last executing test programs:

2.994173781s ago: executing program 3 (id=49):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = syz_io_uring_setup(0x34b7, &(0x7f0000000000)={0x0, 0x0, 0x30c0}, &(0x7f0000000100), &(0x7f0000000080))
socket(0x2, 0x80805, 0x0)
unshare(0x22020400)
timerfd_create(0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
arch_prctl$ARCH_SHSTK_ENABLE(0x1003, 0xf0ff1f00000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0)
syz_io_uring_setup(0x6258, &(0x7f0000000440)={0x0, 0x6c9f, 0x8000, 0x0, 0x63, 0x0, r1}, &(0x7f0000000180), &(0x7f00000004c0))
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10)
fchmodat(0xffffffffffffffff, 0x0, 0x90)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

2.368009613s ago: executing program 2 (id=57):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000008000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c00"], 0xf8}}, 0x0)
kexec_load(0x5, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x40, 0x3e0000}], 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r3}, 0x18)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r4, 0xa, 0x13)
fcntl$setlease(r4, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
rt_sigaction(0x40, &(0x7f0000000080)={0x0, 0xc8000000, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000540))
syz_open_procfs(0x0, &(0x7f0000000500)='status\x00')
fcntl$setlease(r4, 0x400, 0x2)

2.273989906s ago: executing program 4 (id=59):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="140000001300012c9dff7f8cd913e90007"], 0x14}], 0x1}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRES16=r3], 0x15)
r5 = dup(r4)
write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
clock_gettime(0x0, &(0x7f0000000300)={<r6=>0x0, <r7=>0x0})
futimesat(r5, &(0x7f00000002c0)='./file0\x00', &(0x7f00000008c0)={{r6, r7/1000+60000}, {0x0, 0xea60}})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3, @ANYBLOB="2345d8683303c39bceaad55eae74ac67f88952fefa88bff9341cf01978c288f28e8e264171b95585a5c9e0bedd66262be970bf71c62957ae7bc2cc835521cb250162d08a6046d697e59a5d4a090da9351f91ec", @ANYBLOB="81cc2601ed150fad643544a73c4b186250aef49348d20efa70e6497475aac7579b2374f9358f832e8c42d953f2615e"], 0x3c}, 0x1, 0x0, 0x0, 0x44880}, 0x440b0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0)
ioctl$IMADDTIMER(r9, 0x80044940, &(0x7f0000000600)=0x14)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
ioctl$IMADDTIMER(r9, 0x80044940, &(0x7f0000000080)=0x14)
close(r9)

2.206743267s ago: executing program 2 (id=63):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="a1ab000000000000000032"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0)

2.157064508s ago: executing program 2 (id=64):
socket(0xa, 0x5, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94)
recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x94, 0x0}, 0x5}], 0x1, 0x2, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)

2.126052478s ago: executing program 4 (id=66):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='io_uring_register\x00', r0}, 0x18)
r1 = io_uring_setup(0x53b5, &(0x7f0000000280)={0x0, 0xbf6b, 0x1000, 0x2, 0x30f})
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000000000), 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn")
r3 = creat(0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r4 = open(0x0, 0x4000, 0x100)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000004c0)=<r7=>0x0)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=<r9=>0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r11, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYRES32=r9, @ANYBLOB="08000300ffffffff"], 0x24}}, 0x0)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r11, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0)
sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r6, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xd892}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x80000000}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', <r13=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {0xb}, {0x3}}}, 0x24}, 0x1, 0x2000000, 0x0, 0x10}, 0x84)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)
r14 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r14, 0x0, 0x0)

2.101009249s ago: executing program 3 (id=67):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000104000000000300000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000008c0)={'gre0\x00', 0x0, 0x20, 0x20, 0x10, 0x9, {{0x5, 0x4, 0x1, 0x20, 0x14, 0x67, 0x0, 0x7, 0x2, 0x0, @multicast1, @empty}}}})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback, 0x11, 0x1, 0x8875, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000000001030000000000000000851000000600000065078fa8dedce3724b8dc190623a68a6958a703d7ef305b59dcd8d72eb7971afeeecd00f7a95cdc33afb29", @ANYBLOB="b5ce3cc0053c1947e60939a94ae82809381bc0e6fdcebe33f86931372f1d4da7ac8c6bd4331c969e224b913a3901d904a4b193578b49fe82fd6f06d7c8620eea963581156003668f898ebb49db0b46506d71ba95901bda357d6e6f37852c8b917e38e8b344ee131d422a432a9958e4db7b4262beda8a5c85d26170ef19170255b28a92a0a6327805a5cfc1417ceebafe83ef59445bc5"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18)
pipe2$9p(0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15)
r3 = dup(0xffffffffffffffff)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[], 0x53)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
membarrier(0x40, 0x0)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x934, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x7fff}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}}, 0x108)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x400}, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[])
syz_io_uring_setup(0x2e37, &(0x7f0000000240)={0x0, 0x69e1, 0x10000, 0x0, 0x297}, &(0x7f00000003c0)=<r5=>0x0, &(0x7f0000000400)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
ustat(0xd, 0x0)

2.03740713s ago: executing program 3 (id=68):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000000b}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')
fchdir(r1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x8c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0xffffffffffffff4d, 0x1, {0x1, 0x0, 0xfffffff8, 0x7, 0x10000, {0x9, 0x2, 0x32c8, 0x5, 0x2}, {0xfa, 0x0, 0x0, 0x7fff, 0x800}, 0x5, 0x5, 0x7}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r0, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$RTC_UIE_ON(r1, 0x7003)

1.729471856s ago: executing program 1 (id=76):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

1.711077806s ago: executing program 1 (id=77):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00'}, 0x18)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010000000080007000004000018000180140002006e657464657673696d30000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.247684215s ago: executing program 2 (id=80):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000db000000"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000003c0))
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@fadd={0x58, 0x114, 0x6, {{0x5, 0x6}, &(0x7f0000000400)=0x7, 0x0, 0xf, 0x4, 0x9, 0xfffffffffffffff9, 0x22, 0x7}}], 0x58, 0x8000}, 0x0)
stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80))
r6 = socket$netlink(0x10, 0x3, 0x14)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r7}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe"], 0x24}}, 0x4000000)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000000000000000000000098120000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
personality(0x87bf5ac905ea0f7f)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x6000)
madvise(&(0x7f0000109000/0x3000)=nil, 0x3000, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee8, 0x8031, 0xffffffffffffffff, 0x28f43000)

1.243005615s ago: executing program 1 (id=82):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001180)={[{@delalloc}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r2 = open(0x0, 0x64842, 0x389b0d52417bb201)
pwritev2(r2, 0x0, 0x0, 0x7000, 0x0, 0x3)

