
[   32.703652][ T3729]  should_fail_ex+0x265/0x280
[   32.703688][ T3729]  should_fail+0xb/0x20
[   32.703703][ T3729]  should_fail_usercopy+0x1a/0x20
[   32.703722][ T3729]  _copy_from_user+0x1c/0xb0
[   32.703809][ T3729]  __x64_sys_epoll_ctl+0x92/0x100
[   32.703838][ T3729]  x64_sys_call+0x706/0x3000
[   32.703858][ T3729]  do_syscall_64+0xd2/0x200
[   32.703938][ T3729]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   32.703962][ T3729]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   32.703989][ T3729]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   32.704053][ T3729] RIP: 0033:0x7f976f79efc9
[   32.704067][ T3729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   32.704094][ T3729] RSP: 002b:00007f976e207038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[   32.704112][ T3729] RAX: ffffffffffffffda RBX: 00007f976f9f5fa0 RCX: 00007f976f79efc9
[   32.704123][ T3729] RDX: 0000000000000005 RSI: 0000000000000003 RDI: 0000000000000004
[   32.704134][ T3729] RBP: 00007f976e207090 R08: 0000000000000000 R09: 0000000000000000
[   32.704146][ T3729] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001
[   32.704182][ T3729] R13: 00007f976f9f6038 R14: 00007f976f9f5fa0 R15: 00007ffdf97f9cd8
[   32.704198][ T3729]  </TASK>
[   32.713810][ T3718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.720002][   T29] audit: type=1326 audit(1761515531.969:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2329beb099 code=0x7ffc0000
[   33.009383][   T29] audit: type=1326 audit(1761515531.969:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2329c4dc2a code=0x7ffc0000
[   33.032707][   T29] audit: type=1326 audit(1761515531.969:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2329c45e67 code=0x7ffc0000
[   33.056028][   T29] audit: type=1326 audit(1761515531.969:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2329beb099 code=0x7ffc0000
[   33.079546][   T29] audit: type=1326 audit(1761515531.969:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2329c45e67 code=0x7ffc0000
[   33.103119][   T29] audit: type=1326 audit(1761515531.969:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2329beb099 code=0x7ffc0000
[   33.126347][   T29] audit: type=1326 audit(1761515531.969:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2329c45e67 code=0x7ffc0000
[   33.149540][   T29] audit: type=1326 audit(1761515531.969:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2329beb099 code=0x7ffc0000
[   33.172957][   T29] audit: type=1326 audit(1761515531.969:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2329c45e67 code=0x7ffc0000
[   33.291271][ T3740] loop2: detected capacity change from 0 to 512
[   33.317035][ T3740] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   33.326414][ T3740] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 1024: comm syz.2.79: invalid block
[   33.328849][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.337828][ T3740] EXT4-fs (loop2): Remounting filesystem read-only
[   33.353389][ T3740] EXT4-fs (loop2): 1 truncate cleaned up
[   33.359444][ T3740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.391299][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.400779][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.429338][ T3750] FAULT_INJECTION: forcing a failure.