1.241120446s ago: executing program 4 (id=83):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00'}, 0x18)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010000000080007000004000018000180140002006e657464657673696d3000000000000008000600"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.168712227s ago: executing program 3 (id=84):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000008000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a010100000000000000"], 0xf8}}, 0x0)
kexec_load(0x5, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x40, 0x3e0000}], 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r3}, 0x18)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r4, 0xa, 0x13)
fcntl$setlease(r4, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
rt_sigaction(0x40, &(0x7f0000000080)={0x0, 0xc8000000, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000540))
syz_open_procfs(0x0, &(0x7f0000000500)='status\x00')
fcntl$setlease(r4, 0x400, 0x2)

928.426341ms ago: executing program 4 (id=86):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)

873.558783ms ago: executing program 3 (id=88):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000040))
sendmsg$nl_route(r4, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

835.090754ms ago: executing program 4 (id=90):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xd633, 0x3a, 'EQ\xaa\xd2\xaf\x0188O\x7f\x0f~(\xcf\xd9\xff\x83k\xf7\xe2\xd9\x1f\xae\xe6@I\xd4\x93\xda\xcb|\x7f\xc7k\xbe]\x03\x80\xc06a\xef\xad\xf4p\x17\xbe\x12\xa3\xd3w\xd9w\xa0\xa0\xc2\x9e\xe1', 0x3a, 'nombcache', 0x3a, './file0', 0x3a, [0x4f, 0x5]}, 0x6c)
socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e40)={<r3=>0xffffffffffffffff})
r4 = io_uring_setup(0x28c0, &(0x7f0000000140)={0x0, 0xd58a, 0x1, 0x0, 0xfffffffd})
dup3(r3, r4, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000005740)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10)
prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1)
futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x3, &(0x7f0000000b00)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}, {0x6, 0xbe, 0xfb, 0x209}, {0x2, 0xe2, 0x8, 0x9}]})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000057c0)=ANY=[@ANYBLOB="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"], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x30)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r10}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)

670.488117ms ago: executing program 1 (id=91):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x60, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

545.924419ms ago: executing program 0 (id=92):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x100}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141040, 0x28, 0x1}, 0x18)
r2 = openat(r1, &(0x7f00000001c0)='./file0\x00', 0x191000, 0x128) (async)
ioprio_set$uid(0x0, 0xffffffffffffffff, 0x4007)
mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='ext2\x00', 0x240005, &(0x7f00000002c0)='\x00')
r3 = socket$inet(0x2, 0x3, 0x9)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000480)={'broute\x00', 0x0, 0x4, 0xab, [0x0, 0x8, 0x1, 0x80000000, 0x8a, 0x7], 0x9, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)=""/171}, &(0x7f0000000500)=0x78) (async)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000540)={<r4=>0x0, 0x5}, &(0x7f0000000580)=0x8)
newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x1000) (async)
r6 = getuid() (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000700)={{{@in=@private, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000800)=0xe8) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, <r8=>r2, {<r9=>0xffffffffffffffff, <r10=>0xee00}}, './file0/file0\x00'})
r11 = getegid() (async)
statx(0xffffffffffffff9c, &(0x7f0000000880)='./file0/file0\x00', 0x100, 0x100, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}) (async)
getgroups(0x7, &(0x7f00000009c0)=[0xee01, 0xee01, <r13=>0xee00, 0x0, 0x0, 0xee01, 0xee00]) (async)
getresgid(&(0x7f0000000a00)=<r14=>0x0, &(0x7f0000000a40), &(0x7f0000000a80))
r15 = getegid()
lsetxattr$system_posix_acl(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='system.posix_acl_access\x00', &(0x7f0000000ac0)={{}, {0x1, 0x1}, [{0x2, 0x1, r5}, {0x2, 0x4, r6}, {0x2, 0x5, r7}, {0x2, 0x7, 0xee01}], {0x4, 0x727c1c8bfb994dd6}, [{0x8, 0x1, r10}, {0x8, 0x2, r11}, {0x8, 0x5, r12}, {0x8, 0x5, r13}, {0x8, 0x0, r14}, {0x8, 0x1, r15}], {0x10, 0x2}, {0x20, 0x6}}, 0x74, 0x2) (async)
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000b40)={<r16=>0x0, 0x7fff, 0x0, [0x8, 0x3, 0x5, 0xfffffffffffff000, 0x6], [0x6fc, 0x51, 0x5, 0x5, 0x6, 0xffffffffffffffff, 0x8, 0x3, 0x0, 0x80000000, 0x5, 0x9, 0x75, 0x1000, 0x5, 0x6, 0x1, 0x9, 0x7b, 0x1, 0xff, 0x3cb7, 0x9, 0x3, 0x8, 0x4, 0x1, 0x3, 0x9, 0xffffffffffff4b56, 0xfff, 0xffffffffffffffff, 0xcfd5, 0x80000000, 0xd07b, 0x8, 0x10001, 0x3, 0x1, 0xd, 0x2, 0xffffffffffffffff, 0xd, 0x1, 0xa, 0x5bf, 0x5, 0x4, 0x8, 0x1, 0x81, 0x4, 0x5, 0x0, 0x8, 0x6, 0x8, 0x9, 0x6f3deeda, 0x5, 0xfffffffffffffffb, 0x5, 0x4, 0xffffffff, 0x8, 0x7b7d302d, 0x9, 0x9, 0x8000, 0x1, 0x8000, 0x4c0d, 0x2, 0x4d, 0x8000000000000000, 0x8a6, 0x2, 0x1, 0xfffffffffffffff4, 0xc11, 0x4, 0x2, 0x5398, 0x4, 0x9, 0x1, 0x7, 0x7, 0xa, 0x1, 0x0, 0xffffffff, 0xff, 0x64e7399f, 0x8, 0x764, 0xfffffffffffff297, 0xd45, 0x0, 0x4, 0x1527, 0x80000001, 0x8000000000000000, 0x8000, 0x3, 0x9, 0xfffffffffffffff8, 0xfffffffffffff1cb, 0xf, 0x8000000000000000, 0x1, 0x4, 0xad9, 0x100000001, 0xf, 0x400, 0xd, 0x3, 0x6, 0x2b, 0x101]})
ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000f80)={0x1, 0x9, @start={r16, 0x0, "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", "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"}, [0x81, 0xfffffffffffffff9, 0x3950, 0xc25, 0x6, 0x46, 0x6, 0x54360b63, 0xa8, 0x1, 0x1, 0x830, 0xb53, 0x1, 0x3, 0x1, 0x7, 0xd422, 0x3, 0x0, 0x4, 0x1, 0x4, 0x7fffffff, 0xf, 0x1, 0x81, 0x3, 0x1, 0x400000, 0x7fffffff, 0x101, 0x0, 0x0, 0x1, 0x5, 0x6, 0x101, 0x8000000000000000, 0x3, 0x9, 0x6, 0xfd3, 0x0, 0x9, 0x1, 0x6, 0x5, 0x0, 0x80000000, 0x6, 0x8000, 0x255, 0x2, 0x2, 0x400, 0xf52e, 0x4, 0x6, 0x8000000000000001, 0x8, 0x6, 0x1]}) (async)
connect$pppoe(r8, &(0x7f00000019c0)={0x18, 0x0, {0x4, @remote, 'xfrm0\x00'}}, 0x1e) (async)
recvmmsg(r8, &(0x7f0000006ac0)=[{{&(0x7f0000001a00)=@nfc, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/105, 0x69}, {&(0x7f0000002b00)=""/210, 0xd2}], 0x3, &(0x7f0000002c40)=""/47, 0x2f}}, {{&(0x7f0000002c80)=@rc={0x1f, @none}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002d00)=""/50, 0x32}, {&(0x7f0000002d40)=""/234, 0xea}, {&(0x7f0000002e40)=""/210, 0xd2}], 0x3, &(0x7f0000002f80)=""/245, 0xf5}, 0x7}, {{&(0x7f0000003080)=@pppol2tpv3={0x18, 0x1, {0x0, <r17=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004200)=[{&(0x7f0000003100)=""/35, 0x23}, {&(0x7f0000003140)}, {&(0x7f0000003180)=""/124, 0x7c}, {&(0x7f0000003200)=""/4096, 0x1000}], 0x4}, 0x8}, {{&(0x7f0000004240)=@generic, 0x80, &(0x7f0000004300)=[{&(0x7f00000042c0)=""/37, 0x25}], 0x1, &(0x7f0000004340)=""/210, 0xd2}, 0x10}, {{&(0x7f0000004440)=@xdp={0x2c, 0x0, <r18=>0x0}, 0x80, &(0x7f00000046c0)=[{&(0x7f00000044c0)=""/53, 0x35}, {&(0x7f0000004500)=""/141, 0x8d}, {&(0x7f00000045c0)=""/60, 0x3c}, {&(0x7f0000004600)=""/153, 0x99}], 0x4, &(0x7f0000004700)=""/240, 0xf0}, 0x38}, {{&(0x7f0000004800)=@alg, 0x80, &(0x7f0000004900)=[{&(0x7f0000004880)=""/90, 0x5a}], 0x1, &(0x7f0000004940)=""/29, 0x1d}, 0xc}, {{&(0x7f0000004980)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000005a80)=[{&(0x7f0000004a00)=""/4096, 0x1000}, {&(0x7f0000005a00)=""/92, 0x5c}], 0x2, &(0x7f0000005ac0)=""/4096, 0x1000}, 0x4}], 0x7, 0x10160, &(0x7f0000006c80)={0x0, 0x3938700})
bpf$MAP_CREATE(0x0, &(0x7f0000006cc0)=@base={0x4, 0x8, 0x9, 0x0, 0x9, r8, 0x1, '\x00', r18, r2, 0x1, 0x1, 0x4}, 0x50) (async)
r19 = syz_genetlink_get_family_id$tipc2(&(0x7f0000006d80), r8)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000007040)={&(0x7f0000006d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007000)={&(0x7f0000006dc0)={0x230, r19, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd7a}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x113}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2c4}]}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff0000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4c08651d, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5a1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6a53}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x132}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x221}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5cd5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x40}, 0x880) (async)
r20 = syz_open_dev$mouse(&(0x7f0000007080), 0x3, 0x44200)
write$P9_RGETATTR(r20, &(0x7f00000070c0)={0xa0, 0x19, 0x2, {0x242a, {0x4, 0x3, 0x8}, 0x40, r7, r11, 0x0, 0x1, 0x4, 0x9, 0xc32, 0x8, 0xe3, 0x9, 0xb2, 0xfffffffffffeffff, 0x6, 0x49, 0xfffffffffffffffd, 0x0, 0xdc8}}, 0xa0) (async)
mount$tmpfs(0x0, &(0x7f0000007180)='./file0\x00', &(0x7f00000071c0), 0x4000, &(0x7f0000007200)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x35, 0x39]}}}}, {@huge_advise}, {@size={'size', 0x3d, [0x31, 0x74, 0x3d, 0x70, 0x39, 0x31, 0x37, 0x25, 0x38, 0x0]}}, {@quota}, {@noswap}, {@nr_inodes={'nr_inodes', 0x3d, [0x42]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x6b, 0x25, 0x53, 0x25, 0x36]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x6d, 0x38, 0x6b, 0x30]}}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, '/'}}, {@hash}, {@fowner_gt={'fowner>', r9}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x5}}, {@fsname={'fsname', 0x3d, '\',('}}, {@pcr={'pcr', 0x3d, 0xb}}]})
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r17, 0x84, 0x7b, &(0x7f0000007300)={r4, 0xa4bba1a0}, 0x8)

468.64741ms ago: executing program 0 (id=93):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x804)
mkdir(&(0x7f0000000540)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10)
r6 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}})
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x48, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000)
ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000280)={{}, {0x7, 0x31c}, 0x2})

418.320481ms ago: executing program 3 (id=94):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8a101)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
ioctl$TUNSETSTEERINGEBPF(r2, 0xb701, 0x0)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000840)={{0x1, 0x1, 0x18, <r7=>r0, {0x8}}, './file0\x00'})
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xeaa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1a, 0x1d, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x89d}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x76e17e51}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @exit]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0xe4, &(0x7f0000000ac0)=""/228, 0x40f00, 0x40, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000880)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, r3, r7, r8, r9], &(0x7f0000000bc0)=[{0x1, 0x5, 0x3, 0xc}, {0x5, 0x5, 0xb, 0x3}, {0x3, 0x1, 0x0, 0x4}, {0x2, 0x4, 0xb, 0x2}, {0x5, 0x1, 0x3, 0x6}, {0x4, 0x4, 0x6, 0x9}], 0x10, 0x8}, 0x94)
r10 = syz_open_dev$usbfs(&(0x7f0000000280), 0x74, 0x103b81)
ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000340))
r11 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r11, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={0x0, r11, 0x4000, r12}, 0x18)
ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r13}, 0x10)
request_key(&(0x7f0000000780)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f00000003c0)='incremental-fs\x00', 0xfffffffffffffffe)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000008c0)={0x53, 0x0, 0x5, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="a7ccfe042e", 0x0, 0xfdfbfffe, 0x10033, 0x3, 0x0})

284.937594ms ago: executing program 1 (id=95):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newae={0x48, 0x1e, 0x723, 0x70bd27, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d4, 0x2, 0x6c}, @in=@local, 0x3, 0x3501}, [@etimer_thresh={0x8, 0xc, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x80)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x3, 0x2}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x4}}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})

277.574284ms ago: executing program 0 (id=96):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00'}, 0x18)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010000000080007000004000018000180140002006e657464657673696d3000000000000008000600"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)

241.609425ms ago: executing program 0 (id=97):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="a1ab000000000000000032"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0)