[   33.429338][ T3750] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   33.442533][ T3750] CPU: 1 UID: 0 PID: 3750 Comm: syz.2.83 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   33.442554][ T3750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   33.442564][ T3750] Call Trace:
[   33.442569][ T3750]  <TASK>
[   33.442575][ T3750]  __dump_stack+0x1d/0x30
[   33.442639][ T3750]  dump_stack_lvl+0xe8/0x140
[   33.442655][ T3750]  dump_stack+0x15/0x1b
[   33.442668][ T3750]  should_fail_ex+0x265/0x280
[   33.442683][ T3750]  should_fail+0xb/0x20
[   33.442695][ T3750]  should_fail_usercopy+0x1a/0x20
[   33.442772][ T3750]  _copy_from_user+0x1c/0xb0
[   33.442791][ T3750]  ___sys_sendmsg+0xc1/0x1d0
[   33.442882][ T3750]  __x64_sys_sendmsg+0xd4/0x160
[   33.442907][ T3750]  x64_sys_call+0x191e/0x3000
[   33.442980][ T3750]  do_syscall_64+0xd2/0x200
[   33.442994][ T3750]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   33.443021][ T3750]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   33.443043][ T3750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   33.443167][ T3750] RIP: 0033:0x7f976f79efc9
[   33.443180][ T3750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   33.443193][ T3750] RSP: 002b:00007f976e207038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   33.443224][ T3750] RAX: ffffffffffffffda RBX: 00007f976f9f5fa0 RCX: 00007f976f79efc9
[   33.443234][ T3750] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[   33.443258][ T3750] RBP: 00007f976e207090 R08: 0000000000000000 R09: 0000000000000000
[   33.443267][ T3750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   33.443277][ T3750] R13: 00007f976f9f6038 R14: 00007f976f9f5fa0 R15: 00007ffdf97f9cd8
[   33.443290][ T3750]  </TASK>
[   33.644352][ T3760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'.
[   33.682775][ T3771] netlink: 'syz.4.89': attribute type 10 has an invalid length.
[   33.691436][ T3762] loop3: detected capacity change from 0 to 1024
[   33.702663][ T3762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.715514][ T3771] team0: Port device dummy0 added
[   33.742322][ T3779] loop4: detected capacity change from 0 to 1024
[   33.760973][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.775788][ T3781] loop2: detected capacity change from 0 to 1024
[   33.788271][ T3784] loop0: detected capacity change from 0 to 1024
[   33.795860][ T3779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.814012][ T3784] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   33.824924][ T3784] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   33.868074][ T3784] JBD2: no valid journal superblock found
[   33.873867][ T3784] EXT4-fs (loop0): Could not load journal inode
[   33.891320][ T3781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.908064][ T3781] FAULT_INJECTION: forcing a failure.
[   33.908064][ T3781] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   33.921196][ T3781] CPU: 1 UID: 0 PID: 3781 Comm: syz.2.93 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   33.921223][ T3781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   33.921235][ T3781] Call Trace:
[   33.921242][ T3781]  <TASK>
[   33.921286][ T3781]  __dump_stack+0x1d/0x30
[   33.921303][ T3781]  dump_stack_lvl+0xe8/0x140
[   33.921321][ T3781]  dump_stack+0x15/0x1b
[   33.921348][ T3781]  should_fail_ex+0x265/0x280
[   33.921368][ T3781]  should_fail+0xb/0x20
[   33.921384][ T3781]  should_fail_usercopy+0x1a/0x20
[   33.921505][ T3781]  copy_fpstate_to_sigframe+0x628/0x7d0
[   33.921595][ T3781]  ? copy_fpstate_to_sigframe+0xe6/0x7d0
[   33.921625][ T3781]  ? get_signal+0xaec/0xf70
[   33.921664][ T3781]  ? x86_task_fpu+0x36/0x60
[   33.921690][ T3781]  get_sigframe+0x34d/0x490
[   33.921705][ T3781]  ? get_signal+0xdc7/0xf70
[   33.921723][ T3781]  x64_setup_rt_frame+0xa8/0x580
[   33.921742][ T3781]  arch_do_signal_or_restart+0x23e/0x440
[   33.921786][ T3781]  exit_to_user_mode_loop+0x77/0x110
[   33.921811][ T3781]  do_syscall_64+0x1d6/0x200
[   33.921830][ T3781]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   33.921897][ T3781]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   33.921922][ T3781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   33.921944][ T3781] RIP: 0033:0x7f976f79da7f
[   33.921960][ T3781] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[   33.921980][ T3781] RSP: 002b:00007f976e207030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   33.922000][ T3781] RAX: 0000000000000001 RBX: 0000000000000005 RCX: 00007f976f79da7f
[   33.922012][ T3781] RDX: 0000000000000001 RSI: 00007f976e207090 RDI: 0000000000000005
[   33.922025][ T3781] RBP: 00007f976e207090 R08: 0000000000000000 R09: 00007f976e206df7
[   33.922037][ T3781] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[   33.922056][ T3781] R13: 00007f976f9f6038 R14: 00007f976f9f5fa0 R15: 00007ffdf97f9cd8
[   33.922073][ T3781]  </TASK>
[   34.120879][ T3784] loop0: detected capacity change from 0 to 512
[   34.157269][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.182363][ T3784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.226760][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.348446][ T3807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'.