178.306296ms ago: executing program 0 (id=98):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000008000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a010100000000000000"], 0xf8}}, 0x0)
kexec_load(0x5, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x40, 0x3e0000}], 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r3}, 0x18)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r4, 0xa, 0x13)
fcntl$setlease(r4, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
rt_sigaction(0x40, &(0x7f0000000080)={0x0, 0xc8000000, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000540))
syz_open_procfs(0x0, &(0x7f0000000500)='status\x00')
fcntl$setlease(r4, 0x400, 0x2)

110.419628ms ago: executing program 2 (id=99):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000100)=0xd8c5)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x24}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

60.234408ms ago: executing program 1 (id=100):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)

38.682409ms ago: executing program 4 (id=101):
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1e00050004050000240012800b00010067656e65766500001400028008000100010000c8f3"], 0x44}, 0x1, 0x0, 0x0, 0x4090}, 0x2000810)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x43, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xacfc}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8)
r4 = dup(r3)
sendfile(r4, r2, 0x0, 0x8000fffffffc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000300)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94)
prctl$PR_SET_NAME(0xf, 0x0)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18)
socket$inet6(0xa, 0x2, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES64], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r9, 0x0, 0xa}, 0x18)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x120}, 0x138d, 0x0, 0x0, 0x0, 0x4, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

209.369µs ago: executing program 2 (id=102):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0700000004000000800000000e"], 0x50)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"})
r2 = syz_open_pts(r1, 0x141601)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x400008, 0x1ffffffe, 0x0, 0x200007, 0x19, "680c1acfa4a5000000070000faffffff000800"})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000070000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r6 = socket$igmp6(0xa, 0x3, 0x3a)
mq_open(0x0, 0x42, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10)
mq_unlink(&(0x7f0000000000)='eth0\x00')
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0xfffc, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x96}, 0x4}, 0x1000, {[0x9, 0xdaa, 0xfffffffe, 0x31, 0x6, 0x1, 0x2]}}, 0x5c)

0s ago: executing program 0 (id=103):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]})
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) (fail_nth: 1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts.
[   28.474759][   T29] audit: type=1400 audit(1759262380.209:62): avc:  denied  { mounton } for  pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   28.475893][ T3289] cgroup: Unknown subsys name 'net'
[   28.497522][   T29] audit: type=1400 audit(1759262380.209:63): avc:  denied  { mount } for  pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.524861][   T29] audit: type=1400 audit(1759262380.239:64): avc:  denied  { unmount } for  pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.698402][ T3289] cgroup: Unknown subsys name 'cpuset'
[   28.704623][ T3289] cgroup: Unknown subsys name 'rlimit'
[   28.835986][   T29] audit: type=1400 audit(1759262380.569:65): avc:  denied  { setattr } for  pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   28.859399][   T29] audit: type=1400 audit(1759262380.569:66): avc:  denied  { create } for  pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.879904][   T29] audit: type=1400 audit(1759262380.569:67): avc:  denied  { write } for  pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.900294][   T29] audit: type=1400 audit(1759262380.569:68): avc:  denied  { read } for  pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.908997][ T3292] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   28.920585][   T29] audit: type=1400 audit(1759262380.569:69): avc:  denied  { mounton } for  pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   28.953899][   T29] audit: type=1400 audit(1759262380.569:70): avc:  denied  { mount } for  pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   28.977166][   T29] audit: type=1400 audit(1759262380.669:71): avc:  denied  { relabelto } for  pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   29.006646][ T3289] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   30.348652][ T3301] chnl_net:caif_netlink_parms(): no params data found
[   30.362318][ T3300] chnl_net:caif_netlink_parms(): no params data found
[   30.426233][ T3299] chnl_net:caif_netlink_parms(): no params data found
[   30.446434][ T3307] chnl_net:caif_netlink_parms(): no params data found
[   30.465440][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.472557][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.479806][ T3300] bridge_slave_0: entered allmulticast mode
[   30.486085][ T3300] bridge_slave_0: entered promiscuous mode
[   30.507145][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.514212][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.521324][ T3301] bridge_slave_0: entered allmulticast mode
[   30.527742][ T3301] bridge_slave_0: entered promiscuous mode
[   30.535998][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.543096][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.550369][ T3301] bridge_slave_1: entered allmulticast mode
[   30.556835][ T3301] bridge_slave_1: entered promiscuous mode
[   30.562890][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.570014][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.577094][ T3300] bridge_slave_1: entered allmulticast mode
[   30.583704][ T3300] bridge_slave_1: entered promiscuous mode
[   30.609051][ T3304] chnl_net:caif_netlink_parms(): no params data found
[   30.631232][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.651881][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.664558][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.674620][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.731802][ T3300] team0: Port device team_slave_0 added
[   30.737632][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.744793][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.752004][ T3299] bridge_slave_0: entered allmulticast mode
[   30.758496][ T3299] bridge_slave_0: entered promiscuous mode
[   30.770498][ T3301] team0: Port device team_slave_0 added
[   30.776252][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.783367][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.790488][ T3307] bridge_slave_0: entered allmulticast mode
[   30.796965][ T3307] bridge_slave_0: entered promiscuous mode
[   30.806289][ T3300] team0: Port device team_slave_1 added
[   30.812029][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.819114][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.826301][ T3299] bridge_slave_1: entered allmulticast mode
[   30.832724][ T3299] bridge_slave_1: entered promiscuous mode
[   30.843996][ T3301] team0: Port device team_slave_1 added
[   30.855197][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.862331][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.869604][ T3307] bridge_slave_1: entered allmulticast mode
[   30.875948][ T3307] bridge_slave_1: entered promiscuous mode
[   30.916194][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.923255][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.949229][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.961454][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.970886][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.977855][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.003775][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.019179][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.026238][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.033366][ T3304] bridge_slave_0: entered allmulticast mode
[   31.039848][ T3304] bridge_slave_0: entered promiscuous mode
[   31.046554][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.053549][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.079447][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.091128][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.103050][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.110033][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.136016][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.147855][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.160599][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.167751][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.174893][ T3304] bridge_slave_1: entered allmulticast mode
[   31.181377][ T3304] bridge_slave_1: entered promiscuous mode
[   31.207776][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.227600][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.237339][ T3299] team0: Port device team_slave_0 added
[   31.264337][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.274226][ T3299] team0: Port device team_slave_1 added
[   31.281959][ T3301] hsr_slave_0: entered promiscuous mode
[   31.288019][ T3301] hsr_slave_1: entered promiscuous mode
[   31.294561][ T3307] team0: Port device team_slave_0 added
[   31.309175][ T3300] hsr_slave_0: entered promiscuous mode
[   31.315129][ T3300] hsr_slave_1: entered promiscuous mode
[   31.321196][ T3300] debugfs: 'hsr0' already exists in 'hsr'
[   31.326924][ T3300] Cannot create hsr debugfs directory
[   31.348217][ T3307] team0: Port device team_slave_1 added
[   31.364823][ T3304] team0: Port device team_slave_0 added
[   31.370960][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.377948][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.403893][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.424850][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.431855][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.457858][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.473813][ T3304] team0: Port device team_slave_1 added
[   31.484933][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.491897][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.517862][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.533673][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.540674][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.566593][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.586684][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.593648][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.619568][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.641787][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.648768][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.674772][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.730931][ T3307] hsr_slave_0: entered promiscuous mode
[   31.736952][ T3307] hsr_slave_1: entered promiscuous mode
[   31.742924][ T3307] debugfs: 'hsr0' already exists in 'hsr'
[   31.748691][ T3307] Cannot create hsr debugfs directory
[   31.759236][ T3299] hsr_slave_0: entered promiscuous mode
[   31.765232][ T3299] hsr_slave_1: entered promiscuous mode
[   31.771210][ T3299] debugfs: 'hsr0' already exists in 'hsr'
[   31.776949][ T3299] Cannot create hsr debugfs directory
[   31.823905][ T3304] hsr_slave_0: entered promiscuous mode
[   31.831017][ T3304] hsr_slave_1: entered promiscuous mode
[   31.836996][ T3304] debugfs: 'hsr0' already exists in 'hsr'
[   31.842747][ T3304] Cannot create hsr debugfs directory
[   31.953098][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   31.961466][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   31.970088][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   31.988472][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   32.029535][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   32.041267][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   32.049875][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   32.059074][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   32.093474][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   32.103583][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   32.121118][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   32.129879][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   32.160314][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   32.171381][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   32.190023][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.197594][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   32.209077][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   32.241661][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.248760][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   32.263589][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   32.272717][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   32.281688][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   32.294678][ T3300] 8021q: adding VLAN 0 to HW filter on device team0