[   34.741079][ T3820] netlink: 'syz.3.106': attribute type 3 has an invalid length.
[   34.769259][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.797744][ T3826] FAULT_INJECTION: forcing a failure.
[   34.797744][ T3826] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   34.810913][ T3826] CPU: 0 UID: 0 PID: 3826 Comm: syz.1.107 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   34.811001][ T3826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   34.811013][ T3826] Call Trace:
[   34.811020][ T3826]  <TASK>
[   34.811027][ T3826]  __dump_stack+0x1d/0x30
[   34.811076][ T3826]  dump_stack_lvl+0xe8/0x140
[   34.811092][ T3826]  dump_stack+0x15/0x1b
[   34.811182][ T3826]  should_fail_ex+0x265/0x280
[   34.811199][ T3826]  should_fail+0xb/0x20
[   34.811213][ T3826]  should_fail_usercopy+0x1a/0x20
[   34.811230][ T3826]  _copy_from_user+0x1c/0xb0
[   34.811251][ T3826]  ___sys_sendmsg+0xc1/0x1d0
[   34.811319][ T3826]  __sys_sendmmsg+0x178/0x300
[   34.811340][ T3826]  __x64_sys_sendmmsg+0x57/0x70
[   34.811355][ T3826]  x64_sys_call+0x1c4a/0x3000
[   34.811395][ T3826]  do_syscall_64+0xd2/0x200
[   34.811412][ T3826]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   34.811519][ T3826]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   34.811627][ T3826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   34.811648][ T3826] RIP: 0033:0x7f8326eeefc9
[   34.811675][ T3826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   34.811692][ T3826] RSP: 002b:00007f8325957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   34.811710][ T3826] RAX: ffffffffffffffda RBX: 00007f8327145fa0 RCX: 00007f8326eeefc9
[   34.811721][ T3826] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007
[   34.811806][ T3826] RBP: 00007f8325957090 R08: 0000000000000000 R09: 0000000000000000
[   34.811817][ T3826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   34.811836][ T3826] R13: 00007f8327146038 R14: 00007f8327145fa0 R15: 00007ffdc12d94b8
[   34.811854][ T3826]  </TASK>
[   35.002839][ T3830] netlink: 44 bytes leftover after parsing attributes in process `syz.4.111'.
[   35.032851][ T3833] vlan2: entered allmulticast mode
[   35.038083][ T3833] dummy0: entered allmulticast mode
[   35.090398][ T3833] Zero length message leads to an empty skb
[   35.115810][ T3825] sctp: [Deprecated]: syz.3.109 (pid 3825) Use of int in maxseg socket option.
[   35.115810][ T3825] Use struct sctp_assoc_value instead
[   35.292561][ T3842] loop0: detected capacity change from 0 to 512
[   35.313828][ T3847] loop1: detected capacity change from 0 to 2048
[   35.320345][ T3842] ext4: Unknown parameter '.'
[   35.338365][ T3851] loop3: detected capacity change from 0 to 1024
[   35.347151][ T3851] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   35.358136][ T3851] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   35.370766][ T3847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.370915][ T3851] JBD2: no valid journal superblock found
[   35.388571][ T3851] EXT4-fs (loop3): Could not load journal inode
[   35.511390][ T3867] netlink: 24 bytes leftover after parsing attributes in process `syz.2.124'.