[   32.314181][ T3301] 8021q: adding VLAN 0 to HW filter on device team0
[   32.323331][ T1866] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.330474][ T1866] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.352038][ T1866] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.359184][ T1866] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.383631][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.397275][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.404474][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.417604][ T3299] 8021q: adding VLAN 0 to HW filter on device team0
[   32.428817][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.435868][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.452754][ T1866] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.459824][ T1866] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.481592][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.488645][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.526262][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.539788][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   32.550185][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.567484][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.583437][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.598481][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   32.619413][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   32.640988][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.648095][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.679994][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.687096][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.696833][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.703980][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.722699][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.729797][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.763409][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.789110][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.837462][ T3300] veth0_vlan: entered promiscuous mode
[   32.854296][ T3300] veth1_vlan: entered promiscuous mode
[   32.898867][ T3300] veth0_macvtap: entered promiscuous mode
[   32.923782][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.933721][ T3300] veth1_macvtap: entered promiscuous mode
[   32.945922][ T3301] veth0_vlan: entered promiscuous mode
[   32.964164][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.981768][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.990029][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.001066][ T3299] veth0_vlan: entered promiscuous mode
[   33.008016][ T3301] veth1_vlan: entered promiscuous mode
[   33.028171][ T3299] veth1_vlan: entered promiscuous mode
[   33.039683][ T1091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.061112][ T1091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.082945][ T3299] veth0_macvtap: entered promiscuous mode
[   33.098412][ T3299] veth1_macvtap: entered promiscuous mode
[   33.110645][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   33.119229][ T1091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.136481][ T1091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.153810][ T3304] veth0_vlan: entered promiscuous mode
[   33.162653][ T3301] veth0_macvtap: entered promiscuous mode
[   33.181339][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.200978][ T3301] veth1_macvtap: entered promiscuous mode
[   33.214387][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.222916][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.235339][ T3304] veth1_vlan: entered promiscuous mode
[   33.238507][ T3469] loop4: detected capacity change from 0 to 2048
[   33.248164][ T3307] veth0_vlan: entered promiscuous mode
[   33.254323][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.268573][ T3293]  loop4: p1 < > p4
[   33.272154][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.273320][ T3293] loop4: p4 start 42180 is beyond EOD, truncated
[   33.281950][ T3307] veth1_vlan: entered promiscuous mode
[   33.296171][ T3469]  loop4: p1 < > p4
[   33.300919][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.316143][ T3469] loop4: p4 start 42180 is beyond EOD, truncated
[   33.322034][ T3304] veth0_macvtap: entered promiscuous mode
[   33.332713][ T3307] veth0_macvtap: entered promiscuous mode
[   33.341755][ T3469] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[   33.343501][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.387601][ T3304] veth1_macvtap: entered promiscuous mode
[   33.400249][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   33.412597][ T3307] veth1_macvtap: entered promiscuous mode
[   33.420476][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.447634][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.455989][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.483375][   T29] kauditd_printk_skb: 39 callbacks suppressed
[   33.483391][   T29] audit: type=1326 audit(1759262385.219:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3474 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10e56eec9 code=0x7ffc0000
[   33.523107][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.534774][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.545105][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.556522][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.588522][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.599568][   T29] audit: type=1326 audit(1759262385.219:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3474 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10e56eec9 code=0x7ffc0000
[   33.622690][   T29] audit: type=1326 audit(1759262385.219:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3474 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc10e56eec9 code=0x7ffc0000
[   33.645756][   T29] audit: type=1326 audit(1759262385.219:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3474 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10e56eec9 code=0x7ffc0000
[   33.668982][   T29] audit: type=1326 audit(1759262385.219:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3474 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10e56eec9 code=0x7ffc0000
[   33.692183][   T29] audit: type=1326 audit(1759262385.219:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3474 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc10e56eec9 code=0x7ffc0000
[   33.715334][   T29] audit: type=1326 audit(1759262385.219:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3474 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10e56eec9 code=0x7ffc0000
[   33.738815][   T29] audit: type=1326 audit(1759262385.219:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3474 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10e56eec9 code=0x7ffc0000
[   33.761978][   T29] audit: type=1326 audit(1759262385.219:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3474 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc10e56eec9 code=0x7ffc0000
[   33.785215][   T29] audit: type=1326 audit(1759262385.219:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3474 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10e56eec9 code=0x7ffc0000
[   33.815306][ T3483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   33.841169][   T85] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.841282][ T3483] Zero length message leads to an empty skb
[   33.880503][   T85] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.918909][   T85] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.946338][   T85] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.994616][ T1091] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.021612][ T3495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=3495 comm=syz.0.7
[   34.039279][ T1091] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.078009][  T122] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.100898][  T122] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.121650][ T3490] syz.0.7 (3490) used greatest stack depth: 10176 bytes left
[   34.138946][  T122] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.200850][ T3503] loop0: detected capacity change from 0 to 512
[   34.228496][ T3503] ext4: Unknown parameter 'obj_user'
[   34.734408][ T3501] mmap: syz.3.11 (3501) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   34.757599][ T3501] netlink: 19 bytes leftover after parsing attributes in process `syz.3.11'.
[   35.020537][ T3517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16'.
[   35.066713][ T3499] Set syz1 is full, maxelem 65536 reached
[   35.068894][ T3517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'.
[   35.109739][ T3527] FAULT_INJECTION: forcing a failure.
[   35.109739][ T3527] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   35.122883][ T3527] CPU: 0 UID: 0 PID: 3527 Comm: syz.3.18 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   35.122909][ T3527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   35.122921][ T3527] Call Trace:
[   35.122928][ T3527]  <TASK>
[   35.122937][ T3527]  __dump_stack+0x1d/0x30
[   35.122962][ T3527]  dump_stack_lvl+0xe8/0x140
[   35.123034][ T3527]  dump_stack+0x15/0x1b
[   35.123051][ T3527]  should_fail_ex+0x265/0x280
[   35.123092][ T3527]  should_fail+0xb/0x20
[   35.123120][ T3527]  should_fail_usercopy+0x1a/0x20
[   35.123227][ T3527]  _copy_to_user+0x20/0xa0
[   35.123253][ T3527]  simple_read_from_buffer+0xb5/0x130
[   35.123300][ T3527]  proc_fail_nth_read+0x10e/0x150
[   35.123355][ T3527]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   35.123383][ T3527]  vfs_read+0x1a5/0x770
[   35.123453][ T3527]  ? __rcu_read_unlock+0x4f/0x70
[   35.123481][ T3527]  ? __fget_files+0x184/0x1c0
[   35.123513][ T3527]  ksys_read+0xda/0x1a0
[   35.123545][ T3527]  __x64_sys_read+0x40/0x50
[   35.123636][ T3527]  x64_sys_call+0x27bc/0x2ff0
[   35.123663][ T3527]  do_syscall_64+0xd2/0x200
[   35.123737][ T3527]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   35.123763][ T3527]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   35.123862][ T3527]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.123890][ T3527] RIP: 0033:0x7f2a29d7d8dc
[   35.123910][ T3527] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   35.124003][ T3527] RSP: 002b:00007f2a287e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   35.124024][ T3527] RAX: ffffffffffffffda RBX: 00007f2a29fd5fa0 RCX: 00007f2a29d7d8dc
[   35.124040][ T3527] RDX: 000000000000000f RSI: 00007f2a287e70a0 RDI: 0000000000000009
[   35.124056][ T3527] RBP: 00007f2a287e7090 R08: 0000000000000000 R09: 0000000000000000
[   35.124072][ T3527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   35.124087][ T3527] R13: 00007f2a29fd6038 R14: 00007f2a29fd5fa0 R15: 00007ffe28742ba8
[   35.124113][ T3527]  </TASK>
[   35.413884][ T3533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'.
[   35.468774][ T3535] usb usb8: usbfs: process 3535 (syz.0.20) did not claim interface 0 before use
[   35.491766][ T3537] 9pnet: Could not find request transport: f
[   35.580275][ T3550] loop0: detected capacity change from 0 to 1024
[   35.587130][ T3550] EXT4-fs: Ignoring removed bh option
[   35.592814][ T3550] EXT4-fs: inline encryption not supported
[   35.600364][ T3550] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   35.616819][ T3550] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   35.626593][ T3550] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.27: lblock 2 mapped to illegal pblock 2 (length 1)
[   35.642404][ T3550] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.27: lblock 0 mapped to illegal pblock 48 (length 1)
[   35.665136][ T3550] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.27: Failed to acquire dquot type 0
[   35.676952][ T3550] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   35.679169][ T3544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'.
[   35.690674][ T3550] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.27: mark_inode_dirty error
[   35.707280][ T3550] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   35.711657][ T3555] netlink: 87 bytes leftover after parsing attributes in process `syz.2.28'.
[   35.719320][ T3550] EXT4-fs (loop0): 1 orphan inode deleted
[   35.733030][ T3550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.738180][ T3555] loop2: detected capacity change from 0 to 512
[   35.745664][   T51] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[   35.768550][   T51] EXT4-fs error (device loop0): ext4_release_dquot:6979: comm kworker/u8:3: Failed to release dquot type 0
[   35.770075][ T3555] EXT4-fs: Ignoring removed nobh option
[   35.786397][ T3555] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   35.817014][ T3555] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.28: corrupted inode contents
[   35.821384][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.830387][ T3555] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.28: mark_inode_dirty error
[   35.849523][ T3555] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.28: corrupted inode contents
[   35.850951][ T3301] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[   35.875828][ T3555] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.28: mark_inode_dirty error
[   35.875890][ T3301] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   35.898504][ T3555] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.28: Failed to acquire dquot type 0
[   35.911070][ T3301] EXT4-fs error (device loop0): ext4_quota_off:7227: inode #3: comm syz-executor: mark_inode_dirty error
[   35.911587][ T3555] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.28: corrupted inode contents
[   35.934777][ T3555] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.28: mark_inode_dirty error
[   35.946909][ T3555] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.28: corrupted inode contents
[   35.964525][ T3555] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.28: mark_inode_dirty error
[   35.976772][ T3555] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.28: corrupted inode contents
[   35.981219][ T3563] hub 1-0:1.0: USB hub found
[   35.990341][ T3555] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[   35.997943][ T3563] hub 1-0:1.0: 8 ports detected
[   36.007124][ T3555] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.28: corrupted inode contents
[   36.020350][ T3561] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.30' sets config #1
[   36.029989][ T3555] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.28: mark_inode_dirty error
[   36.041674][ T3555] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[   36.051371][ T3555] EXT4-fs (loop2): 1 truncate cleaned up
[   36.057885][ T3555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.070492][ T3555] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.104872][ T3568] loop1: detected capacity change from 0 to 512
[   36.111840][ T3555] syz.2.28 (3555) used greatest stack depth: 9776 bytes left
[   36.120922][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.139340][ T3568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.158070][ T3568] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.174317][ T3574] loop2: detected capacity change from 0 to 512
[   36.185730][ T3577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'.
[   36.205024][ T3574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.219392][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.246521][ T3574] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.250905][ T3585] loop3: detected capacity change from 0 to 1024
[   36.266900][ T3585] EXT4-fs: Ignoring removed orlov option
[   36.285612][ T3585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.299005][ T3584] usb usb8: usbfs: process 3584 (syz.0.37) did not claim interface 0 before use
[   36.316556][ T3585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.461216][ T3585] loop3: detected capacity change from 0 to 1024
[   36.472311][ T3585] =======================================================
[   36.472311][ T3585] WARNING: The mand mount option has been deprecated and
[   36.472311][ T3585]          and is ignored by this kernel. Remove the mand
[   36.472311][ T3585]          option from the mount to silence this warning.
[   36.472311][ T3585] =======================================================
[   36.509419][ T3596] random: crng reseeded on system resumption
[   36.538260][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.549035][ T3593] serio: Serial port ptm1
[   36.562987][ T3596] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[   36.574486][ T3598] serio: Serial port ptm2
[   36.589061][ T3585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   36.608606][ T3602] hub 1-0:1.0: USB hub found
[   36.613394][ T3585] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.614054][ T3602] hub 1-0:1.0: 8 ports detected
[   36.637409][ T3585] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.38: Freeing blocks not in datazone - block = 0, count = 16
[   36.697816][   T85] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   36.714679][   T85] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   36.727039][   T85] EXT4-fs (loop3): This should not happen!! Data will be lost
[   36.727039][   T85] 
[   36.736741][   T85] EXT4-fs (loop3): Total free blocks count 0
[   36.742904][   T85] EXT4-fs (loop3): Free/Dirty block details
[   36.748869][   T85] EXT4-fs (loop3): free_blocks=4293918736
[   36.754604][   T85] EXT4-fs (loop3): dirty_blocks=16
[   36.759785][   T85] EXT4-fs (loop3): Block reservation details
[   36.765775][   T85] EXT4-fs (loop3): i_reserved_data_blocks=1
[   36.790602][ T3613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.47'.
[   36.803138][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   37.058680][ T3639] loop2: detected capacity change from 0 to 4096
[   37.093776][ T3639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.135792][ T3639] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.181812][ T3639] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.199196][ T3641] Invalid ELF header magic: != ELF
[   37.220422][ T3639] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.264522][ T3639] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.316962][ T3643] netlink: 184 bytes leftover after parsing attributes in process `syz.4.51'.
[   37.325971][ T3643] xt_socket: unknown flags 0xd0
[   37.333095][   T85] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.350700][   T85] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.366350][   T85] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.375646][   T85] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.393711][ T3648] netlink: 32 bytes leftover after parsing attributes in process `syz.0.53'.
[   37.416223][ T3652] loop1: detected capacity change from 0 to 512
[   37.423749][    C1] hrtimer: interrupt took 37203 ns
[   37.424840][ T3652] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   37.441392][ T3652] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.55: invalid block
[   37.482888][ T3652] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.55: invalid indirect mapped block 4294967295 (level 1)
[   37.492720][ T3650] hub 1-0:1.0: USB hub found
[   37.499593][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.501401][ T3650] hub 1-0:1.0: 8 ports detected
[   37.512028][ T3652] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.55: invalid indirect mapped block 4294967295 (level 1)
[   37.529336][ T3652] EXT4-fs (loop1): 2 truncates cleaned up
[   37.535714][ T3652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.593918][ T3652] netlink: 'syz.1.55': attribute type 14 has an invalid length.
[   37.610009][ T3665] netlink: 'syz.4.59': attribute type 1 has an invalid length.
[   37.653749][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.743784][ T3684] loop4: detected capacity change from 0 to 2048
[   37.818538][ T3684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.918845][ T3703] usb usb8: usbfs: process 3703 (syz.1.70) did not claim interface 0 before use
[   37.961889][ T3710] capability: warning: `syz.1.72' uses 32-bit capabilities (legacy support in use)
[   38.578029][   T29] kauditd_printk_skb: 607 callbacks suppressed
[   38.578043][   T29] audit: type=1400 audit(1759262390.309:723): avc:  denied  { create } for  pid=3727 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   38.606020][ T3728] atomic_op ffff88811a6dd128 conn xmit_atomic 0000000000000000
[   38.621572][   T29] audit: type=1400 audit(1759262390.339:724): avc:  denied  { bind } for  pid=3727 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   38.622053][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.640641][   T29] audit: type=1400 audit(1759262390.339:725): avc:  denied  { write } for  pid=3727 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   38.642638][ T3731] FAULT_INJECTION: forcing a failure.