[   35.521565][ T3851] loop3: detected capacity change from 0 to 512
[   35.551695][ T3851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.127593][ T3877] SELinux: failed to load policy
[   36.150295][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.216720][ T3880] loop1: detected capacity change from 0 to 256
[   36.462031][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.496385][ T3889] loop4: detected capacity change from 0 to 256
[   36.552094][ T3891] loop3: detected capacity change from 0 to 1024
[   36.560260][ T3876] syz.2.127 (3876) used greatest stack depth: 7496 bytes left
[   36.598974][ T3891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.620540][ T3891] FAULT_INJECTION: forcing a failure.
[   36.620540][ T3891] name failslab, interval 1, probability 0, space 0, times 0
[   36.633299][ T3891] CPU: 0 UID: 0 PID: 3891 Comm: syz.3.133 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   36.633324][ T3891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   36.633335][ T3891] Call Trace:
[   36.633342][ T3891]  <TASK>
[   36.633349][ T3891]  __dump_stack+0x1d/0x30
[   36.633372][ T3891]  dump_stack_lvl+0xe8/0x140
[   36.633394][ T3891]  dump_stack+0x15/0x1b
[   36.633458][ T3891]  should_fail_ex+0x265/0x280
[   36.633478][ T3891]  should_failslab+0x8c/0xb0
[   36.633504][ T3891]  __kmalloc_noprof+0xa5/0x570
[   36.633548][ T3891]  ? ext4_convert_inline_data_nolock+0x8d/0x570
[   36.633575][ T3891]  ext4_convert_inline_data_nolock+0x8d/0x570
[   36.633656][ T3891]  ext4_convert_inline_data+0x2bd/0x360
[   36.633717][ T3891]  ext4_fallocate+0x163/0x2f0
[   36.633819][ T3891]  vfs_fallocate+0x3b6/0x400
[   36.633893][ T3891]  __x64_sys_fallocate+0x7a/0xd0
[   36.633958][ T3891]  x64_sys_call+0x2518/0x3000
[   36.633979][ T3891]  do_syscall_64+0xd2/0x200
[   36.633996][ T3891]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   36.634018][ T3891]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   36.634071][ T3891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   36.634158][ T3891] RIP: 0033:0x7f2329c4efc9
[   36.634173][ T3891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   36.634188][ T3891] RSP: 002b:00007f23286af038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[   36.634207][ T3891] RAX: ffffffffffffffda RBX: 00007f2329ea5fa0 RCX: 00007f2329c4efc9
[   36.634217][ T3891] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000004
[   36.634227][ T3891] RBP: 00007f23286af090 R08: 0000000000000000 R09: 0000000000000000
[   36.634245][ T3891] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001
[   36.634256][ T3891] R13: 00007f2329ea6038 R14: 00007f2329ea5fa0 R15: 00007ffd66387978
[   36.634269][ T3891]  </TASK>
[   36.638366][ T3900] smc: net device bond0 applied user defined pnetid SYZ0
[   36.835440][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.859048][ T3905] loop4: detected capacity change from 0 to 1024
[   36.910334][ T3905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.920735][ T3914] loop2: detected capacity change from 0 to 1024
[   36.953355][ T3914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.971343][ T3915] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.020706][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.035013][ T3914] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.056904][ T3921] netlink: 68 bytes leftover after parsing attributes in process `syz.3.142'.
[   37.079099][ T3923] nfs: Unknown parameter 'noacl '
[   37.085255][    C1] hrtimer: interrupt took 30011 ns
[   37.090978][ T3914] xt_CT: You must specify a L4 protocol and not use inversions on it
[   37.100572][ T3915] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.129161][ T3926] loop2: detected capacity change from 0 to 1024
[   37.155130][ T3926] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   37.166221][ T3926] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   37.192652][ T3926] JBD2: no valid journal superblock found
[   37.198529][ T3926] EXT4-fs (loop2): Could not load journal inode
[   37.213640][ T3915] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.246028][ T3926] loop2: detected capacity change from 0 to 512
[   37.285297][ T3926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.311869][ T3915] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.496592][   T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.513136][ T3937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.147'.