[   38.642638][ T3731] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   38.682807][ T3731] CPU: 0 UID: 0 PID: 3731 Comm: syz.0.81 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   38.682834][ T3731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   38.682847][ T3731] Call Trace:
[   38.682854][ T3731]  <TASK>
[   38.682875][ T3731]  __dump_stack+0x1d/0x30
[   38.682897][ T3731]  dump_stack_lvl+0xe8/0x140
[   38.682917][ T3731]  dump_stack+0x15/0x1b
[   38.682934][ T3731]  should_fail_ex+0x265/0x280
[   38.683010][ T3731]  should_fail+0xb/0x20
[   38.683037][ T3731]  should_fail_usercopy+0x1a/0x20
[   38.683128][ T3731]  _copy_from_user+0x1c/0xb0
[   38.683220][ T3731]  ___sys_sendmsg+0xc1/0x1d0
[   38.683267][ T3731]  __x64_sys_sendmsg+0xd4/0x160
[   38.683302][ T3731]  x64_sys_call+0x191e/0x2ff0
[   38.683372][ T3731]  do_syscall_64+0xd2/0x200
[   38.683391][ T3731]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   38.683417][ T3731]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   38.683453][ T3731]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   38.683493][ T3731] RIP: 0033:0x7fc50640eec9
[   38.683508][ T3731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   38.683527][ T3731] RSP: 002b:00007fc504e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   38.683547][ T3731] RAX: ffffffffffffffda RBX: 00007fc506665fa0 RCX: 00007fc50640eec9
[   38.683560][ T3731] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[   38.683635][ T3731] RBP: 00007fc504e77090 R08: 0000000000000000 R09: 0000000000000000
[   38.683648][ T3731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   38.683672][ T3731] R13: 00007fc506666038 R14: 00007fc506665fa0 R15: 00007ffedff22908
[   38.683692][ T3731]  </TASK>
[   38.688374][ T3728] lo speed is unknown, defaulting to 1000
[   38.764321][ T3732] loop1: detected capacity change from 0 to 1024
[   38.773779][ T3728] lo speed is unknown, defaulting to 1000
[   38.818640][ T3732] EXT4-fs: Ignoring removed orlov option
[   38.828246][ T3728] lo speed is unknown, defaulting to 1000
[   38.859933][ T3732] EXT4-fs: Ignoring removed nobh option
[   38.868673][ T3728] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   38.870023][ T3732] EXT4-fs: Ignoring removed bh option
[   38.910151][ T3728] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   38.944851][   T29] audit: type=1326 audit(1759262390.679:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.4.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554dd1eec9 code=0x7ffc0000
[   38.995436][ T3747] bridge_slave_0: left allmulticast mode
[   39.001263][ T3747] bridge_slave_0: left promiscuous mode
[   39.007084][ T3747] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.008843][   T29] audit: type=1326 audit(1759262390.679:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.4.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554dd1eec9 code=0x7ffc0000
[   39.024105][ T3732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.037273][   T29] audit: type=1326 audit(1759262390.679:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.4.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f554dd1eec9 code=0x7ffc0000
[   39.037307][   T29] audit: type=1326 audit(1759262390.679:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.4.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554dd1eec9 code=0x7ffc0000
[   39.037334][   T29] audit: type=1326 audit(1759262390.679:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.4.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554dd1eec9 code=0x7ffc0000
[   39.122348][ T3747] bridge_slave_1: left allmulticast mode
[   39.128324][ T3747] bridge_slave_1: left promiscuous mode
[   39.134080][ T3747] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.142029][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.169590][ T3747] bond0: (slave bond_slave_0): Releasing backup interface
[   39.180327][ T3747] bond0: (slave bond_slave_1): Releasing backup interface
[   39.192246][ T3747] team0: Port device team_slave_0 removed
[   39.201145][ T3747] team0: Port device team_slave_1 removed
[   39.207956][ T3747] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   39.215379][ T3747] batman_adv: batadv0: Removing interface: batadv_slave_0
[   39.224323][ T3747] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   39.231811][ T3747] batman_adv: batadv0: Removing interface: batadv_slave_1
[   39.254227][ T3728] lo speed is unknown, defaulting to 1000
[   39.261759][ T3757] loop4: detected capacity change from 0 to 512
[   39.283888][ T3756] bridge_slave_0: left allmulticast mode
[   39.289819][ T3756] bridge_slave_0: left promiscuous mode
[   39.295556][ T3756] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.306234][ T3756] bridge_slave_1: left allmulticast mode
[   39.306730][ T3757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.311933][ T3756] bridge_slave_1: left promiscuous mode
[   39.330071][ T3756] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.338963][ T3757] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.351692][ T3756] bond0: (slave bond_slave_0): Releasing backup interface
[   39.351804][ T3768] tmpfs: Bad value for 'mpol'
[   39.366678][ T3756] bond0: (slave bond_slave_1): Releasing backup interface
[   39.384855][ T3756] team0: Port device team_slave_0 removed
[   39.399219][ T3756] team0: Port device team_slave_1 removed
[   39.407513][   T29] audit: type=1400 audit(1759262391.139:731): avc:  denied  { write } for  pid=3769 comm="syz.3.94" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   39.430960][   T29] audit: type=1400 audit(1759262391.139:732): avc:  denied  { open } for  pid=3769 comm="syz.3.94" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   39.456192][ T3756] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   39.463878][ T3756] batman_adv: batadv0: Removing interface: batadv_slave_0
[   39.482803][ T3756] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   39.490270][ T3756] batman_adv: batadv0: Removing interface: batadv_slave_1
[   39.532613][ T3728] lo speed is unknown, defaulting to 1000
[   39.539035][ T3728] lo speed is unknown, defaulting to 1000
[   39.545487][ T3728] lo speed is unknown, defaulting to 1000
[   39.555053][ T3728] lo speed is unknown, defaulting to 1000
[   39.816575][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.899909][ T3794] FAULT_INJECTION: forcing a failure.
[   39.899909][ T3794] name failslab, interval 1, probability 0, space 0, times 0
[   39.912612][ T3794] CPU: 0 UID: 0 PID: 3794 Comm: syz.0.103 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   39.912636][ T3794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   39.912684][ T3794] Call Trace:
[   39.912689][ T3794]  <TASK>
[   39.912695][ T3794]  __dump_stack+0x1d/0x30
[   39.912714][ T3794]  dump_stack_lvl+0xe8/0x140
[   39.912803][ T3794]  dump_stack+0x15/0x1b
[   39.912822][ T3794]  should_fail_ex+0x265/0x280
[   39.912856][ T3794]  should_failslab+0x8c/0xb0
[   39.912887][ T3794]  kmem_cache_alloc_noprof+0x50/0x310
[   39.912953][ T3794]  ? audit_log_start+0x365/0x6c0
[   39.913029][ T3794]  audit_log_start+0x365/0x6c0
[   39.913072][ T3794]  audit_seccomp+0x48/0x100
[   39.913173][ T3794]  ? __seccomp_filter+0x69f/0x10c0
[   39.913195][ T3794]  __seccomp_filter+0x6b0/0x10c0
[   39.913222][ T3794]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   39.913250][ T3794]  ? vfs_write+0x7e8/0x960
[   39.913324][ T3794]  __secure_computing+0x82/0x150
[   39.913390][ T3794]  syscall_trace_enter+0xcf/0x1e0
[   39.913420][ T3794]  do_syscall_64+0xac/0x200
[   39.913439][ T3794]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   39.913460][ T3794]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   39.913565][ T3794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.913584][ T3794] RIP: 0033:0x7fc50640eec9
[   39.913600][ T3794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   39.913621][ T3794] RSP: 002b:00007fc504e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f
[   39.913642][ T3794] RAX: ffffffffffffffda RBX: 00007fc506665fa0 RCX: 00007fc50640eec9
[   39.913690][ T3794] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: ffffffffffffff9c
[   39.913701][ T3794] RBP: 00007fc504e77090 R08: 0000000000000000 R09: 0000000000000000
[   39.913713][ T3794] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[   39.913727][ T3794] R13: 00007fc506666038 R14: 00007fc506665fa0 R15: 00007ffedff22908
[   39.913744][ T3794]  </TASK>
[   40.140946][ T2991] ==================================================================
[   40.149044][ T2991] BUG: KCSAN: data-race in dentry_unlink_inode / step_into
[   40.156265][ T2991] 
[   40.158599][ T2991] write to 0xffff888106e9cab0 of 8 bytes by task 3595 on cpu 1:
[   40.166220][ T2991]  dentry_unlink_inode+0x65/0x260
[   40.171259][ T2991]  d_delete+0x164/0x180
[   40.175444][ T2991]  d_delete_notify+0x32/0x100
[   40.180125][ T2991]  vfs_unlink+0x30b/0x420
[   40.184472][ T2991]  do_unlinkat+0x24e/0x480
[   40.188886][ T2991]  __x64_sys_unlink+0x2e/0x40
[   40.193559][ T2991]  x64_sys_call+0x2dc0/0x2ff0
[   40.198241][ T2991]  do_syscall_64+0xd2/0x200
[   40.202741][ T2991]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.208632][ T2991] 
[   40.210954][ T2991] read to 0xffff888106e9cab0 of 8 bytes by task 2991 on cpu 0:
[   40.218488][ T2991]  step_into+0x122/0x7f0
[   40.222730][ T2991]  walk_component+0x162/0x220
[   40.227424][ T2991]  path_lookupat+0xfe/0x2a0
[   40.232018][ T2991]  filename_lookup+0x147/0x340
[   40.236792][ T2991]  do_readlinkat+0x7d/0x320
[   40.241289][ T2991]  __x64_sys_readlink+0x47/0x60
[   40.246158][ T2991]  x64_sys_call+0x28da/0x2ff0
[   40.250840][ T2991]  do_syscall_64+0xd2/0x200
[   40.255348][ T2991]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.261240][ T2991] 
[   40.263554][ T2991] value changed: 0xffff888104a92c18 -> 0x0000000000000000
[   40.270646][ T2991] 
[   40.272961][ T2991] Reported by Kernel Concurrency Sanitizer on:
[   40.279099][ T2991] CPU: 0 UID: 0 PID: 2991 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) 
[   40.288378][ T2991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   40.298425][ T2991] ==================================================================
[   40.316033][ T3797] __nla_validate_parse: 12 callbacks suppressed
[   40.316058][ T3797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'.