[   37.525505][   T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.557405][   T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.599275][   T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.699958][   T29] kauditd_printk_skb: 22545 callbacks suppressed
[   37.699971][   T29] audit: type=1326 audit(1761515536.959:24510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f20c9a6b099 code=0x7ffc0000
[   37.729680][   T29] audit: type=1326 audit(1761515536.969:24578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f20c9ac5e67 code=0x7ffc0000
[   37.753121][   T29] audit: type=1326 audit(1761515536.969:24579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f20c9a6b099 code=0x7ffc0000
[   37.759938][ T3528] EXT4-fs error (device loop2): ext4_validate_block_bitmap:423: comm ext4lazyinit: bg 0: bad block bitmap checksum
[   37.776478][   T29] audit: type=1326 audit(1761515536.969:24580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f20c9ac5e67 code=0x7ffc0000
[   37.811963][   T29] audit: type=1326 audit(1761515536.969:24581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f20c9a6b099 code=0x7ffc0000
[   37.835235][   T29] audit: type=1326 audit(1761515536.969:24582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f20c9ac5e67 code=0x7ffc0000
[   37.858570][   T29] audit: type=1326 audit(1761515536.969:24583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f20c9a6b099 code=0x7ffc0000
[   37.881943][   T29] audit: type=1326 audit(1761515536.969:24584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f20c9ac5e67 code=0x7ffc0000
[   37.905233][   T29] audit: type=1326 audit(1761515536.969:24585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f20c9a6b099 code=0x7ffc0000
[   37.928592][   T29] audit: type=1326 audit(1761515536.969:24586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f20c9ac5e67 code=0x7ffc0000
[   37.975677][ T3948] ==================================================================
[   37.983781][ T3948] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu
[   37.990808][ T3948] 
[   37.993118][ T3948] read-write to 0xffff888237c1b294 of 4 bytes by interrupt on cpu 0:
[   38.001168][ T3948]  hrtimer_interrupt+0x70/0x460
[   38.006025][ T3948]  __sysvec_apic_timer_interrupt+0x5f/0x1d0
[   38.011932][ T3948]  sysvec_apic_timer_interrupt+0x6f/0x80
[   38.014250][ T3956] FAULT_INJECTION: forcing a failure.
[   38.014250][ T3956] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   38.017569][ T3948]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   38.030756][ T3956] CPU: 0 UID: 0 PID: 3956 Comm: syz.4.153 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   38.030782][ T3956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   38.030793][ T3956] Call Trace:
[   38.030799][ T3956]  <TASK>
[   38.030808][ T3956]  __dump_stack+0x1d/0x30
[   38.030858][ T3956]  dump_stack_lvl+0xe8/0x140
[   38.030877][ T3956]  dump_stack+0x15/0x1b
[   38.030893][ T3956]  should_fail_ex+0x265/0x280
[   38.030962][ T3956]  should_fail+0xb/0x20
[   38.030976][ T3956]  should_fail_usercopy+0x1a/0x20
[   38.030995][ T3956]  _copy_from_user+0x1c/0xb0
[   38.031018][ T3956]  kstrtouint_from_user+0x69/0xf0
[   38.031062][ T3956]  ? 0xffffffff81000000
[   38.031074][ T3956]  ? selinux_file_permission+0x1e4/0x320
[   38.031102][ T3956]  proc_fail_nth_write+0x50/0x160
[   38.031130][ T3956]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   38.031288][ T3956]  vfs_write+0x269/0x960
[   38.031310][ T3956]  ? vfs_read+0x4e6/0x770
[   38.031357][ T3956]  ? __rcu_read_unlock+0x4f/0x70
[   38.031445][ T3956]  ? __fget_files+0x184/0x1c0
[   38.031468][ T3956]  ? __sys_bind+0x223/0x2a0
[   38.031493][ T3956]  ksys_write+0xda/0x1a0
[   38.031556][ T3956]  __x64_sys_write+0x40/0x50
[   38.031645][ T3956]  x64_sys_call+0x2802/0x3000
[   38.031665][ T3956]  do_syscall_64+0xd2/0x200
[   38.031749][ T3956]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   38.031839][ T3956]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   38.031866][ T3956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   38.031933][ T3956] RIP: 0033:0x7f1b03b7da7f
[   38.031946][ T3956] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[   38.032031][ T3956] RSP: 002b:00007f1b025e7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   38.032125][ T3956] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1b03b7da7f
[   38.032170][ T3956] RDX: 0000000000000001 RSI: 00007f1b025e70a0 RDI: 0000000000000004
[   38.032182][ T3956] RBP: 00007f1b025e7090 R08: 0000000000000000 R09: 0000000000000000
[   38.032193][ T3956] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[   38.032204][ T3956] R13: 00007f1b03dd6038 R14: 00007f1b03dd5fa0 R15: 00007ffe50e2f728
[   38.032221][ T3956]  </TASK>
[   38.252289][ T3948]  _raw_spin_unlock_irq+0x2f/0x50
[   38.257307][ T3948]  __filemap_add_folio+0x5f5/0x7d0
[   38.262407][ T3948]  filemap_add_folio+0x1d9/0x360
[   38.267331][ T3948]  page_cache_ra_unbounded+0x203/0x450
[   38.272777][ T3948]  page_cache_ra_order+0x145/0x220
[   38.277876][ T3948]  page_cache_async_ra+0x383/0x4c0
[   38.282975][ T3948]  filemap_fault+0x2d6/0xb60
[   38.287542][ T3948]  __do_fault+0xbc/0x200
[   38.291771][ T3948]  handle_mm_fault+0xf78/0x2be0
[   38.296604][ T3948]  __get_user_pages+0x102a/0x1ed0
[   38.301612][ T3948]  get_dump_page+0xb5/0x250
[   38.306098][ T3948]  dump_user_range+0x145/0x8f0
[   38.310849][ T3948]  elf_core_dump+0x1de7/0x1f80
[   38.315602][ T3948]  coredump_write+0xb12/0xe30
[   38.320269][ T3948]  vfs_coredump+0x143a/0x20d0
[   38.324931][ T3948]  get_signal+0xd84/0xf70
[   38.329241][ T3948]  arch_do_signal_or_restart+0x96/0x440
[   38.334773][ T3948]  irqentry_exit_to_user_mode+0x5b/0xa0
[   38.340362][ T3948]  irqentry_exit+0x12/0x50
[   38.344764][ T3948]  asm_exc_page_fault+0x26/0x30
[   38.349593][ T3948] 
[   38.351898][ T3948] read to 0xffff888237c1b294 of 4 bytes by task 3948 on cpu 1:
[   38.359417][ T3948]  print_cpu+0x338/0x660
[   38.363644][ T3948]  timer_list_show+0x107/0x170
[   38.368392][ T3948]  seq_read_iter+0x636/0x950
[   38.372964][ T3948]  proc_reg_read_iter+0x110/0x180
[   38.377969][ T3948]  copy_splice_read+0x442/0x660
[   38.382805][ T3948]  splice_direct_to_actor+0x26f/0x680
[   38.388168][ T3948]  do_splice_direct+0xda/0x150
[   38.392927][ T3948]  do_sendfile+0x380/0x650
[   38.397341][ T3948]  __x64_sys_sendfile64+0x105/0x150
[   38.402531][ T3948]  x64_sys_call+0x2bb4/0x3000
[   38.407204][ T3948]  do_syscall_64+0xd2/0x200
[   38.411704][ T3948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   38.417588][ T3948] 
[   38.419896][ T3948] value changed: 0x0000141b -> 0x0000141c
[   38.425593][ T3948] 
[   38.427903][ T3948] Reported by Kernel Concurrency Sanitizer on:
[   38.434032][ T3948] CPU: 1 UID: 0 PID: 3948 Comm: syz.3.149 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   38.443645][ T3948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   38.453682][ T3948] ==================================================================
[   38.598311][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.